build(deps): bump the version-updates group across 1 directory with 28 updates #1810

dependabot · Dec 1, 2025

Bumps the version-updates group with 26 updates in the / directory:

Package	From	To
actix-web	`4.9.0`	`4.12.0`
alloy-primitives	`1.2.0`	`1.4.1`
anyhow	`1.0.95`	`1.0.100`
blst	`0.3.15`	`0.3.16`
bytes	`1.9.0`	`1.11.0`
chrono	`0.4.39`	`0.4.42`
csv	`1.3.1`	`1.4.0`
curl	`0.4.47`	`0.4.49`
hex-literal	`1.0.0`	`1.1.0`
http	`1.2.0`	`1.4.0`
hyper	`1.5.2`	`1.8.1`
indexmap	`2.7.1`	`2.12.1`
json-patch	`4.0.0`	`4.1.0`
log	`0.4.25`	`0.4.28`
regex	`1.11.1`	`1.12.2`
reqwest-middleware	`0.4.0`	`0.4.2`
ringbuf	`0.4.7`	`0.4.8`
serde_json	`1.0.137`	`1.0.145`
tempfile	`3.20.0`	`3.23.0`
thiserror	`2.0.11`	`2.0.17`
time	`0.3.37`	`0.3.44`
tokio	`1.44.2`	`1.48.0`
tracing	`0.1.41`	`0.1.43`
tracing-subscriber	`0.3.19`	`0.3.22`
uuid	`1.12.1`	`1.16.0`
vergen	`9.0.4`	`9.0.6`

Updates actix-web from 4.9.0 to 4.12.0

Release notes

Sourced from actix-web's releases.

actix-web: v4.12.0

Short announcement

We've started GitHub Sponsors: https://github.com/sponsors/actix Support our development!

v4.12.0

actix_web::response::builder::HttpResponseBuilder::streaming() now sets Content-Type to application/octet-stream if Content-Type does not exist.

actix_web::response::builder::HttpResponseBuilder::streaming() now calls actix_web::response::builder::HttpResponseBuilder::no_chunking() and returns SizedStream if Content-Length is set by user.

Add ws crate feature (on-by-default) which forwards to actix-http and guards some of its ResponseError impls.

⚠️ if you use default-feature = false and the web scoket feature, please make sure you enable the ws feature.

Add public export for EitherExtractError in error module.

actix-web: v4.11.0

Add Logger::log_level() method.

Improve handling of non-UTF-8 header values in Logger middleware.

Add HttpServer::shutdown_signal() method.

Mark HttpServer as #[must_use].

Allow SVG images to be compressed by the Compress middleware.

Ignore Host header in Host guard when connection protocol is HTTP/2.

Re-export mime dependency.

Update brotli dependency to 8.

actix-web: v4.10.2

No significant changes since 4.10.1.

actix-web: v4.10.1

No significant changes since 4.10.0.

actix-web: v4.10.0

Added

Implement Responder for Result<(), E: Into<Error>>. Returning Ok(()) responds with HTTP 204 No Content.

Changed

On Windows, an error is now returned from HttpServer::bind() (or TLS variants) when binding to a socket that's already in use.

Update brotli dependency to 7.

Minimum supported Rust version (MSRV) is now 1.75.

Commits

d119500 release: actix-web v4.12.0 (#3830)
a3f95ee feat: improve HttpResponseBuilder::streaming with SizedStream (#3829)
e1da110 chore: Add public export for EitherExtractError (#3826)
219b988 build(deps): bump taiki-e/install-action from 2.62.46 to 2.62.49 (#3823)
9cf3521 build(deps): bump quote from 1.0.41 to 1.0.42 (#3825)
8b10319 build(deps): bump taiki-e/install-action from 2.62.45 to 2.62.46 (#3820)
d5fae3e chore: rename branch to main (#3821)
e6958cc build(deps): bump taiki-e/install-action from 2.62.38 to 2.62.45 (#3819)
3dd42ee build(deps): bump tokio-util from 0.7.16 to 0.7.17 (#3817)
627af8c chore(gha): setup cargo-deny (#3816)
Additional commits viewable in compare view

Updates alloy-primitives from 1.2.0 to 1.4.1

Release notes

Sourced from alloy-primitives's releases.

alloy-core v1.4.1

Security

Patched: DoS vulnerability on alloy_dyn_abi::TypedData hashing

An uncaught panic triggered by malformed input to alloy_dyn_abi::TypedData could lead to a denial-of-service (DoS) via eip712_signing_hash().

Software with high availability requirements such as network services may be particularly impacted. If in use, external auto-restarting mechanisms can partially mitigate the availability issues unless repeated attacks are possible.

The vulnerability was patched by adding a check to ensure the element is not empty before accessing its first element; an error is returned if it is empty. The fix is included in version v1.4.1 and backported to v0.8.26.

See: GHSA-pgp9-98jm-wwq2

What's Changed

chore: remove feature(doc_auto_cfg) by @DaniPopes in alloy-rs/core#1019

feat(primitives): Add Borsh support for TxKind by @mablr in alloy-rs/core#1022

feat: Add Sqlx Traits for Bytes Type by @Arvmor in alloy-rs/core#1020

chore: fix docs, typos by @DaniPopes in alloy-rs/core#1023

feat(sol-macro): add transient storage keyword support by @AurelienFT in alloy-rs/core#1026

feat: gate 60 tuple impls behind 'more-tuple-impls' feature flag by @DaniPopes in alloy-rs/core#1027

chore: remove some inlines by @DaniPopes in alloy-rs/core#1028

refactor(dyn-abi): clean up Resolver by @DaniPopes in alloy-rs/core#1030

New Contributors

@AurelienFT made their first contribution in alloy-rs/core#1026

Full Changelog: alloy-rs/core@v1.4.0...v1.4.1

alloy-core v1.4.0

What's Changed

feat(primitives): add borsh support by @mablr in alloy-rs/core#993

feat(sol-macro-expander): add name_by_selector method for enum variant retrieval by @mablr in alloy-rs/core#995

chore: typo rollup by @onbjerg in alloy-rs/core#997

feat(primitives): extend implementation of diesel's ToSql to Sqlite for FixedBytes and Address by @xavierm02 in alloy-rs/core#977

feat(sol-macro-expander): add Clone trait to enum contracts containers by @fd0r in alloy-rs/core#1003

fix(sol-types): Fix encode_topic_bytes for byte slices whose length is a non-zero multiple of 32 by @davidsemakula in alloy-rs/core#1000

feat(primitives): bump map deps, wrap DefaultHashBuilder by @DaniPopes in alloy-rs/core#1001

feat(sol-macro): inherit attributes from contract by @DaniPopes in alloy-rs/core#1004

perf(sol-macro): improve abi expansion by @DaniPopes in alloy-rs/core#1005

doc(primitives): inline doc for uint! macro by @0xdapper in alloy-rs/core#1007

feat: Add Sqlx Traits for Signed Type by @Arvmor in alloy-rs/core#1008

fix(sol-macro): remove #[automatically_derived] from non-trait impls by @DaniPopes in alloy-rs/core#1012

feat: rkyv support by @lightsing in alloy-rs/core#990

chore(deps): bumpies by @DaniPopes in alloy-rs/core#1014

fix(sol-macro-expander): propagate all_derives and extra_derives to periphery SC structs by @squadgazzz in alloy-rs/core#1011

chore(sol-types): sync panic reasons from geth by @jsvisa in alloy-rs/core#1015

fix(sol-macro): internal SC derives by @squadgazzz in alloy-rs/core#1017

chore: tweak postgres.rs by @DaniPopes in alloy-rs/core#1018

New Contributors

... (truncated)

Changelog

Sourced from alloy-primitives's changelog.

1.4.1 - 2025-10-14

Features

Gate 60 tuple impls behind 'more-tuple-impls' feature flag (#1027)

[sol-macro] Add transient storage keyword support (#1026)

Add Sqlx Traits for Bytes Type (#1020)

[primitives] Add Borsh support for TxKind (#1022)

Miscellaneous Tasks

Remove some inlines (#1028)

Fix docs, typos (#1023)

Remove feature(doc_auto_cfg) (#1019)

Other

Merge commit from fork

Refactor

[dyn-abi] Clean up Resolver (#1030)

1.4.0 - 2025-09-26

Bug Fixes

[sol-macro] Internal SC derives (#1017)

[sol-macro-expander] Propagate all_derives and extra_derives to periphery SC structs (#1011)

[sol-macro] Remove #[automatically_derived] from non-trait impls (#1012)

[sol-types] Fix encode_topic_bytes for byte slices whose length is a non-zero multiple of 32 (#1000)

Dependencies

[deps] Bumpies (#1014)

Documentation

[primitives] Inline doc for uint! macro (#1007)

Features

Rkyv support (#990)

Add Sqlx Traits for Signed Type (#1008)

[sol-macro] Inherit attributes from contract (#1004)

[primitives] Bump map deps, wrap DefaultHashBuilder (#1001)

[sol-macro-expander] Add Clone trait to enum contracts containers (#1003)

[primitives] Extend implementation of diesel's ToSql to Sqlite for FixedBytes and Address (#977)

[sol-macro-expander] Add name_by_selector method for enum variant retrieval (#995)

[primitives] Add borsh support (#993)

... (truncated)

Commits

f7d4a85 chore: release 1.4.1
5ac01fa refactor(dyn-abi): clean up Resolver (#1030)
7823e9a Merge commit from fork
baa341c chore: remove some inlines (#1028)
2ce9079 feat: gate 60 tuple impls behind 'more-tuple-impls' feature flag (#1027)
6893986 feat(sol-macro): add transient storage keyword support (#1026)
bce535b chore: fix docs, typos (#1023)
534c90e feat: Add Sqlx Traits for Bytes Type (#1020)
4403ac8 feat(primitives): Add Borsh support for TxKind (#1022)
a71f93a chore: remove feature(doc_auto_cfg) (#1019)
Additional commits viewable in compare view

Updates anyhow from 1.0.95 to 1.0.100

Release notes

Sourced from anyhow's releases.

1.0.100

Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#426)

1.0.99

Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#420)

1.0.98

Add self.into_boxed_dyn_error() and self.reallocate_into_boxed_dyn_error_without_backtrace() methods for anyhow::Error (#415)

1.0.97

Documentation improvements

1.0.96

Documentation improvements

Commits

18c2598 Release 1.0.100
f271988 Merge pull request #426 from dtolnay/clippyfmt
52f2115 Mark macros with clippy::format_args
da5fd9d Raise minimum tested compiler to rust 1.76
211e409 Opt in to generate-macro-expansion when building on docs.rs
b48fc02 Enforce trybuild >= 1.0.108
d5f59fb Update ui test suite to nightly-2025-09-07
238415d Update ui test suite to nightly-2025-08-24
3bab070 Update actions/checkout@v4 -> v5
4249254 Order cap-lints flag in the same order as thiserror build script
Additional commits viewable in compare view

Updates blst from 0.3.15 to 0.3.16

Release notes

Sourced from blst's releases.

Release v0.3.16

Essential changes:

lift the limitation for 384-bit modular inversion, which doesn't benefit BLS12-381 applications, but future-proofs blst_t.hpp, a generic interface to assembly modules

harden ptype##s_mult_wbits

tolerate infinity points even in ptype##s_precompute_wbits

smooth some edges in bindings/blst.hpp

add sub_aggregate method to Rust bindings

Commits

e7f90de bindings/rust/Cargo.toml: bump the version number.
3aa4b71 bindings/go/README.md: document core types and methods.
1519e46 blst_t.hpp: fix typos in right shift operators of the blst_256_t.
b83544b bindings/rust/src/lib.rs: add sub_aggregate.
07b109d bindings/rust: switch to sync_channel to optimize memory allocations.
e61acc2 bindings/blst.hpp: smooth some edges.
f48500c multi_scalar.c: tolerate infinity points in ptype##s_precompute_wbits.
7c535f1 ec_mult.h: tolerate low-order points in ptype##_mult_w##SZ.
bd64e91 asm/ct*inverse_mod*.pl: harmonize commentary with implementation.
01d167c multi_scalar.c: preclude out-of-bounds load.
Additional commits viewable in compare view

Updates bytes from 1.9.0 to 1.11.0

Release notes

Sourced from bytes's releases.

Bytes v1.11.0

1.11.0 (November 14th, 2025)

Bump MSRV to 1.57 (#788)

Fixed

fix: BytesMut only reuse if src has remaining (#803)

Specialize BytesMut::put::<Bytes> (#793)

Reserve capacity in BytesMut::put (#794)

Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

Guarantee address in slice() for empty slices. (#780)

Rename Vtable::to_* -> Vtable::into_* (#776)

Fix latest clippy warnings (#787)

Ignore BytesMut::freeze doctest on wasm (#790)

Move drop_fn of from_owner into vtable (#801)

Bytes v1.10.1

1.10.1 (March 5th, 2025)

Fixed

Fix memory leak when using to_vec with Bytes::from_owner (#773)

#773: tokio-rs/bytes#773

Bytes v1.10.0

1.10.0 (February 3rd, 2025)

Added

Add feature to support platforms without atomic CAS (#467)

try_get_* methods for Buf trait (#753)

Implement Buf::chunks_vectored for Take (#617)

Implement Buf::chunks_vectored for VecDeque<u8> (#708)

Fixed

Remove incorrect guarantee for chunks_vectored (#754)

Ensure that tests pass under panic=abort (#749)

Changelog

Sourced from bytes's changelog.

1.11.0 (November 14th, 2025)

Bump MSRV to 1.57 (#788)

Fixed

fix: BytesMut only reuse if src has remaining (#803)

Specialize BytesMut::put::<Bytes> (#793)

Reserve capacity in BytesMut::put (#794)

Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)

Internal changes

Guarantee address in slice() for empty slices. (#780)

Rename Vtable::to_* -> Vtable::into_* (#776)

Fix latest clippy warnings (#787)

Ignore BytesMut::freeze doctest on wasm (#790)

Move drop_fn of from_owner into vtable (#801)

1.10.1 (March 5th, 2025)

Fixed

Fix memory leak when using to_vec with Bytes::from_owner (#773)

1.10.0 (February 3rd, 2025)

Added

Add feature to support platforms without atomic CAS (#467)

try_get_* methods for Buf trait (#753)

Implement Buf::chunks_vectored for Take (#617)

Implement Buf::chunks_vectored for VecDeque<u8> (#708)

Fixed

Remove incorrect guarantee for chunks_vectored (#754)

Ensure that tests pass under panic=abort (#749)

Commits

a7952fb chore: prepare bytes v1.11.0 (#804)
60cbb77 fix: BytesMut only reuse if src has remaining (#803)
7ce330f Move drop_fn of from_owner into vtable (#801)
4b53a29 Tweak BytesMut::remaining_mut (#795)
016fdbd Reserve capacity in BytesMut::put (#794)
ef7f257 Specialize BytesMut::put::<Bytes> (#793)
8b4f54d Ignore BytesMut::freeze doctest on wasm (#790)
16132ad Fix latest clippy warnings (#787)
3e44f88 Bump MSRV to 1.57 (#788)
f29e939 Add some tests for Limit, BytesMut and Reader (#785)
Additional commits viewable in compare view

Updates chrono from 0.4.39 to 0.4.42

Release notes

Sourced from chrono's releases.

0.4.42

What's Changed

Add fuzzer for DateTime::parse_from_str by @tyler92 in chronotope/chrono#1700

Fix wrong amount of micro/milliseconds by @nmlt in chronotope/chrono#1703

Add warning about MappedLocalTime and wasm by @lutzky in chronotope/chrono#1702

Fix incorrect parsing of fixed-length second fractions by @chris-leach in chronotope/chrono#1705

Fix cfgs for wasm32-linux support by @arjunr2 in chronotope/chrono#1707

Fix OpenHarmony's tzdata parsing by @ldm0 in chronotope/chrono#1679

Convert NaiveDate to/from days since unix epoch by @findepi in chronotope/chrono#1715

Add ?Sized bound to related methods of DelayedFormat::write_to by @Huliiiiii in chronotope/chrono#1721

Add from_timestamp_secs method to DateTime by @jasonaowen in chronotope/chrono#1719

Migrate to core::error::Error by @benbrittain in chronotope/chrono#1704

Upgrade to windows-bindgen 0.63 by @djc in chronotope/chrono#1730

strftime: simplify error handling by @djc in chronotope/chrono#1731

v0.4.41

What's Changed

Add subsec_micros and subsec_millis methods to TimeDelta by @ggoetz in chronotope/chrono#1668

Deprecate NaiveDateTime::UNIX_EPOCH by @robertbastian in chronotope/chrono#1670

Implement as_seconds_f32 and as_seconds_f64 for TimeDelta by @ggoetz in chronotope/chrono#1671

chore: fix some comments by @jimmycathy in chronotope/chrono#1677

Add num_days_in_month method to Datelike trait by @aslilac in chronotope/chrono#1673

add WeekdaySet, a collection of Weekday that is Copy by @Kinrany in chronotope/chrono#1676

WeekdaySet tweaks by @djc in chronotope/chrono#1680

Upgrade to windows-bindgen 0.61 by @djc in chronotope/chrono#1682

Implemented a consistent Eq trait for NaiveWeek by @Splashling1789 in chronotope/chrono#1687

TimeZone::from_posix_tz: Treat empty TZ variable as UTC by @drinkcat in chronotope/chrono#1691

Add support for lossy format strings by @Qelxiros in chronotope/chrono#1693

0.4.40

What's Changed

Add Month::num_days() by @djc in chronotope/chrono#1645

Update Windows dependencies by @kennykerr in chronotope/chrono#1646

Feature/round_up method on DurationRound trait by @MagnumTrader in chronotope/chrono#1651

Expose write_to for DelayedFormat by @tugtugtug in chronotope/chrono#1654

Update LICENSE.txt by @maximevtush in chronotope/chrono#1656

docs: fix minor typo by @samfolo in chronotope/chrono#1659

Use NaiveDateTime for internal tz_info methods. by @AVee in chronotope/chrono#1658

Upgrade to windows-bindgen 0.60 by @djc in chronotope/chrono#1665

Add quarter (%q) date string specifier by @drinkcat in chronotope/chrono#1666

Commits

f3fd15f Bump version to 0.4.42
5cf5603 strftime: add regression test case
a623170 strftime: simplify error handling
36fbfb1 strftime: move specifier handling out of match to reduce rightward drift
7f413c3 strftime: yield None early
9d5dfe1 strftime: outline constants
e5f6be7 strftime: move error() method below caller
d516c27 strftime: merge impl blocks
0ee2172 strftime: re-order items to keep impls together
757a8b0 Upgrade to windows-bindgen 0.63
Additional commits viewable in compare view

Updates csv from 1.3.1 to 1.4.0

Commits

4a3997e 1.4.0
a0a3c9e csv-core-0.1.13
f8e6b07 deps: switch serde dependency to serde_core
7c7c135 style: address many Clippy lints
5b2da18 doc: simplify tutorial section on accessing headers
633552a perf: serialize 128-bit integers via itoa
e9f06f4 lint: fix needless_lifetimes and mismatched_lifetime_syntaxes
9dab947 test: fix broken test after panic message change
da00088 style: address many Clippy lints
f973cd4 enum: use #[non_exhaustive] instead of #[doc(hidden)] variant
Additional commits viewable in compare view

Updates curl from 0.4.47 to 0.4.49

Commits

b57ef18 Bump crate versions (#412)
ecc8a2b Exposed the CURLOPT_UPLOAD_BUFFERSIZE curl option. (#411)
b0b6c68 Add vendored field to Version information. (#409)
ccc6e5a Bump curl submodule (#408)
e244263 Trigger rebuild if a curl source file has changed. (#407)
See full diff in compare view

Updates hex-literal from 1.0.0 to 1.1.0

Commits

5c88fe4 hex-literal: add support for colon-delimited literals (#1244)
c210dd6 Release blobby v0.4.0 (#1238)
9118661 block-padding: fix pad_detached for NoPadding and ZeroPadding (#1227)
a3045ea Use the standard order of [package] fields (#1237)
a66ed6d Release inout v0.2.0 (#1235)
e0020c5 Release block-padding v0.4.0 (#1233)
c9f7bfe block-buffer: fix typo (#1234)
64c135a Update Cargo.lock
1609b3f build(deps): bump digest from 0.11.0-rc.2 to 0.11.0-rc.3 (#1231)
113694e zeroize: add v1.8.2 changelog entry (#1230)
Additional commits viewable in compare view

Updates http from 1.2.0 to 1.4.0

Release notes

Sourced from http's releases.

v1.4.0

Highlights

Add StatusCode::EARLY_HINTS constant for 103 Early Hints.

Make StatusCode::from_u16 now a const fn.

Make Authority::from_static now a const fn.

Make PathAndQuery::from_static now a const fn.

MSRV increased to 1.57 (allows legible const fn panic messages).

What's Changed

Updated Rand dependency to v0.9.1 by @FarzadMohtasham in hyperium/http#763

Fix compilation on latest nightly by @akonradi-signal in hyperium/http#769

Avoid unnecessary .expect()s for empty HeaderMap by @akonradi-signal in hyperium/http#768

feat: show types in Extensions debug output by @crepererum in hyperium/http#773

Docs: Clarify the HeaderMap documentaion by @Sol-Ell in hyperium/http#774

style: update format for tests by @seanmonstar in hyperium/http#782

Make StatusCode::from_u16 const by @coolreader18 in hyperium/http#761

docs: Fix typo 'an' to 'and' in http::status module documentation by @zxzxovo in hyperium/http#784

fix: Prevent panic in try_reserve/try_with_capacity on capacity overflow by @AriajSarkar in hyperium/http#787

fix: Add reserve() to Extend impl for (Option, T)) by @AriajSarkar in hyperium/http#788

chore: minor improvement for docs by @claudecodering in hyperium/http#790

chore: bump MSRV to 1.57 by @seanmonstar in hyperium/http#793

Add EARLY_HINTS status code by @mdevino in hyperium/http#758

refactor(header): use better panic message in const HeaderName and HeaderValue by @seanmonstar in hyperium/http#797

docs: remove unnecessary extern crate sentence by @tottoto in hyperium/http#799

chore(ci): update to actions/checkout@v5 by @tottoto in hyperium/http#800

feat(uri): make Authority/PathAndQuery::from_static const by @WaterWhisperer in hyperium/http#786

refactor(header): inline FNV hasher to reduce dependencies by @seanmonstar in hyperium/http#796

v1.4.0 by @seanmonstar in hyperium/http#803

New Contributors

@FarzadMohtasham made their first contribution in hyperium/http#763

@akonradi-signal made their first contribution in hyperium/http#769

@crepererum made their first contribution in hyperium/http#773

@Sol-Ell made their first contribution in hyperium/http#774

@coolreader18 made their first contribution in hyperium/http#761

@zxzxovo made their first contribution in hyperium/http#784

@AriajSarkar made their first contribution in hyperium/http#787

@claudecodering made their first contribution in hyperium/http#790

@mdevino made their first contribution in hyperium/http#758

@WaterWhisperer made their first contribution in hyperium/http#786

Full Changelog: hyperium/http@v1.3.1...v1.4.0

v1.3.1

What's Changed

fix: validate path bytes are at least utf8 by @seanmonstar in hyperium/http#756

... (truncated)

Changelog

Sourced from http's changelog.

1.4.0 (November 24, 2025)

Add StatusCode::EARLY_HINTS constant for 103 Early Hints.

Make StatusCode::from_u16 now a const fn.

Make Authority::from_static now a const fn.

Make PathAndQuery::from_static now a const fn.

MSRV increased to 1.57 (allows legible const fn panic messages).

1.3.1 (March 11, 2025)

Fix validation that all characters are UTF-8 in URI path and query.

1.3.0 (March 11, 2025)

Allow most UTF-8 characters in URI path and query.

Fix HeaderMap::reserve() to allocate sufficient capacity.

Commits

b9625d8 v1.4.0
50b009c refactor(header): inline FNV hasher to reduce dependencies (#796)
b370d36 feat(uri): make Authority/PathAndQuery::from_static const (#786)
0d74251 chore(ci): update to actions/checkout@v5 (#800)
a760767 docs: remove unnecessary extern crate sentence (#799)
fb1d457 refactor(header): use better panic message in const HeaderName and HeaderValu...
20dbd6e feat(status): Add 103 EARLY_HINTS status code (#758)
e7a7337 chore: bump MSRV to 1.57
1888e28 tests: downgrade rand back to 0.8 for now
918bbc3 chore: minor improvement for docs (#790)
Additional commits viewable in compare view

Updates hyper from 1.5.2 to 1.8.1

Release notes

Sourced from hyper's releases.

v1.8.1

Bug Fixes

http1: fix consuming extra CPU from previous change (#3977) (4492f31e)

Full Changelog: hyperium/hyper@v1.8.0...v1.8.1

v1.8.0

Highlights

Features

rt: add Timer::now() method to allow overriding the instant returned (#3965) (5509ebe6)

Bug Fixes

http1: fix rare missed write wakeup on connections (#3952) (2377b893)

http2: fix internals of HTTP/2 CONNECT upgrades (#3967) (58e0e7dc, closes #3966)

Breaking Changes

While technically breaking, it's assumed you will not need to do anything or be affected.

The HTTP/2 client connection no longer allows an executor that can not spawn itself.

This was an oversight originally. The client connection will now include spawning a future that keeps a copy of the executor to spawn other futures. Thus, if it is !Send, it needs to spawn !Send futures. The likelihood of executors that match the previously allowed behavior should be very remote.

There is also technically a semver break in here, which is that the Http2ClientConnExec trait no longer dyn-compatible, because it now expects to be Clone. This should not break usage of the conn builder, because it already separately had E: Clone bounds. If someone were using dyn Http2ClientConnExec, that will break. However, there is no purpose for doing so, and it is not usable otherwise, since the trait only exists to propagate bounds into hyper. Thus, the breakage should not affect anyone. (58e0e7dc)

What's Changed

chore(ci): update to actions/checkout@v5 by @tottoto in hyperium/hyper#3935

refactor(ffi): specify "C" ABI explicitly in ffi_fn! macro by @1911860538 in hyperium/hyper#3937

Update documented default values for http1::Builder by @Will-Low in hyperium/hyper#3938

fix(client): port tests to in-memory socket by Description has been truncated

…8 updates Bumps the version-updates group with 26 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actix-web](https://github.com/actix/actix-web) | `4.9.0` | `4.12.0` | | [alloy-primitives](https://github.com/alloy-rs/core) | `1.2.0` | `1.4.1` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.95` | `1.0.100` | | [blst](https://github.com/supranational/blst) | `0.3.15` | `0.3.16` | | [bytes](https://github.com/tokio-rs/bytes) | `1.9.0` | `1.11.0` | | [chrono](https://github.com/chronotope/chrono) | `0.4.39` | `0.4.42` | | [csv](https://github.com/BurntSushi/rust-csv) | `1.3.1` | `1.4.0` | | [curl](https://github.com/alexcrichton/curl-rust) | `0.4.47` | `0.4.49` | | [hex-literal](https://github.com/RustCrypto/utils) | `1.0.0` | `1.1.0` | | [http](https://github.com/hyperium/http) | `1.2.0` | `1.4.0` | | [hyper](https://github.com/hyperium/hyper) | `1.5.2` | `1.8.1` | | [indexmap](https://github.com/indexmap-rs/indexmap) | `2.7.1` | `2.12.1` | | [json-patch](https://github.com/idubrov/json-patch) | `4.0.0` | `4.1.0` | | [log](https://github.com/rust-lang/log) | `0.4.25` | `0.4.28` | | [regex](https://github.com/rust-lang/regex) | `1.11.1` | `1.12.2` | | [reqwest-middleware](https://github.com/TrueLayer/reqwest-middleware) | `0.4.0` | `0.4.2` | | [ringbuf](https://github.com/agerasev/ringbuf) | `0.4.7` | `0.4.8` | | [serde_json](https://github.com/serde-rs/json) | `1.0.137` | `1.0.145` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.20.0` | `3.23.0` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.11` | `2.0.17` | | [time](https://github.com/time-rs/time) | `0.3.37` | `0.3.44` | | [tokio](https://github.com/tokio-rs/tokio) | `1.44.2` | `1.48.0` | | [tracing](https://github.com/tokio-rs/tracing) | `0.1.41` | `0.1.43` | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.19` | `0.3.22` | | [uuid](https://github.com/uuid-rs/uuid) | `1.12.1` | `1.16.0` | | [vergen](https://github.com/rustyhorde/vergen) | `9.0.4` | `9.0.6` | Updates `actix-web` from 4.9.0 to 4.12.0 - [Release notes](https://github.com/actix/actix-web/releases) - [Changelog](https://github.com/actix/actix-web/blob/main/CHANGES.md) - [Commits](actix/actix-web@web-v4.9.0...web-v4.12.0) Updates `alloy-primitives` from 1.2.0 to 1.4.1 - [Release notes](https://github.com/alloy-rs/core/releases) - [Changelog](https://github.com/alloy-rs/core/blob/main/CHANGELOG.md) - [Commits](alloy-rs/core@v1.2.0...v1.4.1) Updates `anyhow` from 1.0.95 to 1.0.100 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.95...1.0.100) Updates `blst` from 0.3.15 to 0.3.16 - [Release notes](https://github.com/supranational/blst/releases) - [Commits](supranational/blst@v0.3.15...v0.3.16) Updates `bytes` from 1.9.0 to 1.11.0 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.9.0...v1.11.0) Updates `chrono` from 0.4.39 to 0.4.42 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.39...v0.4.42) Updates `csv` from 1.3.1 to 1.4.0 - [Commits](BurntSushi/rust-csv@1.3.1...1.4.0) Updates `curl` from 0.4.47 to 0.4.49 - [Release notes](https://github.com/alexcrichton/curl-rust/releases) - [Commits](alexcrichton/curl-rust@curl-sys-0.4.47...curl-sys-0.4.49) Updates `hex-literal` from 1.0.0 to 1.1.0 - [Commits](RustCrypto/utils@hex-literal-v1.0.0...hex-literal-v1.1.0) Updates `http` from 1.2.0 to 1.4.0 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.2.0...v1.4.0) Updates `hyper` from 1.5.2 to 1.8.1 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.5.2...v1.8.1) Updates `indexmap` from 2.7.1 to 2.12.1 - [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md) - [Commits](indexmap-rs/indexmap@2.7.1...2.12.1) Updates `json-patch` from 4.0.0 to 4.1.0 - [Changelog](https://github.com/idubrov/json-patch/blob/main/CHANGELOG.md) - [Commits](idubrov/json-patch@v4.0.0...v4.1.0) Updates `log` from 0.4.25 to 0.4.28 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.25...0.4.28) Updates `regex` from 1.11.1 to 1.12.2 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.11.1...1.12.2) Updates `reqwest-middleware` from 0.4.0 to 0.4.2 - [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases) - [Commits](TrueLayer/reqwest-middleware@reqwest-middleware-v0.4.0...reqwest-middleware-v0.4.2) Updates `ringbuf` from 0.4.7 to 0.4.8 - [Release notes](https://github.com/agerasev/ringbuf/releases) - [Commits](https://github.com/agerasev/ringbuf/commits) Updates `serde` from 1.0.217 to 1.0.228 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.217...v1.0.228) Updates `serde_derive` from 1.0.217 to 1.0.228 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.217...v1.0.228) Updates `serde_json` from 1.0.137 to 1.0.145 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.137...v1.0.145) Updates `tempfile` from 3.20.0 to 3.23.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.20.0...v3.23.0) Updates `thiserror` from 2.0.11 to 2.0.17 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.11...2.0.17) Updates `time` from 0.3.37 to 0.3.44 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.37...v0.3.44) Updates `tokio` from 1.44.2 to 1.48.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.44.2...tokio-1.48.0) Updates `tracing` from 0.1.41 to 0.1.43 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-0.1.41...tracing-0.1.43) Updates `tracing-subscriber` from 0.3.19 to 0.3.22 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.19...tracing-subscriber-0.3.22) Updates `uuid` from 1.12.1 to 1.16.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@1.12.1...v1.16.0) Updates `vergen` from 9.0.4 to 9.0.6 - [Release notes](https://github.com/rustyhorde/vergen/releases) - [Commits](https://github.com/rustyhorde/vergen/commits/vergen_9.0.6) --- updated-dependencies: - dependency-name: actix-web dependency-version: 4.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: alloy-primitives dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: anyhow dependency-version: 1.0.100 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: blst dependency-version: 0.3.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: bytes dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: chrono dependency-version: 0.4.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: csv dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: curl dependency-version: 0.4.49 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: hex-literal dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: http dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: hyper dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: indexmap dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: json-patch dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: log dependency-version: 0.4.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: regex dependency-version: 1.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: reqwest-middleware dependency-version: 0.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: ringbuf dependency-version: 0.4.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: serde dependency-version: 1.0.228 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: serde_derive dependency-version: 1.0.228 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: serde_json dependency-version: 1.0.145 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: tempfile dependency-version: 3.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: thiserror dependency-version: 2.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: time dependency-version: 0.3.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: tokio dependency-version: 1.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: tracing dependency-version: 0.1.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: tracing-subscriber dependency-version: 0.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: uuid dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: vergen dependency-version: 9.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · Dec 22, 2025

🚀 Deployment Links of Blocksense Network websites:

Website	Latest Update	Commit
🌱 Documentation	22.12.2025 00:33:58	`8c8230e`
📖 Docs UI Components	22.12.2025 00:33:58	`8c8230e`
📝 UI Components	22.12.2025 00:33:58	`8c8230e`

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Dec 1, 2025

dependabot bot force-pushed the dependabot/cargo/version-updates-aa8fa454fc branch 4 times, most recently from 528f562 to 723d7a3 Compare December 15, 2025 00:24

dependabot bot force-pushed the dependabot/cargo/version-updates-aa8fa454fc branch from 723d7a3 to 2f3caab Compare December 22, 2025 00:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the version-updates group across 1 directory with 28 updates #1810

build(deps): bump the version-updates group across 1 directory with 28 updates #1810

Uh oh!

dependabot bot commented on behalf of github Dec 1, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Dec 22, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Search code, repositories, users, issues, pull requests...

build(deps): bump the version-updates group across 1 directory with 28 updates #1810

Are you sure you want to change the base?

build(deps): bump the version-updates group across 1 directory with 28 updates #1810

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

actix-web: v4.12.0

Short announcement

v4.12.0

actix-web: v4.11.0

actix-web: v4.10.2

actix-web: v4.10.1

actix-web: v4.10.0

Added

Changed

alloy-core v1.4.1

Security

Patched: DoS vulnerability on alloy_dyn_abi::TypedData hashing

What's Changed

New Contributors

alloy-core v1.4.0

What's Changed

New Contributors

1.4.1 - 2025-10-14

Features

Miscellaneous Tasks

Other

Refactor

1.4.0 - 2025-09-26

Bug Fixes

Dependencies

Documentation

Features

1.0.100

1.0.99

1.0.98

1.0.97

1.0.96

Release v0.3.16

Bytes v1.11.0

1.11.0 (November 14th, 2025)

Fixed

Internal changes

Bytes v1.10.1

1.10.1 (March 5th, 2025)

Fixed

Bytes v1.10.0

1.10.0 (February 3rd, 2025)

Added

Fixed

1.11.0 (November 14th, 2025)

Fixed

Internal changes

1.10.1 (March 5th, 2025)

Fixed

1.10.0 (February 3rd, 2025)

Added

Fixed

0.4.42

What's Changed

v0.4.41

What's Changed

0.4.40

What's Changed

v1.4.0

Highlights

What's Changed

New Contributors

v1.3.1

What's Changed

1.4.0 (November 24, 2025)

1.3.1 (March 11, 2025)

1.3.0 (March 11, 2025)

v1.8.1

Bug Fixes

v1.8.0

Highlights

Features

dependabot bot commented on behalf of github Dec 1, 2025 •

edited

Loading

Patched: DoS vulnerability on `alloy_dyn_abi::TypedData` hashing