chore(deps): Bump the cargo group across 2 directories with 11 updates by dependabot[bot] · Pull Request #136 · StringKe/xid

dependabot · 2026-11-01T15:17:37Z

Bumps the cargo group with 10 updates in the /sdk/linux directory:

Package	From	To
serde_json	`1.0.151`	`1.0.154`
base64	`0.23.0`	`0.23.1`
sha2	`0.11.0`	`0.11.1`
rand	`0.10.2`	`0.10.3`
tokio	`1.53.1`	`1.54.1`
async-trait	`0.1.91`	`0.1.92`
secret-service	`5.1.0`	`5.2.0`
thiserror	`2.0.19`	`2.0.21`
jsonwebtoken	`11.0.0`	`11.1.0`
time	`0.3.54`	`0.3.55`
jsonwebtoken	`11.0.0`	`11.1.0`
serde_json	`1.0.151`	`1.0.154`
tokio	`1.53.1`	`1.54.1`
sha2	`0.11.0`	`0.11.1`
base64	`0.23.0`	`0.23.1`
thiserror	`2.0.19`	`2.0.21`

Bumps the cargo group with 7 updates in the /sdk/rust directory:

Package	From	To
serde_json	`1.0.151`	`1.0.154`
base64	`0.23.0`	`0.23.1`
sha2	`0.11.0`	`0.11.1`
tokio	`1.53.1`	`1.54.1`
thiserror	`2.0.19`	`2.0.21`
jsonwebtoken	`11.0.0`	`11.1.0`
jsonwebtoken	`11.0.0`	`11.1.0`
serde_json	`1.0.151`	`1.0.154`
tokio	`1.53.1`	`1.54.1`
sha2	`0.11.0`	`0.11.1`
base64	`0.23.0`	`0.23.1`
thiserror	`2.0.19`	`2.0.21`
actix-web	`4.14.0`	`4.18.1`

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

Make the tests build again on non-SIMD architectures

Commits

069bf70 v0.23.1
6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
7cffce6 Fix testing on architectures without unsafe SIMD support
e34f9a0 Merge pull request #308 from atouchet/com
e9240c9 Remove outdated comment
See full diff in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

138dc5a Release sha2 v0.11.1 (#927)
cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
7c59cad Update Cargo.lock (#921)
f57b947 streebog: tweak internal implementation (#925)
336611f Fix cargo::manual_readme lint (#924)
1df8877 md2: fix clippy::needless_range_loop lint (#923)
6075989 sha2: fix loading of round constants on AArch64 backends (#922)
eadfd90 Update Cargo.lock (#913)
fa30840 blake2 v0.11.0 (#911)
f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
Additional commits viewable in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)

Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)

Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

9e7d328 Prepare rand 0.10.3 (#1840)
f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
c994eb1 docs: fix angle unit in quick start example (#1839)
33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
521fab6 Stop pinning dependencies (#1820)
3f7c433 Stop pinning dependencies
cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)

net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)

runtime: add Builder::max_io_events_per_busy_tick (#8410)

runtime: stabilize tokio::runtime::worker_index() (#8431)

sync: add SemaphorePermit::semaphore() (#8482)

sync: add blocking_acquire methods to Semaphore (#8269)

sync: add watch::Receiver::is_closed (#8481)

wasm: support JSPI for Emscripten target (#8285, #8627)

wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

fs: reject zero in File::set_max_buf_size (#8449)

io: make copy_buf cooperative (#8459)

io: panic when BufReader or BufStream is created with zero capacity (#8494)

io: panic when in-memory pipe is created with zero capacity (#8397)

io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)

io: support vectored writes in Sink (#8663)

net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)

net: start accepted sockets as readable and writable (#8435)

net: support UCred on Fuchsia (#8257)

process: use mio::unix::pipe for Unix child stdio (#8603)

runtime: cache-pad the shared injection queue and idle state (#8622)

runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)

runtime: make enable_io available whenever rt is enabled (#8387)

runtime: move block_in_place setup into a non-generic function (#8315)

runtime: move the multi-thread inject queue to its own mutex (#8382)

runtime: panic when max_io_events_per_tick is zero (#8476)

runtime: suggest .await in nested block_on panic message (#8501)

sync: avoid atomic reader count in broadcast slots (#8357)

sync: use acquire/release orderings in Notify (#8325)

time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

b53b200 chore: prepare Tokio v1.54.1 (#8693)
5ed619b time: revert "remove the runtime handle from timers" (#8692)
66d34e4 chore: prepare Tokio v1.54.0 (#8667)
0d322ce io: support vectored writes in sink (#8663)
4167c56 codec: expose I/O sources from codec errors (#8665)
cdd9dae fs: propagate iouring stress test failures (#8644)
52ac781 ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)
4890d02 stream: implement FusedStream for JoinSetStream (#8629)
a6bd8e1 wasm: check Emscripten version when using JSPI (#8627)
9dd749d Merge 'tokio-1.53.3' into 'master' (#8641)
Additional commits viewable in compare view

Updates async-trait from 0.1.91 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

Resolve double_must_use clippy lint in generated code (#303)

Commits

82e7e9e Release 0.1.92
9a35cb8 Merge pull request #303 from dtolnay/mustuse
875ceec Resolve double_must_use clippy lint
62993a5 Raise minimum tested compiler to rust 1.88
See full diff in compare view

Updates secret-service from 5.1.0 to 5.2.0

Release notes

Sourced from secret-service's releases.

v5.2.0: Bug fixes and interface cleanup

Thanks to @Tiwalun and @mkenigs, some bugs have been fixed and dependencies modernized. In addition, the crate features have been improved so that the async runtime for zbus need not be specified explicitly if the cargo dependency tree already sets it.

What's Changed

Update dependencies and MSRV, check initialization vector length by @Tiwalun in open-source-cooperative/secret-service-rs#101

Error instead of panicking in exec_prompt{,_blocking} by @mkenigs in open-source-cooperative/secret-service-rs#100

Release v5.2: bug fixes and interface cleanup by @brotskydotcom in open-source-cooperative/secret-service-rs#102

New Contributors

@Tiwalun made their first contribution in open-source-cooperative/secret-service-rs#101

@mkenigs made their first contribution in open-source-cooperative/secret-service-rs#100

Full Changelog: open-source-cooperative/secret-service-rs@v5.1.0...v5.2.0

Commits

1fe4fbe Release v5.2: bug fixes and interface cleanup (#102)
19e1e87 Update the README for v5.2
b938b12 Update version to 5.2 and update dependency specs.
859ce0c Update features to allow selection of cryptography only.
8c65031 Merge pull request #100 from flox/prompt-unwrap
125ec07 Merge pull request #101 from Tiwalun/update-dependencies
8cc7c71 Run cargo fmt
8f801ce PR feedback
4c44e0f Use Rust edition 2024
45dd777 Downgrade test-with to latest version compatible with 1.87 MSRV
Additional commits viewable in compare view

Updates thiserror from 2.0.19 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

Fix parsing of generic unit variants in display expressions (#459)

2.0.20

Suppress redundant_field_names clippy lint in generated code (#454)

Commits

b1827ee Release 2.0.21
58037b5 Merge pull request #459 from dtolnay/turbofish
f82a0cf Keep track of nested turbofish depth
72ea492 Raise required compiler to Rust 1.77
72eea0d Resolve io_other_error clippy lint in tests
07f09a2 Raise required compiler to Rust 1.74
2715388 Update ui test suite to nightly-2026-09-22
5a306c7 Update ui test suite to nightly-2026-09-05
ef9383b Update ui test suite to nightly-2026-08-22
8336b84 Update ui tests for version 2.0.20
Additional commits viewable in compare view

Updates jsonwebtoken from 11.0.0 to 11.1.0

Changelog

Sourced from jsonwebtoken's changelog.

11.1.0 (2026-09-16)

Add dangerous::insecure_decode_claims

Commits

4c0ae75 Ready for release
46690b5 Add insecure_decode_claims (#539)
See full diff in compare view

Updates time from 0.3.54 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

Avoid underflow in DateIter::nth, ensuring correct behavior.

Avoid overflow when deserializing timestamps.

Handle out-of-bounds data when deserializing.

Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.

No longer silence errors when deserializing UtcOffset.

OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

Commits

857d9c4 v0.3.55 release
2b72fcd Precise feature gating for macro
c1089eb Run check-targets, miri in parallel
f377fad Avoid range-validated ordinal => year in cascade
2eacb0a Report miscellaneous tasks, overall status
29621ac Speed up CI
08de7ba Fix nano-timestamp validation
3c3f046 Fix copy-paste error
3c0c81c Cascade errors when deserializing UtcOffset
c21acd5 Handle more deserializations of SignedDuration
Additional commits viewable in compare view

Updates jsonwebtoken from 11.0.0 to 11.1.0

Changelog

Sourced from jsonwebtoken's changelog.

11.1.0 (2026-09-16)

Add dangerous::insecure_decode_claims

Commits

4c0ae75 Ready for release
46690b5 Add insecure_decode_claims (#539)
See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)

net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)

runtime: add Builder::max_io_events_per_busy_tick (#8410)

runtime: stabilize tokio::runtime::worker_index() (#8431)

sync: add SemaphorePermit::semaphore() (#8482)

sync: add blocking_acquire methods to Semaphore (#8269)

sync: add watch::Receiver::is_closed (#8481)

wasm: support JSPI for Emscripten target (#8285, #8627)

wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

fs: reject zero in File::set_max_buf_size (#8449)

io: make copy_buf cooperative (#8459)

io: panic when BufReader or BufStream is created with zero capacity (#8494)

io: panic when in-memory pipe is created with zero capacity (#8397)

io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)

io: support vectored writes in Sink (#8663)

net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)

net: start accepted sockets as readable and writable (#8435)

net: support UCred on Fuchsia (#8257)

process: use mio::unix::pipe for Unix child stdio (#8603)

runtime: cache-pad the shared injection queue and idle state (#8622)

runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)

runtime: make enable_io available whenever rt is enabled (#8387)

runtime: move block_in_place setup into a non-generic function (#8315)

runtime: move the multi-thread inject queue to its own mutex (#8382)

runtime: panic when max_io_events_per_tick is zero (#8476)

runtime: suggest .await in nested block_on panic message (#8501)

sync: avoid atomic reader count in broadcast slots (#8357)

sync: use acquire/release orderings in Notify (#8325)

time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

b53b200 chore: prepare Tokio v1.54.1 (#8693)
5ed619b time: revert "remove the runtime handle from timers" (#8692)
66d34e4 chore: prepare Tokio v1.54.0 (#8667)
0d322ce io: support vectored writes in sink (#8663)
4167c56 codec: expose I/O sources from codec errors (#8665)
cdd9dae fs: propagate iouring stress test failures (#8644)
52ac781 ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)
4890d02 stream: implement FusedStream for JoinSetStream (#8629)
a6bd8e1 wasm: check Emscripten version when using JSPI (#8627)
9dd749d Merge 'tokio-1.53.3' into 'master' (#8641)
Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

138dc5a Release sha2 v0.11.1 (#927)
cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
7c59cad Update Cargo.lock (#921)
f57b947 streebog: tweak internal implementation (#925)
336611f Fix cargo::manual_readme lint (#924)
1df8877 md2: fix clippy::needless_range_loop lint (#923)
6075989 sha2: fix loading of round constants on AArch64 backends (#922)
eadfd90 Update Cargo.lock (#913)
fa30840 blake2 v0.11.0 (#911)
f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
Additional commits viewable in compare view

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

Make the tests build again on non-SIMD architectures

Commits

069bf70 v0.23.1
6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
7cffce6 Fix testing on architectures without unsafe SIMD support
e34f9a0 Merge pull request #308 from atouchet/com
e9240c9 Remove outdated comment
See full diff in compare view

Updates thiserror from 2.0.19 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

Fix parsing of generic unit variants in display expressions (#459)

2.0.20

Suppress redundant_field_names clippy lint in generated code (#454)

Commits

b1827ee Release 2.0.21
58037b5 Merge pull request #459 from dtolnay/turbofish
f82a0cf Keep track of nested turbofish depth
72ea492 Raise required compiler to Rust 1.77
72eea0d Resolve io_other_error clippy lint in tests
07f09a2 Raise required compiler to Rust 1.74
2715388 Update ui test suite to nightly-2026-09-22
5a306c7 Update ui test suite to nightly-2026-09-05
ef9383b Update ui test suite to nightly-2026-08-22
8336b84 Update ui tests for version 2.0.20
Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

Make the tests build again on non-SIMD architectures

Commits

069bf70 v0.23.1
6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
7cffce6 Fix testing on architectures without unsafe SIMD support
e34f9a0 Merge pull request #308 from atouchet/com
e9240c9 Remove outdated comment
See full diff in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

138dc5a Release sha2 v0.11.1 (#927)
cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
7c59cad Update Cargo.lock (#921)
f57b947 streebog: tweak internal implementation (#925)
336611f Fix cargo::manual_readme lint (#924)
1df8877 md2: fix clippy::needless_range_loop lint (#923)
6075989 sha2: fix loading of round constants on AArch64 backends (#922)
eadfd90 Update Cargo.lock (#913)
fa30840 blake2 v0.11.0 (#911)
f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)

net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)

runtime: add Builder::max_io_events_per_busy_tick (#8410)

runtime: stabilize tokio::runtime::worker_index() (#8431)

sync: add SemaphorePermit::semaphore() (#8482)

sync: add blocking_acquire methods to Semaphore (#8269)

sync: add watch::Receiver::is_closed (#8481)

wasm: support JSPI for Emscripten target (#8285, #8627)

wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

fs: reject zero in File::set_max_buf_size (#8449)

io: make copy_buf cooperative (#8459)

io: panic when BufReader or BufStream is created with zero capacity (#8494)

io: panic when in-memory pipe is created with zero capacity (#8397)

io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)

io: support vectored writes in Sin... Description has been truncated

Bumps the cargo group with 10 updates in the /sdk/linux directory: | Package | From | To | | --- | --- | --- | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.23.0` | `0.23.1` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.54.1` | | [async-trait](https://github.com/dtolnay/async-trait) | `0.1.91` | `0.1.92` | | [secret-service](https://github.com/hwchen/secret-service-rs) | `5.1.0` | `5.2.0` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.21` | | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `11.0.0` | `11.1.0` | | [time](https://github.com/time-rs/time) | `0.3.54` | `0.3.55` | | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `11.0.0` | `11.1.0` | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.54.1` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.23.0` | `0.23.1` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.21` | Bumps the cargo group with 7 updates in the /sdk/rust directory: | Package | From | To | | --- | --- | --- | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.23.0` | `0.23.1` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.54.1` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.21` | | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `11.0.0` | `11.1.0` | | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `11.0.0` | `11.1.0` | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.54.1` | | [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.23.0` | `0.23.1` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.21` | | [actix-web](https://github.com/actix/actix-web) | `4.14.0` | `4.18.1` | Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `base64` from 0.23.0 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.23.0...v0.23.1) Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `rand` from 0.10.2 to 0.10.3 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.10.2...0.10.3) Updates `tokio` from 1.53.1 to 1.54.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.54.1) Updates `async-trait` from 0.1.91 to 0.1.92 - [Release notes](https://github.com/dtolnay/async-trait/releases) - [Commits](dtolnay/async-trait@0.1.91...0.1.92) Updates `secret-service` from 5.1.0 to 5.2.0 - [Release notes](https://github.com/hwchen/secret-service-rs/releases) - [Changelog](https://github.com/open-source-cooperative/secret-service-rs/blob/master/CHANGELOG.md) - [Commits](open-source-cooperative/secret-service-rs@v5.1.0...v5.2.0) Updates `thiserror` from 2.0.19 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.19...2.0.21) Updates `jsonwebtoken` from 11.0.0 to 11.1.0 - [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](Keats/jsonwebtoken@v11.0.0...v11.1.0) Updates `time` from 0.3.54 to 0.3.55 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.54...v0.3.55) Updates `jsonwebtoken` from 11.0.0 to 11.1.0 - [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](Keats/jsonwebtoken@v11.0.0...v11.1.0) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `tokio` from 1.53.1 to 1.54.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.54.1) Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `base64` from 0.23.0 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.23.0...v0.23.1) Updates `thiserror` from 2.0.19 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.19...2.0.21) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `base64` from 0.23.0 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.23.0...v0.23.1) Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `tokio` from 1.53.1 to 1.54.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.54.1) Updates `thiserror` from 2.0.19 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.19...2.0.21) Updates `jsonwebtoken` from 11.0.0 to 11.1.0 - [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](Keats/jsonwebtoken@v11.0.0...v11.1.0) Updates `jsonwebtoken` from 11.0.0 to 11.1.0 - [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](Keats/jsonwebtoken@v11.0.0...v11.1.0) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `tokio` from 1.53.1 to 1.54.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.54.1) Updates `sha2` from 0.11.0 to 0.11.1 - [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1) Updates `base64` from 0.23.0 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.23.0...v0.23.1) Updates `thiserror` from 2.0.19 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.19...2.0.21) Updates `actix-web` from 4.14.0 to 4.18.1 - [Release notes](https://github.com/actix/actix-web/releases) - [Changelog](https://github.com/actix/actix-web/blob/main/CHANGES.md) - [Commits](actix/actix-web@web-v4.14.0...actix-web-v4.18.1) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: rand dependency-version: 0.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio dependency-version: 1.54.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: async-trait dependency-version: 0.1.92 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: secret-service dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: jsonwebtoken dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: time dependency-version: 0.3.55 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: jsonwebtoken dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio dependency-version: 1.54.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio dependency-version: 1.54.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: jsonwebtoken dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: jsonwebtoken dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio dependency-version: 1.54.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: sha2 dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: actix-web dependency-version: 4.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-01T15:17:42Z

Labels

The following labels could not be found: native-sdk. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 1, 2026

dependabot Bot requested a review from StringKe as a code owner November 1, 2026 15:17

Navigation Menu

Repository navigation

chore(deps): Bump the cargo group across 2 directories with 11 updates - #136

chore(deps): Bump the cargo group across 2 directories with 11 updates#136
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/sdk/linux/cargo-a6063f6845

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

v1.0.154

v1.0.153

v1.0.152

0.23.1

[0.10.3] — 2026-09-20

Fixes

Changes

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

Tokio v1.54.0

1.54.0 (October 19th, 2026)

Added

Changed

0.1.92

v5.2.0: Bug fixes and interface cleanup

What's Changed

New Contributors

2.0.21

2.0.20

11.1.0 (2026-09-16)

v0.3.55

0.3.55 [2026-08-01]

Fixed

11.1.0 (2026-09-16)

v1.0.154

v1.0.153

v1.0.152

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

Tokio v1.54.0

1.54.0 (October 19th, 2026)

Added

Changed

0.23.1

2.0.21

2.0.20

v1.0.154

v1.0.153

v1.0.152

0.23.1

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

Tokio v1.54.0

1.54.0 (October 19th, 2026)

Added

Changed

Uh oh!

dependabot Bot commented on behalf of github Nov 1, 2026

Labels

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants