Skip to content

build(deps): bump the rust-deps group with 7 updates - #98

Merged
xTVaser merged 2 commits into
mainfrom
dependabot/cargo/rust-deps-9866a928c1
Aug 21, 2026
Merged

build(deps): bump the rust-deps group with 7 updates#98
xTVaser merged 2 commits into
mainfrom
dependabot/cargo/rust-deps-9866a928c1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-deps group with 7 updates:

Package From To
sqlx 0.8.3 0.9.0
regex 1.11.1 1.13.1
sha2 0.10.8 0.11.0
hmac 0.12.1 0.13.0
octocrab 0.43.0 0.54.1
chrono 0.4.40 0.4.45
log 0.4.26 0.4.33

Updates sqlx from 0.8.3 to 0.9.0

Changelog

Sourced from sqlx's changelog.

0.9.0 - 2026-05-06

Important Announcements

New Github Organization

Shortly after this release is published, the SQLx repository will be transferred to a new GitHub organization: https://github.com/transact-rs/

This is because SQLx has not been owned or maintained by LaunchBadge, LLC. for a few years now, and has since been informally transferred to the collective ownership of its principal authors. Moving the repository to a new organization makes this change more clear, and also allows for potentially inviting outside collaborators.

Cargo.lock Removed from Tracking

The Cargo.lock has been removed from tracking in Git. CI should now always test with the latest versions of all dependencies by default, alongside our pass that checks with cargo generate-lockfile -Z minimal-versions.

This should eliminate the need for any PRs that update dependencies to also update Cargo.lock or contend with an endless stream of merge conflicts against it.

N.B. cargo install --locked sqlx-cli will no longer work. However, cargo install sqlx-cli has always used the latest dependencies by default, ignoring the lockfile, so most users should not be affected. For users requiring reproducible builds, consider maintaining your own lockfile instead; historically, we only ran cargo update sporadically, so relying on SQLx's lockfile offered few guarantees anyway.

See [the manual page for cargo install][man-cargo-install] for details.

Breaking

As per our MSRV policy, the supported Rust version for this release cycle is 1.94.0.

  • [#3383]: feat: create sqlx.toml format [[@​abonander]]
    • SQLx and sqlx-cli now support per-crate configuration files (sqlx.toml)
    • New functionality includes, but is not limited to:
      • Rename DATABASE_URL for a crate (for multi-database workspaces)
      • Set global type overrides for the macros (supporting custom types)
      • Rename or relocate the _sqlx_migrations table (for multiple crates using the same database)
      • Set characters to ignore when hashing migrations (e.g. ignore whitespace)
    • More to be implemented in future releases.
    • Enable feature sqlx-toml to use.
      • sqlx-cli has it enabled by default, but sqlx does not.
      • Default features of library crates can be hard to completely turn off because of [feature unification], so it's better to keep the default feature set as limited as possible. [This is something we learned the hard way.][preferred-crates]
    • Guide: see sqlx::_config module in documentation.
    • Reference: [Link]
    • Examples (written for Postgres but can be adapted to other databases; PRs welcome!):
      • Multiple databases using DATABASE_URL renaming and global type overrides: [Link]
      • Multi-tenant database using _sqlx_migrations renaming and multiple schemas: [Link]
      • Force use of chrono when time is enabled (e.g. when using tower-sessions-sqlx-store): [[Link][preferred-crates]]
        • Forcing bigdecimal when rust_decimal is enabled is also shown, but problems with chrono/time are more common.

... (truncated)

Commits
  • 75bc048 Release 0.9.0 (#4256)
  • 6956cef Prefer to give real data to .bind() in README.md (#4257)
  • 45ba990 Add the possibility to skip migrations (#3846)
  • 66533fa Ensure Deterministic Migration Order (#4136)
  • db47fe3 ci: check direct minimal versions (#4173)
  • 9ecb76d Unescape PostgreSQL passfile password (#3993)
  • c0a3218 breaking(any+mysql): correctly convert text and blob types to AnyTypeInfo (...
  • d82b781 test(sqlite): add regression test for ORDER BY + LIMIT nullability (#4223)
  • b77ba16 chore: update to axum 0.8 (#4253)
  • c0ec9c0 fix(tls): potential deadlock in StdSocket::poll_ready() (#4251)
  • Additional commits viewable in compare view

Updates regex from 1.11.1 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

  • #1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

  • #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

1.12.4 (2026-06-09)

This release includes a performance optimization for compilation of regexes

... (truncated)

Commits
  • 2b52759 1.13.1, redux
  • 40e9823 1.13.1
  • 75fcb96 changelog: 1.13.1
  • 64ad0b6 automata: fix bug in reverse suffix/inner optimization
  • fa91c31 automata: fix a bug caught by Codex review
  • 30390ec automata: formatting tweaks
  • 821a8eb automata: refactor reverse suffix/inner search slightly
  • 10afd70 automata: expose the extracted literals for inner literal extraction
  • 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
  • 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
  • Additional commits viewable in compare view

Updates sha2 from 0.10.8 to 0.11.0

Commits

Updates hmac from 0.12.1 to 0.13.0

Commits

Updates octocrab from 0.43.0 to 0.54.1

Release notes

Sourced from octocrab's releases.

v0.54.1

Added

  • Add override of default crypto provider (#931)

v0.54.0

Fixed

  • [breaking] make mandatory PR fields mandatory (#924)

v0.53.1

Added

  • support sub-issues (#898)

Fixed

  • Omit input object if null. Github expects object or nothing. (#918)

Other

  • cargo clippy --tests --examples --fix (#920)
  • Use std::sync::LazyLock over once_cell::sync::Lazy (#919)

v0.53.0

Fixed

  • [breaking] correct nullable properties on AutoMerge (#911)

v0.52.0

Added

  • Added GitHub async SBOM API endpoints. (#903)
  • [breaking] made PullRequest to be able to accept SimplePullRequest payload from github (#902)
  • add list-artifacts-for-a-repository endpoint (#896)
  • support pinned comments (#894)

Other

  • add tests for InMemoryCache [cache-redb 2/3] (#904)
  • serde support for Cache structs [cache-redb 1/3] (#905)
  • add changes field to PullRequestWebhookEventPayload (#907)

v0.51.0

Fixed

  • [breaking] actualized github response model for 'List Pull Requests' (#886)

v0.50.0

Added

... (truncated)

Changelog

Sourced from octocrab's changelog.

0.54.1 - 2026-07-20

Added

  • Add override of default crypto provider (#931)

0.54.0 - 2026-06-22

Fixed

  • [breaking] make mandatory PR fields mandatory (#924)

0.53.1 - 2026-06-10

Added

  • support sub-issues (#898)

Fixed

  • Omit input object if null. Github expects object or nothing. (#918)

Other

  • cargo clippy --tests --examples --fix (#920)
  • Use std::sync::LazyLock over once_cell::sync::Lazy (#919)

0.53.0 - 2026-06-03

Fixed

  • [breaking] correct nullable properties on AutoMerge (#911)

0.52.0 - 2026-06-02

Added

  • Added GitHub async SBOM API endpoints. (#903)
  • [breaking] made PullRequest to be able to accept SimplePullRequest payload from github (#902)
  • add list-artifacts-for-a-repository endpoint (#896)
  • support pinned comments (#894)

Other

  • add tests for InMemoryCache [cache-redb 2/3] (#904)
  • serde support for Cache structs [cache-redb 1/3] (#905)
  • add changes field to PullRequestWebhookEventPayload (#907)

0.51.0 - 2026-05-09

... (truncated)

Commits

Updates chrono from 0.4.40 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

0.4.44

What's Changed

0.4.43

What's Changed

0.4.42

What's Changed

v0.4.41

What's Changed

... (truncated)

Commits
  • 1703382 Prepare 0.4.45 release
  • 881f9ab tz_data: fix tzdata locations on Android
  • f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
  • c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
  • 120686c Bump codecov/codecov-action from 5 to 6
  • c14b459 Bump version to 0.4.44
  • ea832c5 Add track_caller to non-deprecated functions
  • cfae889 Fix panic message in to_rfc2822
  • f8900b5 docs: match MSRV with Cargo.toml contents
  • 45caaa9 Update copyright year to 2026 in LICENSE.txt
  • Additional commits viewable in compare view

Updates log from 0.4.26 to 0.4.33

Release notes

Sourced from log's releases.

0.4.33

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.32...0.4.33

0.4.32

What's Changed

Full Changelog: rust-lang/log@0.4.31...0.4.32

0.4.31

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.30...0.4.31

0.4.30

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

0.4.29

MSRV

This release increases log's MSRV from 1.61.0 to 1.68.0.

What's Changed

... (truncated)

Changelog

Sourced from log's changelog.

[0.4.33] - 2026-06-20

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.32...0.4.33

[0.4.32] - 2026-06-04

What's Changed

Full Changelog: rust-lang/log@0.4.31...0.4.32

[0.4.31] - 2026-06-02

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.30...0.4.31

[0.4.30] - 2026-05-21

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

[0.4.29] - 2025-12-02

What's Changed

New Contributors

... (truncated)

Commits
  • f405739 Merge pull request #734 from rust-lang/cargo/0.4.33
  • 6a24abf prepare for 0.4.33 release
  • 87e0621 Merge pull request #732 from matteo-zeggiotti-ok/fix-key-comparison
  • a9b5711 Review: fallback to the &str hash
  • cc89cc6 Review: fixed other comparisons
  • 920e7dc Review: fixed comparison on MaybeStaticStr
  • 0d71d3c Fixed key comparison
  • a5b5b21 Merge pull request #730 from rust-lang/cargo/0.4.32
  • c8d3b12 prepare for 0.4.32 release
  • ce6cd9f Merge pull request #729 from tisonkun/kv-std-support
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the rust-deps group with 7 updates
48379b5 
Bumps the rust-deps group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [sqlx](https://github.com/launchbadge/sqlx) | `0.8.3` | `0.9.0` |
| [regex](https://github.com/rust-lang/regex) | `1.11.1` | `1.13.1` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.8` | `0.11.0` |
| [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` |
| [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.43.0` | `0.54.1` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.40` | `0.4.45` |
| [log](https://github.com/rust-lang/log) | `0.4.26` | `0.4.33` |


Updates `sqlx` from 0.8.3 to 0.9.0
- [Changelog](https://github.com/transact-rs/sqlx/blob/main/CHANGELOG.md)
- [Commits](transact-rs/sqlx@v0.8.3...v0.9.0)

Updates `regex` from 1.11.1 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.11.1...1.13.1)

Updates `sha2` from 0.10.8 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.8...sha2-v0.11.0)

Updates `hmac` from 0.12.1 to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0)

Updates `octocrab` from 0.43.0 to 0.54.1
- [Release notes](https://github.com/XAMPPRocky/octocrab/releases)
- [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md)
- [Commits](XAMPPRocky/octocrab@v0.43.0...v0.54.1)

Updates `chrono` from 0.4.40 to 0.4.45
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.40...v0.4.45)

Updates `log` from 0.4.26 to 0.4.33
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.26...0.4.33)

---
updated-dependencies:
- dependency-name: sqlx
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: regex
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: octocrab
  dependency-version: 0.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-deps
- dependency-name: chrono
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
- dependency-name: log
  dependency-version: 0.4.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Aug 21, 2026
@xTVaser
xTVaser force-pushed the dependabot/cargo/rust-deps-9866a928c1 branch from 3377eca to 3c76299 Compare August 21, 2026 23:13
@xTVaser
xTVaser merged commit 4e6798f into main Aug 21, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/cargo/rust-deps-9866a928c1 branch August 21, 2026 23:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@xTVaser