Skip to content

chore(deps): bump the patches group across 1 directory with 5 updates#25390

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/patches-d7fa0dd00a
Closed

chore(deps): bump the patches group across 1 directory with 5 updates#25390
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/patches-d7fa0dd00a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Bumps the patches group with 5 updates in the / directory:

Package From To
async-rs 0.8.4 0.8.5
h2 0.4.13 0.4.14
pin-project 1.1.11 1.1.12
env_logger 0.11.9 0.11.10
web-sys 0.3.97 0.3.98

Updates async-rs from 0.8.4 to 0.8.5

Commits

Updates h2 from 0.4.13 to 0.4.14

Release notes

Sourced from h2's releases.

v0.4.14

What's Changed

New Contributors

Full Changelog: hyperium/h2@v0.4.13...v0.4.14

Changelog

Sourced from h2's changelog.

0.4.14 (May 5, 2026)

  • Add header_table_size() option to server builder.
  • Fix leaking connection flow control of padded DATA frames when stream is reset.
  • Fix leaking connection flow control when canceling a stream after reserving capacity.
  • Fix leaking connection flow control when receiving a DATA frame after GOAWAY.
  • Fix waking the poll_capacity when locally reseting a stream from library.
  • Fix sending HEADERS on a reset stream before the RST_STREAM frame.
  • Fix receiving GOAWAY to not close peer-initiated streams.
  • Optimize header value decoding to copy less bytes.
Commits
  • e2826c5 v0.4.14
  • 30998f2 fix: set_reset must notify send task (missed wakeup) (#897)
  • d9689ea fix: Account for connection flow control on DATA after GOAWAY (#895)
  • 08129b2 fix: Flow control capacity leak with padded frames (#894)
  • 1e68f99 fix: Avoid panic or capacity leak when a stream is cancelled after reserve_ca...
  • dbc204e fix: check final response in poll_informational (#889)
  • ac5cdd0 feat: add 'header_table_size()' to server builder (#888)
  • 55a0d9d perf(header): optimize HeaderValue decoding via zero-copy sharing (#884)
  • f5f1594 fix: filter stream initiator in recv_go_away (#886)
  • 5634ddd fix: avoid RST before initial HEADERS on idle streams (#875)
  • See full diff in compare view

Updates pin-project from 1.1.11 to 1.1.12

Release notes

Sourced from pin-project's releases.

1.1.12

  • Documentation improvements.
Changelog

Sourced from pin-project's changelog.

[1.1.12] - 2026-05-05

  • Documentation improvements.
Commits

Updates env_logger from 0.11.9 to 0.11.10

Release notes

Sourced from env_logger's releases.

v0.11.10

[0.11.10] - 2026-03-23

Internal

  • Update dependencies
Changelog

Sourced from env_logger's changelog.

[0.11.10] - 2026-03-23

Internal

  • Update dependencies
Commits
  • 41320bf chore: Release
  • de8c74f docs: Update changelog
  • d550741 docs(gh): Add sponsor link
  • 458b075 chore(deps): Update Rust Stable to v1.94 (#401)
  • 8bc3fc3 Merge pull request #400 from epage/update
  • 143fa64 chore: Upgrade incompatible
  • b687a24 chore: Upgrade compatible
  • 8cf1ba9 Merge pull request #397 from rust-cli/renovate/crate-ci-typos-1.x
  • 094ecf7 Merge pull request #396 from rust-cli/renovate/crate-ci-committed-1.x
  • 34ad626 chore(deps): Update pre-commit hook crate-ci/typos to v1.44.0
  • Additional commits viewable in compare view

Updates web-sys from 0.3.97 to 0.3.98

Commits

@dependabot dependabot Bot added domain: deps Anything related to Vector's dependencies no-changelog Changes in this PR do not need user-facing explanations in the release changelog labels May 7, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 7, 2026 18:07
Bumps the patches group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [async-rs](https://github.com/amqp-rs/async-rs) | `0.8.4` | `0.8.5` |
| [h2](https://github.com/hyperium/h2) | `0.4.13` | `0.4.14` |
| [pin-project](https://github.com/taiki-e/pin-project) | `1.1.11` | `1.1.12` |
| [env_logger](https://github.com/rust-cli/env_logger) | `0.11.9` | `0.11.10` |
| [web-sys](https://github.com/wasm-bindgen/wasm-bindgen) | `0.3.97` | `0.3.98` |



Updates `async-rs` from 0.8.4 to 0.8.5
- [Commits](amqp-rs/async-rs@v0.8.4...v0.8.5)

Updates `h2` from 0.4.13 to 0.4.14
- [Release notes](https://github.com/hyperium/h2/releases)
- [Changelog](https://github.com/hyperium/h2/blob/master/CHANGELOG.md)
- [Commits](hyperium/h2@v0.4.13...v0.4.14)

Updates `pin-project` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/taiki-e/pin-project/releases)
- [Changelog](https://github.com/taiki-e/pin-project/blob/main/CHANGELOG.md)
- [Commits](taiki-e/pin-project@v1.1.11...v1.1.12)

Updates `env_logger` from 0.11.9 to 0.11.10
- [Release notes](https://github.com/rust-cli/env_logger/releases)
- [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md)
- [Commits](rust-cli/env_logger@v0.11.9...v0.11.10)

Updates `web-sys` from 0.3.97 to 0.3.98
- [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases)
- [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/wasm-bindgen/wasm-bindgen/commits)

---
updated-dependencies:
- dependency-name: async-rs
  dependency-version: 0.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: env_logger
  dependency-version: 0.11.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: h2
  dependency-version: 0.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: pin-project
  dependency-version: 1.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: web-sys
  dependency-version: 0.3.98
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/patches-d7fa0dd00a branch from fb7de43 to 63a204a Compare May 7, 2026 19:07
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 63a204a84c

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread Cargo.lock
Comment on lines +6072 to +6074
[[package]]
name = "is_terminal_polyfill"
version = "1.70.2"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Regenerate the license inventory for new crates

When this lockfile update pulls in new crates such as is_terminal_polyfill and once_cell_polyfill, LICENSE-3rdparty.csv is left unchanged (rg "is_terminal_polyfill|once_cell_polyfill" LICENSE-3rdparty.csv returns no entries). Dependency changes run the check-licenses job in .github/workflows/test.yml, and the PR template explicitly requires make build-licenses after modifying Cargo.lock, so this will leave CI/package license metadata out of date until the generated license inventory is committed.

Useful? React with 👍 / 👎.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 8, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 8, 2026
@dependabot dependabot Bot deleted the dependabot/cargo/patches-d7fa0dd00a branch May 8, 2026 15:55
@github-actions github-actions Bot locked and limited conversation to collaborators May 8, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

domain: deps Anything related to Vector's dependencies no-changelog Changes in this PR do not need user-facing explanations in the release changelog

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants