chore(deps): bump the prod-deps group across 1 directory with 34 updates by dependabot[bot] · Pull Request #232 · onsails/right-agent

dependabot · 2026-09-28T07:53:07Z

Bumps the prod-deps group with 34 updates in the / directory:

Package	From	To
clap	`4.6.1`	`4.6.7`
serde	`1.0.228`	`1.0.229`
serde-saphyr	`0.0.27`	`1.3.0`
serde_json	`1.0.150`	`1.0.151`
thiserror	`2.0.18`	`2.0.21`
minijinja	`2.21.0`	`2.24.0`
dirs	`6.0.0`	`7.0.0`
reqwest	`0.13.4`	`0.13.5`
rustls	`0.23.40`	`0.23.45`
tokio-rustls	`0.26.4`	`0.26.5`
rcgen	`0.14.9`	`0.14.10`
tokio	`1.52.3`	`1.53.1`
which	`8.0.4`	`8.0.6`
rmcp	`1.7.0`	`2.2.0`
futures	`0.3.32`	`0.3.34`
http	`1.4.2`	`1.5.0`
http-body-util	`0.1.3`	`0.1.5`
hyper	`1.10.1`	`1.11.1`
hyper-util	`0.1.20`	`0.1.21`
sse-stream	`0.2.3`	`0.3.0`
schemars	`1.2.1`	`1.2.2`
uuid	`1.23.3`	`1.26.1`
tokio-util	`0.7.18`	`0.7.19`
flate2	`1.1.9`	`1.1.10`
cron	`0.16.0`	`0.17.0`
cron-descriptor	`0.1.1`	`0.1.2`
rand	`0.10.2`	`0.10.3`
base64	`0.22.1`	`0.23.1`
owo-colors	`4.3.0`	`4.4.0`
anyhow	`1.0.102`	`1.0.104`
arc-swap	`1.9.1`	`1.9.2`
zeroize	`1.8.2`	`1.9.0`
fastrand	`2.4.1`	`2.5.0`
syn	`3.0.3`	`3.0.6`

Updates clap from 4.6.1 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

Update to syn v3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Commits

d3e59a9 chore: Release
d997f87 docs: Update changelog
fb6058c Merge pull request #6409 from heaths/pwsh-support
2310870 test(complete): Add tests for completer_for_path
5967c17 refactor(complete): Move shell detection to Shells
594602b fix(complete): Detect pwsh for PowerShell
3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
c968b13 chore(deps): Update Rust crate shlex to v2
8f247cb chore(deps): Update actions/checkout action to v7
Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates serde-saphyr from 0.0.27 to 1.3.0

Release notes

Sourced from serde-saphyr's releases.

1.3.0 Maintenance and performance release

Integer mapping keys now compare by their parsed numeric value for duplicate detection and merge resolution, including inside composite keys (0xB and 11 compare equal). Deserializing to strings preserves the original spelling; FirstWins and LastWins retain the selected key's spelling and associated value.

Composite keys containing null-like strings now preserve both the key and its associated value; for example, {{"null": 1}: 2} now round-trips correctly.

Null mapping keys now remain distinct from null-like string keys during duplicate detection and merge resolution, including inside composite keys.

Null detection now respects string tags and scalar styles, preserving null-like strings such as !!str null, including when deserializing to Option<String>.

Explicit numeric tags (!!int and !!float) now deserialize correctly through deserialize_any, including quoted and block scalars.

Floating-point deserialization now rejects incompatible core tags; for example, from_str::<f64>("!!str 1.5") now returns an error.

Serialization now escapes U+FFFE and U+FFFF as \uFFFE and \uFFFF.

Serialization now preserves newline-only strings in literal block scalars, including LitStr and LitString, by using keep chomping and retaining every empty line.

Updated the granit-parser revision to preserve document boundaries after zero-indented root literal and folded block scalars, including empty strings.

Preserve string scalars across YAML 1.1 readers (PR #90, thanks @NiklasRosenstein)

The version increased to 1.3 because it uses granit-parser 1.3, and that is because granit-parser added two methods to Input for performance improvements. As serde-saphyr re-exports it, the version number must be increased to 1.3 as well, even if no new features are added to this crate itself.

1.2.0 It's all about !!tags this time

This release focuses on enhanced tag support.

Implemented tag capturing (#183). Applications can use custom tags to express units, priorities, accessibility, or other application-specific semantics for a node. This is supported by new Tagged<T> wrapper that is similar to Commented<T>.

Unsupported tags can now be rejected rather than ignored (new option reject_unsupported_tags, #180). This aligns the behavior with ruamel.yaml that rejects tags for which it has no constructor (serde-saphyr does not construct this way) that caused discussion on prek.

Clearly wrongly placed tags like !!int [1] or !!map [1] are now an error.

Documentation was revised to make sure all examples compile (are not fragments).

1.1.0 Maintenance release

Added

Added granit-parser resource limits to Budget (#172):

max_buffered_comment_events (default: 32)

simple_key_max_lookahead (default: 1,024 characters)

flow_nesting_limit (default: 255)

The limits are applied to parsers created for strings, readers, standalone budget checks, and included YAML sources. When the serde_derived_types feature is enabled, deserializing an older Budget representation that omits these fields uses the documented defaults.

Fixes

Fixed enums tags for struct variants (#177)

Improved error message wording (#178)

... (truncated)

Changelog

Sourced from serde-saphyr's changelog.

1.3.0 Maintenance and performance release

Fixed

Integer mapping keys now compare by their parsed numeric value for duplicate detection and merge resolution, including inside composite keys (0xB and 11 compare equal). Deserializing to strings preserves the original spelling; FirstWins and LastWins retain the selected key's spelling and associated value.

Composite keys containing null-like strings now preserve both the key and its associated value; for example, {{"null": 1}: 2} now round-trips correctly.

Null mapping keys now remain distinct from null-like string keys during duplicate detection and merge resolution, including inside composite keys.

Null detection now respects string tags and scalar styles, preserving null-like strings such as !!str null, including when deserializing to Option<String>.

Explicit numeric tags (!!int and !!float) now deserialize correctly through deserialize_any, including quoted and block scalars.

Floating-point deserialization now rejects incompatible core tags; for example, from_str::<f64>("!!str 1.5") now returns an error.

Serialization now escapes U+FFFE and U+FFFF as \uFFFE and \uFFFF.

Serialization now preserves newline-only strings in literal block scalars, including LitStr and LitString, by using keep chomping and retaining every empty line.

Updated the granit-parser revision to preserve document boundaries after zero-indented root literal and folded block scalars, including empty strings.

Preserve string scalars across YAML 1.1 readers (PR #90, thanks @NiklasRosenstein)

The version increased to 1.3 because it uses granit-parser 1.3, and that is because granit-parser added two methods to Input for performance improvements. As serde-saphyr re-exports it, the version number must be increased to 1.3 as well, even if no new features are added to this crate itself.

1.2.0 Maintenance release

Changed

Folded property-interpolation depth and work limits into Budget; property resource-limit failures are now reported through Error::Budget and BudgetBreach.

Added the opt-in Options::reject_unsupported_tags strict mode. It rejects explicitly tagged scalar, sequence, and mapping nodes when their tag is unknown to serde-saphyr; the default remains permissive for compatibility with custom tagged enums. YAML 1.1 !!merge and !!value are accepted in this mode only as the exact scalar mapping keys << and =, respectively, while robotics-only !degrees and !radians require both the robotics crate feature and angle_conversions, and !include requires both the include crate feature and a configured resolver.

Enforced the scalar, sequence, or mapping node kinds required by recognized tags even when reject_unsupported_tags is disabled.

Hardened serializer indentation handling: indent_step is now limited to 1..=64, all serializer entry points validate it, and indentation arithmetic returns an error instead of overflowing. We do not consider this breaking because values outside this range does not look sane.

Validated custom anchor-generator names before emission. Names must be 1–256 bytes and cannot contain whitespace, control characters, or YAML flow punctuation; unsupported names now return a serialization error.

... (truncated)

Commits

93e634c Switching to 1.3.0
b94505a Miri fix
aa4adad We will need to go 1.3
7a1646e Update CHANGELOG.md
b17fc43 Extend the quoting check to signed lowercase 0o forms
8aae8fe Preserve string scalars across YAML 1.1 readers (#190)
de014b0 Bump rstest from 0.26.1 to 0.27.0 (#191)
bbd93a8 Switch to released granit parser.
49ecf1b Next release start automatically on tag push
6bcee83 Fix pirate formatter test
Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

Commits

de85007 Release 1.0.151
3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
cf16f75 Add RawValue::from_string_unchecked
827a315 Update actions/upload-artifact@v6 -> v7
cea36a5 Update actions/checkout@v6 -> v7
See full diff in compare view

Updates thiserror from 2.0.18 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

Fix parsing of generic unit variants in display expressions (#459)

2.0.20

Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

Update to syn 3

Commits

b1827ee Release 2.0.21
58037b5 Merge pull request #459 from dtolnay/turbofish
f82a0cf Keep track of nested turbofish depth
72ea492 Raise required compiler to Rust 1.77
72eea0d Resolve io_other_error clippy lint in tests
07f09a2 Raise required compiler to Rust 1.74
2715388 Update ui test suite to nightly-2026-09-22
5a306c7 Update ui test suite to nightly-2026-09-05
ef9383b Update ui test suite to nightly-2026-08-22
8336b84 Update ui tests for version 2.0.20
Additional commits viewable in compare view

Updates minijinja from 2.21.0 to 2.24.0

Changelog

Sourced from minijinja's changelog.

2.24.0

Added the wordwrap filter to the Python bindings. #885

Fixed conditional expressions in keyword argument values for Jinja2 compatibility in Rust and Go. #921

Fixed context! sorting keys when the preserve_order feature is enabled. #920

Limited string repetition to 100 MB in Rust and Go to prevent excessive memory allocations.

2.23.0

Fixed Unicode identifiers in templates rendered through the Python bindings.

2.22.0

Changed rendering of none and boolean values to None, True, and False for Jinja2 compatibility in Rust and Go. #913

Added StringInput for custom Rust filters and functions that transform strings while preserving safety provenance.

Fixed safety handling in string-transforming and composing filters to preserve safe strings and escape unsafe fragments in Rust and Go.

Fixed the split filter to return a sequence, enabling negative indexing and slicing in Rust and Go. #909

Fixed Python-compatible dict methods being shadowed by same-named map keys. #903

Fixed loop-local assignments leaking into subsequent iterations in Rust and Go. #912

Commits

0ca749f chore(release): 2.24.0
0f2989a feat(python): expose wordwrap filter
3eac8fa docs(changelog): document context key ordering fix
c867352 fix(macros): preserve context key order
a9e1813 fix(parser): allow conditionals in keyword arguments
c6fa683 fix(value): limit repeated strings to 100 MB
19af7d4 chore(release): 2.23.0
7f63616 docs(changelog): document Python Unicode identifiers
179652f ref: Remove CLAUDE.md
52b1cc6 ref: Move claude stuff
Additional commits viewable in compare view

Updates dirs from 6.0.0 to 7.0.0

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Updates rustls from 0.23.40 to 0.23.45

Commits

2976d90 Prepare 0.23.45
f9d4ee9 Handshake "alignment" check covers previously-received messages
c4e92e8 Keep data needed for HRR processing together
e553a7a server: TLS1.2 is not available after a HRR
5dff9da Test whether server negotiates TLS1.2 after HRR
185a063 reject a second ClientHello that changes the cipher suite
9fafe6d reject a second ClientHello that drops pre_shared_key
1b42c5f providers: zeroize private key DER
64ad386 Bump version to 0.23.44
1efbf66 bogo: remove PostQuantum setup
Additional commits viewable in compare view

Updates tokio-rustls from 0.26.4 to 0.26.5

Release notes

Sourced from tokio-rustls's releases.

0.26.5

What's Changed

Exclude bad test keys from the published package by @weiznich in rustls/tokio-rustls#140

chore: improve code comments clarity by @xibeiyoumian in rustls/tokio-rustls#152

client/server timeout examples, doc pass hinting towards timeouts. by @cpu in rustls/tokio-rustls#187

return more data at once from TlsStream::poll_read by @trinity-1686a in rustls/tokio-rustls#198

Commits

f8832d2 Bump version to 0.26.5
c0fad2f return more data at once from TlsStream::poll_read (#198)
edc7306 build(deps): bump futures-util from 0.3.33 to 0.3.34
baeadaa build(deps): bump rcgen from 0.14.8 to 0.14.9
1e138ad build(deps): bump taiki-e/cache-cargo-install-action from 3.0.7 to 3.0.8
b4ecff6 build(deps): bump taiki-e/cache-cargo-install-action from 3 to 3.0.7
f47a689 build(deps): bump rustls from 0.23.42 to 0.23.43
e25578e build(deps): bump tokio from 1.53.0 to 1.53.1
d2a6d98 server: add rustdoc hinting towards timeout wrapping
c2e9b4a client: add rustdoc hinting towards timeout wrapping
Additional commits viewable in compare view

Updates rcgen from 0.14.9 to 0.14.10

Release notes

Sourced from rcgen's releases.

0.14.10

What's Changed

Spec compliance bug fixes by @cpu in rustls/rcgen#445

Take advantage of stable ML-DSA in aws-lc-rs by @djc in rustls/rcgen#447

Commits

f4a3b16 Bump version to 0.14.10
dea3d4d Upgrade to botan 0.13
788b093 Upgrade to pem 4
7ce21f4 Take advantage of stable ML-DSA in aws-lc-rs
e2dba45 Remove unused RSASSA-PSS signature algorithm
37070de Omit reasonCode unspecified(0) from CRL entry extensions
b247a87 Write extensions for certs that only set KeyUsage or CRLDP
85eafdd Reject empty CRL distribution point URIs
3a99b50 Encode CRL invalidityDate as GeneralizedTime
See full diff in compare view

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

time: fix alt timer cancellation and insertion race (#8252)

Documented

runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)

metrics: add task schedule latency metric (#7986)

net: add SocketAddr methods to Unix sockets (#8144)

Changed

io: add #[inline] to IO trait impls for in-memory types (#8242)

net: implement UCred::pid on FreeBSD (#8086)

net: support Nuttx target os (#8259)

signal: refactor global variables on Windows (#8231)

sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)

taskdump: support taskdumps on s390x (#8192)

time: add #[track_caller] to timeout_at() (#8077)

time: consolidate mutex locks on spurious poll (#8124)

time: defer waker clone on spurious poll (#8107)

time: move lazy-registration state into Sleep (#8132)

tracing: remove unnecessary span clone (#8126)

Fixed

io: do not treat zero-length reads as EOF in Chain (#8251)

net: use getpeereid for QNX peer credentials (#8270)

runtime: avoid illegal state in FastRand (#8078)

sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)

taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)

time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

75fef53 chore: prepare Tokio v1.53.1 (#8303)
ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
91d3b4c time: fix alt timer cancellation and insertion race (#8252)
a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
be689a3 chore: prepare Tokio v1.53.0 (#8294)
50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
efdba5f chore: prepare Tokio v1.52.4 (#8289)
b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
Additional commits viewable in compare view

Updates which from 8.0.4 to 8.0.6

Release notes

Sourced from which's releases.

8.0.6

What's Changed

fix: resolve relative PATH entries against the provided cwd by @RSS1102 in harryfei/which-rs#128

New Contributors

@RSS1102 made their first contribution in harryfei/which-rs#128

Full Changelog: harryfei/which-rs@8.0.5...8.0.6

8.0.5

What's Changed

Fix absolute path lookup when cwd is disabled by @weifanglab in harryfei/which-rs#126

New Contributors

@weifanglab made their first contribution in harryfei/which-rs#126

Full Changelog: harryfei/which-rs@8.0.4...8.0.5

Changelog

Sourced from which's changelog.

8.0.6

Bug fix: #128 Resolve relative PATH entries against the user provided CWD when available, rather than the process CWD. Thanks @RSS1102 for your contribution to which!

8.0.5

Bug fix: #126 Do not use current directory for search when provided path is absolute. Thanks @weifanglab for your contribution to which!

Commits

17fde4a prepare patch release
48e49d5 Resolve relative PATH entries against cwd (#128)
7fba0e0 bump version number, update CHANGELOG.md
e28a3bf Fix absolute path lookup when cwd is disabled (#126)
See full diff in compare view

Updates rmcp from 1.7.0 to 2.2.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v2.2.0

Added

[breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

fill missing fully qualified syntax in prompt_handler macros (#866)

Other

align README examples with v2 model API (#928)

rmcp-v2.2.0

Added

reject auth servers lacking S256 PKCE support (#955)

Fixed

pass client conformance suite (#960)

don't respond to cancelled requests (#957)

fail orphaned streamable HTTP responses on reinit (#914)

address 2025-11-25 conformance audit findings (#951)

rmcp-macros-v2.1.0

Added

[breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

fill missing fully qualified syntax in prompt_handler macros (#866)

Other

align README examples with v2 model API (#928)

rmcp-v2.1.0

Added

add SEP-414 trace context meta accessors (#910)

add SEP-2575 meta helpers (#942)

Fixed

(transport) make AsyncRwTransport::receive cancel-safe (#941) (#947)

(auth) preserve refresh_token when refresh response omits it (#949)

block redirect header leaks (#936)

don't respond to unparsable messages (#940)

... (truncated)

Commits

5195776 chore: release v2.2.0 (#953)
6dd7b85 chore(deps): update p256 requirement from 0.13 to 0.14 (#959)
a037935 fix: pass client conformance suite (#960)
dbda50c fix: don't respond to cancelled requests (#957)
45f2f72 fix: fail orphaned streamable HTTP responses on reinit (#914)
95490fa feat: reject auth servers lacking S256 PKCE support (#955)
bdf0c32 fix: address 2025-11-25 conformance audit findings (#951)
8e44af4 chore: release v2.1.0 (#950)
4833ec7 fix(transport): make AsyncRwTransport::receive cancel-safe (#941) (#947)
5837e22 fix(auth): preserve refresh_token when refresh response omits it (#949)
Additional commits viewable in compare view

Updates futures from 0.3.32 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

0.3.33

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

Fix ReadLine's soundness issue regardi...
Description has been truncated

Bumps the prod-deps group with 34 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.7` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde-saphyr](https://github.com/bourumir-wyngs/serde-saphyr) | `0.0.27` | `1.3.0` | | [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.21` | | [minijinja](https://github.com/mitsuhiko/minijinja) | `2.21.0` | `2.24.0` | | dirs | `6.0.0` | `7.0.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [rustls](https://github.com/rustls/rustls) | `0.23.40` | `0.23.45` | | [tokio-rustls](https://github.com/rustls/tokio-rustls) | `0.26.4` | `0.26.5` | | [rcgen](https://github.com/rustls/rcgen) | `0.14.9` | `0.14.10` | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` | | [which](https://github.com/harryfei/which-rs) | `8.0.4` | `8.0.6` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.7.0` | `2.2.0` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` | | [http](https://github.com/hyperium/http) | `1.4.2` | `1.5.0` | | [http-body-util](https://github.com/hyperium/http-body) | `0.1.3` | `0.1.5` | | [hyper](https://github.com/hyperium/hyper) | `1.10.1` | `1.11.1` | | [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.20` | `0.1.21` | | [sse-stream](https://github.com/4t145/sse-stream) | `0.2.3` | `0.3.0` | | [schemars](https://github.com/GREsau/schemars) | `1.2.1` | `1.2.2` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.3` | `1.26.1` | | [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.18` | `0.7.19` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` | | [cron](https://github.com/zslayton/cron) | `0.16.0` | `0.17.0` | | [cron-descriptor](https://github.com/cflockhart/cron-descriptor-rust) | `0.1.1` | `0.1.2` | | [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` | | [owo-colors](https://github.com/owo-colors/owo-colors) | `4.3.0` | `4.4.0` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` | | [arc-swap](https://github.com/vorner/arc-swap) | `1.9.1` | `1.9.2` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.0` | | [fastrand](https://github.com/smol-rs/fastrand) | `2.4.1` | `2.5.0` | | [syn](https://github.com/dtolnay/syn) | `3.0.3` | `3.0.6` | Updates `clap` from 4.6.1 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.7) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde-saphyr` from 0.0.27 to 1.3.0 - [Release notes](https://github.com/bourumir-wyngs/serde-saphyr/releases) - [Changelog](https://github.com/bourumir-wyngs/serde-saphyr/blob/master/CHANGELOG.md) - [Commits](bourumir-wyngs/serde-saphyr@0.0.27...1.3.0) Updates `serde_json` from 1.0.150 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.150...v1.0.151) Updates `thiserror` from 2.0.18 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.21) Updates `minijinja` from 2.21.0 to 2.24.0 - [Release notes](https://github.com/mitsuhiko/minijinja/releases) - [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md) - [Commits](mitsuhiko/minijinja@minijinja-go/v2.21.0...minijinja-go/v2.24.0) Updates `dirs` from 6.0.0 to 7.0.0 Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `rustls` from 0.23.40 to 0.23.45 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.40...v/0.23.45) Updates `tokio-rustls` from 0.26.4 to 0.26.5 - [Release notes](https://github.com/rustls/tokio-rustls/releases) - [Commits](rustls/tokio-rustls@v/0.26.4...v/0.26.5) Updates `rcgen` from 0.14.9 to 0.14.10 - [Release notes](https://github.com/rustls/rcgen/releases) - [Commits](rustls/rcgen@v/0.14.9...v0.14.10) Updates `tokio` from 1.52.3 to 1.53.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1) Updates `which` from 8.0.4 to 8.0.6 - [Release notes](https://github.com/harryfei/which-rs/releases) - [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md) - [Commits](harryfei/which-rs@8.0.4...8.0.6) Updates `rmcp` from 1.7.0 to 2.2.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.7.0...rmcp-v2.2.0) Updates `futures` from 0.3.32 to 0.3.34 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.32...0.3.34) Updates `http` from 1.4.2 to 1.5.0 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.2...v1.5.0) Updates `http-body-util` from 0.1.3 to 0.1.5 - [Release notes](https://github.com/hyperium/http-body/releases) - [Commits](hyperium/http-body@http-body-util-v0.1.3...http-body-util-v0.1.5) Updates `hyper` from 1.10.1 to 1.11.1 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.10.1...v1.11.1) Updates `hyper-util` from 0.1.20 to 0.1.21 - [Release notes](https://github.com/hyperium/hyper-util/releases) - [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper-util@v0.1.20...v0.1.21) Updates `sse-stream` from 0.2.3 to 0.3.0 - [Release notes](https://github.com/4t145/sse-stream/releases) - [Changelog](https://github.com/4t145/sse-stream/blob/master/CHANGELOG.md) - [Commits](4t145/sse-stream@release-0.2.3...release-0.3.0) Updates `schemars` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/GREsau/schemars/releases) - [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md) - [Commits](GREsau/schemars@v1.2.1...v1.2.2) Updates `uuid` from 1.23.3 to 1.26.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.3...v1.26.1) Updates `tokio-util` from 0.7.18 to 0.7.19 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-util-0.7.18...tokio-util-0.7.19) Updates `flate2` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.9...1.1.10) Updates `cron` from 0.16.0 to 0.17.0 - [Release notes](https://github.com/zslayton/cron/releases) - [Commits](https://github.com/zslayton/cron/commits) Updates `cron-descriptor` from 0.1.1 to 0.1.2 - [Commits](https://github.com/cflockhart/cron-descriptor-rust/commits/v0.1.2) Updates `rand` from 0.10.2 to 0.10.3 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.10.2...0.10.3) Updates `base64` from 0.22.1 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1) Updates `owo-colors` from 4.3.0 to 4.4.0 - [Release notes](https://github.com/owo-colors/owo-colors/releases) - [Changelog](https://github.com/owo-colors/owo-colors/blob/main/CHANGELOG.md) - [Commits](owo-colors/owo-colors@v4.3.0...v4.4.0) Updates `anyhow` from 1.0.102 to 1.0.104 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.104) Updates `arc-swap` from 1.9.1 to 1.9.2 - [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md) - [Commits](https://github.com/vorner/arc-swap/commits) Updates `zeroize` from 1.8.2 to 1.9.0 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.0) Updates `fastrand` from 2.4.1 to 2.5.0 - [Release notes](https://github.com/smol-rs/fastrand/releases) - [Changelog](https://github.com/smol-rs/fastrand/blob/master/CHANGELOG.md) - [Commits](smol-rs/fastrand@v2.4.1...v2.5.0) Updates `syn` from 3.0.3 to 3.0.6 - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](dtolnay/syn@3.0.3...3.0.6) --- updated-dependencies: - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: serde-saphyr dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-deps - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: minijinja dependency-version: 2.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: dirs dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-deps - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: rustls dependency-version: 0.23.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: tokio-rustls dependency-version: 0.26.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: rcgen dependency-version: 0.14.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: tokio dependency-version: 1.53.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: which dependency-version: 8.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: rmcp dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-deps - dependency-name: futures dependency-version: 0.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: http dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: http-body-util dependency-version: 0.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: hyper dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: hyper-util dependency-version: 0.1.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: sse-stream dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: schemars dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: uuid dependency-version: 1.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: tokio-util dependency-version: 0.7.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: flate2 dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: cron dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: cron-descriptor dependency-version: 0.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: rand dependency-version: 0.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: owo-colors dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: anyhow dependency-version: 1.0.104 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: arc-swap dependency-version: 1.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: zeroize dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: fastrand dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: syn dependency-version: 3.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 28, 2026

Navigation Menu

chore(deps): bump the prod-deps group across 1 directory with 34 updates - #232

chore(deps): bump the prod-deps group across 1 directory with 34 updates#232
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/prod-deps-f579f06b94

dependabot Bot commented on behalf of github Sep 28, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.6.7

[4.6.7] - 2026-09-14

Features

v4.6.6

[4.6.6] - 2026-08-06

Features

v4.6.5

[4.6.5] - 2026-07-31

Fixes

v4.6.4

[4.6.4] - 2026-07-21

Internal

v4.6.3

[4.6.3] - 2026-07-20

Fixes

v4.6.2

[4.6.2] - 2026-07-15

Fixes

[4.6.7] - 2026-09-14

Features

[4.6.6] - 2026-08-06

Features

[4.6.5] - 2026-07-31

Fixes

[4.6.4] - 2026-07-21

Internal

[4.6.3] - 2026-07-20

Fixes

[4.6.2] - 2026-07-15

Fixes

v1.0.229

1.3.0 Maintenance and performance release

1.2.0 It's all about !!tags this time

1.1.0 Maintenance release

Added

Fixes

1.3.0 Maintenance and performance release

Fixed

1.2.0 Maintenance release

Changed

v1.0.151

2.0.21

2.0.20

2.0.19

2.24.0

2.23.0

2.22.0

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

0.26.5

What's Changed

0.14.10

What's Changed

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

Fixed (unstable)

Documented

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

Changed

Fixed

8.0.6

What's Changed

New Contributors

8.0.5

What's Changed

New Contributors

8.0.6

8.0.5

rmcp-macros-v2.2.0

Added

Fixed

dependabot Bot commented on behalf of github Sep 28, 2026 •

edited

Loading