Skip to content

chore(deps): bump the actions group across 1 directory with 15 updates#6

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/actions-10d8868139
Open

chore(deps): bump the actions group across 1 directory with 15 updates#6
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/actions-10d8868139

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 21, 2026

Bumps the actions group with 15 updates in the / directory:

Package From To
clap 4.6.0 4.6.1
tokio 1.50.0 1.52.3
serde_json 1.0.149 1.0.150
toml 0.8.23 1.1.0+spec-1.1.0
reqwest 0.12.28 0.13.3
solana-sdk 2.3.1 4.0.1
solana-pubkey 2.4.0 4.2.0
solana-instruction 2.3.3 3.4.0
solana-rpc-client 2.3.13 3.1.14
rand 0.8.5 0.9.2
colored 2.2.0 3.1.1
semver 1.0.27 1.0.28
rpassword 5.0.1 7.5.3
rmcp 1.3.0 1.7.0
dirs 5.0.1 6.0.0

Updates clap from 4.6.0 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Commits
  • 1420275 chore: Release
  • d2c817d docs: Update changelog
  • f88c94e Merge pull request #6341 from epage/sep
  • acbb822 fix(complete): Reduce risk of conflict with actual subcommands
  • a49fadb refactor(complete): Pull out subcommand separator
  • ddc008b Merge pull request #6332 from epage/update
  • 497dc50 chore: Update compatible dependencies
  • dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
  • 54bdaa3 chore(deps): Update j178/prek-action action to v2
  • f0d30d9 chore: Release
  • Additional commits viewable in compare view

Updates tokio from 1.50.0 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

  • sync: fix underflow in mpsc channel len() (#8062)
  • sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
  • sync: require that an RwLock has max_readers != 0 (#8076)
  • sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

  • runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

  • io: AioSource::register_borrowed for I/O safety support (#7992)
  • net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

  • runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)
  • taskdump: add trace_with() for customized task dumps (#8025)
  • taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)
  • fs: support io_uring in AsyncRead for File (#7907)

... (truncated)

Commits

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Commits
  • a1ae73a Release 1.0.150
  • 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
  • 2037b63 Reject non-string enum object keys
  • 5d30df6 Resolve manual_assert_eq pedantic clippy lint
  • dc8003a Raise required compiler for preserve_order feature to 1.85
  • a42fa98 Unpin CI miri toolchain
  • 684a60e Pin CI miri to nightly-2026-02-11
  • 7c7da33 Raise required compiler to Rust 1.71
  • acf4850 Simplify Number::is_f64
  • 6b8ceab Resolve unnecessary_map_or clippy lint
  • Additional commits viewable in compare view

Updates toml from 0.8.23 to 1.1.0+spec-1.1.0

Commits

Updates reqwest from 0.12.28 to 0.13.3

Release notes

Sourced from reqwest's releases.

v0.13.3

tl;dr

  • Fix CertificateRevocationList parsing of PEM values.
  • Fix logging in resolver to only show host, not full URL.
  • Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
  • Fix HTTP/3 to handle STOP_SENDING as not an error.
  • Fix HTTP/3 pool to remove timed out QUIC connections.
  • Fix HTTP/3 connection establishment picking IPv4 and IPv6.
  • Upgrade rustls-platform-verifier.
  • (wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.2...v0.13.3

v0.13.2

tl;dr

  • Fix HTTP/2 and native-tls ALPN feature combinations.
  • Fix HTTP/3 to send h3 ALPN.
  • (wasm) fix RequestBuilder::json() from override previously set content-type.

What's Changed

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.3

  • Fix CertificateRevocationList parsing of PEM values.
  • Fix logging in resolver to only show host, not full URL.
  • Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
  • Fix HTTP/3 to handle STOP_SENDING as not an error.
  • Fix HTTP/3 pool to remove timed out QUIC connections.
  • Fix HTTP/3 connection establishment picking IPv4 and IPv6.
  • Upgrade rustls-platform-verifier.
  • (wasm) Only use wasm-bindgen on unknown-* targets.

v0.13.2

  • Fix HTTP/2 and native-tls ALPN feature combinations.
  • Fix HTTP/3 to send h3 ALPN.
  • (wasm) fix RequestBuilder::json() from override previously set content-type.

v0.13.1

  • Fixes compiling with rustls on Android targets.

v0.13.0

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().
Commits

Updates solana-sdk from 2.3.1 to 4.0.1

Release notes

Sourced from solana-sdk's releases.

slot-history@v3.0.1

What's new

slot-hashes@v3.0.2

What's new

last-restart-slot@v3.0.1

What's new

epoch-rewards@v3.0.2

What's new

clock@v3.1.0

What's new

frozen-abi@v3.4.0

What's new

frozen-abi-macro@v3.4.0

What's new

bls-signatures@v3.3.0

What's new

... (truncated)

Commits
  • b1bc122 Publish solana-sdk v4.0.1
  • 12b6316 Publish solana-program v4.0.0
  • 029896d Publish solana-system-transaction v4.0.0
  • 1cf4c97 Publish solana-sdk v4.0.0
  • 318e685 Publish solana-sdk-wasm-js v2.0.0
  • e8b3cb3 Publish solana-client-traits v4.0.0
  • 93adcb0 Publish solana-transaction v4.0.0
  • 8dbac59 Publish solana-nonce-account v4.0.0
  • 4ca148e Publish solana-message v4.0.0
  • 883d8f4 ci: Add run-semver option (#575)
  • Additional commits viewable in compare view

Updates solana-pubkey from 2.4.0 to 4.2.0

Release notes

Sourced from solana-pubkey's releases.

rent@v4.2.0

What's new

epoch-schedule@v3.1.0

What's new

nonce-account@v4.1.0

What's new

transaction@v4.1.0

What's new

message@v4.1.0

What's new

address-lookup-table-interface@v3.1.0

What's new

... (truncated)

Commits

Updates solana-instruction from 2.3.3 to 3.4.0

Release notes

Sourced from solana-instruction's releases.

frozen-abi@v3.4.0

What's new

frozen-abi-macro@v3.4.0

What's new

bls-signatures@v3.3.0

What's new

short-vec@v3.2.1

What's new

... (truncated)

Commits
  • 294f64d Publish solana-account v3.4.0
  • bbd57d4 account: Temporarily revert breaking changes (#549)
  • db8feec Publish solana-example-mocks v4.0.0
  • dd8f1c2 example-mocks!: Remove dependencies (#545)
  • 9b2acfa Publish solana-short-vec v3.2.0
  • 35c914a Publish solana-feature-gate-interface v3.1.0
  • efdd803 feature-gate / vote: Deprecate functions that take in Rent (#547)
  • e4e9d29 Publish solana-rent v4.0.0
  • 690df26 rust: Bump stable toolchain to 1.93 (#543)
  • 48a2718 account: impl ReadableAccount for Deref<Target = impl ReadableAccount> (#540)
  • Additional commits viewable in compare view

Updates solana-rpc-client from 2.3.13 to 3.1.14

Release notes

Sourced from solana-rpc-client's releases.

Release v3.1.14

This a stable Mainnet release.

https://github.com/anza-xyz/agave/blob/v3.1/CHANGELOG.md

What's Changed

Full Changelog: anza-xyz/agave@v3.1.13...v3.1.14

Release v3.1.13

This a stable Mainnet release.

https://github.com/anza-xyz/agave/blob/v3.1/CHANGELOG.md

What's Changed

Full Changelog: anza-xyz/agave@v3.1.12...v3.1.13

Release v3.1.12

This a stable Mainnet release.

https://github.com/anza-xyz/agave/blob/v3.1/CHANGELOG.md

What's Changed

Full Changelog: anza-xyz/agave@v3.1.11...v3.1.12

Release v3.1.11

This a stable Mainnet release.

... (truncated)

Changelog

Sourced from solana-rpc-client's changelog.

Changelog

All notable changes to this project will be documented in this file.

Please follow the guidance at the bottom of this file when making changes The format is based on Keep a Changelog. This project adheres to Semantic Versioning and follows a Backwards Compatibility Policy

Release channels have their own copy of this changelog:

4.2.0-Unreleased

RPC

Breaking

Changes

Validator

Breaking

Deprecations

  • --accounts-db-access-storages-method is now deprecated and a no-op (the mmap value was deprecated in v4.0.0; mmap mode has now been removed entirely). The flag is still accepted for backward compatibility, but account storages are always accessed via file I/O.

Changes

4.1.0

RPC

Breaking

Changes

Validator

Breaking

  • --block-production-method central-scheduler is no longer supported. If passed, a warning is emitted and behavior will default to the greedy-scheduler implementation.
  • scheduler-bindings version has been increased to 4. Connecting external schedulers must be updated.
  • Validator now requires 26 ports, --dynamic-port-range must be at least 26 wide.

Deprecations

  • Using minimal for --accounts-index-limit is now deprecated.
  • --account-shrink-path is now deprecated.
  • sbf-sdk.tar.bz2 is not included anymore in the Agave release tarball. The file will be made available in the new cargo-build-sbf repository.
  • XDP support is no longer experimental. The --experimental-retransmit-xdp-interface, --experimental-retransmit-xdp-cpu-cores, and --experimental-retransmit-xdp-zero-copy flags have been deprecated. Use --xdp-interface, --xdp-cpu-cores, and --xdp-zero-copy instead. Behavior is unchanged: pass --xdp-cpu-cores to enable XDP on the specified cores.

Changes

4.0.0

RPC

Breaking

... (truncated)

Commits
  • 3134055 v3.1: core: Fix reporting interval on several metrics (backport of #12139) (#...
  • e878c8c v3.1 - chore: bump rustls-webpki vendor tags for RUSTSEC-2026-0104 (#12164)
  • ca2c682 v3.1: Configure snapshot usage as load and generate when creating snapshots (...
  • 8f3025f v3.1: blockstore: Add fallback in mark_slot_dead_if_not_full() (backport of #...
  • cc3eb8c v3.1 - chore: bump vendored rustls-webpki for rustsec advisories (#12077)
  • d991814 v3.1: fix(ci): treat "already exists" as success in publish retry loop (backp...
  • e2fc200 Bump version to v3.1.14 (#11873)
  • 437252f v3.1: EntryBytesBudget (backport of #11865) (#11870)
  • a568b95 v3.1: blockstore: refactor error handling / dead in shred insertion path (bac...
  • abb11cc v3.1: explicit scheduler teardown on prune (backport of #11844) (#11845)
  • Additional commits viewable in compare view

Updates rand from 0.8.5 to 0.9.2

Changelog

Sourced from rand's changelog.

[0.9.2] - 2025-07-20

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

  • Revise "not a crypto library" policy again (#1565)
  • Remove zerocopy dependency from rand (#1579)

Fixes

  • Fix feature simd_support for recent nightly rust (#1586)

Changes

  • Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

  • Add rand::distr::Alphabetic distribution. (#1587)
  • Re-export rand_core (#1604)

#1565: rust-random/rand#1565 #1579: rust-random/rand#1579 #1586: rust-random/rand#1586 #1587: rust-random/rand#1587 #1604: rust-random/rand#1604 #1623: rust-random/rand#1623 #1634: rust-random/rand#1634 #1646: rust-random/rand#1646

[0.9.0] - 2025-01-27

Security and unsafe

  • Poli...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 21, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/actions-10d8868139 branch from bc7df6d to a725ad0 Compare May 22, 2026 20:48
Bumps the actions group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.1` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.50.0` | `1.52.3` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` |
| [toml](https://github.com/toml-rs/toml) | `0.8.23` | `1.1.0+spec-1.1.0` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.28` | `0.13.3` |
| [solana-sdk](https://github.com/anza-xyz/solana-sdk) | `2.3.1` | `4.0.1` |
| [solana-pubkey](https://github.com/anza-xyz/solana-sdk) | `2.4.0` | `4.2.0` |
| [solana-instruction](https://github.com/anza-xyz/solana-sdk) | `2.3.3` | `3.4.0` |
| [solana-rpc-client](https://github.com/anza-xyz/agave) | `2.3.13` | `3.1.14` |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.2` |
| [colored](https://github.com/mackwic/colored) | `2.2.0` | `3.1.1` |
| [semver](https://github.com/dtolnay/semver) | `1.0.27` | `1.0.28` |
| [rpassword](https://github.com/conradkleinespel/rpassword) | `5.0.1` | `7.5.3` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.3.0` | `1.7.0` |
| [dirs](https://github.com/soc/dirs-rs) | `5.0.1` | `6.0.0` |



Updates `clap` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.1)

Updates `tokio` from 1.50.0 to 1.52.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.50.0...tokio-1.52.3)

Updates `serde_json` from 1.0.149 to 1.0.150
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.150)

Updates `toml` from 0.8.23 to 1.1.0+spec-1.1.0
- [Commits](toml-rs/toml@toml-v0.8.23...toml-v1.1.0)

Updates `reqwest` from 0.12.28 to 0.13.3
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.28...v0.13.3)

Updates `solana-sdk` from 2.3.1 to 4.0.1
- [Release notes](https://github.com/anza-xyz/solana-sdk/releases)
- [Commits](https://github.com/anza-xyz/solana-sdk/compare/sdk@v2.3.1...sdk@v4.0.1)

Updates `solana-pubkey` from 2.4.0 to 4.2.0
- [Release notes](https://github.com/anza-xyz/solana-sdk/releases)
- [Commits](https://github.com/anza-xyz/solana-sdk/compare/pubkey@v2.4.0...hash@v4.2.0)

Updates `solana-instruction` from 2.3.3 to 3.4.0
- [Release notes](https://github.com/anza-xyz/solana-sdk/releases)
- [Commits](https://github.com/anza-xyz/solana-sdk/compare/instruction@v2.3.3...account@v3.4.0)

Updates `solana-rpc-client` from 2.3.13 to 3.1.14
- [Release notes](https://github.com/anza-xyz/agave/releases)
- [Changelog](https://github.com/anza-xyz/agave/blob/master/CHANGELOG.md)
- [Commits](anza-xyz/agave@v2.3.13...v3.1.14)

Updates `rand` from 0.8.5 to 0.9.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...rand_core-0.9.2)

Updates `colored` from 2.2.0 to 3.1.1
- [Release notes](https://github.com/mackwic/colored/releases)
- [Changelog](https://github.com/colored-rs/colored/blob/master/CHANGELOG.md)
- [Commits](colored-rs/colored@v2.2.0...v3.1.1)

Updates `semver` from 1.0.27 to 1.0.28
- [Release notes](https://github.com/dtolnay/semver/releases)
- [Commits](dtolnay/semver@1.0.27...1.0.28)

Updates `rpassword` from 5.0.1 to 7.5.3
- [Release notes](https://github.com/conradkleinespel/rpassword/releases)
- [Upgrade guide](https://github.com/conradkleinespel/rpassword/blob/main/UPGRADE.md)
- [Commits](conradkleinespel/rpassword@v5.0.1...v7.5.3)

Updates `rmcp` from 1.3.0 to 1.7.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.3.0...rmcp-v1.7.0)

Updates `dirs` from 5.0.1 to 6.0.0
- [Commits](https://github.com/soc/dirs-rs/commits)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: colored
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: dirs
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: rand
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: reqwest
  dependency-version: 0.13.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: rmcp
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: rpassword
  dependency-version: 7.5.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: semver
  dependency-version: 1.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: serde_json
  dependency-version: 1.0.150
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: solana-instruction
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: solana-pubkey
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: solana-rpc-client
  dependency-version: 3.1.14
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: solana-sdk
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: tokio
  dependency-version: 1.52.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: toml
  dependency-version: 1.1.0+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/actions-10d8868139 branch from a725ad0 to f27e020 Compare May 22, 2026 21:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants