Bump the major group across 1 directory with 3 updates

[dependabot]

Bumps the major group with 3 updates in the / directory: maxminddb, sentry and sentry-actix.

Updates maxminddb from 0.29.0 to 0.30.0

Release notes

Sourced from maxminddb's releases.

0.30.0

• Added deserialize_any_with_raw_strings() for Serde-based format adapters to validate MMDB strings while constructing another runtime's native string type, avoiding duplicate UTF-8 validation without unsafe Rust. Adapters remain responsible for strict UTF-8 validation.
• Fixed network iteration on cyclic or over-deep corrupt search trees so it returns an error instead of looping indefinitely.
• Fixed decode_path() error rendering for extreme negative indexes and reduced path traversal header parsing.
• Removed decoder logging checks from hot deserialization paths.
• Fixed verify() to validate shared data-section pointer targets once, reject pointer cycles, invalid scalar encodings, and impossible container sizes.

Changelog

Sourced from maxminddb's changelog.

0.30.0 - 2026-07-18

• Added deserialize_any_with_raw_strings() for Serde-based format adapters to validate MMDB strings while constructing another runtime's native string type, avoiding duplicate UTF-8 validation without unsafe Rust. Adapters remain responsible for strict UTF-8 validation.
• Fixed network iteration on cyclic or over-deep corrupt search trees so it returns an error instead of looping indefinitely.
• Fixed decode_path() error rendering for extreme negative indexes and reduced path traversal header parsing.
• Removed decoder logging checks from hot deserialization paths.
• Fixed verify() to validate shared data-section pointer targets once, reject pointer cycles, invalid scalar encodings, and impossible container sizes.

Commits

• fceaa66 Prepare v0.30.0 release
• 770547a Set release date
• 68f7876 Merge pull request #118 from oschwald/greg/raw-string-deserialization
• 64107cd Clarify unsafe string decoding use case
• 35ade52 Clarify raw string adapter contract
• 37b3b66 Consolidate dynamic decoder dispatch
• f04108b Expand raw string decoder coverage
• 93a7d3b Expose raw string bytes to Serde adapters
• 9f194b4 Merge pull request #117 from oschwald/greg/harden-reader
• f8cd8eb Share search tree node decoding
• Additional commits viewable in compare view

Updates sentry from 0.48.5 to 0.49.0

Release notes

Sourced from sentry's releases.

0.49.0

Breaking Changes

• ClientOptions is now #[non_exhaustive] (#1230). The struct must now be constructed with the builder-style setters:

  // Before
  let options = sentry::ClientOptions {
      dsn: "https://examplePublicKey@o0.ingest.sentry.io/0",
      debug: true,
      release: Some("my-app@1.0.0".into()),
      ..Default::default()
  };
  // After
  let options = sentry::ClientOptions::new()
  .dsn("https://examplePublicKey@o0.ingest.sentry.io/0")
  .debug(true)
  .release("my-app@1.0.0");

• Updated the sentry-opentelemetry integration to support OpenTelemetry 0.32. Users of the integration must update their OpenTelemetry dependencies from 0.29 to 0.32 (#1262).

• The logs and metrics features are now enabled by default in the sentry crate. This does not break the API, but may cause new telemetry to be sent to Sentry: log and tracing integrations can send structured logs, and applications can send metrics without adding the feature flags. Disable these features explicitly if this additional telemetry is not desired (#1251).

• Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling.

• Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling (#1228).

• Removed the public ClientOptions::traces_sample_rate and ClientOptions::traces_sampler fields. Use ClientOptions::traces_sampling_strategy to inspect the configured traces sampling strategy, and use the existing ClientOptions::traces_sample_rate(...) and ClientOptions::traces_sampler(...) builder setters to configure fixed-rate and callback-based sampling (#1227).

• EnvelopeItem now stores Event and Transaction payloads in Box values. Code that constructs or pattern-matches these variants must account for the additional indirection (#1255).

• The sentry_log::RecordMapping enum's Event now stores the event in a Box (#1269).

• sentry_slog::RecordMapping is now #[non_exhaustive] and the Event variant now stores a boxed Event<'static> (#1270)

• The sentry_tracing::EventMapping enum's Event variant is now stored in a Box (#1272)

New Features

• Added TracePropagationContext as the preferred type for Sentry trace propagation metadata. The existing SentryTrace type remains available for backwards compatibility (#1212).
• Added Dsn::org_id, which parses the Sentry SaaS organization ID from DSN hosts such as o123.ingest.sentry.io (#1202).
• Added ClientOptions::org_id and ClientOptions::strict_trace_continuation (#1203). These options control how traces are continued and can help prevent traces from third-party services, which happen to be instrumented with Sentry, from being continued.

Improvements

• Improved trace continuation safety by rejecting incoming traces with incompatible sentry-org_id values when starting transactions, according to strict trace continuation rules (#1218).

Fixes

• Restored the reqwest transport's pre-0.13 protocol features by disabling HTTP/2 and native-TLS ALPN (#1258).
• EnvelopeError is now #[non_exhaustive] to allow adding new error variants without a breaking change (#1254).

Changelog

Sourced from sentry's changelog.

0.49.0

Breaking Changes

• ClientOptions is now #[non_exhaustive] (#1230). The struct must now be constructed with the builder-style setters:

  // Before
  let options = sentry::ClientOptions {
      dsn: "https://examplePublicKey@o0.ingest.sentry.io/0",
      debug: true,
      release: Some("my-app@1.0.0".into()),
      ..Default::default()
  };
  // After
  let options = sentry::ClientOptions::new()
  .dsn("https://examplePublicKey@o0.ingest.sentry.io/0")
  .debug(true)
  .release("my-app@1.0.0");

• Updated the sentry-opentelemetry integration to support OpenTelemetry 0.32. Users of the integration must update their OpenTelemetry dependencies from 0.29 to 0.32 (#1262).

• The logs and metrics features are now enabled by default in the sentry crate. This does not break the API, but may cause new telemetry to be sent to Sentry: log and tracing integrations can send structured logs, and applications can send metrics without adding the feature flags. Disable these features explicitly if this additional telemetry is not desired (#1251).

• Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling.

• Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling (#1228).

• Removed the public ClientOptions::traces_sample_rate and ClientOptions::traces_sampler fields. Use ClientOptions::traces_sampling_strategy to inspect the configured traces sampling strategy, and use the existing ClientOptions::traces_sample_rate(...) and ClientOptions::traces_sampler(...) builder setters to configure fixed-rate and callback-based sampling (#1227).

• EnvelopeItem now stores Event and Transaction payloads in Box values. Code that constructs or pattern-matches these variants must account for the additional indirection (#1255).

• The sentry_log::RecordMapping enum's Event now stores the event in a Box (#1269).

• sentry_slog::RecordMapping is now #[non_exhaustive] and the Event variant now stores a boxed Event<'static> (#1270)

• The sentry_tracing::EventMapping enum's Event variant is now stored in a Box (#1272)

New Features

• Added TracePropagationContext as the preferred type for Sentry trace propagation metadata. The existing SentryTrace type remains available for backwards compatibility (#1212).
• Added Dsn::org_id, which parses the Sentry SaaS organization ID from DSN hosts such as o123.ingest.sentry.io (#1202).
• Added ClientOptions::org_id and ClientOptions::strict_trace_continuation (#1203). These options control how traces are continued and can help prevent traces from third-party services, which happen to be instrumented with Sentry, from being continued.

Improvements

• Improved trace continuation safety by rejecting incoming traces with incompatible sentry-org_id values when starting transactions, according to strict trace continuation rules (#1218).

Fixes

• Restored the reqwest transport's pre-0.13 protocol features by disabling HTTP/2 and native-TLS ALPN (#1258).
• EnvelopeError is now #[non_exhaustive] to allow adding new error variants without a breaking change (#1254).

Commits

• 09b15cd release: 0.49.0
• 2bcffd8 chore(craft): Publish without development dependencies (#1276)
• 08063e5 ci: cargo autoinherit check (#1245)
• 4e3c2f4 build(cargo): Finish workspace dependency inheritance (#1243)
• 5f2d601 ci: Make bump-version.sh also update workspace deps (#1244)
• 4e0e2d2 chore(tracing): Enforce strict trace continuation (#1218)
• dd089e5 chore(tracing): Store incoming baggage org ID (#1209)
• c9d2732 ref(core): Add trace propagation context (#1212)
• a39a691 ref(core): Split performance module (#1205)
• bc956ca feat(options): Add org_id and strict_trace_continuation options (#1203)
• Additional commits viewable in compare view

Updates sentry-actix from 0.48.5 to 0.49.0

Release notes

Sourced from sentry-actix's releases.

0.49.0

Breaking Changes

• ClientOptions is now #[non_exhaustive] (#1230). The struct must now be constructed with the builder-style setters:

  // Before
  let options = sentry::ClientOptions {
      dsn: "https://examplePublicKey@o0.ingest.sentry.io/0",
      debug: true,
      release: Some("my-app@1.0.0".into()),
      ..Default::default()
  };
  // After
  let options = sentry::ClientOptions::new()
  .dsn("https://examplePublicKey@o0.ingest.sentry.io/0")
  .debug(true)
  .release("my-app@1.0.0");

• Updated the sentry-opentelemetry integration to support OpenTelemetry 0.32. Users of the integration must update their OpenTelemetry dependencies from 0.29 to 0.32 (#1262).

• The logs and metrics features are now enabled by default in the sentry crate. This does not break the API, but may cause new telemetry to be sent to Sentry: log and tracing integrations can send structured logs, and applications can send metrics without adding the feature flags. Disable these features explicitly if this additional telemetry is not desired (#1251).

• Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling.

• Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling (#1228).

• Removed the public ClientOptions::traces_sample_rate and ClientOptions::traces_sampler fields. Use ClientOptions::traces_sampling_strategy to inspect the configured traces sampling strategy, and use the existing ClientOptions::traces_sample_rate(...) and ClientOptions::traces_sampler(...) builder setters to configure fixed-rate and callback-based sampling (#1227).

• EnvelopeItem now stores Event and Transaction payloads in Box values. Code that constructs or pattern-matches these variants must account for the additional indirection (#1255).

• The sentry_log::RecordMapping enum's Event now stores the event in a Box (#1269).

• sentry_slog::RecordMapping is now #[non_exhaustive] and the Event variant now stores a boxed Event<'static> (#1270)

• The sentry_tracing::EventMapping enum's Event variant is now stored in a Box (#1272)

New Features

• Added TracePropagationContext as the preferred type for Sentry trace propagation metadata. The existing SentryTrace type remains available for backwards compatibility (#1212).
• Added Dsn::org_id, which parses the Sentry SaaS organization ID from DSN hosts such as o123.ingest.sentry.io (#1202).
• Added ClientOptions::org_id and ClientOptions::strict_trace_continuation (#1203). These options control how traces are continued and can help prevent traces from third-party services, which happen to be instrumented with Sentry, from being continued.

Improvements

• Improved trace continuation safety by rejecting incoming traces with incompatible sentry-org_id values when starting transactions, according to strict trace continuation rules (#1218).

Fixes

• Restored the reqwest transport's pre-0.13 protocol features by disabling HTTP/2 and native-TLS ALPN (#1258).
• EnvelopeError is now #[non_exhaustive] to allow adding new error variants without a breaking change (#1254).

Changelog

Sourced from sentry-actix's changelog.

0.49.0

Breaking Changes

• ClientOptions is now #[non_exhaustive] (#1230). The struct must now be constructed with the builder-style setters:

  // Before
  let options = sentry::ClientOptions {
      dsn: "https://examplePublicKey@o0.ingest.sentry.io/0",
      debug: true,
      release: Some("my-app@1.0.0".into()),
      ..Default::default()
  };
  // After
  let options = sentry::ClientOptions::new()
  .dsn("https://examplePublicKey@o0.ingest.sentry.io/0")
  .debug(true)
  .release("my-app@1.0.0");

• Updated the sentry-opentelemetry integration to support OpenTelemetry 0.32. Users of the integration must update their OpenTelemetry dependencies from 0.29 to 0.32 (#1262).

• The logs and metrics features are now enabled by default in the sentry crate. This does not break the API, but may cause new telemetry to be sent to Sentry: log and tracing integrations can send structured logs, and applications can send metrics without adding the feature flags. Disable these features explicitly if this additional telemetry is not desired (#1251).

• Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling.

• Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling (#1228).

• Removed the public ClientOptions::traces_sample_rate and ClientOptions::traces_sampler fields. Use ClientOptions::traces_sampling_strategy to inspect the configured traces sampling strategy, and use the existing ClientOptions::traces_sample_rate(...) and ClientOptions::traces_sampler(...) builder setters to configure fixed-rate and callback-based sampling (#1227).

• EnvelopeItem now stores Event and Transaction payloads in Box values. Code that constructs or pattern-matches these variants must account for the additional indirection (#1255).

• The sentry_log::RecordMapping enum's Event now stores the event in a Box (#1269).

• sentry_slog::RecordMapping is now #[non_exhaustive] and the Event variant now stores a boxed Event<'static> (#1270)

• The sentry_tracing::EventMapping enum's Event variant is now stored in a Box (#1272)

New Features

• Added TracePropagationContext as the preferred type for Sentry trace propagation metadata. The existing SentryTrace type remains available for backwards compatibility (#1212).
• Added Dsn::org_id, which parses the Sentry SaaS organization ID from DSN hosts such as o123.ingest.sentry.io (#1202).
• Added ClientOptions::org_id and ClientOptions::strict_trace_continuation (#1203). These options control how traces are continued and can help prevent traces from third-party services, which happen to be instrumented with Sentry, from being continued.

Improvements

• Improved trace continuation safety by rejecting incoming traces with incompatible sentry-org_id values when starting transactions, according to strict trace continuation rules (#1218).

Fixes

• Restored the reqwest transport's pre-0.13 protocol features by disabling HTTP/2 and native-TLS ALPN (#1258).
• EnvelopeError is now #[non_exhaustive] to allow adding new error variants without a breaking change (#1254).

Commits

• 09b15cd release: 0.49.0
• 2bcffd8 chore(craft): Publish without development dependencies (#1276)
• 08063e5 ci: cargo autoinherit check (#1245)
• 4e3c2f4 build(cargo): Finish workspace dependency inheritance (#1243)
• 5f2d601 ci: Make bump-version.sh also update workspace deps (#1244)
• 4e0e2d2 chore(tracing): Enforce strict trace continuation (#1218)
• dd089e5 chore(tracing): Store incoming baggage org ID (#1209)
• c9d2732 ref(core): Add trace propagation context (#1212)
• a39a691 ref(core): Split performance module (#1205)
• bc956ca feat(options): Add org_id and strict_trace_continuation options (#1203)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions