deps(deps): bump the infra group across 1 directory with 7 updates#47
deps(deps): bump the infra group across 1 directory with 7 updates#47dependabot[bot] wants to merge 1 commit into
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
🤖 Augment PR SummarySummary: This PR updates the workspace “infra” dependency set to newer releases. Changes:
Technical Notes: The 🤖 Was this summary useful? React with 👍 or 👎 |
![augmentcode[bot]](https://avatars.githubusercontent.com/in/1027498?s=60&v=4){kind=small}
| tokio = { version = "^1.48.0", features = ["full"] } # 2025-11-03 sw: async runtime staple, reviewed for LTS support | ||
| futures = { version = "^0.3.31" } # 2025-11-03 sw: combinators align with tokio 1.48, no unsafe diff | ||
| tokio = { version = "^1.52.2", features = ["full"] } # 2025-11-03 sw: async runtime staple, reviewed for LTS support | ||
| futures = { version = "^0.3.32" } # 2025-11-03 sw: combinators align with tokio 1.48, no unsafe diff |
There was a problem hiding this comment.
Cargo.toml:56 The audit note says futures “align with tokio 1.48”, but tokio is now bumped to 1.52.2; consider updating this note so it remains accurate.
Severity: low
🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.
| # Web Interface & Mesh Networking (2025-11-16 sw; Next-gen web interface with gossip) | ||
| axum = { version = "^0.7.9", features = ["ws", "macros", "multipart"] } # 2025-11-16 sw: Web server framework | ||
| tower-http = { version = "^0.6.8", features = ["cors", "trace", "fs"] } # 2025-11-16 sw: HTTP middleware | ||
| axum = { version = "^0.8.9", features = ["ws", "macros", "multipart"] } # 2025-11-16 sw: Web server framework |
There was a problem hiding this comment.
Cargo.toml:91 Bumping axum to ^0.8.9 may conflict with leptos_axum = 0.6.15 (which typically targets Axum ^0.7), so SSR/frontend builds could end up with multiple Axum majors or fail to compile.
Severity: medium
🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.
| axum = { workspace = true, features = ["http2", "multipart"] } # 2025-11-03 sw: Tier1 HTTP surface per docs/dependency-security.md | ||
| tokio = { workspace = true } | ||
| tower = { version = "^0.4.13", features = ["util"] } # 2025-11-03 sw: aligns with axum 0.7 require | ||
| tower = { version = "^0.5.2", features = ["util"] } # 2025-11-03 sw: aligns with axum 0.7 require |
There was a problem hiding this comment.
crates/protocol-s3/Cargo.toml:26 The inline comment still references “axum 0.7 require”, but the workspace now pins axum to 0.8.9; consider updating the compatibility note to match the current stack.
Severity: low
🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.
| gloo = { version = "=0.11.0" } # 2025-11-16 sw: Browser utilities for Wasm | ||
| web-sys = { version = "^0.3.68", features = ["WebSocket", "MessageEvent", "CloseEvent"] } # 2025-11-16 sw: Web APIs | ||
| tower = { version = "=0.4.13", features = ["util"] } # 2025-11-16 sw: Service abstractions | ||
| tower = { version = "=0.5.2", features = ["util"] } # 2025-11-16 sw: Service abstractions |
There was a problem hiding this comment.
Cargo.toml:112 With tower now upgraded to 0.5.2 across the workspace, consider checking whether the deny.toml multiple-version skip for tower@0.4.13 is still needed (stale skips can mask unintended dependency splits).
Severity: low
🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.
|
This PR has merge conflicts. Please rebase on the latest |
dependabot
Bot
force-pushed
the
dependabot/cargo/infra-101fa34b61
branch
from
f532e00 to
6f5cb54
Compare
|
Merge conflicts resolved -- thanks! |
Bumps the infra group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.50.0` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.31` | `0.3.32` | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` | | [tracing-test](https://github.com/dbrgn/tracing-test) | `0.2.5` | `0.2.6` | | [axum](https://github.com/tokio-rs/axum) | `0.7.9` | `0.8.9` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.8` | `0.6.11` | | [tower](https://github.com/tower-rs/tower) | `0.4.13` | `0.5.2` | Updates `tokio` from 1.48.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.50.0) Updates `futures` from 0.3.31 to 0.3.32 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.31...0.3.32) Updates `tracing-subscriber` from 0.3.22 to 0.3.23 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23) Updates `tracing-test` from 0.2.5 to 0.2.6 - [Changelog](https://github.com/dbrgn/tracing-test/blob/main/CHANGELOG.md) - [Commits](dbrgn/tracing-test@v0.2.5...v0.2.6) Updates `axum` from 0.7.9 to 0.8.9 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.7.9...axum-v0.8.9) Updates `tower-http` from 0.6.8 to 0.6.11 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.8...tower-http-0.6.11) Updates `tower` from 0.4.13 to 0.5.2 - [Release notes](https://github.com/tower-rs/tower/releases) - [Commits](tower-rs/tower@tower-0.4.13...tower-0.5.2) --- updated-dependencies: - dependency-name: axum dependency-version: 0.8.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: infra - dependency-name: futures dependency-version: 0.3.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: infra - dependency-name: tokio dependency-version: 1.52.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: infra - dependency-name: tower dependency-version: 0.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: infra - dependency-name: tower-http dependency-version: 0.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: infra - dependency-name: tracing-subscriber dependency-version: 0.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: infra - dependency-name: tracing-test dependency-version: 0.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: infra ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/cargo/infra-101fa34b61
branch
from
6f5cb54 to
0542055
Compare
Bumps the infra group with 7 updates in the / directory:
1.48.01.50.00.3.310.3.320.3.220.3.230.2.50.2.60.7.90.8.90.6.80.6.110.4.130.5.2Updates
tokiofrom 1.48.0 to 1.50.0Release notes
Sourced from tokio's releases.
... (truncated)
Commits
0273e45chore: prepare Tokio v1.50.0 (#7934)e3ee4e5chore: prepare tokio-macros v2.6.1 (#7943)8c980eaio: addwrite_all_vectoredtotokio-util(#7768)e35fd6dci: fix patch during clippy step (#7935)03fe44cruntime: fixevent_intervaldoc (#7932)d18e5dfio: fix race inMock::poll_write(#7882)f21f269runtime: fix race condition during the blocking pool shutdown (#7922)d81e8f0macros: remove (most) localusedeclarations intokio::select!(#7929)25e7f26rt: fix missing quotation in docs (#7925)e1a91efutil: fix typo in docs (#7926)Updates
futuresfrom 0.3.31 to 0.3.32Release notes
Sourced from futures's releases.
Changelog
Sourced from futures's changelog.
Commits
d9bba94Release 0.3.32151e0b9Add comments on rust-version field in Cargo.toml4aaf00cBump MSRV of utility crates to 1.71a4cce12perf: improve AtomicWaker::wake performance (#2983)ba9d102Add#[clippy::has_significant_drop]to guards (#2967)20396a8Fix rustdoc::broken_intra_doc_links warning815f6ebFix documentation ofBiLock::lock(#2971)0f0db04futures-util: makeMutex::new()const (#2956)5d6fc5eci: Test big-endian target (s390x Linux)9f739feIgnore dead_code lint on Fn1 traitUpdates
tracing-subscriberfrom 0.3.22 to 0.3.23Release notes
Sourced from tracing-subscriber's releases.
Commits
54ede4dchore: prepare tracing-subscriber 0.3.23 (#3490)37558d5subscriber: allow ansi sanitization to be disabled (#3484)efc690fcore: add missing const (#3449)0c32367core: Use const initializers instead ofonce_cell9feb241docs: add arcswap reload crate to related (#3442)2d55f6fchore: prepare tracing 0.1.44 (#3439)10a9e83chore: prepare tracing-core 0.1.36 (#3440)ee82cf9tracing: fix record_all panic (#3432)9978c36chore: prepare tracing-mock 0.1.0-beta.3 (#3429)Updates
tracing-testfrom 0.2.5 to 0.2.6Changelog
Sourced from tracing-test's changelog.
Commits
31f16caRelease v0.2.62a0faf4Enforce version equality between tracing-test and tracing-test-macro (#57)f93d343Update tracing-test version number in documentation (#58)90d1f4eBump actions/checkout from 5 to 6 (#56)cf7fe8cBump actions/checkout from 4 to 5 (#54)Updates
axumfrom 0.7.9 to 0.8.9Release notes
Sourced from axum's releases.
... (truncated)
Commits
c59208crevert axum-core changelog changes99068f5Revert "FixIntoResponsefor tuples overriding error response codes (#3603)"23d7098Revert "axum-core 0.5.6"e8a39adaxum-macros 0.5.16e9a249axum-extra 0.12.60ec9041axum 0.8.9c3fcebbaxum-core 0.5.6a8790fcupdate release notes26ba7bbdocs: consolidate state management docs in crate root (#3683)9fc59efUpdate to tokio-tungstenite 0.29 (#3689)Updates
tower-httpfrom 0.6.8 to 0.6.11Release notes
Sourced from tower-http's releases.
... (truncated)
Commits
1d082efv0.6.119c3117dfeat: set multiple request header (#677)667e7c7Remove duplicate cfg attribute for is_reserved_dos_name (#675)7551a9bfeat(set_header): refactor and improve multiple header middleware (#672)991e9eeadd From<i32> impl for GrpcCode (#506)3962dbaDo compress grpc-web responses (#408)f0b3bb6Fix serve_dir method not allowed handling when no fallback is configured (#587)d1a571bci: use static timeout in stress-test workflow (#671)309555aci: fix flaky encoding test, add nightly stress test job (#670)4532fc2v0.6.10Updates
towerfrom 0.4.13 to 0.5.2Release notes
Sourced from tower's releases.
Commits
7dc533etower v0.5.2a09fd97chore: fix dead code warning for 'Sealed' trait and 'sample_floyd2' func (#799)f57e31bAddutil::BoxCloneSyncServiceLayer(#802)da24532Addutil::BoxCloneSyncService(#777)6283f3aUpgrade http and sync_wrapper dependencies (#788)7155101Prepare release of v0.5.1 (#791)b2c48b4Bump dependency on tower-layer (#787)fec9e55tower-layer: drop versions from dev dependencies (#782)646804dchore: prepare to release tower-0.5.0, tower-layer-0.3.3, tower-service-0.3.3...7202cfechore: fix a few typos (#780)