Skip to content

chore(deps): bump tonic-reflection from 0.12.3 to 0.14.5#7538

Open
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/cargo/dev/tonic-reflection-0.14.5
Open

chore(deps): bump tonic-reflection from 0.12.3 to 0.14.5#7538
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/cargo/dev/tonic-reflection-0.14.5

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps tonic-reflection from 0.12.3 to 0.14.5.

Release notes

Sourced from tonic-reflection's releases.

v0.14.5

What's Changed

  • Add max connections setting

Full Changelog: hyperium/tonic@v0.14.4...v0.14.5

v0.14.4

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.3...v0.14.4

v0.14.3

Features

  • Expose tcp_keepalive_interval and tcp_keepalive_retries options on Server (#2472)
  • Allow configuration of max_local_error_reset_streams on Server (#2437)
  • Put source error into the Display impl of Status (#2417)
  • Server::default() now sets TCP_NODELAY to true (#2413)

Bug Fixes

  • Respect max_message_size when decompressing a message (#2484)
  • Depend on http at least 1.1.0 (#2426)

Documentation

  • Fix documentation links for timeout configuration (#2483)
  • Fix documentation typos and grammar issues in status.rs and codec/mod.rs (#2468)
  • Fix labels in Display for Status (#2414)
  • Fix features docs in tonic-build and tonic-prost-build (#2434)
  • Remove redundant word in tonic-build and tonic-prost-build README (#2425)

v0.14.2

What's Changed

New Contributors

Full Changelog: hyperium/tonic@v0.14.1...v0.14.2

... (truncated)

Changelog

Sourced from tonic-reflection's changelog.

NOTE: ths changelog is no longer used and from version v0.13.0 onward we will be using github releases and the changes can be found here.

Commits
  • 3f7caf3 chore: prepare v0.14.5 release (#2516)
  • 3f56644 grpc(chore): add missing copyright notices (#2513)
  • 1769c91 feat(xds): implement xDS subscription worker (#2478)
  • 56f8c6d feat(grpc): Add TCP listener API in the Runtime trait + tests for server cred...
  • 149f366 feat(grpc) Add channel credentials API + Insecure credentials (#2495)
  • cd5b32f chore: prepare 0.14.4 release (#2504)
  • 27640d2 fix(web): allow space after : in grpc-status (#2506)
  • 0c26ee1 Fix permission of a series of files (#2502)
  • c25daa6 fix(ci): remove comment from manifest to unblock version parsing (#2501)
  • 3efc5f9 chore(doc): Replace doc_auto_cfg config with doc_cfg (#2428)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tonic-reflection](https://github.com/hyperium/tonic) from 0.12.3 to 0.14.5.
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](hyperium/tonic@v0.12.3...v0.14.5)

---
updated-dependencies:
- dependency-name: tonic-reflection
  dependency-version: 0.14.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Rust language related security Security update This issue is for an update or upgrade. labels Mar 2, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Mar 2, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

packages/rust/jedi/Cargo.toml

PackageVersionLicenseIssue Type
tonic-reflection>= 0.14.5, < 0.15.0NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
cargo/tonic 0.14.5 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 8Found 26/30 approved changesets -- score normalized to 8
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 9security policy file detected
Maintained🟢 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 4binaries present in source code
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 1SAST tool is not run on all commits -- score normalized to 1
cargo/tonic-prost 0.14.5 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 8Found 26/30 approved changesets -- score normalized to 8
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 9security policy file detected
Maintained🟢 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 4binaries present in source code
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 1SAST tool is not run on all commits -- score normalized to 1
cargo/tonic-reflection 0.14.5 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 8Found 26/30 approved changesets -- score normalized to 8
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 9security policy file detected
Maintained🟢 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 4binaries present in source code
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 1SAST tool is not run on all commits -- score normalized to 1
cargo/tonic-reflection >= 0.14.5, < 0.15.0 UnknownUnknown

Scanned Files

  • Cargo.lock
  • packages/rust/jedi/Cargo.toml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Rust language related security Security update This issue is for an update or upgrade.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants