Skip to content

deps: Bump the cargo group across 1 directory with 22 updates - #348

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-634d750e76
Open

deps: Bump the cargo group across 1 directory with 22 updates#348
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-634d750e76

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 22 updates in the / directory:

Package From To
anyhow 1.0.103 1.0.104
async-trait 0.1.89 0.1.92
base64 0.22.1 0.23.1
futures 0.3.32 0.3.34
jsonwebtoken 10.4.0 11.1.0
kube 4.0.0 4.2.0
oci-client 0.17.0 0.18.0
opentelemetry 0.32.0 0.33.1
opentelemetry-otlp 0.32.0 0.33.1
opentelemetry_sdk 0.32.1 0.33.1
regex 1.13.0 1.13.1
reqwest 0.13.4 0.13.5
rmcp 2.2.0 3.5.1
rustls 0.23.41 0.23.45
serde 1.0.228 1.0.229
serde_json 1.0.150 1.0.154
sha2 0.11.0 0.11.1
sigstore-verify 0.11.0 0.14.0
thiserror 2.0.18 2.0.21
tokio 1.52.3 1.53.2
tower-http 0.7.0 0.7.1
tracing-opentelemetry 0.33.0 0.34.0

Updates anyhow from 1.0.103 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3
Commits

Updates async-trait from 0.1.89 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

  • Resolve double_must_use clippy lint in generated code (#303)

0.1.91

  • Update to syn 3 (#299)
  • Fix mutability for by-reference receivers (#301)

0.1.90

(yanked)

Commits
  • 82e7e9e Release 0.1.92
  • 9a35cb8 Merge pull request #303 from dtolnay/mustuse
  • 875ceec Resolve double_must_use clippy lint
  • 62993a5 Raise minimum tested compiler to rust 1.88
  • d049ee0 Release 0.1.91
  • 7a0961f Merge pull request #301 from dtolnay/mutability
  • 740f86f Ignore mut_mut pedantic clippy lint in test
  • 4699cd3 Fix mutability for by-reference receivers
  • 6dd3573 Add regression test for issue 300
  • 2371797 Release 0.1.90
  • Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

Updates futures from 0.3.32 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Commits

Updates jsonwebtoken from 10.4.0 to 11.1.0

Changelog

Sourced from jsonwebtoken's changelog.

11.1.0 (2026-09-16)

  • Add dangerous::insecure_decode_claims

11.0.0 (2026-07-24)

  • Add conversions between Algorithm and KeyAlgorithm
  • JWKs can now be created from DecodingKeys, creation from EncodingKey and DecodingKey now supports Ed25519 as well
  • JWKs with unknown key types are now deserializable
  • BREAKING: Algorithm, KeyAlgorithm, EllipticCurve and ThumbprintHash are now non_exhaustive
  • BREAKING: Jwk.thumbprint now returns a Result<_>
  • BREAKING: Header.extras is now a struct that allows for deserialization to any T
  • BREAKING: Implicit features resulting from optional crates have been removed
  • BREAKING: Validation.insecure_disable_signature_validation has been removed, use dangerous::insecure_decode instead
  • BREAKING: EncodingKey.inner has been renamed to as_bytes, try_get_hmac_secret has been removed
  • BREAKING: DecodingKey.as_bytes and try_get_hmac_secret have been removed, use try_get_as_bytes instead

Changes for CryptoProviders

  • When constructing HMAC signers, the algorithm family must now be verified on construction
  • JwkUtils has been renamed to KeyUtils
    • compute_digest now returns a Result<_>
    • extract_rsa_public_key_components has been renamed to rsa_pub_components_from_private_key
    • rsa_pub_components_from_public_key has been added
    • extract_ec_public_key_coordinates has been renamed to ec_pub_components_from_private_key
    • ed_pub_components_from_private_key has been added
Commits

Updates kube from 4.0.0 to 4.2.0

Release notes

Sourced from kube's releases.

4.2.0

What's Changed

Maintenance release for 4.0.0. Fixes, and https proxy. MSRV 1.89. All PRs here.

Added

Fixed

New Contributors

Full Changelog: kube-rs/kube@4.0.0...4.2.0

Changelog

Sourced from kube's changelog.

4.2.0 / 2026-07-22

Commits
  • 526f1f2 release 4.2.0
  • 3b811b5 break circular dependency on explicit dev-dep versions
  • 48d1ad5 Construct typed CustomResourceDefinition in derived crd() (#2042)
  • d0328f7 config: resolve relative exec plugin command paths (#2037)
  • 76fee02 ignore multiple versions of syn (#2046)
  • fe44fa2 Amortize PredicateFilter cache eviction across polls (#2040)
  • 5afcf19 Avoid deep-cloning ObjectMeta per event in trigger_owners (#2039)
  • 660966e Chore(deps): Update serde-saphyr requirement from 0.0.27 to 0.0.29 (#2032)
  • 0bcb4c7 bump msrv to 1.89 (#2035)
  • f671d57 fix deny failures (#2034)
  • Additional commits viewable in compare view

Updates oci-client from 0.17.0 to 0.18.0

Release notes

Sourced from oci-client's releases.

v0.18.0

What's Changed

New Contributors

Full Changelog: oras-project/rust-oci-client@v0.17.0...v0.18.0

Commits
  • 129ee8f Merge pull request #295 from flavio/prepare-0.18.0-release
  • ddc27a0 chore: prepare 0.18.0 release
  • 578ef50 Merge commit from fork
  • 369cb9e fix(client): do not send credentials to hosts outside of the registry
  • 90a8330 Merge pull request #292 from flavio/chunked-push-without-digest
  • 524da21 Merge pull request #293 from flavio/zizmor
  • fe15e9f ci: enable zizmor
  • bc564de refactor(client): harden chunked stream push
  • 7c3a735 feat: implement chunked blob push without upfront digest calculation
  • ec89a0c Merge pull request #286 from gakonst/feat/rustls-no-provider
  • Additional commits viewable in compare view

Updates opentelemetry from 0.32.0 to 0.33.1

Release notes

Sourced from opentelemetry's releases.

0.33.1

The OTLP exporters for Logs and Metrics are now stable.

0.33.0

See the 0.33.0 release notes and migration guidance.

The OTLP exporters for Logs and Metrics remain release candidates. We plan to declare them stable in 0.33.1 after approximately two weeks of validation, provided no issues requiring breaking API changes arise. The Logs and Metrics API and SDK remain stable; Distributed Tracing remains pre-stable.

opentelemetry-semantic-conventions-0.32.1

See the CHANGELOG for details.

Commits
  • 372ebbc chore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)
  • 5582e71 docs(logs): polish design doc and fill perf numbers (#3566)
  • 7ce1269 fix(sdk): log when the periodic metrics reader panics (#3777)
  • b547036 fix(prometheus): keep resource labels when scope info is disabled (#3751)
  • e8480db chore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)
  • 0fdfc48 feat(proto): Add support for protobuffer descriptor output (#3675)
  • 87929d7 ci: install markdown-link-check from npm (#3661)
  • ff2ab2d docs(trace): explain async context propagation (#3759)
  • 2595432 fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...
  • 952bdee fix: accept optional whitespace in TraceState (#3761)
  • Additional commits viewable in compare view

Updates opentelemetry-otlp from 0.32.0 to 0.33.1

Commits
  • 372ebbc chore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)
  • 5582e71 docs(logs): polish design doc and fill perf numbers (#3566)
  • 7ce1269 fix(sdk): log when the periodic metrics reader panics (#3777)
  • b547036 fix(prometheus): keep resource labels when scope info is disabled (#3751)
  • e8480db chore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)
  • 0fdfc48 feat(proto): Add support for protobuffer descriptor output (#3675)
  • 87929d7 ci: install markdown-link-check from npm (#3661)
  • ff2ab2d docs(trace): explain async context propagation (#3759)
  • 2595432 fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...
  • 952bdee fix: accept optional whitespace in TraceState (#3761)
  • Additional commits viewable in compare view

Updates opentelemetry_sdk from 0.32.1 to 0.33.1

Commits
  • 372ebbc chore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)
  • 5582e71 docs(logs): polish design doc and fill perf numbers (#3566)
  • 7ce1269 fix(sdk): log when the periodic metrics reader panics (#3777)
  • b547036 fix(prometheus): keep resource labels when scope info is disabled (#3751)
  • e8480db chore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)
  • 0fdfc48 feat(proto): Add support for protobuffer descriptor output (#3675)
  • 87929d7 ci: install markdown-link-check from npm (#3661)
  • ff2ab2d docs(trace): explain async context propagation (#3759)
  • 2595432 fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...
  • 952bdee fix: accept optional whitespace in TraceState (#3761)
  • Additional commits viewable in compare view

Updates regex from 1.13.0 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

  • #1354: Fixes previously unsound reverse suffix and inner optimizations.
Commits
  • 2b52759 1.13.1, redux
  • 40e9823 1.13.1
  • 75fcb96 changelog: 1.13.1
  • 64ad0b6 automata: fix bug in reverse suffix/inner optimization
  • fa91c31 automata: fix a bug caught by Codex review
  • 30390ec automata: formatting tweaks
  • 821a8eb automata: refactor reverse suffix/inner search slightly
  • 10afd70 automata: expose the extracted literals for inner literal extraction
  • 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
  • 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
  • Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.
Commits
  • de55373 v0.13.5
  • 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
  • 9f06fd2 docs: improve description of JSON method (#3082)
  • 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
  • ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
  • 4e9a3c7 chore: add pull request template for human-written content
  • 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
  • 221abe9 chore: Remove unnecessary clones and a cast (#3071)
  • 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
  • fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
  • Additional commits viewable in compare view

Updates rmcp from 2.2.0 to 3.5.1

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.5.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.1

Fixed

  • (server) keep discover lifecycle bootstrap-neutral (#1248)
  • keep handler-generated invalid params errors in-band (#1322)
  • (model) export object! macro without macros feature (#1318)
  • (server) default missing cache hints for 2026-07-28 peers (#1308)

Other

  • [rmcp] Notify credential stores when a refresh token is rejected (#1285)

rmcp-macros-v3.5.0

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.5.0

Added

  • update LATEST and add LATEST_WITH_INITIALIZE (#1105)

Fixed

  • (model) decode float fields through serde_json::Number (#1300)
  • (rmcp) reject duplicate sep-2243 headers (#1274)
  • (transport) match explicit default ports in Origin allowlist (#1270)
  • (rmcp) tolerate empty cacheScope instead of silently dropping the whole result (#1281)
  • (model) preserve explicit null structuredContent in CallToolResult (#1295)

Other

  • cargo fmt fixes on validate_standard_headers changes (#1275)

rmcp-macros-v3.4.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.4.1

Fixed

  • (transport) fall back after JSON discover rejections (#1288)
  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

... (truncated)

Commits
  • 79437f2 chore: release v3.5.1 (#1307)
  • 4a226c7 fix(server): keep discover lifecycle bootstrap-neutral (#1248)
  • 931d471 chore(deps): bump the github-actions group with 6 updates (#1313)
  • cf1e9aa fix: keep handler-generated invalid params errors in-band (#1322)
  • deef9bb fix(model): export object! macro without macros feature (#1318)
  • c0d667e fix(server): default missing cache hints for 2026-07-28 peers (#1308)
  • 94c5c03 fix: use MSRV-aware dependency resolver (#1316)...

    Description has been truncated

@dependabot
deps: Bump the cargo group across 1 directory with 22 updates
00f6158 
Bumps the cargo group with 22 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.103` | `1.0.104` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.89` | `0.1.92` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [futures](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` |
| [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `10.4.0` | `11.1.0` |
| [kube](https://github.com/kube-rs/kube) | `4.0.0` | `4.2.0` |
| [oci-client](https://github.com/oras-project/rust-oci-client) | `0.17.0` | `0.18.0` |
| [opentelemetry](https://github.com/open-telemetry/opentelemetry-rust) | `0.32.0` | `0.33.1` |
| [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) | `0.32.0` | `0.33.1` |
| [opentelemetry_sdk](https://github.com/open-telemetry/opentelemetry-rust) | `0.32.1` | `0.33.1` |
| [regex](https://github.com/rust-lang/regex) | `1.13.0` | `1.13.1` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `2.2.0` | `3.5.1` |
| [rustls](https://github.com/rustls/rustls) | `0.23.41` | `0.23.45` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.154` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [sigstore-verify](https://github.com/sigstore/sigstore-rust) | `0.11.0` | `0.14.0` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.21` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.2` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.7.0` | `0.7.1` |
| [tracing-opentelemetry](https://github.com/tokio-rs/tracing-opentelemetry) | `0.33.0` | `0.34.0` |



Updates `anyhow` from 1.0.103 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.103...1.0.104)

Updates `async-trait` from 0.1.89 to 0.1.92
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.89...0.1.92)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `futures` from 0.3.32 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.32...0.3.34)

Updates `jsonwebtoken` from 10.4.0 to 11.1.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v10.4.0...v11.1.0)

Updates `kube` from 4.0.0 to 4.2.0
- [Release notes](https://github.com/kube-rs/kube/releases)
- [Changelog](https://github.com/kube-rs/kube/blob/main/CHANGELOG.md)
- [Commits](kube-rs/kube@4.0.0...4.2.0)

Updates `oci-client` from 0.17.0 to 0.18.0
- [Release notes](https://github.com/oras-project/rust-oci-client/releases)
- [Commits](oras-project/rust-oci-client@v0.17.0...v0.18.0)

Updates `opentelemetry` from 0.32.0 to 0.33.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-0.32.0...opentelemetry-0.33.1)

Updates `opentelemetry-otlp` from 0.32.0 to 0.33.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-otlp-0.32.0...opentelemetry-otlp-0.33.1)

Updates `opentelemetry_sdk` from 0.32.1 to 0.33.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-semantic-conventions-0.32.1...opentelemetry_sdk-0.33.1)

Updates `regex` from 1.13.0 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.13.0...1.13.1)

Updates `reqwest` from 0.13.4 to 0.13.5
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5)

Updates `rmcp` from 2.2.0 to 3.5.1
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v2.2.0...rmcp-v3.5.1)

Updates `rustls` from 0.23.41 to 0.23.45
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.41...v/0.23.45)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.150 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.154)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `sigstore-verify` from 0.11.0 to 0.14.0
- [Release notes](https://github.com/sigstore/sigstore-rust/releases)
- [Changelog](https://github.com/sigstore/sigstore-rust/blob/main/release-plz.toml)
- [Commits](sigstore/sigstore-rust@sigstore-verify-v0.11.0...sigstore-verify-v0.14.0)

Updates `thiserror` from 2.0.18 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.21)

Updates `tokio` from 1.52.3 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.2)

Updates `tower-http` from 0.7.0 to 0.7.1
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.7.0...tower-http-0.7.1)

Updates `tracing-opentelemetry` from 0.33.0 to 0.34.0
- [Release notes](https://github.com/tokio-rs/tracing-opentelemetry/releases)
- [Changelog](https://github.com/tokio-rs/tracing-opentelemetry/blob/v0.1.x/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/tracing-opentelemetry/commits)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: async-trait
  dependency-version: 0.1.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: futures
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: jsonwebtoken
  dependency-version: 11.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: kube
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: oci-client
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: opentelemetry
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: opentelemetry-otlp
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: opentelemetry_sdk
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: regex
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: reqwest
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rmcp
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: rustls
  dependency-version: 0.23.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: sigstore-verify
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: thiserror
  dependency-version: 2.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tower-http
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tracing-opentelemetry
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants