Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps the extractor group with 10 updates in the / directory:

Package From To
log 0.4.28 0.4.29
tokio 1.47.1 1.48.0
anyhow 1.0.99 1.0.100
thiserror 2.0.16 2.0.17
ghactions 0.16.5 0.18.4
ghactions-core 0.16.5 0.18.4
ghastoolkit 0.11.5 0.12.2
octocrab 0.44.1 0.48.1
openssl 0.10.73 0.10.75
serde_json 1.0.143 1.0.145

Updates log from 0.4.28 to 0.4.29

Release notes

Sourced from log's releases.

0.4.29

MSRV

This release increases log's MSRV from 1.61.0 to 1.68.0.

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.28...0.4.29

Changelog

Sourced from log's changelog.

[0.4.29] - 2025-12-02

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.28...0.4.29

Commits
  • b1e2df7 Merge pull request #719 from rust-lang/cargo/0.4.29
  • 3fe1a54 prepare for 0.4.29 release
  • 7a432d9 Merge pull request #718 from rust-lang/ci/msrv
  • 0689d56 rebump msrv to 1.68.0
  • 46b448e try drop msrv back to 1.61.0
  • 929ab38 fix up doc test feature gate
  • 957cece bump serde-dependent crates
  • bea40c8 bump msrv to 1.68.0
  • c540184 Merge pull request #716 from rust-lang/ci-smaller-matrix2
  • c971e63 Merge branch 'master' into ci-smaller-matrix2
  • Additional commits viewable in compare view

Updates tokio from 1.47.1 to 1.48.0

Release notes

Sourced from tokio's releases.

Tokio v1.48.0

1.48.0 (October 14th, 2025)

The MSRV is increased to 1.71.

Added

  • fs: add File::max_buf_size (#7594)
  • io: export Chain of AsyncReadExt::chain (#7599)
  • net: add SocketAddr::as_abstract_name (#7491)
  • net: add TcpStream::quickack and TcpStream::set_quickack (#7490)
  • net: implement AsRef<Self> for TcpStream and UnixStream (#7573)
  • task: add LocalKey::try_get (#7666)
  • task: implement Ord for task::Id (#7530)

Changed

  • deps: bump windows-sys to version 0.61 (#7645)
  • fs: preserve max_buf_size when cloning a File (#7593)
  • macros: suppress clippy::unwrap_in_result in #[tokio::main] (#7651)
  • net: remove PollEvented noise from Debug formats (#7675)
  • process: upgrade Command::spawn_with to use FnOnce (#7511)
  • sync: remove inner mutex in SetOnce (#7554)
  • sync: use UnsafeCell::get_mut in Mutex::get_mut and RwLock::get_mut (#7569)
  • time: reduce the generated code size of Timeout<T>::poll (#7535)

Fixed

  • macros: fix hygiene issue in join! and try_join! (#7638)
  • net: fix copy/paste errors in udp peek methods (#7604)
  • process: fix error when runtime is shut down on nightly-2025-10-12 (#7672)
  • runtime: use release ordering in wake_by_ref() even if already woken (#7622)
  • sync: close the broadcast::Sender in broadcast::Sender::new() (#7629)
  • sync: fix implementation of unused RwLock::try_* methods (#7587)

Unstable

  • tokio: use cargo features instead of --cfg flags for taskdump and io_uring (#7655, #7621)
  • fs: support io_uring in fs::write (#7567)
  • fs: support io_uring with File::open() (#7617)
  • fs: support io_uring with OpenOptions (#7321)
  • macros: add local runtime flavor (#7375, #7597)

Documented

  • io: clarify the zero capacity case of AsyncRead::poll_read (#7580)
  • io: fix typos in the docs of AsyncFd readiness guards (#7583)
  • net: clarify socket gets closed on drop (#7526)
  • net: clarify the behavior of UCred::pid() on Cygwin (#7611)
  • net: clarify the supported platform of set_reuseport() and reuseport() (#7628)

... (truncated)

Commits
  • 556820f chore: prepare Tokio v1.48.0 (#7677)
  • fd1659a chore: prepare tokio-macros v2.6.0 (#7676)
  • 53e8aca ci: update nightly version to 2025-10-12 (#7670)
  • 9e5527d process: fix error when runtime is shut down on nightly-2025-10-12 (#7672)
  • 25a24de net: remove PollEvented noise from Debug formats (#7675)
  • c1fa25f task: clarify the behavior of several spawn_local methods (#7669)
  • e7e02fc fs: use FileOptions inside fs::File to support uring (#7617)
  • f7a7f62 ci: remove cargo-deny Unicode-DFS-2016 license exception config (#7619)
  • d1f1499 tokio: use cargo feature for taskdump support instead of cfg (#7655)
  • ad6f618 runtime: clarify the behavior of Handle::block_on (#7665)
  • Additional commits viewable in compare view

Updates anyhow from 1.0.99 to 1.0.100

Release notes

Sourced from anyhow's releases.

1.0.100

  • Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#426)
Commits
  • 18c2598 Release 1.0.100
  • f271988 Merge pull request #426 from dtolnay/clippyfmt
  • 52f2115 Mark macros with clippy::format_args
  • da5fd9d Raise minimum tested compiler to rust 1.76
  • 211e409 Opt in to generate-macro-expansion when building on docs.rs
  • b48fc02 Enforce trybuild >= 1.0.108
  • d5f59fb Update ui test suite to nightly-2025-09-07
  • 238415d Update ui test suite to nightly-2025-08-24
  • 3bab070 Update actions/checkout@v4 -> v5
  • 4249254 Order cap-lints flag in the same order as thiserror build script
  • See full diff in compare view

Updates thiserror from 2.0.16 to 2.0.17

Release notes

Sourced from thiserror's releases.

2.0.17

  • Use differently named __private module per patch release (#434)
Commits
  • 72ae716 Release 2.0.17
  • 599fdce Merge pull request #434 from dtolnay/private
  • 9ec05f6 Use differently named __private module per patch release
  • d2c492b Raise minimum tested compiler to rust 1.76
  • fc3ab95 Opt in to generate-macro-expansion when building on docs.rs
  • 819fe29 Update ui test suite to nightly-2025-09-12
  • 259f48c Enforce trybuild >= 1.0.108
  • 470e6a6 Update ui test suite to nightly-2025-08-24
  • 544e191 Update actions/checkout@v4 -> v5
  • cbc1eba Delete duplicate cap-lints flag from build script
  • See full diff in compare view

Updates ghactions from 0.16.5 to 0.18.4

Release notes

Sourced from ghactions's releases.

v0.18.4

What's Changed

Full Changelog: 42ByteLabs/ghactions@0.18.3...0.18.4

v0.18.3

What's Changed

Full Changelog: 42ByteLabs/ghactions@0.18.2...0.18.3

v0.18.2

What's Changed

Full Changelog: 42ByteLabs/ghactions@0.18.1...0.18.2

v0.18.1

What's Changed

Full Changelog: 42ByteLabs/ghactions@0.18.0...0.18.1

v0.18.0

What's Changed

Full Changelog: 42ByteLabs/ghactions@0.17.0...0.18.0

v0.17.0

What's Changed

... (truncated)

Commits
  • 23bdd42 Merge pull request #243 from 42ByteLabs/v0_18_4
  • ab76f5f feat(version): v0.18.4
  • 90cc06b Merge pull request #242 from 42ByteLabs/dependabot/github_actions/production-...
  • 58d57a7 Merge branch 'main' into dependabot/github_actions/production-dependencies-76...
  • f15a9d3 Merge pull request #241 from 42ByteLabs/dependabot/cargo/production-dependenc...
  • c776b78 build(deps): bump actions/checkout in the production-dependencies group
  • 696a86a build(deps): bump the production-dependencies group with 4 updates
  • fd317ba Merge pull request #240 from 42ByteLabs/dependabot/cargo/production-dependenc...
  • e8ee979 build(deps): bump the production-dependencies group across 1 directory with 3...
  • e944b17 Merge pull request #238 from 42ByteLabs/v0_18_3
  • Additional commits viewable in compare view

Updates ghactions-core from 0.16.5 to 0.18.4

Release notes

Sourced from ghactions-core's releases.

v0.18.4

What's Changed

Full Changelog: 42ByteLabs/ghactions@0.18.3...0.18.4

v0.18.3

What's Changed

Full Changelog: 42ByteLabs/ghactions@0.18.2...0.18.3

v0.18.2

What's Changed

Full Changelog: 42ByteLabs/ghactions@0.18.1...0.18.2

v0.18.1

What's Changed

Full Changelog: 42ByteLabs/ghactions@0.18.0...0.18.1

v0.18.0

What's Changed

Full Changelog: 42ByteLabs/ghactions@0.17.0...0.18.0

v0.17.0

What's Changed

... (truncated)

Commits
  • 23bdd42 Merge pull request #243 from 42ByteLabs/v0_18_4
  • ab76f5f feat(version): v0.18.4
  • 90cc06b Merge pull request #242 from 42ByteLabs/dependabot/github_actions/production-...
  • 58d57a7 Merge branch 'main' into dependabot/github_actions/production-dependencies-76...
  • f15a9d3 Merge pull request #241 from 42ByteLabs/dependabot/cargo/production-dependenc...
  • c776b78 build(deps): bump actions/checkout in the production-dependencies group
  • 696a86a build(deps): bump the production-dependencies group with 4 updates
  • fd317ba Merge pull request #240 from 42ByteLabs/dependabot/cargo/production-dependenc...
  • e8ee979 build(deps): bump the production-dependencies group across 1 directory with 3...
  • e944b17 Merge pull request #238 from 42ByteLabs/v0_18_3
  • Additional commits viewable in compare view

Updates ghastoolkit from 0.11.5 to 0.12.2

Release notes

Sourced from ghastoolkit's releases.

v0.12.2

What's Changed

Full Changelog: GeekMasher/ghastoolkit-rs@0.12.1...0.12.2

v0.12.1

What's Changed

Full Changelog: GeekMasher/ghastoolkit-rs@0.12.0...0.12.1

v0.12.0

What's Changed

Full Changelog: GeekMasher/ghastoolkit-rs@0.11.5...0.12.0

Commits
  • 0348552 Merge pull request #96 from GeekMasher/v0_12_2
  • b24f08e feat(version): v0.12.2
  • f132ce5 Merge pull request #95 from GeekMasher/dependabot/cargo/production-dependenci...
  • 211a717 build(deps): bump the production-dependencies group with 2 updates
  • ec3c1bd Merge pull request #94 from GeekMasher/v0_12_1
  • 5a00a1a feat(version): v0.12.1
  • 9f070ba Merge pull request #93 from GeekMasher/dependabot/cargo/production-dependenci...
  • d202f54 build(deps): update octocrab requirement
  • f990266 Merge pull request #92 from GeekMasher/v0_12_0
  • 8939283 fix(cargo): Update CLI dep
  • Additional commits viewable in compare view

Updates octocrab from 0.44.1 to 0.48.1

Release notes

Sourced from octocrab's releases.

v0.48.1

Fixed

  • (build) don't fetch dependencies (#828)

v0.48.0

Added

  • fetch contributor repository permission (#825)
  • [breaking] Use Option<AuthorAssociation> over String in Issue struct (#822)

Other

  • add missing issue event types (#821)
  • Remove fields deleted in October 2025 API changes (#826)
  • Bump jsonwebtoken to v10 (#814)
  • Feature/set http headers #808 (#819)

v0.47.1

Added

  • add missing list workflows filters (#820)

Other

  • Modify _put method documentation (#818)
  • Feature/interactions 537 (#817)
  • Added Feature/classrooms #524 (#815)

v0.47.0

Added

  • add immutable Release field (#806)

Other

  • added creating a review (POST "/repos/{owner}/{repo}/pulls/{pull_number}/reviews") (#805)

v0.46.0

Fixed

  • [breaking] make CommitAuthor email nullable (#799)

Other

  • Expose digest field in Asset model (#804)
  • cargo clippy (#803)
  • fix doc url for ProjectHandler (#802)

v0.45.0

... (truncated)

Changelog

Sourced from octocrab's changelog.

0.48.1 - 2025-12-02

Fixed

  • (build) don't fetch dependencies (#828)

0.48.0 - 2025-11-18

Added

  • fetch contributor repository permission (#825)
  • [breaking] Use Option<AuthorAssociation> over String in Issue struct (#822)

Other

  • add missing issue event types (#821)
  • Remove fields deleted in October 2025 API changes (#826)
  • Bump jsonwebtoken to v10 (#814)
  • Feature/set http headers #808 (#819)

0.47.1 - 2025-11-03

Added

  • add missing list workflows filters (#820)

Other

  • Modify _put method documentation (#818)
  • Feature/interactions 537 (#817)
  • Added Feature/classrooms #524 (#815)

0.47.0 - 2025-10-06

Added

  • add immutable Release field (#806)

Other

  • added creating a review (POST "/repos/{owner}/{repo}/pulls/{pull_number}/reviews") (#805)

0.46.0 - 2025-09-28

Fixed

  • [breaking] make CommitAuthor email nullable (#799)

Other

... (truncated)

Commits

Updates openssl from 0.10.73 to 0.10.75

Release notes

Sourced from openssl's releases.

openssl-v0.10.75

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.74...openssl-v0.10.75

openssl-v0.10.74

What's Changed

... (truncated)

Commits
  • 09b90d0 Merge pull request #2518 from alex/bump-for-release
  • 26533f3 Release openssl v0.10.75 and openssl-sys v0.9.111
  • 395ecca Merge pull request #2517 from alex/claude/fix-ocsp-find-status-011CUqcGFNKeKJ...
  • cc26867 Fix unsound OCSP find_status handling of optional next_update field
  • 95aa8e8 Merge pull request #2513 from botovq/libressl-stable
  • e735a32 CI: bump LibreSSL 4.x branches to latest releases
  • 21ab91d Merge pull request #2510 from huwcbjones/huw/sys/evp-mac
  • d9161dc sys/evp: add EVP_MAC symbols
  • 3fd4bf2 Merge pull request #2508 from goffrie/oaep-label
  • 52022fd Implement set_rsa_oaep_label for AWS-LC/BoringSSL
  • Additional commits viewable in compare view

Updates serde_json from 1.0.143 to 1.0.145

Release notes

Sourced from serde_json's releases.

v1.0.145

  • Raise serde version requirement to >=1.0.220

v1.0.144

  • Switch serde dependency to serde_core (#1285)
Commits
  • efa66e3 Release 1.0.145
  • 23679e2 Add serde version constraint
  • fc27baf Release 1.0.144
  • caef3c6 Ignore uninlined_format_args pedantic clippy lint
  • 81ba3aa Merge pull request #1285 from dtolnay/serdecore
  • d21e8ce Switch serde dependency to serde_core
  • 6beb6cd Merge pull request #1286 from dtolnay/up
  • 1dbc803 Raise required compiler to Rust 1.61
  • 0bf5d87 Enforce trybuild >= 1.0.108

Bumps the extractor group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [log](https://github.com/rust-lang/log) | `0.4.28` | `0.4.29` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.47.1` | `1.48.0` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.99` | `1.0.100` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.16` | `2.0.17` |
| [ghactions](https://github.com/42ByteLabs/ghactions) | `0.16.5` | `0.18.4` |
| [ghactions-core](https://github.com/42ByteLabs/ghactions) | `0.16.5` | `0.18.4` |
| [ghastoolkit](https://github.com/GeekMasher/ghastoolkit-rs) | `0.11.5` | `0.12.2` |
| [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.44.1` | `0.48.1` |
| [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.73` | `0.10.75` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.143` | `1.0.145` |



Updates `log` from 0.4.28 to 0.4.29
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.28...0.4.29)

Updates `tokio` from 1.47.1 to 1.48.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.47.1...tokio-1.48.0)

Updates `anyhow` from 1.0.99 to 1.0.100
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.99...1.0.100)

Updates `thiserror` from 2.0.16 to 2.0.17
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.16...2.0.17)

Updates `ghactions` from 0.16.5 to 0.18.4
- [Release notes](https://github.com/42ByteLabs/ghactions/releases)
- [Commits](42ByteLabs/ghactions@0.16.5...0.18.4)

Updates `ghactions-core` from 0.16.5 to 0.18.4
- [Release notes](https://github.com/42ByteLabs/ghactions/releases)
- [Commits](42ByteLabs/ghactions@0.16.5...0.18.4)

Updates `ghastoolkit` from 0.11.5 to 0.12.2
- [Release notes](https://github.com/GeekMasher/ghastoolkit-rs/releases)
- [Commits](GeekMasher/ghastoolkit-rs@0.11.5...0.12.2)

Updates `octocrab` from 0.44.1 to 0.48.1
- [Release notes](https://github.com/XAMPPRocky/octocrab/releases)
- [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md)
- [Commits](XAMPPRocky/octocrab@v0.44.1...v0.48.1)

Updates `openssl` from 0.10.73 to 0.10.75
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.73...openssl-v0.10.75)

Updates `serde_json` from 1.0.143 to 1.0.145
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.143...v1.0.145)

---
updated-dependencies:
- dependency-name: log
  dependency-version: 0.4.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: extractor
- dependency-name: tokio
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor
- dependency-name: anyhow
  dependency-version: 1.0.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: extractor
- dependency-name: thiserror
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: extractor
- dependency-name: ghactions
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor
- dependency-name: ghactions-core
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor
- dependency-name: ghastoolkit
  dependency-version: 0.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor
- dependency-name: octocrab
  dependency-version: 0.48.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor
- dependency-name: openssl
  dependency-version: 0.10.75
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: extractor
- dependency-name: serde_json
  dependency-version: 1.0.145
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: extractor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Dec 8, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 8, 2025 04:30
@dependabot dependabot bot requested review from adrienpessu and felickz December 8, 2025 04:30
@github-actions
Copy link

github-actions bot commented Dec 8, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant