Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026

Bumps the version-updates group with 17 updates in the / directory:

Package From To
async-graphql 7.0.17 7.2.1
async-graphql-axum 7.0.17 7.2.1
axum 0.8.7 0.8.8
axum-extra 0.12.2 0.12.5
chrono 0.4.42 0.4.43
tokio 1.47.1 1.49.0
tower-http 0.6.6 0.6.8
tower 0.5.2 0.5.3
serde_json 1.0.145 1.0.149
reqwest 0.12.23 0.13.1
config 0.15.18 0.15.19
tracing 0.1.41 0.1.44
tracing-subscriber 0.3.20 0.3.22
time 0.3.44 0.3.46
oauth2 4.4.2 5.0.0
bcrypt 0.15.1 0.18.0
rand 0.8.5 0.9.0

Updates async-graphql from 7.0.17 to 7.2.1

Changelog

Sourced from async-graphql's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

  • Change response errors to be serialized before data #1793

[8.0.0-rc.1] 2026-01-22

  • Replace mutexes with lock-free data structures
  • Replace fnv with rustc-hash for faster hashing on 64-bit architectures
  • Remove allocations from Delay impl
  • Delete tide integration (it's been umaintained for a while, just like async-std)
  • Replace Inflector with heck (for real this time) #1785
  • Remove CBOR feature #1786
  • Remove BSON integration #1786
  • Remove hashbrown integration #1786
  • Remove tokio-sync feature #1786
  • Remove uuid-validatorfeature #1786
  • Remove zxcvbn integration #1786
  • Remove smol_str integration #1786
  • Remove bigdecimal integration #1786
  • Remove Altair integration #1791
  • Remove GraphQL Playground integration #1791
  • Upgrade GraphiQL to v5 #1791
  • Abstract over timers and spawn methods #1789
  • Upgrade warp integration to v0.4
  • Move OpenTelemetry to extras crate and upgrade #1792

[7.2.0] 2026-01-16

  • fix: Use runtime timers when available #1780
  • Fix validation failure with variables in multiple operations #1669
  • Add trace_scalars option to Tracing and OpenTelemetry extensions #1781
  • Macro hygiene #1782
  • Add jiff support #1778

[7.1.0] 2026-01-02

  • Replace async-stream in favour of asynk-strim
  • Add From<Option<T>> for ConstValue #1739
  • Don't bail early on first error when resolving containers #1746
  • Allow accessing data on schema level #1727
  • Mark generated interface methods as allowing missing docs #1730
  • Tracing support for subscriptions of the axum integration #1667

[7.0.19] 2026-01-01

... (truncated)

Commits

Updates async-graphql-axum from 7.0.17 to 7.2.1

Changelog

Sourced from async-graphql-axum's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

  • Change response errors to be serialized before data #1793

[8.0.0-rc.1] 2026-01-22

  • Replace mutexes with lock-free data structures
  • Replace fnv with rustc-hash for faster hashing on 64-bit architectures
  • Remove allocations from Delay impl
  • Delete tide integration (it's been umaintained for a while, just like async-std)
  • Replace Inflector with heck (for real this time) #1785
  • Remove CBOR feature #1786
  • Remove BSON integration #1786
  • Remove hashbrown integration #1786
  • Remove tokio-sync feature #1786
  • Remove uuid-validatorfeature #1786
  • Remove zxcvbn integration #1786
  • Remove smol_str integration #1786
  • Remove bigdecimal integration #1786
  • Remove Altair integration #1791
  • Remove GraphQL Playground integration #1791
  • Upgrade GraphiQL to v5 #1791
  • Abstract over timers and spawn methods #1789
  • Upgrade warp integration to v0.4
  • Move OpenTelemetry to extras crate and upgrade #1792

[7.2.0] 2026-01-16

  • fix: Use runtime timers when available #1780
  • Fix validation failure with variables in multiple operations #1669
  • Add trace_scalars option to Tracing and OpenTelemetry extensions #1781
  • Macro hygiene #1782
  • Add jiff support #1778

[7.1.0] 2026-01-02

  • Replace async-stream in favour of asynk-strim
  • Add From<Option<T>> for ConstValue #1739
  • Don't bail early on first error when resolving containers #1746
  • Allow accessing data on schema level #1727
  • Mark generated interface methods as allowing missing docs #1730
  • Tracing support for subscriptions of the axum integration #1667

[7.0.19] 2026-01-01

... (truncated)

Commits

Updates axum from 0.8.7 to 0.8.8

Release notes

Sourced from axum's releases.

axum v0.8.8

  • Clarify documentation for Router::route_layer (#3567)

#3567: tokio-rs/axum#3567

Commits
  • d07863f Release axum v0.8.8 and axum-extra v0.12.3
  • 287c674 axum-extra: Make typed-routing feature enable routing feature (#3514)
  • f5804aa SecondElementIs: Correct a small inconsistency (#3559)
  • f51f3ba axum-extra: Add trailing newline to pretty JSON response (#3526)
  • 816407a Fix integer underflow in try_range_response for empty files (#3566)
  • 78656eb docs: Clarify route_layer does not apply middleware to the fallback handler...
  • See full diff in compare view

Updates axum-extra from 0.12.2 to 0.12.5

Release notes

Sourced from axum-extra's releases.

axum-extra v0.12.3

  • changed: Make the typed-routing feature enable the routing feature (#3514)
  • changed: Add trailing newline to ErasedJson::pretty response bodies (#3526)
  • fixed: Fix integer underflow in FileStream::try_range_response for empty files (#3566)

#3514: tokio-rs/axum#3514 #3526: tokio-rs/axum#3526 #3566: tokio-rs/axum#3566

Commits
  • d9f79f5 Release axum-extra v0.12.5
  • 6b00891 fix(json-lines): Respect default body limit (#3591)
  • 4e2bc8c Release axum-extra v0.12.4
  • f72c298 Improve error messages with #[diagnostic::do_not_recommend] (#3588)
  • aba8046 Deprecate Host and Scheme extractors
  • adf2e6c Remove CI job using ancient nightly
  • 8eaf49e Remove cargo-sort CI job
  • 5155b9b Remove cargo-public-api-crates CI job
  • b6ffaee Exclude broken example from workspace
  • d07863f Release axum v0.8.8 and axum-extra v0.12.3
  • Additional commits viewable in compare view

Updates chrono from 0.4.42 to 0.4.43

Release notes

Sourced from chrono's releases.

0.4.43

What's Changed

Commits
  • 45caaa9 Update copyright year to 2026 in LICENSE.txt
  • 1c0b8f0 Bump version to 0.4.43
  • a03e43b Upgrade windows-bindgen to 0.66
  • 4fedaba Ignore bincode advisory
  • f4b7bbd Bump actions/checkout from 5 to 6
  • db12973 Added doctest for the NaiveDate years_since function (#1755)
  • 34b5f49 chore: minor improvement for docs
  • 8c82711 Bump actions/setup-node from 5 to 6
  • ea1f11b Drop deny lints, eager Debug impls are a mixed blessing
  • 35f9f2d Add feature gated defmt support.
  • Additional commits viewable in compare view

Updates tokio from 1.47.1 to 1.49.0

Release notes

Sourced from tokio's releases.

Tokio v1.49.0

1.49.0 (January 3rd, 2026)

Added

  • net: add support for TCLASS option on IPv6 (#7781)
  • runtime: stabilize runtime::id::Id (#7125)
  • task: implement Extend for JoinSet (#7195)
  • task: stabilize the LocalSet::id() (#7776)

Changed

  • net: deprecate {TcpStream,TcpSocket}::set_linger (#7752)

Fixed

  • macros: fix the hygiene issue of join! and try_join! (#7766)
  • runtime: revert "replace manual vtable definitions with Wake" (#7699)
  • sync: return TryRecvError::Disconnected from Receiver::try_recv after Receiver::close (#7686)
  • task: remove unnecessary trait bounds on the Debug implementation (#7720)

Unstable

  • fs: handle EINTR in fs::write for io-uring (#7786)
  • fs: support io-uring with tokio::fs::read (#7696)
  • runtime: disable io-uring on EPERM (#7724)
  • time: add alternative timer for better multicore scalability (#7467)

Documented

  • docs: fix a typos in bounded.rs and park.rs (#7817)
  • io: add SyncIoBridge cross-references to copy and copy_buf (#7798)
  • io: doc that AsyncWrite does not inherit from std::io::Write (#7705)
  • metrics: clarify that num_alive_tasks is not strongly consistent (#7614)
  • net: clarify the cancellation safety of the TcpStream::peek (#7305)
  • net: clarify the drop behavior of unix::OwnedWriteHalf (#7742)
  • net: clarify the platform-dependent backlog in TcpSocket docs (#7738)
  • runtime: mention LocalRuntime in new_current_thread docs (#7820)
  • sync: add missing period to mpsc::Sender::try_send docs (#7721)
  • sync: clarify the cancellation safety of oneshot::Receiver (#7780)
  • sync: improve the docs for the errors of mpsc (#7722)
  • task: add example for spawn_local usage on local runtime (#7689)

#7125: tokio-rs/tokio#7125 #7195: tokio-rs/tokio#7195 #7305: tokio-rs/tokio#7305 #7467: tokio-rs/tokio#7467 #7614: tokio-rs/tokio#7614 #7686: tokio-rs/tokio#7686 #7689: tokio-rs/tokio#7689

... (truncated)

Commits

Updates tower-http from 0.6.6 to 0.6.8

Release notes

Sourced from tower-http's releases.

tower-http-0.6.8

Fixed

  • Disable multiple_members in Gzip decoder, since HTTP context only uses one member. (#621)

#621: tower-rs/tower-http#621

What's Changed

New Contributors

Full Changelog: tower-rs/tower-http@tower-http-0.6.7...tower-http-0.6.8

tower-http-0.6.7

Added

  • TimeoutLayer::with_status_code(status) to define the status code returned when timeout is reached. (#599)

Deprecated

  • auth::require_authorization is too basic for real-world. (#591)
  • TimeoutLayer::new() should be replaced with TimeoutLayer::with_status_code(). (Previously was StatusCode::REQUEST_TIMEOUT) (#599)

Fixed

  • on_eos is now called even for successful responses. (#580)
  • ServeDir: call fallback when filename is invalid (#586)
  • decompression will not fail when body is empty (#618)

#580: tower-rs/tower-http#580 #586: tower-rs/tower-http#586 #591: tower-rs/tower-http#591 #599: tower-rs/tower-http#599 #618: tower-rs/tower-http#618

New Contributors

... (truncated)

Commits
  • 33166c8 v0.6.8
  • 6680160 Fix deprecated lints (#608)
  • 81b8231 ci: Switch cargo-public-api-crates to cargo-check-external-types (#613)
  • 1fb0144 ci: pin tracing in msrv job (#622)
  • 1fe4c09 fix(decompression): disable multiple_members option for gzip decoder (#621)
  • 3bf1ba7 v0.6.7
  • 723ca9a fix(decompression): Suppress EOF errors caused by decompressing empty body (#...
  • 8ab9f82 chore(ci): use newer cargo-public-api-crates job (#619)
  • 7cfdf76 doc: Replace doc_auto_cfg with doc_cfg (#609)
  • 50beeaf Add support for custom status code in TimeoutLayer (#599)
  • Additional commits viewable in compare view

Updates tower from 0.5.2 to 0.5.3

Release notes

Sourced from tower's releases.

tower 0.5.3

Added

  • builder: Add ServiceBuilder::boxed_clone_sync() helper (#804)

Fixed

  • retry: Check that supplied jitter is not NaN (#843)

#804: tower-rs/tower#804 #843: tower-rs/tower#843

Commits

Updates serde_json from 1.0.145 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

  • Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

  • Update zmij dependency to 1.0

v1.0.147

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Commits

Updates reqwest from 0.12.23 to 0.13.1

Release notes

Sourced from reqwest's releases.

v0.13.1

What's Changed

Full Changelog: seanmonstar/reqwest@v0.13.0...v0.13.1

v0.13.0

Breaking changes

  • rustls is now the default TLS backend, instead of native-tls.
  • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
  • rustls-tls has been renamed to rustls.
  • rustls roots features removed, rustls-platform-verifier is used by default.
    • To use different roots, call tls_certs_only(your_roots).
  • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
  • query and form are now crate features, disabled by default.
  • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().

Pull Requests in General

New Contributors

Full Changelog: seanmonstar/reqwest@v0.12.28...v0.13.0

v0.13.0-rc.1

👀 Discussion here if you give it try, thanks!

Main breaking changes

  • rustls is now default instead of native-tls
  • rustls provider defaults to aws-lc instead of ring (rustls-no-provider exists if you want to enable a different one)
  • rustls-tls renamed to rustls
  • rustls roots features removed, platform-verifier is used instead

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.1

  • Fixes compiling with rustls on Android targets.

v0.13.0

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

v0.12.24

  • Refactor cookie handling to an internal middleware.
  • Refactor internal random generator.
  • Refactor base64 encoding to reduce a copy.
  • Documentation updates.
Commits

Updates config from 0.15.18 to 0.15.19

Changelog

Sourced from config's changelog.

[0.15.19] - 2025-11-12

Internal

  • (ron) Update to 0.12
Commits

Updates tracing from 0.1.41 to 0.1.44

Release notes

Sourced from tracing's releases.

tracing 0.1.44

Fixed

  • Fix record_all panic (#3432)

Changed

  • tracing-core: updated to 0.1.36 (#3440)

#3432: tokio-rs/tracing#3432 #3440: tokio-rs/tracing#3440

tracing 0.1.43

Important

The previous release [0.1.42] was yanked because #3382 was a breaking change. See further details in #3424. This release contains all the changes from that version, plus a revert for the problematic part of the breaking PR.

Fixed

  • Revert "make valueset macro sanitary" (#3425)

#3382: tokio-rs/tracing#3382 #3424: tokio-rs/tracing#3424 #3425: tokio-rs/tracing#3425 [0.1.42]: https://github.com/tokio-rs/tracing/releases/tag/tracing-0.1.42

tracing 0.1.42

Important

The [Span::record_all] method has been removed from the documented API. It was always unsuable via the documented API as it requried a ValueSet which has no publically documented constructors. The method remains, but should not be used outside of tracing macros.

Added

  • attributes: Support constant expressions as instrument field names (#3158)
  • Add record_all! macro for recording multiple values in one call (#3227)
  • core: Improve code generation at trace points significantly (#3398)

Changed

  • tracing-core: updated to 0.1.35 (#3414)
  • tracing-attributes: updated to 0.1.31 (#3417)

Fixed

  • Fix "name / parent" variant of event! (#2983)

... (truncated)

Commits

Updates tracing-subscriber from 0.3.20 to 0.3.22

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.22

Important

The previous release [0.3.21] was yanked as it depended explicitly on [tracing-0.1.42], which was yanked due to a breaking change (see #3424 for details). This release contains all the changes from the previous release, plus an update to the newer version of tracing.

Changed

  • tracing: updated to 0.1.43 (#3427)

#3424: tokio-rs/tracing#3424 #3427: tokio-rs/tracing#3427 [0.3.21]: https://github.com/tokio-rs/tracing/releases/tag/tracing-subscriber-0.3.21 [tracing-0.1.42]: https://github.com/tokio-rs/tracing/releases/tag/tracing-0.1.42

tracing-subscriber 0.3.21

Fixed

  • Change registry exit to decrement local span ref only (#3331)
  • Make Layered propagate on_register_dispatch (#3379)

Changed

  • tracing: updated to 0.1.42 (#3418)

Performance

  • Remove clone_span on enter (#3289)

Documented

  • F...

    Description has been truncated

…7 updates

Bumps the version-updates group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [async-graphql](https://github.com/async-graphql/async-graphql) | `7.0.17` | `7.2.1` |
| [async-graphql-axum](https://github.com/async-graphql/async-graphql) | `7.0.17` | `7.2.1` |
| [axum](https://github.com/tokio-rs/axum) | `0.8.7` | `0.8.8` |
| [axum-extra](https://github.com/tokio-rs/axum) | `0.12.2` | `0.12.5` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.42` | `0.4.43` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.47.1` | `1.49.0` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.6.6` | `0.6.8` |
| [tower](https://github.com/tower-rs/tower) | `0.5.2` | `0.5.3` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.149` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.23` | `0.13.1` |
| [config](https://github.com/rust-cli/config-rs) | `0.15.18` | `0.15.19` |
| [tracing](https://github.com/tokio-rs/tracing) | `0.1.41` | `0.1.44` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.20` | `0.3.22` |
| [time](https://github.com/time-rs/time) | `0.3.44` | `0.3.46` |
| [oauth2](https://github.com/ramosbugs/oauth2-rs) | `4.4.2` | `5.0.0` |
| [bcrypt](https://github.com/Keats/rust-bcrypt) | `0.15.1` | `0.18.0` |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.0` |



Updates `async-graphql` from 7.0.17 to 7.2.1
- [Changelog](https://github.com/async-graphql/async-graphql/blob/master/CHANGELOG.md)
- [Commits](https://github.com/async-graphql/async-graphql/commits)

Updates `async-graphql-axum` from 7.0.17 to 7.2.1
- [Changelog](https://github.com/async-graphql/async-graphql/blob/master/CHANGELOG.md)
- [Commits](https://github.com/async-graphql/async-graphql/commits)

Updates `axum` from 0.8.7 to 0.8.8
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](tokio-rs/axum@axum-v0.8.7...axum-v0.8.8)

Updates `axum-extra` from 0.12.2 to 0.12.5
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](tokio-rs/axum@axum-extra-v0.12.2...axum-extra-v0.12.5)

Updates `chrono` from 0.4.42 to 0.4.43
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.42...v0.4.43)

Updates `tokio` from 1.47.1 to 1.49.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.47.1...tokio-1.49.0)

Updates `tower-http` from 0.6.6 to 0.6.8
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.6...tower-http-0.6.8)

Updates `tower` from 0.5.2 to 0.5.3
- [Release notes](https://github.com/tower-rs/tower/releases)
- [Commits](tower-rs/tower@tower-0.5.2...tower-0.5.3)

Updates `serde_json` from 1.0.145 to 1.0.149
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.149)

Updates `reqwest` from 0.12.23 to 0.13.1
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.23...v0.13.1)

Updates `config` from 0.15.18 to 0.15.19
- [Changelog](https://github.com/rust-cli/config-rs/blob/main/CHANGELOG.md)
- [Commits](rust-cli/config-rs@v0.15.18...v0.15.19)

Updates `tracing` from 0.1.41 to 0.1.44
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-0.1.41...tracing-0.1.44)

Updates `tracing-subscriber` from 0.3.20 to 0.3.22
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.20...tracing-subscriber-0.3.22)

Updates `time` from 0.3.44 to 0.3.46
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.44...v0.3.46)

Updates `oauth2` from 4.4.2 to 5.0.0
- [Release notes](https://github.com/ramosbugs/oauth2-rs/releases)
- [Upgrade guide](https://github.com/ramosbugs/oauth2-rs/blob/main/UPGRADE.md)
- [Commits](ramosbugs/oauth2-rs@4.4.2...5.0.0)

Updates `bcrypt` from 0.15.1 to 0.18.0
- [Commits](Keats/rust-bcrypt@v0.15.1...v0.18.0)

Updates `rand` from 0.8.5 to 0.9.0
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...0.9.0)

---
updated-dependencies:
- dependency-name: async-graphql
  dependency-version: 7.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: async-graphql-axum
  dependency-version: 7.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: axum
  dependency-version: 0.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: axum-extra
  dependency-version: 0.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: chrono
  dependency-version: 0.4.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: tokio
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: tower-http
  dependency-version: 0.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: tower
  dependency-version: 0.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: serde_json
  dependency-version: 1.0.149
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: reqwest
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: config
  dependency-version: 0.15.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: tracing
  dependency-version: 0.1.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: tracing-subscriber
  dependency-version: 0.3.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: time
  dependency-version: 0.3.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: oauth2
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: bcrypt
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: rand
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Feb 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants