Skip to content

build(deps): bump the rust-deps group across 1 directory with 7 updates - #103

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-deps-e636a5cca9
Open

build(deps): bump the rust-deps group across 1 directory with 7 updates#103
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-deps-e636a5cca9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-deps group with 7 updates in the / directory:

Package From To
lazy_static 1.5.0 1.5.1
sha2 0.11.0 0.11.1
octocrab 0.54.1 0.54.7
log 0.4.33 0.4.34
serde_json 1.0.151 1.0.154
tokio 1.53.1 1.54.1
rand 0.10.2 0.10.3

Updates lazy_static from 1.5.0 to 1.5.1

Commits

Updates sha2 from 0.11.0 to 0.11.1

Commits

Updates octocrab from 0.54.1 to 0.54.7

Release notes

Sourced from octocrab's releases.

v0.54.7

Other

  • Fix/installation token 401 refresh (#994)

v0.54.6

Other

  • Feat/scoped installation token (#991)
  • Fix/handle rate limits retry (#990)

v0.54.5

Other

  • Feature/missing handlers (#988)

v0.54.4

Other

  • pull requests stacks #934 according to 2022 API (#944)

v0.54.3

Fixed

  • fixed Cargo.toml tests discovery (#977)
  • fixed modules discrepancies in lib.rs and README.md (#976)

Other

  • app_from_rsa_pem() for private key auth; reexported jsonwebtoken to avoid collisions #985 (#986)
  • updated map_github_error to handle non-JSON error payload #772 (#983)
  • exposed rate_limit_reset and all headers in GitHubError #773 (#982)
  • Switched default feature from jwt-rust-crypto to jwt-aws-lc-rs (#981)
  • added code examples for docs.rs (#979)
  • updated comments for docs.rs (#978)
  • tuned webhook_events to support verifying signatures (#975)
  • Bugfix/tests bloat (#974)
  • consolidated tests from crates into integration tests module (#973)
  • forwarded Octocrab's TLS features to reqwest (#971)

v0.54.2

Added

  • added missing repos functionality #542 (#950)
  • added reqwest feature to use reqwest client

Changed

  • changed doctests to not create default octocrab instance (#962)

... (truncated)

Changelog

Sourced from octocrab's changelog.

0.54.7 - 2026-10-29

Other

  • Fix/installation token 401 refresh (#994)

0.54.6 - 2026-10-27

Other

  • Feat/scoped installation token (#991)
  • Fix/handle rate limits retry (#990)

0.54.5 - 2026-10-16

Other

  • Feature/missing handlers (#988)

0.54.4 - 2026-10-13

Other

  • pull requests stacks #934 according to 2022 API (#944)

0.54.3 - 2026-10-06

Fixed

  • fixed Cargo.toml tests discovery (#977)
  • fixed modules discrepancies in lib.rs and README.md (#976)

Other

  • app_from_rsa_pem() for private key auth; reexported jsonwebtoken to avoid collisions #985 (#986)
  • updated map_github_error to handle non-JSON error payload #772 (#983)
  • exposed rate_limit_reset and all headers in GitHubError #773 (#982)
  • Switched default feature from jwt-rust-crypto to jwt-aws-lc-rs (#981)
  • added code examples for docs.rs (#979)
  • updated comments for docs.rs (#978)
  • tuned webhook_events to support verifying signatures (#975)
  • Bugfix/tests bloat (#974)
  • consolidated tests from crates into integration tests module (#973)
  • forwarded Octocrab's TLS features to reqwest (#971)

0.54.2 - 2026-09-14

Added

  • added missing repos functionality #542 (#950)

... (truncated)

Commits

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

  • time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

  • fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
  • net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
  • runtime: add Builder::max_io_events_per_busy_tick (#8410)
  • runtime: stabilize tokio::runtime::worker_index() (#8431)
  • sync: add SemaphorePermit::semaphore() (#8482)
  • sync: add blocking_acquire methods to Semaphore (#8269)
  • sync: add watch::Receiver::is_closed (#8481)
  • wasm: support JSPI for Emscripten target (#8285, #8627)
  • wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

  • fs: reject zero in File::set_max_buf_size (#8449)
  • io: make copy_buf cooperative (#8459)
  • io: panic when BufReader or BufStream is created with zero capacity (#8494)
  • io: panic when in-memory pipe is created with zero capacity (#8397)
  • io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
  • io: support vectored writes in Sink (#8663)
  • net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
  • net: start accepted sockets as readable and writable (#8435)
  • net: support UCred on Fuchsia (#8257)
  • process: use mio::unix::pipe for Unix child stdio (#8603)
  • runtime: cache-pad the shared injection queue and idle state (#8622)
  • runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
  • runtime: make enable_io available whenever rt is enabled (#8387)
  • runtime: move block_in_place setup into a non-generic function (#8315)
  • runtime: move the multi-thread inject queue to its own mutex (#8382)
  • runtime: panic when max_io_events_per_tick is zero (#8476)
  • runtime: suggest .await in nested block_on panic message (#8501)
  • sync: avoid atomic reader count in broadcast slots (#8357)
  • sync: use acquire/release orderings in Notify (#8325)
  • time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

  • Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
  • Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
  • Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

  • Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits
  • 9e7d328 Prepare rand 0.10.3 (#1840)
  • f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
  • ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
  • c994eb1 docs: fix angle unit in quick start example (#1839)
  • 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
  • 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
  • bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
  • 521fab6 Stop pinning dependencies (#1820)
  • 3f7c433 Stop pinning dependencies
  • cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the rust-deps group across 1 directory with 7 updates
af90a35 
Bumps the rust-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [lazy_static](https://github.com/rust-lang-nursery/lazy-static.rs) | `1.5.0` | `1.5.1` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.54.1` | `0.54.7` |
| [log](https://github.com/rust-lang/log) | `0.4.33` | `0.4.34` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.54.1` |
| [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` |



Updates `lazy_static` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/rust-lang-nursery/lazy-static.rs/releases)
- [Commits](https://github.com/rust-lang-nursery/lazy-static.rs/commits)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `octocrab` from 0.54.1 to 0.54.7
- [Release notes](https://github.com/XAMPPRocky/octocrab/releases)
- [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md)
- [Commits](XAMPPRocky/octocrab@v0.54.1...v0.54.7)

Updates `log` from 0.4.33 to 0.4.34
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/main/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.33...0.4.34)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `tokio` from 1.53.1 to 1.54.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.54.1)

Updates `rand` from 0.10.2 to 0.10.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.2...0.10.3)

---
updated-dependencies:
- dependency-name: lazy_static
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: octocrab
  dependency-version: 0.54.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: tokio
  dependency-version: 1.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: rand
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Nov 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants