Skip to content

Bump the cargo group with 3 updates - #425

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-2b1e51223c
Open

Bump the cargo group with 3 updates#425
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-2b1e51223c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 3 updates: tokio, hyper and webpki-roots.

Updates tokio from 1.53.0 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

  • time: fix alt timer cancellation and insertion race (#8252)

Documented

  • runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Commits
  • 75fef53 chore: prepare Tokio v1.53.1 (#8303)
  • ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
  • eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
  • 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
  • a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
  • See full diff in compare view

Updates hyper from 1.10.1 to 1.11.0

Release notes

Sourced from hyper's releases.

v1.11.0

Features

  • rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)

Bug Fixes

All PRs

New Contributors

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.11.0 (2026-07-20)

Bug Fixes

Features

  • rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)
Commits
  • 67ace64 v1.11.0
  • 540fff9 fix(http1): discard content-length header when received before transfer-encod...
  • ccc1e85 feat(rt): add ReadBufCursor::initialized_unfilled() method (#4115)
  • 0ea8bc2 docs(maintainers): move some collaborators to emeriti (#4125)
  • 2fc06fc docs(governance): define Advisor role (#4098)
  • e0d14d1 style(proto): explicitly allow decimal_literal_representation lint (#4117)
  • de1483d fix(http1): use append for repeat trailer values in encoder (#4118)
  • 08c3416 style(headers): small refactor to remove question_mark lint (#4116)
  • aecf5ab fix(http2): avoid buffering Upgraded writes without send capacity (#4102)
  • f584091 fix(http1): allow up to max_headers trailers (#4108)
  • Additional commits viewable in compare view

Updates webpki-roots from 1.0.8 to 1.0.9

Release notes

Sourced from webpki-roots's releases.

1.0.9

Changes:

What's Changed

New Contributors

Full Changelog: rustls/webpki-roots@v/1.0.8...v/1.0.9

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 3 updates: [tokio](https://github.com/tokio-rs/tokio), [hyper](https://github.com/hyperium/hyper) and [webpki-roots](https://github.com/rustls/webpki-roots).


Updates `tokio` from 1.53.0 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.0...tokio-1.53.1)

Updates `hyper` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.10.1...v1.11.0)

Updates `webpki-roots` from 1.0.8 to 1.0.9
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/1.0.8...v/1.0.9)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: hyper
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: webpki-roots
  dependency-version: 1.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants