Bump the minor-and-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #95 · stellar/rs-stellar-rpc-client

dependabot · 2026-05-26T19:09:09Z

Bumps the minor-and-patch group with 6 updates in the / directory:

Package	From	To
clap	`4.5.4`	`4.6.1`
serde_json	`1.0.149`	`1.0.150`
serde-aux	`4.4.0`	`4.7.0`
serde_with	`3.12.0`	`3.20.0`
tokio	`1.43.1`	`1.52.3`
http	`1.4.0`	`1.4.1`

Updates clap from 4.5.4 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

v4.5.60

[4.5.60] - 2026-02-19

Fixes

(help) Quote empty default values, possible values

v4.5.59

[4.5.59] - 2026-02-16

Fixes

Command::ignore_errors no longer masks help/version on subcommands

v4.5.58

[4.5.58] - 2026-02-11

v4.5.57

[4.5.57] - 2026-02-03

Fixes

Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

v4.5.56

[4.5.56] - 2026-01-29

Fixes

On conflict error, don't show conflicting arguments in the usage

v4.5.55

[4.5.55] - 2026-01-27

Fixes

Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

v4.5.54

[4.5.54] - 2026-01-02

Fixes

... (truncated)

Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

[4.6.0] - 2026-03-12

Compatibility

Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

Update dependencies

[4.5.60] - 2026-02-19

Fixes

(help) Quote empty default values, possible values

[4.5.59] - 2026-02-16

Fixes

Command::ignore_errors no longer masks help/version on subcommands

[4.5.58] - 2026-02-11

[4.5.57] - 2026-02-03

Fixes

Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

[4.5.56] - 2026-01-29

Fixes

On conflict error, don't show conflicting arguments in the usage

[4.5.55] - 2026-01-27

Fixes

Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

... (truncated)

Commits

1420275 chore: Release
d2c817d docs: Update changelog
f88c94e Merge pull request #6341 from epage/sep
acbb822 fix(complete): Reduce risk of conflict with actual subcommands
a49fadb refactor(complete): Pull out subcommand separator
ddc008b Merge pull request #6332 from epage/update
497dc50 chore: Update compatible dependencies
dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
54bdaa3 chore(deps): Update j178/prek-action action to v2
f0d30d9 chore: Release
Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates serde-aux from 4.4.0 to 4.7.0

Commits

See full diff in compare view

Updates serde_with from 3.12.0 to 3.20.0

Release notes

Sourced from serde_with's releases.

serde_with v3.20.0

Added

Add support for base58 encoding, similar to the existing base64 setup by @mitinarseny (#943)

Fixed

Extend base64 with schemars support by @mitinarseny (#9949)

serde_with v3.19.0

Added

Add support for hashbrown v0.17 (#940)

This extends the existing support for hashbrown to the newly released version.

serde_with v3.18.0

Added

Support OneOrMany with more sequence and set types (#929)

Changed

Bump MSRV to 1.88 due to the darling dependency

serde_with v3.17.0

Added

Support OneOrMany with smallvec v1 (#920, #922)

Changed

Switch to yaml_serde for a maintained yaml dependency by @kazan417 (#921)

Bump MSRV to 1.82, since that is required for yaml_serde dev-dependency.

serde_with v3.16.1

Fixed

Fix JsonSchemaAs of SetPreventDuplicates and SetLastValueWins. (#906, #907)

serde_with v3.16.0

Added

Added support for smallvec v1 under the smallvec_1 feature flag by @isharma228 (#895)

Add JsonSchemaAs implementation for json::JsonString by @yogevm15 (#901)

serde_with v3.15.1

Fixed

Fix building of the documentation by updating references to use serde_core.

... (truncated)

Commits

f1b06c7 Bump version to 3.20.0 (#953)
11fe1c5 Bump version to 3.20.0
222b9aa Include Rust 1.95 in the CI matrix (#951)
993770c Include Rust 1.95 in the CI matrix
731b00b feat: automatic schemars support for Base64 (#949)
93d6d9d Bump github/codeql-action from 4.35.2 to 4.35.3 in the github-actions group (...
59bc97b Bump github/codeql-action in the github-actions group
84f2e40 feat: automatic schemars support for base64
ff837ab feat: base58 (#943)
9fda9ce chore: bring back newline
Additional commits viewable in compare view

Updates tokio from 1.43.1 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

sync: fix underflow in mpsc channel len() (#8062)

sync: notify receivers in mpsc OwnedPermit::release() method (#8075)

sync: require that an RwLock has max_readers != 0 (#8076)

sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

io: AioSource::register_borrowed for I/O safety support (#7992)

net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)

taskdump: add trace_with() for customized task dumps (#8025)

taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)

fs: support io_uring in AsyncRead for File (#7907)

... (truncated)

Commits

d875691 chore: prepare Tokio v1.52.3 (#8130)
e1aebb0 Merge 'tokio-1.51.3' into 'tokio-1.52.x' (#8129)
fd63094 chore: prepare Tokio v1.51.3 (#8127)
8c600d0 Merge 'tokio-1.47.5' into 'tokio-1.51.x' (#8123)
11bfc13 chore: prepare Tokio v1.47.5 (#8122)
f085b62 sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
30d25cc sync: require that an RwLock has max_readers != 0 (#8076)
9fccf53 sync: return Empty from try_recv() when mpsc is closed with outstanding p...
ebf61b4 sync: fix underflow in mpsc channel len() (#8062)
4abe9d7 chore: prepare Tokio v1.52.2 (#8115)
Additional commits viewable in compare view

Updates http from 1.4.0 to 1.4.1

Release notes

Sourced from http's releases.

v1.4.1

tl;dr

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

chore(header): fix clippy::assign_op_pattern by @rxc-amzn in hyperium/http#806

ci: pin itoa in msrv job by @seanmonstar in hyperium/http#813

Remove unnecessary explicit lifetimes by @jplatte in hyperium/http#815

chore(ci): update to actions/checkout@v6 by @tottoto in hyperium/http#819

tests: update to rand 0.10 by @tottoto in hyperium/http#818

refactor: Remove usage of float instruction by @AurelienFT in hyperium/http#823

refactor(uri): consolidate PathAndQuery::from_shared and from_static by @seanmonstar in hyperium/http#825

fix(uri): reject Path::from_shared/from_static if doesn't start with slash by @seanmonstar in hyperium/http#826

Rephrase comment by @daalfox in hyperium/http#827

Fix typo in request builder docs by @vleksis in hyperium/http#831

fix: clamp Extend size hint so HeaderMap reserve cannot overflow by @SAY-5 in hyperium/http#833

fix(headers): fix stacked borrows for IterMut/ValuesIterMut by @seanmonstar in hyperium/http#837

fix(header): use a set_len guard in IntoIter drop by @seanmonstar in hyperium/http#838

New Contributors

@rxc-amzn made their first contribution in hyperium/http#806

@AurelienFT made their first contribution in hyperium/http#823

@daalfox made their first contribution in hyperium/http#827

@vleksis made their first contribution in hyperium/http#831

@SAY-5 made their first contribution in hyperium/http#833

Full Changelog: hyperium/http@v1.4.0...v1.4.1

Changelog

Sourced from http's changelog.

1.4.1 (May 25, 2026)

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

Commits

a24c968 v1.4.1
bc3b044 fix(header): use a set_len guard in IntoIter drop (#838)
1b968dc fix(header): fix stacked borrows for IterMut/ValuesIterMut (#837)
6e2dd42 fix: clamp Extend size hint so HeaderMap reserve cannot overflow (#833)
68e0abb docs: fix typo in request builder docs (#831)
29dd307 docs(extensions): rephrase internal comment (#827)
ae48fb5 fix(uri): reject Path::from_shared/from_static if doesn't start with slash (#...
1ad200e refactor(uri): consolidate PathAndQuery::from_shared and from_static (#825)
d59d939 refactor: Remove usage of float instruction (#823)
ed680c4 tests: update to rand 0.10 (#818)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.5.4` | `4.6.1` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [serde-aux](https://github.com/iddm/serde-aux) | `4.4.0` | `4.7.0` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.12.0` | `3.20.0` | | [tokio](https://github.com/tokio-rs/tokio) | `1.43.1` | `1.52.3` | | [http](https://github.com/hyperium/http) | `1.4.0` | `1.4.1` | Updates `clap` from 4.5.4 to 4.6.1 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.4...clap_complete-v4.6.1) Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `serde-aux` from 4.4.0 to 4.7.0 - [Commits](https://github.com/iddm/serde-aux/commits) Updates `serde_with` from 3.12.0 to 3.20.0 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.12.0...v3.20.0) Updates `tokio` from 1.43.1 to 1.52.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.43.1...tokio-1.52.3) Updates `http` from 1.4.0 to 1.4.1 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: clap dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: serde-aux dependency-version: 4.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: serde_with dependency-version: 3.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tokio dependency-version: 1.52.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: http dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

socket-security · 2026-05-26T19:10:59Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality
tokio@1.43.1 ⏵ 1.52.3	^-5
serde_json@1.0.149 ⏵ 1.0.150
serde_with@3.12.0 ⏵ 3.20.0	^-12	⁺¹¹
clap@4.5.4 ⏵ 4.6.1
http@1.4.0 ⏵ 1.4.1
serde-aux@4.4.0 ⏵ 4.7.0

View full report

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 26, 2026

Copilot AI review requested due to automatic review settings May 26, 2026 19:09

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 26, 2026

Copilot AI reviewed May 26, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the minor-and-patch group across 1 directory with 6 updates#95

Bump the minor-and-patch group across 1 directory with 6 updates#95
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/minor-and-patch-9912964414

dependabot Bot commented on behalf of github May 26, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

socket-security Bot commented May 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.6.1

[4.6.1] - 2026-04-15

Fixes

v4.5.60

[4.5.60] - 2026-02-19

Fixes

v4.5.59

[4.5.59] - 2026-02-16

Fixes

v4.5.58

[4.5.58] - 2026-02-11

v4.5.57

[4.5.57] - 2026-02-03

Fixes

v4.5.56

[4.5.56] - 2026-01-29

Fixes

v4.5.55

[4.5.55] - 2026-01-27

Fixes

v4.5.54

[4.5.54] - 2026-01-02

Fixes

[4.6.1] - 2026-04-15

Fixes

[4.6.0] - 2026-03-12

Compatibility

[4.5.61] - 2026-03-12

Internal

[4.5.60] - 2026-02-19

Fixes

[4.5.59] - 2026-02-16

Fixes

[4.5.58] - 2026-02-11

[4.5.57] - 2026-02-03

Fixes

[4.5.56] - 2026-01-29

Fixes

[4.5.55] - 2026-01-27

Fixes

v1.0.150

serde_with v3.20.0

Added

Fixed

serde_with v3.19.0

Added

serde_with v3.18.0

Added

Changed

serde_with v3.17.0

Added

Changed

serde_with v3.16.1

Fixed

serde_with v3.16.0

Added

serde_with v3.15.1

Fixed

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

Tokio v1.52.2

1.52.2 (May 4th, 2026)

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

Added (unstable)

v1.4.1

tl;dr

What's Changed

New Contributors

1.4.1 (May 25, 2026)

Uh oh!

Copilot AI left a comment

dependabot Bot commented on behalf of github May 26, 2026 •

edited

Loading