Bump the minor-and-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #107 · stellar/rs-stellar-rpc-client

dependabot · 2026-07-26T02:08:53Z

Bumps the minor-and-patch group with 6 updates in the / directory:

Package	From	To
clap	`4.6.1`	`4.6.6`
serde_json	`1.0.150`	`1.0.151`
serde	`1.0.228`	`1.0.229`
serde_with	`3.20.0`	`3.22.0`
tokio	`1.52.3`	`1.53.1`
http	`1.4.1`	`1.5.0`

Updates clap from 4.6.1 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

Update to syn v3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Commits

348cff3 chore: Release
d478377 docs: Update changelog
04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
f90a966 fix(complete): Use spaces for indentation in fish
dd4997b fix(complete): Don't glob-expand bash positionals
8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
8141e11 chore(deps): Update compatible (dev) (#6398)
8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

Commits

de85007 Release 1.0.151
3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
cf16f75 Add RawValue::from_string_unchecked
827a315 Update actions/upload-artifact@v6 -> v7
cea36a5 Update actions/checkout@v6 -> v7
See full diff in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates serde_with from 3.20.0 to 3.22.0

Release notes

Sourced from serde_with's releases.

serde_with v3.22.0

Added

Add support for jiff v0.2 behind the new jiff_0_2 feature flag (#936) jiff::SignedDuration works with DurationSeconds and its variants. jiff::Timestamp, jiff::Zoned, and jiff::civil::DateTime work with TimestampSeconds and its variants. Deserializing a jiff::Zoned uses the system time zone, like chrono::DateTime<Local>.

Fixed

Extend the GHSA-7gcf-g7xr-8hxj fix to the duplicate-key-prevention collections. The rust::sets_duplicate_value_is_error, rust::maps_duplicate_key_is_error, rust::sets_last_value_wins, and rust::maps_first_key_wins adapters created their backing sets/maps with with_capacity_and_hasher using the raw deserializer size_hint, bypassing the size_hint_cautious cap added in #966 (the clippy.toml disallowed_methods lint only covers Vec::with_capacity, not with_capacity_and_hasher, so these sites were not flagged). Attacker-controlled input claiming a huge length could panic with Hash table capacity overflow before a single element was read. All such constructions now route through size_hint_cautious.

serde_with v3.21.0

Security

GHSA-7gcf-g7xr-8hxj: KeyValueMap serialization panics on empty sequence or map entries Bad or attacker controlled values could cause a panic while allocating too large values. Fixed in #966 by setting a maximum allocation size during the creation of collections like Vec or sets.

Thanks to @7thParkk for reporting the issue.

Added

Add NoneAsZero adapter that maps Option<NonZero*> to a plain integer, encoding None as 0 by @SAY-5 (#486)

Changed

Re-enable link-to-definition on docs.rs (#964)

Fixed

Fix some doc links to point to the correct types (#963)

Re-enable unused_qualifications and fix the resulting findings by @lms0806 (#962)

Commits

88f576a Bump version to 3.22.0 (#991)
931e664 Bump version to 3.22.0
e26930e Bump github/codeql-action from 4.37.3 to 4.37.4 in the github-actions group (...
92cd5a0 Bump github/codeql-action in the github-actions group
32be66f Guard with_capacity_and_hasher against untrusted size_hint (DoS) (#971)
33871cd Merge branch 'master' into fix/duplicate-key-impls-capacity-overflow
bb1e064 Change function position within impl (#968)
202d3dd Improve the time unit macros to remove unnecessary repetition and make the co...
b347efb Move the use_duration_signed_ser/*_de macros utils
6590545 chrono_0_4: Implement the same time unit macro cleanup as jiff_0_2
Additional commits viewable in compare view

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

time: fix alt timer cancellation and insertion race (#8252)

Documented

runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)

metrics: add task schedule latency metric (#7986)

net: add SocketAddr methods to Unix sockets (#8144)

Changed

io: add #[inline] to IO trait impls for in-memory types (#8242)

net: implement UCred::pid on FreeBSD (#8086)

net: support Nuttx target os (#8259)

signal: refactor global variables on Windows (#8231)

sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)

taskdump: support taskdumps on s390x (#8192)

time: add #[track_caller] to timeout_at() (#8077)

time: consolidate mutex locks on spurious poll (#8124)

time: defer waker clone on spurious poll (#8107)

time: move lazy-registration state into Sleep (#8132)

tracing: remove unnecessary span clone (#8126)

Fixed

io: do not treat zero-length reads as EOF in Chain (#8251)

net: use getpeereid for QNX peer credentials (#8270)

runtime: avoid illegal state in FastRand (#8078)

sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)

taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)

time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

75fef53 chore: prepare Tokio v1.53.1 (#8303)
ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
91d3b4c time: fix alt timer cancellation and insertion race (#8252)
a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
be689a3 chore: prepare Tokio v1.53.0 (#8294)
50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
efdba5f chore: prepare Tokio v1.52.4 (#8289)
b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
Additional commits viewable in compare view

Updates http from 1.4.1 to 1.5.0

Release notes

Sourced from http's releases.

v1.5.0

What's Changed

feat(method): add QUERY method by @seanmonstar in hyperium/http#798

fix(uri): allow empty paths in uri::Builder by @seanmonstar in hyperium/http#853

perf(header,uri): faster value validation, URI parse/format, map inserts by @geeknoid in hyperium/http#852

fix(uri): enforce max length in PathAndQuery by @seanmonstar in hyperium/http#856

New Contributors

@geeknoid made their first contribution in hyperium/http#852

Full Changelog: hyperium/http@v1.4.2...v1.5.0

v1.4.2

What's Changed

feat(method): impl PartialOrd + Ord by @mmirate in hyperium/http#840

fix(uri): allow STAR paths with scheme/auth by @seanmonstar in hyperium/http#843

fix: reject DEL character by @Isvane in hyperium/http#842

New Contributors

@mmirate made their first contribution in hyperium/http#840

@Isvane made their first contribution in hyperium/http#842

Full Changelog: hyperium/http@v1.4.1...v1.4.2

Changelog

Sourced from http's changelog.

1.5.0 (July 29, 2026)

Add Method::QUERY constant for the new QUERY method defined in RFC 10008.

Fix uri::Builder::path_and_query() to allow empty strings to mean no path.

Fix uri::PathAndQuery parsing to enforce URI max length.

1.4.2 (June 8, 2026)

Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.

Fix Uri to properly reject DEL characters.

Commits

16fc9a7 v1.5.0
e559023 fix(uri): enforce max length in PathAndQuery (#856)
2178e17 perf(header,uri): faster value validation, URI parse/format, map inserts (#852)
03c8cd7 fix(uri): allow empty paths in uri::Builder (#853)
bb8705b feat(method): add QUERY method (#798)
82db5b8 v1.4.2
a9cdbf8 fix(uri): reject DEL character (#842)
df75ca3 fix(uri): allow STAR paths with scheme/auth (#843)
ec3f8ce feat(method): impl PartialOrd + Ord (#840)
See full diff in compare view

Copilot

Copilot wasn't able to review any files in this pull request.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

socket-security · 2026-07-26T02:09:13Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	tokio@1.52.3 ⏵ 1.53.1
	serde@1.0.228 ⏵ 1.0.229
	serde_json@1.0.150 ⏵ 1.0.151
	serde_with@3.20.0 ⏵ 3.22.0
	clap@4.6.1 ⏵ 4.6.6
	http@1.4.1 ⏵ 1.5.0			⁺¹

View full report

socket-security · 2026-07-26T02:09:14Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

Bumps the minor-and-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.6` | | [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.20.0` | `3.22.0` | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` | | [http](https://github.com/hyperium/http) | `1.4.1` | `1.5.0` | Updates `clap` from 4.6.1 to 4.6.6 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.6) Updates `serde_json` from 1.0.150 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.150...v1.0.151) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_with` from 3.20.0 to 3.22.0 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.20.0...v3.22.0) Updates `tokio` from 1.52.3 to 1.53.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1) Updates `http` from 1.4.1 to 1.5.0 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.1...v1.5.0) --- updated-dependencies: - dependency-name: clap dependency-version: 4.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: http dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: serde_with dependency-version: 3.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tokio dependency-version: 1.53.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 26, 2026

Copilot AI balanced review requested due to automatic review settings July 26, 2026 02:08

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 26, 2026

Copilot AI reviewed Jul 26, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/cargo/minor-and-patch-c0a3837679 branch from 33e2a48 to 3dba23f Compare August 13, 2026 22:53

dependabot Bot force-pushed the dependabot/cargo/minor-and-patch-c0a3837679 branch from 3dba23f to 1443b11 Compare August 24, 2026 20:59

dependabot Bot force-pushed the dependabot/cargo/minor-and-patch-c0a3837679 branch from 1443b11 to 7a4d0dd Compare August 30, 2026 02:11

Copilot AI review requested due to automatic review settings August 30, 2026 02:11

Copilot AI reviewed Aug 30, 2026

Navigation Menu

Uh oh!

Bump the minor-and-patch group across 1 directory with 6 updates - #107

Bump the minor-and-patch group across 1 directory with 6 updates#107
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/minor-and-patch-c0a3837679

dependabot Bot commented on behalf of github Jul 26, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

socket-security Bot commented Jul 26, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 26, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.6.6

[4.6.6] - 2026-08-06

Features

v4.6.5

[4.6.5] - 2026-07-31

Fixes

v4.6.4

[4.6.4] - 2026-07-21

Internal

v4.6.3

[4.6.3] - 2026-07-20

Fixes

v4.6.2

[4.6.2] - 2026-07-15

Fixes

[4.6.6] - 2026-08-06

Features

[4.6.5] - 2026-07-31

Fixes

[4.6.4] - 2026-07-21

Internal

[4.6.3] - 2026-07-20

Fixes

[4.6.2] - 2026-07-15

Fixes

v1.0.151

v1.0.229

serde_with v3.22.0

Added

Fixed

serde_with v3.21.0

Security

Added

Changed

Fixed

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

Fixed (unstable)

Documented

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

Changed

Fixed

v1.5.0

What's Changed

New Contributors

v1.4.2

What's Changed

New Contributors

1.5.0 (July 29, 2026)

1.4.2 (June 8, 2026)

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

socket-security Bot commented Jul 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jul 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 26, 2026 •

edited

Loading

socket-security Bot commented Jul 26, 2026 •

edited

Loading

socket-security Bot commented Jul 26, 2026 •

edited

Loading