chore(deps)(deps): Bump the cargo-minor-and-patch group across 1 directory with 4 updates by dependabot[bot] · Pull Request #89 · QAtlasHub/ssh-browser

dependabot · 2026-10-12T21:48:35Z

Bumps the cargo-minor-and-patch group with 4 updates in the / directory: hyper, tokio, tokio-rustls and toml.

Updates hyper from 1.11.1 to 1.12.0

Release notes

v1.12.0

Features

http1: add max_header_size limit for server and client (#4183) (d1cd14ef, closes #3832)

Bug Fixes

http1:

withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)

remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)

always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)

let a Connection close token win over a later keep-alive (#4201) (5dadff76)

preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)

http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Everything

docs: fix typo responsibile -> responsible by @vaibhav8a in hyperium/hyper#4177

style: replace single-character lifetime names with descriptive names by @dox4 in hyperium/hyper#4173

refactor(http1): resolve collapsible_match lint by @nakaryo716 in hyperium/hyper#4178

hyper Improvement Proposals by @seanmonstar in hyperium/hyper#4131

perf(body): simpler custom Incoming channel by @seanmonstar in hyperium/hyper#4168

docs(maintainers): add 0x676e67 as a collaborator by @seanmonstar in hyperium/hyper#4184

fix(ext): remove broken OriginalHeaderOrder doctest by @cratelyn in hyperium/hyper#4188

build(deps): remove unused futures-channel from http1 feature by @0x676e67 in hyperium/hyper#4185

chore(ci): update to cargo-check-external-types 0.5.0 by @tottoto in hyperium/hyper#4189

style(lib): address ignored_unit_patterns lint by @nakaryo716 in hyperium/hyper#4193

Preserve hop-by-hop when setting close or keep-alive by @dtolnay in hyperium/hyper#4196

fix(http2): do not reserve capacity for idle Upgraded streams by @Dev-next-gen in hyperium/hyper#4198

style(lib): Address clippy panics and missing_panics_doc lints by @Siech0 in hyperium/hyper#4191

docs: fix typos in capi README, MSRV and governance docs by @toyeshhm in hyperium/hyper#4204

style(lib): Address trivial, low quantity clippy lints. by @Siech0 in hyperium/hyper#4190

chore(clippy): allow clippy lints following 1.99.0 release by @dswij in hyperium/hyper#4219

style: remove useless_borrows_in_formatting from the clippy allowlist by @ump45nose in hyperium/hyper#4220

style(h1): mark partial Debug impls as non-exhaustive by @badimalex in hyperium/hyper#4218

style(lib): Address cast-possible-truncation clippy findings. by @Siech0 in hyperium/hyper#4192

feat(http1): add max_header_size limit for server and client by @Aditya-9-6 in hyperium/hyper#4183

fix(http1): let a Connection close token win over a later keep-alive by @shoemoney in hyperium/hyper#4201

fix(http1): always remove content-length if transfer-encoding is sent by @seanmonstar in hyperium/hyper#4223

fix(http1): remove invalid content-length if transfer-encoding is auto-added by @seanmonstar in hyperium/hyper#4224

fix(http1): withdraw a stale want when the client dispatcher takes a request by @shodoco in hyperium/hyper#4208

perf(body): skip waking a closed peer when a channel end drops by @0x676e67 in hyperium/hyper#4225

Prepare v1.12.0 by @seanmonstar in hyperium/hyper#4226

New Contributors

@vaibhav8a made their first contribution in hyperium/hyper#4177

@dox4 made their first contribution in hyperium/hyper#4173

@dtolnay made their first contribution in hyperium/hyper#4196

@Dev-next-gen made their first contribution in hyperium/hyper#4198

@Siech0 made their first contribution in hyperium/hyper#4191

@toyeshhm made their first contribution in hyperium/hyper#4204

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.12.0 (2026-10-06)

Bug Fixes

http1:

withdraw a stale want when the client dispatcher takes a request (#4208) (c44f1cc5)

remove content-length if transfer-encoding is auto-added (#4224) (69396fdd)

always remove content-length if transfer-encoding is sent (#4223) (a5d7fd78)

let a Connection close token win over a later keep-alive (#4201) (5dadff76)

preserve hop-by-hop when setting close or keep-alive (#4196) (74a39081)

http2: do not reserve capacity for idle Upgraded streams (#4198) (e89d0d93)

Features

http1: add max_header_size limit for server and client (#4183) (d1cd14ef, closes #3832)

Commits

7f67699 v1.12.0
254bf12 perf(body): skip waking a closed peer when a channel end drops (#4225)
c44f1cc fix(http1): withdraw a stale want when the client dispatcher takes a request ...
69396fd fix(http1): remove content-length if transfer-encoding is auto-added (#4224)
a5d7fd7 fix(http1): always remove content-length if transfer-encoding is sent (#4223)
5dadff7 fix(http1): let a Connection close token win over a later keep-alive (#4201)
d1cd14e feat(http1): add max_header_size limit for server and client (#4183)
714c7cf style(lib): address cast-possible-truncation clippy findings (#4192)
0d47440 style(lib): mark partial Debug impls as non-exhaustive (#4218)
da3b1b1 style(lib): remove useless_borrows_in_formatting from the clippy allowlist (#...
Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)

io: revert "always cleanup AsyncFd registration list on deregister" (#8540)

process: unregister Windows wait before closing child handle (#8564)

rt: drop blocking pool mutex before shutting down rejected task (#8562)

sync: fix mpsc index wraparound in block reclamation (#8546)

sync: forget mpsc Permit before sending value (#8560)

sync: validate MAX_PERMITS in Semaphore::acquire (#8548)

sync: wake broadcast Sender::closed outside mutex (#8558)

task: drop replaced waker outside lock in JoinSet (#8554)

time: drop timer lock before dropping waker in clear_entry (#8552)

time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

fs: clamp io_uring read length to u32::MAX (#8572)

rt: ignore current_thread task dumps from other runtimes (#8544)

rt: preserve io_uring context if a completion waker panics (#8566)

sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)

taskdump: restore deferred leaf wakes during capture (#8445)

time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits

ff0c406 chore: prepare Tokio v1.53.2 (#8580)
a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
ec31a9f chore: prepare Tokio v1.51.5 (#8579)
625c851 sync: assign semaphore permits before emitting tracing event (#8542)
832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
9a47992 process: unregister Windows wait before closing child handle (#8564)
2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
Additional commits viewable in compare view

Updates tokio-rustls from 0.26.5 to 0.26.6

Release notes

Sourced from tokio-rustls's releases.

0.26.6

0.26.5 added an optimization to batch multiple reads which could swallow some errors. Buffer errors so that they propagate to the caller as soon as the caller next reads from the stream.

What's Changed

Buffer and propagate errors from transport by @dtolnay in rustls/tokio-rustls#205

Prepare 0.26.6 by @djc in rustls/tokio-rustls#206

Commits

8aebb7c Bump version to 0.26.6
6f8509a Rename buffered_err to error
bd0494d Buffer and propagate errors from transport
a781340 Add regression test for issue 204
9d0dae6 build(deps): bump rustls from 0.23.44 to 0.23.45
0ad049e build(deps): bump rustls from 0.23.43 to 0.23.44
4f913c7 build(deps): bump rcgen from 0.14.9 to 0.14.10
See full diff in compare view

Updates toml from 1.1.6+spec-1.1.0 to 1.1.8+spec-1.1.0

Commits

ceac6e4 chore: Release
0fe9e93 docs: Update changelog
e3a64aa fix(display): Ensure all keys are encoded (#1245)
76484d0 fix(display): Ensure all keys are encoded
711b1ba refactor(display): Clarify that we are working with encoded keys
4f73ebd test(display): Reproduce the key bug
6c6a5cd fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
9c5e95d fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
4d45944 perf(parser): Remove no-op code (#1243)
189c91c perf(parser): Remove no-op code
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ctory with 4 updates Bumps the cargo-minor-and-patch group with 4 updates in the / directory: [hyper](https://github.com/hyperium/hyper), [tokio](https://github.com/tokio-rs/tokio), [tokio-rustls](https://github.com/rustls/tokio-rustls) and [toml](https://github.com/toml-rs/toml). Updates `hyper` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.11.1...v1.12.0) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2) Updates `tokio-rustls` from 0.26.5 to 0.26.6 - [Release notes](https://github.com/rustls/tokio-rustls/releases) - [Commits](rustls/tokio-rustls@v/0.26.5...v/0.26.6) Updates `toml` from 1.1.6+spec-1.1.0 to 1.1.8+spec-1.1.0 - [Commits](toml-rs/toml@toml-v1.1.6...toml-v1.1.8) --- updated-dependencies: - dependency-name: hyper dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tokio-rustls dependency-version: 0.26.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: toml dependency-version: 1.1.8+spec-1.1.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-12T21:48:38Z

Labels

The following labels could not be found: automated, dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

codecov · 2026-10-12T21:49:43Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

dependabot Bot requested a review from sotashimozono as a code owner October 12, 2026 21:48

sotashimozono merged commit 4bbb843 into main Oct 13, 2026
23 checks passed

dependabot Bot deleted the dependabot/cargo/cargo-minor-and-patch-b775070dc2 branch October 13, 2026 01:49

Navigation Menu

Repository navigation

chore(deps)(deps): Bump the cargo-minor-and-patch group across 1 directory with 4 updates - #89

chore(deps)(deps): Bump the cargo-minor-and-patch group across 1 directory with 4 updates#89
sotashimozono merged 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-b775070dc2

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

codecov Bot commented Oct 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026

v1.12.0

Features

Bug Fixes

Everything

New Contributors

v1.12.0 (2026-10-06)

Bug Fixes

Features

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

Fixed (unstable)

0.26.6

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Labels

Uh oh!

codecov Bot commented Oct 12, 2026

Codecov Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant