Skip to content

deps(rust): bump the rust-dependencies group across 1 directory with 12 updates#29

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rust-dependencies-26dfad3be8
Open

deps(rust): bump the rust-dependencies group across 1 directory with 12 updates#29
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rust-dependencies-26dfad3be8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Bumps the rust-dependencies group with 12 updates in the / directory:

Package From To
tokio 1.49.0 1.50.0
rmcp 0.17.0 1.3.0
tracing-subscriber 0.3.22 0.3.23
clap 4.5.60 4.6.0
scraper 0.25.0 0.26.0
html5ever 0.36.1 0.39.0
uuid 1.21.0 1.23.0
sysinfo 0.38.2 0.38.4
hmac 0.12.1 0.13.0
sha2 0.10.9 0.11.0
proptest 1.10.0 1.11.0
wasm-bindgen-test 0.3.64 0.3.65

Updates tokio from 1.49.0 to 1.50.0

Release notes

Sourced from tokio's releases.

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

  • net: add TcpStream::set_zero_linger (#7837)
  • rt: add is_rt_shutdown_err (#7771)

Changed

  • io: add optimizer hint that memchr returns in-bounds pointer (#7792)
  • io: implement vectored writes for write_buf (#7871)
  • runtime: panic when event_interval is set to 0 (#7838)
  • runtime: shorten default thread name to fit in Linux limit (#7880)
  • signal: remember the result of SetConsoleCtrlHandler (#7833)
  • signal: specialize windows Registry (#7885)

Fixed

  • io: always cleanup AsyncFd registration list on deregister (#7773)
  • macros: remove (most) local use declarations in tokio::select! (#7929)
  • net: fix GET_BUF_SIZE constant for target_os = "android" (#7889)
  • runtime: avoid redundant unpark in current_thread scheduler (#7834)
  • runtime: don't park in current_thread if before_park defers waker (#7835)
  • io: fix write readiness on ESP32 on short writes (#7872)
  • runtime: wake deferred tasks before entering block_in_place (#7879)
  • sync: drop rx waker when oneshot receiver is dropped (#7886)
  • runtime: fix double increment of num_idle_threads on shutdown (#7910, #7918, #7922)

Unstable

  • fs: check for io-uring opcode support (#7815)
  • runtime: avoid lock acquisition after uring init (#7850)

Documented

  • docs: update outdated unstable features section (#7839)
  • io: clarify the behavior of AsyncWriteExt::shutdown() (#7908)
  • io: explain how to flush stdout/stderr (#7904)
  • io: fix incorrect and confusing AsyncWrite documentation (#7875)
  • rt: clarify the documentation of Runtime::spawn (#7803)
  • rt: fix missing quotation in docs (#7925)
  • runtime: correct the default thread name in docs (#7896)
  • runtime: fix event_interval doc (#7932)
  • sync: clarify RwLock fairness documentation (#7919)
  • sync: clarify that recv returns None once closed and no more messages (#7920)
  • task: clarify when to use spawn_blocking vs dedicated threads (#7923)
  • task: doc that task drops before JoinHandle completion (#7825)
  • signal: guarantee that listeners never return None (#7869)
  • task: fix task module feature flags in docs (#7891)

... (truncated)

Commits

Updates rmcp from 0.17.0 to 1.3.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v1.3.0

Added

  • add local feature for !Send tool handler support (#740)

Other

  • fix all clippy warnings across workspace (#746)

rmcp-v1.3.0

Added

  • (transport) add Unix domain socket client for streamable HTTP (#749)
  • (auth) implement SEP-2207 OIDC-flavored refresh token guidance (#676)
  • add configuration for transparent session re-init (#760)
  • add local feature for !Send tool handler support (#740)

Fixed

  • prevent CallToolResult and GetTaskPayloadResult from shadowing CustomResult in untagged enums (#771)
  • drain in-flight responses on stdin EOF (#759)
  • remove default type param from StreamableHttpService (#758)
  • use cfg-gated Send+Sync supertraits to avoid semver break (#757)
  • (rmcp) surface JSON-RPC error bodies on HTTP 4xx responses (#748)
  • default CallToolResult content to empty vec on missing field (#752)
  • (auth) redact secrets in Debug output for StoredCredentials and StoredAuthorizationState (#744)

Other

  • fix all clippy warnings across workspace (#746)

rmcp-macros-v1.2.0

Fixed

  • (rmcp-macros) use re-exported serde_json path in task_handler (#735)

rmcp-v1.2.0

Added

  • add missing constructors for non-exhaustive model types (#739)
  • include granted scopes in OAuth refresh token request (#731)

Fixed

  • handle ping requests sent before initialize handshake (#745)
  • allow deserializing notifications without params field (#729)

Other

  • (deps) update jsonwebtoken requirement from 9 to 10 (#737)

... (truncated)

Commits
  • ac749e3 chore: release v1.3.0 (#747)
  • 0b36a84 feat: add "theme" to Icon (#766)
  • 6a3b32d chore: add #[non_exhaustive] to remaining public structs (#768)
  • ee1c63c feat(transport): add Unix domain socket client for streamable HTTP (#749)
  • a32a9c8 feat(auth): implement SEP-2207 OIDC-flavored refresh token guidance (#676)
  • baf22d3 chore: run all tests in ci without "local" feature (#761)
  • f89e412 chore(deps): update tokio-tungstenite requirement from 0.28.0 to 0.29.0 (#773)
  • c8c0c0c fix: prevent CallToolResult and GetTaskPayloadResult from shadowing CustomRes...
  • 30cdc38 chore: remove the rig example (#763)
  • 3ea8c3c feat: add configuration for transparent session re-init (#760)
  • Additional commits viewable in compare view

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

  • Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

Updates clap from 4.5.60 to 4.6.0

Changelog

Sourced from clap's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits

Updates scraper from 0.25.0 to 0.26.0

Release notes

Sourced from scraper's releases.

v0.26.0

What's Changed

New Contributors

Full Changelog: rust-scraper/scraper@v0.25.0...v0.26.0

Commits
  • 170cdd3 Merge pull request #306 from rust-scraper/bump
  • bca1839 Bump html5ever from 0.38.0 to 0.39.0
  • d07444e Bump selectors from 0.35.0 to 0.36.0 (#307)
  • 637a8d3 Version 0.26.0
  • f3132d9 Bump html5ever from 0.37.1 to 0.38.0
  • ff2ea51 cargo fmt
  • 7d14577 Edition 2024
  • 60cd9e7 Merge pull request #300 from rust-scraper/upgrade-ego-tree-html5ever
  • ba8f3fc Upgrade ego-tree to 0.11.0 and html5ever to 0.37.1
  • a2cfbe4 Bump indexmap from 2.12.1 to 2.13.0
  • Additional commits viewable in compare view

Updates html5ever from 0.36.1 to 0.39.0

Commits

Updates uuid from 1.21.0 to 1.23.0

Release notes

Sourced from uuid's releases.

v1.23.0

What's Changed

New Contributors

Special thanks

@​meng-xu-cs raised a series of bugs against the timestamp logic in uuid using automated tooling. The issues themselves were reasonably and responsibly presented and the end result is a better uuid library for everyone. Thanks!

Deprecations

This release includes the following deprecations:

  • Context: Renamed to ContextV1
  • Timestamp::from_gregorian: Renamed to Timestamp::from_gregorian_time

Change to Version::Max

Version::Max's u8 representation has changed from 0xff to 0x0f to match the value returned by Uuid::get_version_num.

Change to Uuid::get_version for the max UUID

Uuid::get_version will only return Some(Version::Max) if the UUID is actually the max UUID (all bytes are 0xff). Previously it would return Some if only the version field was 0x0f. This change matches the behaviour of the nil UUID, which only returns Some(Version::Nil) if the UUID is the nil UUID (all bytes are 0x00).

Full Changelog: uuid-rs/uuid@v1.22.0...v1.23.0

v1.22.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.21.0...v1.22.0

Commits
  • 00ab922 Merge pull request #876 from uuid-rs/cargo/v1.23.0
  • 726ba45 prepare for 1.23.0 release
  • 996dade Merge pull request #875 from uuid-rs/fix/context-ordering
  • e140479 simplify a use stmt
  • 8ed9142 reorganize and document more v7 context internals
  • e09a322 use LazyLock to synchronize v1/v6 context initialization
  • 0f260cc Merge pull request #874 from uuid-rs/chore/impl-cleanups
  • 1419e91 clean up and refactor main lib tests
  • ceeaf4b ensure we don't overflow on counters less than 12
  • 63bc8f5 Merge pull request #873 from uuid-rs/fix/error-msg
  • Additional commits viewable in compare view

Updates sysinfo from 0.38.2 to 0.38.4

Changelog

Sourced from sysinfo's changelog.

0.38.4

  • macOS: Unpin objc2-* crates version.
  • Linux: Fix computation of disk size.

0.38.3

  • macOS: Improve accuracy of System::available_memory and System::used_memory.
  • Documentation: add missing unit for CPU::frequency returned value.
Commits
  • 97c194d Merge pull request #1642 from GuillaumeGomez/update
  • 91b92f1 Update crate version to 0.38.4
  • 8e8f76c Update CHANGELOG for 0.38.4
  • 9e6f37c Merge pull request #1641 from madsmtm/macos-no-pin-deps
  • 73d545c Fix warnings introduced in new objc2-* versions
  • 5cc4bcb Don't pin objc2-* crates
  • 5d4c63b Merge pull request #1640 from patjakdev/patjakdev/fix-1639
  • a8ee05c Use fragment size instead of block size for disk stats
  • 61257e4 Merge pull request #1635 from GuillaumeGomez/update
  • 3cf4b65 Update crate version to 0.38.3
  • Additional commits viewable in compare view

Updates hmac from 0.12.1 to 0.13.0

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates proptest from 1.10.0 to 1.11.0

Commits

Updates wasm-bindgen-test from 0.3.64 to 0.3.65

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(rust): bump the rust-dependencies group across 1 directory with …
cde6c41 
…12 updates

Bumps the rust-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `0.17.0` | `1.3.0` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.0` |
| [scraper](https://github.com/rust-scraper/scraper) | `0.25.0` | `0.26.0` |
| [html5ever](https://github.com/servo/html5ever) | `0.36.1` | `0.39.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.21.0` | `1.23.0` |
| [sysinfo](https://github.com/GuillaumeGomez/sysinfo) | `0.38.2` | `0.38.4` |
| [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.10.0` | `1.11.0` |
| [wasm-bindgen-test](https://github.com/wasm-bindgen/wasm-bindgen) | `0.3.64` | `0.3.65` |



Updates `tokio` from 1.49.0 to 1.50.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0)

Updates `rmcp` from 0.17.0 to 1.3.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v0.17.0...rmcp-v1.3.0)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `clap` from 4.5.60 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.0)

Updates `scraper` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/rust-scraper/scraper/releases)
- [Commits](rust-scraper/scraper@v0.25.0...v0.26.0)

Updates `html5ever` from 0.36.1 to 0.39.0
- [Release notes](https://github.com/servo/html5ever/releases)
- [Commits](https://github.com/servo/html5ever/commits)

Updates `uuid` from 1.21.0 to 1.23.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.21.0...v1.23.0)

Updates `sysinfo` from 0.38.2 to 0.38.4
- [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/main/CHANGELOG.md)
- [Commits](GuillaumeGomez/sysinfo@v0.38.2...v0.38.4)

Updates `hmac` from 0.12.1 to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `proptest` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.10.0...v1.11.0)

Updates `wasm-bindgen-test` from 0.3.64 to 0.3.65
- [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases)
- [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/wasm-bindgen/wasm-bindgen/commits)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: rmcp
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: scraper
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: html5ever
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: uuid
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: sysinfo
  dependency-version: 0.38.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: proptest
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: wasm-bindgen-test
  dependency-version: 0.3.65
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 30, 2026

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot requested a review from Lenvanderhof as a code owner March 30, 2026 04:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Lenvanderhof Lenvanderhof Awaiting requested review from Lenvanderhof Lenvanderhof is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants