Bump the cargo group across 1 directory with 6 updates by dependabot[bot] · Pull Request #133 · avelino/mcp

dependabot · 2026-11-02T03:27:12Z

Bumps the cargo group with 6 updates in the / directory:

Package	From	To
serde_json	`1.0.152`	`1.0.154`
tokio	`1.53.2`	`1.54.1`
sha2	`0.11.0`	`0.11.1`
open	`5.4.4`	`5.4.5`
uuid	`1.28.0`	`1.29.0`
libc	`0.2.189`	`0.2.191`

Updates serde_json from 1.0.152 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
e759c5b Report invalid UTF-8 at the first bad byte.
35ca8ef Support preserve_order in no_std builds
See full diff in compare view

Updates tokio from 1.53.2 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)

net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)

runtime: add Builder::max_io_events_per_busy_tick (#8410)

runtime: stabilize tokio::runtime::worker_index() (#8431)

sync: add SemaphorePermit::semaphore() (#8482)

sync: add blocking_acquire methods to Semaphore (#8269)

sync: add watch::Receiver::is_closed (#8481)

wasm: support JSPI for Emscripten target (#8285, #8627)

wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

fs: reject zero in File::set_max_buf_size (#8449)

io: make copy_buf cooperative (#8459)

io: panic when BufReader or BufStream is created with zero capacity (#8494)

io: panic when in-memory pipe is created with zero capacity (#8397)

io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)

io: support vectored writes in Sink (#8663)

net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)

net: start accepted sockets as readable and writable (#8435)

net: support UCred on Fuchsia (#8257)

process: use mio::unix::pipe for Unix child stdio (#8603)

runtime: cache-pad the shared injection queue and idle state (#8622)

runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)

runtime: make enable_io available whenever rt is enabled (#8387)

runtime: move block_in_place setup into a non-generic function (#8315)

runtime: move the multi-thread inject queue to its own mutex (#8382)

runtime: panic when max_io_events_per_tick is zero (#8476)

runtime: suggest .await in nested block_on panic message (#8501)

sync: avoid atomic reader count in broadcast slots (#8357)

sync: use acquire/release orderings in Notify (#8325)

time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

b53b200 chore: prepare Tokio v1.54.1 (#8693)
5ed619b time: revert "remove the runtime handle from timers" (#8692)
66d34e4 chore: prepare Tokio v1.54.0 (#8667)
0d322ce io: support vectored writes in sink (#8663)
4167c56 codec: expose I/O sources from codec errors (#8665)
cdd9dae fs: propagate iouring stress test failures (#8644)
52ac781 ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)
4890d02 stream: implement FusedStream for JoinSetStream (#8629)
a6bd8e1 wasm: check Emscripten version when using JSPI (#8627)
9dd749d Merge 'tokio-1.53.3' into 'master' (#8641)
Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

138dc5a Release sha2 v0.11.1 (#927)
cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
7c59cad Update Cargo.lock (#921)
f57b947 streebog: tweak internal implementation (#925)
336611f Fix cargo::manual_readme lint (#924)
1df8877 md2: fix clippy::needless_range_loop lint (#923)
6075989 sha2: fix loading of round constants on AArch64 backends (#922)
eadfd90 Update Cargo.lock (#913)
fa30840 blake2 v0.11.0 (#911)
f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
Additional commits viewable in compare view

Updates open from 5.4.4 to 5.4.5

Release notes

Sourced from open's releases.

v5.4.5

Bug Fixes

check that_detached launchers for immediate failures that_detached() returned as soon as a launcher spawned, so a launcher that failed right after starting was reported as success and no fallback ran.

Observe each launcher for 250 ms by delegating to that_detached_with_timeout(). A launcher that exits unsuccessfully within that window falls through to the next candidate; one still running is treated as handed off. The macOS and shellexecute-on-windows paths are unchanged.

Extend the fixture tests to call that_detached() directly.

restore launcher fallback and support Plasma 6

When xdg-open starts but exits unsuccessfully, that() and the CLI previously stopped before trying another installed opener. On Plasma 6, the fallback list also omitted the versioned KDE launchers.

Launcher behavior

Retry reported failures from UNIX desktop launchers and retain the first unsuccessful exit when later candidates are missing.

Add kde-open6 and kde-open5 before the existing kde-open fallback.

Keep launcher ordering, argument boundaries, and exit-status policy together so compatibility decisions are explicit.

Preserve Windows' stop-on-failure policy and the existing protections for option-shaped and non-UTF-8 paths.

Bounded detached checks

Add that_detached_with_timeout(path, timeout) to opt into checking the actual launcher status for a configurable interval per candidate. Retry confirmed UNIX launcher failures; consider successful exits or launchers still running at the deadline handed off. A zero timeout polls once.

On UNIX, use setsid() while retaining the launcher as a child. Reserve a background waiter before spawning and transfer ownership after a timeout so the launcher can outlive its caller and is eventually reaped. Stop fallback if observing an already-started launcher fails, avoiding a second launch based only on a wait error. Existing detached calls retain their timing behavior. The new API uses command-based launchers on Windows, including when shellexecute-on-windows is enabled.

Historical constraints

55dc10d relaxed exit checks for argumentless availability probes, where usage errors are expected. It did not establish that failed real opening operations should stop fallback. 245c95e introduced that behavior; the earlier implementation retried unsuccessful operations.

... (truncated)

Changelog

Sourced from open's changelog.

5.4.5 (2026-10-22)

Bug Fixes

check that_detached launchers for immediate failures that_detached() returned as soon as a launcher spawned, so a launcher that failed right after starting was reported as success and no fallback ran.

Observe each launcher for 250 ms by delegating to that_detached_with_timeout(). A launcher that exits unsuccessfully within that window falls through to the next candidate; one still running is treated as handed off. The macOS and shellexecute-on-windows paths are unchanged.

Extend the fixture tests to call that_detached() directly.

restore launcher fallback and support Plasma 6

When xdg-open starts but exits unsuccessfully, that() and the CLI previously stopped before trying another installed opener. On Plasma 6, the fallback list also omitted the versioned KDE launchers.

Launcher behavior

Retry reported failures from UNIX desktop launchers and retain the first unsuccessful exit when later candidates are missing.

Add kde-open6 and kde-open5 before the existing kde-open fallback.

Keep launcher ordering, argument boundaries, and exit-status policy together so compatibility decisions are explicit.

Preserve Windows' stop-on-failure policy and the existing protections for option-shaped and non-UTF-8 paths.

Bounded detached checks

Add that_detached_with_timeout(path, timeout) to opt into checking the actual launcher status for a configurable interval per candidate. Retry confirmed UNIX launcher failures; consider successful exits or launchers still running at the deadline handed off. A zero timeout polls once.

On UNIX, use setsid() while retaining the launcher as a child. Reserve a background waiter before spawning and transfer ownership after a timeout so the launcher can outlive its caller and is eventually reaped. Stop fallback if observing an already-started launcher fails, avoiding a second launch based only on a wait error. Existing detached calls retain their timing behavior. The new API uses command-based launchers on Windows, including when shellexecute-on-windows is enabled.

Historical constraints

55dc10d relaxed exit checks for argumentless availability probes, where usage errors are expected. It did not establish that failed real opening operations should stop fallback. 245c95e introduced that behavior;

... (truncated)

Commits

a60a9d5 Release open v5.4.5
4e64f6b Merge pull request #135 from Byron/fix-linux-launchers
c88759b auto-review
42a34b0 fix(unix): check that_detached launchers for immediate failures
279c1b2 fix(unix): restore launcher fallback and support Plasma 6
See full diff in compare view

Updates uuid from 1.28.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

Add versioned constructors to NonNilUuid by @RanaPriyansh in uuid-rs/uuid#919

Prepare for 1.29.0 release by @KodrAus in uuid-rs/uuid#920

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

Commits

4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
a3631fd prepare for 1.29.0 release
304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
d49f963 Reuse existing version tests for NonNilUuid constructors
2f02404 Add versioned constructors to NonNilUuid
See full diff in compare view

Updates libc from 0.2.189 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)

Apple: add ifaliasreq and in6_aliasreq (#5557)

FreeBSD: Add PT_* constants (#5625)

Haiku: Add AI_* and NI_* constants from netdb.h (#5585)

Hurd: Add POSIX_SPAWN_* flags (#5578)

NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)

OpenBSD: Add sensordev (#5534)

QuRT: Add isatty (#5618)

WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)

Android: Make prop_info an extern type (#5561)

Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)

FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable"

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)

Apple: add ifaliasreq and in 8000 6_aliasreq (#5557)

FreeBSD: Add PT_* constants (#5625)

Haiku: Add AI_* and NI_* constants from netdb.h (#5585)

Hurd: Add POSIX_SPAWN_* flags (#5578)

NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)

OpenBSD: Add sensordev (#5534)

QuRT: Add isatty (#5618)

WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)

Android: Make prop_info an extern type (#5561)

Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)

FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
</tr></table> 

... (truncated)

Commits

ccc2ff4 libc: Release 0.2.191
bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
9c7f568 apple: add ifaliasreq and in6_aliasreq
018c7e9 wasi: Add pthread_condattr_{get,set}clock
2c77185 openbsd: add sensordev structure
e10813c hurd: Add missing POSIX_SPAWN_* flags
2ea4bc1 Fix FreeBSD/aarch64
6d666fd dragonfly: Parse version from headers rather than CLI
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [serde_json](https://github.com/serde-rs/json) | `1.0.152` | `1.0.154` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.2` | `1.54.1` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [open](https://github.com/Byron/open-rs) | `5.4.4` | `5.4.5` | | [uuid](https://github.com/uuid-rs/uuid) | `1.28.0` | `1.29.0` | | [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.191` | Updates `serde_json` from 1.0.152 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.152...v1.0.154) Updates `tokio` from 1.53.2 to 1.54.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.2...tokio-1.54.1) Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `open` from 5.4.4 to 5.4.5 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.4.4...v5.4.5) Updates `uuid` from 1.28.0 to 1.29.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.28.0...v1.29.0) Updates `libc` from 0.2.189 to 0.2.191 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.189...0.2.191) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio dependency-version: 1.54.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: open dependency-version: 5.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: uuid dependency-version: 1.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: libc dependency-version: 0.2.191 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-04T14:40:47Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 2, 2026

dependabot Bot closed this Nov 4, 2026

dependabot Bot deleted the dependabot/cargo/cargo-4541a1029e branch November 4, 2026 14:40

Navigation Menu

Repository navigation

Bump the cargo group across 1 directory with 6 updates - #133

Bump the cargo group across 1 directory with 6 updates#133
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-4541a1029e

Launcher behavior

Bounded detached checks

Historical constraints

Launcher behavior

Bounded detached checks

Historical constraints

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

Uh oh!

v1.0.154

v1.0.153

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

Tokio v1.54.0

1.54.0 (October 19th, 2026)

Added

Changed

v5.4.5

Bug Fixes

Launcher behavior

Bounded detached checks

Historical constraints

5.4.5 (2026-10-22)

Bug Fixes

Launcher behavior

Bounded detached checks

Historical constraints

v1.29.0

What's Changed

0.2.191

Support

Added

Fixed

Changed

0.2.190

0.2.191 - 2026-10-16

Support

Added

Fixed

Changed

0.2.190 - 2026-10-02

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants