Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 2, 2025

Bumps the cargo-production-dependencies group with 6 updates in the /src/shipping directory:

Package From To
actix-web 4.11.0 4.12.1
awc 3.8.0 3.8.1
tracing 0.1.41 0.1.43
tracing-subscriber 0.3.20 0.3.22
opentelemetry-appender-tracing 0.31.0 0.31.1
uuid 1.18.1 1.19.0

Updates actix-web from 4.11.0 to 4.12.1

Release notes

Sourced from actix-web's releases.

actix-web: v4.12.1

  • No significant changes since 4.12.0.

actix-web: v4.12.0

Short announcement

We've started GitHub Sponsors: https://github.com/sponsors/actix Support our development!

v4.12.0

  • actix_web::response::builder::HttpResponseBuilder::streaming() now sets Content-Type to application/octet-stream if Content-Type does not exist.
  • actix_web::response::builder::HttpResponseBuilder::streaming() now calls actix_web::response::builder::HttpResponseBuilder::no_chunking() and returns SizedStream if Content-Length is set by user.
  • Add ws crate feature (on-by-default) which forwards to actix-http and guards some of its ResponseError impls.
    • ⚠️ if you use default-feature = false and the web scoket feature, please make sure you enable the ws feature.
  • Add public export for EitherExtractError in error module.
Commits
  • 24489d4 doc(web): Fix links in README.md (#3834)
  • 30b8206 chore(actix-files): prepare release 0.6.9
  • fe6c0a3 chore(actix-web): prepare release 4.12.1
  • 37a8b9c chore(web): fix actix-http requirement
  • 37ff707 chore: fix derive_more feature requirements for actix-files
  • bbfd402 build(deps): bump bytes from 1.10.1 to 1.11.0 (#3839)
  • ce258a0 build(deps): bump taiki-e/install-action from 2.62.51 to 2.62.56 (#3837)
  • b2205d8 build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#3836)
  • fe890a7 build(deps): bump taiki-e/install-action from 2.62.49 to 2.62.51 (#3831)
  • d119500 release: actix-web v4.12.0 (#3830)
  • Additional commits viewable in compare view

Updates awc from 3.8.0 to 3.8.1

Release notes

Sourced from awc's releases.

awc: v3.8.1

  • Fix a bug where GO_AWAY errors did not stop connections from returning to the pool.
Commits
  • 25963db Prepare release for actix-http, awc (#3791)
  • 4df9953 actix-http: h1: stop pipelining when not reading full requests (#3721)
  • 0168411 fix(awc): close connections after GO_AWAY local or remote GO_AWAY errors (#3790)
  • fde7934 Add option to allow/disallow half closures in HTTP/1 (#3777)
  • 429ff82 fix: rename doc_auto_cfg feature (#3787)
  • 28a3a44 build(deps): bump tempfile from 3.22.0 to 3.23.0 (#3785)
  • 91b62b9 build(deps): bump taiki-e/cache-cargo-install-action from 2.3.0 to 2.3.1 (#3782)
  • 8935f7a build(deps): bump serde from 1.0.226 to 1.0.228 (#3786)
  • df2c6b3 build(deps): bump taiki-e/install-action from 2.62.0 to 2.62.11 (#3781)
  • d580cf0 build(deps): bump actions-rust-lang/setup-rust-toolchain from 1.15.0 to 1.15....
  • Additional commits viewable in compare view

Updates tracing from 0.1.41 to 0.1.43

Release notes

Sourced from tracing's releases.

tracing 0.1.43

Important

The previous release [0.1.42] was yanked because #3382 was a breaking change. See further details in #3424. This release contains all the changes from that version, plus a revert for the problematic part of the breaking PR.

Fixed

  • Revert "make valueset macro sanitary" (#3425)

#3382: tokio-rs/tracing#3382 #3424: tokio-rs/tracing#3424 #3425: tokio-rs/tracing#3425 [0.1.42]: https://github.com/tokio-rs/tracing/releases/tag/tracing-0.1.42

tracing 0.1.42

Important

The [Span::record_all] method has been removed from the documented API. It was always unsuable via the documented API as it requried a ValueSet which has no publically documented constructors. The method remains, but should not be used outside of tracing macros.

Added

  • attributes: Support constant expressions as instrument field names (#3158)
  • Add record_all! macro for recording multiple values in one call (#3227)
  • core: Improve code generation at trace points significantly (#3398)

Changed

  • tracing-core: updated to 0.1.35 (#3414)
  • tracing-attributes: updated to 0.1.31 (#3417)

Fixed

  • Fix "name / parent" variant of event! (#2983)
  • Remove 'r#' prefix from raw identifiers in field names (#3130)
  • Fix perf regression when release_max_level_* not set (#3373)
  • Use imported instead of fully qualified path (#3374)
  • Make valueset macro sanitary (#3382)

Documented

  • core: Add missing dyn keyword in Visit documentation code sample (#3387)

#2983: tokio-rs/tracing#2983 #3130: tokio-rs/tracing#3130 #3158: tokio-rs/tracing#3158

... (truncated)

Commits

Updates tracing-subscriber from 0.3.20 to 0.3.22

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.22

Important

The previous release [0.3.21] was yanked as it depended explicitly on [tracing-0.1.42], which was yanked due to a breaking change (see #3424 for details). This release contains all the changes from the previous release, plus an update to the newer version of tracing.

Changed

  • tracing: updated to 0.1.43 (#3427)

#3424: tokio-rs/tracing#3424 #3427: tokio-rs/tracing#3427 [0.3.21]: https://github.com/tokio-rs/tracing/releases/tag/tracing-subscriber-0.3.21 [tracing-0.1.42]: https://github.com/tokio-rs/tracing/releases/tag/tracing-0.1.42

tracing-subscriber 0.3.21

Fixed

  • Change registry exit to decrement local span ref only (#3331)
  • Make Layered propagate on_register_dispatch (#3379)

Changed

  • tracing: updated to 0.1.42 (#3418)

Performance

  • Remove clone_span on enter (#3289)

Documented

  • Fix a few small things in the format module (#3339)
  • Fix extra closing brace in layer docs (#3350)
  • Fix link in FmtSpan docs (#3411)

#3289: tokio-rs/tracing#3289 #3331: tokio-rs/tracing#3331 #3339: tokio-rs/tracing#3339 #3350: tokio-rs/tracing#3350 #3379: tokio-rs/tracing#3379 #3411: tokio-rs/tracing#3411 #3418: tokio-rs/tracing#3418

Commits

Updates opentelemetry-appender-tracing from 0.31.0 to 0.31.1

Commits

Updates uuid from 1.18.1 to 1.19.0

Release notes

Sourced from uuid's releases.

v1.19.0

What's Changed

Full Changelog: uuid-rs/uuid@v1.18.1...v1.19.0

Commits
  • 7527cef Merge pull request #849 from uuid-rs/cargo/v1.19.0
  • d0422fa prepare for 1.19.0 release
  • f9a36e2 Merge pull request #848 from paolobarbolini/maintenance
  • 029a57e Fix most clippy warnings
  • e73bb27 Upgrade to 2021 edition
  • c597622 Merge pull request #843 from paolobarbolini/serde_core-migration
  • 9835bd6 Switch serde dependency to serde_core
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…rectory with 6 updates

Bumps the cargo-production-dependencies group with 6 updates in the /src/shipping directory:

| Package | From | To |
| --- | --- | --- |
| [actix-web](https://github.com/actix/actix-web) | `4.11.0` | `4.12.1` |
| [awc](https://github.com/actix/actix-web) | `3.8.0` | `3.8.1` |
| [tracing](https://github.com/tokio-rs/tracing) | `0.1.41` | `0.1.43` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.20` | `0.3.22` |
| [opentelemetry-appender-tracing](https://github.com/open-telemetry/opentelemetry-rust) | `0.31.0` | `0.31.1` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.18.1` | `1.19.0` |



Updates `actix-web` from 4.11.0 to 4.12.1
- [Release notes](https://github.com/actix/actix-web/releases)
- [Changelog](https://github.com/actix/actix-web/blob/main/CHANGES.md)
- [Commits](actix/actix-web@web-v4.11.0...web-v4.12.1)

Updates `awc` from 3.8.0 to 3.8.1
- [Release notes](https://github.com/actix/actix-web/releases)
- [Changelog](https://github.com/actix/actix-web/blob/main/CHANGES.md)
- [Commits](actix/actix-web@awc-v3.8.0...awc-v3.8.1)

Updates `tracing` from 0.1.41 to 0.1.43
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-0.1.41...tracing-0.1.43)

Updates `tracing-subscriber` from 0.3.20 to 0.3.22
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.20...tracing-subscriber-0.3.22)

Updates `opentelemetry-appender-tracing` from 0.31.0 to 0.31.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-rust/commits)

Updates `uuid` from 1.18.1 to 1.19.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.18.1...v1.19.0)

---
updated-dependencies:
- dependency-name: actix-web
  dependency-version: 4.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-production-dependencies
- dependency-name: awc
  dependency-version: 3.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-production-dependencies
- dependency-name: tracing
  dependency-version: 0.1.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-production-dependencies
- dependency-name: tracing-subscriber
  dependency-version: 0.3.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-production-dependencies
- dependency-name: opentelemetry-appender-tracing
  dependency-version: 0.31.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-production-dependencies
- dependency-name: uuid
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Dec 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant