Skip to content

Bump the "backend" group with 1 update across multiple ecosystems#855

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/backend-17ead4215f
Open

Bump the "backend" group with 1 update across multiple ecosystems#855
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/backend-17ead4215f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps the backend group with 11 updates:

Package From To
clap 4.5.60 4.6.0
config 0.15.19 0.15.22
hyper 1.8.1 1.9.0
openssl 0.10.75 0.10.76
postgres-openssl 0.5.2 0.5.3
postgres-types 0.2.12 0.2.13
serde_qs 1.0.0 1.1.0
sha2 0.10.9 0.11.0
tokio-postgres 0.7.16 0.7.17
tracing-subscriber 0.3.22 0.3.23
uuid 1.22.0 1.23.0

Updates clap from 4.5.60 to 4.6.0

Changelog

Sourced from clap's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits

Updates config from 0.15.19 to 0.15.22

Changelog

Sourced from config's changelog.

[0.15.22] - 2026-03-17

Documentation

  • Polish examples

Internal

  • Update winnow

[0.15.21] - 2026-03-12

Compatibility

  • Bump MSRV to 1.85

[0.15.20] - 2026-03-12

Fixes

  • Serialize the full u64 range

Internal

  • (toml) Update to 1.0
Commits
  • 7293108 chore: Release config version 0.15.22
  • 6b82b25 docs: Update changelog
  • 2ae46e4 chore: Update to Winnow 1.0.0 (#745)
  • 28690ea chore: Update to Winnow 1.0.0
  • 1f579ee docs(examples): Clean up (#744)
  • c7b1b10 docs(examples): Consoldate env examples
  • 5aa9638 docs(examples): Clarify intent
  • fcc5cd8 docs(examples): Better organize examples
  • 4e8637c docs(examples): Be consistent in env prefix
  • 395a9ff docs(examples): Flatten examples
  • Additional commits viewable in compare view

Updates hyper from 1.8.1 to 1.9.0

Release notes

Sourced from hyper's releases.

v1.9.0

Features

  • client:
  • error: add 'Error::is_parse_version_h2' method (393c77c7)
  • http1: add UpgradeableConnection::into_parts (e21205cf)

Bug Fixes

  • ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)
  • http1:
  • http2:
    • cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)
    • non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Refactors and chores

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.9.0 (2026-03-31)

Bug Fixes

  • ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)
  • http1:
  • http2:
    • cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)
    • non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Features

  • client:
  • error: add 'Error::is_parse_version_h2' method (393c77c7)
  • http1: add UpgradeableConnection::into_parts (e21205cf)
Commits
  • 0d6c7d5 v1.9.0
  • e21205c feat(http1): add UpgradeableConnection::into_parts
  • 393c77c feat(error): add 'Error::is_parse_version_h2' method
  • 5b17a69 fix(http2): cancel sending client request body on response future drop (#4042)
  • 7211ec2 fix(http1): allow keep-alive for chunked requests with trailers (#4043)
  • d51cb71 feat(client): expose HTTP/2 current max stream count (#4026)
  • 28e73cc fix(ffi): validate null pointers before dereferencing in request/response fun...
  • e13e783 docs(client): fix HTTP/2 max concurrent stream link to spec (#4037)
  • 8ba9008 chore(dependencies): drop pin-utils dependency (#4023)
  • 5778745 feat(client): add HTTP/2 max_local_error_reset_streams option (#4021)
  • Additional commits viewable in compare view

Updates openssl from 0.10.75 to 0.10.76

Release notes

Sourced from openssl's releases.

openssl-v0.10.76

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.75...openssl-v0.10.76

Commits

Updates postgres-openssl from 0.5.2 to 0.5.3

Release notes

Sourced from postgres-openssl's releases.

postgres-openssl v0.5.3

Changed

  • Upgraded to Rust edition 2024, minimum Rust version 1.85.
Commits
  • ecc852e Release postgres-openssl v0.5.3
  • bd92e54 Release postgres v0.19.13
  • 35a85bd Release tokio-postgres v0.7.17
  • 64674ba Release postgres-types v0.2.13
  • 40b760d Release postgres-derive v0.4.8
  • 6c92298 Release postgres-protocol v0.6.11
  • e088d7d style(clippy): fix clippy::useless_conversion
  • 19897e8 build(deps): upgrade semver compatible Rust dependencies
  • 2584926 build(deps): upgrade RustCrypto dependencies
  • 10a7724 chore: add bit-vec v0.9 support
  • Additional commits viewable in compare view

Updates postgres-types from 0.2.12 to 0.2.13

Release notes

Sourced from postgres-types's releases.

postgres-types v0.2.13

Added

  • Added support for bit-vec 0.9 via the with-bit-vec-0_9 feature.

Changed

  • Upgraded to Rust edition 2024, minimum Rust version 1.85.
Commits
  • 64674ba Release postgres-types v0.2.13
  • 40b760d Release postgres-derive v0.4.8
  • 6c92298 Release postgres-protocol v0.6.11
  • e088d7d style(clippy): fix clippy::useless_conversion
  • 19897e8 build(deps): upgrade semver compatible Rust dependencies
  • 2584926 build(deps): upgrade RustCrypto dependencies
  • 10a7724 chore: add bit-vec v0.9 support
  • 2853157 fix: cargo fmt --all
  • c8f8993 feat: add rustfmt.toml for opiniated formatting
  • cf637be fix: clippy
  • Additional commits viewable in compare view

Updates serde_qs from 1.0.0 to 1.1.0

Release notes

Sourced from serde_qs's releases.

v1.1.0

Added

  • add DuplicateKeyBehavior config option (#162)
Changelog

Sourced from serde_qs's changelog.

1.1.0 - 2026-03-21

Added

  • add DuplicateKeyBehavior config option (#162)
Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates tokio-postgres from 0.7.16 to 0.7.17

Release notes

Sourced from tokio-postgres's releases.

tokio-postgres v0.7.17

Added

  • Added Client::execute_typed method.
  • Added Client::query_typed_one and Client::query_typed_opt methods.
  • Added GenericClient::execute_typed, GenericClient::query_typed_one, and GenericClient::query_typed_opt methods.
  • Added Transaction::execute_typed, Transaction::query_typed_one, and Transaction::query_typed_opt methods.
  • Added support for bit-vec 0.9 via the with-bit-vec-0_9 feature.

Changed

  • Upgraded rand to 0.10.
  • Upgraded to Rust edition 2024, minimum Rust version 1.85.
Commits
  • 35a85bd Release tokio-postgres v0.7.17
  • 64674ba Release postgres-types v0.2.13
  • 40b760d Release postgres-derive v0.4.8
  • 6c92298 Release postgres-protocol v0.6.11
  • e088d7d style(clippy): fix clippy::useless_conversion
  • 19897e8 build(deps): upgrade semver compatible Rust dependencies
  • 2584926 build(deps): upgrade RustCrypto dependencies
  • 10a7724 chore: add bit-vec v0.9 support
  • 2853157 fix: cargo fmt --all
  • c8f8993 feat: add rustfmt.toml for opiniated formatting
  • Additional commits viewable in compare view

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

  • Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

Updates uuid from 1.22.0 to 1.23.0

Release notes

Sourced from uuid's releases.

v1.23.0

What's Changed

New Contributors

Special thanks

@​meng-xu-cs raised a series of bugs against the timestamp logic in uuid using automated tooling. The issues themselves were reasonably and responsibly presented and the end result is a better uuid library for everyone. Thanks!

Deprecations

This release includes the following deprecations:

  • Context: Renamed to ContextV1
  • Timestamp::from_gregorian: Renamed to Timestamp::from_gregorian_time

Change to Version::Max

Version::Max's u8 representation has changed from 0xff to 0x0f to match the value returned by Uuid::get_version_num.

Change to Uuid::get_version for the max UUID

Uuid::get_version will only return Some(Version::Max) if the UUID is actually the max UUID (all bytes are 0xff). Previously it would return Some if only the version field was 0x0f. This change matches the behaviour of the nil UUID, which only returns Some(Version::Nil) if the UUID is the nil UUID (all bytes are 0x00).

Full Changelog: uuid-rs/uuid@v1.22.0...v1.23.0

Commits
  • 00ab922 Merge pull request #876 from uuid-rs/cargo/v1.23.0
  • 726ba45 prepare for 1.23.0 release
  • 996dade Merge pull request #875 from uuid-rs/fix/context-ordering
  • e140479 simplify a use stmt
  • 8ed9142 reorganize and document more v7 context internals
  • e09a322 use LazyLock to synchronize v1/v6 context initialization
  • 0f260cc Merge pull request #874 from uuid-rs/chore/impl-cleanups
  • 1419e91 clean up and refactor main lib tests
  • ceeaf4b ensure we don't overflow on counters less than 12
  • 63bc8f5 Merge pull request #873 from uuid-rs/fix/error-msg
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the backend group with 11 updates
9a03a63 
Bumps the backend group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.0` |
| [config](https://github.com/rust-cli/config-rs) | `0.15.19` | `0.15.22` |
| [hyper](https://github.com/hyperium/hyper) | `1.8.1` | `1.9.0` |
| [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.75` | `0.10.76` |
| [postgres-openssl](https://github.com/rust-postgres/rust-postgres) | `0.5.2` | `0.5.3` |
| [postgres-types](https://github.com/rust-postgres/rust-postgres) | `0.2.12` | `0.2.13` |
| [serde_qs](https://github.com/samscott89/serde_qs) | `1.0.0` | `1.1.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [tokio-postgres](https://github.com/rust-postgres/rust-postgres) | `0.7.16` | `0.7.17` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.22.0` | `1.23.0` |


Updates `clap` from 4.5.60 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.0)

Updates `config` from 0.15.19 to 0.15.22
- [Changelog](https://github.com/rust-cli/config-rs/blob/main/CHANGELOG.md)
- [Commits](rust-cli/config-rs@v0.15.19...v0.15.22)

Updates `hyper` from 1.8.1 to 1.9.0
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.8.1...v1.9.0)

Updates `openssl` from 0.10.75 to 0.10.76
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.75...openssl-v0.10.76)

Updates `postgres-openssl` from 0.5.2 to 0.5.3
- [Release notes](https://github.com/rust-postgres/rust-postgres/releases)
- [Commits](rust-postgres/rust-postgres@postgres-openssl-v0.5.2...postgres-openssl-v0.5.3)

Updates `postgres-types` from 0.2.12 to 0.2.13
- [Release notes](https://github.com/rust-postgres/rust-postgres/releases)
- [Commits](rust-postgres/rust-postgres@postgres-types-v0.2.12...postgres-types-v0.2.13)

Updates `serde_qs` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/samscott89/serde_qs/releases)
- [Changelog](https://github.com/samscott89/serde_qs/blob/main/CHANGELOG.md)
- [Commits](samscott89/serde_qs@v1.0.0...v1.1.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `tokio-postgres` from 0.7.16 to 0.7.17
- [Release notes](https://github.com/rust-postgres/rust-postgres/releases)
- [Commits](rust-postgres/rust-postgres@tokio-postgres-v0.7.16...tokio-postgres-v0.7.17)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `uuid` from 1.22.0 to 1.23.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.22.0...v1.23.0)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: config
  dependency-version: 0.15.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: hyper
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: openssl
  dependency-version: 0.10.76
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: postgres-openssl
  dependency-version: 0.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: postgres-types
  dependency-version: 0.2.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: serde_qs
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: tokio-postgres
  dependency-version: 0.7.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: uuid
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants