Skip to content

chore(deps): bump the prod-deps group across 1 directory with 12 updates#152

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/prod-deps-c70a085eb1
Open

chore(deps): bump the prod-deps group across 1 directory with 12 updates#152
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/prod-deps-c70a085eb1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group with 11 updates in the / directory:

Package From To
serde-saphyr 0.0.27 0.0.29
rustls 0.23.40 0.23.41
turso 0.7.0-pre.8 0.7.0-pre.18
rmcp 1.7.0 2.2.0
sse-stream 0.2.3 0.2.4
frankenstein 0.50.0 0.50.2
uuid 1.23.3 1.23.4
cron 0.16.0 0.17.0
rand 0.10.1 0.10.2
anyhow 1.0.102 1.0.103
arc-swap 1.9.1 1.9.2

Updates serde-saphyr from 0.0.27 to 0.0.29

Release notes

Sourced from serde-saphyr's releases.

0.0.28 Property interpolation extensions and even faster builds

Significant extension of property interpolation ( @​CommanderStorm)

  • Added support for default property interpolation in plain scalars: ${NAME:-default} now resolves to default when NAME is unset or explicitly empty.
  • ${VAR}: Values that must be configured (DB URLs, API keys). An unset var is a misconfiguration, not something to paper over -> a loud error at parse time
  • ${VAR-fallback}: Empty value is meaningful and distinct from "not configured". F.ex. PREFIX="" -> "no prefix".
  • ${VAR:-fallback}: The "regular" default, so f.ex. ${PORT:-8080}
  • ${VAR+text}: F.ex. ${DEBUG+--verbose} emits the flag whenever DEBUG exists in the environment, regardless of value.
  • ${VAR:+text}: Same as above, but differentiating empty <-> null

Also

  • Fix #120 LastWins not honored when deserializing struct. This was implemented and well tested, but only with maps.
  • Reduced owning of comment strings (parsing very heavily commented YAML while discarding comments should be lighter on resources).
  • Fixed indentation enforcement (@​CommanderStorm), making sure it also works for multiline scalars.
  • Fixed tuple serialization (@​CommanderStorm)
  • New SingleQuoted<..> and DoubleQuoted<..> wrappers to emit quoted strings. SingleQuoted may provide additional safety, as control characters will be rejected (with error), rather than written as YAML escape sequences. NullableTilde<T> is like Option and emits tilde ( ~ ) rather than null.

Faster compilation times with serde_core

serde-saphyr now avoids compiling serde_derive by default. The crate core uses serde_core instead that allows building serde-saphyr in parallel with serde_derive. However this also means that we needed to drop the previously built-in (de)serialization support for some serde-saphyr own configuration and reporting types like Options. (De)serialization support for these types can be re-enabled with the new feature serde_derived_types:

serde-saphyr = { version = "...", features = ["serde_derived_types"] }

This does not affect normal use of serde-saphyr for user data, you can still serialize and deserialize your own structs as before.

Commits
  • f23c28c Advance version number
  • fc36c3f Removed benchmarking section from README.md - this needs to be re-benchmarked...
  • 9a727e3 Fix Clippy warning.
  • 3bd9fde Rearrange and reasonably name the test suites
  • 436edfe Two divergent hand-rolled escape tables in the serializer
  • 6a30736 Remove over-engineered Divisible(0) macro handling
  • 87afba3 Dead code removals
  • c656d3f Remove unnecessary #[path ..] constructs
  • 27c3959 Remove unnecessary #[path ..] constructs
  • 6f74db4 Improve code quality of budget.rs
  • Additional commits viewable in compare view

Updates rustls from 0.23.40 to 0.23.41

Commits
  • 642a103 ci: drop Taplo job
  • 752c144 Drop nightly clippy tests
  • 8d8611a Fix new clippy::useless-borrows-in-formatting
  • ebf3297 Fix new clippy::manual_clear
  • 46808e7 ci: sync cargo-check-external-types nightly
  • 041a8d2 Cargo deny: allow RUSTSEC-2026-0173
  • 62e220e Take semver-compatible dependency updates
  • 3c14696 Upgrade to hickory-resolver 0.26
  • 848a2cc connect-tests: delete ech.rs
  • 5ce9cac Bump version to 0.23.41
  • Additional commits viewable in compare view

Updates turso from 0.7.0-pre.8 to 0.7.0-pre.18

Release notes

Sourced from turso's releases.

v0.7.0-pre.13

Install turso_cli 0.7.0-pre.13

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.13/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.13/turso_cli-installer.ps1 | iex"

Download turso_cli 0.7.0-pre.13

File Platform Checksum
turso_cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
turso_cli-x86_64-apple-darwin.tar.xz Intel macOS checksum
turso_cli-x86_64-pc-windows-msvc.zip x64 Windows checksum
turso_cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
turso_cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.7.0-pre.11

Install turso_cli 0.7.0-pre.11

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.11/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.11/turso_cli-installer.ps1 | iex"
</tr></table>

... (truncated)

Commits
  • 11ab464 Turso 0.7.0-pre.18
  • b07e149 Merge 'core: Fix uuid_str() and uuid_blob() on nullable columns' from Preston...
  • 971beb9 fix handling of uuid_str + uuid_blob funcs called on nullable columns
  • 31f676d Merge 'Fix Issue #7326: BETWEEN in WHERE clause uses the wrong operand's coll...
  • e6498d1 Merge 'core/vdbe: make vec allocations fallible' from Pedro Muniz
  • 8b82845 Merge 'core/translate: propagate fallible Vec allocations' from Pedro Muniz
  • 8081c75 core/vdbe: make vec allocations fallible
  • 826d19c core/translate: make column layout allocation fallible
  • 3441379 core/alloc: keep clone bench inputs live
  • c45ac0b core/alloc: add fallible clones for option and result
  • Additional commits viewable in compare view

Updates turso_core from 0.7.0-pre.8 to 0.7.0-pre.18

Release notes

Sourced from turso_core's releases.

v0.7.0-pre.13

Install turso_cli 0.7.0-pre.13

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.13/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.13/turso_cli-installer.ps1 | iex"

Download turso_cli 0.7.0-pre.13

File Platform Checksum
turso_cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
turso_cli-x86_64-apple-darwin.tar.xz Intel macOS checksum
turso_cli-x86_64-pc-windows-msvc.zip x64 Windows checksum
turso_cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
turso_cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.7.0-pre.11

Install turso_cli 0.7.0-pre.11

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.11/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.11/turso_cli-installer.ps1 | iex"
</tr></table>

... (truncated)

Commits
  • 11ab464 Turso 0.7.0-pre.18
  • b07e149 Merge 'core: Fix uuid_str() and uuid_blob() on nullable columns' from Preston...
  • 971beb9 fix handling of uuid_str + uuid_blob funcs called on nullable columns
  • 31f676d Merge 'Fix Issue #7326: BETWEEN in WHERE clause uses the wrong operand's coll...
  • e6498d1 Merge 'core/vdbe: make vec allocations fallible' from Pedro Muniz
  • 8b82845 Merge 'core/translate: propagate fallible Vec allocations' from Pedro Muniz
  • 8081c75 core/vdbe: make vec allocations fallible
  • 826d19c core/translate: make column layout allocation fallible
  • 3441379 core/alloc: keep clone bench inputs live
  • c45ac0b core/alloc: add fallible clones for option and result
  • Additional commits viewable in compare view

Updates rmcp from 1.7.0 to 2.2.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v2.2.0

Added

  • [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

  • fill missing fully qualified syntax in prompt_handler macros (#866)

Other

  • align README examples with v2 model API (#928)

rmcp-v2.2.0

Added

  • reject auth servers lacking S256 PKCE support (#955)

Fixed

  • pass client conformance suite (#960)
  • don't respond to cancelled requests (#957)
  • fail orphaned streamable HTTP responses on reinit (#914)
  • address 2025-11-25 conformance audit findings (#951)

rmcp-macros-v2.1.0

Added

  • [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

  • fill missing fully qualified syntax in prompt_handler macros (#866)

Other

  • align README examples with v2 model API (#928)

rmcp-v2.1.0

Added

  • add SEP-414 trace context meta accessors (#910)
  • add SEP-2575 meta helpers (#942)

Fixed

  • (transport) make AsyncRwTransport::receive cancel-safe (#941) (#947)
  • (auth) preserve refresh_token when refresh response omits it (#949)
  • block redirect header leaks (#936)
  • don't respond to unparsable messages (#940)

... (truncated)

Commits
  • 5195776 chore: release v2.2.0 (#953)
  • 6dd7b85 chore(deps): update p256 requirement from 0.13 to 0.14 (#959)
  • a037935 fix: pass client conformance suite (#960)
  • dbda50c fix: don't respond to cancelled requests (#957)
  • 45f2f72 fix: fail orphaned streamable HTTP responses on reinit (#914)
  • 95490fa feat: reject auth servers lacking S256 PKCE support (#955)
  • bdf0c32 fix: address 2025-11-25 conformance audit findings (#951)
  • 8e44af4 chore: release v2.1.0 (#950)
  • 4833ec7 fix(transport): make AsyncRwTransport::receive cancel-safe (#941) (#947)
  • 5837e22 fix(auth): preserve refresh_token when refresh response omits it (#949)
  • Additional commits viewable in compare view

Updates sse-stream from 0.2.3 to 0.2.4

Release notes

Sourced from sse-stream's releases.

Release 0.2.4

What's Changed

New Contributors

Full Changelog: 4t145/sse-stream@release-0.2.3...release-0.2.4

Commits

Updates frankenstein from 0.50.0 to 0.50.2

Release notes

Sourced from frankenstein's releases.

0.50.2

What's Changed

New Contributors

Full Changelog: ayrat555/frankenstein@0.50.1...0.50.2

0.50.1

What's Changed

Full Changelog: ayrat555/frankenstein@0.50.0...0.50.1

Changelog

Sourced from frankenstein's changelog.

0.50.2 (2026-07-03)

  • fix: ChatBackground deserialization - #328

0.50.1 (2026-06-20)

  • feat: Bot API 10.1 - #325
Commits

Updates uuid from 1.23.3 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits
  • 3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
  • cba53d0 prepare for 1.23.4 release
  • e347af4 Merge pull request #889 from frostyplanet/main
  • e9bf55c doc: Fix broken link warnings
  • 5351af4 doc: Enable feature flag label for docs.rs
  • 1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
  • c9619f6 fix up name of fuzz script in readme
  • See full diff in compare view

Updates cron from 0.16.0 to 0.17.0

Commits

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)
Commits
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • See full diff in compare view

Updates arc-swap from 1.9.1 to 1.9.2

Changelog

Sourced from arc-swap's changelog.

1.9.2

  • Document RefCnt must not panic (#208).
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 8, 2026
@dependabot
chore(deps): bump the prod-deps group across 1 directory with 12 updates
0ec6aef 
Bumps the prod-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde-saphyr](https://github.com/bourumir-wyngs/serde-saphyr) | `0.0.27` | `0.0.29` |
| [rustls](https://github.com/rustls/rustls) | `0.23.40` | `0.23.41` |
| [turso](https://github.com/tursodatabase/turso) | `0.7.0-pre.8` | `0.7.0-pre.18` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.7.0` | `2.2.0` |
| [sse-stream](https://github.com/4t145/sse-stream) | `0.2.3` | `0.2.4` |
| [frankenstein](https://github.com/ayrat555/frankenstein) | `0.50.0` | `0.50.2` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.23.3` | `1.23.4` |
| [cron](https://github.com/zslayton/cron) | `0.16.0` | `0.17.0` |
| [rand](https://github.com/rust-random/rand) | `0.10.1` | `0.10.2` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` |
| [arc-swap](https://github.com/vorner/arc-swap) | `1.9.1` | `1.9.2` |



Updates `serde-saphyr` from 0.0.27 to 0.0.29
- [Release notes](https://github.com/bourumir-wyngs/serde-saphyr/releases)
- [Commits](bourumir-wyngs/serde-saphyr@0.0.27...0.0.29)

Updates `rustls` from 0.23.40 to 0.23.41
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.40...v/0.23.41)

Updates `turso` from 0.7.0-pre.8 to 0.7.0-pre.18
- [Release notes](https://github.com/tursodatabase/turso/releases)
- [Changelog](https://github.com/tursodatabase/turso/blob/main/CHANGELOG.md)
- [Commits](tursodatabase/turso@v0.7.0-pre.8...v0.7.0-pre.18)

Updates `turso_core` from 0.7.0-pre.8 to 0.7.0-pre.18
- [Release notes](https://github.com/tursodatabase/turso/releases)
- [Changelog](https://github.com/tursodatabase/turso/blob/main/CHANGELOG.md)
- [Commits](tursodatabase/turso@v0.7.0-pre.8...v0.7.0-pre.18)

Updates `rmcp` from 1.7.0 to 2.2.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.7.0...rmcp-v2.2.0)

Updates `sse-stream` from 0.2.3 to 0.2.4
- [Release notes](https://github.com/4t145/sse-stream/releases)
- [Commits](4t145/sse-stream@release-0.2.3...release-0.2.4)

Updates `frankenstein` from 0.50.0 to 0.50.2
- [Release notes](https://github.com/ayrat555/frankenstein/releases)
- [Changelog](https://github.com/ayrat555/frankenstein/blob/master/CHANGELOG.md)
- [Commits](ayrat555/frankenstein@0.50.0...0.50.2)

Updates `uuid` from 1.23.3 to 1.23.4
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.23.3...v1.23.4)

Updates `cron` from 0.16.0 to 0.17.0
- [Release notes](https://github.com/zslayton/cron/releases)
- [Commits](https://github.com/zslayton/cron/commits)

Updates `rand` from 0.10.1 to 0.10.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.1...0.10.2)

Updates `anyhow` from 1.0.102 to 1.0.103
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.102...1.0.103)

Updates `arc-swap` from 1.9.1 to 1.9.2
- [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vorner/arc-swap/commits)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.103
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: arc-swap
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: cron
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: frankenstein
  dependency-version: 0.50.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: rmcp
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: rustls
  dependency-version: 0.23.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: serde-saphyr
  dependency-version: 0.0.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: sse-stream
  dependency-version: 0.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: turso
  dependency-version: 0.7.0-pre.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: turso_core
  dependency-version: 0.7.0-pre.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: uuid
  dependency-version: 1.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/prod-deps-c70a085eb1 branch from eb3c53f to 0ec6aef Compare July 9, 2026 07:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants