Skip to content

build(deps): bump the rust-dependencies group across 1 directory with 26 updates - #2007

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-437248c943
Open

build(deps): bump the rust-dependencies group across 1 directory with 26 updates#2007
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-437248c943

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 26 updates in the / directory:

Package From To
clap 4.6.6 4.6.7
clap_complete 4.6.9 4.6.11
flate2 1.1.9 1.1.10
process-wrap 10.0.0 10.0.1
rand 0.10.2 0.10.3
rcgen 0.14.9 0.14.10
rmcp 3.2.0 3.4.1
sigstore-verify 0.11.0 0.13.0
jsonwebtoken 10.4.0 11.1.0
surrealkv 0.21.3 0.21.4
syn 3.0.4 3.0.6
thiserror 2.0.20 2.0.21
toml 1.1.4+spec-1.1.0 1.1.6+spec-1.1.0
tower-http 0.7.0 0.7.1
utoipa 5.5.0 6.0.0
uuid 1.25.0 1.26.1
wasm-encoder 0.257.1 0.259.0
wat 1.257.1 1.259.0
wasmparser 0.257.1 0.259.0
wit-component 0.257.1 0.259.0
wit-parser 0.257.1 0.259.0
wasmtime 48.0.3 49.0.1
wasmtime-wasi 48.0.3 49.0.1
which 8.0.5 8.0.6
toml_edit 0.25.13+spec-1.1.0 0.25.15+spec-1.1.0
gix-discover 0.55.0 0.56.0

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates clap_complete from 4.6.9 to 4.6.11

Commits
  • 2cb76fd chore: Release
  • 0b00b8d docs: Update changelog
  • 3443000 Merge pull request #6526 from bonnefoa/fix-completion-escape
  • a1b6be7 fix(clap_complete): Fix value escape in zsh completion
  • face9e8 test(complete): Add completion test without arg's help
  • 88053ab test(complete): Re-enable complete tests
  • e6adcc2 chore(release): Simplify replacements
  • 13f2db5 chore: Release
  • 3304fea docs: Update changelog
  • 7b2ad34 Merge pull request #6521 from r-near/feat/derive-deferred-initialization
  • Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits
  • ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
  • fb5228d Merge pull request #559 from bushrat011899/no_std
  • 6ed3ba3 Add executable no_std example
  • faed8a0 Expand CI to test no_std compatibility and correctness
  • 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
  • 3fe1126 Centralize usage of std for error and io
  • 98e313a Add GzHeader::mtime_as_duration
  • 0642965 Switch to core implicit prelude and only use std where required
  • 454a63c Remove left-over dbg! statement
  • 2a490b7 Add runtime_detection feature
  • Additional commits viewable in compare view

Updates process-wrap from 10.0.0 to 10.0.1

Changelog

Sourced from process-wrap's changelog.

10.0.1 - 2026-09-23

  • Bugfix: Avoid tracing after fork - (a32bc17)
  • Bugfix: Stop capturing unused signal mask - (5143195)
Commits

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

  • Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
  • Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
  • Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

  • Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits
  • 9e7d328 Prepare rand 0.10.3 (#1840)
  • f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
  • ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
  • c994eb1 docs: fix angle unit in quick start example (#1839)
  • 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
  • 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
  • bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
  • 521fab6 Stop pinning dependencies (#1820)
  • 3f7c433 Stop pinning dependencies
  • cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
  • Additional commits viewable in compare view

Updates rcgen from 0.14.9 to 0.14.10

Release notes

Sourced from rcgen's releases.

0.14.10

What's Changed

Commits
  • f4a3b16 Bump version to 0.14.10
  • dea3d4d Upgrade to botan 0.13
  • 788b093 Upgrade to pem 4
  • 7ce21f4 Take advantage of stable ML-DSA in aws-lc-rs
  • e2dba45 Remove unused RSASSA-PSS signature algorithm
  • 37070de Omit reasonCode unspecified(0) from CRL entry extensions
  • b247a87 Write extensions for certs that only set KeyUsage or CRLDP
  • 85eafdd Reject empty CRL distribution point URIs
  • 3a99b50 Encode CRL invalidityDate as GeneralizedTime
  • See full diff in compare view

Updates rmcp from 3.2.0 to 3.4.1

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.4.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.4.1

Fixed

  • (transport) fall back after JSON discover rejections (#1288)
  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

Other

  • (deps) update rstest requirement from 0.26.1 to 0.27.0 (#1276)

rmcp-macros-v3.4.0

Added

  • (model) add ServerConfig and ClientConfig (#1266)

Fixed

  • (model) deprecate ServerInfo and ClientInfo aliases (#1156)

rmcp-v3.4.0

Added

  • (model) add ServerConfig and ClientConfig (#1266)

Fixed

  • (rmcp) use ServerConfig in cancellation test (#1273)
  • (rmcp) route peer cancellation by lifecycle (#1262)
  • run first pre-init request in service loop (#1263)
  • (auth) let url origin decide prm discovery (#1264)
  • (model) deprecate ServerInfo and ClientInfo aliases (#1156)
  • (auth) ignore non-metadata JSON when probing for protected resource metadata (#1204)
  • do not treat malformed JSON 200 as Accepted for requests (#1208)
  • (streamable-http-server) map handler-generated HeaderMismatch to HTTP 400 (#1259)
  • (http) enforce Origin validation semantics (#1192)

rmcp-macros-v3.3.0

Added

  • (macros) reject empty tool_router (#1233)

rmcp-v3.3.0

Added

  • add ServerHandler::negotiate_initialize (#1247)

... (truncated)

Commits
  • 9427a92 chore: release v3.4.1 (#1294)
  • a730321 chore(deps): bump the codeql-action group with 4 updates (#1290)
  • fa05883 chore(deps): bump crate-ci/typos from 1.50.1 to 1.50.2 (#1291)
  • 5311a0f chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#1292)
  • 71e3081 fix(transport): fall back after JSON discover rejections (#1288)
  • 16d2186 fix(macros): accept const paths and concat! in tool/prompt descriptions (#1243)
  • dbd2382 chore(deps): update rstest requirement from 0.26.1 to 0.27.0 (#1276)
  • 9f7ace3 chore(deps): bump the codeql-action group with 4 updates (#1277)
  • 011f281 chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (#1278)
  • 0cfbe7f chore(deps): bump taiki-e/install-action from 2.87.6 to 2.87.12 (#1279)
  • Additional commits viewable in compare view

Updates sigstore-verify from 0.11.0 to 0.13.0

Release notes

Sourced from sigstore-verify's releases.

sigstore-verify-v0.13.0

Fixed

  • (types) [breaking] keep checkpoint fields consistent with the signed note (#229)
  • [breaking] restore fixes dropped from the pre-1.0 stack (#214–#219) (#226)

sigstore-verify-v0.12.0

Added

  • (verify) [breaking] harden policy, results and trust preparation (#209)
  • (artifact) [breaking] stream artifacts from sync and async readers (#185)
  • complete and harden Rekor v2 support (#176)
  • (trust-root) [breaking] make TUF bootstrap trust explicit (#180)

Fixed

  • (crypto) validate and share algorithm resolution (#207)
  • (types) accept ProtoJSON base64 log IDs (#223)
  • (test) reject mutation-harness false positives and honor fixture trust (#201)
  • (types) [breaking] check log indices, decode digest bytes unambiguously and bind DSSE verifiers (#199)
  • accept in-toto statements without predicates (#221)
  • (verify) [breaking] tighten managed-key verification (#157)
  • (verify) handle canonical Rekor intoto entries (#175)
  • (verify) bind TSA timestamps to the authority that signed them (TOB-SIGSTORE-11) (#166)
  • (types) [breaking] make multi-signature DSSE envelopes unrepresentable (TOB-SIGSTORE-9) (#170)
  • (verify) [breaking] remove clock skew, and use jiff Timestamp in the interfaces (#164)
  • (verify) [breaking] authenticate signature timestamps and bind log entries to the bundle (#160)

Other

  • (features) [breaking] separate offline verification from HTTP clients (#212)
  • (release) repair API examples, licensing and trust bootstrap guidance (#206)
  • (release) tighten dependencies, MSRV and feature checks (#202)
  • (types) [breaking] deserialize semantic bundle values eagerly (#196)
  • (artifact) [breaking] make artifact digests typed (#184)
  • (crypto) [breaking] clarify SPKI constructor names (#178)
  • (trust-root) [breaking] consolidate transparency key getters and align TimeRange semantics (#159)
  • (crypto) [breaking] unify signature verification behind VerificationKey (TOB-SIGSTORE-6) (#168)
Commits
  • 908112a chore: release v0.13.0 (#233)
  • ced5c3d fix(sign): repair tests broken by independently merged #226/#227/#231 (#234)
  • 0ad220d fix(sign)!: keep the configured instance when selecting a Rekor version (#227)
  • 0826866 fix(rekor)!: parse dsse v0.0.2 entries signed with a public key (#232)
  • 15dad63 fix(trust-root)!: accept the ALL and UNDEFINED service selectors (#231)
  • a02f638 fix(tuf)!: prevent changing metadata after its signed bytes are captured (#230)
  • aa300f9 fix(types)!: keep checkpoint fields consistent with the signed note (#229)
  • 9dcd674 fix(fulcio)!: parse wildcard issuers in the Fulcio configuration (#228)
  • 37348ff fix!: restore fixes dropped from the pre-1.0 stack (#214–#219) (#226)
  • 19c2b6b chore: release v0.12.0 (#182)
  • Additional commits viewable in compare view

Updates jsonwebtoken from 10.4.0 to 11.1.0

Changelog

Sourced from jsonwebtoken's changelog.

11.1.0 (2026-09-16)

  • Add dangerous::insecure_decode_claims

11.0.0 (2026-07-24)

  • Add conversions between Algorithm and KeyAlgorithm
  • JWKs can now be created from DecodingKeys, creation from EncodingKey and DecodingKey now supports Ed25519 as well
  • JWKs with unknown key types are now deserializable
  • BREAKING: Algorithm, KeyAlgorithm, EllipticCurve and ThumbprintHash are now non_exhaustive
  • BREAKING: Jwk.thumbprint now returns a Result<_>
  • BREAKING: Header.extras is now a struct that allows for deserialization to any T
  • BREAKING: Implicit features resulting from optional crates have been removed
  • BREAKING: Validation.insecure_disable_signature_validation has been removed, use dangerous::insecure_decode instead
  • BREAKING: EncodingKey.inner has been renamed to as_bytes, try_get_hmac_secret has been removed
  • BREAKING: DecodingKey.as_bytes and try_get_hmac_secret have been removed, use try_get_as_bytes instead

Changes for CryptoProviders

  • When constructing HMAC signers, the algorithm family must now be verified on construction
  • JwkUtils has been renamed to KeyUtils
    • compute_digest now returns a Result<_>
    • extract_rsa_public_key_components has been renamed to rsa_pub_components_from_private_key
    • rsa_pub_components_from_public_key has been added
    • extract_ec_public_key_coordinates has been renamed to ec_pub_components_from_private_key
    • ed_pub_components_from_private_key has been added
Commits

Updates surrealkv from 0.21.3 to 0.21.4

Commits

Updates syn from 3.0.4 to 3.0.6

Release notes

Sourced from syn's releases.

3.0.6

  • Fix parsing interpolated lifetime at statement start (#2082)

3.0.5

Commits
  • 559cab5 Release 3.0.6
  • 9088cad Merge pull request #2082 from dtolnay/lifetimevar
  • 3eb43bb Fix parsing interpolated lifetime at statement start
  • 7b2f6f9 Add regression test for issue 2081
  • d55bcd2 Update test suite to nightly-2026-09-13
  • 8e37bca Resolve non_kebab_case_bins warning
  • 4dfd88f Update test suite to nightly-2026-09-06
  • e0ad92d Release 3.0.5
  • 74e7d75 Merge pull request #2080 from sunshowers/lit-str-span
  • 4c264f3 In LitStr::parse_with, report correct span for lex errors
  • Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

  • Fix parsing of generic unit variants in display expressions (#459)
Commits
  • b1827ee Release 2.0.21
  • 58037b5 Merge pull request #459 from dtolnay/turbofish
  • f82a0cf Keep track of nested turbofish depth
  • 72ea492 Raise required compiler to Rust 1.77
  • 72eea0d Resolve io_other_error clippy lint in tests
  • 07f09a2 Raise required compiler to Rust 1.74
  • 2715388 Update ui test suite to nightly-2026-09-22
  • 5a306c7 Update ui test suite to nightly-2026-09-05
  • ef9383b Update ui test suite to nightly-2026-08-22
  • 8336b84 Update ui tests for version 2.0.20
  • See full diff in compare view

Updates toml from 1.1.4+spec-1.1.0 to 1.1.6+spec-1.1.0

Commits
  • 572c005 chore: Release
  • 66d0c53 docs: Update changelog
  • 07af4e7 perf: Reduce allocations in toml_edit parsing and dumping (#1215)
  • 0ff90db perf(display): Write encoded strings directly
  • efb2536 perf(display): Move generated representation strings
  • 075c444 refactor(display): Consolidate key-path encoding
  • b48f338 perf(display): Borrow table keys during document output
  • c6c1de3 perf(parser): Move completed table header keys
  • ec90463 perf(parser): Borrow input when creating editable documents
  • d76a48a test: Benchmark rendering generated keys and values
  • Additional commits viewable in compare view

Updates tower-http from 0.7.0 to 0.7.1

Release notes

Sourced from tower-http's releases.

tower-http-0.7.1

Added

  • fs: add ServeDir::redirect_to_trailing_slash() to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (#728)
  • fs: add ignore_multi_range_requests() to ServeDir and ServeFile, serving the full representation when a request asks for multiple byte ranges. The existing 416 Range Not Satisfiable response remains the default (#727)
  • request-id: the constructors and accessors on the request-id layers, services, and RequestId are now const fn, so they can be used in const context (#716)

Changed

  • fs: the minimum http-range-header requirement is now 0.4.2 (#661)

Fixed

  • behavioral change: fs: make ServeDir::try_call propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to 404 Not Found responses (#718)
  • decompression: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (#722)
  • decompression: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (#712)
  • fs: multipart range requests are now rejected before range validation, so they consistently return 416 Range Not Satisfiable with a Cannot serve multipart range requests body instead of a generic unsatisfiable-range response (#661)
  • fs: range error responses no longer carry representation headers such as Content-Type and Content-Encoding (#727)
  • set-header: SetMultipleResponseHeadersLayer and SetMultipleResponseHeader are now Clone regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (#714)

#661: tower-rs/tower-http#661 #712: tower-rs/tower-http#712 #714: tower-rs/tower-http#714 #716: tower-rs/tower-http#716 #718: tower-rs/tower-http#718 #722: tower-rs/tower-http#722 #727: tower-rs/tower-http#727 #728: tower-rs/tower-http#728

All the changes

... (truncated)

Commits
  • c941451 chore(release): prepare 0.7.1 (#729)
  • 9697702 chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)
  • e2582e2 Allow ignoring multi-range requests (#727)
  • 888f7fe feat(services): configure directory redirects (#728)
  • 5ad7654 chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)
  • d154adb fix: reject multipart ranges before validation (#661)
  • d9e5c8a ci: Update to cargo-check-external-types 0.5.0 (#724)
  • 90c072b Propagate ServeDir::try_call I/O errors (#718)
  • 860922e fix(decompression): don't end the body on an empty data frame (#722)
  • 8532252 docs(example)/custom future with multiple bodies (#711)
  • Additional commits viewable in compare view

Updates utoipa from 5.5.0 to 6.0.0

Release notes

Sourced from utoipa's releases.

utoipa-rapidoc-6.0.0

What's New 💎 🆕 🎉

  • (88a5842) Update utoipa openapi tools, re-release of 5.0.1 (#1295) @​juhaku

Full change log

utoipa-redoc-6.0.0

What's New 💎 🆕 🎉

  • (88a5842) Update utoipa openapi tools, re-release of 5.0.1 (#1295) @​juhaku

Full change log

utoipa-6.0.0

What's New 💎 🆕 🎉

Full change log

utoipa-gen-6.0.0

What's New 💎 🆕 🎉

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 29, 2026
@dependabot
dependabot Bot requested a review from joshuajbouw as a code owner September 29, 2026 16:38
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 29, 2026
@dependabot
build(deps): bump the rust-dependencies group across 1 directory with…
d82f484 
… 26 updates

Bumps the rust-dependencies group with 26 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.6.9` | `4.6.11` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` |
| [process-wrap](https://github.com/watchexec/process-wrap) | `10.0.0` | `10.0.1` |
| [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` |
| [rcgen](https://github.com/rustls/rcgen) | `0.14.9` | `0.14.10` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.2.0` | `3.4.1` |
| [sigstore-verify](https://github.com/sigstore/sigstore-rust) | `0.11.0` | `0.13.0` |
| [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `10.4.0` | `11.1.0` |
| [surrealkv](https://github.com/surrealdb/surrealkv) | `0.21.3` | `0.21.4` |
| [syn](https://github.com/dtolnay/syn) | `3.0.4` | `3.0.6` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` |
| [toml](https://github.com/toml-rs/toml) | `1.1.4+spec-1.1.0` | `1.1.6+spec-1.1.0` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.7.0` | `0.7.1` |
| [utoipa](https://github.com/juhaku/utoipa) | `5.5.0` | `6.0.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.25.0` | `1.26.1` |
| [wasm-encoder](https://github.com/bytecodealliance/wasm-tools) | `0.257.1` | `0.259.0` |
| [wat](https://github.com/bytecodealliance/wasm-tools) | `1.257.1` | `1.259.0` |
| [wasmparser](https://github.com/bytecodealliance/wasm-tools) | `0.257.1` | `0.259.0` |
| [wit-component](https://github.com/bytecodealliance/wasm-tools) | `0.257.1` | `0.259.0` |
| [wit-parser](https://github.com/bytecodealliance/wasm-tools) | `0.257.1` | `0.259.0` |
| [wasmtime](https://github.com/bytecodealliance/wasmtime) | `48.0.3` | `49.0.1` |
| [wasmtime-wasi](https://github.com/bytecodealliance/wasmtime) | `48.0.3` | `49.0.1` |
| [which](https://github.com/harryfei/which-rs) | `8.0.5` | `8.0.6` |
| [toml_edit](https://github.com/toml-rs/toml) | `0.25.13+spec-1.1.0` | `0.25.15+spec-1.1.0` |
| [gix-discover](https://github.com/GitoxideLabs/gitoxide) | `0.55.0` | `0.56.0` |



Updates `clap` from 4.6.6 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7)

Updates `clap_complete` from 4.6.9 to 4.6.11
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.9...clap_complete-v4.6.11)

Updates `flate2` from 1.1.9 to 1.1.10
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.9...1.1.10)

Updates `process-wrap` from 10.0.0 to 10.0.1
- [Changelog](https://github.com/watchexec/process-wrap/blob/v10.0.1/CHANGELOG.md)
- [Commits](watchexec/process-wrap@v10.0.0...v10.0.1)

Updates `rand` from 0.10.2 to 0.10.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.2...0.10.3)

Updates `rcgen` from 0.14.9 to 0.14.10
- [Release notes](https://github.com/rustls/rcgen/releases)
- [Commits](rustls/rcgen@v/0.14.9...v0.14.10)

Updates `rmcp` from 3.2.0 to 3.4.1
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.2.0...rmcp-v3.4.1)

Updates `sigstore-verify` from 0.11.0 to 0.13.0
- [Release notes](https://github.com/sigstore/sigstore-rust/releases)
- [Changelog](https://github.com/sigstore/sigstore-rust/blob/main/release-plz.toml)
- [Commits](sigstore/sigstore-rust@sigstore-verify-v0.11.0...sigstore-verify-v0.13.0)

Updates `jsonwebtoken` from 10.4.0 to 11.1.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v10.4.0...v11.1.0)

Updates `surrealkv` from 0.21.3 to 0.21.4
- [Release notes](https://github.com/surrealdb/surrealkv/releases)
- [Changelog](https://github.com/surrealdb/surrealkv/blob/main/release.toml)
- [Commits](surrealdb/surrealkv@v0.21.3...v0.21.4)

Updates `syn` from 3.0.4 to 3.0.6
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.4...3.0.6)

Updates `thiserror` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.20...2.0.21)

Updates `toml` from 1.1.4+spec-1.1.0 to 1.1.6+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.4...toml-v1.1.6)

Updates `tower-http` from 0.7.0 to 0.7.1
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.7.0...tower-http-0.7.1)

Updates `utoipa` from 5.5.0 to 6.0.0
- [Release notes](https://github.com/juhaku/utoipa/releases)
- [Changelog](https://github.com/juhaku/utoipa/blob/master/utoipa-rapidoc/CHANGELOG.md)
- [Commits](juhaku/utoipa@utoipa-5.5.0...utoipa-6.0.0)

Updates `uuid` from 1.25.0 to 1.26.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@1.25.0...v1.26.1)

Updates `wasm-encoder` from 0.257.1 to 0.259.0
- [Release notes](https://github.com/bytecodealliance/wasm-tools/releases)
- [Commits](https://github.com/bytecodealliance/wasm-tools/commits)

Updates `wat` from 1.257.1 to 1.259.0
- [Release notes](https://github.com/bytecodealliance/wasm-tools/releases)
- [Commits](bytecodealliance/wasm-tools@v1.257.1...v1.259.0)

Updates `wasmparser` from 0.257.1 to 0.259.0
- [Release notes](https://github.com/bytecodealliance/wasm-tools/releases)
- [Commits](https://github.com/bytecodealliance/wasm-tools/commits)

Updates `wit-component` from 0.257.1 to 0.259.0
- [Release notes](https://github.com/bytecodealliance/wasm-tools/releases)
- [Commits](https://github.com/bytecodealliance/wasm-tools/commits)

Updates `wit-parser` from 0.257.1 to 0.259.0
- [Release notes](https://github.com/bytecodealliance/wasm-tools/releases)
- [Commits](https://github.com/bytecodealliance/wasm-tools/commits)

Updates `wasmtime` from 48.0.3 to 49.0.1
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v49.0.1/RELEASES.md)
- [Commits](bytecodealliance/wasmtime@v48.0.3...v49.0.1)

Updates `wasmtime-wasi` from 48.0.3 to 49.0.1
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v49.0.1/RELEASES.md)
- [Commits](bytecodealliance/wasmtime@v48.0.3...v49.0.1)

Updates `which` from 8.0.5 to 8.0.6
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@8.0.5...8.0.6)

Updates `toml_edit` from 0.25.13+spec-1.1.0 to 0.25.15+spec-1.1.0
- [Commits](toml-rs/toml@v0.25.13...v0.25.15)

Updates `gix-discover` from 0.55.0 to 0.56.0
- [Release notes](https://github.com/GitoxideLabs/gitoxide/releases)
- [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md)
- [Commits](GitoxideLabs/gitoxide@gix-discover-v0.55.0...gix-discover-v0.56.0)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap_complete
  dependency-version: 4.6.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: flate2
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: gix-discover
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: jsonwebtoken
  dependency-version: 11.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: process-wrap
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: rand
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: rcgen
  dependency-version: 0.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: rmcp
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: sigstore-verify
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: surrealkv
  dependency-version: 0.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: syn
  dependency-version: 3.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: toml
  dependency-version: 1.1.6+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: toml_edit
  dependency-version: 0.25.15+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tower-http
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: utoipa
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: uuid
  dependency-version: 1.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: wasm-encoder
  dependency-version: 0.259.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: wasmparser
  dependency-version: 0.259.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: wasmtime
  dependency-version: 49.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: wasmtime-wasi
  dependency-version: 49.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: wat
  dependency-version: 1.259.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: which
  dependency-version: 8.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: wit-component
  dependency-version: 0.259.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: wit-parser
  dependency-version: 0.259.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rust-dependencies-437248c943 branch from ddcbf1b to d82f484 Compare September 29, 2026 21:31

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@joshuajbouw joshuajbouw Awaiting requested review from joshuajbouw joshuajbouw is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants