Skip to content

build(deps): bump the rust-dependencies group across 1 directory with 11 updates #14

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

build(deps): bump the rust-dependencies group across 1 directory with 11 updates #14

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 22, 2026 •
edited
Loading

Bumps the rust-dependencies group with 11 updates in the / directory:

Package From To
rand 0.8.5 0.9.2
jsonschema 0.18.3 0.40.0
metrics 0.22.4 0.24.3
criterion 0.5.1 0.8.1
reqwest 0.12.28 0.13.1
async-openai 0.24.1 0.32.3
jsonwebtoken 9.3.1 10.2.0
governor 0.8.1 0.10.4
tower_governor 0.5.0 0.8.0
darling 0.20.11 0.23.0
colored 2.2.0 3.1.1

Updates rand from 0.8.5 to 0.9.2

Changelog

Sourced from rand's changelog.

[0.9.2] - 2025-07-20

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

  • Revise "not a crypto library" policy again (#1565)
  • Remove zerocopy dependency from rand (#1579)

Fixes

  • Fix feature simd_support for recent nightly rust (#1586)

Changes

  • Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

  • Add rand::distr::Alphabetic distribution. (#1587)
  • Re-export rand_core (#1604)

[0.9.0] - 2025-01-27

Security and unsafe

  • Policy: "rand is not a crypto library" (#1514)
  • Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
  • Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

  • Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
  • Update to rand_core v0.9.0 (#1558)

Features

  • Support std feature without getrandom or rand_chacha (#1354)
  • Enable feature small_rng by default (#1455)
  • Remove implicit feature rand_chacha; use std_rng instead. (#1473)
  • Rename feature serde1 to serde (#1477)
  • Rename feature getrandom to os_rng (#1537)
  • Add feature thread_rng (#1547)

API changes: rand_core traits

  • Add fn RngCore::read_adapter implementing std::io::Read (#1267)
  • Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)
  • Add traits TryRngCore, TryCryptoRng (#1424, #1499)
  • Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)
  • Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)
  • Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

  • Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)

... (truncated)

Commits

Updates jsonschema from 0.18.3 to 0.40.0

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.40.0

Added

  • Custom keyword validators via the keywords parameter for extending JSON Schema with domain-specific validation rules.
  • HttpOptions for configuring HTTP client behavior (timeouts, TLS verification, custom CA certificates) when fetching external schemas.

[Rust] Release 0.40.0

Added

  • HttpOptions and ValidationOptions::with_http_options() for configuring HTTP client behavior (timeouts, TLS verification, custom CA certificates) when fetching external schemas.
  • CLI: --timeout, --connect-timeout, --insecure, and --cacert flags for HTTP configuration.

[Python] Release 0.39.0

Added

  • ValidationError.evaluation_path attribute for the dynamic path including $ref traversals.

Fixed

  • schemaLocation in evaluation output now excludes $ref/$dynamicRef/$recursiveRef per JSON Schema spec.

Performance

  • evaluate(): 4.5-30x faster on complex schemas, 12-89% faster overall.
  • Recursive schemas with oneOf/anyOf: ~4000x faster via memoization. #930

[Rust] Release 0.39.0

Added

  • ValidationError::evaluation_path() for the dynamic path including $ref traversals.

Changed

  • BREAKING: Simplified custom keyword API - Keyword::validate no longer receives path parameters, and ValidationError::custom only takes a message.

Fixed

  • schemaLocation in evaluation output now excludes $ref/$dynamicRef/$recursiveRef per JSON Schema spec.

Performance

  • evaluate(): 4.5-30x faster on complex schemas, 12-89% faster overall.
  • Recursive schemas with oneOf/anyOf: ~4000x faster via memoization. #930

[Python] Release 0.38.1

Fixed

  • multipleOf validation for integer values between 2^53 and i64::MAX.

[Rust] Release 0.38.1

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.40.0] - 2026-01-18

Added

  • HttpOptions and ValidationOptions::with_http_options() for configuring HTTP client behavior (timeouts, TLS verification, custom CA certificates) when fetching external schemas.
  • CLI: --timeout, --connect-timeout, --insecure, and --cacert flags for HTTP configuration.

[0.39.0] - 2026-01-16

Added

  • ValidationError::evaluation_path() for the dynamic path including $ref traversals.

Changed

  • BREAKING: Simplified custom keyword API - Keyword::validate no longer receives path parameters, and ValidationError::custom only takes a message.

Fixed

  • schemaLocation in evaluation output now excludes $ref/$dynamicRef/$recursiveRef per JSON Schema spec.

Performance

  • evaluate(): 4.5-30x faster on complex schemas, 12-89% faster overall.
  • Recursive schemas with oneOf/anyOf: ~4000x faster via memoization. #930

[0.38.1] - 2025-12-25

Fixed

  • multipleOf validation for integer values between 2^53 and i64::MAX with arbitrary-precision feature.

[0.38.0] - 2025-12-24

Added

  • EmailOptions for configuring email format validation. #903

Fixed

  • Use-after-free in async $ref resolution when multiple refs target the same external URL with different fragments. #906
  • multipleOf validation for large u64 values beyond i64::MAX with arbitrary-precision feature.
  • Validator not being Send + Sync on WASM targets. #915

[0.37.4] - 2025-11-30

Fixed

  • Stack overflow during validation of schemas with circular $ref chains (e.g., a -> b -> a).
  • Local $ref resolution within fragment-extracted external resources. #892

... (truncated)

Commits
  • 70d9711 chore(rust): Release 0.40.0
  • 24c067d feat(python): Custom keywords
  • 9047c64 feat: HTTP configuration
  • 8bb9535 docs: Update README
  • f2c9b24 docs: Update benchmarks
  • 0281258 perf: Remove duplicated benchmarks
  • 8c6ab7f chore(python): Release 0.39.0
  • 68073a5 chore(rust): Release 0.39.0
  • 3f7f457 perf: Cache some validation results
  • 03979ce perf: Add benchmarks for recursive schemas
  • Additional commits viewable in compare view

Updates metrics from 0.22.4 to 0.24.3

Commits
  • 0b95e10 chore: Release
  • 98eba87 chore: changelog updates
  • 65eff4f feat(prometheus): add render_to_write function (#641)
  • 52c07eb chore(deps): bump hyper from 1.6.0 to 1.8.1 (#642)
  • c664a01 add KeyName -> std::Cow paths (#640)
  • 4c0a319 fix(metrics-exporter-prometheus): fix visibility issue with LabelSet
  • fde7e85 actually export LabelSet so it can be used with formatting methods
  • 51fbc50 update CHANGELOG to prepare for release
  • 41a2bb9 enhancement(metrics-exporter-prometheus): implement native histogram support
  • e182e75 chore(deps): bump hyper-util from 0.1.11 to 0.1.17 (#636)
  • Additional commits viewable in compare view

Updates criterion from 0.5.1 to 0.8.1

Release notes

Sourced from criterion's releases.

criterion-plot-v0.8.1

Fixed

  • Typo

criterion-v0.8.1

Fixed

  • Homepage link

Other

  • (deps) bump crate-ci/typos from 1.23.5 to 1.40.0
  • (deps) bump jontze/action-mdbook from 3 to 4
  • (deps) bump actions/checkout from 4 to 6

criterion-plot-v0.8.0

No release notes provided.

criterion-v0.8.0

BREAKING

  • Drop async-std support

Changed

  • Bump MSRV to 1.86, stable to 1.91.1

Added

  • Add ability to plot throughput on summary page.
  • Add support for reporting throughput in elements and bytes - Throughput::ElementsAndBytes allows the text summary to report throughput in both units simultaneously.
  • Add alloca-based memory layout randomisation to mitigate memory effects on measurements.
  • Add doc comment to benchmark runner in criterion_group macro (removes linter warnings)

Fixed

  • Fix plotting NaN bug

Other

  • Remove Master API Docs links temporarily while we restore the docs publishing.

criterion-plot-v0.7.0

No release notes provided.

Changelog

Sourced from criterion's changelog.

0.8.1 - 2025-12-07

Fixed

  • Homepage link

Other

  • (deps) bump crate-ci/typos from 1.23.5 to 1.40.0
  • (deps) bump jontze/action-mdbook from 3 to 4
  • (deps) bump actions/checkout from 4 to 6

0.8.0 - 2025-11-29

BREAKING

  • Drop async-std support

Changed

  • Bump MSRV to 1.86, stable to 1.91.1

Added

  • Add ability to plot throughput on summary page.
  • Add support for reporting throughput in elements and bytes - Throughput::ElementsAndBytes allows the text summary to report throughput in both units simultaneously.
  • Add alloca-based memory layout randomisation to mitigate memory effects on measurements.
  • Add doc comment to benchmark runner in criterion_group macro (removes linter warnings)

Fixed

  • Fix plotting NaN bug

Other

  • Remove Master API Docs links temporarily while we restore the docs publishing.

[0.7.0] - 2025-07-25

  • Bump version of criterion-plot to align dependencies.

[0.6.0] - 2025-05-17

Changed

  • MSRV bumped to 1.80
  • The real_blackbox feature no longer has any impact. Criterion always uses std::hint::black_box() now. Users of criterion::black_box() should switch to std::hint::black_box().
  • clap dependency unpinned.

Fixed

... (truncated)

Commits
  • e4e06df chore: release v0.8.1
  • aa548b9 fix: Homepage link
  • 950c3b7 fix: Typo
  • 7e3e50c chore(deps): bump crate-ci/typos from 1.23.5 to 1.40.0
  • 391a99a chore(deps): bump jontze/action-mdbook from 3 to 4
  • 8fb9a87 chore(deps): bump actions/checkout from 4 to 6
  • b49ade7 chore: release v0.8.0
  • c56485f docs: Mark Master API Docs links that need to be updated
  • 86526a4 docs: Remove Master API Docs link temporarily
  • 00a443f docs: Update README links
  • Additional commits viewable in compare view

Updates reqwest from 0.12.28 to 0.13.1

Release notes

Sourced from reqwest's releases.

v0.13.1

What's Changed

Full Changelog: seanmonstar/reqwest@v0.13.0...v0.13.1

v0.13.0

Breaking changes

  • rustls is now the default TLS backend, instead of native-tls.
  • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
  • rustls-tls has been renamed to rustls.
  • rustls roots features removed, rustls-platform-verifier is used by default.
    • To use different roots, call tls_certs_only(your_roots).
  • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
  • query and form are now crate features, disabled by default.
  • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().

Pull Requests in General

New Contributors

Full Changelog: seanmonstar/reqwest@v0.12.28...v0.13.0

v0.13.0-rc.1

👀 Discussion here if you give it try, thanks!

Main breaking changes

  • rustls is now default instead of native-tls
  • rustls provider defaults to aws-lc instead of ring (rustls-no-provider exists if you want to enable a different one)
  • rustls-tls renamed to rustls
  • rustls roots features removed, platform-verifier is used instead

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.1

  • Fixes compiling with rustls on Android targets.

v0.13.0

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().
Commits

Updates async-openai from 0.24.1 to 0.32.3

Release notes

Sourced from async-openai's releases.

v0.32.3

What's Changed

New Contributors

Full Changelog: 64bit/async-openai@async-openai-v0.32.2...async-openai-v0.32.3

v0.32.2

What's Changed

Full Changelog: 64bit/async-openai@async-openai-v0.32.1...async-openai-v0.32.2

v0.32.1

What's Changed

Full Changelog: 64bit/async-openai@async-openai-v0.32.0...async-openai-v0.32.1

v0.32.0

What's Changed

Changes in #502

Added:

  • create voice api
  • voice consent apis
  • response compact api

Updated Types A few types have breaking changes from upstream, hence the minor version bump, if you're not using these types then crate version upgrade should be no-op:

  • RealtimeServerEvent has a new variant InputAudioBufferDtmfEventReceived
  • Item and OutputItem from types/responses/response.rs has updated variants
  • ReasoningEffort has a new variant for xhigh
  • AuditLogEventType has updated variants
  • ImageModel has updated variants
  • CreateVideoRequest is updated
  • Video API types:
    • renamed VideoJob -> VideoResource and updated field types, VideoJobError -> VideoResourceError; ListVideoResponse -> VideoListResource with updated fields; VideoJobMetadata -> DeletedVideoResource
    • updated examples/video to use updated types
  • EvalItemContent and types nested under are updated.

Updated Spec

... (truncated)

Commits

Updates jsonwebtoken from 9.3.1 to 10.2.0

Changelog

Sourced from jsonwebtoken's changelog.

10.2.0 (2025-11-06)

  • Remove Clone bound from decode functions

10.1.0 (2025-10-18)

  • add dangerous::insecure_decode
  • Implement TryFrom &Jwk for DecodingKey

10.0.0 (2025-09-29)

  • BREAKING: now using traits for crypto backends, you have to choose between aws_lc_rs and rust_crypto
  • Add Clone bound to decode
  • Support decoding byte slices
  • Support JWS
Commits
  • 53a3fc2 Do not fail for clippy
  • 3226cfc Prepare for release
  • dfe58f9 Remove unnecessary Clone bounds from decode functions (#458)
  • 9b3e19c Fix function names in README (#457)
  • 655abeb Ready for release
  • d96982d Fix a few markdown issues in docs (#446)
  • fbcfd39 feat: add dangerous::insecure_decode (#441)
  • 4ba3fce fix(docs): add rust_crypto feature to docs.rs build (#443)
  • 29fa3b1 Implement TryFrom &Jwk for DecodingKey (#437)
  • 1456755 Use DecodingKey::from_jwk to get DecodingKey from JWK in auth0 example (#430)
  • Additional commits viewable in compare view

Updates governor from 0.8.1 to 0.10.4

Commits
  • 9f3a79d Merge pull request #291 from boinkor-net/release/governor/0.10.4
  • 9010ee9 Update Changelog
  • 2351660 Release 0.10.4 🎉🎉
  • 61b1754 Merge pull request #290 from boinkor-net/push-pnoqtmytrrpz
  • 1bdc26d Use feature(doc_cfg) instead of feature(doc_auto_cfg) for docsrs
  • 296018b chore: Update ci_rust.yml in governor
  • a29466c chore: Update release_pr_for_crates_io.yml in governor
  • 78a3be2 chore: Update release_to_crates_io.yml in governor
  • 1c5840c Merge pull request #289 from boinkor-net/release/governor/0.10.3
  • fff7f37 Update Changelog for release
  • Additional commits viewable in compare view

Updates tower_governor from 0.5.0 to 0.8.0

Commits

Updates darling from 0.20.11 to 0.23.0

Release notes

Sourced from darling's releases.

v0.23.0

  • Bump MSRV to 1.88.0; there have been no code changes that caused this, but due to dependency issues CI no longer works on 1.56.0 #357
  • Revert dependency version pins which caused problems #385

v0.22.0

YANKED Pinned dependencies made this version cause conflicts with other crates.

  • BREAKING: Remove fnv dependency, as runtime performance gain does not justify additional dependency. This was exposed to users of darling::usage, so it may be breaking for them #373
  • Add #[darling(default = || expr(val))] support, allowing a closure where a path was previously required #380
  • Preserve span information for paths given to darling::util::Callable as literal strings
  • Fix some documentation typos

v0.21.3

  • Fix: Forward Override::<T>::from_expr to T::from_expr #371

v0.21.2

  • Add #[darling(from_expr = ...)] when deriving FromMeta to support overriding the key-value form #369
  • Keep parsing the body and type params even if there are errors from parsing attributes. #7
  • Support #[darling(with = ...)] on the generics field when deriving FromDeriveInput.
  • Return an error, rather than panicking, when doing shape validation on a union. #365

v0.21.1

  • Track all alternate field names, and show them in error message if there aren't too many. #325
  • Track all alternate values for enum variants, and show them in error messages if there aren't too many. #362

v0.21.0

  • Potentially breaking: Emit error when an attribute path is present in both attributes and forward_attrs. #336
  • Support parsing attributes which contain keywords #238
  • Add SpannedValue::into_inner #342
  • Add #[darling(derive_syn_parse)] to also impl syn::parse::Parse when deriving FromMeta #285
  • Make impl FromMeta for syn::TypePath support both quote-wrapped and bare values #351
  • Add util::PreservedStrExpr #346
  • Impl UsesTypeParams and UsesLifetimes for WithOriginal #215
  • Update error message emitted by <() as FromMeta>::from_list to allow use of () as a #[darling(flatten)] target #353
Changelog

Sourced from darling's changelog.

v0.23.0 (December 3, 2025)

  • Bump MSRV to 1.88.0; there have been no code changes that caused this, but due to dependency issues CI no longer works on 1.56.0 #357

v0.22.0 (December 2, 2025)

  • BREAKING: Remove fnv dependency, as runtime performance gain does not justify additional dependency. This was exposed to users of darling::usage, so it may be breaking for them #373
  • Add #[darling(default = || expr(val))] support, allowing a closure where a path was previously required #380
  • Preserve span information for paths given to darling::util::Callable as literal strings
  • Fix some documentation typos

v0.21.3 (August 22, 2025)

  • Fix: Forward Override::<T>::from_expr to T::from_expr #371

v0.21.2 (August 14, 2025)

  • Add #[darling(from_expr = ...)] when deriving FromMeta to support overriding the key-value form #369
  • Keep parsing the body and type params even if there are errors from parsing attributes. #7
  • Support #[darling(with = ...)] on the generics field when deriving FromDeriveInput.
  • Return an error, rather than panicking, when doing shape validation on a union. #365

v0.21.1 (August 4, 2025)

  • Track all alternate field names, and show them in error message if there aren't too many. #325
  • Track all alternate values for enum variants, and show them in error messages if there aren't too many. #362

v0.21.0 (July 10, 2025)

  • Potentially breaking: Emit error when an attribute path is present in both attributes and forward_attrs. #336
  • Support parsing attributes which contain keywords #238
  • Add SpannedValue::into_inner #342
  • Add #[darling(derive_syn_parse)] to also impl syn::parse::Parse when deriving FromMeta #285
  • Make impl FromMeta for syn::TypePath support both quote-wrapped and bare values #351
  • Add util::PreservedStrExpr #346
  • Impl UsesTypeParams and UsesLifetimes for WithOriginal #215
  • Update error message emitted by <() as FromMeta>::from_list to allow use of () as a #[darling(flatten)] target #353
Commits
  • cfef4e5 Update compiletests to rustc 1.88.0
  • 334ee48 Bump version to 0.23.0
  • 858b869 Bump MSRV to 1.88.0
  • dd9cb44 Bump CI tests to 1.88.0
  • 4e57762 Revert "Lock quote version"
  • 775a523 Revert "Lock min version of proc-macro2"
  • 3947278 Bump version to 0.22.0
  • cd33f9b chore: fix some minor issues in the comments
  • 2ca795b docs: fix minor typo in top-level doc comment ('its' → 'it’s')
  • 878b5ba Lock min version of proc-macro2
  • Additional commits viewable in compare view

Updates colored from 2.2.0 to 3.1.1

Release notes

Sourced from colored's releases.

v3.1.1

No release notes provided.

v3.1.0

No release notes provided.

v3.0.0

  • [BREAKING CHANGE]: Upgrade MSRV to 1.80 and remove the then unnecessary lazy_static dependency.
Changelog

Sourced from colored's changelog.

Unreleased

  • Added methods ansi_color and on_ansi_color to Colorize.

3.0.0

  • [BREAKING CHANGE]: Upgrade MSRV to 1.80 and remove the then unnecessary lazy_static dependency.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the rust-dependencies group across 1 directory with…
de321be 
… 11 updates

Bumps the rust-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.2` |
| [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.18.3` | `0.40.0` |
| [metrics](https://github.com/metrics-rs/metrics) | `0.22.4` | `0.24.3` |
| [criterion](https://github.com/criterion-rs/criterion.rs) | `0.5.1` | `0.8.1` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.28` | `0.13.1` |
| [async-openai](https://github.com/64bit/async-openai) | `0.24.1` | `0.32.3` |
| [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `9.3.1` | `10.2.0` |
| [governor](https://github.com/boinkor-net/governor) | `0.8.1` | `0.10.4` |
| [tower_governor](https://github.com/benwis/tower-governor) | `0.5.0` | `0.8.0` |
| [darling](https://github.com/TedDriggs/darling) | `0.20.11` | `0.23.0` |
| [colored](https://github.com/mackwic/colored) | `2.2.0` | `3.1.1` |



Updates `rand` from 0.8.5 to 0.9.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...rand_core-0.9.2)

Updates `jsonschema` from 0.18.3 to 0.40.0
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@rust-v0.18.3...rust-v0.40.0)

Updates `metrics` from 0.22.4 to 0.24.3
- [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml)
- [Commits](metrics-rs/metrics@metrics-v0.22.4...metrics-v0.24.3)

Updates `criterion` from 0.5.1 to 0.8.1
- [Release notes](https://github.com/criterion-rs/criterion.rs/releases)
- [Changelog](https://github.com/criterion-rs/criterion.rs/blob/master/CHANGELOG.md)
- [Commits](criterion-rs/criterion.rs@0.5.1...criterion-v0.8.1)

Updates `reqwest` from 0.12.28 to 0.13.1
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.28...v0.13.1)

Updates `async-openai` from 0.24.1 to 0.32.3
- [Release notes](https://github.com/64bit/async-openai/releases)
- [Commits](64bit/async-openai@async-openai-v0.24.1...async-openai-v0.32.3)

Updates `jsonwebtoken` from 9.3.1 to 10.2.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v9.3.1...v10.2.0)

Updates `governor` from 0.8.1 to 0.10.4
- [Release notes](https://github.com/boinkor-net/governor/releases)
- [Changelog](https://github.com/boinkor-net/governor/blob/master/release.toml)
- [Commits](boinkor-net/governor@v0.8.1...v0.10.4)

Updates `tower_governor` from 0.5.0 to 0.8.0
- [Commits](https://github.com/benwis/tower-governor/commits)

Updates `darling` from 0.20.11 to 0.23.0
- [Release notes](https://github.com/TedDriggs/darling/releases)
- [Changelog](https://github.com/TedDriggs/darling/blob/master/CHANGELOG.md)
- [Commits](TedDriggs/darling@v0.20.11...v0.23.0)

Updates `colored` from 2.2.0 to 3.1.1
- [Release notes](https://github.com/mackwic/colored/releases)
- [Changelog](https://github.com/colored-rs/colored/blob/master/CHANGELOG.md)
- [Commits](colored-rs/colored@v2.2.0...v3.1.1)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: jsonschema
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: metrics
  dependency-version: 0.24.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: criterion
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: reqwest
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: async-openai
  dependency-version: 0.32.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: jsonwebtoken
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: governor
  dependency-version: 0.10.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: tower_governor
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: darling
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: colored
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jan 22, 2026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jan 23, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 23, 2026
@dependabot dependabot bot deleted the dependabot/cargo/rust-dependencies-48ec3d130b branch January 23, 2026 09:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants