chore(deps)(deps): bump the rust-all group in /vault-broker with 6 updates by dependabot[bot] · Pull Request #12 · hyperpolymath/reasonably-good-token-vault

dependabot · 2026-04-21T13:58:51Z

Bumps the rust-all group in /vault-broker with 6 updates:

Package	From	To
axum	`0.7.9`	`0.8.9`
tokio	`1.51.1`	`1.52.1`
tower	`0.4.13`	`0.5.3`
tower-http	`0.5.2`	`0.6.8`
uuid	`1.23.0`	`1.23.1`
thiserror	`1.0.69`	`2.0.18`

Updates axum from 0.7.9 to 0.8.9

Release notes

Sourced from axum's releases.

axum-v0.8.9

added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)

changed: Update minimum rust version to 1.80 (#3620)

fixed: Set connect endpoint on correct field in MethodRouter (#3656)

fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3597: tokio-rs/axum#3597 #3620: tokio-rs/axum#3620 #3656: tokio-rs/axum#3656 #3611: tokio-rs/axum#3611

axum v0.8.8

Clarify documentation for Router::route_layer (#3567)

#3567: tokio-rs/axum#3567

axum v0.8.7

Relax implicit Send / Sync bounds on RouterAsService, RouterIntoService (#3555)

Make it easier to visually scan for default features (#3550)

Fix some documentation typos

#3550: tokio-rs/axum#3550 #3555: tokio-rs/axum#3555

axum v0.8.5

fixed: Reject JSON request bodies with trailing characters after the JSON document (#3453)

added: Implement OptionalFromRequest for Multipart (#3220)

added: Getter methods Location::{status_code, location}

added: Support for writing arbitrary binary data into server-sent events (#3425)]

added: middleware::ResponseAxumBodyLayer for mapping response body to axum::body::Body (#3469)

added: impl FusedStream for WebSocket (#3443)

changed: The sse module and Sse type no longer depend on the tokio feature (#3154)

changed: If the location given to one of Redirects constructors is not a valid header value, instead of panicking on construction, the IntoResponse impl now returns an HTTP 500, just like Json does when serialization fails (#3377)

changed: Update minimum rust version to 1.78 (#3412)

#3154: tokio-rs/axum#3154 #3220: tokio-rs/axum#3220 #3377: tokio-rs/axum#3377 #3412: tokio-rs/axum#3412 #3425: tokio-rs/axum#3425 #3443: tokio-rs/axum#3443 #3453: tokio-rs/axum#3453 #3469: tokio-rs/axum#3469

axum v0.8.4

added: Router::reset_fallback (#3320)

added: WebSocketUpgrade::selected_protocol (#3248)

fixed: Panic location for overlapping method routes (#3319)

fixed: Don't leak a tokio task when using serve without graceful shutdown (#3129)

... (truncated)

Commits

c59208c revert axum-core changelog changes
99068f5 Revert "Fix IntoResponse for tuples overriding error response codes (#3603)"
23d7098 Revert "axum-core 0.5.6"
e8a39ad axum-macros 0.5.1
6e9a249 axum-extra 0.12.6
0ec9041 axum 0.8.9
c3fcebb axum-core 0.5.6
a8790fc update release notes
26ba7bb docs: consolidate state management docs in crate root (#3683)
9fc59ef Update to tokio-tungstenite 0.29 (#3689)
Additional commits viewable in compare view

Updates tokio from 1.51.1 to 1.52.1

Release notes

Sourced from tokio's releases.

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

io: AioSource::register_borrowed for I/O safety support (#7992)

net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)

taskdump: add trace_with() for customized task dumps (#8025)

taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)

fs: support io_uring in AsyncRead for File (#7907)

Changed

runtime: improve spawn_blocking scalability with sharded queue (#7757)

runtime: use compare_exchange_weak() in worker queue (#8028)

Fixed

runtime: overflow second half of tasks when local queue is filled instead of first half (#8029)

Documented

docs: fix typo in oneshot::Sender::send docs (#8026)

docs: hide #[tokio::main] attribute in the docs of sync::watch (#8035)

net: add docs on ConnectionRefused errors with UDP sockets (#7870)

#7757: tokio-rs/tokio#7757 #7870: tokio-rs/tokio#7870 #7907: tokio-rs/tokio#7907 #7992: tokio-rs/tokio#7992 #8010: tokio-rs/tokio#8010 #8025: tokio-rs/tokio#8025 #8026: tokio-rs/tokio#8026 #8028: tokio-rs/tokio#8028 #8029: tokio-rs/tokio#8029

... (truncated)

Commits

905c146 chore: prepare to release v1.52.1 (#8059)
56aaa43 rt: revert #7757 to fix regression in spawn_blocking (#8057)
57ff47a ci: update trybuild to expect output from rustc 1.95.0 (#8058)
812de3e ci: bump taiki-e/cache-cargo-install-action from 1 to 3 (#8053)
ba82e73 ci: use Dependabot to keep github actions up to date (#8052)
2e85f9d ci: replace cirrus-ci with freebsd-vm (#8041)
a7e1cd8 ci: update GitHub Actions workflows to use latest tool versions (#8047)
5f7be0a chore: perpare 1.52.0 (#8045)
36d12d2 taskdump: allow impl FnMut() in taskdumps instead of just fn() (#8040)
f943312 fs: support io-uring in AsyncRead for File (#7907)
Additional commits viewable in compare view

Updates tower from 0.4.13 to 0.5.3

Release notes

Sourced from tower's releases.

tower 0.5.3

Added

builder: Add ServiceBuilder::boxed_clone_sync() helper (#804)

Fixed

retry: Check that supplied jitter is not NaN (#843)

#804: tower-rs/tower#804 #843: tower-rs/tower#843

tower 0.5.2

Added

util: Add BoxCloneSyncService which is a Clone + Send + Sync boxed Service (#777)

util: Add BoxCloneSyncServiceLayer which is a Clone + Send + Sync boxed Layer (#802)

tower 0.5.1

Fix minimum version of tower-layer dependency (#787)

#787: tower-rs/tower#787

tower 0.5.0

Fixed

util: BoxService is now Sync (#702)

Changed

util: Removed deprecated ServiceExt::ready_and method and ReadyAnd future (#652)

retry: Breaking Change retry::Policy::retry now accepts &mut Req and &mut Res instead of the previous mutable versions. This increases the flexibility of the retry policy. To update, update your method signature to include mut for both parameters. (#584)

retry: Breaking Change Change Policy to accept &mut self (#681)

retry: Add generic backoff utilities (#685)

retry: Add Budget trait. This allows end-users to implement their own budget and bucket implementations. (#703)

reconnect: Breaking Change Remove unused generic parameter from Reconnect::new (#755)

ready-cache: Allow iteration over ready services (#700)

discover: Implement Clone for Change (#701)

util: Add a BoxCloneServiceLayer (#708)

rng: use a simpler random 2-sampler (#716)

filter: Derive Clone for AsyncFilterLayer (#731)

general: Update IndexMap (#741)

MSRV: Increase MSRV to 1.63.0 (#741)

#702: tower-rs/tower#702 #652: tower-rs/tower#652 #584: tower-rs/tower#584 #681: tower-rs/tower#681

... (truncated)

Commits

4b0a6b0 tower v0.5.3
2c8524a tower v0.5.3
50fa4b6 ci: upgrade deny check to v2 (#847)
73febcd fix: Check that jitter is not NaN instead of finiteness (#843)
719ec03 chore: Disable unused futures feature (#838)
1992ebd chore(util): remove redundant ready! wrapping in poll implementations (#844)
21e01e9 docs: Resolve document warning (#841)
d1b55be docs: Remove doc_auto_cfg config (#840)
9d876c0 ci: Update to actions/checkout v5 (#839)
a1c277b docs: correct rng pre-requisite comment (#835)
Additional commits viewable in compare view

Updates tower-http from 0.5.2 to 0.6.8

Release notes

Sourced from tower-http's releases.

tower-http-0.6.8

Fixed

Disable multiple_members in Gzip decoder, since HTTP context only uses one member. (#621)

#621: tower-rs/tower-http#621

What's Changed

Disable multiple_members option for gzip decoder by @ducaale in tower-rs/tower-http#621

ci: Pin tracing in MSRV job by @ducaale in tower-rs/tower-http#622

ci: Switch cargo-public-api-crates to cargo-check-external-types by @tottoto in tower-rs/tower-http#613

Remove deprecated annotations and Refactor From implementations by @sinder38 in tower-rs/tower-http#608

v0.6.8 by @seanmonstar in tower-rs/tower-http#624

New Contributors

@sinder38 made their first contribution in tower-rs/tower-http#608

Full Changelog: tower-rs/tower-http@tower-http-0.6.7...tower-http-0.6.8

tower-http-0.6.7

Added

TimeoutLayer::with_status_code(status) to define the status code returned when timeout is reached. (#599)

Deprecated

auth::require_authorization is too basic for real-world. (#591)

TimeoutLayer::new() should be replaced with TimeoutLayer::with_status_code(). (Previously was StatusCode::REQUEST_TIMEOUT) (#599)

Fixed

on_eos is now called even for successful responses. (#580)

ServeDir: call fallback when filename is invalid (#586)

decompression will not fail when body is empty (#618)

#580: tower-rs/tower-http#580 #586: tower-rs/tower-http#586 #591: tower-rs/tower-http#591 #599: tower-rs/tower-http#599 #618: tower-rs/tower-http#618

New Contributors

@mladedav made their first contribution in tower-rs/tower-http#580

@aryaveersr made their first contribution in tower-rs/tower-http#586

@soerenmeier made their first contribution in tower-rs/tower-http#588

... (truncated)

Commits

33166c8 v0.6.8
6680160 Fix deprecated lints (#608)
81b8231 ci: Switch cargo-public-api-crates to cargo-check-external-types (#613)
1fb0144 ci: pin tracing in msrv job (#622)
1fe4c09 fix(decompression): disable multiple_members option for gzip decoder (#621)
3bf1ba7 v0.6.7
723ca9a fix(decompression): Suppress EOF errors caused by decompressing empty body (#...
8ab9f82 chore(ci): use newer cargo-public-api-crates job (#619)
7cfdf76 doc: Replace doc_auto_cfg with doc_cfg (#609)
50beeaf Add support for custom status code in TimeoutLayer (#599)
Additional commits viewable in compare view

Updates uuid from 1.23.0 to 1.23.1

Release notes

Sourced from uuid's releases.

v1.23.1

What's Changed

Remove deprecated msrv feature from wasm-bindgen dependency by @guybedford in uuid-rs/uuid#877

fix: Timestamp::from_gregorian deprecation note by @aznashwan in uuid-rs/uuid#878

Prepare for 1.23.1 release by @KodrAus in uuid-rs/uuid#879

New Contributors

@guybedford made their first contribution in uuid-rs/uuid#877

@aznashwan made their first contribution in uuid-rs/uuid#878

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

Commits

ca0c85f Merge pull request #879 from uuid-rs/cargo/v1.23.1
b4db015 prepare for 1.23.1 release
771069d Merge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note
80994a2 fix: Timestamp::from_gregorian deprecation note
90c5be8 Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv
8b8c4f4 Remove deprecated feature from wasm-bindgen dependency
See full diff in compare view

Updates thiserror from 1.0.69 to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

Make compatible with project-level needless_lifetimes = "forbid" (#443, thanks @LucaCappelletti94)

2.0.17

Use differently named __private module per patch release (#434)

2.0.16

Add to "no-std" crates.io category (#429)

2.0.15

Prevent Error::provide API becoming unavailable from a future new compiler lint (#427)

2.0.14

Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#426)

2.0.13

Documentation improvements

2.0.12

Prevent elidable_lifetime_names pedantic clippy lint in generated impl (#413)

2.0.11

Add feature gate to tests that use std (#409, #410, thanks @Maytha8)

2.0.10

Support errors containing a generic type parameter's associated type in a field (#408)

2.0.9

Work around missing_inline_in_public_items clippy restriction being triggered in macro-generated code (#404)

2.0.8

Improve support for macro-generated derive(Error) call sites (#399)

2.0.7

Work around conflict with #[deny(clippy::allow_attributes)] (#397, thanks @zertosh)

2.0.6

Suppress deprecation warning on generated From impls (#396)

2.0.5

Prevent deprecation warning on generated impl for deprecated type (#394)

2.0.4

Eliminate needless_lifetimes clippy lint in generated From impls (#391, thanks @matt-phylum)

2.0.3

Support the same Path field being repeated in both Debug and Display representation in error message (#383)

Improve error message when a format trait used in error message is not implemented by some field (#384)

2.0.2

... (truncated)

Commits

dc0f6a2 Release 2.0.18
0275292 Touch up PR 443
3c33bc6 Merge pull request #443 from LucaCappelletti94/master
995939c Reproduce issue 442
21653d1 Made clippy lifetime allows conditional
45e5388 Update actions/upload-artifact@v5 -> v6
386aac1 Update actions/upload-artifact@v4 -> v5
ec50561 Update actions/checkout@v5 -> v6
247eab5 Update name of empty_enum clippy lint
91b181f Raise required compiler to Rust 1.68
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-all group in /vault-broker with 6 updates: | Package | From | To | | --- | --- | --- | | [axum](https://github.com/tokio-rs/axum) | `0.7.9` | `0.8.9` | | [tokio](https://github.com/tokio-rs/tokio) | `1.51.1` | `1.52.1` | | [tower](https://github.com/tower-rs/tower) | `0.4.13` | `0.5.3` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.5.2` | `0.6.8` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.0` | `1.23.1` | | [thiserror](https://github.com/dtolnay/thiserror) | `1.0.69` | `2.0.18` | Updates `axum` from 0.7.9 to 0.8.9 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.7.9...axum-v0.8.9) Updates `tokio` from 1.51.1 to 1.52.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.51.1...tokio-1.52.1) Updates `tower` from 0.4.13 to 0.5.3 - [Release notes](https://github.com/tower-rs/tower/releases) - [Commits](tower-rs/tower@tower-0.4.13...tower-0.5.3) Updates `tower-http` from 0.5.2 to 0.6.8 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.5.2...tower-http-0.6.8) Updates `uuid` from 1.23.0 to 1.23.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.0...v1.23.1) Updates `thiserror` from 1.0.69 to 2.0.18 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@1.0.69...2.0.18) --- updated-dependencies: - dependency-name: axum dependency-version: 0.8.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-all - dependency-name: tokio dependency-version: 1.52.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-all - dependency-name: tower dependency-version: 0.5.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-all - dependency-name: tower-http dependency-version: 0.6.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-all - dependency-name: uuid dependency-version: 1.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-all - dependency-name: thiserror dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-21T13:58:52Z

Labels

The following labels could not be found: security. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 21, 2026

dependabot Bot requested a review from hyperpolymath as a code owner April 21, 2026 13:58

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 21, 2026

hyperpolymath approved these changes Apr 21, 2026

View reviewed changes

hyperpolymath merged commit 3e0392e into main Apr 21, 2026
29 of 48 checks passed

hyperpolymath deleted the dependabot/cargo/vault-broker/rust-all-f15c7c65e1 branch April 21, 2026 14:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps)(deps): bump the rust-all group in /vault-broker with 6 updates#12

chore(deps)(deps): bump the rust-all group in /vault-broker with 6 updates#12
hyperpolymath merged 1 commit into
mainfrom
dependabot/cargo/vault-broker/rust-all-f15c7c65e1

dependabot Bot commented on behalf of github Apr 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 21, 2026

axum-v0.8.9

axum v0.8.8

axum v0.8.7

axum v0.8.5

axum v0.8.4

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

Added (unstable)

Changed

Fixed

Documented

tower 0.5.3

Added

Fixed

tower 0.5.2

Added

tower 0.5.1

tower 0.5.0

Fixed

Changed

tower-http-0.6.8

Fixed

What's Changed

New Contributors

tower-http-0.6.7

Added

Deprecated

Fixed

New Contributors

v1.23.1

What's Changed

New Contributors

2.0.18

2.0.17

2.0.16

2.0.15

2.0.14

2.0.13

2.0.12

2.0.11

2.0.10

2.0.9

2.0.8

2.0.7

2.0.6

2.0.5

2.0.4

2.0.3

2.0.2

Uh oh!

dependabot Bot commented on behalf of github Apr 21, 2026

Labels

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant