Repository navigation
Bump the cargo group across 1 directory with 5 updates - #120
Merged
Merged
Conversation
Bumps the cargo group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.152` | | [uuid](https://github.com/uuid-rs/uuid) | `1.27.0` | `1.28.0` | | [opentelemetry](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` | | [opentelemetry_sdk](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` | | [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` | Updates `serde_json` from 1.0.151 to 1.0.152 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.152) Updates `uuid` from 1.27.0 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.27.0...v1.28.0) Updates `opentelemetry` from 0.33.0 to 0.33.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md) - [Commits](open-telemetry/opentelemetry-rust@opentelemetry-0.33.0...opentelemetry-0.33.1) Updates `opentelemetry_sdk` from 0.33.0 to 0.33.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md) - [Commits](open-telemetry/opentelemetry-rust@opentelemetry_sdk-0.33.0...opentelemetry_sdk-0.33.1) Updates `opentelemetry-otlp` from 0.33.0 to 0.33.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md) - [Commits](open-telemetry/opentelemetry-rust@opentelemetry-otlp-0.33.0...opentelemetry-otlp-0.33.1) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.152 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: opentelemetry dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: opentelemetry_sdk dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: opentelemetry-otlp dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>
rustls 0.23.46 fixes RUSTSEC-2026-0346, 0347, 0348 and 0349.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the cargo group with 5 updates in the / directory:
1.0.1511.0.1521.27.01.28.00.33.00.33.10.33.00.33.10.33.00.33.1Updates
serde_jsonfrom 1.0.151 to 1.0.152Release notes
Sourced from serde_json's releases.
Commits
c9f1e3bRelease 1.0.152854fc70Touch up PR 134780a5406Merge pull request #1347 from yuxi-liu-wired/pr/partialeq-f3276e44e2Merge pull request 1346 from yuxi-liu-wired/pr/ap-negative-zerod8bbd39Value == f32 is false for numbers outside the range of f3265a38edKeep the sign of -0 in Value with arbitrary_precisionafdf6fcIgnore clone_on_copy clippy lint in test577729eResolve deprecated f64 constants warninga3e9758Merge pull request #1334 from xtqqczze/authors99edc94Remove deprecated package authors field from Cargo.tomlUpdates
uuidfrom 1.27.0 to 1.28.0Release notes
Sourced from uuid's releases.
Commits
276c236Merge pull request #918 from uuid-rs/cargo/v1.28.04b3b9f5prepare for 1.28.0 releasecbf9c81Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840784a022Inline expected tokens in optional compact serde testa5678c3Simplify optional serde adapter tests to option tokens638a518Refactor optional serde adapter tests and share byte wrapper654fa5bAdd optional serde format adaptersUpdates
opentelemetryfrom 0.33.0 to 0.33.1Commits
372ebbcchore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)5582e71docs(logs): polish design doc and fill perf numbers (#3566)7ce1269fix(sdk): log when the periodic metrics reader panics (#3777)b547036fix(prometheus): keep resource labels when scope info is disabled (#3751)e8480dbchore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)0fdfc48feat(proto): Add support for protobuffer descriptor output (#3675)87929d7ci: install markdown-link-check from npm (#3661)ff2ab2ddocs(trace): explain async context propagation (#3759)2595432fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...952bdeefix: accept optional whitespace in TraceState (#3761)Updates
opentelemetry_sdkfrom 0.33.0 to 0.33.1Commits
372ebbcchore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)5582e71docs(logs): polish design doc and fill perf numbers (#3566)7ce1269fix(sdk): log when the periodic metrics reader panics (#3777)b547036fix(prometheus): keep resource labels when scope info is disabled (#3751)e8480dbchore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)0fdfc48feat(proto): Add support for protobuffer descriptor output (#3675)87929d7ci: install markdown-link-check from npm (#3661)ff2ab2ddocs(trace): explain async context propagation (#3759)2595432fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...952bdeefix: accept optional whitespace in TraceState (#3761)Updates
opentelemetry-otlpfrom 0.33.0 to 0.33.1Commits
372ebbcchore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)5582e71docs(logs): polish design doc and fill perf numbers (#3566)7ce1269fix(sdk): log when the periodic metrics reader panics (#3777)b547036fix(prometheus): keep resource labels when scope info is disabled (#3751)e8480dbchore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)0fdfc48feat(proto): Add support for protobuffer descriptor output (#3675)87929d7ci: install markdown-link-check from npm (#3661)ff2ab2ddocs(trace): explain async context propagation (#3759)2595432fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...952bdeefix: accept optional whitespace in TraceState (#3761)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsrustls 0.23.46
Also bumps rustls 0.23.45 to 0.23.46 in
Cargo.lockfor RUSTSEC-2026-0346 to 0349 (published 2026-10-14). Checked after that commit:cargo auditclean,cargo clippy --all-targets --locked -- -D warningsclean,cargo test --locked877 passed, 0 failed.