deps: bump the deps-patches group across 1 directory with 18 updates by dependabot[bot] · Pull Request #980 · beyondessential/bestool

dependabot · 2026-10-21T23:58:46Z

Bumps the deps-patches group with 18 updates in the / directory:

Package	From	To
tokio	`1.53.1`	`1.53.3`
tokio-util	`0.7.19`	`0.7.20`
bon	`3.10.1`	`3.10.2`
jiff	`0.2.37`	`0.2.38`
rustls	`0.23.45`	`0.23.46`
serde_json	`1.0.151`	`1.0.154`
sha2	`0.11.0`	`0.11.1`
rustls-native-certs	`0.8.4`	`0.8.5`
binstalk-downloader	`0.13.47`	`0.13.48`
detect-targets	`0.1.92`	`0.1.94`
json5	`1.3.1`	`1.3.2`
uuid	`1.26.1`	`1.28.0`
libc	`0.2.189`	`0.2.190`
bes-canopy-api	`1.1.0`	`1.1.1`
hyper	`1.11.1`	`1.12.0`
pg_query	`6.2.0`	`6.2.1`
redb	`4.3.0`	`4.4.0`
signal-hook	`0.4.4`	`0.4.5`

Updates tokio from 1.53.1 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

io: wake and drop DuplexStream wakers outside the lock (#8618)

macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)

runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)

sync: wake waiters outside the lock when closing a semaphore (#8529)

test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)

io: revert "always cleanup AsyncFd registration list on deregister" (#8540)

process: unregister Windows wait before closing child handle (#8564)

rt: drop blocking pool mutex before shutting down rejected task (#8562)

sync: fix mpsc index wraparound in block reclamation (#8546)

sync: forget mpsc Permit before sending value (#8560)

sync: validate MAX_PERMITS in Semaphore::acquire (#8548)

sync: wake broadcast Sender::closed outside mutex (#8558)

task: drop replaced waker outside lock in JoinSet (#8554)

time: drop timer lock before dropping waker in clear_entry (#8552)

time: expire timers directly on shutdown without rotating wheel (#8570)

... (truncated)

Commits

a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
482eadd runtime: record time wake when unparking tasks on current thread (#8595)
55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
0448618 sync: make tracing_sync tests synchronous (#8427)
2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
Additional commits viewable in compare view

Updates tokio-util from 0.7.19 to 0.7.20

Commits

5ec9e6b chore: prepare tokio-util v0.7.20 (#8608)
afd1b26 docs: fix stray braces and broken links in rustdoc (#8605)
3eb95a4 wasm: use sleep on emscripten without JSPI (#8528)
b22c802 wasm: link emscripten_promise_await for Emscripten 4.x compatibility (#8528)
16b1f9d ci: pin libc to 0.2.189 on FreeBSD (#8594)
b263675 time: clean up stale Err(Invalid) doc and typo (#8590)
5d5cd8b Merge 'tokio-1.53.2' into 'master' (#8578)
ff0c406 chore: prepare Tokio v1.53.2 (#8580)
a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
ec31a9f chore: prepare Tokio v1.51.5 (#8579)
Additional commits viewable in compare view

Updates bon from 3.10.1 to 3.10.2

Release notes

Sourced from bon's releases.

v3.10.2

Changed

Improve the compile time of the builder macros and the code they generate by ~30% (#405)

Fixed

Fix clippy::missing_docs_in_private_items triggering for field members (#407)

Internal

Regular maintenance (#404, #406, #408)

Commits

19844ca chore: release v3.10.2 (#409)
5cd0135 chore: attribute the old macro bottleneck to the syn parse (#408)
e26222c I asked Claude to research and optimize bon compile times, and it f*cking did...
61fb924 chore(benchmarks): measure builder usage in compilation benchmarks (#406)
8545ded fix: clippy::missing_docs_in_private_items triggering for field members (#407)
42b71f5 Bump miri (#404)
See full diff in compare view

Updates jiff from 0.2.37 to 0.2.38

Changelog

Sourced from jiff's changelog.

0.2.38 (2026-10-06)

This release updates Jiff's bundled copy of the [IANA Time Zone Database] to 2026e. See the 2026e release announcement for more details.

Commits

4ce3e20 0.2.38
bca7bb9 jiff-tzdb-0.1.9
374afc2 jiff-tzdb: update to tzdb 2026e
5416198 doc: include readme in published crate
See full diff in compare view

Updates rustls from 0.23.45 to 0.23.46

Commits

f04804f Delay saving KX hint until handshake confirmation
049d39b Bump version to 0.23.46
6d0ba08 Eliminate secret from impl Debug for ServerSessionValue
2b82b81 unbuffered: update TLS 1.3 traffic keys before exhausting them
74343e7 conn: update TLS 1.3 traffic keys within fragmented writes
795eea7 Advance the HPKE sequence only after seal succeeds
d67cb71 stream: provide backpressure while buffering received plaintext
7a69ade util: fuse flushes from connections with errors
493d089 conn: fuse writes for connections with errors
db00e01 util: keep flushing after short writes
Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

138dc5a Release sha2 v0.11.1 (#927)
cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
7c59cad Update Cargo.lock (#921)
f57b947 streebog: tweak internal implementation (#925)
336611f Fix cargo::manual_readme lint (#924)
1df8877 md2: fix clippy::needless_range_loop lint (#923)
6075989 sha2: fix loading of round constants on AArch64 backends (#922)
eadfd90 Update Cargo.lock (#913)
fa30840 blake2 v0.11.0 (#911)
f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
Additional commits viewable in compare view

Updates rustls-native-certs from 0.8.4 to 0.8.5

Release notes

Sourced from rustls-native-certs's releases.

0.8.5

Avoid unnecessary work by keeping track of duplicate files on Unix systems.

What's Changed

Read each file in cert directories only once by @PeterUlb in rustls/rustls-native-certs#256

Prepare 0.8.5 by @djc in rustls/rustls-native-certs#257

Commits

4bcc4bb Bump version to 0.8.5
2d13547 Take semver-compatible dependency updates
c231965 Read each file in cert directories only once
da7d23d build(deps): bump rustls from 0.23.44 to 0.23.45 in the crates-io group
3f866a2 build(deps): bump rustls from 0.23.43 to 0.23.44 in the crates-io group
e7d065e build(deps): bump rustls-webpki in the crates-io group
1196259 build(deps): bump rustls-webpki in the crates-io group
589e968 build(deps): bump rustls from 0.23.42 to 0.23.43 in the crates-io group
1d93e38 build(deps): bump serial_test from 3.5.0 to 4.0.1 in the crates-io group
a54aba3 build(deps): bump the crates-io group with 2 updates
Additional commits viewable in compare view

Updates binstalk-downloader from 0.13.47 to 0.13.48

Release notes

Sourced from binstalk-downloader's releases.

binstalk-downloader-v0.13.48

Other

Fix zip extraction to prevent absolute path (#2685)

Commits

d17d20f chore: release (#2684)
391d1b8 build(deps): bump minisign-verify from 0.2.5 to 0.3.0 in the deps group (#2690)
218b600 dep: Upgrade transitive dependencies (#2689)
d5ebb4e Fix zip extraction to prevent absolute path (#2685)
f8162f4 feat(cli): add --list and --prune to inspect and reconcile manifests (#2677)
2e63c34 fix: 📌 vergen dep requires MSRV 1.96.0 (#2683)
ad9eafc docs: add crate author guide for supporting binstall (#2682)
1b4ce02 build(deps): bump mathieudutour/github-tag-action from 6.2 to 7 (#2678)
6e2f8ea build(deps): bump taiki-e/install-action from 2.85.3 to 2.87.20 (#2679)
422f309 release: cargo-binstall v1.24.0 (#2676)
See full diff in compare view

Updates detect-targets from 0.1.92 to 0.1.94

Release notes

Sourced from detect-targets's releases.

detect-targets-v0.1.94

Other

update Cargo.lock dependencies

detect-targets-v0.1.93

Other

update Cargo.lock dependencies

Commits

80cb6d7 chore: release (#2697)
30d6416 dep: Upgrade transitive dependencies (#2698)
9b6e098 fix(manifests): parse sparse+ sources in .crates.toml (#2696)
7bebc2e release: cargo-binstall v1.25.1 (#2693)
307bd5f fix(manifest): add zip pkg-fmt overrides for macOS and Windows ARM targets (#...
a29e258 release: cargo-binstall v1.25.0 (#2691)
d17d20f chore: release (#2684)
391d1b8 build(deps): bump minisign-verify from 0.2.5 to 0.3.0 in the deps group (#2690)
218b600 dep: Upgrade transitive dependencies (#2689)
d5ebb4e Fix zip extraction to prevent absolute path (#2685)
Additional commits viewable in compare view

Updates json5 from 1.3.1 to 1.3.2

Commits

3927c81 1.3.2
5a68eed reject unclosed block comment
15ffe98 reject "\9" as invalid escape sequence
2c1721f ok_or_else to avoid quadratic time parsing hex numbers
fd55f90 fix readme example
See full diff in compare view

Updates uuid from 1.26.1 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

Add optional serde format adapters by @RanaPriyansh in uuid-rs/uuid#916

Prepare for 1.28.0 release by @KodrAus in uuid-rs/uuid#918

New Contributors

@RanaPriyansh made their first contribution in uuid-rs/uuid#916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

Accept case-insensitive urn:uuid: prefixes when parsing by @jaideeppyne in uuid-rs/uuid#912

Fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos by @KodrAus in uuid-rs/uuid#915

Prepare for 1.27.0 release by @KodrAus in uuid-rs/uuid#917

New Contributors

@jaideeppyne made their first contribution in uuid-rs/uuid#912

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

Commits

276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
4b3b9f5 prepare for 1.28.0 release
cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
784a022 Inline expected tokens in optional compact serde test
a5678c3 Simplify optional serde adapter tests to option tokens
638a518 Refactor optional serde adapter tests and share byte wrapper
b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
ffd8ec5 prepare for 1.27.0 release
654fa5b Add optional serde format adapters
4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
Additional commits viewable in compare view

Updates libc from 0.2.189 to 0.2.190

Release notes

Sourced from libc's releases.

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)

Linux, NetBSD: Give statvfs a Default impl (#5583)

Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

Expose the libc_unstable_time64 cfg (#5411)

Android, Glibc: Add pthread_gettid_np (#5359)

Android: Add RTLD_NEXT (#5323)

Android: Add reuseport BPF socket options (#5366)

Apple: Add TCP header flags, options and SACK limits (#5358)

Apple: Add NET_RT_DUMP2 (#5442)

Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)

BSD: Add BPF_WORDALIGN (#5320)

BSD: Add lchmod and lchflags where supported (#5400)

BSD: Add minherit and related constants (#4849)

Docs: Add more links to public headers and manual pages (#5407), (#5485)

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)

Linux, NetBSD: Give statvfs a Default impl (#5583)

Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

Expose the libc_unstable_time64 cfg (#5411)

Android, Glibc: Add pthread_gettid_np (#5359)

Android: Add RTLD_NEXT (#5323)

Android: Add reuseport BPF socket options (#5366)

Apple: Add TCP header flags, options and SACK limits (#5358)

Apple: Add NET_RT_DUMP2 (#5442)

Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)

BSD: Add BPF_WORDALIGN (#5320)

BSD: Add lchmod and lchflags where supported (#5400)

BSD: Add minherit and related constants (#4849)

... (truncated)

Commits

7b0ab55 ci: Rename publish_0.2.yml to release.yaml
ac85dde ci: Sync release permissions with main
8f8cd20 libc: Release 0.2.190
052c6e6 changelog: Fix an incorrect commit link
ea19fd7 test: Remove explicit libc version
6dbf3a2 dragonfly: Move INHERIT_ZERO to the freebsd module
8a64766 apple: add posix_spawn_file_actions_add(f)chdir(_np)
28de514 linux, netbsd: Give statvfs a Default impl
a58a95f cygwin: Change POSIX_SPAWN_* flags to c_short
d175264 apple: timeval32 is exhaustive
Additional commits viewable in compare view

Updates bes-canopy-api from 1.1.0 to 1.1.1

Release notes

Sourced from bes-canopy-api's releases.

v1.1.1

Other

update 15 files

Commits

1151f67 release: declare 1.1.1 in the OpenAPI document
b1c8147 chore: release v1.1.1
4a29837 Merge pull request #647 from beyondessential/workhorse/r4
2d729a0 R4: remove card-scoped artefacts before merge
1f3d028 R4: update 15 files
25ad900 R4: update 4 files
1139b8c R4: update certificates spec, update 46 files
603ee60 R4: update 6 specs, update 17 files
92c2465 R4: update 6 specs, update addresses.md
6a8ec9a R4: update 6 specs, update 21 files
Additional commits viewable in compare view

Updates hyper from 1.11.1 to 1.12.0

Release notes

Sourced from hyper's releases.

v1.12.0

Features

http1: add max_header_size limit for server and client (#4183) (d1cd14ef, closes #3832)

Bug Fixes

http1:

withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)

remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)

always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)

let a Connection close token win over a later keep-alive (#4201) (5dadff76)

preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)

http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Everything

docs: fix typo responsibile -> responsible by @vaibhav8a in hyperium/hyper#4177

style: replace single-character lifetime names with descriptive names by @dox4 in hyperium/hyper#4173

refactor(http1): resolve collapsible_match lint by @nakaryo716 in hyperium/hyper#4178

hyper Improvement Proposals by @seanmonstar in hyperium/hyper#4131

perf(body): simpler custom Incoming channel by @seanmonstar in hyperium/hyper#4168

docs(maintainers): add 0x676e67 as a collaborator by @seanmonstar in hyperium/hyper#4184

fix(ext): remove broken OriginalHeaderOrder doctest by @cratelyn in hyperium/hyper#4188

build(deps): remove unused futures-channel from http1 feature by @0x676e67 in hyperium/hyper#4185

chore(ci): update to cargo-check-external-types 0.5.0 by @tottoto in hyperium/hyper#4189

style(lib): address ignored_unit_patterns lint by @nakaryo716 in hyperium/hyper#4193

Preserve hop-by-hop when setting close or keep-alive by @dtolnay in hyperium/hyper#4196

fix(http2): do not reserve capacity for idle Upgraded streams by @Dev-next-gen in hyperium/hyper#4198

style(lib): Address clippy panics and missing_panics_doc lints by @Siech0 in hyperium/hyper#4191

docs: fix typos in capi README, MSRV and governance docs by @toyeshhm in hyperium/hyper#4204

style(lib): Address trivial, low quantity clippy lints. by @Siech0 in hyperium/hyper#4190

chore(clippy): allow clippy lints following 1.99.0 release by @dswij in hyperium/hyper#4219

style: remove useless_borrows_in_formatting from the clippy allowlist by @ump45nose in hyperium/hyper#4220

style(h1): mark partial Debug impls as non-exhaustive by @badimalex in hyperium/hyper#4218

style(lib): Address cast-possible-truncation clippy findings. by @Siech0 in hyperium/hyper#4192

feat(http1): add max_header_size limit for server and client by @Aditya-9-6 in hyperium/hyper#4183

fix(http1): let a Connection close token win over a later keep-alive by @shoemoney in hyperium/hyper#4201

fix(http1): always remove content-length if transfer-encoding is sent by @seanmonstar in hyperium/hyper#4223

fix(http1): remove invalid content-length if transfer-encoding is auto-added by @seanmonstar in hyperium/hyper#4224

fix(http1): withdraw a stale want when the client dispatcher takes a request by @shodoco in hyperium/hyper#4208

perf(body): skip waking a closed peer when a channel end drops by @0x676e67 in hyperium/hyper#4225

Prepare v1.12.0 by @seanmonstar in hyperium/hyper#4226

New Contributors

@vaibhav8a made their first contribution in hyperium/hyper#4177

@dox4 made their first contribution in hyperium/hyper#4173

@dtolnay made their first contribution in hyperium/hyper#4196

@Dev-next-gen made their first contribution in hyperium/hyper#4198

@Siech0 made their first contribution in hyperium/hyper#4191

@toyeshhm made their first contribution in hyperium/hyper#4204

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.12.0 (2026-10-06)

Bug Fixes

http1:

withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)

remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)

always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)

let a Connection close token win over a later keep-alive (#4201) (5dadff76)

preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)

http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Features

http1: add max_header_size limit for server and client (#4183) (d1cd14ef, closes #3832)

Commits

7f67699 v1.12.0
254bf12 perf(body): skip waking a closed peer when a channel end drops (#4225)
c44f1cc fix(http1): withdraw a stale want when the client dispatcher takes a request ...
69396fd fix(http1): remove content-length if transfer-encoding is auto-added (#4224)
a5d7fd7 fix(http1): always remove content-length if transfer-encoding is sent (#4223)
5dadff7 fix(http1): let a Connection close token win over a later keep-alive (#4201)
d1cd14e feat(http1): add max_header_size limit for server and client (#4183)
714c7cf style(lib): address cast-possible-truncation clippy findings (#4192)
0d47440 style(lib): mark partial Debug impls as non-exhaustive (#4218)
da3b1b1 style(lib): remove useless_borrows_in_formatting from the clippy allowlist (#...
Additional commits viewable in compare view

Updates pg_query from 6.2.0 to 6.2.1

Changelog

Sourced from pg_query's changelog.

6.2.1 2026-09-30

Upgrade to libpg_query 17-6.2.5

Security fix: Heap out-of-bounds write and read in pg_query_normalize (GHSA-6ggm-xmc9-8ffg)

Deparser:

Add strict checking for unexpected pointer values

Preserve parentheses around subscripted array constructors

This prevents (ARRAY[...])[...] from being deparsed as invalid SQL

Fix handling of constraint key named value<... Description has been truncated

Bumps the deps-patches group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.3` | | [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` | | [bon](https://github.com/elastio/bon) | `3.10.1` | `3.10.2` | | [jiff](https://github.com/BurntSushi/jiff) | `0.2.37` | `0.2.38` | | [rustls](https://github.com/rustls/rustls) | `0.23.45` | `0.23.46` | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [rustls-native-certs](https://github.com/rustls/rustls-native-certs) | `0.8.4` | `0.8.5` | | [binstalk-downloader](https://github.com/cargo-bins/cargo-binstall) | `0.13.47` | `0.13.48` | | [detect-targets](https://github.com/cargo-bins/cargo-binstall) | `0.1.92` | `0.1.94` | | [json5](https://github.com/callum-oakley/json5-rs) | `1.3.1` | `1.3.2` | | [uuid](https://github.com/uuid-rs/uuid) | `1.26.1` | `1.28.0` | | [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.190` | | [bes-canopy-api](https://github.com/beyondessential/canopy) | `1.1.0` | `1.1.1` | | [hyper](https://github.com/hyperium/hyper) | `1.11.1` | `1.12.0` | | [pg_query](https://github.com/pganalyze/pg_query.rs) | `6.2.0` | `6.2.1` | | [redb](https://github.com/cberner/redb) | `4.3.0` | `4.4.0` | | [signal-hook](https://github.com/vorner/signal-hook) | `0.4.4` | `0.4.5` | Updates `tokio` from 1.53.1 to 1.53.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.3) Updates `tokio-util` from 0.7.19 to 0.7.20 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20) Updates `bon` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/elastio/bon/releases) - [Changelog](https://github.com/elastio/bon/blob/master/release-plz.toml) - [Commits](elastio/bon@v3.10.1...v3.10.2) Updates `jiff` from 0.2.37 to 0.2.38 - [Release notes](https://github.com/BurntSushi/jiff/releases) - [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md) - [Commits](BurntSushi/jiff@jiff-static-0.2.37...jiff-static-0.2.38) Updates `rustls` from 0.23.45 to 0.23.46 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.45...v/0.23.46) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `rustls-native-certs` from 0.8.4 to 0.8.5 - [Release notes](https://github.com/rustls/rustls-native-certs/releases) - [Commits](rustls/rustls-native-certs@v/0.8.4...v/0.8.5) Updates `binstalk-downloader` from 0.13.47 to 0.13.48 - [Release notes](https://github.com/cargo-bins/cargo-binstall/releases) - [Changelog](https://github.com/cargo-bins/cargo-binstall/blob/main/release-plz.toml) - [Commits](cargo-bins/cargo-binstall@binstalk-downloader-v0.13.47...binstalk-downloader-v0.13.48) Updates `detect-targets` from 0.1.92 to 0.1.94 - [Release notes](https://github.com/cargo-bins/cargo-binstall/releases) - [Changelog](https://github.com/cargo-bins/cargo-binstall/blob/main/release-plz.toml) - [Commits](cargo-bins/cargo-binstall@detect-targets-v0.1.92...detect-targets-v0.1.94) Updates `json5` from 1.3.1 to 1.3.2 - [Release notes](https://github.com/callum-oakley/json5-rs/releases) - [Commits](callum-oakley/json5-rs@1.3.1...1.3.2) Updates `uuid` from 1.26.1 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.26.1...v1.28.0) Updates `libc` from 0.2.189 to 0.2.190 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.190/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.189...0.2.190) Updates `bes-canopy-api` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/beyondessential/canopy/releases) - [Changelog](https://github.com/beyondessential/canopy/blob/main/CHANGELOG.md) - [Commits](beyondessential/canopy@bes-canopy-api-v1.1.0...bes-canopy-api-v1.1.1) Updates `hyper` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.11.1...v1.12.0) Updates `pg_query` from 6.2.0 to 6.2.1 - [Changelog](https://github.com/pganalyze/pg_query.rs/blob/main/CHANGELOG.md) - [Commits](pganalyze/pg_query.rs@v6.2.0...v6.2.1) Updates `redb` from 4.3.0 to 4.4.0 - [Release notes](https://github.com/cberner/redb/releases) - [Changelog](https://github.com/cberner/redb/blob/master/CHANGELOG.md) - [Commits](cberner/redb@v4.3.0...v4.4.0) Updates `signal-hook` from 0.4.4 to 0.4.5 - [Changelog](https://github.com/vorner/signal-hook/blob/master/CHANGELOG.md) - [Commits](vorner/signal-hook@v0.4.4...v0.4.5) --- updated-dependencies: - dependency-name: bes-canopy-api dependency-version: 1.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: binstalk-downloader dependency-version: 0.13.48 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: bon dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: detect-targets dependency-version: 0.1.94 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: hyper dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: deps-patches - dependency-name: jiff dependency-version: 0.2.38 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: json5 dependency-version: 1.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: libc dependency-version: 0.2.190 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: pg_query dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: redb dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: deps-patches - dependency-name: rustls dependency-version: 0.23.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: rustls-native-certs dependency-version: 0.8.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: signal-hook dependency-version: 0.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: tokio dependency-version: 1.53.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: tokio-util dependency-version: 0.7.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps-patches - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: deps-patches ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 21, 2026

dependabot Bot force-pushed the dependabot/cargo/deps-patches-481f5429ba branch from ca68266 to 2d14ea8 Compare October 22, 2026 22:33

Navigation Menu

Repository navigation

deps: bump the deps-patches group across 1 directory with 18 updates - #980

deps: bump the deps-patches group across 1 directory with 18 updates#980
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/deps-patches-481f5429ba

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

Changed

Fixed

Fixed (unstable)

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

v3.10.2

Changed

Fixed

Internal

0.2.38 (2026-10-06)

v1.0.154

v1.0.153

v1.0.152

0.8.5

What's Changed

binstalk-downloader-v0.13.48

Other

detect-targets-v0.1.94

Other

detect-targets-v0.1.93

Other

v1.28.0

What's Changed

New Contributors

v1.27.0

What's Changed

New Contributors

0.2.190

Support

Added

0.2.190 - 2026-10-02

Support

Added

v1.1.1

Other

v1.12.0

Features

Bug Fixes

Everything

New Contributors

v1.12.0 (2026-10-06)

Bug Fixes

Features

6.2.1 2026-09-30

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading