chore(deps): bump the cargo-deps group across 1 directory with 16 updates by dependabot[bot] · Pull Request #4159 · yewstack/yew

dependabot · 2026-05-22T03:20:40Z

Bumps the cargo-deps group with 16 updates in the / directory:

Package	From	To
tokio	`1.51.0`	`1.52.3`
clap	`4.6.0`	`4.6.1`
serde_json	`1.0.149`	`1.0.150`
reqwest	`0.13.2`	`0.13.3`
axum	`0.8.8`	`0.8.9`
indexmap	`2.13.1`	`2.14.0`
gloo-net	`0.6.0`	`0.7.0`
lru	`0.16.3`	`0.18.0`
matchit	`0.9.1`	`0.9.2`
average	`0.16.0`	`0.17.0`
git2	`0.20.4`	`0.21.0`
libc	`0.2.184`	`0.2.186`
tower-http	`0.6.8`	`0.6.11`
pulldown-cmark	`0.13.3`	`0.13.4`
zxcvbn	`3.1.0`	`3.1.1`
uuid	`1.23.0`	`1.23.1`

Updates tokio from 1.51.0 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

sync: fix underflow in mpsc channel len() (#8062)

sync: notify receivers in mpsc OwnedPermit::release() method (#8075)

sync: require that an RwLock has max_readers != 0 (#8076)

sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

io: AioSource::register_borrowed for I/O safety support (#7992)

net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)

taskdump: add trace_with() for customized task dumps (#8025)

taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)

fs: support io_uring in AsyncRead for File (#7907)

... (truncated)

Commits

d875691 chore: prepare Tokio v1.52.3 (#8130)
e1aebb0 Merge 'tokio-1.51.3' into 'tokio-1.52.x' (#8129)
fd63094 chore: prepare Tokio v1.51.3 (#8127)
8c600d0 Merge 'tokio-1.47.5' into 'tokio-1.51.x' (#8123)
11bfc13 chore: prepare Tokio v1.47.5 (#8122)
f085b62 sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
30d25cc sync: require that an RwLock has max_readers != 0 (#8076)
9fccf53 sync: return Empty from try_recv() when mpsc is closed with outstanding p...
ebf61b4 sync: fix underflow in mpsc channel len() (#8062)
4abe9d7 chore: prepare Tokio v1.52.2 (#8115)
Additional commits viewable in compare view

Updates clap from 4.6.0 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Commits

1420275 chore: Release
d2c817d docs: Update changelog
f88c94e Merge pull request #6341 from epage/sep
acbb822 fix(complete): Reduce risk of conflict with actual subcommands
a49fadb refactor(complete): Pull out subcommand separator
ddc008b Merge pull request #6332 from epage/update
497dc50 chore: Update compatible dependencies
dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
54bdaa3 chore(deps): Update j178/prek-action action to v2
f0d30d9 chore: Release
Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates reqwest from 0.13.2 to 0.13.3

Release notes

Sourced from reqwest's releases.

v0.13.3

tl;dr

Fix CertificateRevocationList parsing of PEM values.

Fix logging in resolver to only show host, not full URL.

Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.

Fix HTTP/3 to handle STOP_SENDING as not an error.

Fix HTTP/3 pool to remove timed out QUIC connections.

Fix HTTP/3 connection establishment picking IPv4 and IPv6.

Upgrade rustls-platform-verifier.

(wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

Update docs.rs Features by @JamesWiresmith in seanmonstar/reqwest#2961

fix: fallback to hickory_resolver's default config if reading /etc/resolv.conf fails by @monosans in seanmonstar/reqwest#2797

fix: remove timeout con by @cuiweixie in seanmonstar/reqwest#2967

http3: handle stop_sending without error by @anuraaga in seanmonstar/reqwest#2978

resolve: debug log to change only host by @lms0806 in seanmonstar/reqwest#2992

Edit reference link by @lms0806 in seanmonstar/reqwest#2996

docs: more accurate about default HTTP2 window sizes by @seanmonstar in seanmonstar/reqwest#3007

[HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 by @lyuzichong in seanmonstar/reqwest#3006

Upgrade rustls-platform-verifier by @jplatte in seanmonstar/reqwest#3010

use wasm-bindgen ecosystem only for wasm32-unknown-* target by @Ludea in seanmonstar/reqwest#3000

fix rustls crl pem parsing by @Threated in seanmonstar/reqwest#3013

docs(retry): include ReqRep in docsrs by @seanmonstar in seanmonstar/reqwest#3020

New Contributors

@JamesWiresmith made their first contribution in seanmonstar/reqwest#2961

@monosans made their first contribution in seanmonstar/reqwest#2797

@cuiweixie made their first contribution in seanmonstar/reqwest#2967

@anuraaga made their first contribution in seanmonstar/reqwest#2978

@lms0806 made their first contribution in seanmonstar/reqwest#2992

@lyuzichong made their first contribution in seanmonstar/reqwest#3006

@Ludea made their first contribution in seanmonstar/reqwest#3000

Full Changelog: seanmonstar/reqwest@v0.13.2...v0.13.3

Changelog

Sourced from reqwest's changelog.

v0.13.3

Fix CertificateRevocationList parsing of PEM values.

Fix logging in resolver to only show host, not full URL.

Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.

Fix HTTP/3 to handle STOP_SENDING as not an error.

Fix HTTP/3 pool to remove timed out QUIC connections.

Fix HTTP/3 connection establishment picking IPv4 and IPv6.

Upgrade rustls-platform-verifier.

(wasm) Only use wasm-bindgen on unknown-* targets.

Commits

a9a88c4 v0.13.3
f3f6d9d docs(retry): include ReqRep in docsrs (#3020)
5f9c231 fix rustls CRL PEM parsing (#3013)
11d835d use wasm-bindgen ecosystem only for wasm32-unknown-* target (#3000)
1f72916 Upgrade rustls-platform-verifier (#3010)
5d5bf35 [HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 (#3006)
93dc1b2 docs: more accurate about default HTTP2 window sizes (#3007)
c5e50f0 docs: update outdated link in comments
b25611f resolve: debug log to change only host (#2992)
ca1f479 http3: handle stop_sending without error (#2978)
Additional commits viewable in compare view

Updates axum from 0.8.8 to 0.8.9

Release notes

Sourced from axum's releases.

axum-v0.8.9

added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)

changed: Update minimum rust version to 1.80 (#3620)

fixed: Set connect endpoint on correct field in MethodRouter (#3656)

fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3597: tokio-rs/axum#3597 #3620: tokio-rs/axum#3620 #3656: tokio-rs/axum#3656 #3611: tokio-rs/axum#3611

Commits

c59208c revert axum-core changelog changes
99068f5 Revert "Fix IntoResponse for tuples overriding error response codes (#3603)"
23d7098 Revert "axum-core 0.5.6"
e8a39ad axum-macros 0.5.1
6e9a249 axum-extra 0.12.6
0ec9041 axum 0.8.9
c3fcebb axum-core 0.5.6
a8790fc update release notes
26ba7bb docs: consolidate state management docs in crate root (#3683)
9fc59ef Update to tokio-tungstenite 0.29 (#3689)
Additional commits viewable in compare view

Updates indexmap from 2.13.1 to 2.14.0

Changelog

Sourced from indexmap's changelog.

2.14.0 (2026-04-09)

MSRV: Rust 1.85.0 or later is now required.

Updated the hashbrown dependency to 0.17.

Made more map::Slice methods const: new_mut, first_mut, last_mut, split_at_mut, split_at_mut_checked, split_first_mut, split_last_mut

Commits

bcd165b Merge pull request #439 from cuviper/release-2.14.0
4ef06a7 Release 2.14.0
d21826c Merge pull request #438 from cuviper/hashbrown-0.17
2566bec Upgrade to hashbrown v0.17
4b62776 Merge pull request #437 from cuviper/disjoint-panic
478fba2 Normalize the panic doc of get_disjoint_mut
fb6dafd Merge pull request #436 from cuviper/const-slice-mut
5c237a2 Make Slice::{first,last,split_*}_mut methods const
48ff9ce Merge pull request #435 from cuviper/edition-2024
648be98 cargo fmt with edition 2024
Additional commits viewable in compare view

Updates gloo-net from 0.6.0 to 0.7.0

Release notes

Sourced from gloo-net's releases.

gloo-net 0.7.0

MSRV updated to 1.82

Breaking

Remove Clone implementation for EventSource (#417) by @vpochapuis Cloning had a bug where dropping any clone would disconnect all instances.

New Features

Add EventSourceBuilder for configuring EventSource with credentials (#530) by @zn3x

Add WebSocket::buffered_amount (#510) by @vi

Add PartialEq, Eq, Hash derives to CloseEvent (#504) by @Alexi24601

Fixes

Fix RequestBuilder::build producing a URL with an extra & (#497) by @hmacias-avaya

Fix WebSocket binary send panicking when SharedArrayBuffer is enabled (#502) by @Fedeparma74

Maintenance

Bump pin-project to 1.1 and http to 1.4 (#536) by @Madoshakalaka

Changelog

Sourced from gloo-net's changelog.

Version 0.7.0

Remove Clone implementation for EventSource (#417) by @vpochapuis Cloning had a bug where dropping any clone would disconnect all instances.

Add EventSourceBuilder for configuring EventSource with credentials (#530) by @zn3x

Add WebSocket::buffered_amount (#510) by @vi

Add PartialEq, Eq, Hash derives to CloseEvent (#504) by @Alexi24601

Fix RequestBuilder::build producing a URL with an extra & (#497) by @hmacias-avaya

Fix WebSocket binary send panicking when SharedArrayBuffer is enabled (#502) by @Fedeparma74

Update MSRV to 1.82 (#505) by @martinfrances107

Bump pin-project to 1.1 and http to 1.4 (#536) by @Madoshakalaka

Commits

d69fcff chore: release gloo-net 0.7.0
7a57df3 chore: release gloo-file 0.4.0
2685476 fix: correct gloo-history category slugs
b1d5129 fix: correct gloo-storage category slugs
8316f33 fix: correct gloo-render category slugs
0734551 chore: release gloo-console 0.4.0, gloo-dialogs 0.3.0, gloo-events 0.3.0, glo...
e6280d4 chore: release gloo-utils 0.3.0
cca8089 chore: release gloo-worker-macros 0.2.0 and gloo-worker 0.6.0
a8af99c chore: update rust dependencies (#536)
0de5865 fix(net)!: remove EventSource Clone implementation (#417)
Additional commits viewable in compare view

Updates lru from 0.16.3 to 0.18.0

Changelog

Sourced from lru's changelog.

v0.18.0 - 2026-04-27

Fix unconstrained lifetime in get_or_insert_mut_ref.

v0.17.0 - 2026-04-14

Upgrade hashbrown to 0.17.0 and update MSRV to 1.85.0.

v0.16.4 - 2026-04-13

Add get_or_insert_with_key and variants.

Commits

dac07e3 Merge pull request #234 from jeromefroe/jerome/prepare-0-18-0-release
0335315 Prepare 0.18.0 release
e40bbdc Merge pull request #233 from paolobarbolini/get_or_insert_mut_ref-unconstrain...
a615a5b Fix unconstrained lifetime in LruCache::get_or_insert_mut_ref
13321a9 Merge pull request #232 from jeromefroe/jerome/prepare-0-17-0-release
f7d0ece Prepare 0.17.0 release
2d3d6d5 Merge pull request #231 from xtqqczze/deps/hashbrown
346e2fe Bump hashbrown to 0.17.0
1302b4e Update MSRV to 1.85.0
d8c7f5c Merge pull request #230 from jeromefroe/jerome/prepare-0-16-4-release
Additional commits viewable in compare view

Updates matchit from 0.9.1 to 0.9.2

Release notes

Sourced from matchit's releases.

0.9.2

Fixed a couple false positive route conflicts (ibraheemdev/matchit#89, ibraheemdev/matchit#91).

Commits

4b5a2c3 release 0.9.2
bc1ac7a fix prefix-suffix conflict due to insertion order of trailing slashes
500698f fix false conflict
See full diff in compare view

Updates average from 0.16.0 to 0.17.0

Commits

See full diff in compare view

Updates git2 from 0.20.4 to 0.21.0

Changelog

Sourced from git2's changelog.

0.21.0 - TBD

0.20.4...main

Added

Added experimental SHA256 repository support behind the new unstable-sha256 Cargo feature, along with *_ext API variants that accept an ObjectFormat. #1206

Added opts::set_cache_max_size() and opts::get_cached_memory(). #1188

Added Repository::object_format() and a new ObjectFormat enum. #1204

Added Repository::set_config(). #1208

Added merge_file() along with MergeFileInput. #1210

Added Repository::refdb_compress() for packing loose refs. #1221

Added public Refdb type, along with Repository::refdb() and Repository::set_refdb(). Repository::refdb_compress() now delegates to Refdb::compress(). #1228

Added Revspec::into_objects(). #1230

Added BlameHunk::final_committer(), BlameHunk::orig_committer(), BlameHunk::summary(), and BlameHunk::summary_bytes(). #1231

Implemented Clone for Reference. #1233

Added Repository::author_from_env() and Repository::committer_from_env(). #1237

Added impl From<Utf8Error> for Error. #1239

Changed

❗ The ssh, https, and cred Cargo features are no longer enabled by default. Previously default = ["ssh", "https"]; now default = []. Enable them explicitly if you rely on credential helpers or transport support. #1168

❗ CredentialHelper and the url dependency are now gated behind the new cred Cargo feature. Enabling ssh or https transitively enables cred. #1168

❗ Updated to the 2021 edition. #1173

❗ Many string accessors that previously returned Option<&str> now return Result<&str, Error> or Result<Option<&str>, Error>, so callers can distinguish a missing value from a non-UTF-8 one. #1241

❗ BlameHunk::final_signature, BlameHunk::final_committer, BlameHunk::orig_signature, and BlameHunk::orig_committer now return Option to avoid segfaults when signature information is missing. #1254

Bumped requirement to libgit2-sys 0.18.4, which updates libgit2 to 1.9.3.

... (truncated)

Commits

dffaf27 Merge pull request #1256 from weihanglo/changelog
84b9c76 docs: changelog for git2@0.21
8c6dc4a Merge pull request #1206 from weihanglo/sha256-git2
7bd145e fix: import ObjectFormat in one place
fc8af6a test(oid): split _ext to test each format separately
b9bde87 test: oid length sanity check
57a68e0 feat(oid): impl Display for ObjectFormat
7acee09 chore(ci): test git2 sha256 support
bdf5b7b fix: init example with --object-format option
9fb4e6a refactor(util): drop unsafe from zeroed_raw_oid
Additional commits viewable in compare view

Updates libc from 0.2.184 to 0.2.186

Release notes

Sourced from libc's releases.

0.2.186

Added

Apple: Add KEVENT_FLAG_* constants (#5070)

Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

0.2.185

Added

EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)

Hexagon: add missing constants and fix types for linux-musl (#5042)

Redox: Add semaphore functions (#5051)

Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

Hexagon: Decouple time64 types from musl symbol redirects (#5040)

Horizon: Change POLL constants from c_short to c_int (#5045)

Changelog

Sourced from libc's changelog.

0.2.186 - 2026-04-24

Added

Apple: Add KEVENT_FLAG_* constants (#5070)

Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

0.2.185 - 2026-04-13

Added

EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)

Hexagon: add missing constants and fix types for linux-musl (#5042)

Redox: Add semaphore functions (#5051)

Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

Hexagon: Decouple time64 types from musl symbol redirects (#5040)

Horizon: Change POLL constants from c_short to c_int (#5045)

Commits

42620ff [0.2] libc: Release 0.2.186
9db2eaa apple: add KEVENT_FLAG_* constants
3840939 Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE for linux
f697deb chore: migrate from Cirrus CI to GHA
71d5bfc libc: Release 0.2.185
1027d1c Revert "ci: Pin nightly to 2026-04-01"
0e9c6e5 redox: Add semaphore functions
24ef457 feat: add back support for gnu windows x86 in ci
aa75caf horizon: Change POLL constants from c_short to c_int
b7eda5a hexagon: add missing constants and fix types for linux-musl
Additional commits viewable in compare view

Updates tower-http from 0.6.8 to 0.6.11

Release notes

Sourced from tower-http's releases.

tower-http-0.6.11

Added
set-header: add SetMultipleResponseHeadersLayer and SetMultipleResponseHeader for setting multiple response headers at once. Supports overriding, appending, and if_not_present modes. Header values can be fixed or computed dynamically via closures (#672)
use http::{Response, header::{self, HeaderValue}};
use http_body::Body as _;
use tower_http::set_header::response::SetMultipleResponseHeadersLayer;
let layer = SetMultipleResponseHeadersLayer::overriding(vec![
(header::X_FRAME_OPTIONS, HeaderValue::from_static("DENY")).into(),
(header::CONTENT_LENGTH, |res: &Response<MyBody>| {
res.body().size_hint().exact()
.map(|size| HeaderValue::from_str(&size.to_string()).unwrap())
}).into(),
]);
set-header: add SetMultipleRequestHeadersLayer and SetMultipleRequestHeaders for setting multiple request headers at once, mirroring the response-side API (#677)

classify: add From<i32> and From<NonZeroI32> impls for GrpcCode. Unrecognized status codes map to GrpcCode::Unknown (#506)
Changed

compression: compress application/grpc-web responses. Previously all application/grpc* content types were excluded from compression; now only application/grpc (non-web) is excluded (#408)

Fixed

fs: fix ServeDir returning 500 instead of 405 for non-GET/HEAD requests when call_fallback_on_method_not_allowed is enabled but no fallback service is configured (#587)

fs: remove duplicate cfg attribute on is_reserved_dos_name (#675)

#408: tower-rs/tower-http#408 #506: tower-rs/tower-http#506 #587: tower-rs/tower-http#587 #672: tower-rs/tower-http#672 #675: tower-rs/tower-http#675 #677: tower-rs/tower-http#677

All PRs

ci: fix flaky encoding test, add nightly stress test job by @jlizen in tower-rs/tower-http#670

... (truncated)

Commits

1d082ef v0.6.11
9c3117d feat: set multiple request header (#677)
667e7c7 Remove duplicate cfg attribute for is_reserved_dos_name (#675)
7551a9b feat(set_header): refactor and improve multiple header middleware (#672)
991e9ee add From<i32> impl for GrpcCode (#506)
3962dba Do compress grpc-web responses (#408)
f0b3bb6 Fix serve_dir method not allowed handling when no fallback is configured (#587)
d1a571b ci: use static timeout in stress-test workflow (#671)
309555a ci: fix flaky encoding test, add nightly stress test job (#670)
4532fc2 v0.6.10
Additional commits viewable in compare view

Updates pulldown-cmark from 0.13.3 to 0.13.4

Release notes

Sourced from pulldown-cmark's releases.

0.13.4

Fix panic in specific cases with TightParagraph.

What's Changed

fix: panic in parser iterator for TightParagraph in some cases by @Martin1887 in pulldown-cmark/pulldown-cmark#1096

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.3...v0.13.4

Commits

38e4d08 chore: cargo update
9c61031 chore: bump pulldown-cmark version to 0.13.4
709268f Merge pull request #1096 from pulldown-cmark/fix-1095
c1d4450 Add test case from 1097
6fea453 fix: panic in parser iterator for TightParagraph in some cases
See full diff in compare view

Updates zxcvbn from 3.1.0 to 3.1.1

Changelog

Sourced from zxcvbn's changelog.

Version 3.1.1

Bump all dependencies

Add Deserialize implementation to ser feature

Version 3.1.0

Add Display to Feedback

Add support for WASM targets running in a custom runtime

Version 3.0.1

Fix a bug in 3.0.0 where the Score enum was private

Fix a bug where some structs that were intended to implement Serialize when the ser feature was enabled did not implement it

Version 3.0.0

[Breaking] Avoid the possibility for zxcvbn to error

[Breaking] Refactor the score into an exhaustive enum

[Breaking] Change feedback to return Option<&Feedback>

Bump itertools dependency to 0.13

Version 2.2.2

Fix a possible panic in spatial pattern checker (shssoichiro/zxcvbn-rs#70)

Update several dependencies

Fix several new clippy lints

Officially specify minimum Rust version requirement

The version has not changed, but the requirement has now been added to Cargo.toml

Version 2.2.1

Fixes for building on WASM targets

Version 2.2.0

Fix an issue where a less specific feedback would be given when a more specific feedback was available. (shssoichiro/zxcvbn-rs#54)

Migrate to Rust edition 2021

Migrate from chrono crate to time crate

Update fancy-regex to 0.8

Version 2.1.1

Do not download and build wasm dependencies if not building for wasm

Version 2.1.0

[Feature] Add support for wasm

Deprecate the usage of builders (it will still work for now, but will be removed in the next major release)

... (truncated)

Commits

e794323 Version 3.1.1
0bd01c1 fix: resolve test clippy lints
468ddc3 chore: fix tests that depended on the current year
75471f1 chore: update all dependencies
38410db Add Deserialize implementation to the ser feature.
See full diff in compare view

Updates uuid from 1.23.0 to 1.23.1

Release notes

Sourced from uuid's releases.

v1.23.1

What's Changed

Remove deprecated msrv feature from wasm-bindgen dependency by @guybedford in uuid-rs/uuid#877

fix: Timestamp::from_gregorian deprecation note by @aznashwan in uuid-rs/uuid#878

Prepare for 1.23.1 release by @KodrAus in uuid-rs/uuid#879

New Contributors

@guybedford made their first contribution in uuid-rs/uuid#877

@aznashwan made their first contribution in uuid-rs/uuid#878

Full Changelog: https://github.com/uuid-rs/uuid/compare/v1.23.0...v1.23....
Description has been truncated

…ates Bumps the cargo-deps group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.51.0` | `1.52.3` | | [clap](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.1` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.2` | `0.13.3` | | [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` | | [indexmap](https://github.com/indexmap-rs/indexmap) | `2.13.1` | `2.14.0` | | [gloo-net](https://github.com/rustwasm/gloo) | `0.6.0` | `0.7.0` | | [lru](https://github.com/jeromefroe/lru-rs) | `0.16.3` | `0.18.0` | | [matchit](https://github.com/ibraheemdev/matchit) | `0.9.1` | `0.9.2` | | [average](https://github.com/vks/average) | `0.16.0` | `0.17.0` | | [git2](https://github.com/rust-lang/git2-rs) | `0.20.4` | `0.21.0` | | [libc](https://github.com/rust-lang/libc) | `0.2.184` | `0.2.186` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.8` | `0.6.11` | | [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark) | `0.13.3` | `0.13.4` | | [zxcvbn](https://github.com/shssoichiro/zxcvbn-rs) | `3.1.0` | `3.1.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.0` | `1.23.1` | Updates `tokio` from 1.51.0 to 1.52.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.51.0...tokio-1.52.3) Updates `clap` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.1) Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `reqwest` from 0.13.2 to 0.13.3 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.2...v0.13.3) Updates `axum` from 0.8.8 to 0.8.9 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9) Updates `indexmap` from 2.13.1 to 2.14.0 - [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md) - [Commits](indexmap-rs/indexmap@2.13.1...2.14.0) Updates `gloo-net` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/rustwasm/gloo/releases) - [Changelog](https://github.com/ranile/gloo/blob/master/CHANGELOG.md) - [Commits](ranile/gloo@0.6.0...gloo-net-v0.7.0) Updates `lru` from 0.16.3 to 0.18.0 - [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md) - [Commits](jeromefroe/lru-rs@0.16.3...0.18.0) Updates `matchit` from 0.9.1 to 0.9.2 - [Release notes](https://github.com/ibraheemdev/matchit/releases) - [Commits](ibraheemdev/matchit@v0.9.1...v0.9.2) Updates `average` from 0.16.0 to 0.17.0 - [Commits](https://github.com/vks/average/commits) Updates `git2` from 0.20.4 to 0.21.0 - [Changelog](https://github.com/rust-lang/git2-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/git2-rs@git2-0.20.4...git2-0.21.0) Updates `libc` from 0.2.184 to 0.2.186 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.186/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.184...0.2.186) Updates `tower-http` from 0.6.8 to 0.6.11 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.8...tower-http-0.6.11) Updates `pulldown-cmark` from 0.13.3 to 0.13.4 - [Release notes](https://github.com/raphlinus/pulldown-cmark/releases) - [Commits](pulldown-cmark/pulldown-cmark@v0.13.3...v0.13.4) Updates `zxcvbn` from 3.1.0 to 3.1.1 - [Changelog](https://github.com/shssoichiro/zxcvbn-rs/blob/master/CHANGELOG.md) - [Commits](shssoichiro/zxcvbn-rs@v3.1.0...v3.1.1) Updates `uuid` from 1.23.0 to 1.23.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.0...v1.23.1) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.52.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: clap dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: reqwest dependency-version: 0.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: axum dependency-version: 0.8.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: indexmap dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: gloo-net dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: lru dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: matchit dependency-version: 0.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: average dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: git2 dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: libc dependency-version: 0.2.186 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: tower-http dependency-version: 0.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: pulldown-cmark dependency-version: 0.13.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: zxcvbn dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: uuid dependency-version: 1.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-22T03:22:23Z

Visit the preview URL for this PR (updated for commit f95945a):

https://yew-rs-api--pr4159-dependabot-cargo-car-m2yx1gtu.web.app

_{(expires Fri, 29 May 2026 03:22:15 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

github-actions · 2026-05-22T03:22:50Z

Benchmark - core

Yew Master

vnode           fastest       │ slowest       │ median        │ mean          │ samples │ iters
╰─ vnode_clone  2.459 ns      │ 2.695 ns      │ 2.463 ns      │ 2.468 ns      │ 100     │ 1000000000

Pull Request

vnode           fastest       │ slowest       │ median        │ mean          │ samples │ iters
╰─ vnode_clone  2.459 ns      │ 3.341 ns      │ 2.465 ns      │ 2.494 ns      │ 100     │ 1000000000

github-actions · 2026-05-22T03:27:23Z

Size Comparison

Details

examples	master (KB)	pull request (KB)	diff (KB)	diff (%)
async_clock	100.058	100.085	+0.027	+0.027%
boids	163.715	163.742	+0.027	+0.017%
communication_child_to_parent	93.462	93.488	+0.026	+0.028%
communication_grandchild_with_grandparent	105.586	105.610	+0.024	+0.023%
communication_grandparent_to_grandchild	101.902	101.927	+0.024	+0.024%
communication_parent_to_child	90.865	90.892	+0.026	+0.029%
contexts	105.861	105.891	+0.029	+0.028%
counter	85.749	85.776	+0.027	+0.032%
counter_functional	87.865	87.892	+0.026	+0.030%
dyn_create_destroy_apps	89.633	89.665	+0.032	+0.036%
file_upload	98.818	98.665	-0.153	-0.155%
function_delayed_input	94.445	94.475	+0.029	+0.031%
function_memory_game	167.377	167.417	+0.040	+0.024%
function_router	399.010	399.575	+0.565	+0.142%
function_todomvc	164.187	164.229	+0.042	+0.026%
futures	234.888	235.107	+0.220	+0.094%
game_of_life	100.404	100.444	+0.040	+0.040%
immutable	258.048	258.015	-0.033	-0.013%
inner_html	80.602	80.629	+0.027	+0.034%
js_callback	109.648	109.673	+0.024	+0.022%
keyed_list	175.743	175.773	+0.030	+0.017%
mount_point	83.956	83.984	+0.028	+0.034%
nested_list	112.606	112.653	+0.047	+0.042%
node_refs	91.457	91.483	+0.026	+0.029%
password_strength	1719.719	1768.603	+48.884	+2.843%
portals	93.088	93.115	+0.027	+0.029%
router	365.212	365.777	+0.565	+0.155%
suspense	113.568	113.598	+0.029	+0.026%
timer	88.267	88.294	+0.027	+0.031%
timer_functional	99.206	99.235	+0.029	+0.030%
todomvc	141.068	141.108	+0.040	+0.028%
two_apps	85.930	85.957	+0.027	+0.032%
web_worker_fib	136.171	136.022	-0.148	-0.109%
web_worker_prime	184.621	184.465	-0.156	-0.085%
webgl	82.746	82.774	+0.028	+0.034%

⚠️ The following example has changed its size significantly:

examples	master (KB)	pull request (KB)	diff (KB)	diff (%)
password_strength	1719.719	1768.603	+48.884	+2.843%

github-actions · 2026-05-22T03:37:13Z

Benchmark - SSR

Yew Master

Details

Benchmark	Round	Min (ms)	Max (ms)	Mean (ms)	Standard Deviation
Baseline	10	302.295	317.575	304.086	4.746
Hello World	10	505.104	510.143	506.656	1.654
Function Router	10	30145.802	30629.100	30345.951	173.840
Concurrent Task	10	1006.393	1008.279	1007.518	0.658
Many Providers	10	1094.905	1134.013	1107.289	12.092

Pull Request

Details

Benchmark	Round	Min (ms)	Max (ms)	Mean (ms)	Standard Deviation
Baseline	10	302.161	302.845	302.540	0.206
Hello World	10	491.322	494.673	492.605	1.038
Function Router	10	30077.841	30591.146	30310.442	190.923
Concurrent Task	10	1006.059	1009.000	1007.634	0.904
Many Providers	10	1017.750	1037.796	1029.224	6.234

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels May 22, 2026

github-actions Bot approved these changes May 22, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the cargo-deps group across 1 directory with 16 updates#4159

chore(deps): bump the cargo-deps group across 1 directory with 16 updates#4159
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/cargo-deps-1e88579388

dependabot Bot commented on behalf of github May 22, 2026

Uh oh!

github-actions Bot commented May 22, 2026

Uh oh!

github-actions Bot commented May 22, 2026

Uh oh!

github-actions Bot commented May 22, 2026

Uh oh!

github-actions Bot commented May 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 22, 2026

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

Tokio v1.52.2

1.52.2 (May 4th, 2026)

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

Added (unstable)

v4.6.1

[4.6.1] - 2026-04-15

Fixes

[4.6.1] - 2026-04-15

Fixes

v1.0.150

v0.13.3

tl;dr

What's Changed

New Contributors

v0.13.3

axum-v0.8.9

2.14.0 (2026-04-09)

gloo-net 0.7.0

Breaking

New Features

Fixes

Maintenance

Version 0.7.0

v0.18.0 - 2026-04-27

v0.17.0 - 2026-04-14

v0.16.4 - 2026-04-13

0.9.2

0.21.0 - TBD

Added

Changed

0.2.186

Added

Changed

0.2.185

Added

Fixed

0.2.186 - 2026-04-24

Added

Changed

0.2.185 - 2026-04-13

Added

Fixed

tower-http-0.6.11

Added

Changed

Fixed

All PRs

0.13.4

What's Changed

v1.23.1

What's Changed

New Contributors

Uh oh!

github-actions Bot commented May 22, 2026

Uh oh!

github-actions Bot commented May 22, 2026

Benchmark - core

Yew Master

Pull Request

Uh oh!

github-actions Bot commented May 22, 2026

Size Comparison

Uh oh!

github-actions Bot commented May 22, 2026

Benchmark - SSR

Yew Master

Pull Request

Uh oh!

Reviewers