chore(deps): bump the rust-minor group across 1 directory with 10 updates by dependabot[bot] · Pull Request #605 · ChronoAIProject/NyxID

dependabot · 2026-05-04T00:47:16Z

Bumps the rust-minor group with 10 updates in the / directory:

Package	From	To
axum	`0.8.8`	`0.8.9`
tokio	`1.52.0`	`1.52.1`
mongodb	`3.5.2`	`3.6.0`
uuid	`1.23.0`	`1.23.1`
sha2	`0.11.0-rc.5`	`0.11.0`
siphasher	`1.0.2`	`1.0.3`
clap	`4.6.0`	`4.6.1`
open	`5.3.3`	`5.3.4`
rpassword	`7.4.0`	`7.5.2`
libc	`0.2.185`	`0.2.186`

Updates axum from 0.8.8 to 0.8.9

Release notes

Sourced from axum's releases.

axum-v0.8.9

added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)

changed: Update minimum rust version to 1.80 (#3620)

fixed: Set connect endpoint on correct field in MethodRouter (#3656)

fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3597: tokio-rs/axum#3597 #3620: tokio-rs/axum#3620 #3656: tokio-rs/axum#3656 #3611: tokio-rs/axum#3611

Commits

c59208c revert axum-core changelog changes
99068f5 Revert "Fix IntoResponse for tuples overriding error response codes (#3603)"
23d7098 Revert "axum-core 0.5.6"
e8a39ad axum-macros 0.5.1
6e9a249 axum-extra 0.12.6
0ec9041 axum 0.8.9
c3fcebb axum-core 0.5.6
a8790fc update release notes
26ba7bb docs: consolidate state management docs in crate root (#3683)
9fc59ef Update to tokio-tungstenite 0.29 (#3689)
Additional commits viewable in compare view

Updates tokio from 1.52.0 to 1.52.1

Release notes

Sourced from tokio's releases.

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Commits

905c146 chore: prepare to release v1.52.1 (#8059)
56aaa43 rt: revert #7757 to fix regression in spawn_blocking (#8057)
57ff47a ci: update trybuild to expect output from rustc 1.95.0 (#8058)
812de3e ci: bump taiki-e/cache-cargo-install-action from 1 to 3 (#8053)
ba82e73 ci: use Dependabot to keep github actions up to date (#8052)
2e85f9d ci: replace cirrus-ci with freebsd-vm (#8041)
a7e1cd8 ci: update GitHub Actions workflows to use latest tool versions (#8047)
See full diff in compare view

Updates mongodb from 3.5.2 to 3.6.0

Release notes

Sourced from mongodb's releases.

v3.6.0

The MongoDB Rust driver team is pleased to announce the v3.6.0 release of the mongodb crate, now available for download from crates.io.

Highlighted Changes

Client Backpressure

With 3.6.0, the client has a variety of changes to improve behavior when connected to overloaded servers, most notably retrying against a different server (if available). For more details on server load-shedding, see the documentation for Intelligent Workload Management.

Full Release Notes

Impactful changes are listed below; for a complete list of changes see this GitHub query.

Improvements

RUST-2268 Add jitter to convenient transaction retries (#1588)

RUST-2267 Avoid clearing connection pool when server connection rate limiter triggers (#1584)

RUST-2324 Implement Cursor on top of RawBatchCursor (#1620)

RUST-2273 Exponential backoff and jitter in retry loops (#1626)

RUST-2325 Use raw batch iterator for gridfs downloads (#1632)

RUST-2385 Finalize client backpressure changes (#1654)

minor: bump MSRV to 1.85 (#1670)

Add feature flag to use aws-lc-rs instead of ring as the rustls crypto provider (#1662) (thanks @TimTheBig!)

Bugfixes

RUST-2344 Encode values in GCP/Azure OIDC URLs (#1593)

RUST-2346 Remove check for '|' in metadata (#1599)

RUST-2363 ensure empty tag matches servers with no tag set (#1616)

RUST-2335 Fix and test logic for error comparison on retry (#1637)

RUST-2390 Fix Cursor::has_next (#1652)

RUST-2394 Fix a race condition deadlock in Client::shutdown (#1658)

RUST-2400 Fix and test retry behavior for a mix of overload and non-overload errors (#1669)

Commits

0711b10 release v3.6.0 (#1674)
f20b3d0 chore: Update SBOM (#1673)
0ce6d5c Add feature flag to use aws-lc-rs instead of ring as the rustls crypto ...
735d2cf chore: Update SBOM (#1671)
960e176 minor: add top-level backpressure documentation (#1672)
c9c43cf RUST-2400 Fix and test retry behavior for a mix of overload and non-overload ...
ef66762 minor: bump MSRV to 1.85 (#1670)
81c72e5 RUST-2394 Fix a race condition deadlock in Client::shutdown (#1658)
da9d4f0 chore: Update SBOM (#1667)
d2ae4bc RUST-2386 Fix EC2 auth test (#1661)
Additional commits viewable in compare view

Updates uuid from 1.23.0 to 1.23.1

Release notes

Sourced from uuid's releases.

v1.23.1

What's Changed

Remove deprecated msrv feature from wasm-bindgen dependency by @guybedford in uuid-rs/uuid#877

fix: Timestamp::from_gregorian deprecation note by @aznashwan in uuid-rs/uuid#878

Prepare for 1.23.1 release by @KodrAus in uuid-rs/uuid#879

New Contributors

@guybedford made their first contribution in uuid-rs/uuid#877

@aznashwan made their first contribution in uuid-rs/uuid#878

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

Commits

ca0c85f Merge pull request #879 from uuid-rs/cargo/v1.23.1
b4db015 prepare for 1.23.1 release
771069d Merge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note
80994a2 fix: Timestamp::from_gregorian deprecation note
90c5be8 Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv
8b8c4f4 Remove deprecated feature from wasm-bindgen dependency
See full diff in compare view

Updates sha2 from 0.11.0-rc.5 to 0.11.0

Commits

ffe0939 Release sha2 0.11.0 (#806)
8991b65 Use the standard order of the [package] section fields (#807)
3d2bc57 sha2: refactor backends (#802)
faa55fb sha3: bump keccak to v0.2 (#803)
d3e6489 sha3 v0.11.0-rc.9 (#801)
bbf6f51 sha2: tweak backend docs (#800)
155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
ed514f2 Use published version of keccak v0.2 (#799)
702bcd8 Migrate to closure-based keccak (#796)
827c043 sha3 v0.11.0-rc.8 (#794)
Additional commits viewable in compare view

Updates siphasher from 1.0.2 to 1.0.3

Commits

451f67d Bump
4b90c33 Optimize SipHash
See full diff in compare view

Updates clap from 4.6.0 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Commits

1420275 chore: Release
d2c817d docs: Update changelog
f88c94e Merge pull request #6341 from epage/sep
acbb822 fix(complete): Reduce risk of conflict with actual subcommands
a49fadb refactor(complete): Pull out subcommand separator
ddc008b Merge pull request #6332 from epage/update
497dc50 chore: Update compatible dependencies
dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
54bdaa3 chore(deps): Update j178/prek-action action to v2
f0d30d9 chore: Release
Additional commits viewable in compare view

Updates open from 5.3.3 to 5.3.4

Release notes

Sourced from open's releases.

v5.3.4

Bug Fixes

align with_detached() implementation with with() On macOS, /usr/bin/open is natively detached. This commit changes with_detached to use the same logic as with() .avoid double detachment to prevent silent failure

Commit Statistics

6 commits contributed to the release.

1 commit was understood as conventional.

0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 1 time to make code idiomatic.

Commit Details

Uncategorized

Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure (7db5738)

Align with_detached() implementation with with() (8e122d4)

Merge pull request #117 from ChrisDenton/absolute (20ea175)

Thanks clippy (on Windows) (7faae87)

Enable clippy deny on CI, with all features, but allow incompatible MRSV there (1ab9c47)

Use absolute instead of canonicalize (5604cee)

Changelog

Sourced from open's changelog.

5.3.4 (2026-04-19)

Bug Fixes

align with_detached() implementation with with() On macOS, /usr/bin/open is natively detached. This commit changes with_detached to use the same logic as with() .avoid double detachment to prevent silent failure

Commit Statistics

6 commits contributed to the release.

1 commit was understood as conventional.

0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 1 time to make code idiomatic.

Commit Details

Uncategorized

Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure (7db5738)

Align with_detached() implementation with with() (8e122d4)

Merge pull request #117 from ChrisDenton/absolute (20ea175)

Thanks clippy (on Windows) (7faae87)

Enable clippy deny on CI, with all features, but allow incompatible MRSV there (1ab9c47)

Use absolute instead of canonicalize (5604cee)

Commits

7bd519c Release open v5.3.4
7db5738 Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure
8e122d4 fix(macos): align with_detached() implementation with with()
20ea175 Merge pull request #117 from ChrisDenton/absolute
7faae87 Thanks clippy (on Windows)
1ab9c47 Enable clippy deny on CI, with all features, but allow incompatible MRSV there
5604cee Use absolute instead of canonicalize
See full diff in compare view

Updates rpassword from 7.4.0 to 7.5.2

Release notes

Sourced from rpassword's releases.

v7.5.2

Fixes a Unicode parsing bug which could lead to unwarranted panic (conradkleinespel/rpassword@6c19a1e).

Backwards compatible. No breaking change.

v7.5.1

This release fixes a cross-platform compilation issue that appeared in v.7.5.0 (conradkleinespel/rpassword@60ee071).

Thanks @aharpervc for bringing this to my attention in conradkleinespel/rpassword#126.

Backwards compatible. No breaking change.

v7.5.0

This release comes with lots of stuff. It should be fully backward compatible.

New features

Support for masking or partially masking a password as it's being typed. Thank you, @chipsenkbeil, for your contribution.

New API. The documentation has been vastly improved to support this, see https://docs.rs/rpassword/. To sum up, you can now call read_password_with_config(config) and there is a ConfigBuilder that allows you to configure how passwords should be read. This makes the library much more flexible and means new options will be added without breaking existing code.

Fixes

Fix for CVE-2025-64170 which affects rpassword on versions v7.4.0 and below. Thank you, @squell and @DevLaTron, for reporting this.

Better support for multibyte characters and more reliable handling of control characters and terminal escape sequences. Thank you again, @chipsenkbeil, for your contribution.

Deprecations

_from_bufread functions have been deprecated. You are encouraged to migrate to _with_config functions. See UPGRADE.md as well as the documentation which has examples that you can most likely drop into your code without other changes.

Misc

Update of the windows-sys dependency.

Update Rust edition from 2018 to 2024.

Better cross-platform testing, through more unit tests and a CI that runs Linux, Windows and Wasm.

Feedback is very much welcome.

Commits

e176edc bump to 7.5.2
6c19a1e make reading utf8 chars more reliable
1ecf07d bump to 7.5.1
60ee071 remove errno clean up, not cross-platform
2d9873e release v7.5.0
e67e3b4 removes commented out code
fdde958 remove .idea from .gitignore
d531c59 allow reading from any Read and writing to any Write
205dfb2 differentiate Input and Output targets
6aa333a make PasswordFeedback internal though ConfigBuilder
Additional commits viewable in compare view

Updates libc from 0.2.185 to 0.2.186

Release notes

Sourced from libc's releases.

0.2.186

Added

Apple: Add KEVENT_FLAG_* constants (#5070)

Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

Changelog

Sourced from libc's changelog.

0.2.186 - 2026-04-24

Added

Apple: Add KEVENT_FLAG_* constants (#5070)

Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

Commits

42620ff [0.2] libc: Release 0.2.186
9db2eaa apple: add KEVENT_FLAG_* constants
3840939 Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE for linux
f697deb chore: migrate from Cirrus CI to GHA
See full diff in compare view

dependabot · 2026-05-04T00:47:17Z

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

…ates Bumps the rust-minor group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.0` | `1.52.1` | | [mongodb](https://github.com/mongodb/mongo-rust-driver) | `3.5.2` | `3.6.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.0` | `1.23.1` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0-rc.5` | `0.11.0` | | [siphasher](https://github.com/jedisct1/rust-siphash) | `1.0.2` | `1.0.3` | | [clap](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.1` | | [open](https://github.com/Byron/open-rs) | `5.3.3` | `5.3.4` | | [rpassword](https://github.com/conradkleinespel/rpassword) | `7.4.0` | `7.5.2` | | [libc](https://github.com/rust-lang/libc) | `0.2.185` | `0.2.186` | Updates `axum` from 0.8.8 to 0.8.9 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9) Updates `tokio` from 1.52.0 to 1.52.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.0...tokio-1.52.1) Updates `mongodb` from 3.5.2 to 3.6.0 - [Release notes](https://github.com/mongodb/mongo-rust-driver/releases) - [Commits](mongodb/mongo-rust-driver@v3.5.2...v3.6.0) Updates `uuid` from 1.23.0 to 1.23.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.0...v1.23.1) Updates `sha2` from 0.11.0-rc.5 to 0.11.0 - [Commits](RustCrypto/hashes@sha2-v0.11.0-rc.5...sha2-v0.11.0) Updates `siphasher` from 1.0.2 to 1.0.3 - [Commits](jedisct1/rust-siphash@1.0.2...1.0.3) Updates `clap` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.1) Updates `open` from 5.3.3 to 5.3.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.3.3...v5.3.4) Updates `rpassword` from 7.4.0 to 7.5.2 - [Release notes](https://github.com/conradkleinespel/rpassword/releases) - [Commits](conradkleinespel/rpassword@v7.4.0...v7.5.2) Updates `libc` from 0.2.185 to 0.2.186 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.186/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.185...0.2.186) --- updated-dependencies: - dependency-name: axum dependency-version: 0.8.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: clap dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: libc dependency-version: 0.2.186 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: mongodb dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor - dependency-name: open dependency-version: 5.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: rpassword dependency-version: 7.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: siphasher dependency-version: 1.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: tokio dependency-version: 1.52.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: uuid dependency-version: 1.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-05T11:04:50Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies label May 4, 2026

dependabot Bot force-pushed the dependabot/cargo/rust-minor-7f015dbb41 branch from 04a41a3 to 1b7a608 Compare May 4, 2026 08:18

dependabot Bot closed this May 5, 2026

dependabot Bot deleted the dependabot/cargo/rust-minor-7f015dbb41 branch May 5, 2026 11:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the rust-minor group across 1 directory with 10 updates#605

chore(deps): bump the rust-minor group across 1 directory with 10 updates#605
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rust-minor-7f015dbb41

dependabot Bot commented on behalf of github May 4, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github May 4, 2026

Uh oh!

dependabot Bot commented on behalf of github May 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

axum-v0.8.9

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

v3.6.0

Highlighted Changes

Client Backpressure

Full Release Notes

Improvements

Bugfixes

v1.23.1

What's Changed

New Contributors

v4.6.1

[4.6.1] - 2026-04-15

Fixes

[4.6.1] - 2026-04-15

Fixes

v5.3.4

Bug Fixes

Commit Statistics

Thanks Clippy

Commit Details

5.3.4 (2026-04-19)

Bug Fixes

Commit Statistics

Thanks Clippy

Commit Details

v7.5.2

v7.5.1

v7.5.0

New features

Fixes

Deprecations

Misc

0.2.186

Added

Changed

0.2.186 - 2026-04-24

Added

Changed

Uh oh!

dependabot Bot commented on behalf of github May 4, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github May 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 4, 2026 •

edited

Loading