build(deps): bump the cargo-minor-patch group with 8 updates by dependabot[bot] · Pull Request #5269 · librefang/librefang

dependabot · 2026-05-19T09:33:45Z

Bumps the cargo-minor-patch group with 8 updates:

Package	From	To
dashmap	`6.1.0`	`6.2.1`
rmcp	`1.6.0`	`1.7.0`
psl	`2.1.208`	`2.1.210`
tower-http	`0.6.10`	`0.6.11`
tar	`0.4.45`	`0.4.46`
metrics-util	`0.20.3`	`0.20.4`
tauri	`2.11.1`	`2.11.2`
tauri-build	`2.6.1`	`2.6.2`

Updates dashmap from 6.1.0 to 6.2.1

Release notes

Sourced from dashmap's releases.

v6.2.1

This is an interim maintenance release for the existing v6 branch before v7 can be released. This bumps the MSRV to 1.85 and updates dependencies to their latest versions.

Commits

749ed1f v6.2.1
d02b945 v6.2.0
b983625 update dependencies
94a294a bump msrv to 1.85
See full diff in compare view

Updates rmcp from 1.6.0 to 1.7.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v1.7.0

Added

add task-based stdio examples (#839)

rmcp-v1.7.0

Added

add task-based stdio examples (#839)

Fixed

(rmcp) flatten Resource variant of PromptMessageContent (#843)

reply -32700 on stdio parse errors instead of closing (#833)

Other

(rmcp) remove dependency on chrono default features (#829)

Fix/issue 817 idle timeout log level (#824)

Commits

3529c36 chore: release v1.6.1 (#831)
d695046 fix: enable task support on counter long_task example (#838)
5ccdfc0 feat: add task-based stdio examples (#839)
d83b156 fix(rmcp): flatten Resource variant of PromptMessageContent (#843)
321ab14 fix: reply -32700 on stdio parse errors instead of closing (#833)
0f776ab chore(rmcp): remove dependency on chrono default features (#829)
3bf5298 ci: extend semver check to all features except local (#832)
88df9af chore(deps): update askama requirement from 0.15 to 0.16 (#830)
2f8d3b7 Fix/issue 817 idle timeout log level (#824)
See full diff in compare view

Updates psl from 2.1.208 to 2.1.210

Commits

f7d8732 bump version
786c1bb update the list
8292d4f bump version
4183b75 update the list
See full diff in compare view

Updates tower-http from 0.6.10 to 0.6.11

Release notes

Sourced from tower-http's releases.

tower-http-0.6.11

Added
set-header: add SetMultipleResponseHeadersLayer and SetMultipleResponseHeader for setting multiple response headers at once. Supports overriding, appending, and if_not_present modes. Header values can be fixed or computed dynamically via closures (#672)
use http::{Response, header::{self, HeaderValue}};
use http_body::Body as _;
use tower_http::set_header::response::SetMultipleResponseHeadersLayer;
let layer = SetMultipleResponseHeadersLayer::overriding(vec![
(header::X_FRAME_OPTIONS, HeaderValue::from_static("DENY")).into(),
(header::CONTENT_LENGTH, |res: &Response<MyBody>| {
res.body().size_hint().exact()
.map(|size| HeaderValue::from_str(&size.to_string()).unwrap())
}).into(),
]);
set-header: add SetMultipleRequestHeadersLayer and SetMultipleRequestHeaders for setting multiple request headers at once, mirroring the response-side API (#677)

classify: add From<i32> and From<NonZeroI32> impls for GrpcCode. Unrecognized status codes map to GrpcCode::Unknown (#506)
Changed

compression: compress application/grpc-web responses. Previously all application/grpc* content types were excluded from compression; now only application/grpc (non-web) is excluded (#408)

Fixed

fs: fix ServeDir returning 500 instead of 405 for non-GET/HEAD requests when call_fallback_on_method_not_allowed is enabled but no fallback service is configured (#587)

fs: remove duplicate cfg attribute on is_reserved_dos_name (#675)

#408: tower-rs/tower-http#408 #506: tower-rs/tower-http#506 #587: tower-rs/tower-http#587 #672: tower-rs/tower-http#672 #675: tower-rs/tower-http#675 #677: tower-rs/tower-http#677

All PRs

ci: fix flaky encoding test, add nightly stress test job by @jlizen in tower-rs/tower-http#670

... (truncated)

Commits

1d082ef v0.6.11
9c3117d feat: set multiple request header (#677)
667e7c7 Remove duplicate cfg attribute for is_reserved_dos_name (#675)
7551a9b feat(set_header): refactor and improve multiple header middleware (#672)
991e9ee add From<i32> impl for GrpcCode (#506)
3962dba Do compress grpc-web responses (#408)
f0b3bb6 Fix serve_dir method not allowed handling when no fallback is configured (#587)
d1a571b ci: use static timeout in stress-test workflow (#671)
309555a ci: fix flaky encoding test, add nightly stress test job (#670)
See full diff in compare view

Updates tar from 0.4.45 to 0.4.46

Release notes

Sourced from tar's releases.

0.4.46

Security

archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm) by @cgwalters in composefs/tar-rs#454

See also GHSA-3cv2-h65g-fgmm

Other changes

ci: Fix and re-enable reverse dependency testing by @cgwalters in composefs/tar-rs#444

Update astral-tokio-tar requirement from 0.5 to 0.6 by @dependabot[bot] in composefs/tar-rs#446

Update some links by @atouchet in composefs/tar-rs#445

Add support of absolute paths by @zxvfc in composefs/tar-rs#426

docs: Expand notes on concurrent mutations and following symlinks by @cgwalters in composefs/tar-rs#453

Update repo links by @cgwalters in composefs/tar-rs#451

ci: Add crates.io trusted publishing workflow by @cgwalters in composefs/tar-rs#456

Release 0.4.46 by @cgwalters in composefs/tar-rs#455

New Contributors

@dependabot[bot] made their first contribution in composefs/tar-rs#446

@atouchet made their first contribution in composefs/tar-rs#445

@zxvfc made their first contribution in composefs/tar-rs#426

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

Commits

fc459c1 Release 0.4.46
43e05a8 ci: Add crates.io trusted publishing workflow
bba5666 Update repo links
cd94c46 docs: Document TOCTOU / concurrent-mutation threat model
1b4997c builder: Expand docs for follow_symlinks and append_dir_all
bab14dd archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm)
2349b49 Add support of absolute paths
39d0311 Update some links
59d803e Update astral-tokio-tar requirement from 0.5 to 0.6
8296b9a ci: Fix and re-enable reverse dependency testing (#444)
See full diff in compare view

Updates metrics-util from 0.20.3 to 0.20.4

Commits

8893711 chore: Release
23cc597 chore: Release
78ebfc3 revert: defer version bumps to cargo-release
8d7f5ea update CHANGELOG for metrics
cd5b9a3 chore(metrics): update doc comments for macros for consistency
9cf1f73 fix(metrics): resolve hash mismatch between pre-computed and on-demand key ha...
2bfe3ba enhancement(metrics): allow specifying description and unit in registration m...
dae3a67 chore: Release
6dddb64 update CHANGELOG for metrics-exporter-dogstatsd
9e387a4 chore: Release
Additional commits viewable in compare view

Updates tauri from 2.11.1 to 2.11.2

Release notes

Sourced from tauri's releases.

tauri-cli v2.11.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1090 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1088 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.55.0
    │   └── tauri-runtime-wry 2.11.2
    │       └── tauri 2.11.2
    │           ├── tauri-utils 2.9.2
    │           │   ├── tauri-schema-generator 0.0.0
    │           │   ├── tauri-runtime-wry 2.11.2
    │           │   ├── tauri-runtime 2.11.2
    │           │   │   ├── tauri-runtime-wry 2.11.2
    │           │   │   └── tauri 2.11.2
    │           │   ├── tauri-plugin 2.6.2
    │           │   │   ├── tauri-plugin-sample 0.1.0
    │           │   │   │   └── api 0.1.0
    │           │   │   └── tauri-plugin-log 2.6.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-macros 2.6.2
    │           │   │   └── tauri 2.11.2
    │           │   ├── tauri-codegen 2.6.2
    │           │   │   ├── tauri-macros 2.6.2
    │           │   │   └── tauri-build 2.6.2
    │           │   │       ├── tauri-file-associations-demo 0.1.0
    │           │   │       ├── tauri 2.11.2
    │           │   │       ├── resources 0.1.0
    │           │   │       ├── bench_helloworld 0.1.0
    │           │   │       ├── bench_files_transfer 0.1.0
    │           │   │       ├── bench_cpu_intensive 0.1.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-cli 2.11.2
    │           │   │   └── tauri-cli-node 0.0.0
    │           │   ├── tauri-bundler 2.9.2
    │           │   │   └── tauri-cli 2.11.2
    │           │   ├── tauri-build 2.6.2
</tr></table>

... (truncated)

Commits

499df79 apply version updates (#15378)
20bb033 Revert "feat: add Windows VC runtime linking and bundling options (#15372)" (...
b5b72ce fix(tauri-utils): preserve resource source file name when dest is empty (#15383)
3fd8ba2 fix: resources after empty directory not copied (#15388)
47e1b75 fix: set_as_windows_menu_for_nsapp command wrongly called `set_as_help_menu...
eadd8f5 chore(deps-dev): bump svelte from 5.53.11 to 5.55.7 (#15382)
32d8166 feat: add Windows VC runtime linking and bundling options (#15372)
b15b859 refactor: make error dialog take &'static str (#15369)
0e8e25f chore(deps): update dependency rollup to v4.60.3 (#15355)
See full diff in compare view

Updates tauri-build from 2.6.1 to 2.6.2

Release notes

Sourced from tauri-build's releases.

tauri-build v2.6.2

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1090 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1088 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.55.0
    │   └── tauri-runtime-wry 2.11.2
    │       └── tauri 2.11.2
    │           ├── tauri-utils 2.9.2
    │           │   ├── tauri-schema-generator 0.0.0
    │           │   ├── tauri-runtime-wry 2.11.2
    │           │   ├── tauri-runtime 2.11.2
    │           │   │   ├── tauri-runtime-wry 2.11.2
    │           │   │   └── tauri 2.11.2
    │           │   ├── tauri-plugin 2.6.2
    │           │   │   ├── tauri-plugin-sample 0.1.0
    │           │   │   │   └── api 0.1.0
    │           │   │   └── tauri-plugin-log 2.6.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-macros 2.6.2
    │           │   │   └── tauri 2.11.2
    │           │   ├── tauri-codegen 2.6.2
    │           │   │   ├── tauri-macros 2.6.2
    │           │   │   └── tauri-build 2.6.2
    │           │   │       ├── tauri-file-associations-demo 0.1.0
    │           │   │       ├── tauri 2.11.2
    │           │   │       ├── resources 0.1.0
    │           │   │       ├── bench_helloworld 0.1.0
    │           │   │       ├── bench_files_transfer 0.1.0
    │           │   │       ├── bench_cpu_intensive 0.1.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-cli 2.11.2
    │           │   │   └── tauri-cli-node 0.0.0
    │           │   ├── tauri-bundler 2.9.2
    │           │   │   └── tauri-cli 2.11.2
    │           │   ├── tauri-build 2.6.2
</tr></table>

... (truncated)

Commits

499df79 apply version updates (#15378)
20bb033 Revert "feat: add Windows VC runtime linking and bundling options (#15372)" (...
b5b72ce fix(tauri-utils): preserve resource source file name when dest is empty (#15383)
3fd8ba2 fix: resources after empty directory not copied (#15388)
47e1b75 fix: set_as_windows_menu_for_nsapp command wrongly called `set_as_help_menu...
eadd8f5 chore(deps-dev): bump svelte from 5.53.11 to 5.55.7 (#15382)
32d8166 feat: add Windows VC runtime linking and bundling options (#15372)
b15b859 refactor: make error dialog take &'static str (#15369)
0e8e25f chore(deps): update dependency rollup to v4.60.3 (#15355)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo-minor-patch group with 8 updates: | Package | From | To | | --- | --- | --- | | [dashmap](https://github.com/xacrimon/dashmap) | `6.1.0` | `6.2.1` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.6.0` | `1.7.0` | | [psl](https://github.com/addr-rs/psl) | `2.1.208` | `2.1.210` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.10` | `0.6.11` | | [tar](https://github.com/composefs/tar-rs) | `0.4.45` | `0.4.46` | | [metrics-util](https://github.com/metrics-rs/metrics) | `0.20.3` | `0.20.4` | | [tauri](https://github.com/tauri-apps/tauri) | `2.11.1` | `2.11.2` | | [tauri-build](https://github.com/tauri-apps/tauri) | `2.6.1` | `2.6.2` | Updates `dashmap` from 6.1.0 to 6.2.1 - [Release notes](https://github.com/xacrimon/dashmap/releases) - [Commits](xacrimon/dashmap@v6.1.0...v6.2.1) Updates `rmcp` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.6.0...rmcp-v1.7.0) Updates `psl` from 2.1.208 to 2.1.210 - [Release notes](https://github.com/addr-rs/psl/releases) - [Commits](addr-rs/psl@v2.1.208...v2.1.210) Updates `tower-http` from 0.6.10 to 0.6.11 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.10...tower-http-0.6.11) Updates `tar` from 0.4.45 to 0.4.46 - [Release notes](https://github.com/composefs/tar-rs/releases) - [Commits](composefs/tar-rs@0.4.45...0.4.46) Updates `metrics-util` from 0.20.3 to 0.20.4 - [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml) - [Commits](metrics-rs/metrics@metrics-util-v0.20.3...metrics-util-v0.20.4) Updates `tauri` from 2.11.1 to 2.11.2 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-v2.11.1...tauri-v2.11.2) Updates `tauri-build` from 2.6.1 to 2.6.2 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](tauri-apps/tauri@tauri-build-v2.6.1...tauri-build-v2.6.2) --- updated-dependencies: - dependency-name: dashmap dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: rmcp dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: psl dependency-version: 2.1.210 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tower-http dependency-version: 0.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tar dependency-version: 0.4.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: metrics-util dependency-version: 0.20.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tauri dependency-version: 2.11.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tauri-build dependency-version: 2.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added the dependencies Pull requests that update a dependency file label May 19, 2026

houko merged commit 5ff8eef into main May 19, 2026
27 of 31 checks passed

houko deleted the dependabot/cargo/cargo-minor-patch-f11bea9955 branch May 19, 2026 11:37

github-actions Bot added the size/XS < 10 lines changed label May 19, 2026

github-actions Bot mentioned this pull request May 19, 2026

[main red] CI failure on PR #5267 #5278

Closed

houko mentioned this pull request May 25, 2026

release: v2026.5.25-beta.13 #5718

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

build(deps): bump the cargo-minor-patch group with 8 updates#5269

build(deps): bump the cargo-minor-patch group with 8 updates#5269
houko merged 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-f11bea9955

dependabot Bot commented on behalf of github May 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 19, 2026

v6.2.1

rmcp-macros-v1.7.0

Added

rmcp-v1.7.0

Added

Fixed

Other

tower-http-0.6.11

Added

Changed

Fixed

All PRs

0.4.46

Security

Other changes

New Contributors

tauri-cli v2.11.2

tauri-build v2.6.2

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant