chore(deps): bump the cargo-minor-patch group across 1 directory with 11 updates by dependabot[bot] · Pull Request #1332 · cipherstash/stack

dependabot · 2026-10-22T00:24:31Z

Bumps the cargo-minor-patch group with 11 updates in the /packages/eql directory:

Package	From	To
serde_json	`1.0.151`	`1.0.154`
schemars	`1.2.2`	`1.2.3`
zeroize	`1.8.2`	`1.9.1`
rust_decimal	`1.42.1`	`1.43.0`
uuid	`1.23.1`	`1.28.0`
blake3	`1.8.5`	`1.8.7`
lazy_static	`1.5.0`	`1.5.1`
reqwest	`0.13.4`	`0.13.5`
rustls	`0.23.45`	`0.23.46`
tracing	`0.1.41`	`0.1.44`
url	`2.5.7`	`2.5.8`

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates schemars from 1.2.2 to 1.2.3

Release notes

Sourced from schemars's releases.

v1.2.3

Fixed

schema creation panics with arbitrary precision JSON numbers (GREsau/schemars#527)

Resolve unused_qualifications lint violation in generated code (GREsau/schemars#539 / GREsau/schemars#541)

Changed

Put the tag of internally-tagged enums first in the schema's properties array (GREsau/schemars#537 / GREsau/schemars#538)

Changelog

Sourced from schemars's changelog.

[1.2.3] - 2026-10-12

Fixed

schema creation panics with arbitrary precision JSON numbers (GREsau/schemars#527)

Resolve unused_qualifications lint violation in generated code (GREsau/schemars#539 / GREsau/schemars#541)

Changed

Put the tag of internally-tagged enums first in the schema's properties array (GREsau/schemars#537 / GREsau/schemars#538)

Commits

4791bb7 v1.2.3
c6a89b7 Put the tag of an internally tagged enum first in properties
c5cd8b5 fix: schema creation panics with arbitrary precision JSON numbers
766d70b Resolve unused_qualifications lint in crate and generated code - #541 (#541)
d07655e Resolve clippy error
See full diff in compare view

Updates zeroize from 1.8.2 to 1.9.1

Commits

34a6ebc zeroize v1.9.1 (#1553)
e68c684 zeroize: test under cargo miri in CI (#1552)
4a53d7d Update Cargo.lock (#1545)
a2b1713 zeroize: fix fallback code used by optimization_barrier (#1551)
3c5aa70 ctutils v0.4.3 (#1550)
6f4e70f ctutils: use cast_(un)signed; MSRV 1.87 (#1548)
29391e4 ctutils: make Choice::{to_bool, to_u8} into const fn; MSRV 1.86 (#1547)
f09945d ci: allow triggering workflows manually (#1543)
53493df dit v0.0.1-alpha (#1540)
c89949d Rename aarch64-dit to dit (#1539)
Additional commits viewable in compare view

Updates rust_decimal from 1.42.1 to 1.43.0

Release notes

Sourced from rust_decimal's releases.

1.43.0

What's Changed

Accumulated fixes backported from master by @paupino in paupino/rust-decimal#808

Various performance improvements by @paupino in paupino/rust-decimal#809

General clippy cleanup by @paupino in paupino/rust-decimal#813

Require rust_decimal_macros >=1.37 to avoid circular dependency by @momomuchu in paupino/rust-decimal#814

fix: add negative sign for array_string by @flisky in paupino/rust-decimal#823

Remove rkyv 0.7 from feature bridge and update rand 0.8 support by @paupino in paupino/rust-decimal#819

New Contributors

@momomuchu made their first contribution in paupino/rust-decimal#814

@flisky made their first contribution in paupino/rust-decimal#823

Full Changelog: paupino/rust-decimal@1.42.1...1.43.0

Commits

8592462 version 1.43.0
9be5917 Remove rkyv 0.7 from feature bridge and update rand 0.8 support (#819)
f017c8b Merge pull request #823 from flisky/v1
93bd26f fix: add negative sign for array_string
5c3bf3b Merge pull request #814 from momomuchu/fix/rust-decimal-macros-minimal-versio...
fe55209 fix: require rust_decimal_macros >=1.37 to avoid circular dependency
551be15 General clippy cleanup (#813)
f7272b5 Various performance improvements (#809)
b363729 Accumulated fixes backported from master (#808)
See full diff in compare view

Updates uuid from 1.23.1 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

Add optional serde format adapters by @RanaPriyansh in uuid-rs/uuid#916

Prepare for 1.28.0 release by @KodrAus in uuid-rs/uuid#918

New Contributors

@RanaPriyansh made their first contribution in uuid-rs/uuid#916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

Accept case-insensitive urn:uuid: prefixes when parsing by @jaideeppyne in uuid-rs/uuid#912

Fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos by @KodrAus in uuid-rs/uuid#915

Prepare for 1.27.0 release by @KodrAus in uuid-rs/uuid#917

New Contributors

@jaideeppyne made their first contribution in uuid-rs/uuid#912

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

v1.26.1

What's Changed

Seat the v7 counter below the version nibble by @lenamonj in uuid-rs/uuid#907

Don't panic in overflowing Timestamp to SystemTime conversion by @KodrAus in uuid-rs/uuid#909

Prepare for 1.26.1 release by @KodrAus in uuid-rs/uuid#910

New Contributors

@lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

v1.26.0

What's Changed

Add ContextV7::with_additional_precision_bits by @ChrisJr404 in uuid-rs/uuid#904

Prepare for 1.26.0 release by @KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

Add a serde::bytes module that encodes a Uuid as a byte string by @ChrisJr404 in uuid-rs/uuid#902

Prepare for 1.25.0 release by @KodrAus in uuid-rs/uuid#903

New Contributors

@ChrisJr404 made their first contribution in uuid-rs/uuid#902

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

... (truncated)

Commits

276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
4b3b9f5 prepare for 1.28.0 release
cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
784a022 Inline expected tokens in optional compact serde test
a5678c3 Simplify optional serde adapter tests to option tokens
638a518 Refactor optional serde adapter tests and share byte wrapper
b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
ffd8ec5 prepare for 1.27.0 release
654fa5b Add optional serde format adapters
4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
Additional commits viewable in compare view

Updates blake3 from 1.8.5 to 1.8.7

Release notes

Sourced from blake3's releases.

1.8.7

version 1.8.7

Changes since 1.8.6:

Remove the arrayref dependency. Unfortunately the crates.io owner was compromised.

1.8.6

version 1.8.6

Changes since 1.8.5:

update_mmap and update_mmap_rayon (and by extension b3sum) now use seek rather than metadata to get the length of a file/mapping, and they tolerate mmap failures. That means b3sum will now memory map e.g. Linux block devices, which support mapping despite reporting length 0 in metadata. Hashing NUL files on Windows also works now, where previously it was an error unless you used --no-mmap or <. This change was originally proposed by @nabijaczleweli.

Commits

f3149ec version 1.8.7
b65bcb7 add #[allow(deprecated)] annotations to fix nightly/beta warnings
483a220 fix warnings related to not using MAX constants
ba02549 Codex: remove arrayref
77b257e version 1.8.6
83b1746 use seek instead of metadata to establish mmap length (#570)
9eac279 use vswhere to find Visual Studio in CI
fc3d0e9 Fix path to Visual Studio toolchain in CI
8aa5145 a few more colons
6bb9773 use cargo:: build script syntax
Additional commits viewable in compare view

Updates lazy_static from 1.5.0 to 1.5.1

Commits

See full diff in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Updates rustls from 0.23.45 to 0.23.46

Commits

f04804f Delay saving KX hint until handshake confirmation
049d39b Bump version to 0.23.46
6d0ba08 Eliminate secret from impl Debug for ServerSessionValue
2b82b81 unbuffered: update TLS 1.3 traffic keys before exhausting them
74343e7 conn: update TLS 1.3 traffic keys within fragmented writes
795eea7 Advance the HPKE sequence only after seal succeeds
d67cb71 stream: provide backpressure while buffering received plaintext
7a69ade util: fuse flushes from connections with errors
493d089 conn: fuse writes for connections with errors
db00e01 util: keep flushing after short writes
Additional commits viewable in compare view

Updates tracing from 0.1.41 to 0.1.44

Release notes

Sourced from tracing's releases.

tracing 0.1.44

Fixed

Fix record_all panic (#3432)

Changed

tracing-core: updated to 0.1.36 (#3440)

#3432: tokio-rs/tracing#3432 #3440: tokio-rs/tracing#3440

tracing 0.1.43

Important

The previous release [0.1.42] was yanked because #3382 was a breaking change. See further details in #3424. This release contains all the changes from that version, plus a revert for the problematic part of the breaking PR.

Fixed

Revert "make valueset macro sanitary" (#3425)

#3382: tokio-rs/tracing#3382 #3424: tokio-rs/tracing#3424 #3425: tokio-rs/tracing#3425 [0.1.42]: https://github.com/tokio-rs/tracing/releases/tag/tracing-0.1.42

tracing 0.1.42

Important

The [Span::record_all] method has been removed from the documented API. It was always unsuable via the documented API as it requried a ValueSet which has no publically documented constructors. The method remains, but should not be used outside of tracing macros.

Added

attributes: Support constant expressions as instrument field names (#3158)

Add record_all! macro for recording multiple values in one call (#3227)

core: Improve code generation at trace points significantly (#3398)

Changed

tracing-core: updated to 0.1.35 (#3414)

tracing-attributes: updated to 0.1.31 (#3417)

Fixed

Fix "name / parent" variant of event! (#2983)

... (truncated)

Commits

2d55f6f chore: prepare tracing 0.1.44 (#3439)
10a9e83 chore: prepare tracing-core 0.1.36 (#3440)
ee82cf9 tracing: fix record_all panic (#3432)
9978c36 chore: prepare tracing-mock 0.1.0-beta.3 (#3429)
cc44064 chore: prepare tracing-subscriber 0.3.22 (#3428)
64e1c8d chore: prepare tracing 0.1.43 (#3427)
7c44f7b tracing: revert "make valueset macro sanitary" (#3425)
cdaf661 chore: prepare tracing-mock 0.1.0-beta.2 (#3422)
a164fd3 chore: prepare tracing-journald 0.3.2 (#3421)
405397b chore: prepare tracing-appender 0.2.4 (#3420)
Additional commits viewable in compare view

Updates url from 2.5.7 to 2.5.8

Commits

d6ea13c Bump to 2.5.8
8269ac3 ci: update cargo-deny config, bump cargo-deny-action to v2 (#1092)
6dfdf17 chore: fix some typos in comments (#1090)
b06048d Attempt to fix 1.82 CI (#1085)
9771ab5 Fix roundtripping issue (#1079)
22b925f Improve Compile Times with serde_derive (#1075)
0afccc9 fix outdated docs for ParseError (#1074)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 11 updates Bumps the cargo-minor-patch group with 11 updates in the /packages/eql directory: | Package | From | To | | --- | --- | --- | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [schemars](https://github.com/GREsau/schemars) | `1.2.2` | `1.2.3` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.1` | | [rust_decimal](https://github.com/paupino/rust-decimal) | `1.42.1` | `1.43.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.1` | `1.28.0` | | [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.5` | `1.8.7` | | [lazy_static](https://github.com/rust-lang-nursery/lazy-static.rs) | `1.5.0` | `1.5.1` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [rustls](https://github.com/rustls/rustls) | `0.23.45` | `0.23.46` | | [tracing](https://github.com/tokio-rs/tracing) | `0.1.41` | `0.1.44` | | [url](https://github.com/servo/rust-url) | `2.5.7` | `2.5.8` | Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `schemars` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/GREsau/schemars/releases) - [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md) - [Commits](GREsau/schemars@v1.2.2...v1.2.3) Updates `zeroize` from 1.8.2 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `rust_decimal` from 1.42.1 to 1.43.0 - [Release notes](https://github.com/paupino/rust-decimal/releases) - [Changelog](https://github.com/paupino/rust-decimal/blob/master/CHANGELOG.md) - [Commits](paupino/rust-decimal@1.42.1...1.43.0) Updates `uuid` from 1.23.1 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.1...v1.28.0) Updates `blake3` from 1.8.5 to 1.8.7 - [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases) - [Commits](BLAKE3-team/BLAKE3@1.8.5...1.8.7) Updates `lazy_static` from 1.5.0 to 1.5.1 - [Release notes](https://github.com/rust-lang-nursery/lazy-static.rs/releases) - [Commits](https://github.com/rust-lang-nursery/lazy-static.rs/commits) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `rustls` from 0.23.45 to 0.23.46 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.45...v/0.23.46) Updates `tracing` from 0.1.41 to 0.1.44 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-0.1.41...tracing-0.1.44) Updates `url` from 2.5.7 to 2.5.8 - [Release notes](https://github.com/servo/rust-url/releases) - [Commits](servo/rust-url@v2.5.7...v2.5.8) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: schemars dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: rust_decimal dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: blake3 dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: lazy_static dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: rustls dependency-version: 0.23.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tracing dependency-version: 0.1.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: url dependency-version: 2.5.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-22T00:24:37Z

Labels

The following labels could not be found: supply-chain. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

changeset-bot · 2026-10-22T00:24:37Z

⚠️ No Changeset found

Latest commit: eb44f2c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

coderabbitai · 2026-10-22T00:24:41Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: 4e712531-f542-4c6b-8b1a-da9301f95978

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

freshtonic

Approved. This PR changes only packages/eql/Cargo.lock.

I checked these points:

All sources are crates.io (or path). There are no git sources and no new registries.
The 11 bumps are minor or patch versions. The largest are uuid 1.23.1 → 1.28.0 and zeroize 1.8.2 → 1.9.1 (with zeroize_derive 1.5.0).
rust_decimal 1.43.0 no longer pulls in rkyv 0.7. This removes rkyv and its dependencies (bytecheck, rend, ptr_meta, seahash, arrayref), ahash 0.7, hashbrown 0.12 and syn 1. tests/sqlx uses rust_decimal through the sqlx rust_decimal feature only, not rkyv.
The one new crate is base64 0.23.1. reqwest 0.13.5 pulls it in, next to the existing 0.22.1.
The eql-bindings version entry is not changed, so the lockstep version check is not affected.

The EQL Rust and SQLx jobs (Rust workspace crates, Build test archive, Validate (Postgres 17)) were still running when I did this review. Branch protection blocks the merge until they pass. No changeset is necessary.

dependabot Bot requested a review from a team as a code owner October 22, 2026 00:24

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 22, 2026

freshtonic approved these changes Oct 22, 2026

View reviewed changes

Navigation Menu

Repository navigation

chore(deps): bump the cargo-minor-patch group across 1 directory with 11 updates - #1332

chore(deps): bump the cargo-minor-patch group across 1 directory with 11 updates#1332
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/packages/eql/cargo-minor-patch-0e459aff17

dependabot Bot commented on behalf of github Oct 22, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 22, 2026

Uh oh!

changeset-bot Bot commented Oct 22, 2026

Uh oh!

coderabbitai Bot commented Oct 22, 2026

Review skipped

Uh oh!

freshtonic left a comment

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 22, 2026

v1.0.154

v1.0.153

v1.0.152

v1.2.3

Fixed

Changed

[1.2.3] - 2026-10-12

Fixed

Changed

1.43.0

What's Changed

New Contributors

v1.28.0

What's Changed

New Contributors

v1.27.0

What's Changed

New Contributors

v1.26.1

What's Changed

New Contributors

v1.26.0

What's Changed

1.25.0

What's Changed

New Contributors

1.8.7

1.8.6

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

tracing 0.1.44

Fixed

Changed

tracing 0.1.43

Important

Fixed

tracing 0.1.42

Important

Added

Changed

Fixed

Uh oh!

dependabot Bot commented on behalf of github Oct 22, 2026

Labels

Uh oh!

changeset-bot Bot commented Oct 22, 2026

⚠️ No Changeset found

Uh oh!

coderabbitai Bot commented Oct 22, 2026

Review skipped

Uh oh!

freshtonic left a comment

Choose a reason for hiding this comment

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant