deps(cargo): bump the cargo-minor-patch group across 1 directory with 8 updates by dependabot[bot] · Pull Request #29 · KyleHub-Dev/nabe

dependabot · 2026-08-17T06:35:08Z

Bumps the cargo-minor-patch group with 8 updates in the /apps/api directory:

Package	From	To
anyhow	`1.0.102`	`1.0.104`
cookie	`0.18.1`	`0.18.2`
serde	`1.0.228`	`1.0.229`
serde_json	`1.0.149`	`1.0.151`
thiserror	`2.0.18`	`2.0.20`
time	`0.3.47`	`0.3.55`
tokio	`1.52.3`	`1.53.1`
uuid	`1.23.1`	`1.24.0`

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

Update syn dev-dependency to version 3

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

1dbe186 Release 1.0.104
f6479f8 Update to syn 3
5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates cookie from 0.18.1 to 0.18.2

Changelog

Sourced from cookie's changelog.

Version 0.18.2 (Aug 8, 2026)

Changes and Fixes

Stopped using internal time APIs.

Expires parsing is more RFC 6265-compliant.

Weekday prefixes are now optional.

Two-digit years follow the RFC boundary: 69 is 2069 (not 1969).

The manifest now declares rust-version = "1.56".

Commits

1ec8fde New version: 0.18.2.
2b61005 Make weekdays optional when parsing 'Expires'.
d4472e3 Stop using internal time APIs; preserve MSRV.
See full diff in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

de85007 Release 1.0.151
3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
cf16f75 Add RawValue::from_string_unchecked
827a315 Update actions/upload-artifact@v6 -> v7
cea36a5 Update actions/checkout@v6 -> v7
a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

Update to syn 3

Commits

b1d5db5 Release 2.0.20
c4c3ebd Merge pull request #454 from dtolnay/clippy
2266152 Suppress redundant_field_names clippy lint
2901cfd Raise minimum tested compiler to rust 1.88
aa9d91f Update ui tests for version 2.0.19
e13a785 Release 2.0.19
0a0e76c Update to syn 3
ec42ea7 Update actions/upload-artifact@v6 -> v7
4178c4a Update actions/checkout@v6 -> v7
7214e0e Ignore items_after_statements pedantic clippy lint in test
Additional commits viewable in compare view

Updates time from 0.3.47 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

v0.3.54

See the changelog for details.

v0.3.53

See the changelog for details.

v0.3.52

See the changelog for details.

v0.3.51

See the changelog for details.

v0.3.49

See the changelog for details.

v0.3.48

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

Avoid underflow in DateIter::nth, ensuring correct behavior.

Avoid overflow when deserializing timestamps.

Handle out-of-bounds data when deserializing.

Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.

No longer silence errors when deserializing UtcOffset.

OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

0.3.54 [2026-07-20]

Added

PrimitiveDateTime has been renamed to PlainDateTime.

Duration has been renamed to SignedDuration.

Iteration is now possible over Date, Month, and Weekday. Relevant iterator methods have been overridden to ensure maximum performance.

For both PlainDateTime and SignedDuration, a non-deprecated type alias has been added for backwards compatibility. The new names should be preferred.

Changed

The associated metadata type (for powerfmt implementations) for various types has been changed to () and made public. This guarantees that no additional metadata will be present.

Performance

More gains when parsing RFC 2822.

0.3.53 [2026-07-01]

There are no publicly-facing changes in this release. It solely works around the cookie crate relying on an implementation detail of time that was never part of the public API (and thus subject to semver guarantees). The internal API has been reverted to the extent necessary for cookie to compile. This measure is temporary; the internal change will be re-applied in an yet-to-be-determined future release.

0.3.52 [2026-06-30]

Fixed

Subsecond values in the time! macro are parsed using the textual representation, ensuring accuracy. Previously, they were parsed using the floating point representation, which could result

... (truncated)

Commits

857d9c4 v0.3.55 release
2b72fcd Precise feature gating for macro
c1089eb Run check-targets, miri in parallel
f377fad Avoid range-validated ordinal => year in cascade
2eacb0a Report miscellaneous tasks, overall status
29621ac Speed up CI
08de7ba Fix nano-timestamp validation
3c3f046 Fix copy-paste error
3c0c81c Cascade errors when deserializing UtcOffset
c21acd5 Handle more deserializations of SignedDuration
Additional commits viewable in compare view

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

time: fix alt timer cancellation and insertion race (#8252)

Documented

runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)

metrics: add task schedule latency metric (#7986)

net: add SocketAddr methods to Unix sockets (#8144)

Changed

io: add #[inline] to IO trait impls for in-memory types (#8242)

net: implement UCred::pid on FreeBSD (#8086)

net: support Nuttx target os (#8259)

signal: refactor global variables on Windows (#8231)

sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)

taskdump: support taskdumps on s390x (#8192)

time: add #[track_caller] to timeout_at() (#8077)

time: consolidate mutex locks on spurious poll (#8124)

time: defer waker clone on spurious poll (#8107)

time: move lazy-registration state into Sleep (#8132)

tracing: remove unnecessary span clone (#8126)

Fixed

io: do not treat zero-length reads as EOF in Chain (#8251)

net: use getpeereid for QNX peer credentials (#8270)

runtime: avoid illegal state in FastRand (#8078)

sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)

taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)

time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

75fef53 chore: prepare Tokio v1.53.1 (#8303)
ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
91d3b4c time: fix alt timer cancellation and insertion race (#8252)
a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
be689a3 chore: prepare Tokio v1.53.0 (#8294)
50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
efdba5f chore: prepare Tokio v1.52.4 (#8289)
b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
Additional commits viewable in compare view

Updates uuid from 1.23.1 to 1.24.0

Release notes

Sourced from uuid's releases.

v1.24.0

What's Changed

feat(fmt): support encoding into MaybeUninit buffers by @weifanglab in uuid-rs/uuid#892

Prepare for 1.24.0 release by @KodrAus in uuid-rs/uuid#896

New Contributors

@weifanglab made their first contribution in uuid-rs/uuid#892

Full Changelog: uuid-rs/uuid@v1.23.5...v1.24.0

v1.23.5

What's Changed

doc: Fix broken link by @frostyplanet in uuid-rs/uuid#891

perf: Optimize UUID hex parsing and formatting by @geeknoid in uuid-rs/uuid#894

Prepare for 1.23.5 release by @KodrAus in uuid-rs/uuid#895

New Contributors

@geeknoid made their first contribution in uuid-rs/uuid#894

Full Changelog: uuid-rs/uuid@v1.23.4...v1.23.5

v1.23.4

What's Changed

Fix up name of fuzz script in readme by @KodrAus in uuid-rs/uuid#888

document fixes by @frostyplanet in uuid-rs/uuid#889

Prepare for 1.23.4 release by @KodrAus in uuid-rs/uuid#890

New Contributors

@frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

v1.23.3

What's Changed

Fix up parser panic on empty input by @KodrAus in uuid-rs/uuid#886

Prepare for 1.23.3 release by @KodrAus in uuid-rs/uuid#887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

v1.23.2

What's Changed

Improve error messages for ambiguous formats by @KodrAus in uuid-rs/uuid#882

Prepare for 1.23.2 release by @KodrAus in uuid-rs/uuid#883

Full Changelog: uuid-rs/uuid@v1.23.1...v1.23.2

Commits

6a8aeab Merge pull request #896 from uuid-rs/cargo/v1.24.0
e6db8ec prepare for 1.24.0 release
606f236 Merge pull request #892 from weifanglab/main
ab848db feat(fmt): support encoding into MaybeUninit buffers
5dc6b3d Merge pull request #895 from uuid-rs/cargo/v1.23.5
5a7dfe5 prepare for 1.23.5 release
9b4bfc8 Merge pull request #894 from geeknoid/main
5acc5a5 perf: Optimize UUID hex parsing and formatting
6fa1a1e feat(fmt): support encoding into MaybeUninit buffers
1e5d867 Merge pull request #891 from frostyplanet/doc
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 8 updates Bumps the cargo-minor-patch group with 8 updates in the /apps/api directory: | Package | From | To | | --- | --- | --- | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` | | [cookie](https://github.com/SergioBenitez/cookie-rs) | `0.18.1` | `0.18.2` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.20` | | [time](https://github.com/time-rs/time) | `0.3.47` | `0.3.55` | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.1` | `1.24.0` | Updates `anyhow` from 1.0.102 to 1.0.104 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.104) Updates `cookie` from 0.18.1 to 0.18.2 - [Changelog](https://github.com/rwf2/cookie-rs/blob/0.18.2/CHANGELOG.md) - [Commits](rwf2/cookie-rs@0.18.1...0.18.2) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.149 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `thiserror` from 2.0.18 to 2.0.20 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.20) Updates `time` from 0.3.47 to 0.3.55 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.47...v0.3.55) Updates `tokio` from 1.52.3 to 1.53.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1) Updates `uuid` from 1.23.1 to 1.24.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.1...v1.24.0) --- updated-dependencies: - dependency-name: anyhow dependency-version: 1.0.104 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: cookie dependency-version: 0.18.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: thiserror dependency-version: 2.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: time dependency-version: 0.3.55 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.53.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 17, 2026

Navigation Menu

Uh oh!

deps(cargo): bump the cargo-minor-patch group across 1 directory with 8 updates - #29

deps(cargo): bump the cargo-minor-patch group across 1 directory with 8 updates#29
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/apps/api/cargo-minor-patch-fa03594ebe

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026

1.0.104

1.0.103

Version 0.18.2 (Aug 8, 2026)

Changes and Fixes

v1.0.229

v1.0.151

v1.0.150

2.0.20

2.0.19

v0.3.55

v0.3.54

v0.3.53

v0.3.52

v0.3.51

v0.3.49

v0.3.48

0.3.55 [2026-08-01]

Fixed

0.3.54 [2026-07-20]

Added

Changed

Performance

0.3.53 [2026-07-01]

0.3.52 [2026-06-30]

Fixed

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

Fixed (unstable)

Documented

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

Changed

Fixed

v1.24.0

What's Changed

New Contributors

v1.23.5

What's Changed

New Contributors

v1.23.4

What's Changed

New Contributors

v1.23.3

What's Changed

v1.23.2

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants