[dependabot]

Bumps the cargo group with 9 updates in the / directory:

Package	From	To
aws-config	1.12.0	1.13.0
aws-sdk-autoscaling	1.135.0	1.140.0
aws-sdk-ec2	1.268.0	1.275.0
aws-sdk-eks	1.154.0	1.160.0
aws-sdk-servicequotas	1.116.0	1.121.0
globset	0.4.20	0.4.21
k8s-openapi	0.28.0	0.29.0
kube	4.2.0	5.0.0
tokio	1.53.3	1.54.1

Updates aws-config from 1.12.0 to 1.13.0

Commits

• See full diff in compare view

Updates aws-sdk-autoscaling from 1.135.0 to 1.140.0

Commits

• See full diff in compare view

Updates aws-sdk-ec2 from 1.268.0 to 1.275.0

Commits

• See full diff in compare view

Updates aws-sdk-eks from 1.154.0 to 1.160.0

Commits

• See full diff in compare view

Updates aws-sdk-servicequotas from 1.116.0 to 1.121.0

Commits

• See full diff in compare view

Updates globset from 0.4.20 to 0.4.21

Commits

• 55f2f69 globset-0.4.21
• 65e072f ignore: respect linked worktree excludes without requiring Git
• d19650f globset: match filename-only regexes against basenames
• 9d07a92 ignore: reuse incremental matchers for directories without rules
• 6892bc2 ignore: use byte keys for incremental parent lookups
• 1752fb7 globset: reject impossible literal lengths before hashing
• 2d4fa85 ignore: skip empty absolute parent matchers (#3557)
• b5611fc ignore: reuse parent repository detection
• c5e744c ignore: avoid scratch pools for empty matchers
• fada8f9 ignore: benchmark Python workspace discovery and matching (#3554)
• Additional commits viewable in compare view

Updates k8s-openapi from 0.28.0 to 0.29.0

Release notes

Sourced from k8s-openapi's releases.

v0.29.0

k8s-openapi

• BREAKING CHANGE: Added support for Kubernetes 1.37 under the v1_37 feature.

• BREAKING CHANGE: Dropped support for Kubernetes 1.32.

• BREAKING CHANGE: schemars v0.8 support has been removed again.

• Some, but not all, resource types have non-Optional spec fields in v1.37, due to a Kubernetes upstream change. It is likely that eventually all spec fields will become non-optional, but currently upstream has only made partial progress towards this. k8s-openapi normally backports such fixes to old versions, but given the partial nature of upstream's change and uncertainty of its scope, this has not been backported as of now.

Corresponding Kubernetes API server versions:

• v1.33.13
• v1.34.13
• v1.35.10
• v1.36.6
• v1.37.2

k8s-openapi-codegen-common

• FEATURE: schemars v0.8 support has been removed again.

k8s-openapi-derive

• FEATURE: schemars v0.8 support has been removed again.

Changelog

Sourced from k8s-openapi's changelog.

v0.29.0 (2026-10-27)

k8s-openapi

• BREAKING CHANGE: Added support for Kubernetes 1.37 under the v1_37 feature.

• BREAKING CHANGE: Dropped support for Kubernetes 1.32.

• BREAKING CHANGE: schemars v0.8 support has been removed again.

• Some, but not all, resource types have non-Optional spec fields in v1.37, due to a Kubernetes upstream change. It is likely that eventually all spec fields will become non-optional, but currently upstream has only made partial progress towards this. k8s-openapi normally backports such fixes to old versions, but given the partial nature of upstream's change and uncertainty of its scope, this has not been backported as of now.

Corresponding Kubernetes API server versions:

• v1.33.13
• v1.34.13
• v1.35.10
• v1.36.6
• v1.37.2

k8s-openapi-codegen-common

• FEATURE: schemars v0.8 support has been removed again.

k8s-openapi-derive

• FEATURE: schemars v0.8 support has been removed again.

---

Commits

• ec1be51 v0.29.0
• bf4c9f3 Fix new clippy lint about assert!(.is_empty()).
• c8a38b0 Update to v1.34.13, v1.35.10, v1.36.6, v1.37.2
• e1ad9af Update to E2024.
• 68a3d34 Remove schemars v0.8 support again.
• d5b24a5 Update to v1.34.12, v1.35.9, v1.36.5, v1.37.1
• b606f6b Update kind to v0.33.0
• 155d094 Add v1.37 and drop v1.32
• 3aba016 Update to v1.34.11, v1.35.8, v1.36.4
• 7c68a07 Update to v1.34.10, v1.35.7, v1.36.3
• See full diff in compare view

Updates kube from 4.2.0 to 5.0.0

Release notes

Sourced from kube's releases.

5.0.0

New Major

As per the release schedule to match up with the latest Kubernetes Garhwal release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_37 support via k8s-openapi 0.29

Please upgrade k8s-openapi along with kube to avoid conflicts.

Semver Breaking Upgrades

Upgrades to several other important libraries that we couldn't do until the major. These include tower-http@0.7, serde-saphyr@2, syn@3, base64@0.23 , pem@4,

Important Additions

A new Api::dynamic ctor has been added as well as Api::constrain* methods to change an Api's namespace. Simplifies Api handling when dealing with discovery;

// before
let api: Api<DynamicObject> = if caps.scope == Scope::Cluster {
    Api::all_with(client.clone(), &ar)
} else {
    Api::default_namespaced_with(client.clone(), &ar)
};
// after
let api: Api<DynamicObject> = Api::dynamic(client.clone(), &ar, &caps.scope).constrain_default();

• #[kube(no_spec)] to support non-standard crs without a .spec; kube-rs/kube#2071
• A DynamicObject can now be used to perform a discovery::resolve_object lookup; kube-rs/kube#2031

Custom client can now use a customizable executor to deal with different lifestyle semantics of spans. Really hairy issue propagated through multiple repos.

Fixes

Many fixes this release worth checking below. Of particular importance;

Watcher Fixes

Two important ones; EOF recovery + missing init for the new (not-yet-default) StreamingList watch mode. Watcher also allows longer watches now.

Errors + Docs

Many smaller fixes to improve error handling; their accuracy, management of the Error size, and what to print.

Notable new docs on advanced finalizer pitfalls.

Internals

As usual there's a lot of ongoing work that improves internal ergonomics and maintainability that is normally hidden from the changelog.

In particular this release, a special thank you to @​daemonfire300 for the new test suite for advanced watcher specifics, which allows us to test more complicated watcher edge cases (including one of the fixes above).

... (truncated)

Changelog

Sourced from kube's changelog.

5.0.0 / 2026-11-01

New Major

As per the release schedule to match up with the latest Kubernetes Garhwal release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_37 support via k8s-openapi 0.29

Please upgrade k8s-openapi along with kube to avoid conflicts.

Semver Breaking Upgrades

Upgrades to several other important libraries that we couldn't do until the major. These include tower-http@0.7, serde-saphyr@2, syn@3, base64@0.23 , pem@4,

Important Additions

A new Api::dynamic ctor has been added as well as Api::constrain* methods to change an Api's namespace. Simplifies Api handling when dealing with discovery;

// before
let api: Api<DynamicObject> = if caps.scope == Scope::Cluster {
    Api::all_with(client.clone(), &ar)
} else {
    Api::default_namespaced_with(client.clone(), &ar)
};
// after
let api: Api<DynamicObject> = Api::dynamic(client.clone(), &ar, &caps.scope).constrain_default();

• #[kube(no_spec)] to support non-standard crs without a .spec; kube-rs/kube#2071
• A DynamicObject can now be used to perform a discovery::resolve_object lookup; kube-rs/kube#2031

Custom client can now use a customizable executor to deal with different lifestyle semantics of spans. Really hairy issue propagated through multiple repos.

Fixes

Many fixes this release worth checking below. Of particular importance;

Watcher Fixes

Two important ones; EOF recovery + missing init for the new (not-yet-default) StreamingList watch mode. Watcher also allows longer watches now.

Errors + Docs

Many smaller fixes to improve error handling; their accuracy, management of the Error size, and what to print.

Notable new docs on advanced finalizer pitfalls.

Internals

As usual there's a lot of ongoing work that improves internal ergonomics and maintainability that is normally hidden from the changelog.

In particular this release, a special thank you to @​daemonfire300 for the new test suite for advanced watcher specifics, which allows us to test more complicated watcher edge cases (including one of the fixes above).

... (truncated)

Commits

• 54a3128 release 5.0.0
• 4263e79 readme bumps
• 212d718 Remove deprecated alias for EventFlated (#2124)
• 28e3d13 Attach the event cache test to a different object (#2123)
• 9cf4d06 Group proxy with the other transport features in cargo-hack (#2105)
• b194763 update k8s-openapi to 0.29 (#2120)
• 4610180 fix(config): populate missing impersonation headers (#2116)
• 80de5bf Expose hyper-timeout's reset_reader_on_write config (#2111)
• 1f316bb Drop redundant status field from AuthError::AuthExecRun (#2099)
• debe79e fix: emit Event::Init when a StreamingList initial watch opens (#2118)
• Additional commits viewable in compare view

Updates tokio from 1.53.3 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

• time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

• fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
• net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
• runtime: add Builder::max_io_events_per_busy_tick (#8410)
• runtime: stabilize tokio::runtime::worker_index() (#8431)
• sync: add SemaphorePermit::semaphore() (#8482)
• sync: add blocking_acquire methods to Semaphore (#8269)
• sync: add watch::Receiver::is_closed (#8481)
• wasm: support JSPI for Emscripten target (#8285, #8627)
• wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

• fs: reject zero in File::set_max_buf_size (#8449)
• io: make copy_buf cooperative (#8459)
• io: panic when BufReader or BufStream is created with zero capacity (#8494)
• io: panic when in-memory pipe is created with zero capacity (#8397)
• io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
• io: support vectored writes in Sink (#8663)
• net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
• net: start accepted sockets as readable and writable (#8435)
• net: support UCred on Fuchsia (#8257)
• process: use mio::unix::pipe for Unix child stdio (#8603)
• runtime: cache-pad the shared injection queue and idle state (#8622)
• runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
• runtime: make enable_io available whenever rt is enabled (#8387)
• runtime: move block_in_place setup into a non-generic function (#8315)
• runtime: move the multi-thread inject queue to its own mutex (#8382)
• runtime: panic when max_io_events_per_tick is zero (#8476)
• runtime: suggest .await in nested block_on panic message (#8501)
• sync: avoid atomic reader count in broadcast slots (#8357)
• sync: use acquire/release orderings in Notify (#8325)
• time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

• b53b200 chore: prepare Tokio v1.54.1 (#8693)
• 5ed619b time: revert "remove the runtime handle from timers" (#8692)
• 66d34e4 chore: prepare Tokio v1.54.0 (#8667)
• 0d322ce io: support vectored writes in sink (#8663)
• 4167c56 codec: expose I/O sources from codec errors (#8665)
• cdd9dae fs: propagate iouring stress test failures (#8644)
• 52ac781 ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)
• 4890d02 stream: implement FusedStream for JoinSetStream (#8629)
• a6bd8e1 wasm: check Emscripten version when using JSPI (#8627)
• 9dd749d Merge 'tokio-1.53.3' into 'master' (#8641)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions