fix(deps): update cargo dependencies (minor) by renovate[bot] · Pull Request #341 · mpecan/tokf

renovate · 2026-04-20T05:29:45Z

This PR contains the following updates:

Package	Type	Update	Change
aws-sdk-s3	dependencies	minor	`1.119.0` → `1.137.0`
bytes	dependencies	minor	`1.11.1` → `1.12.0`
clap	dependencies	minor	`4.5.60` → `4.6.1`
clap_complete	dependencies	minor	`4.5.66` → `4.6.5`
clap_complete_nushell	dependencies	minor	`4.5.10` → `4.6.0`
opentelemetry	dependencies	minor	`0.31` → `0.32`
opentelemetry-otlp	dependencies	minor	`0.31` → `0.32`
opentelemetry_sdk	dependencies	minor	`0.31` → `0.32`
rand (source)	dependencies	minor	`0.9` → `0.10`
rusqlite	dependencies	minor	`0.32` → `0.40`
rusqlite	dev-dependencies	minor	`0.32` → `0.40`
serial_test	dev-dependencies	minor	`3.4.0` → `3.5.0`
sha2	dependencies	minor	`0.10` → `0.11`
sqlx	dependencies	minor	`=0.8.6` → `=0.9.0`
sqlx	dev-dependencies	minor	`=0.8.6` → `=0.9.0`
tempfile (source)	dependencies	minor	`3.25.0` → `3.27.0`
tempfile (source)	dev-dependencies	minor	`3.25.0` → `3.27.0`
tokio	dev-dependencies	minor	`1.49.0` → `1.52.3`
tokio	dependencies	minor	`1.49.0` → `1.52.3`
toml	dependencies	minor	`1.0.3+spec-1.1.0` → `1.1.2`
toml	dev-dependencies	minor	`1.0.3+spec-1.1.0` → `1.1.2`
tower-http	dependencies	minor	`0.6` → `0.7`
uuid	dependencies	minor	`1.21.0` → `1.23.3`
uuid	dev-dependencies	minor	`1.21.0` → `1.23.3`

Release Notes

rust-random/rand (rand)

`v0.10.1`

Compare Source

This release includes a fix for a soundness bug; see #1763.

Changes

Document panic behavior of make_rng and add #[track_caller] (#1761)
Deprecate feature log (#1763)

`v0.10.0`

Compare Source

Changes

The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
Use Edition 2024 and MSRV 1.85 (#1653)
Let Fill be implemented for element types, not sliceable types (#1652)
Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
Remove Clone support for StdRng, ReseedingRng (#1677)
Use postcard instead of bincode to test the serde feature (#1693)
Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

Removed ReseedingRng (#1722)
Removed unused feature "nightly" (#1732)
Removed feature small_rng (#1732)

`v0.9.4`

Compare Source

Fixes

Fix doc build (#1766)

Full Changelog: rust-random/rand@0.9.3...0.9.4

Stebalien/tempfile (tempfile)

`v3.27.0`

Compare Source

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @meng-xu-cs for reporting this issue.

`v3.26.0`

Support NamedTempFile::persist on RedoxOS (#393) (thanks to @Andy-Python-Programmer).

uuid-rs/uuid (uuid)

`v1.23.3`

Compare Source

What's Changed

Fix up parser panic on empty input by @KodrAus in #886
Prepare for 1.23.3 release by @KodrAus in #887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

`v1.23.2`

Compare Source

What's Changed

Improve error messages for ambiguous formats by @KodrAus in #882
Prepare for 1.23.2 release by @KodrAus in #883

Full Changelog: uuid-rs/uuid@v1.23.1...v1.23.2

`v1.23.1`

Compare Source

What's Changed

Remove deprecated msrv feature from wasm-bindgen dependency by @guybedford in #877
fix: Timestamp::from_gregorian deprecation note by @aznashwan in #878
Prepare for 1.23.1 release by @KodrAus in #879

New Contributors

@guybedford made their first contribution in #877
@aznashwan made their first contribution in #878

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

`v1.23.0`

Compare Source

What's Changed

feat: add support for 'hyphenated' format in the serde module by @FrenchDilettante in #865
Fix a number of bugs in time-related code by @KodrAus in #872
Reword invalid char error message by @KodrAus in #873
Impl cleanups by @KodrAus in #874
Use LazyLock to synchronize v1/v6 context initialization by @KodrAus in #875
Prepare for 1.23.0 release by @KodrAus in #876

New Contributors

@FrenchDilettante made their first contribution in #865

Special thanks

@meng-xu-cs raised a series of bugs against the timestamp logic in uuid using automated tooling. The issues themselves were reasonably and responsibly presented and the end result is a better uuid library for everyone. Thanks!

Deprecations

This release includes the following deprecations:

Context: Renamed to ContextV1
Timestamp::from_gregorian: Renamed to Timestamp::from_gregorian_time

Change to `Version::Max`

Version::Max's u8 representation has changed from 0xff to 0x0f to match the value returned by Uuid::get_version_num.

Change to `Uuid::get_version` for the max UUID

Uuid::get_version will only return Some(Version::Max) if the UUID is actually the max UUID (all bytes are 0xff). Previously it would return Some if only the version field was 0x0f. This change matches the behaviour of the nil UUID, which only returns Some(Version::Nil) if the UUID is the nil UUID (all bytes are 0x00).

Full Changelog: uuid-rs/uuid@v1.22.0...v1.23.0

`v1.22.0`

Compare Source

What's Changed

Default to rand 0.10 by @haxtibal in #863
Prepare for 1.22.0 release by @KodrAus in #864

New Contributors

@haxtibal made their first contribution in #863

Full Changelog: uuid-rs/uuid@v1.21.0...v1.22.0

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 6am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-04-20T05:29:47Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path crates/e2e-tests/Cargo.toml --package tempfile@3.25.0 --precise 3.27.0
    Updating crates.io index
error: failed to select a version for `sqlx`.
    ... required by package `tokf-server v0.2.48 (/tmp/renovate/repos/github/mpecan/tokf/crates/tokf-server)`
versions that meet the requirements `=0.9.0` are: 0.9.0

package `tokf-server` depends on `sqlx` with feature `runtime-tokio-rustls` but `sqlx` does not have that feature.
help: available features: _rt-async-global-executor, _rt-async-std, _rt-smol, _rt-tokio, _sqlite, _unstable-all-types, _unstable-docs, all-databases, any, bigdecimal, bit-vec, bstr, chrono, default, derive, ipnet, ipnetwork, json, mac_address, macros, migrate, mysql, mysql-rsa, postgres, regexp, runtime-async-global-executor, runtime-async-std, runtime-smol, runtime-tokio, rust_decimal, sqlite, sqlite-bundled, sqlite-deserialize, sqlite-load-extension, sqlite-preupdate-hook, sqlite-unbundled, sqlite-unlock-notify, sqlx-macros, sqlx-mysql, sqlx-postgres, sqlx-sqlite, sqlx-toml, time, tls-native-tls, tls-none, tls-rustls, tls-rustls-aws-lc-rs, tls-rustls-ring, tls-rustls-ring-native-roots, tls-rustls-ring-webpki, uuid


failed to select a version for `sqlx` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path crates/tokf-cli/Cargo.toml --package clap@4.5.60 --precise 4.6.1
    Updating crates.io index
error: failed to select a version for `sqlx`.
    ... required by package `tokf-server v0.2.48 (/tmp/renovate/repos/github/mpecan/tokf/crates/tokf-server)`
versions that meet the requirements `=0.9.0` are: 0.9.0

package `tokf-server` depends on `sqlx` with feature `runtime-tokio-rustls` but `sqlx` does not have that feature.
help: available features: _rt-async-global-executor, _rt-async-std, _rt-smol, _rt-tokio, _sqlite, _unstable-all-types, _unstable-docs, all-databases, any, bigdecimal, bit-vec, bstr, chrono, default, derive, ipnet, ipnetwork, json, mac_address, macros, migrate, mysql, mysql-rsa, postgres, regexp, runtime-async-global-executor, runtime-async-std, runtime-smol, runtime-tokio, rust_decimal, sqlite, sqlite-bundled, sqlite-deserialize, sqlite-load-extension, sqlite-preupdate-hook, sqlite-unbundled, sqlite-unlock-notify, sqlx-macros, sqlx-mysql, sqlx-postgres, sqlx-sqlite, sqlx-toml, time, tls-native-tls, tls-none, tls-rustls, tls-rustls-aws-lc-rs, tls-rustls-ring, tls-rustls-ring-native-roots, tls-rustls-ring-webpki, uuid


failed to select a version for `sqlx` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path crates/tokf-common/Cargo.toml --package toml@1.0.3+spec-1.1.0 --precise 1.1.2
    Updating crates.io index
error: failed to select a version for `sqlx`.
    ... required by package `tokf-server v0.2.48 (/tmp/renovate/repos/github/mpecan/tokf/crates/tokf-server)`
versions that meet the requirements `=0.9.0` are: 0.9.0

package `tokf-server` depends on `sqlx` with feature `runtime-tokio-rustls` but `sqlx` does not have that feature.
help: available features: _rt-async-global-executor, _rt-async-std, _rt-smol, _rt-tokio, _sqlite, _unstable-all-types, _unstable-docs, all-databases, any, bigdecimal, bit-vec, bstr, chrono, default, derive, ipnet, ipnetwork, json, mac_address, macros, migrate, mysql, mysql-rsa, postgres, regexp, runtime-async-global-executor, runtime-async-std, runtime-smol, runtime-tokio, rust_decimal, sqlite, sqlite-bundled, sqlite-deserialize, sqlite-load-extension, sqlite-preupdate-hook, sqlite-unbundled, sqlite-unlock-notify, sqlx-macros, sqlx-mysql, sqlx-postgres, sqlx-sqlite, sqlx-toml, time, tls-native-tls, tls-none, tls-rustls, tls-rustls-aws-lc-rs, tls-rustls-ring, tls-rustls-ring-native-roots, tls-rustls-ring-webpki, uuid


failed to select a version for `sqlx` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path crates/tokf-server/Cargo.toml --package aws-sdk-s3@1.119.0 --precise 1.137.0
    Updating crates.io index
error: failed to select a version for `sqlx`.
    ... required by package `tokf-server v0.2.48 (/tmp/renovate/repos/github/mpecan/tokf/crates/tokf-server)`
versions that meet the requirements `=0.9.0` are: 0.9.0

package `tokf-server` depends on `sqlx` with feature `runtime-tokio-rustls` but `sqlx` does not have that feature.
help: available features: _rt-async-global-executor, _rt-async-std, _rt-smol, _rt-tokio, _sqlite, _unstable-all-types, _unstable-docs, all-databases, any, bigdecimal, bit-vec, bstr, chrono, default, derive, ipnet, ipnetwork, json, mac_address, macros, migrate, mysql, mysql-rsa, postgres, regexp, runtime-async-global-executor, runtime-async-std, runtime-smol, runtime-tokio, rust_decimal, sqlite, sqlite-bundled, sqlite-deserialize, sqlite-load-extension, sqlite-preupdate-hook, sqlite-unbundled, sqlite-unlock-notify, sqlx-macros, sqlx-mysql, sqlx-postgres, sqlx-sqlite, sqlx-toml, time, tls-native-tls, tls-none, tls-rustls, tls-rustls-aws-lc-rs, tls-rustls-ring, tls-rustls-ring-native-roots, tls-rustls-ring-webpki, uuid


failed to select a version for `sqlx` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path crates/tokf-filter/Cargo.toml --package toml@1.0.3+spec-1.1.0 --precise 1.1.2
    Updating crates.io index
error: failed to select a version for `sqlx`.
    ... required by package `tokf-server v0.2.48 (/tmp/renovate/repos/github/mpecan/tokf/crates/tokf-server)`
versions that meet the requirements `=0.9.0` are: 0.9.0

package `tokf-server` depends on `sqlx` with feature `runtime-tokio-rustls` but `sqlx` does not have that feature.
help: available features: _rt-async-global-executor, _rt-async-std, _rt-smol, _rt-tokio, _sqlite, _unstable-all-types, _unstable-docs, all-databases, any, bigdecimal, bit-vec, bstr, chrono, default, derive, ipnet, ipnetwork, json, mac_address, macros, migrate, mysql, mysql-rsa, postgres, regexp, runtime-async-global-executor, runtime-async-std, runtime-smol, runtime-tokio, rust_decimal, sqlite, sqlite-bundled, sqlite-deserialize, sqlite-load-extension, sqlite-preupdate-hook, sqlite-unbundled, sqlite-unlock-notify, sqlx-macros, sqlx-mysql, sqlx-postgres, sqlx-sqlite, sqlx-toml, time, tls-native-tls, tls-none, tls-rustls, tls-rustls-aws-lc-rs, tls-rustls-ring, tls-rustls-ring-native-roots, tls-rustls-ring-webpki, uuid


failed to select a version for `sqlx` which could resolve this conflict

mpecan · 2026-06-20T09:50:00Z

Superseded by #397, which batches these upgrades into a single PR with the code changes the breaking bumps require.

## Summary Consolidates the three open Renovate PRs into a single branch, with the code fixes that the breaking upgrades actually require (several of which Renovate could not do on its own — its individual PRs would not have compiled). Supersedes: - #341 — cargo dependencies (minor) - #346 — keyring v4 - #386 — Rust 1.96 ## Toolchain - **Rust 1.93.0 → 1.96.0.** Fixed the new clippy lints surfaced by the bump (`sort_by_key` + `Reverse`, `map_or`, `is_ok_and`, `is_none_or`). ## Breaking upgrades (required code changes) - **keyring 3 → 4.** keyring is now a thin layer over `keyring-core`. Its default `v1` feature auto-selects the platform store (Keychain / Credential Manager / zbus Secret Service), so the old `apple-native`/`windows-native`/`linux-native` feature list is dropped (those names no longer exist in v4). The custom in-memory test backend is replaced with `keyring-core`'s `mock::Store` (shared per `(service, user)`, `ProcessOnly` persistence — round-trips correctly). Added `keyring-core` as a direct dependency for the mock. *Note:* on Linux the backend is now Secret Service rather than keyutils, which matches what the docs already state. - **sqlx 0.8.6 → 0.9.0.** `runtime-tokio-rustls` was split into `runtime-tokio` + `tls-rustls-ring`. Dynamic query strings now require a safety marker — audited and wrapped with `sqlx::AssertSqlSafe` (filter search routes + `crdb-test-macro`); all user input remains bound via `.bind()`. - **rand 0.9 → 0.10.** `Rng::fill` moved to the new `RngExt` trait. - **rusqlite 0.32 → 0.39** (Renovate proposed 0.40). 0.40 pulls `libsqlite3-sys` 0.38, which collides with sqlx-sqlite 0.9 on the `links = "sqlite3"` constraint in the workspace resolver. 0.39 shares `libsqlite3-sys` 0.37 with sqlx-sqlite 0.9, so it's the highest compatible version. ## Minor upgrades (no code changes) sha2 0.10 → 0.11, opentelemetry/opentelemetry_sdk/opentelemetry-otlp 0.31 → 0.32, tower-http 0.6 → 0.7, plus clap, clap_complete(_nushell), tokio, uuid, tempfile, toml, bytes, aws-sdk-s3, serial_test (via the lockfile). ## Testing - `cargo clippy --workspace --all-targets -- -D warnings` — clean - `cargo fmt --all -- --check` — clean - `cargo test --workspace` — all pass (DB/e2e tests remain `#[ignore]`d; not run) - `cargo check -p tokf --features otel-http` and `--features otel-grpc` — clean 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

renovate Bot added the dependencies label Apr 20, 2026

renovate Bot force-pushed the renovate/cargo-dependencies-(minor) branch 7 times, most recently from 5198e1f to 177e834 Compare May 4, 2026 13:16

renovate Bot force-pushed the renovate/cargo-dependencies-(minor) branch 4 times, most recently from 78925fa to 9e2e359 Compare May 11, 2026 22:32

renovate Bot force-pushed the renovate/cargo-dependencies-(minor) branch 2 times, most recently from 665c275 to 40cc215 Compare May 21, 2026 19:09

renovate Bot force-pushed the renovate/cargo-dependencies-(minor) branch from 40cc215 to 9e91f04 Compare May 26, 2026 10:47

renovate Bot force-pushed the renovate/cargo-dependencies-(minor) branch 2 times, most recently from 04da534 to 9e0384f Compare June 16, 2026 01:56

renovate Bot force-pushed the renovate/cargo-dependencies-(minor) branch from 9e0384f to adc6ce5 Compare June 20, 2026 08:19

fix(deps): update cargo dependencies (minor)

ef93490

renovate Bot force-pushed the renovate/cargo-dependencies-(minor) branch from adc6ce5 to ef93490 Compare June 20, 2026 09:22

mpecan mentioned this pull request Jun 20, 2026

chore(deps): batch-upgrade dependencies and Rust toolchain #397

Merged

mpecan closed this Jun 20, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update cargo dependencies (minor)#341

fix(deps): update cargo dependencies (minor)#341
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/cargo-dependencies-(minor)

renovate Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

mpecan commented Jun 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changes

Changes

Additions

Removals

Fixes

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Special thanks

Deprecations

Change to Version::Max

Change to Uuid::get_version for the max UUID

What's Changed

New Contributors

Configuration

Uh oh!

renovate Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

Uh oh!

mpecan commented Jun 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Apr 20, 2026 •

edited

Loading

Change to `Version::Max`

Change to `Uuid::get_version` for the max UUID

renovate Bot commented Apr 20, 2026 •

edited

Loading