chore(deps): bump the rust-minor-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #1682 · rust-works/omni-dev

dependabot · 2026-09-14T00:26:21Z

Bumps the rust-minor-patch group with 6 updates in the / directory:

Package	From	To
reqwest	`0.13.4`	`0.13.5`
rmcp	`3.1.4`	`3.3.0`
flate2	`1.1.9`	`1.1.10`
aws-lc-rs	`1.18.0`	`1.18.1`
ureq	`3.4.0`	`3.4.1`
mail-parser	`0.11.7`	`0.11.9`

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Updates rmcp from 3.1.4 to 3.3.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.3.0

Added

(macros) reject empty tool_router (#1233)

rmcp-v3.3.0

Added

add ServerHandler::negotiate_initialize (#1247)

(macros) reject empty tool_router (#1233)

(auth) add enterprise refresh-token and ID-JAG exchanges (#1234)

Fixed

(sse) saturate exponential reconnect backoff to avoid overflow panic (#1231)

resolve clippy warnings across workspace (#1195)

(auth) unify refresh checks and error handling (#1236)

Other

(deps) update process-wrap requirement from 9.0 to 10.0 (#1229)

rmcp-macros-v3.2.0

Added

add request-state key rotation (#1128)

Fixed

allow concurrent streamable http requests (#1186)

rmcp-v3.2.0

Added

(auth) coordinate OAuth refreshes through credential stores (#1232)

add request-state key rotation (#1128)

Fixed

keep initialize on legacy protocol versions (#1228)

(transport) fall back after sessionless HTTP discover rejections (#1211)

allow concurrent streamable http requests (#1186)

Commits

3e636ca chore: release v3.3.0 (#1252)
b2c90b1 ci: pin commitlint dependencies (#1217)
46db531 fix(sse): saturate exponential reconnect backoff to avoid overflow panic (#1231)
744b9f9 chore(deps): bump crate-ci/typos (#1249)
e8a0d70 chore(deps): bump taiki-e/install-action from 2.86.7 to 2.87.6 (#1250)
6fa4053 fix: resolve clippy warnings across workspace (#1195)
f9a68bf feat: add ServerHandler::negotiate_initialize (#1247)
7d14f3a feat(macros): reject empty tool_router (#1233)
04c2f3f fix(auth): unify refresh checks and error handling (#1236)
add9cbe ci: bump codeql-action to 4.37.9 and group updates (#1240)
Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

feat: reuse zlib's decoder buffer by @Vaiz in rust-lang/flate2-rs#532

feat: add reset method for read::GzDecoder and buffered::GzDecoder by @Vaiz in rust-lang/flate2-rs#534

Drop cloudflare-zlib by @kornelski in rust-lang/flate2-rs#539

Add a wrapper for the Crc struct by @MikkelPaulson in rust-lang/flate2-rs#540

Bump miniz_oxide to 0.9 by @oscargus in rust-lang/flate2-rs#543

Upgrade miniz_oxide and add unit tests of the different flush kinds by @fintelia in rust-lang/flate2-rs#498

Fix infinite loop in writing gzip header/footer by @Shnatsel in rust-lang/flate2-rs#547

test: generate corrupt gzip fixture at runtime by @nanookclaw in rust-lang/flate2-rs#550

Reject oversized gzip extra fields by @Byron in rust-lang/flate2-rs#553

Reject incomplete deflate streams at EOF by @Guflly in rust-lang/flate2-rs#556

Include README.md in a private module by @bushrat011899 in rust-lang/flate2-rs#562

Add no_std support using nightly alloc_io by @bushrat011899 in rust-lang/flate2-rs#559

Update get_mut() documentation to make clear how 'inner` can be used by @Byron in rust-lang/flate2-rs#558

New Contributors

@Vaiz made their first contribution in rust-lang/flate2-rs#532

@MikkelPaulson made their first contribution in rust-lang/flate2-rs#540

@oscargus made their first contribution in rust-lang/flate2-rs#543

@nanookclaw made their first contribution in rust-lang/flate2-rs#550

@Guflly made their first contribution in rust-lang/flate2-rs#556

@bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
fb5228d Merge pull request #559 from bushrat011899/no_std
6ed3ba3 Add executable no_std example
faed8a0 Expand CI to test no_std compatibility and correctness
2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
3fe1126 Centralize usage of std for error and io
98e313a Add GzHeader::mtime_as_duration
0642965 Switch to core implicit prelude and only use std where required
454a63c Remove left-over dbg! statement
2a490b7 Add runtime_detection feature
Additional commits viewable in compare view

Updates aws-lc-rs from 1.18.0 to 1.18.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.18.1

What's Changed

Add ECDSA P-256 SHA-1 ASN.1 signature verification by @assafvayner in aws/aws-lc-rs#1214

Adds ECDSA_P256_SHA1_ASN1 for verifying ASN.1 DER-encoded ECDSA P-256 signatures over SHA-1, so applications can verify legacy signatures such as CloudFront signed URLs using ECDSA P-256 with the default SHA-1 hash.

SHA-1 remains available for legacy verification only. This release does not add a corresponding signing algorithm.

Tighten AEAD, cipher IV, HKDF, ECDH, and RSA API contracts by @justsmth in aws/aws-lc-rs#1215

In-place AEAD sealing now verifies that Extend produced exactly enough space for the plaintext and authentication tag before passing the buffer to AWS-LC. Non-conforming custom buffers now return Err(Unspecified).

Streaming cipher constructors now reject missing or mismatched IV contexts, matching the validation already performed by the one-shot APIs.

Salt::from(Okm) now uses the output algorithm selected by the Okm, rather than the algorithm from the source PRK.

ECDH shared-secret storage is now zeroized on fallible derive paths.

RSA verify_digest_sig now requires the supplied digest to match the digest configured by RsaParameters, for both parsed and unparsed public keys.

Valid inputs are unaffected. Calls using inconsistent algorithms, IV contexts, or custom AEAD buffers now fail closed with Err(Unspecified).

Upstream AWS-LC

aws-lc-sys v0.45.0 aligns with AWS-LC v5.7.0 (previously v5.5.0). See also the release notes for v5.6.0.

v5.7.0 corrects EVP_DecryptUpdate for padded block ciphers so it modifies only the output range reported through out_len. aws-lc-rs now includes canary-based regression coverage around the documented minimum output-buffer sizes.

aws-lc-fips-sys v0.14.2 moves to AWS-LC FIPS v4.2.0.

Includes the equivalent EVP_DecryptUpdate correction for FIPS builds.

Restores FIPS builds with Clang 20 and newer.

Removes the FIPS compiler wrapper's dependency on /usr/bin/env, fixing builds in Nix and similar sandboxed environments.

Build Improvements

Export cargo:root metadata when linking against a system-installed AWS-LC by @weihanglo in aws/aws-lc-rs#1208

The system-library path now exposes the installation prefix through DEP_AWS_LC_*_ROOT, consistently with the CC and CMake builders, so downstream build scripts can rely on the metadata regardless of how AWS-LC was built.

Fix -Wa,--debug-prefix-map handling with Clang and LTO by @justsmth in aws/aws-lc-rs#1212

Fixes Clang builds when CFLAGS contains -flto or -flto=thin. The assembler-specific flag is now used only with GCC; Clang's integrated assembler uses -ffile-prefix-map directly.

Filter raw target-triple CFLAGS spellings when compiling jitterentropy by @justsmth in aws/aws-lc-rs#1207

Prevents inherited optimization flags from overriding jitterentropy's required -O0, including when environment variables are set by a parent process using raw or legacy-normalized target triples.

Issues Being Closed

aws-lc-fips-sys v0.14.0 fails to build with Clang newer than 19 -- aws/aws-lc-rs#1202

FIPS compiler wrapper fails in Nix build environments -- aws/aws-lc-rs#1204

Raw target-triple CFLAGS should be filtered for jitterentropy -- aws/aws-lc-rs#1205

aws-lc-sys fails to build with Clang when CFLAGS includes -flto -- aws/aws-lc-rs#1211

Other Merged PRs

Prepare aws-lc-fips-sys v0.14.1 by @justsmth in aws/aws-lc-rs#1203

fix(publish): verify packaged crate with cargo build instead of cargo test by @justsmth in aws/aws-lc-rs#1201

fix: address clippy::assert_is_empty lints in ECB cipher modes by @justsmth in aws/aws-lc-rs#1210

ci: replace removed llvm-devel-lite package in FreeBSD jobs by @justsmth in aws/aws-lc-rs#1213

Prepare aws-lc-sys v0.45.0 by @justsmth in aws/aws-lc-rs#1220

Prepare aws-lc-fips-sys v0.14.2 by @justsmth in aws/aws-lc-rs#1221

Prepare v1.18.1 by @justsmth in aws/aws-lc-rs#1224

... (truncated)

Commits

22e629d Prepare v1.18.1 (#1224)
c4fde5c Prepare aws-lc-fips-sys v0.14.2 (#1221)
7943223 Prepare aws-lc-sys v0.45.0 (#1220)
8ea2229 fix: tighten AEAD, cipher IV, and digest API contracts (#1215)
bcca4d1 Add ECDSA P-256 SHA-1 ASN.1 verification algorithm (#1214)
32338a5 fix(builder): filter the raw-triple CFLAGS spelling for jitterentropy (#1207)
af422bd Fix -Wa,--debug-prefix-map probe (#1212)
749b26f ci: replace removed llvm-devel-lite package in FreeBSD jobs (#1213)
36c7a68 fix(publish): verify packaged crate with cargo build, not cargo test (#1201)
c71ab00 fix: address clippy::assert_is_empty lints in ECB cipher modes (#1210)
Additional commits viewable in compare view

Updates ureq from 3.4.0 to 3.4.1

Changelog

Sourced from ureq's changelog.

3.4.1

Bump ureq-proto to 0.6.2 (fixes to parsing and headers) #1199

Do not pool connections with unconsumed buffered input #1198

Fix timeout budgets restarting and applying to later phases #1194

Complete TLS handshake during connect so timeout_connect covers it #1193

Speed up read_json for responses with a known, small body size #1191

Commits

cf4a3cd 3.4.1
9559d7b Bump ureq-proto to 0.6.2 (#1199)
9eb654c Do not pool a connection with unconsumed input (#1198)
5b81318 Anchor timeout budgets to phase boundaries (#1194)
d480543 Complete TLS handshakes while connecting (#1193)
662410b Buffer read_json into memory when Content-Length is below the limit (#1191)
See full diff in compare view

Updates mail-parser from 0.11.7 to 0.11.9

Changelog

Sourced from mail-parser's changelog.

mail-parser 0.11.9

Added base64_decode_slice behind the new base64_slice feature, which adds a memchr dependency.

mail-parser 0.11.8

Fix: HeaderName breaks rkyv serialization from <= 0.11.6.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…6 updates Bumps the rust-minor-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.1.4` | `3.3.0` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.0` | `1.18.1` | | [ureq](https://github.com/algesten/ureq) | `3.4.0` | `3.4.1` | | [mail-parser](https://github.com/stalwartlabs/mail-parser) | `0.11.7` | `0.11.9` | Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `rmcp` from 3.1.4 to 3.3.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.1.4...rmcp-v3.3.0) Updates `flate2` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.9...1.1.10) Updates `aws-lc-rs` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.18.0...v1.18.1) Updates `ureq` from 3.4.0 to 3.4.1 - [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md) - [Commits](algesten/ureq@3.4.0...3.4.1) Updates `mail-parser` from 0.11.7 to 0.11.9 - [Release notes](https://github.com/stalwartlabs/mail-parser/releases) - [Changelog](https://github.com/stalwartlabs/mail-parser/blob/main/CHANGELOG.md) - [Commits](https://github.com/stalwartlabs/mail-parser/commits) --- updated-dependencies: - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-patch - dependency-name: rmcp dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-patch - dependency-name: flate2 dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-patch - dependency-name: aws-lc-rs dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-patch - dependency-name: ureq dependency-version: 3.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-patch - dependency-name: mail-parser dependency-version: 0.11.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-14T00:26:22Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2026-09-14T00:37:19Z

Coverage

Total: 97.26% ⚪ 0 pp vs main

Comparing 8601fe5..a07063e (merge-base → PR head)

No per-file coverage changes vs main.

🔇 4 ignored region(s), 0 tolerated region(s)

ignore removes the lines from both reports; tolerate keeps them in the reported percentage but scores them against the baseline, so a cross-run flip cannot move a delta. Regions are read from each revision's own source.

File	Kind	Lines	Rev	Reason
`src/cli/drive/lease.rs`	`ignore`	276-280	both	a sheet restore's fresh backup is always a DriveCopy — restore.rs's own recheck refuses unless the target is still a spreadsheet, and acquire() only ever takes a Bytes backup of a non-native target; this arm exists solely for exhaustiveness over the shared LeaseBackup enum
`src/cli/drive/lease.rs`	`ignore`	717-719	both	guards this test helper against misuse; every call site below passes an acquire subcommand
`src/drive/lease/ledger.rs`	`ignore`	620-624	both	mutate_locked refuses before ever calling the closure, so its body never runs — a hit here is a regression, not a coverage gap
`src/drive/lease/restore.rs`	`ignore`	947-951	both	every test using this double refuses before authenticating; a hit here is a regression, not a coverage gap

Patch coverage

No new executable lines added by this diff.

_{📦 Full per-file coverage summary · run summary}

newhoggy merged commit 6d60294 into main Sep 14, 2026
17 of 18 checks passed

newhoggy deleted the dependabot/cargo/rust-minor-patch-abc544f803 branch September 14, 2026 14:48

Navigation Menu

Uh oh!

chore(deps): bump the rust-minor-patch group across 1 directory with 6 updates - #1682

chore(deps): bump the rust-minor-patch group across 1 directory with 6 updates#1682
newhoggy merged 1 commit into
mainfrom
dependabot/cargo/rust-minor-patch-abc544f803

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

rmcp-macros-v3.3.0

Added

rmcp-v3.3.0

Added

Fixed

Other

rmcp-macros-v3.2.0

Added

Fixed

rmcp-v3.2.0

Added

Fixed

1.1.10

What's Changed

New Contributors

aws-lc-rs v1.18.1

What's Changed

Upstream AWS-LC

Build Improvements

Issues Being Closed

Other Merged PRs

3.4.1

mail-parser 0.11.9

mail-parser 0.11.8

Uh oh!

dependabot Bot commented on behalf of github Sep 14, 2026

Labels

Uh oh!

github-actions Bot commented Sep 14, 2026

Coverage

Patch coverage

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant