Skip to content

Bump the "backend" group with 1 update across multiple ecosystems#380

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/backend-3ca42df02c
Open

Bump the "backend" group with 1 update across multiple ecosystems#380
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/backend-3ca42df02c

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps the backend group with 16 updates:

Package From To
askama 0.15.4 0.15.6
cached 0.56.0 0.59.0
clap 4.5.60 4.6.0
image 0.25.9 0.25.10
lettre 0.11.19 0.11.20
openssl 0.10.75 0.10.76
postgres-openssl 0.5.2 0.5.3
serde_qs 1.0.0 1.1.0
serde_with 3.17.0 3.18.0
sha2 0.10.9 0.11.0
tokio-postgres 0.7.16 0.7.17
tower-sessions 0.14.0 0.15.0
tracing-subscriber 0.3.22 0.3.23
unicode-segmentation 1.12.0 1.13.2
uuid 1.22.0 1.23.0
which 8.0.1 8.0.2

Updates askama from 0.15.4 to 0.15.6

Release notes

Sourced from askama's releases.

v0.15.6

What's Changed

Full Changelog: askama-rs/askama@v0.15.5...v0.15.6

v0.15.5

What's Changed

Full Changelog: askama-rs/askama@v0.15.4...v0.15.5

Commits
  • 4260d0d Merge pull request #719 from GuillaumeGomez/update-crate-version
  • 1471702 Update crate version to 0.15.6
  • fb6f3fb Merge pull request #718 from GuillaumeGomez/improve-ui-tests
  • 4f36391 Merge pull request #717 from GuillaumeGomez/fix-non-ident-block
  • 1b4350b Update trybuild version to 1.0.116 to enforce diagnostics width
  • 2ad677c Correctly handle non-ident item in block error
  • 5e12585 Merge pull request #714 from jplatte/jplatte/lt-refactor
  • 0ebfd0f Merge pull request #716 from jplatte/jplatte/clippy
  • 3c0f1b0 Merge pull request #715 from jplatte/jplatte/winnow1
  • acc29f3 Remove unnecessary .clone()
  • Additional commits viewable in compare view

Updates cached from 0.56.0 to 0.59.0

Changelog

Sourced from cached's changelog.

[0.59.0 / [cached_proc_macro[0.27.0]]]

Added

Changed

  • Fix examples/wasm build: add time_stores feature to the cached dependency (required when using default-features = false with TimedCache)

Removed

[0.58.0]

Added

  • Add redis_async_cache feature for Redis client-side caching support via the RESP3 protocol

Changed

  • Update redis to 1.0

Removed

[0.57.0 / [cached_proc_macro[0.26.0]]]

Added

  • Add parking_lot dependency

Changed

  • Switch to parking_lot's Mutex and RwLock in all macros.
  • Remove unwrap() calls from lock operations.

Removed

Commits

Updates clap from 4.5.60 to 4.6.0

Changelog

Sourced from clap's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits

Updates image from 0.25.9 to 0.25.10

Changelog

Sourced from image's changelog.

Version 0.25.10

Features:

  • Added GenericImage::copy_from_samples that can be implemented for images that can be efficiently filled from a matrix-layout of samples. Its default implementation will not defer to copy_from, consider implementing this if you specialized the latter.
  • Added GenericImageView::to_pixel_view that can be implemented to describe the buffer in terms our FlatSamples matrix layout, if applicable. This allows algorithms over generic images to run a specialized version where they can be more efficient over an raw input slice.
  • Added ImageBuffer::from_raw_bgr{,a} to efficiently byte-swap images into the RGBA layout of the buffer (#2596).
  • Added ExtendedColorType::Rgb5x1 to represent 5-bit colors as from TGA (#2609).
  • Added metadata::LoopCount and AnimationDecoder::loop_count to query if animations should repeat in a uniform manner (gif, webp, avif) (#2719, #2786).
  • load_from_memory now utilizes format detection hooks if any are applicable.

Structural changes:

  • Various changes that reduce the compile time of image on codegen by reducing the number of monomorphizations (#2804, #2800, #2807).
  • GenericImage::copy_from's default implementation tries copy_from_samples first if the source can be successfully cast with to_pixel_view.
  • <ImageBuffer as GenericImage>::copy_from is now must faster for ImageBuffer when the source implements GenericImageView::to_pixel_view.
  • <SubImage<_> as GenericImage>::copy_from inherits the previously mentioned optimizations for pixel sources when the inner type provides them. It also provides to_pixel_view based on the inner type.
  • ImageBuffer::as_flat_samples no longer requires AsRef<[P::Subpixel]> for the underlying container, just Deref (#2777).

Bug fixes:

  • Fixed a panic in TGA where indices have more bits than mapped colors (#2673).

Notable decoder changes:

  • Bump tiff to 0.11, supporting planar layout images (#2743).
  • ICC profiles can now be written for TIFF files (#2746)
  • Update ravif to 0.13, supporting EXIF (#2733).
  • Update jpeg-encoder to 0.7 bringing SIMD acceleration (#2736).
  • The pnm decoder decodes binary data quicker with fewer allocations (#2797).
  • The tga decoder handles 5-bit data and colormaps correctly (#2608, #2609).

Compatibility notes (new section):

  • Bump rust-version to 1.88.
  • Registered hooks now normalize the file extension they are registered against to ascii-lowercase. It is no longer necessary to register all such variants. This may conflate two hooks that previously hooked the same format with different casing.
Commits
  • 76e5718 Merge pull request #2836 from image-rs/version-0.25.10
  • 38b81dc Change notes for 0.25.10
  • 2fb9e61 Merge pull request #2835 from image-rs/ravif-tiff-integration
  • 4263471 Bump ravif/dav1d versions
  • a7781b3 Merge pull request #2833 from image-rs/backport-from-bgra
  • 6ea7369 Adjust bounds on from_raw_rgb
  • dd60a60 Add utility from_raw_bgr{,a} for ImageBuffer
  • 933251a Merge pull request #2832 from image-rs/backport-moxcms
  • 02c039e Update to moxcms 0.8.0 per reviewer feedback
  • 6ac2dd6 Allow moxcms 0.8.x versions
  • Additional commits viewable in compare view

Updates lettre from 0.11.19 to 0.11.20

Release notes

Sourced from lettre's releases.

v0.11.20

Upgrade notes

Features

  • Add Address::new_dangerous #1107

Misc

  • Replace chumsky with nom for email address parsing #1099
  • Upgrade to Rust 2024 edition #1130
  • Upgrade boring and tokio-boring to v5 #1130
Changelog

Sourced from lettre's changelog.

v0.11.20 (2026-03-28)

Upgrade notes

  • MSRV is now 1.85 (#1130)

Features

  • Add Address::new_dangerous (#1107)

Misc

  • Replace chumsky with nom for email address parsing (#1099)
  • Upgrade to Rust 2024 edition (#1130)
  • Upgrade boring and tokio-boring to v5 (#1130)

#1099: lettre/lettre#1099 #1107: lettre/lettre#1107 #1130: lettre/lettre#1130

Commits
  • 134b720 Prepare v0.11.20
  • 3321bff refactor: replace chumsky with nom
  • 7d5f52d feat: add Address::new_unchecked
  • b905242 build(deps): upgrade maud to v0.27
  • 80297f4 build(deps): upgrade criterion to v0.7
  • 47f3837 build(deps): upgrade boring to v5
  • a4c26e9 style: fix boring deprecation warning
  • 3ba0b96 style(clippy): fix latest warnings
  • 6d8cadf build(deps): upgrade semver compatible Rust dependencies
  • 8442a59 style: remove import of Future
  • Additional commits viewable in compare view

Updates openssl from 0.10.75 to 0.10.76

Release notes

Sourced from openssl's releases.

openssl-v0.10.76

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.75...openssl-v0.10.76

Commits

Updates postgres-openssl from 0.5.2 to 0.5.3

Release notes

Sourced from postgres-openssl's releases.

postgres-openssl v0.5.3

Changed

  • Upgraded to Rust edition 2024, minimum Rust version 1.85.
Commits
  • ecc852e Release postgres-openssl v0.5.3
  • bd92e54 Release postgres v0.19.13
  • 35a85bd Release tokio-postgres v0.7.17
  • 64674ba Release postgres-types v0.2.13
  • 40b760d Release postgres-derive v0.4.8
  • 6c92298 Release postgres-protocol v0.6.11
  • e088d7d style(clippy): fix clippy::useless_conversion
  • 19897e8 build(deps): upgrade semver compatible Rust dependencies
  • 2584926 build(deps): upgrade RustCrypto dependencies
  • 10a7724 chore: add bit-vec v0.9 support
  • Additional commits viewable in compare view

Updates serde_qs from 1.0.0 to 1.1.0

Release notes

Sourced from serde_qs's releases.

v1.1.0

Added

  • add DuplicateKeyBehavior config option (#162)
Changelog

Sourced from serde_qs's changelog.

1.1.0 - 2026-03-21

Added

  • add DuplicateKeyBehavior config option (#162)
Commits

Updates serde_with from 3.17.0 to 3.18.0

Release notes

Sourced from serde_with's releases.

serde_with v3.18.0

Added

  • Support OneOrMany with more sequence and set types (#929)

Changed

  • Bump MSRV to 1.88 due to the darling dependency
Commits
  • d50ec96 Bump version to 3.18.0 (#931)
  • 984fe32 Bump version to 3.18.0
  • 4ba41c7 Bump actions/upload-artifact from 6 to 7 in the github-actions group (#927)
  • 8fb2468 Bump actions/upload-artifact from 6 to 7 in the github-actions group
  • aec0a23 Bump MSRV to 1.88 (#930)
  • 25c15a2 Update time dependency to 0.3.47
  • 93bd3f4 Update test output after darling update
  • f825dbf Upgrade darling to 0.23.0
  • 65cbd73 Bump MSRV to 1.88
  • daff02e Extend OneOrMany implementation to more collection types (#929)
  • Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates tokio-postgres from 0.7.16 to 0.7.17

Release notes

Sourced from tokio-postgres's releases.

tokio-postgres v0.7.17

Added

  • Added Client::execute_typed method.
  • Added Client::query_typed_one and Client::query_typed_opt methods.
  • Added GenericClient::execute_typed, GenericClient::query_typed_one, and GenericClient::query_typed_opt methods.
  • Added Transaction::execute_typed, Transaction::query_typed_one, and Transaction::query_typed_opt methods.
  • Added support for bit-vec 0.9 via the with-bit-vec-0_9 feature.

Changed

  • Upgraded rand to 0.10.
  • Upgraded to Rust edition 2024, minimum Rust version 1.85.
Commits
  • 35a85bd Release tokio-postgres v0.7.17
  • 64674ba Release postgres-types v0.2.13
  • 40b760d Release postgres-derive v0.4.8
  • 6c92298 Release postgres-protocol v0.6.11
  • e088d7d style(clippy): fix clippy::useless_conversion
  • 19897e8 build(deps): upgrade semver compatible Rust dependencies
  • 2584926 build(deps): upgrade RustCrypto dependencies
  • 10a7724 chore: add bit-vec v0.9 support
  • 2853157 fix: cargo fmt --all
  • c8f8993 feat: add rustfmt.toml for opiniated formatting
  • Additional commits viewable in compare view

Updates tower-sessions from 0.14.0 to 0.15.0

Release notes

Sourced from tower-sessions's releases.

v0.15.0

What's Changed

  • Update rand to v0.9. #238
  • Fix memory ordering race. #254

New Contributors

Full Changelog: maxcountryman/tower-sessions@v0.14.0...v0.15.0

Changelog

Sourced from tower-sessions's changelog.

0.15.0

  • Update rand to v0.9. #238
  • Fix memory ordering race. #254
Commits
  • 92ad026 mark v0.15.0
  • 3cd7a25 Insert/remove session data before release-update to is_modified
  • 7800836 Add tower-sessions-cookie-store to the README
  • 5ea8112 Update mockall requirement from 0.13.0 to 0.14.0
  • 9acb2d1 fix: clippy lints
  • 9ad9533 fix(tower-sessions-core): disable parking_lot serde feature
  • 81105af Update rand
  • See full diff in compare view

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

  • Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

Updates unicode-segmentation from 1.12.0 to 1.13.2

Commits

Updates uuid from 1.22.0 to 1.23.0

Release notes

Sourced from uuid's releases.

v1.23.0

What's Changed

New Contributors

Special thanks

@​meng-xu-cs raised a series of bugs against the timestamp logic in uuid using automated tooling. The issues themselves were reasonably and responsibly presented and the end result is a better uuid library for everyone. Thanks!

Deprecations

This release includes the following deprecations:

  • Context: Renamed to ContextV1
  • Timestamp::from_gregorian: Renamed to Timestamp::from_gregorian_time

Change to Version::Max

Version::Max's u8 representation has changed from 0xff to 0x0f to match the value returned by Uuid::get_version_num.

Change to Uuid::get_version for the max UUID

Uuid::get_version will only return Some(Version::Max) if the UUID is actually the max UUID (all bytes are 0xff). Previously it would return Some if only the version field was 0x0f. This change matches the behaviour of the nil UUID, which only returns Some(Version::Nil) if the UUID is the nil UUID (all bytes are 0x00).

Full Changelog: uuid-rs/uuid@v1.22.0...v1.23.0

Commits
  • 00ab922 Merge pull request #876 from uuid-rs/cargo/v1.23.0
  • 726ba45 prepare for 1.23.0 release
  • 996dade Merge pull request #875 from uuid-rs/fix/context-ordering
  • e140479 simplify a use stmt
  • 8ed9142 reorganize and document more v7 context internals
  • e09a322 use LazyLock to synchronize v1/v6 context initialization
  • 0f260cc Merge pull request #874 from uuid-rs/chore/impl-cleanups
  • 1419e91 clean up and refactor main lib tests
  • ceeaf4b ensure we don't overflow on counters less than 12
  • 63bc8f5 Merge pull request #873 from uuid-rs/fix/error-msg
  • Additional commits viewable in compare view

Updates which from 8.0.1 to 8.0.2

Release notes

Sourced from which's releases.

8.0.2

What's Changed

New Contributors

Full Changelog: harryfei/which-rs@8.0.1...8.0.2

Changelog

Sourced from which's changelog.

8.0.2

  • Dependency on home_env removed, the implementation found in rust 1.85.0 for a home directory has been fixed. Thanks, [@​madsmtm],(https://github.com/madsmtm) for this contribution to which!
  • Dependency on winsafe removed, code for Windows API is now handwritten.
  • Dependency on rustix removed, we now depend on libc directly to reduce compile times.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will clo...

Description has been truncated

Bumps the backend group with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [askama](https://github.com/askama-rs/askama) | `0.15.4` | `0.15.6` |
| [cached](https://github.com/jaemk/cached) | `0.56.0` | `0.59.0` |
| [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.0` |
| [image](https://github.com/image-rs/image) | `0.25.9` | `0.25.10` |
| [lettre](https://github.com/lettre/lettre) | `0.11.19` | `0.11.20` |
| [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.75` | `0.10.76` |
| [postgres-openssl](https://github.com/rust-postgres/rust-postgres) | `0.5.2` | `0.5.3` |
| [serde_qs](https://github.com/samscott89/serde_qs) | `1.0.0` | `1.1.0` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.17.0` | `3.18.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [tokio-postgres](https://github.com/rust-postgres/rust-postgres) | `0.7.16` | `0.7.17` |
| [tower-sessions](https://github.com/maxcountryman/tower-sessions) | `0.14.0` | `0.15.0` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [unicode-segmentation](https://github.com/unicode-rs/unicode-segmentation) | `1.12.0` | `1.13.2` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.22.0` | `1.23.0` |
| [which](https://github.com/harryfei/which-rs) | `8.0.1` | `8.0.2` |


Updates `askama` from 0.15.4 to 0.15.6
- [Release notes](https://github.com/askama-rs/askama/releases)
- [Commits](askama-rs/askama@v0.15.4...v0.15.6)

Updates `cached` from 0.56.0 to 0.59.0
- [Changelog](https://github.com/jaemk/cached/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jaemk/cached/commits)

Updates `clap` from 4.5.60 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.0)

Updates `image` from 0.25.9 to 0.25.10
- [Changelog](https://github.com/image-rs/image/blob/v0.25.10/CHANGES.md)
- [Commits](image-rs/image@v0.25.9...v0.25.10)

Updates `lettre` from 0.11.19 to 0.11.20
- [Release notes](https://github.com/lettre/lettre/releases)
- [Changelog](https://github.com/lettre/lettre/blob/master/CHANGELOG.md)
- [Commits](lettre/lettre@v0.11.19...v0.11.20)

Updates `openssl` from 0.10.75 to 0.10.76
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.75...openssl-v0.10.76)

Updates `postgres-openssl` from 0.5.2 to 0.5.3
- [Release notes](https://github.com/rust-postgres/rust-postgres/releases)
- [Commits](rust-postgres/rust-postgres@postgres-openssl-v0.5.2...postgres-openssl-v0.5.3)

Updates `serde_qs` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/samscott89/serde_qs/releases)
- [Changelog](https://github.com/samscott89/serde_qs/blob/main/CHANGELOG.md)
- [Commits](samscott89/serde_qs@v1.0.0...v1.1.0)

Updates `serde_with` from 3.17.0 to 3.18.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.17.0...v3.18.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `tokio-postgres` from 0.7.16 to 0.7.17
- [Release notes](https://github.com/rust-postgres/rust-postgres/releases)
- [Commits](rust-postgres/rust-postgres@tokio-postgres-v0.7.16...tokio-postgres-v0.7.17)

Updates `tower-sessions` from 0.14.0 to 0.15.0
- [Release notes](https://github.com/maxcountryman/tower-sessions/releases)
- [Changelog](https://github.com/maxcountryman/tower-sessions/blob/main/CHANGELOG.md)
- [Commits](maxcountryman/tower-sessions@v0.14.0...v0.15.0)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `unicode-segmentation` from 1.12.0 to 1.13.2
- [Commits](unicode-rs/unicode-segmentation@v1.12.0...v1.13.2)

Updates `uuid` from 1.22.0 to 1.23.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.22.0...v1.23.0)

Updates `which` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@8.0.1...8.0.2)

---
updated-dependencies:
- dependency-name: askama
  dependency-version: 0.15.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: cached
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: clap
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: image
  dependency-version: 0.25.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: lettre
  dependency-version: 0.11.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: openssl
  dependency-version: 0.10.76
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: postgres-openssl
  dependency-version: 0.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: serde_qs
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: serde_with
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: tokio-postgres
  dependency-version: 0.7.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: tower-sessions
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: unicode-segmentation
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: uuid
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: which
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants