Skip to content

chore(deps): bump the cargo group across 2 directories with 11 updates#3928

Closed
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/cargo/parachain/cargo-68270b3344
Closed

chore(deps): bump the cargo group across 2 directories with 11 updates#3928
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/cargo/parachain/cargo-68270b3344

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps the cargo group with 4 updates in the /parachain directory: clap, der, tokio and num_enum.
Bumps the cargo group with 9 updates in the /tee-worker/omni-executor directory:

Package From To
clap 4.5.60 4.6.0
der 0.7.10 0.8.0
tokio 1.49.0 1.50.0
num_enum 0.7.5 0.7.6
serde_with 3.16.1 3.18.0
tempfile 3.25.0 3.27.0
tracing-subscriber 0.3.22 0.3.23
uuid 1.21.0 1.22.0
anyhow 1.0.101 1.0.102

Updates clap from 4.5.60 to 4.6.0

Changelog

Sourced from clap's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits

Updates der from 0.7.10 to 0.8.0

Commits

Updates quote from 1.0.44 to 1.0.45

Release notes

Sourced from quote's releases.

1.0.45

  • Add ToTokens impl for Arc<T> (#326)
Commits
  • 842ffde Release 1.0.45
  • 93d691c Merge pull request #326 from dtolnay/arc
  • d27d589 ToTokens for Arc
  • 24d1082 Update ui test suite to nightly-2026-02-18
  • 26b1276 Unpin CI miri toolchain
  • c5e1c9e Pin CI miri to nightly-2026-02-11
  • 58e2155 Remove compiler version support from readme
  • 1fc6b50 Raise required compiler to Rust 1.71
  • 515480a Update ui test suite to nightly-2026-02-01
  • 2c5e770 Update ui test suite to nightly-2026-01-30
  • See full diff in compare view

Updates tokio from 1.49.0 to 1.50.0

Release notes

Sourced from tokio's releases.

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

  • net: add TcpStream::set_zero_linger (#7837)
  • rt: add is_rt_shutdown_err (#7771)

Changed

  • io: add optimizer hint that memchr returns in-bounds pointer (#7792)
  • io: implement vectored writes for write_buf (#7871)
  • runtime: panic when event_interval is set to 0 (#7838)
  • runtime: shorten default thread name to fit in Linux limit (#7880)
  • signal: remember the result of SetConsoleCtrlHandler (#7833)
  • signal: specialize windows Registry (#7885)

Fixed

  • io: always cleanup AsyncFd registration list on deregister (#7773)
  • macros: remove (most) local use declarations in tokio::select! (#7929)
  • net: fix GET_BUF_SIZE constant for target_os = "android" (#7889)
  • runtime: avoid redundant unpark in current_thread scheduler (#7834)
  • runtime: don't park in current_thread if before_park defers waker (#7835)
  • io: fix write readiness on ESP32 on short writes (#7872)
  • runtime: wake deferred tasks before entering block_in_place (#7879)
  • sync: drop rx waker when oneshot receiver is dropped (#7886)
  • runtime: fix double increment of num_idle_threads on shutdown (#7910, #7918, #7922)

Unstable

  • fs: check for io-uring opcode support (#7815)
  • runtime: avoid lock acquisition after uring init (#7850)

Documented

  • docs: update outdated unstable features section (#7839)
  • io: clarify the behavior of AsyncWriteExt::shutdown() (#7908)
  • io: explain how to flush stdout/stderr (#7904)
  • io: fix incorrect and confusing AsyncWrite documentation (#7875)
  • rt: clarify the documentation of Runtime::spawn (#7803)
  • rt: fix missing quotation in docs (#7925)
  • runtime: correct the default thread name in docs (#7896)
  • runtime: fix event_interval doc (#7932)
  • sync: clarify RwLock fairness documentation (#7919)
  • sync: clarify that recv returns None once closed and no more messages (#7920)
  • task: clarify when to use spawn_blocking vs dedicated threads (#7923)
  • task: doc that task drops before JoinHandle completion (#7825)
  • signal: guarantee that listeners never return None (#7869)
  • task: fix task module feature flags in docs (#7891)

... (truncated)

Commits

Updates num_enum from 0.7.5 to 0.7.6

Commits

Updates clap from 4.5.60 to 4.6.0

Changelog

Sourced from clap's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits

Updates der from 0.7.10 to 0.8.0

Commits

Updates quote from 1.0.44 to 1.0.45

Release notes

Sourced from quote's releases.

1.0.45

  • Add ToTokens impl for Arc<T> (#326)
Commits
  • 842ffde Release 1.0.45
  • 93d691c Merge pull request #326 from dtolnay/arc
  • d27d589 ToTokens for Arc
  • 24d1082 Update ui test suite to nightly-2026-02-18
  • 26b1276 Unpin CI miri toolchain
  • c5e1c9e Pin CI miri to nightly-2026-02-11
  • 58e2155 Remove compiler version support from readme
  • 1fc6b50 Raise required compiler to Rust 1.71
  • 515480a Update ui test suite to nightly-2026-02-01
  • 2c5e770 Update ui test suite to nightly-2026-01-30
  • See full diff in compare view

Updates syn from 1.0.109 to 2.0.117

Release notes

Sourced from syn's releases.

2.0.117

  • Fix parsing of self:: pattern in first function argument (#1970)

2.0.116

  • Optimize parse_fn_arg_or_variadic for less lookahead on erroneous receiver (#1968)

2.0.115

  • Enable GenericArgument::Constraint parsing in non-full mode (#1966)

2.0.114

  • Make std dependencies more easily discoverable in source code (#1956, thanks @​tamird)

2.0.113

  • Allow parsing TypeParam with colon not followed by any type param bounds (#1953, thanks @​wyfo)

2.0.112

2.0.111

  • Allow first argument of braced!, bracketed!, parenthesized! to be an otherwise unused variable (#1946)

2.0.110

  • Tweaks to improve build speed (#1939, thanks @​dishmaker)
  • Make syn::ext::IdentExt::unraw available without "parsing" feature (#1940)
  • Support parsing syn::Meta followed by => (#1944)

2.0.109

2.0.108

  • Parse unrecognized or invalid literals as Lit::Verbatim (#1925)

2.0.107

  • Improve panic message when constructing a LitInt, LitFloat, or Lit from invalid syntax (#1917)
  • Improve panic message on Punctuated index out of bounds (#1922)

2.0.106

  • Replace ~const syntax with [const] conditionally const syntax in trait bounds (#1896, rust-lang/rust#139858)
  • Support conditionally const impl Trait types (#1897)
  • Reject polarity modifier and lifetime binder used in the same trait bound (#1899, rust-lang/rust#127054)
  • Parse const trait bounds with bound lifetimes (#1902)
  • Parse bound lifetimes with lifetime bounds (#1903)
  • Allow type parameters and const parameters in trait bounds and generic closures (#1904, #1907, #1908, #1909)

2.0.105

2.0.104

  • Disallow attributes on range expression (#1872)

... (truncated)

Commits
  • 7bcb37c Release 2.0.117
  • 9c6e7d3 Merge pull request #1970 from dtolnay/receiver
  • 019a848 Fix self:: pattern in first function argument
  • 23f54f3 Update test suite to nightly-2026-02-18
  • b99b9a6 Unpin CI miri toolchain
  • a62e54a Release 2.0.116
  • 5a8ed9f Merge pull request #1968 from dtolnay/receiver
  • 813afcc Optimize parse_fn_arg_or_variadic for less lookahead on erroneous receiver
  • c172150 Add regression test for issue 1718
  • 0071ab3 Ignore type_complexity clippy lint
  • Additional commits viewable in compare view

Updates tokio from 1.49.0 to 1.50.0

Release notes

Sourced from tokio's releases.

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

  • net: add TcpStream::set_zero_linger (#7837)
  • rt: add is_rt_shutdown_err (#7771)

Changed

  • io: add optimizer hint that memchr returns in-bounds pointer (#7792)
  • io: implement vectored writes for write_buf (#7871)
  • runtime: panic when event_interval is set to 0 (#7838)
  • runtime: shorten default thread name to fit in Linux limit (#7880)
  • signal: remember the result of SetConsoleCtrlHandler (#7833)
  • signal: specialize windows Registry (#7885)

Fixed

  • io: always cleanup AsyncFd registration list on deregister (#7773)
  • macros: remove (most) local use declarations in tokio::select! (#7929)
  • net: fix GET_BUF_SIZE constant for target_os = "android" (#7889)
  • runtime: avoid redundant unpark in current_thread scheduler (#7834)
  • runtime: don't park in current_thread if before_park defers waker (#7835)
  • io: fix write readiness on ESP32 on short writes (#7872)
  • runtime: wake deferred tasks before entering block_in_place (#7879)
  • sync: drop rx waker when oneshot receiver is dropped (#7886)
  • runtime: fix double increment of num_idle_threads on shutdown (#7910, #7918, #7922)

Unstable

  • fs: check for io-uring opcode support (#7815)
  • runtime: avoid lock acquisition after uring init (#7850)

Documented

  • docs: update outdated unstable features section (#7839)
  • io: clarify the behavior of AsyncWriteExt::shutdown() (#7908)
  • io: explain how to flush stdout/stderr (#7904)
  • io: fix incorrect and confusing AsyncWrite documentation (#7875)
  • rt: clarify the documentation of Runtime::spawn (#7803)
  • rt: fix missing quotation in docs (#7925)
  • runtime: correct the default thread name in docs (#7896)
  • runtime: fix event_interval doc (#7932)
  • sync: clarify RwLock fairness documentation (#7919)
  • sync: clarify that recv returns None once closed and no more messages (#7920)
  • task: clarify when to use spawn_blocking vs dedicated threads (#7923)
  • task: doc that task drops before JoinHandle completion (#7825)
  • signal: guarantee that listeners never return None (#7869)
  • task: fix task module feature flags in docs (#7891)

... (truncated)

Commits

Updates num_enum from 0.7.5 to 0.7.6

Commits

Updates serde_with from 3.16.1 to 3.18.0

Release notes

Sourced from serde_with's releases.

serde_with v3.18.0

Added

  • Support OneOrMany with more sequence and set types (#929)

Changed

  • Bump MSRV to 1.88 due to the darling dependency

serde_with v3.17.0

Added

  • Support OneOrMany with smallvec v1 (#920, #922)

Changed

  • Switch to yaml_serde for a maintained yaml dependency by @​kazan417 (#921)
  • Bump MSRV to 1.82, since that is required for yaml_serde dev-dependency.
Commits
  • d50ec96 Bump version to 3.18.0 (#931)
  • 984fe32 Bump version to 3.18.0
  • 4ba41c7 Bump actions/upload-artifact from 6 to 7 in the github-actions group (#927)
  • 8fb2468 Bump actions/upload-artifact from 6 to 7 in the github-actions group
  • aec0a23 Bump MSRV to 1.88 (#930)
  • 25c15a2 Update time dependency to 0.3.47
  • 93bd3f4 Update test output after darling update
  • f825dbf Upgrade darling to 0.23.0
  • 65cbd73 Bump MSRV to 1.88
  • daff02e Extend OneOrMany implementation to more collection types (#929)
  • Additional commits viewable in compare view

Updates tempfile from 3.25.0 to 3.27.0

Changelog

Sourced from tempfile's changelog.

3.27.0

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

  1. TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
  2. The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @​meng-xu-cs for reporting this issue.

3.26.0

Commits

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

  • Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

Updates uuid from 1.21.0 to 1.22.0

Release notes

Sourced from uuid's releases.

v1.22.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.21.0...v1.22.0

Commits

Updates anyhow from 1.0.101 to 1.0.102

Release notes

Sourced from anyhow's releases.

1.0.102

Commits
  • 5c657b3 Release 1.0.102
  • e737fb6 Merge pull request #442 from dtolnay/backtrace
  • 7fe62b5 Further simply backtrace conditional compilation
  • c8cb5ca Merge pull request #441 from dtolnay/backtrace
  • de27df7 Delete CI use of --features=backtrace
  • 9b67e5d Merge pull request #440 from dtolnay/backtrace
  • efdb11a Simplify std_backtrace conditional code
  • b8a9a70 Merge pull request #439 from dtolnay/backtrace
  • a42fc2c Remove feature = "backtrace" conditional code
  • 2a2a3ce Re-word backtrace feature comment
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo group across 2 directories with 11 updates
5ab8c1b 
Bumps the cargo group with 4 updates in the /parachain directory: [clap](https://github.com/clap-rs/clap), [der](https://github.com/RustCrypto/formats), [tokio](https://github.com/tokio-rs/tokio) and [num_enum](https://github.com/illicitonion/num_enum).
Bumps the cargo group with 9 updates in the /tee-worker/omni-executor directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.0` |
| [der](https://github.com/RustCrypto/formats) | `0.7.10` | `0.8.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` |
| [num_enum](https://github.com/illicitonion/num_enum) | `0.7.5` | `0.7.6` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.16.1` | `3.18.0` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.25.0` | `3.27.0` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.21.0` | `1.22.0` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.101` | `1.0.102` |



Updates `clap` from 4.5.60 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.0)

Updates `der` from 0.7.10 to 0.8.0
- [Commits](RustCrypto/formats@der/v0.7.10...der/v0.8.0)

Updates `quote` from 1.0.44 to 1.0.45
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.44...1.0.45)

Updates `tokio` from 1.49.0 to 1.50.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0)

Updates `num_enum` from 0.7.5 to 0.7.6
- [Commits](illicitonion/num_enum@0.7.5...0.7.6)

Updates `clap` from 4.5.60 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.0)

Updates `der` from 0.7.10 to 0.8.0
- [Commits](RustCrypto/formats@der/v0.7.10...der/v0.8.0)

Updates `quote` from 1.0.44 to 1.0.45
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.44...1.0.45)

Updates `syn` from 1.0.109 to 2.0.117
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@1.0.109...2.0.117)

Updates `tokio` from 1.49.0 to 1.50.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0)

Updates `num_enum` from 0.7.5 to 0.7.6
- [Commits](illicitonion/num_enum@0.7.5...0.7.6)

Updates `serde_with` from 3.16.1 to 3.18.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.16.1...v3.18.0)

Updates `tempfile` from 3.25.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/commits/v3.27.0)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `uuid` from 1.21.0 to 1.22.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.21.0...v1.22.0)

Updates `anyhow` from 1.0.101 to 1.0.102
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.101...1.0.102)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: der
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: quote
  dependency-version: 1.0.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: num_enum
  dependency-version: 0.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: der
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: quote
  dependency-version: 1.0.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: syn
  dependency-version: 2.0.117
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: num_enum
  dependency-version: 0.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_with
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: uuid
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: anyhow
  dependency-version: 1.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel
Copy link

vercel bot commented Mar 16, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
heima-aa-demo-app Ignored Ignored Mar 16, 2026 9:18pm

Request Review

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 16, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/cargo/parachain/cargo-68270b3344 branch March 16, 2026 21:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

automated-pr

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Kailai-Wang