chore(deps): weekly safe cargo updates · 5 packages

[mendral-app]

Packages bumped

Package	Old	New	Role
tonic	0.14.2	0.14.5	gRPC framework
tonic-prost	0.14.2	0.14.5	Tonic + Prost integration
tonic-prost-build	0.14.2	0.14.5	Build-time codegen
prost	0.14.2	0.14.4	Protobuf compiler
prost-types	0.14.2	0.14.4	Well-known protobuf types
tokio	1.51.1	1.52.3	Async runtime

Per-package details

tonic / tonic-prost / tonic-prost-build 0.14.2 → 0.14.5

Changelog highlights (v0.14.3–v0.14.5):

• Expose tcp_keepalive_interval and tcp_keepalive_retries options on Server
• Allow configuration of max_local_error_reset_streams on Server
• Fix: respect max_message_size when decompressing messages
• Fix: allow space after : in grpc-status header
• Add max connections setting (v0.14.5)

Impact: This repo uses tonic for generated gRPC service stubs via build.rs. These are server/transport-layer improvements — no changes to code generation APIs. The decompression fix is beneficial for downstream consumers. Note: v0.14.6 was skipped because it requires Rust 1.88 (CI uses 1.85.0).

---

prost / prost-types 0.14.2 → 0.14.4

Changelog highlights (v0.14.3–v0.14.4):

• v0.14.3: Fixed forgotten prost import paths, fixed Name implementation producing invalid URLs with empty packages, re-added DecodeError::new
• v0.14.4: Made is_valid a constant function in derive macro, fixed Display vs Debug for generated enumeration attributes, fixed error for invalid enumeration default identifiers, fixed C++ build on GCC 15, bumped MSRV to 1.85

Impact: This repo generates Rust protobuf code using prost. The import path and Name fixes from 0.14.3 are directly relevant to code generation correctness. v0.14.4 brings derive macro quality improvements. Note: v0.14.2 is yanked on crates.io. MSRV 1.85 matches the CI toolchain.

---

tokio 1.51.1 → 1.52.3

Changelog highlights:

• spawn_blocking scalability improved with sharded queue
• Worker queue optimization with compare_exchange_weak()
• Fixed task queue overflow handling
• New AioSource::register_borrowed for I/O safety

Impact: Tokio is used as the async runtime (rt-multi-thread + macros features). These are internal performance improvements with no API changes. No impact on generated code.

Files modified

• Cargo.toml
• Cargo.lock

Skipped this ecosystem

Package	Current	Reason
tonic 0.14.6	—	Requires Rust 1.88; CI uses 1.85.0
serde	1.0.228	Already at latest
prost-wkt-types	0.7.1	Already at latest 0.7.x

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

[mendral-app]

Correction to PR body: The tonic/tonic-prost/tonic-prost-build packages are bumped to 0.14.5 (not 0.14.6). Version 0.14.6 requires rustc 1.88 which is incompatible with the project's CI toolchain (rustc 1.85.0).

Updated skip reason: tonic 0.14.6 skipped due to MSRV incompatibility (requires rustc 1.88; CI uses 1.85.0).

Note

Tag @mendral-app with feedback or questions.