Skip to content

build(deps): bump the cargo-minor-patch group across 1 directory with 8 updates - #191

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-8afd81d1a5
Closed

build(deps): bump the cargo-minor-patch group across 1 directory with 8 updates#191
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-8afd81d1a5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-patch group with 8 updates in the / directory:

Package From To
tokio 1.53.1 1.53.2
tokio-util 0.7.19 0.7.20
thiserror 2.0.20 2.0.21
uuid 1.26.0 1.27.0
zeroize 1.9.0 1.9.1
cedar-policy 4.12.0 4.13.0
redis 1.6.0 1.7.1
pyo3 0.29.2 0.29.3

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

  • fs: clamp io_uring read length to u32::MAX (#8572)
  • rt: ignore current_thread task dumps from other runtimes (#8544)
  • rt: preserve io_uring context if a completion waker panics (#8566)
  • sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
  • taskdump: restore deferred leaf wakes during capture (#8445)
  • time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits
  • ff0c406 chore: prepare Tokio v1.53.2 (#8580)
  • a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
  • ec31a9f chore: prepare Tokio v1.51.5 (#8579)
  • 625c851 sync: assign semaphore permits before emitting tracing event (#8542)
  • 832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
  • 826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
  • 9a47992 process: unregister Windows wait before closing child handle (#8564)
  • 2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
  • 85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • 436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • Additional commits viewable in compare view

Updates tokio-util from 0.7.19 to 0.7.20

Commits

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

  • Fix parsing of generic unit variants in display expressions (#459)
Commits
  • b1827ee Release 2.0.21
  • 58037b5 Merge pull request #459 from dtolnay/turbofish
  • f82a0cf Keep track of nested turbofish depth
  • 72ea492 Raise required compiler to Rust 1.77
  • 72eea0d Resolve io_other_error clippy lint in tests
  • 07f09a2 Raise required compiler to Rust 1.74
  • 2715388 Update ui test suite to nightly-2026-09-22
  • 5a306c7 Update ui test suite to nightly-2026-09-05
  • ef9383b Update ui test suite to nightly-2026-08-22
  • 8336b84 Update ui tests for version 2.0.20
  • See full diff in compare view

Updates uuid from 1.26.0 to 1.27.0

Release notes

Sourced from uuid's releases.

v1.27.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

v1.26.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

Commits
  • b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
  • ffd8ec5 prepare for 1.27.0 release
  • 4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
  • a1aa126 Merge pull request #912 from jaideeppyne/fix/urn-prefix-case-insensitive
  • 4639d67 fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos
  • 2723703 bump MSRV to 1.89.0
  • a3e64fa refactor: simplify URN prefix parsing
  • 5055fd4 refactor: inline case-insensitive URN prefix checks
  • cb8b1d5 refactor: simplify case-insensitive URN parsing
  • 285967d Accept case-insensitive urn:uuid: prefixes when parsing
  • Additional commits viewable in compare view

Updates zeroize from 1.9.0 to 1.9.1

Commits

Updates cedar-policy from 4.12.0 to 4.13.0

Release notes

Sourced from cedar-policy's releases.

cedar-policy-cli v4.13.0

Install cedar-policy-cli 4.13.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/cedar-policy/cedar/releases/download/cedar-policy-cli-v4.13.0/cedar-policy-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/cedar-policy/cedar/releases/download/cedar-policy-cli-v4.13.0/cedar-policy-cli-installer.ps1 | iex"

Download cedar-policy-cli 4.13.0

File Platform Checksum
cedar-policy-cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
cedar-policy-cli-x86_64-apple-darwin.tar.xz Intel macOS checksum
cedar-policy-cli-x86_64-pc-windows-msvc.zip x64 Windows checksum
cedar-policy-cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
cedar-policy-cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
Commits
  • 324d3c0 normalize changelogs on release/4.13.x (#2567)
  • d47df48 add key validation in try_validate for entities (#2565) (#2566)
  • 2f4019f bump versions and changelog update (#2563)
  • b9fb5e2 Added option to symcc to control emitting the reset command (#2561)
  • 3b2b9fa Extended has in the AST (#2560)
  • 1562505 Optimize TPE by evaluating residual policies as they are constructed (#2558)
  • b0aaff3 Bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9 in the github-ac...
  • 3a061b0 Bump the rust-dependencies group across 1 directory with 20 updates (#2557)
  • 8819f02 Allow valid partial action entities to leave components unknown (#2555)
  • 7d940a9 Remove TPE request builder (#2519)
  • Additional commits viewable in compare view

Updates redis from 1.6.0 to 1.7.1

Release notes

Sourced from redis's releases.

redis-1.7.1

Changes & Bug fixes

CI & operational improvements

Full Changelog: redis-rs/redis-rs@redis-1.7.0...redis-1.7.1

redis-1.7.0

1.7.0 (2026-09-05)

Changes & Bug fixes

CI & operational improvements

Commits

Updates pyo3 from 0.29.2 to 0.29.3

Release notes

Sourced from pyo3's releases.

PyO3 0.29.3

This release is a series of fixes worth landing to the PyO3 0.29 series; the PyO3 0.30 release is planned to follow within a few weeks, however during the development cycle a number of rough edges were discovered which were deemed worth a backport.

The patch broadly includes:

  • a further fix the to the opt-out of raw-dylib linking for Windows introduced in PyO3 0.29.1 (the switch to raw-dylib linking was introduced in PyO3 0.29.0),
  • fixes to support GraalPy on windows,
  • a handful of small performance optimizations,
  • a number of non-breaking fixes to the experimental-inspect type stub generation (expect more improvements in 0.30), and
  • various other bugfixes such as to FFI definitions, to resolve crashes, and to fix clippy lints caused by PyO3 macros.

For a full list of the exact fixes please consult the CHANGELOG.

Thank you to the following contributors for the improvements:

@​adamgerhant-ai @​alex @​bschoenmaeckers @​charliermarsh @​chirizxc @​davidhewitt @​dependabot[bot] @​dylanpulver @​exg @​FranciscoTGouveia @​JMak-Security @​jonasdedden @​jorenham @​konstin @​latent-9 @​mejrs @​ngoldbaum @​Person-93 @​PeterFaiman @​sneakers-the-rat

Changelog

Sourced from pyo3's changelog.

[0.29.3] - 2026-09-30

Packaging

  • Support GraalPy on Windows. #6406

Added

  • Add FFI definitions PyModule_GetState_DuringGC, PyModule_GetToken_DuringGC, PyObject_GetTypeData_DuringGC, PyType_GetModuleState_DuringGC, PyType_GetBaseByToken_DuringGC, PyType_GetModule_DuringGC, and PyType_GetModuleByToken_DuringGC for Python 3.15 and up. #6419

Changed

  • Optimize u128/i128 conversions on Python 3.15+. #6160
  • Preallocate output sets when extracting Python set and frozenset values into Rust hash sets. #6225
  • Optimize PyBytes::as_bytes() when not using abi3 or abi3t. #6377

Removed

  • Remove FFI definitions PyExc_RecursionErrorInst and Py_UseClassExceptionsFlag (not present in supported Python versions). #6421

Fixed

  • Revert removal of FFI definition _PyFrameEvalFunction, _PyInterpreterState_GetEvalFrameFunc and _PyInterpreterState_SetEvalFrameFunc, which are not currently treated as CPython private API despite their name. #6195
  • Fix FFI definition PyUnstable_Eval_RequestCodeExtraIndex FFI binding to link to the private CPython symbol on Python versions before 3.12. #6195
  • Fix FFI definitions PyByteArray_GET_SIZE, PyList_GET_SIZE, and PySet_GET_SIZE to use an atomic load for free-threaded Python. #6230
  • experimental-inspect: deduplicate repeated members of a type union in the generated stubs, and put a space on both sides of the | rather than only before it. #6273
  • experimental-inspect: __next__ and __anext__ returning Option<T> (or PyResult<Option<T>>) are now introspected as returning T, since None stops the iteration instead of being yielded. #6274
  • Fix clippy::clone_on_copy warnings triggered on nightly Rust by #[pyclass(from_py_object)] on classes which implement Copy. #6309
  • experimental-inspect: __pow__, __rpow__ and __get__ now introspect their trailing argument as defaulting to None, matching the CPython slot wrappers which substitute None when it is omitted. #6363
  • experimental-inspect: fix the stubs of a package nested inside another package being written into a directory named after its parent instead of its own name. #6365
  • Fix many unresolved symbols when linking for PyPy due to incorrect link names in pyo3-ffi. #6389
  • Fix empty tuple type hints being rendered as invalid tuple[] instead of tuple[()] in generated stubs and PyStaticExpr display. #6393
  • experimental-inspect: escape stub docstrings to prevent invalid Python syntax. #6394
  • experimental-inspect: fix the generated type annotation for PyBuffer on python <3.12 by using typing_extensions.Buffer instead of collections.abc.Buffer. #6395
  • Fix string constants containing control characters rendering as invalid Python in Display for PyStaticExpr. #6397
  • Fix crash when a detached thread is terminated while trying to reattach during interpreter finalization. #6404
  • Fix link failures on 32-bit Windows when raw-dylib linking is disabled. #6410
  • Fix DLL load failures on Windows with PyPy when raw-dylib linking is disabled. #6410
  • Fix FFI definition PyVectorcall_Call failing to link on Python 3.11 and older. #6410
  • Fix many unresolved data symbols when linking for PyPy due to incorrect link names in pyo3-ffi. #6421
  • Fix linker errors on PyPy for outdated FFI definitions where PyPy moved from a function to a macro. #6422
  • Fix crash when GC traverses a #[pyclass] type object during class attribute initialization. #6453
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the cargo-minor-patch group across 1 directory with…
8905082 
… 8 updates

Bumps the cargo-minor-patch group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.2` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.26.0` | `1.27.0` |
| [zeroize](https://github.com/RustCrypto/utils) | `1.9.0` | `1.9.1` |
| [cedar-policy](https://github.com/cedar-policy/cedar) | `4.12.0` | `4.13.0` |
| [redis](https://github.com/redis-rs/redis-rs) | `1.6.0` | `1.7.1` |
| [pyo3](https://github.com/pyo3/pyo3) | `0.29.2` | `0.29.3` |



Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `tokio-util` from 0.7.19 to 0.7.20
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20)

Updates `thiserror` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.20...2.0.21)

Updates `uuid` from 1.26.0 to 1.27.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.0...v1.27.0)

Updates `zeroize` from 1.9.0 to 1.9.1
- [Commits](RustCrypto/utils@zeroize-v1.9.0...zeroize-v1.9.1)

Updates `cedar-policy` from 4.12.0 to 4.13.0
- [Release notes](https://github.com/cedar-policy/cedar/releases)
- [Commits](cedar-policy/cedar@cedar-policy-cli-v4.12.0...cedar-policy-cli-v4.13.0)

Updates `redis` from 1.6.0 to 1.7.1
- [Release notes](https://github.com/redis-rs/redis-rs/releases)
- [Commits](redis-rs/redis-rs@redis-1.6.0...redis-1.7.1)

Updates `pyo3` from 0.29.2 to 0.29.3
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](PyO3/pyo3@v0.29.2...v0.29.3)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio-util
  dependency-version: 0.7.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: thiserror
  dependency-version: 2.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: uuid
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: zeroize
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: cedar-policy
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: redis
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: pyo3
  dependency-version: 0.29.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file Rust labels Oct 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 14, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-minor-patch-8afd81d1a5 branch October 14, 2026 15:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@araujof araujof Awaiting requested review from araujof araujof is a code owner
@terylt terylt Awaiting requested review from terylt terylt is a code owner
@jonpspri jonpspri Awaiting requested review from jonpspri jonpspri is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file Rust

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants