Skip to content

Combined Dependabot PRs 2026-08-02 - #342

Merged
gorzell merged 10 commits into
mainfrom
combined-dependabot-20260802-074429
Aug 3, 2026
Merged

Combined Dependabot PRs 2026-08-02#342
gorzell merged 10 commits into
mainfrom
combined-dependabot-20260802-074429

Conversation

@code-search-bot

@code-search-bot code-search-bot commented Aug 2, 2026

Copy link
Copy Markdown
Collaborator

This PR combines 5 Dependabot PRs.

⚠️ Manual intervention required

Failed to merge cleanly

ℹ️ Details from merged PRs:

Details from Bump actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Details from Bump prost-build from 0.14.3 to 0.14.4

Changelog

Sourced from prost-build's changelog.

Prost version 0.14.4

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

🚀 Features

  • (prost-derive) Make is_valid a constant function (#1401)
  • Increase MSRV to 1.85 (#1428)

🐛 Bug Fixes

  • Use Display instead of Debug for generated enumeration attributes (#1419)
  • (prost-derive) Return error for invalid enumeration default identifiers (#1426)
  • (build) Grab binary path from cargo (#1429)
  • (build) Fix C++ build on GCC 15 (#1395)

📚 Documentation

  • Add example for decode_length_delimiter (#1311)
  • Update protobuf-src example to avoid unsafe set_var

🧪 Testing

  • Test derive Eq behavior (#1422)
  • (groups) Actually construct NestedGroup (#1363)

💼 Dependencies

  • (deps) Update criterion requirement from 0.7 to 0.8 (#1374)
  • (deps) Remove getrandom@0.4.1 from build-dependencies (#1400)
  • (deps) Update rand requirement from 0.9 to 0.10 (#1397)
  • (deps) Bump actions/upload-artifact from 6 to 7 (#1409)
  • (deps) Update cargo clippy to 1.89 (#1433)
  • (deps) Update cargo clippy to 1.91 (#1435)
  • (deps) Update and improve nix devshell (#1393)

🎨 Styling

  • Prevent needless borrow (#1404)
  • Use std::hint::black_box() (#1403)
  • Use variables directly in format!() (#1432)
  • Remove explicit .into_iter() (#1434)
  • Run clippy on benches (#1405)
Commits

Details from Bump proc-macro2 from 1.0.106 to 1.0.107

Release notes

Sourced from proc-macro2's releases.

1.0.107

  • Documentation improvements
Commits
  • ed8a549 Release 1.0.107
  • d2550fb Update documentation links to syn 3
  • 0bf387d Resolve redundant_else pedantic clippy lint
  • 949d696 Update actions/upload-artifact@v6 -> v7
  • 294a2bb Update actions/checkout@v6 -> v7
  • cd46c1b Lint clippy::from_iter_instead_of_collect has been removed
  • bb38d83 Update afl fuzzer from 0.17 to 0.18
  • 0f510db Unpin CI miri toolchain
  • b3c5fe3 Pin CI miri to nightly-2026-02-11
  • 7e2a990 Raise required compiler to Rust 1.71
  • Additional commits viewable in compare view

Details from Bump serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Details from Bump tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

  • time: fix alt timer cancellation and insertion race (#8252)

Documented

  • runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

  • fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
  • metrics: add task schedule latency metric (#7986)
  • net: add SocketAddr methods to Unix sockets (#8144)

Changed

  • io: add #[inline] to IO trait impls for in-memory types (#8242)
  • net: implement UCred::pid on FreeBSD (#8086)
  • net: support Nuttx target os (#8259)
  • signal: refactor global variables on Windows (#8231)
  • sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
  • taskdump: support taskdumps on s390x (#8192)
  • time: add #[track_caller] to timeout_at() (#8077)
  • time: consolidate mutex locks on spurious poll (#8124)
  • time: defer waker clone on spurious poll (#8107)
  • time: move lazy-registration state into Sleep (#8132)
  • tracing: remove unnecessary span clone (#8126)

Fixed

  • io: do not treat zero-length reads as EOF in Chain (#8251)
  • net: use getpeereid for QNX peer credentials (#8270)
  • runtime: avoid illegal state in FastRand (#8078)
  • sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
  • taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
  • time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

dependabot Bot and others added 10 commits July 2, 2026 05:04
@dependabot
Bump actions/checkout from 6 to 7
c359a43 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump prost-build from 0.14.3 to 0.14.4
83b298d 
Bumps [prost-build](https://github.com/tokio-rs/prost) from 0.14.3 to 0.14.4.
- [Release notes](https://github.com/tokio-rs/prost/releases)
- [Changelog](https://github.com/tokio-rs/prost/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/prost@v0.14.3...v0.14.4)

---
updated-dependencies:
- dependency-name: prost-build
  dependency-version: 0.14.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump proc-macro2 from 1.0.106 to 1.0.107
780acde 
Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.106 to 1.0.107.
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.106...1.0.107)

---
updated-dependencies:
- dependency-name: proc-macro2
  dependency-version: 1.0.107
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump serde_json from 1.0.150 to 1.0.151
2a1b1e5 
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.150 to 1.0.151.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump tokio from 1.52.3 to 1.53.1
8e207f0 
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.52.3 to 1.53.1.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@code-search-bot
Merge dependabot/github_actions/actions/checkout-7 into combined-depe…
756f62a 
…ndabot-20260802-074429
@code-search-bot
Merge dependabot/cargo/prost-build-0.14.4 into combined-dependabot-20…
96ac301 
…260802-074429
@code-search-bot
Merge dependabot/cargo/proc-macro2-1.0.107 into combined-dependabot-2…
0b664fc 
…0260802-074429
@code-search-bot
Merge dependabot/cargo/serde_json-1.0.151 into combined-dependabot-20…
34d33e8 
…260802-074429
@code-search-bot
Merge dependabot/cargo/tokio-1.53.1 into combined-dependabot-20260802…
e4e3dfd 
…-074429
Copilot AI review requested due to automatic review settings August 2, 2026 07:44
@code-search-bot
code-search-bot requested a review from a team as a code owner August 2, 2026 07:44
Copilot AI reviewed Aug 2, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates Rust dependencies and GitHub Actions tooling through five combined Dependabot upgrades.

Changes:

  • Upgrades actions/checkout from v6 to v7.
  • Updates Prost packages, Tokio, Serde JSON, and proc-macro2.
  • Refreshes transitive dependencies in the lockfile.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File Description
Cargo.lock Records updated Rust dependencies and transitive cleanup.
.github/workflows/publish-release.yml Uses actions/checkout@v7.
.github/workflows/create-release-pr.yml Uses actions/checkout@v7.
.github/workflows/ci.yml Uses checkout v7 in test and lint jobs.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@gorzell
gorzell added this pull request to the merge queue Aug 3, 2026
Merged via the queue into main with commit 886e9a3 Aug 3, 2026
7 checks passed
@gorzell
gorzell deleted the combined-dependabot-20260802-074429 branch August 3, 2026 06:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@gorzell gorzell gorzell approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@code-search-bot @gorzell