Skip to content

deps: bump the rust-minor group with 10 updates - #654

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-666f53351e
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-666f53351e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-minor group with 10 updates:

Package From To
tonic 0.14.6 0.14.9
aws-lc-rs 1.18.2 1.19.0
jsonschema 0.60.0 0.60.2
brotli 9.0.0 9.1.1
notify 8.2.0 8.2.1
tonic-health 0.14.6 0.14.9
h2 0.4.19 0.4.20
tonic-prost 0.14.6 0.14.9
smallvec 1.16.3 1.16.4
tonic-prost-build 0.14.6 0.14.9

Updates tonic from 0.14.6 to 0.14.9

Release notes

Sourced from tonic's releases.

tonic-build-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-health-v0.14.9

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-build-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • relax codec Default bounds (#2681)
  • License update (#2749)

tonic-reflection-v0.14.9

Fixed

  • (reflection) preserve custom options in served descriptors (#2730)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • enable missing feature for test build (#2820)
  • License update (#2749)

tonic-types-v0.14.9

Fixed

... (truncated)

Commits
  • 4c0f455 chore: release v0.14.9 (#2979)
  • 4ee0483 fix(server): set a timer on HTTP/1 connections so hyper's header read timeout...
  • a47b608 feat(transport): expose h2 reset stream settings on Endpoint (#2972)
  • 349166e grpc/load_balancing: Add address-checked subchannel helpers to TestEnv. (#2938)
  • 78a8f2d feat(tonic-xds): expose ADS keepalive knob in config (#2973)
  • 954d6d7 xds-client: align ADS keepalive defaults with other gRPC languages (#2970)
  • 4b61ef9 xds-client: add grpc crate transport implementation (#2920)
  • 5413799 chore: release v0.14.8 (#2966)
  • b8282b9 fix(tonic-web): fix dropped trailers in combined streaming call. (#2474)
  • 818532d chore: release v0.14.7 (#2800)
  • Additional commits viewable in compare view

Updates aws-lc-rs from 1.18.2 to 1.19.0

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.19.0

What's Changed

  • Add AES OFB, CFB8, and CFB1 modes by @​lokeswarivejju in aws/aws-lc-rs#1259
    • Adds OperatingMode::OFB, OperatingMode::CFB8, and OperatingMode::CFB1 for AES-128, AES-192, and AES-256 through both the one-shot and streaming cipher APIs.
  • Add an on-demand AWS-LC self-test API by @​Elvrarin in aws/aws-lc-rs#1262
    • Adds aws_lc_rs::try_fips_self_test(), allowing applications to re-run all AWS-LC cryptographic algorithm self-tests without calling the sys crate through unsafe FFI. This does not re-run the module integrity test.
  • Add Keccak-256 digest support behind "unstable" feature flag by @​fabrice102 in aws/aws-lc-rs#1266
    • Adds aws_lc_rs::unstable::digest::KECCAK256 and KECCAK256_OUTPUT_LEN behind the unstable feature for use with the existing digest::digest and digest::Context APIs.
  • Add configurable RSA-PSS salt lengths by @​PaulDance in aws/aws-lc-rs#1267
    • Adds RsaPssSaltLength::{Digest, Max, Custom} and with_pss_salt_length builders on RsaSignatureEncoding and RsaParameters, covering signing and verification for both message and precomputed-digest APIs.
  • Implement Clone for signing key pairs by @​JakeHuneau in aws/aws-lc-rs#1277
    • rsa::KeyPair, EcdsaKeyPair, Ed25519KeyPair, and PqdsaKeyPair can now be cloned directly rather than wrapped in an Arc.
    • Clones share the immutable, reference-counted EVP_PKEY; key material is not duplicated, and a clone remains usable after the original is dropped.

Upstream AWS-LC

  • aws-lc-sys v0.47.0 aligns with AWS-LC v5.12.0 (previously v5.11.0).
  • aws-lc-fips-sys v0.14.4 updates its bundled AWS-LC FIPS 4.2.0 snapshot with recent FIPS 4.x backports.

Build Improvements

  • Lower the minimum system-installed AWS-LC version to 4.2.0 by @​justsmth in aws/aws-lc-rs#1268
    • The default aws-lc-sys system-library path now accepts AWS-LC 4.2.0 or newer, previously 5.7.0, allowing use of a FIPS 4.x system library.
    • Enabling the unstable feature requires AWS-LC 5.7.0 or newer because unstable APIs currently include Keccak-256. Bundled-source builds are unaffected.
  • Share cc compiler detection across builds by @​johncarmack1984 in aws/aws-lc-rs#1273
    • Reuses compiler detection results across the main library build and compiler feature probes, reducing repeated compiler invocations during cold builds.

Issues Being Closed

Other Merged PRs

New Contributors

... (truncated)

Commits

Updates jsonschema from 0.60.0 to 0.60.2

Release notes

Sourced from jsonschema's releases.

[Rust] Release 0.60.2

Fixed

  • Stack overflow when building validators for unevaluated* schemas with $ref cycles across $id resources.

[Ruby] Release 0.60.2

Fixed

  • Stack overflow when building validators for unevaluated* schemas with $ref cycles across $id resources.

[Python] Release 0.60.1

Fixed

  • Wrong results in type: integer, const, enum, uniqueItems, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum for numbers with exponents past one million, such as 1e-2000000.

Performance

  • Validation of numbers with many digits or large exponents in const, enum, uniqueItems, type: integer, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum taking time growing faster than the square of the digit count, instead of at most the square.
  • Validation of numbers with more than ten thousand digits, written or implied by their exponent, taking time linear in their written length instead of quadratic in their digit count.

[Rust] Release 0.60.1

  • Panic on numbers past f64 in const, enum, minimum, maximum, exclusiveMinimum, exclusiveMaximum and type: integer when another crate in the build enables serde_json/arbitrary_precision while the arbitrary-precision feature is off. #1790
  • #[jsonschema::validator] panicking during expansion, or generating code that panics, on schema numbers past f64 when another crate in the build enables serde_json/arbitrary_precision while the arbitrary-precision feature is off. Such numbers are compile errors, as without that serde_json feature. #1790
  • const, enum and uniqueItems treating objects with the same members in a different key order as unequal when another crate in the build enables serde_json/preserve_order. #1791
  • Wrong results in type: integer, const, enum, uniqueItems, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum for numbers with exponents past one million, such as 1e-2000000, with the arbitrary-precision feature.
  • #[jsonschema::validator] rejecting multipleOf with a positive divisor below the smallest f64, such as 1e-400, with the arbitrary-precision feature.

Performance

  • Validation of numbers with many digits or large exponents in const, enum, uniqueItems, type: integer, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum with the arbitrary-precision feature taking time growing faster than the square of the digit count, instead of at most the square.
  • Validation of numbers with more than ten thousand digits, written or implied by their exponent, with the arbitrary-precision feature taking time linear in their written length instead of quadratic in their digit count.

[Ruby] Release 0.60.1

Fixed

  • Wrong results in type: integer, const, enum, uniqueItems, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum for numbers with exponents past one million, such as 1e-2000000.

Performance

  • Validation of numbers with many digits or large exponents in const, enum, uniqueItems, type: integer, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum taking time growing faster than the square of the digit count, instead of at most the square.
  • Validation of numbers with more than ten thousand digits, written or implied by their exponent, taking time linear in their written length instead of quadratic in their digit count.
Changelog

Sourced from jsonschema's changelog.

[0.60.2] - 2026-10-26

Fixed

  • Stack overflow when building validators for unevaluated* schemas with $ref cycles across $id resources.

[0.60.1] - 2026-10-23

Fixed

  • Panic on numbers past f64 in const, enum, minimum, maximum, exclusiveMinimum, exclusiveMaximum and type: integer when another crate in the build enables serde_json/arbitrary_precision while the arbitrary-precision feature is off. #1790
  • #[jsonschema::validator] panicking during expansion, or generating code that panics, on schema numbers past f64 when another crate in the build enables serde_json/arbitrary_precision while the arbitrary-precision feature is off. Such numbers are compile errors, as without that serde_json feature. #1790
  • const, enum and uniqueItems treating objects with the same members in a different key order as unequal when another crate in the build enables serde_json/preserve_order. #1791
  • Wrong results in type: integer, const, enum, uniqueItems, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum for numbers with exponents past one million, such as 1e-2000000, with the arbitrary-precision feature.
  • #[jsonschema::validator] rejecting multipleOf with a positive divisor below the smallest f64, such as 1e-400, with the arbitrary-precision feature.

Performance

  • Validation of numbers with many digits or large exponents in const, enum, uniqueItems, type: integer, multipleOf, minimum, maximum, exclusiveMinimum and exclusiveMaximum with the arbitrary-precision feature taking time growing faster than the square of the digit count, instead of at most the square.
  • Validation of numbers with more than ten thousand digits, written or implied by their exponent, with the arbitrary-precision feature taking time linear in their written length instead of quadratic in their digit count.
Commits
  • 1efccf5 chore(ruby): Release 0.60.2
  • 0b657fa chore(rust): Release 0.60.2
  • 7eb6128 fix: Stack overflow on unevaluated* with $ref cycles across $id resources
  • 26aedd9 build(deps): bump CodSpeedHQ/action from 5.5.0 to 5.6.0
  • e9af61d chore(ruby): Release 0.60.1
  • 8aa123d chore(python): Release 0.60.1
  • 4eb7a64 chore(rust): Release 0.60.1
  • 4e90b95 perf: Single scan for the exponent in the digit budget check
  • f990b96 fix: Wrong results for numbers past the exponent cap with arbitrary-precision
  • c221db8 perf: Super-quadratic conversion of large numbers to fractions with arbitrary...
  • Additional commits viewable in compare view

Updates brotli from 9.0.0 to 9.1.1

Commits
  • a3cb931 release 9.1.1
  • b47cb22 Refactor into a more legible reader
  • e0efe1c BroCatli: hold back trailing header bytes and handle short and chunked streams
  • afa8585 BroCatli: keep both header bytes when an empty stream straddles a byte boundary
  • e951e7e brotli CLI: accept -bare and -bytealign with -catable, exit 1 when rejected
  • c550341 Fix index out of bounds under the disallow_large_window_size feature
  • 73e6947 Release 9.1.0
  • 73766fc Forward portable float from the C FFI crate
  • 6518a4e fix: correct BroCatli empty-stream concatenation for small windows
  • See full diff in compare view

Updates notify from 8.2.0 to 8.2.1

Release notes

Sourced from notify's releases.

notify v8.2.1

notify 8.2.1 (2026-10-25)

  • CHANGE: raise MSRV from 1.77 to 1.85 #719 #723 breaking
  • CHANGE: replace fsevent-sys with objc2-core-foundation and objc2-core-services on macOS, preserving the fsevent-sys feature for compatibility #726
  • CHANGE: update windows-sys to 0.61 #1045
  • FIX: prevent FsEventWatcher from crashing when unwatching an empty path #718
  • FIX: clean up deleted paths in INotifyWatcher even when the kernel has already removed their watch descriptors #720
  • FIX: propagate FSEvents stream startup errors from watch, unwatch, and PathsMut::commit #733
  • MISC: expand watcher backend tests and fix flaky polling tests #728 #732 #734

#718: notify-rs/notify#718 #719: notify-rs/notify#719 #720: notify-rs/notify#720 #723: notify-rs/notify#723 #726: notify-rs/notify#726 #728: notify-rs/notify#728 #732: notify-rs/notify#732 #733: notify-rs/notify#733 #734: notify-rs/notify#734 #1045: notify-rs/notify#1045

Changelog

Sourced from notify's changelog.

notify 8.2.1 (2026-10-25)

  • CHANGE: raise MSRV from 1.77 to 1.85 #719 #723 breaking
  • CHANGE: replace fsevent-sys with objc2-core-foundation and objc2-core-services on macOS, preserving the fsevent-sys feature for compatibility #726
  • CHANGE: update windows-sys to 0.61 #1045
  • FIX: prevent FsEventWatcher from crashing when unwatching an empty path #718
  • FIX: clean up deleted paths in INotifyWatcher even when the kernel has already removed their watch descriptors #720
  • FIX: propagate FSEvents stream startup errors from watch, unwatch, and PathsMut::commit #733
  • MISC: expand watcher backend tests and fix flaky polling tests #728 #732 #734

#718: notify-rs/notify#718 #719: notify-rs/notify#719 #720: notify-rs/notify#720 #723: notify-rs/notify#723 #726: notify-rs/notify#726 #728: notify-rs/notify#728 #732: notify-rs/notify#732 #733: notify-rs/notify#733 #734: notify-rs/notify#734 #1045: notify-rs/notify#1045

Commits

Updates tonic-health from 0.14.6 to 0.14.9

Release notes

Sourced from tonic-health's releases.

tonic-health-v0.14.9

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-health-v0.14.8

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-health-v0.14.7

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)
Commits
  • 4c0f455 chore: release v0.14.9 (#2979)
  • 4ee0483 fix(server): set a timer on HTTP/1 connections so hyper's header read timeout...
  • a47b608 feat(transport): expose h2 reset stream settings on Endpoint (#2972)
  • 349166e grpc/load_balancing: Add address-checked subchannel helpers to TestEnv. (#2938)
  • 78a8f2d feat(tonic-xds): expose ADS keepalive knob in config (#2973)
  • 954d6d7 xds-client: align ADS keepalive defaults with other gRPC languages (#2970)
  • 4b61ef9 xds-client: add grpc crate transport implementation (#2920)
  • 5413799 chore: release v0.14.8 (#2966)
  • b8282b9 fix(tonic-web): fix dropped trailers in combined streaming call. (#2474)
  • 818532d chore: release v0.14.7 (#2800)
  • Additional commits viewable in compare view

Updates h2 from 0.4.19 to 0.4.20

Release notes

Sourced from h2's releases.

v0.4.20

What's Changed

New Contributors

Full Changelog: hyperium/h2@v0.4.19...v0.4.20

Changelog

Sourced from h2's changelog.

0.4.20 (October 6, 2026)

  • Fix counting reserved push promises against stream concurrency limits.
  • Fix automatic small DATA frame budget to update when the connection window changes at runtime.
  • Fix rejecting duplicate content-length headers with different values.
  • Fix counting refused streams towards the local reset limit.
  • Fix client to reject responses without a :status pseudo header.
  • Fix rare race condition during shutdown.
  • Fix rejecting GOAWAY frames with a non-zero stream identifier.
  • Optimize HPACK Huffman encoding and decoding.
  • Reduce size of HPACK Huffman encoding tables.
  • Optimize receive performance by reducing send buffer locking.
Commits
  • b0e8908 v0.4.20
  • 5b17a0e perf: remove need to lock for pending_refusal for every recv call (#969)
  • a26b427 fix: count reserved push promises against stream concurrency (#968)
  • 96c15eb fix: update automatic DATA frame budget at runtime (#965)
  • d96d347 fix: reject duplicate content-lengths that differ (#967)
  • 8e9655f fix: count refused streams on local reset abuse counter (#966)
  • 3c5f61c fix(client): reject responses without :status (#959)
  • e43124b fix: rare race during shutdown (#956)
  • 20cfc37 style: apply clippy (#955)
  • d785c5f chore: make CI have a single required job (#954)
  • Additional commits viewable in compare view

Updates tonic-prost from 0.14.6 to 0.14.9

Release notes

Sourced from tonic-prost's releases.

tonic-prost-build-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • relax codec Default bounds (#2681)
  • License update (#2749)

tonic-prost-build-v0.14.8

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-v0.14.8

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • relax codec Default bounds (#2681)
  • License update (#2749)

tonic-prost-build-v0.14.7

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)

... (truncated)

Commits
  • 4c0f455 chore: release v0.14.9 (#2979)
  • 4ee0483 fix(server): set a timer on HTTP/1 connections so hyper's header read timeout...
  • a47b608 feat(transport): expose h2 reset stream settings on Endpoint (#2972)
  • 349166e grpc/load_balancing: Add address-checked subchannel helpers to TestEnv. (#2938)
  • 78a8f2d feat(tonic-xds): expose ADS keepalive knob in config (#2973)
  • 954d6d7 xds-client: align ADS keepalive defaults with other gRPC languages (#2970)
  • 4b61ef9 xds-client: add grpc crate transport implementation (#2920)
  • 5413799 chore: release v0.14.8 (#2966)
  • b8282b9 fix(tonic-web): fix dropped trailers in combined streaming call. (#2474)
  • 818532d chore: release v0.14.7 (#2800)
  • Additional commits viewable in compare view

Updates smallvec from 1.16.3 to 1.16.4

Release notes

Sourced from smallvec's releases.

v1.16.4

What's Changed

Full Changelog: servo/rust-smallvec@v1.16.3...v1.16.4

Commits

Updates tonic-prost-build from 0.14.6 to 0.14.9

Release notes

Sourced from tonic-prost-build's releases.

tonic-prost-build-v0.14.9

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-build-v0.14.8

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)

tonic-prost-build-v0.14.7

Fixed

  • fix/silence all clippy warnings (#2807)

Other

  • fix changelog duplicate and update repository URLs (#2943)
  • License update (#2749)
Commits
  • 4c0f455 chore: release v0.14.9 (#2979)
  • 4ee0483 fix(server): set a timer on HTTP/1 connections so hyper's header read timeout...
  • a47b608 feat(transport): expose h2 reset stream settings on Endpoint (#2972)
  • 349166e grpc/load_balancing: Add address-checked subchannel helpers to TestEnv. (#2938)
  • 78a8f2d feat(tonic-xds): expose ADS keepalive knob in config (#2973)
  • 954d6d7 xds-client: align ADS keepalive defaults with other gRPC languages (#2970)
  • 4b61ef9 xds-client: add grpc crate transport implementation (#2920)
  • 5413799 chore: release v0.14.8 (#2966)
  • b8282b9 fix(tonic-web): fix dropped trailers in combined streaming call. (#2474)
  • 818532d chore: release v0.14.7 (#2800)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-minor group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [tonic](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` |
| [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.2` | `1.19.0` |
| [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.60.0` | `0.60.2` |
| [brotli](https://github.com/dropbox/rust-brotli) | `9.0.0` | `9.1.1` |
| [notify](https://github.com/notify-rs/notify) | `8.2.0` | `8.2.1` |
| [tonic-health](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` |
| [h2](https://github.com/hyperium/h2) | `0.4.19` | `0.4.20` |
| [tonic-prost](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.16.3` | `1.16.4` |
| [tonic-prost-build](https://github.com/grpc/grpc-rust) | `0.14.6` | `0.14.9` |


Updates `tonic` from 0.14.6 to 0.14.9
- [Release notes](https://github.com/grpc/grpc-rust/releases)
- [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@tonic-v0.14.6...tonic-v0.14.9)

Updates `aws-lc-rs` from 1.18.2 to 1.19.0
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@v1.18.2...v1.19.0)

Updates `jsonschema` from 0.60.0 to 0.60.2
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@ruby-v0.60.0...ruby-v0.60.2)

Updates `brotli` from 9.0.0 to 9.1.1
- [Release notes](https://github.com/dropbox/rust-brotli/releases)
- [Commits](dropbox/rust-brotli@9.0.0...9.1.1)

Updates `notify` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/notify-rs/notify/releases)
- [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.1/CHANGELOG.md)
- [Commits](notify-rs/notify@notify-8.2.0...notify-8.2.1)

Updates `tonic-health` from 0.14.6 to 0.14.9
- [Release notes](https://github.com/grpc/grpc-rust/releases)
- [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@tonic-health-v0.14.6...tonic-health-v0.14.9)

Updates `h2` from 0.4.19 to 0.4.20
- [Release notes](https://github.com/hyperium/h2/releases)
- [Changelog](https://github.com/hyperium/h2/blob/master/CHANGELOG.md)
- [Commits](hyperium/h2@v0.4.19...v0.4.20)

Updates `tonic-prost` from 0.14.6 to 0.14.9
- [Release notes](https://github.com/grpc/grpc-rust/releases)
- [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@tonic-prost-v0.14.6...tonic-prost-v0.14.9)

Updates `smallvec` from 1.16.3 to 1.16.4
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](servo/rust-smallvec@v1.16.3...v1.16.4)

Updates `tonic-prost-build` from 0.14.6 to 0.14.9
- [Release notes](https://github.com/grpc/grpc-rust/releases)
- [Changelog](https://github.com/grpc/grpc-rust/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@tonic-prost-build-v0.14.6...tonic-prost-build-v0.14.9)

---
updated-dependencies:
- dependency-name: tonic
  dependency-version: 0.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: aws-lc-rs
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor
- dependency-name: jsonschema
  dependency-version: 0.60.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: brotli
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor
- dependency-name: notify
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: tonic-health
  dependency-version: 0.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: h2
  dependency-version: 0.4.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: tonic-prost
  dependency-version: 0.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: smallvec
  dependency-version: 1.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
- dependency-name: tonic-prost-build
  dependency-version: 0.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency updates rust Pull requests that update rust code labels Nov 2, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants