Skip to content

chore(deps): bump the cargo-deps group with 11 updates#4142

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/cargo-deps-5b1c0dcff7
Open

chore(deps): bump the cargo-deps group with 11 updates#4142
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/cargo-deps-5b1c0dcff7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026

Bumps the cargo-deps group with 11 updates:

Package From To
tokio 1.51.0 1.52.1
clap 4.6.0 4.6.1
axum 0.8.8 0.8.9
indexmap 2.13.1 2.14.0
gloo-net 0.6.0 0.7.0
lru 0.16.3 0.17.0
matchit 0.9.1 0.9.2
average 0.16.0 0.17.0
libc 0.2.184 0.2.186
nanoid 0.4.0 0.5.0
uuid 1.23.0 1.23.1

Updates tokio from 1.51.0 to 1.52.1

Release notes

Sourced from tokio's releases.

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

  • runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

  • io: AioSource::register_borrowed for I/O safety support (#7992)
  • net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

  • runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)
  • taskdump: add trace_with() for customized task dumps (#8025)
  • taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)
  • fs: support io_uring in AsyncRead for File (#7907)

Changed

  • runtime: improve spawn_blocking scalability with sharded queue (#7757)
  • runtime: use compare_exchange_weak() in worker queue (#8028)

Fixed

  • runtime: overflow second half of tasks when local queue is filled instead of first half (#8029)

Documented

  • docs: fix typo in oneshot::Sender::send docs (#8026)
  • docs: hide #[tokio::main] attribute in the docs of sync::watch (#8035)
  • net: add docs on ConnectionRefused errors with UDP sockets (#7870)

#7757: tokio-rs/tokio#7757 #7870: tokio-rs/tokio#7870 #7907: tokio-rs/tokio#7907 #7992: tokio-rs/tokio#7992 #8010: tokio-rs/tokio#8010 #8025: tokio-rs/tokio#8025 #8026: tokio-rs/tokio#8026 #8028: tokio-rs/tokio#8028 #8029: tokio-rs/tokio#8029

... (truncated)

Commits
  • 905c146 chore: prepare to release v1.52.1 (#8059)
  • 56aaa43 rt: revert #7757 to fix regression in spawn_blocking (#8057)
  • 57ff47a ci: update trybuild to expect output from rustc 1.95.0 (#8058)
  • 812de3e ci: bump taiki-e/cache-cargo-install-action from 1 to 3 (#8053)
  • ba82e73 ci: use Dependabot to keep github actions up to date (#8052)
  • 2e85f9d ci: replace cirrus-ci with freebsd-vm (#8041)
  • a7e1cd8 ci: update GitHub Actions workflows to use latest tool versions (#8047)
  • 5f7be0a chore: perpare 1.52.0 (#8045)
  • 36d12d2 taskdump: allow impl FnMut() in taskdumps instead of just fn() (#8040)
  • f943312 fs: support io-uring in AsyncRead for File (#7907)
  • Additional commits viewable in compare view

Updates clap from 4.6.0 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Commits
  • 1420275 chore: Release
  • d2c817d docs: Update changelog
  • f88c94e Merge pull request #6341 from epage/sep
  • acbb822 fix(complete): Reduce risk of conflict with actual subcommands
  • a49fadb refactor(complete): Pull out subcommand separator
  • ddc008b Merge pull request #6332 from epage/update
  • 497dc50 chore: Update compatible dependencies
  • dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
  • 54bdaa3 chore(deps): Update j178/prek-action action to v2
  • f0d30d9 chore: Release
  • Additional commits viewable in compare view

Updates axum from 0.8.8 to 0.8.9

Release notes

Sourced from axum's releases.

axum-v0.8.9

  • added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)
  • changed: Update minimum rust version to 1.80 (#3620)
  • fixed: Set connect endpoint on correct field in MethodRouter (#3656)
  • fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3597: tokio-rs/axum#3597 #3620: tokio-rs/axum#3620 #3656: tokio-rs/axum#3656 #3611: tokio-rs/axum#3611

Commits

Updates indexmap from 2.13.1 to 2.14.0

Changelog

Sourced from indexmap's changelog.

2.14.0 (2026-04-09)

  • MSRV: Rust 1.85.0 or later is now required.
  • Updated the hashbrown dependency to 0.17.
  • Made more map::Slice methods const: new_mut, first_mut, last_mut, split_at_mut, split_at_mut_checked, split_first_mut, split_last_mut
Commits
  • bcd165b Merge pull request #439 from cuviper/release-2.14.0
  • 4ef06a7 Release 2.14.0
  • d21826c Merge pull request #438 from cuviper/hashbrown-0.17
  • 2566bec Upgrade to hashbrown v0.17
  • 4b62776 Merge pull request #437 from cuviper/disjoint-panic
  • 478fba2 Normalize the panic doc of get_disjoint_mut
  • fb6dafd Merge pull request #436 from cuviper/const-slice-mut
  • 5c237a2 Make Slice::{first,last,split_*}_mut methods const
  • 48ff9ce Merge pull request #435 from cuviper/edition-2024
  • 648be98 cargo fmt with edition 2024
  • Additional commits viewable in compare view

Updates gloo-net from 0.6.0 to 0.7.0

Release notes

Sourced from gloo-net's releases.

gloo-net 0.7.0

MSRV updated to 1.82

Breaking

  • Remove Clone implementation for EventSource (#417) by @​vpochapuis Cloning had a bug where dropping any clone would disconnect all instances.

New Features

  • Add EventSourceBuilder for configuring EventSource with credentials (#530) by @​zn3x
  • Add WebSocket::buffered_amount (#510) by @​vi
  • Add PartialEq, Eq, Hash derives to CloseEvent (#504) by @​Alexi24601

Fixes

Maintenance

Changelog

Sourced from gloo-net's changelog.

Version 0.7.0

Commits
  • d69fcff chore: release gloo-net 0.7.0
  • 7a57df3 chore: release gloo-file 0.4.0
  • 2685476 fix: correct gloo-history category slugs
  • b1d5129 fix: correct gloo-storage category slugs
  • 8316f33 fix: correct gloo-render category slugs
  • 0734551 chore: release gloo-console 0.4.0, gloo-dialogs 0.3.0, gloo-events 0.3.0, glo...
  • e6280d4 chore: release gloo-utils 0.3.0
  • cca8089 chore: release gloo-worker-macros 0.2.0 and gloo-worker 0.6.0
  • a8af99c chore: update rust dependencies (#536)
  • 0de5865 fix(net)!: remove EventSource Clone implementation (#417)
  • Additional commits viewable in compare view

Updates lru from 0.16.3 to 0.17.0

Changelog

Sourced from lru's changelog.

v0.17.0 - 2026-04-14

  • Upgrade hashbrown to 0.17.0 and update MSRV to 1.85.0.

v0.16.4 - 2026-04-13

  • Add get_or_insert_with_key and variants.
Commits
  • 13321a9 Merge pull request #232 from jeromefroe/jerome/prepare-0-17-0-release
  • f7d0ece Prepare 0.17.0 release
  • 2d3d6d5 Merge pull request #231 from xtqqczze/deps/hashbrown
  • 346e2fe Bump hashbrown to 0.17.0
  • 1302b4e Update MSRV to 1.85.0
  • d8c7f5c Merge pull request #230 from jeromefroe/jerome/prepare-0-16-4-release
  • bd5261b Prepare 0.16.4 release
  • 16e161d Merge pull request #229 from pikatos/get_or_insert_with_key
  • 5135e8e Apply suggestions from code review
  • 81c2ef0 Add get_or_insert_with_key variants
  • See full diff in compare view

Updates matchit from 0.9.1 to 0.9.2

Release notes

Sourced from matchit's releases.

0.9.2

Commits

Updates average from 0.16.0 to 0.17.0

Commits

Updates libc from 0.2.184 to 0.2.186

Release notes

Sourced from libc's releases.

0.2.186

Added

  • Apple: Add KEVENT_FLAG_* constants (#5070)
  • Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

  • CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

0.2.185

Added

  • EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)
  • Hexagon: add missing constants and fix types for linux-musl (#5042)
  • Redox: Add semaphore functions (#5051)
  • Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

  • Hexagon: Decouple time64 types from musl symbol redirects (#5040)
  • Horizon: Change POLL constants from c_short to c_int (#5045)
Changelog

Sourced from libc's changelog.

0.2.186 - 2026-04-24

Added

  • Apple: Add KEVENT_FLAG_* constants (#5070)
  • Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

  • CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

0.2.185 - 2026-04-13

Added

  • EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)
  • Hexagon: add missing constants and fix types for linux-musl (#5042)
  • Redox: Add semaphore functions (#5051)
  • Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

  • Hexagon: Decouple time64 types from musl symbol redirects (#5040)
  • Horizon: Change POLL constants from c_short to c_int (#5045)
Commits
  • 42620ff [0.2] libc: Release 0.2.186
  • 9db2eaa apple: add KEVENT_FLAG_* constants
  • 3840939 Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE for linux
  • f697deb chore: migrate from Cirrus CI to GHA
  • 71d5bfc libc: Release 0.2.185
  • 1027d1c Revert "ci: Pin nightly to 2026-04-01"
  • 0e9c6e5 redox: Add semaphore functions
  • 24ef457 feat: add back support for gnu windows x86 in ci
  • aa75caf horizon: Change POLL constants from c_short to c_int
  • b7eda5a hexagon: add missing constants and fix types for linux-musl
  • Additional commits viewable in compare view

Updates nanoid from 0.4.0 to 0.5.0

Changelog

Sourced from nanoid's changelog.

0.5.0

  • Bump rand to 0.9
  • Add rngs::thread_local random source (#36)
  • format now accepts any FnMut(usize) -> Vec<u8> random generator, enabling seeded and stateful RNGs (#32, #41). Non-capturing fn(usize) -> Vec<u8> callers continue to work unchanged.
  • nanoid! macro size argument now accepts any expression, not only a single token (#28)
  • Specialized fast path for alphabets whose size is a power of two (#35). Note: for seeded RNGs paired with a power-of-two alphabet (e.g. SAFE, the new HEX_* presets), the number of random bytes consumed per ID has changed — the output for a given seed will differ from 0.4.0.
  • Add alphabet::HEX_LOWERCASE and alphabet::HEX_UPPERCASE presets (#39)
  • Optional smartstring feature for small-string-optimized output (#29)
  • Refreshed CI (GitHub Actions across OS matrix), drop Travis/AppVeyor
  • Switched benchmarks to criterion
Commits
  • 359c02d chore: 0.5.0 release
  • f0ad07f #39: Add hex alphabets
  • 7f961f2 Merge pull request #35 from tmccombs/fast-impl
  • 91a79fc Update fast impl for actual format signature
  • ed800e9 feat: Use specialized implementation for alphabets with size 2^n
  • fef0b2e Merge pull request #41 from sidarth164/sid/fnmut
  • 61e0606 docs: update README and added an example
  • 2004ff9 feat: support passing mutable functions as random generators
  • 3d405c5 Fix ci for prs
  • 7011b10 Fixup readme, delete old example
  • Additional commits viewable in compare view

Updates uuid from 1.23.0 to 1.23.1

Release notes

Sourced from uuid's releases.

v1.23.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

Commits
  • ca0c85f Merge pull request #879 from uuid-rs/cargo/v1.23.1
  • b4db015 prepare for 1.23.1 release
  • 771069d Merge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note
  • 80994a2 fix: Timestamp::from_gregorian deprecation note
  • 90c5be8 Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv
  • 8b8c4f4 Remove deprecated feature from wasm-bindgen dependency
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo-deps group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.51.0` | `1.52.1` |
| [clap](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.1` |
| [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` |
| [indexmap](https://github.com/indexmap-rs/indexmap) | `2.13.1` | `2.14.0` |
| [gloo-net](https://github.com/rustwasm/gloo) | `0.6.0` | `0.7.0` |
| [lru](https://github.com/jeromefroe/lru-rs) | `0.16.3` | `0.17.0` |
| [matchit](https://github.com/ibraheemdev/matchit) | `0.9.1` | `0.9.2` |
| [average](https://github.com/vks/average) | `0.16.0` | `0.17.0` |
| [libc](https://github.com/rust-lang/libc) | `0.2.184` | `0.2.186` |
| [nanoid](https://github.com/mrdimidium/nanoid) | `0.4.0` | `0.5.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.23.0` | `1.23.1` |


Updates `tokio` from 1.51.0 to 1.52.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.51.0...tokio-1.52.1)

Updates `clap` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.1)

Updates `axum` from 0.8.8 to 0.8.9
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9)

Updates `indexmap` from 2.13.1 to 2.14.0
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md)
- [Commits](indexmap-rs/indexmap@2.13.1...2.14.0)

Updates `gloo-net` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/rustwasm/gloo/releases)
- [Changelog](https://github.com/ranile/gloo/blob/master/CHANGELOG.md)
- [Commits](ranile/gloo@0.6.0...gloo-net-v0.7.0)

Updates `lru` from 0.16.3 to 0.17.0
- [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md)
- [Commits](jeromefroe/lru-rs@0.16.3...0.17.0)

Updates `matchit` from 0.9.1 to 0.9.2
- [Release notes](https://github.com/ibraheemdev/matchit/releases)
- [Commits](ibraheemdev/matchit@v0.9.1...v0.9.2)

Updates `average` from 0.16.0 to 0.17.0
- [Commits](https://github.com/vks/average/commits)

Updates `libc` from 0.2.184 to 0.2.186
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.186/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.184...0.2.186)

Updates `nanoid` from 0.4.0 to 0.5.0
- [Changelog](https://github.com/mrdimidium/nanoid/blob/main/CHANGELOG.md)
- [Commits](mrdimidium/nanoid@v0.4.0...v0.5.0)

Updates `uuid` from 1.23.0 to 1.23.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.23.0...v1.23.1)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.52.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: clap
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: axum
  dependency-version: 0.8.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: indexmap
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: gloo-net
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: lru
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: matchit
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: average
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: libc
  dependency-version: 0.2.186
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
- dependency-name: nanoid
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-deps
- dependency-name: uuid
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 24, 2026
@github-actions
Copy link
Copy Markdown

Visit the preview URL for this PR (updated for commit 193734e):

https://yew-rs-api--pr4142-dependabot-cargo-car-yihpxo8c.web.app

(expires Fri, 01 May 2026 03:19:35 GMT)

🔥 via Firebase Hosting GitHub Action 🌎

@github-actions
Copy link
Copy Markdown

Benchmark - core

Yew Master

vnode           fastest       │ slowest       │ median        │ mean          │ samples │ iters
╰─ vnode_clone  2.776 ns      │ 2.803 ns      │ 2.779 ns      │ 2.781 ns      │ 100     │ 1000000000

Pull Request

vnode           fastest       │ slowest       │ median        │ mean          │ samples │ iters
╰─ vnode_clone  2.8 ns        │ 3.473 ns      │ 2.805 ns      │ 2.817 ns      │ 100     │ 1000000000

@github-actions
Copy link
Copy Markdown

Benchmark - SSR

Yew Master

Details
Benchmark Round Min (ms) Max (ms) Mean (ms) Standard Deviation
Baseline 10 311.007 315.769 311.614 1.478
Hello World 10 504.113 509.200 506.622 1.971
Function Router 10 30775.781 31232.788 30974.828 138.095
Concurrent Task 10 1006.062 1007.337 1006.875 0.416
Many Providers 10 1043.011 1087.460 1069.835 14.014

Pull Request

Details
Benchmark Round Min (ms) Max (ms) Mean (ms) Standard Deviation
Baseline 10 291.394 291.890 291.625 0.179
Hello World 10 467.386 491.995 472.255 7.544
Function Router 10 30578.274 30812.999 30713.459 78.788
Concurrent Task 10 1005.827 1007.268 1006.738 0.506
Many Providers 10 1052.604 1089.670 1073.318 11.713

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants