Skip to content

build(deps): bump the cargo-dependencies group across 1 directory with 6 updates#136

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-aa43489717
Closed

build(deps): bump the cargo-dependencies group across 1 directory with 6 updates#136
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-aa43489717

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 14, 2026

Bumps the cargo-dependencies group with 6 updates in the / directory:

Package From To
anyhow 1.0.100 1.0.102
tokio 1.49.0 1.52.3
metrics 0.24.5 0.24.6
pin-project 1.1.10 1.1.13
tower-http 0.6.8 0.6.10
utoipa 5.4.0 5.5.0

Updates anyhow from 1.0.100 to 1.0.102

Release notes

Sourced from anyhow's releases.

1.0.102

1.0.101

Commits
  • 5c657b3 Release 1.0.102
  • e737fb6 Merge pull request #442 from dtolnay/backtrace
  • 7fe62b5 Further simply backtrace conditional compilation
  • c8cb5ca Merge pull request #441 from dtolnay/backtrace
  • de27df7 Delete CI use of --features=backtrace
  • 9b67e5d Merge pull request #440 from dtolnay/backtrace
  • efdb11a Simplify std_backtrace conditional code
  • b8a9a70 Merge pull request #439 from dtolnay/backtrace
  • a42fc2c Remove feature = "backtrace" conditional code
  • 2a2a3ce Re-word backtrace feature comment
  • Additional commits viewable in compare view

Updates tokio from 1.49.0 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

  • sync: fix underflow in mpsc channel len() (#8062)
  • sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
  • sync: require that an RwLock has max_readers != 0 (#8076)
  • sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

  • runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

  • io: AioSource::register_borrowed for I/O safety support (#7992)
  • net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

  • runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)
  • taskdump: add trace_with() for customized task dumps (#8025)
  • taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)
  • fs: support io_uring in AsyncRead for File (#7907)

... (truncated)

Commits

Updates metrics from 0.24.5 to 0.24.6

Commits
  • 23cc597 chore: Release
  • 78ebfc3 revert: defer version bumps to cargo-release
  • 8d7f5ea update CHANGELOG for metrics
  • cd5b9a3 chore(metrics): update doc comments for macros for consistency
  • 9cf1f73 fix(metrics): resolve hash mismatch between pre-computed and on-demand key ha...
  • 2bfe3ba enhancement(metrics): allow specifying description and unit in registration m...
  • dae3a67 chore: Release
  • 6dddb64 update CHANGELOG for metrics-exporter-dogstatsd
  • 9e387a4 chore: Release
  • f21d811 update CHANGELOG for metrics-exporter-prometheus
  • Additional commits viewable in compare view

Updates pin-project from 1.1.10 to 1.1.13

Release notes

Sourced from pin-project's releases.

1.1.13

  • Suppress clippy::missing_trait_methods lint in generated code.

1.1.12

  • Documentation improvements.

1.1.11

Changelog

Sourced from pin-project's changelog.

[1.1.13] - 2026-05-13

  • Suppress clippy::missing_trait_methods lint in generated code.

[1.1.12] - 2026-05-05

  • Documentation improvements.

[1.1.11] - 2026-02-27

Commits

Updates tower-http from 0.6.8 to 0.6.10

Release notes

Sourced from tower-http's releases.

tower-http-0.6.10

Added

  • follow-redirect: expose Attempt::method() and Attempt::previous_method() so redirect policies can react to method changes across redirects (e.g. POST to GET on 301/303) (#559)

Fixed

  • Restore tokio and async-compression as no-op features. These will be removed next breaking release (#667)

#559: tower-rs/tower-http#559 #667: tower-rs/tower-http#667

What's Changed

New Contributors

Full Changelog: tower-rs/tower-http@tower-http-0.6.9...tower-http-0.6.10

tower-http-0.6.9

Added:

  • on-early-drop: middleware that detects when a response future or response body is dropped before completion (#636)

    Two events get hooks: the response future being dropped before the inner service produces a response, and the response body being dropped before reaching end-of-stream.

    Install custom callbacks with OnEarlyDropLayer::builder():

    use http::Request;
    use tower_http::on_early_drop::{OnBodyDropFn, OnEarlyDropLayer};
    let layer = OnEarlyDropLayer::builder()
    .on_future_drop(|req: &Request<()>| {
    let uri = req.uri().clone();
    move || eprintln!("future dropped for {}", uri)
    })
    .on_body_drop(OnBodyDropFn::new(|req: &Request<()>| {

... (truncated)

Commits
  • 4532fc2 v0.6.10
  • 8508cb2 follow_redirect: expose previous and next request methods (#559)
  • 890f66a fix gate-ing of atomic64 in tests (#607)
  • 578c2b2 fix: restore tokio and async-compression as no-op features (#667)
  • eab7cbf v0.6.9
  • 9c64770 feat(on-early-drop): Add middleware for client early drop detection (#636)
  • 67786ff ci: Remove unnecessary protoc setup (#665)
  • e442e2b examples: Use axum::body::to_bytes (#650)
  • 218fe6b Make AsyncReadBody::with_capacity public (#415)
  • ffd4d7c trace: adds back call to classify_eos on trailers (#483)
  • Additional commits viewable in compare view

Updates utoipa from 5.4.0 to 5.5.0

Release notes

Sourced from utoipa's releases.

utoipa-5.5.0

What's New 💎 🆕 🎉

Full change log

utoipa-gen-5.5.0

What's New 💎 🆕 🎉

Full change log

Commits

Summary by CodeRabbit

  • Chores
    • Updated metrics dependency across agent and runtime packages.
    • Updated tower-http and utoipa dependencies to latest patch and minor versions.

Review Change Stack

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 14, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 14, 2026

📝 Walkthrough

Walkthrough

Bumps dependency versions: metrics 0.24.5→0.24.6 in pulsebeam-agent, pulsebeam-runtime, and workspace root; additionally tower-http 0.6.8→0.6.10 and utoipa 5.4.0→5.5.0 in the workspace root Cargo.toml.

Changes

Dependency Version Bumps

Layer / File(s) Summary
Workspace dependency bumps
pulsebeam-agent/Cargo.toml, pulsebeam-runtime/Cargo.toml, pulsebeam/Cargo.toml
Update metrics from 0.24.5→0.24.6 across three packages; update tower-http 0.6.8→0.6.10 and utoipa 5.4.0→5.5.0 in pulsebeam/Cargo.toml.

🎯 2 (Simple) | ⏱️ ~10 minutes

🐰 A tiny hop, the versions climb,
Dependencies fresh, one bump at a time,
Metrics, Tower, Utoipa cheer,
New numbers make the build feel clear,
A soft thump of code — rejoice, little gear.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately reflects the main objective: bumping multiple Cargo dependencies across the repository with 6 updates as a dependency maintenance PR.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/cargo/cargo-dependencies-aa43489717

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

…h 6 updates

Bumps the cargo-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.102` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.52.3` |
| [metrics](https://github.com/metrics-rs/metrics) | `0.24.5` | `0.24.6` |
| [pin-project](https://github.com/taiki-e/pin-project) | `1.1.10` | `1.1.13` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.6.8` | `0.6.10` |
| [utoipa](https://github.com/juhaku/utoipa) | `5.4.0` | `5.5.0` |



Updates `anyhow` from 1.0.100 to 1.0.102
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.100...1.0.102)

Updates `tokio` from 1.49.0 to 1.52.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.52.3)

Updates `metrics` from 0.24.5 to 0.24.6
- [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml)
- [Commits](metrics-rs/metrics@metrics-v0.24.5...metrics-v0.24.6)

Updates `pin-project` from 1.1.10 to 1.1.13
- [Release notes](https://github.com/taiki-e/pin-project/releases)
- [Changelog](https://github.com/taiki-e/pin-project/blob/main/CHANGELOG.md)
- [Commits](taiki-e/pin-project@v1.1.10...v1.1.13)

Updates `tower-http` from 0.6.8 to 0.6.10
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.8...tower-http-0.6.10)

Updates `utoipa` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/juhaku/utoipa/releases)
- [Changelog](https://github.com/juhaku/utoipa/blob/master/utoipa-rapidoc/CHANGELOG.md)
- [Commits](juhaku/utoipa@utoipa-5.4.0...utoipa-5.5.0)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: metrics
  dependency-version: 0.24.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: pin-project
  dependency-version: 1.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: tokio
  dependency-version: 1.52.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: tower-http
  dependency-version: 0.6.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: utoipa
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the cargo-dependencies group across 1 directory with 6 updates build(deps): bump the cargo-dependencies group across 1 directory with 6 updates May 15, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/cargo-dependencies-aa43489717 branch from ae6c687 to 083cfa0 Compare May 15, 2026 10:07
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 19, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 19, 2026
@dependabot dependabot Bot deleted the dependabot/cargo/cargo-dependencies-aa43489717 branch May 19, 2026 14:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants