Skip to content

chore(deps): bump the cargo-minor-patch group across 1 directory with 14 updates - #388

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-3aff69c0ba
Closed

chore(deps): bump the cargo-minor-patch group across 1 directory with 14 updates#388
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-3aff69c0ba

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-patch group with 14 updates in the / directory:

Package From To
serde_json 1.0.151 1.0.154
tokio 1.53.1 1.54.1
tokio-util 0.7.19 0.7.20
uuid 1.26.1 1.28.0
sha2 0.11.0 0.11.1
arc-swap 1.9.2 1.9.3
tract 0.23.8 0.23.9
utoipa-swagger-ui 10.0.1 10.0.2
rustls 0.23.45 0.23.46
aws-lc-rs 1.18.1 1.18.2
opentelemetry 0.33.0 0.33.1
opentelemetry_sdk 0.33.0 0.33.1
opentelemetry-otlp 0.33.0 0.33.1
proptest 1.11.0 1.12.0

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

  • time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

  • fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
  • net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
  • runtime: add Builder::max_io_events_per_busy_tick (#8410)
  • runtime: stabilize tokio::runtime::worker_index() (#8431)
  • sync: add SemaphorePermit::semaphore() (#8482)
  • sync: add blocking_acquire methods to Semaphore (#8269)
  • sync: add watch::Receiver::is_closed (#8481)
  • wasm: support JSPI for Emscripten target (#8285, #8627)
  • wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

  • fs: reject zero in File::set_max_buf_size (#8449)
  • io: make copy_buf cooperative (#8459)
  • io: panic when BufReader or BufStream is created with zero capacity (#8494)
  • io: panic when in-memory pipe is created with zero capacity (#8397)
  • io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
  • io: support vectored writes in Sink (#8663)
  • net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
  • net: start accepted sockets as readable and writable (#8435)
  • net: support UCred on Fuchsia (#8257)
  • process: use mio::unix::pipe for Unix child stdio (#8603)
  • runtime: cache-pad the shared injection queue and idle state (#8622)
  • runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
  • runtime: make enable_io available whenever rt is enabled (#8387)
  • runtime: move block_in_place setup into a non-generic function (#8315)
  • runtime: move the multi-thread inject queue to its own mutex (#8382)
  • runtime: panic when max_io_events_per_tick is zero (#8476)
  • runtime: suggest .await in nested block_on panic message (#8501)
  • sync: avoid atomic reader count in broadcast slots (#8357)
  • sync: use acquire/release orderings in Notify (#8325)
  • time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

Updates tokio-util from 0.7.19 to 0.7.20

Commits

Updates uuid from 1.26.1 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

Commits
  • 276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
  • 4b3b9f5 prepare for 1.28.0 release
  • cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
  • 784a022 Inline expected tokens in optional compact serde test
  • a5678c3 Simplify optional serde adapter tests to option tokens
  • 638a518 Refactor optional serde adapter tests and share byte wrapper
  • b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
  • ffd8ec5 prepare for 1.27.0 release
  • 654fa5b Add optional serde format adapters
  • 4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
  • Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

Updates arc-swap from 1.9.2 to 1.9.3

Changelog

Sourced from arc-swap's changelog.

1.9.3

  • rwlock-strategy feature: RwLock<()> as an explicit, opt-in strategy (ArcSwapAny<Arc<T>, RwLock<()>>). DefaultStrategy is unchanged (#210, #211).
Commits

Updates tract from 0.23.8 to 0.23.9

Changelog

Sourced from tract's changelog.

0.23.9 - 2026-10-15

Core

  • Elementwise binary chains fuse into one pass. A sole-consumer chain of float binary ops (a scale then an offset, a clip after an add) becomes an OptBinChain that applies each step to a cache-resident chunk while it is still hot. Results are bit-identical. A chain right after a matmul leaves the epilogue ops for the matmul to absorb.
  • CumSum is a core op, with any numeric type, exclusive and reverse, and a tract_core_cumsum NNEF form. Before, ONNX lowered it to a Scan adding one element per iteration. It pulsifies along the streaming axis into a stateful PulsedCumSum, and a CumSum over a length-1 axis folds away.
  • Runtime symbols are ordered in the plan. A node that uses a symbol bound at runtime (a dynamic Range length, a NonZero count) but has no tensor edge to the node defining it now runs after that node, through a new required_bound_symbols op declaration that covers Scan bodies too. A node that still fails before its symbol is bound waits and is retried. Symbolic lengths also flow through Cast and Gather, so a Range that re-derives an earlier length gets the same symbol. (Contributed by willwade.)
  • A GRU of any hidden size fuses into GruSeq. Above 64 the input-side product moves out of the op into an EinSum that runs on the platform kernel with W packed once, and a constant R is packed at codegen rather than in every new state.
  • A fresh session's first turn costs less: the plan lists its constants once, and a matmul's scratch buffer is passed on to the next session on the same thread.
  • MoveAxis copies once through a tiled transpose. broadcast_to_shape writes contiguous runs when the innermost source axis is broadcast (6.2 ms to 0.12 ms for a per-channel bias spread over 320x320).
  • Fix: signed integer Div by a power of two was rewritten to a right shift, which rounds negative quotients down instead of toward zero. The shift is now kept for unsigned types only (#3003).
  • Fix: MultiBroadcastTo passed axis changes to a broadcast input and re-paired input axes. TypedSource::change_axes errored instead of blocking. Axis changes can now cross Gather ahead of the gathered axis.

Streaming / pulse

  • A pulse can cover several attention chunks. A model with a chunked attention mask used to pulsify only at exactly one chunk per pulse.
  • An attention mask built from a band ANDed with a runtime-length padding mask is bounded by its known factor, so rel-pos attention blockifies for pulsing.
  • Fix: PulsePad and AffineChunkTrim refused every axis change, and claimed their input's value. A delayed constant was reported as that same constant.

Transformers / LLM

  • A tract_moe_ffn operator for Mixture-of-Experts FFN blocks: router top-k, softmax/sigmoid/raw gating, grouped expert GEMMs with SwiGLU and weighted scatter-add, covering the Mixtral, OLMoE, GPT-OSS, Qwen3 and Granite variants. Experts run through per-expert subplans, so f16/bf16/Q40 and biased or clamped exports work, and block-quantized weights take a routed-matmul fast path. The op has a portable NNEF form, and ClampedSwiGlu is a core op on its own. (Contributed by Julien Balian.)
  • CPU decode updates its KV cache in place. The fusion was only reachable through a transform nobody applied, so every turn copied the whole past. Sdpa::codegen now decides it.
  • The GPU KV cache is no longer rebuilt every turn. It is a buffer with spare capacity written at the cursor, so appending is amortized O(1) instead of O(T) a turn, and truncation and rollback stay on the device.

[WIP] Deployment / autobatch

  • A deploy runtime prepares models from a TOML deployment config. runtime_for_name("deploy") reads TRACT_CONFIG and TRACT_<MODEL>__<KEY> variables, with one section per model keyed by its name, and for each model applies that section's transforms, prepares the model on the section's runtime, sizes device memory from its hints table and autobatches it. A model the config batchifies keeps the input and output contract it was handed over with. Available behind unstable-autobatch.
  • Knobs can be scoped to a model. Knobs read while a model is transformed or prepared can be overridden per model, under the environment; the LLC, mmm chunk and GPU RmsNorm settings become knobs.
  • Models and runnables have names. TypedModel::name and Runnable::name read the tract.name property, and NNEF stores it as the graph id instead of dropping it for the constant "network". A set_property transform names a model whose export did not.
  • Autobatch reports turns, seats, lanes, queue wait and turn time through the metrics facade, labelled by runnable name.
  • batchify keeps the model properties (pulse delay and axes, blockify chunking, provenance), accepts an export whose batch axis was collapsed into an AddAxis(0), and runs before or after pulsification.

CPU / linalg

  • Depthwise convolution is vectorised and threaded everywhere. A channel-last NEON kernel is suggested to depthwise convs of 16+ channels. Zones of more than four taps (up to 128, so 9x9) are vectorised on aarch64. x86_64 gets an AVX depthwise_w and wasm gets simd128 kernels. The (n, c) planes split across the executor (32.5 ms to 8.8 ms on a detection model).
  • Direct spatial convolution along W for group-1 NCHW f32 convolutions with a small kernel over a long row, skipping im2col through a new conv_w4 routine (AVX2/FMA, NEON). Threaded over (batch, channel-group). TRACT_DISABLE_DIRECT_SPATIAL turns it off.
  • More work spread across threads: activation packing, f32 reductions over leading axes, NCHW 2x2 maxpool, and GEMVs with a long k, which used to run on one thread below the panel gate (every projection of a 1B LLM decode step).
  • Deconvolution whose kernel extent equals its stride adds the bias per channel in one write, replacing the NCHW 2x2 special case. Generic NCHW deconvolution accumulates contiguous input rows. NCHW and channel-last max pools walk by plane and row span.
  • A softmax over every row runs in one call on arm64 and wasm, bit-identical to the per-row kernels.
  • Apple SME: the f32 kernel stores straight from ZA to C, and reads an A that is already K-major in place instead of packing it. AMX is skipped on a strided n axis when K is short.
  • The SDOT i8 kernel is enabled with binutils 2.32–2.37 and pre-4.15 kernels; Cortex-A55/A75 are trusted by part number.
  • SpacemiT X60 (RISC-V): a TLB flush before matmuls of 8M+ multiply-adds keeps the L1 prefetcher working; TRACT_RISCV64_TLB_REFRESH_FMAS sets the threshold, and 0 turns it off.
  • wasm: the 8x8 GEMM broadcasts A from vector loads and is picked at every N; simd128 max and min by scalar; a target that cannot build a thread pool falls back to rayon's global pool.
  • Fix: f16 hardswish overflowed to +inf for x >= 10920. armv7 mmm prefetch addresses were wrong.

GPU

  • A model with concrete shapes gets its memory arena without hints on CUDA and Metal. Before, every intermediate had its own buffer, held until the stream committed; an SDXL VAE decoder needed ~61 GB instead of a 2.9 GB arena.
  • A batched attention softmax at rank 6 stays on the device, copies merge axes before checking rank, and a CUDA binary merges adjacent axes instead of refusing rank 6.

... (truncated)

Commits
  • 4adabb1 release 0.23.9
  • ee878dc log changes
  • ed9cfe3 bench: re-check off-trend benches in the nightly before storing them
  • 0bacea9 An A matrix that is already laid out K-major in memory was copied into packed...
  • c3188f0 A CumSum over a length-1 axis was left in the graph although it is the identi...
  • 649288d ONNX CumSum was lowered to a Scan whose body adds one element per iteration, ...
  • eb68313 Quantized convolution inferred matching operand types and mishandled grouped ...
  • 68f9787 metal: clear clippy warnings
  • 56fea37 Bump rustls to 0.23.46
  • 18d44c4 Bump cargo-deny to 0.20.2
  • Additional commits viewable in compare view

Updates utoipa-swagger-ui from 10.0.1 to 10.0.2

Release notes

Sourced from utoipa-swagger-ui's releases.

utoipa-swagger-ui-10.0.2

What's New 💎 🆕 🎉

Full change log

Commits
  • c7fd8ad Update utoipa-swagger-ui release versions
  • 5aff30b Minimal fix to update zip to 9.0x (#1645)
  • 65d6d51 Revise FAQ links for implementing ToSchema
  • d31a194 Deny additional properties on struct variants of deny_unknown_fields enums (#...
  • e03690b Fix rocket path macro panic for data guards without a body type (#1611)
  • d86c15c Pin uuid < 1.27 to maintain MSRV 1.88 compatibility (#1630)
  • c9a6dea Replace once_cell with std::sync::LazyLock (#1629)
  • 2ec67b8 Support merge in OpenApi derive (#1628)
  • a32c8e6 Mark Option fields with deserialize_with as required (#1627)
  • 2dfe23d Add missing utoipa-gen snapshots for rename-expression derives (#1625)
  • Additional commits viewable in compare view

Updates rustls from 0.23.45 to 0.23.46

Commits
  • f04804f Delay saving KX hint until handshake confirmation
  • 049d39b Bump version to 0.23.46
  • 6d0ba08 Eliminate secret from impl Debug for ServerSessionValue
  • 2b82b81 unbuffered: update TLS 1.3 traffic keys before exhausting them
  • 74343e7 conn: update TLS 1.3 traffic keys within fragmented writes
  • 795eea7 Advance the HPKE sequence only after seal succeeds
  • d67cb71 stream: provide backpressure while buffering received plaintext
  • 7a69ade util: fuse flushes from connections with errors
  • 493d089 conn: fuse writes for connections with errors
  • db00e01 util: keep flushing after short writes
  • Additional commits viewable in compare view

Updates aws-lc-rs from 1.18.1 to 1.18.2

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.18.2

What's Changed

  • Implement Eq and PartialEq for RSA and EdDSA parameters by @​dsykes16 in aws/aws-lc-rs#1228
    • RsaParameters can now be compared directly against RSA verification constants. Algorithms with different digests, padding schemes, or modulus-size ranges compare unequal. EdDSAParameters also gains equality support.
  • Add wasm32-wasip2 and wasm32-wasip3 support by @​ricochet in aws/aws-lc-rs#1239
    • Adds non-FIPS builds using universal bindings, with CI coverage under Wasmtime and wasi-sdk 34. WASIp3 requires nightly Rust.
    • Direct aws-lc-sys consumers must disable the default all-bindings feature for these targets.
  • Publish the intended RandomizedNonceKey::open_in_place documentation by @​Serophots in aws/aws-lc-rs#1227
    • Makes the existing nonce, ciphertext/tag layout, and buffer-on-error contract visible in rustdoc. No runtime behavior changes.

Upstream AWS-LC

  • aws-lc-sys v0.46.0 aligns with AWS-LC v5.11.0 (previously v5.7.0). See also the release notes for v5.8.0, v5.9.0, and v5.10.0.
    • The Ed25519 C-implementation decoder now rejects non-canonical public keys, matching the assembly-optimized implementations: aws/aws-lc#3457
    • Includes ChaCha20-Poly1305 key-material zeroization and fixes ML-KEM CPU feature detection to avoid illegal-instruction failures on x86-64 CPUs with AVX2 but no BMI2: aws/aws-lc#3552 and aws/aws-lc#3596
  • aws-lc-fips-sys v0.14.3 updates its bundled AWS-LC FIPS 4.2.0 snapshot and regenerates bindings. It remains on the FIPS 4.x release line.

Build Improvements

  • Raise the minimum system AWS-LC version to 5.7.0 by @​justsmth in aws/aws-lc-rs#1243
    • Non-FIPS system-library installations must now provide AWS-LC 5.7.0 or newer, previously 1.68.0. Bundled-source builds and FIPS version requirements are unchanged.
  • Fix static FIPS system-library linking by @​justsmth in aws/aws-lc-rs#1236
    • Fixes unresolved FIPS_mode references with GNU ld.bfd when linking a prebuilt static FIPS library, including binaries that do not call crypto and builds where LTO removes those calls.
    • Uses whole-archive linking to retain libcrypto, including in downstream Rust staticlib outputs. This can increase binary size; dynamic FIPS and non-FIPS linking are unchanged.
  • Fix Cranelift linking by @​justsmth in aws/aws-lc-rs#1234
    • Normalizes binding link names to avoid undefined-symbol failures, including when Cranelift is selected through Cargo profiles rather than RUSTFLAGS. The AWS_LC_SYS_NO_U1_BINDINGS workaround is no longer needed.
  • Fix jitterentropy builds with optimizing CFLAGS and newer cc versions by @​justsmth in aws/aws-lc-rs#1254
    • Keeps filtered flags in effect throughout the jitterentropy builder's lifetime, preventing cached environment reads from allowing flags such as -O2 to override its required -O0.
  • Honor AWS_LC_SYS_CC in the main library build by @​justsmth in aws/aws-lc-rs#1255
    • Applies crate-specific compiler overrides before compiler lookup in both CC and CMake build paths, keeping compiler selection and capability probes consistent when cc caches environment reads.
  • Improve archive reproducibility through symlinked build paths by @​justsmth in aws/aws-lc-rs#1238
    • Prevents the non-Windows CC builder from incorporating symlink-resolved absolute build paths into archive member names, avoiding unnecessary downstream compile-cache misses. Windows short-path handling is unchanged.
  • Upgrade bindgen to 0.73 by @​xtqqczze in aws/aws-lc-rs#1244
  • Document the system-library trust model by @​justsmth in aws/aws-lc-rs#1218
    • Clarifies that supplied paths and pkg-config results are trusted build inputs, and that FIPS validation can execute candidate library code before accepting or rejecting it. Documents runner requirements and how to disable automatic system-library detection.

Issues Being Closed

  • Cranelift builds fail with codegen-backend = "cranelift" -- aws/aws-lc-rs#1231
  • Upgrade bindgen to v0.73 -- aws/aws-lc-rs#1245
  • Undefined FIPS_mode when linking a prebuilt FIPS module into a binary that does not use crypto -- aws/aws-lc-rs#1246
  • Jitterentropy fails with "must not be compiled with optimizations" in aws-lc-rs v1.18.1 / aws-lc-sys v0.45.0 -- aws/aws-lc-rs#1252

Other Merged PRs

... (truncated)

Commits
  • 9df4975 Prepare aws-lc-fips-sys v0.14.3 (#1258)
  • 83d5809 Prepare aws-lc-sys v0.46.0 and aws-lc-rs v1.18.2 (#1256)
  • a97b9df fix(builder): export AWS_LC_SYS_CC before the main build's compiler lookup (#...
  • 040d834 fix: normalize binding link names for Cranelift (#1234)
  • ecd9a26 fix(builder): hold jitterentropy CFLAGS guard for the builder's lifetime (#1254)
  • d17b165 fix: link static FIPS system libcrypto with whole-archive (#1236)
  • 841a718 fix: update Clippy allowances for bindgen 0.73 (#1250)
  • 4492dcd build(deps): upgrade bindgen to version 0.73 (#1244)
  • a0314cb fix(builder): use unresolved CARGO_MANIFEST_DIR for source paths (#1238)
  • e81bb0d build(deps): bump codecov/codecov-action from 7.1.0 to 7.1.1 (#1237)
  • Additional commits viewable in compare view

Updates opentelemetry from 0.33.0 to 0.33.1

Commits
  • 372ebbc chore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)
  • 5582e71 docs(logs): polish design doc and fill perf numbers (#3566)
  • 7ce1269 fix(sdk): log when the periodic metrics reader panics (#3777)
  • b547036 fix(prometheus): keep resource labels when scope info is disabled (#3751)
  • e8480db chore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)
  • 0fdfc48 feat(proto): Add support for protobuffer descriptor output (#3675)
  • 87929d7 ci: install markdown-link-check from npm (#3661)
  • ff2ab2d docs(trace): explain async context propagation (#3759)
  • 2595432 fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...
  • 952bdee fix: accept optional whitespace in TraceState (#3761)
  • Additional commits viewable in compare view

Updates opentelemetry_sdk from 0.33.0 to 0.33.1

Commits
  • 372ebbc chore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)
  • 5582e71 docs(logs): polish design doc and fill perf numbers (#3566)
  • 7ce1269 fix(sdk): log when the periodic metrics reader panics (#3777)
  • b547036 fix(prometheus): keep resource labels when scope info is disabled (#3751)
  • e8480db chore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)
  • 0fdfc48 feat(proto): Add support for protobuffer descriptor output (#3675)
  • 87929d7 ci: install markdown-link-check from npm (#3661)
  • ff2ab2d docs(trace): explain async context propagation (#3759)
  • 2595432 fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...
  • 952bdee fix: accept optional whitespace in TraceState (#3761)
  • Additional commits viewable in compare view

Updates opentelemetry-otlp from 0.33.0 to 0.33.1

Commits
  • 372ebbc chore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)
  • 5582e71 docs(logs): polish design doc and fill perf numbers (#3566)
  • 7ce1269 fix(sdk): log when the periodic metrics reader panics (#3777)
  • b547036 fix(prometheus): keep resource labels when scope info is disabled (#3751)
  • e8480db chore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)
  • 0fdfc48 feat(proto): Add support for protobuffer descriptor output (#3675)
  • 87929d7 ci: install markdown-link-check from npm (#3661)
  • ff2ab2d docs(trace): explain async context propagation (#3759)
  • 2595432 fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...
  • 952bdee fix: accept optional whitespace in TraceState (#3761)
  • Additional commits viewable in compare view

Updates proptest from 1.11.0 to 1.12.0

Commits
  • 70cf37d Merge pull request #675 from proptest-rs/prep-1.12
  • 729e0ff prepare next releases and fix panic handling
  • 28c1fad Merge pull request #664 from Expyron/main
  • 5ddd9a4 Merge pull request #668 from toddATavail/fix-fork-persisted-failure
  • a6a9ac7 Merge pull request #673 from glaziermag/fix-book-deploy
  • d57d88b Replace rand_chacha with chacha20
  • 9411213 Deploy the book on pushes to main
  • 1719745 fix: terminate the fork replay when a persisted failure fails
  • 0f55b7a test: a persisted failure in a forked test must be reported
  • 4b0594e Merge pull request #669 from proptest-rs/no-fail-fast
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo-minor-patch group across 1 directory with…
bca6921 
… 14 updates

Bumps the cargo-minor-patch group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.54.1` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.26.1` | `1.28.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [arc-swap](https://github.com/vorner/arc-swap) | `1.9.2` | `1.9.3` |
| [tract](https://github.com/snipsco/tract) | `0.23.8` | `0.23.9` |
| [utoipa-swagger-ui](https://github.com/juhaku/utoipa) | `10.0.1` | `10.0.2` |
| [rustls](https://github.com/rustls/rustls) | `0.23.45` | `0.23.46` |
| [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.1` | `1.18.2` |
| [opentelemetry](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` |
| [opentelemetry_sdk](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` |
| [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.11.0` | `1.12.0` |



Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `tokio` from 1.53.1 to 1.54.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.54.1)

Updates `tokio-util` from 0.7.19 to 0.7.20
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20)

Updates `uuid` from 1.26.1 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.28.0)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `arc-swap` from 1.9.2 to 1.9.3
- [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vorner/arc-swap/commits/v1.9.3)

Updates `tract` from 0.23.8 to 0.23.9
- [Release notes](https://github.com/snipsco/tract/releases)
- [Changelog](https://github.com/sonos/tract/blob/main/CHANGELOG.md)
- [Commits](sonos/tract@v0.23.8...v0.23.9)

Updates `utoipa-swagger-ui` from 10.0.1 to 10.0.2
- [Release notes](https://github.com/juhaku/utoipa/releases)
- [Changelog](https://github.com/juhaku/utoipa/blob/master/utoipa-rapidoc/CHANGELOG.md)
- [Commits](juhaku/utoipa@utoipa-swagger-ui-10.0.1...utoipa-swagger-ui-10.0.2)

Updates `rustls` from 0.23.45 to 0.23.46
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.45...v/0.23.46)

Updates `aws-lc-rs` from 1.18.1 to 1.18.2
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@v1.18.1...v1.18.2)

Updates `opentelemetry` from 0.33.0 to 0.33.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-0.33.0...opentelemetry-0.33.1)

Updates `opentelemetry_sdk` from 0.33.0 to 0.33.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry_sdk-0.33.0...opentelemetry_sdk-0.33.1)

Updates `opentelemetry-otlp` from 0.33.0 to 0.33.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-otlp-0.33.0...opentelemetry-otlp-0.33.1)

Updates `proptest` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.11.0...v1.12.0)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio
  dependency-version: 1.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: tokio-util
  dependency-version: 0.7.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: arc-swap
  dependency-version: 1.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tract
  dependency-version: 0.23.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: utoipa-swagger-ui
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: rustls
  dependency-version: 0.23.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: aws-lc-rs
  dependency-version: 1.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: opentelemetry
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: opentelemetry_sdk
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: opentelemetry-otlp
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: proptest
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from shankar-gpio as a code owner October 26, 2026 04:40
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 26, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 26, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs		 orion-docs bca6921 Oct 26 2026, 04:40 AM

@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 2, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-minor-patch-3aff69c0ba branch November 2, 2026 04:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@shankar-gpio shankar-gpio Awaiting requested review from shankar-gpio shankar-gpio is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants