deps(rust): bump the cargo-minor group across 1 directory with 11 updates by dependabot[bot] · Pull Request #904 · officialunofficial/mkit

dependabot · 2026-07-27T07:19:03Z

Bumps the cargo-minor group with 11 updates in the /rust directory:

Package	From	To
tokio	`1.52.3`	`1.53.1`
thiserror	`2.0.18`	`2.0.19`
libc	`0.2.186`	`0.2.189`
serde	`1.0.228`	`1.0.229`
serde_json	`1.0.150`	`1.0.151`
card-backend-pcsc	`0.5.1`	`0.5.2`
regex	`1.13.0`	`1.13.1`
futures	`0.3.32`	`0.3.33`
webpki-roots	`1.0.8`	`1.0.9`
clap	`4.6.1`	`4.6.4`
trycmd	`1.2.0`	`1.2.1`

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

time: fix alt timer cancellation and insertion race (#8252)

Documented

runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)

metrics: add task schedule latency metric (#7986)

net: add SocketAddr methods to Unix sockets (#8144)

Changed

io: add #[inline] to IO trait impls for in-memory types (#8242)

net: implement UCred::pid on FreeBSD (#8086)

net: support Nuttx target os (#8259)

signal: refactor global variables on Windows (#8231)

sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)

taskdump: support taskdumps on s390x (#8192)

time: add #[track_caller] to timeout_at() (#8077)

time: consolidate mutex locks on spurious poll (#8124)

time: defer waker clone on spurious poll (#8107)

time: move lazy-registration state into Sleep (#8132)

tracing: remove unnecessary span clone (#8126)

Fixed

io: do not treat zero-length reads as EOF in Chain (#8251)

net: use getpeereid for QNX peer credentials (#8270)

runtime: avoid illegal state in FastRand (#8078)

sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)

taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)

time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

75fef53 chore: prepare Tokio v1.53.1 (#8303)
ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
91d3b4c time: fix alt timer cancellation and insertion race (#8252)
a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
be689a3 chore: prepare Tokio v1.53.0 (#8294)
50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
efdba5f chore: prepare Tokio v1.52.4 (#8289)
b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

Update to syn 3

Commits

e13a785 Release 2.0.19
0a0e76c Update to syn 3
ec42ea7 Update actions/upload-artifact@v6 -> v7
4178c4a Update actions/checkout@v6 -> v7
7214e0e Ignore items_after_statements pedantic clippy lint in test
febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
c50e387 chore: improve thiserror maintenance path
d4a2507 Raise minimum tested compiler to rust 1.85
99e8a6c Unpin CI miri toolchain
9ac165c Pin CI miri to nightly-2026-02-11
Additional commits viewable in compare view

Updates libc from 0.2.186 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)

Linux SPARC: Enable the clone3 syscall (#4980)

Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)

NuttX: Fix wchar_t definition under Arm (#5245)

Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:
RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...
Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:
The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
uClibc now supports a similar configuration option:
RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)

Linux SPARC: Enable the clone3 syscall (#4980)

Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)

NuttX: Fix wchar_t definition under Arm (#5245)

Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:
RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...
Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

uClibc now supports a similar configuration option:

... (truncated)

Commits

ef0906e libc: Release 0.2.189
5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
3e51062 psp: Fix overflowing_literals warnings
e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
63221b3 macros: Require safe in safe_f! invocations
707ab52 macros: Require unsafe in f! invocations
8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
8427909 windows: Add back link names for time-related symbols
b4863fa nuttx: fix wchar_t definition under arm
41c683d nuttx: mirror type definitions
Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

Commits

de85007 Release 1.0.151
3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
cf16f75 Add RawValue::from_string_unchecked
827a315 Update actions/upload-artifact@v6 -> v7
cea36a5 Update actions/checkout@v6 -> v7
See full diff in compare view

Updates card-backend-pcsc from 0.5.1 to 0.5.2

Updates regex from 1.13.0 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

#1354: Fixes previously unsound reverse suffix and inner optimizations.

Commits

2b52759 1.13.1, redux
40e9823 1.13.1
75fcb96 changelog: 1.13.1
64ad0b6 automata: fix bug in reverse suffix/inner optimization
fa91c31 automata: fix a bug caught by Codex review
30390ec automata: formatting tweaks
821a8eb automata: refactor reverse suffix/inner search slightly
10afd70 automata: expose the extracted literals for inner literal extraction
8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
5524f02 test: add regression tests for failed reverse suffix/inner optimizations
Additional commits viewable in compare view

Updates futures from 0.3.32 to 0.3.33

Release notes

Sourced from futures's releases.

0.3.33

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Changelog

Sourced from futures's changelog.

0.3.33 - 2026-07-18

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Commits

89cc254 Release 0.3.33
cd9f5be ci: Update release workflow
d79a499 Resolve rustdoc::broken_intra_doc_links warning
95bbcf8 Resolve rustdoc ambiguous link error
303c165 Resolve rustdoc::redundant_explicit_links warning
f34e3f5 ci: Cleanup
66591a2 Enable Miri for more tests
ab1072f Simplify target_has_atomic cfg in utility crates
cf5d23b Fix unsound compat01as03 implementation (fixes #2514) (#3012)
8ae794f Add portable-atomic-alloc feature and use it in FuturesUnordered (#3007)
Additional commits viewable in compare view

Updates webpki-roots from 1.0.8 to 1.0.9

Release notes

Sourced from webpki-roots's releases.

1.0.9

Changes:

Add "Telia EC TLS Root CA v3" and "Telia RSA TLS Root CA v3" - https://bugzilla.mozilla.org/show_bug.cgi?id=2047804

Add "SECOM TLS ECC Root CA 2024" and "SECOM TLS RSA Root CA 2024" - https://bugzilla.mozilla.org/show_bug.cgi?id=1943001

Remove "Atos TrustedRoot 2011" - https://bugzilla.mozilla.org/show_bug.cgi?id=2017374

What's Changed

Take webpki-root-certs lockfile update by @weifanglab in rustls/webpki-roots#125

1.0.9: upstream updates by @ctz in rustls/webpki-roots#126

New Contributors

@weifanglab made their first contribution in rustls/webpki-roots#125

Full Changelog: rustls/webpki-roots@v/1.0.8...v/1.0.9

Commits

0a553db 1.0.9: upstream updates (#126)
1ce667b Take webpki-root-certs lockfile update (#125)
See full diff in compare view

Updates clap from 4.6.1 to 4.6.4

Release notes

Sourced from clap's releases.

v4.6.4

[4.6.4] - 2026-07-21

Internal

Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.4] - 2026-07-21

Internal

Update to syn v3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Commits

87ec1ad chore: Release
78f2529 docs: Update changelog
b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
74c6666 fix(complete): Keep zsh candidate order
d142d8f Merge pull request #6360 from epage/string
ba89563 style: Prefer explicit string operations
bea966e Merge pull request #6359 from epage/man
b811986 chore(man):Remove unused required-features
0010bf2 Merge pull request #6358 from clap-rs/renovate/crate-ci-typos-1.x
bab9b24 chore(deps): Update compatible (dev) (#6357)
Additional commits viewable in compare view

Updates trycmd from 1.2.0 to 1.2.1

Commits

b568bcd chore: Release
9bcd55c Merge pull request #459 from epage/deps
67c1cd1 chore: Move automod to dev-deps
00732af chore(deps): Update Rust Stable to v1.97 (#458)
9c3ccf6 style: Make clippy happy
e95df8a Merge pull request #457 from epage/cargo
08ad9ba docs(snap): Fix bounds on cargo env support
5ab36e8 Merge pull request #456 from epage/docs
dda19ac docs(snap): Call out adapters
718b87c docs(snap): Call out snapshots earlier
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates Bumps the cargo-minor group with 11 updates in the /rust directory: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` | | [libc](https://github.com/rust-lang/libc) | `0.2.186` | `0.2.189` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` | | card-backend-pcsc | `0.5.1` | `0.5.2` | | [regex](https://github.com/rust-lang/regex) | `1.13.0` | `1.13.1` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.33` | | [webpki-roots](https://github.com/rustls/webpki-roots) | `1.0.8` | `1.0.9` | | [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.4` | | [trycmd](https://github.com/assert-rs/snapbox) | `1.2.0` | `1.2.1` | Updates `tokio` from 1.52.3 to 1.53.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1) Updates `thiserror` from 2.0.18 to 2.0.19 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.19) Updates `libc` from 0.2.186 to 0.2.189 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.189/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.186...0.2.189) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.150 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.150...v1.0.151) Updates `card-backend-pcsc` from 0.5.1 to 0.5.2 Updates `regex` from 1.13.0 to 1.13.1 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.13.0...1.13.1) Updates `futures` from 0.3.32 to 0.3.33 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.32...0.3.33) Updates `webpki-roots` from 1.0.8 to 1.0.9 - [Release notes](https://github.com/rustls/webpki-roots/releases) - [Commits](rustls/webpki-roots@v/1.0.8...v/1.0.9) Updates `clap` from 4.6.1 to 4.6.4 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.4) Updates `trycmd` from 1.2.0 to 1.2.1 - [Commits](assert-rs/snapbox@trycmd-v1.2.0...trycmd-v1.2.1) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.53.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor - dependency-name: thiserror dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor - dependency-name: libc dependency-version: 0.2.189 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor - dependency-name: card-backend-pcsc dependency-version: 0.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor - dependency-name: regex dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor - dependency-name: futures dependency-version: 0.3.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor - dependency-name: webpki-roots dependency-version: 1.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor - dependency-name: clap dependency-version: 4.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor - dependency-name: trycmd dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-27T07:19:04Z

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 27, 2026

dependabot Bot requested a review from a team as a code owner July 27, 2026 07:19

christopherwxyz added the enhancement New feature or request label Jul 27, 2026 — with Claude

christopherwxyz mentioned this pull request Jul 27, 2026

chore(triage): digest — mkit #631

Open

heavygweit assigned dependabot[bot] Jul 28, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps(rust): bump the cargo-minor group across 1 directory with 11 updates - #904

deps(rust): bump the cargo-minor group across 1 directory with 11 updates#904
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust/cargo-minor-9677c177e7

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

Fixed (unstable)

Documented

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

Changed

Fixed

2.0.19

0.2.189

Added

Deprecated

Fixed

0.2.188

Changed

0.2.187

0.2.189 - 2026-07-21

Added

Deprecated

Fixed

0.2.188 - 2026-07-21

Changed

0.2.187 - 2026-07-20

v1.0.229

v1.0.151

1.13.1 (2026-07-15)

0.3.33

0.3.33 - 2026-07-18

1.0.9

What's Changed

New Contributors

v4.6.4

[4.6.4] - 2026-07-21

Internal

v4.6.3

[4.6.3] - 2026-07-20

Fixes

v4.6.2

[4.6.2] - 2026-07-15

Fixes

[4.6.4] - 2026-07-21

Internal

[4.6.3] - 2026-07-20

Fixes

[4.6.2] - 2026-07-15

Fixes

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant