fix(deps): update cargo by renovate[bot] · Pull Request #65 · ichwilldich/sagittarius

renovate · 2026-01-05T02:12:49Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
async-trait	dependencies	patch	`0.1.89` → `0.1.91`
axum	dependencies	patch	`0.8.8` → `0.8.9`
axum-extra	dependencies	patch	`0.12.5` → `0.12.6`
base64	dependencies	minor	`0.22.1` → `0.23.0`
centaurus	dependencies	minor	`0.4.4` → `0.16.0`
chrono	dependencies	patch	`0.4.42` → `0.4.45`
futures (source)	dependencies	patch	`0.3.31` → `0.3.33`
hmac	dependencies	minor	`0.12.1` → `0.13.0`
http	dependencies	minor	`1.4.0` → `1.5.0`
hyper-util (source)	dependencies	patch	`0.1.19` → `0.1.20`
jsonwebtoken	dependencies	minor	`10.3.0` → `10.4.0`
memchr	dependencies	minor	`2.7.6` → `2.8.3`
reqwest	dependencies	minor	`0.12.23` → `0.13.0`
sea-orm (source)	workspace.dependencies	patch	`1.1.19` → `1.1.20`
sea-orm-migration (source)	dependencies	patch	`1.1.19` → `1.1.20`
serde (source)	workspace.dependencies	patch	`1.0.228` → `1.0.229`
serde-enum-str	dependencies	minor	`0.4.0` → `0.5.0`
serde_json	dependencies	patch	`1.0.148` → `1.0.151`
sha2	dependencies	minor	`0.10.9` → `0.11.0`
time (source)	dependencies	patch	`0.3.47` → `0.3.55`
tokio (source)	dependencies	minor	`1.48.0` → `1.53.1`
tower	dependencies	patch	`0.5.2` → `0.5.3`
tower-http	dependencies	minor	`0.6.6` → `0.7.0`
url	dependencies	patch	`2.5.7` → `2.5.8`
uuid	dependencies	minor	`1.19.0` → `1.24.0`

Release Notes

dtolnay/async-trait (async-trait)

`v0.1.91`

Compare Source

`v0.1.90`

Compare Source

Update to syn 3

tokio-rs/axum (axum)

`v0.8.9`

Compare Source

added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)
changed: Update minimum rust version to 1.80 (#3620)
fixed: Set connect endpoint on correct field in MethodRouter (#3656)
fixed: Return specific error message when multipart body limit is exceeded (#3611)

marshallpierce/rust-base64 (base64)

`v0.23.0`

Compare Source

Added more consts for preconfigured configs and engines
Make DecodeError::InvalidLastSymbol more clear by including the decoded value
Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
detection and work in no_std. The engines support the standard and URL-safe alphabets.
Update MSRV to 1.71.0
Add support for custom padding symbols

Profiidev/centaurus (centaurus)

`v0.16.3`

Compare Source

🐛 Bug Fixes

(deps) Update all non-major dependencies (#151)

⚙️ Miscellaneous Tasks

Aws correct feature flags

`v0.16.2`

Compare Source

🚀 Features

Allow for oidc fast track

`v0.16.1`

Compare Source

🚀 Features

Added oidc redirect param for after login redirect

🐛 Bug Fixes

Sanatize redirect to url

🧪 Testing

Added test for oidc redirect param

`v0.16.0`

Compare Source

🚀 Features

Made auth generic over token check
Allow custom claims in jwt claims

🐛 Bug Fixes

Use uuid v7 for db
Added claims param to auth impl

🧪 Testing

Added generic auth tests

`v0.15.1`

Compare Source

🐛 Bug Fixes

Local storage dirs not created when path contains /

`v0.15.0`

Compare Source

🚀 Features

Match oidc user by subject and not email
Sync email and username on oidc login

🐛 Bug Fixes

Always allow admins to change email
Unused param

🧪 Testing

More test coverage for oidc matching
Added more tests for oidc data sync

⚙️ Miscellaneous Tasks

Fix code style issues with rustfmt

`v0.14.6`

Compare Source

🐛 Bug Fixes

Clippy lints in tests

🧪 Testing

Added baseic tests
Added endpoint tests
Added more test coverage

⚙️ Miscellaneous Tasks

Fix code style issues with rustfmt

`v0.14.5`

Compare Source

🐛 Bug Fixes

Mail settings

`v0.14.4`

Compare Source

🐛 Bug Fixes

Mail endpoint permission
Avatar content size

`v0.14.3`

Compare Source

🐛 Bug Fixes

Hide secrets from user

`v0.14.2`

Compare Source

🐛 Bug Fixes

Cors allow
Cors expose headers

`v0.14.1`

Compare Source

🐛 Bug Fixes

Oidc callback error handling
Pass token errors to frontend

`v0.14.0`

Compare Source

🚀 Features

Added pkce to oidc endpoints
Added setting to toggle oidc pkce

`v0.13.1`

Compare Source

🐛 Bug Fixes

Oidc group sync error at setup
Sso instant redirect env loading

`v0.13.0`

Compare Source

🚀 Features

Added is oidc user to user endpoints
Added oidc group sync
Added image sync to oidc
Send permissions update to user on oidc login
Added oidc convert endpoint
Added oidc settings endpoints to setup
Complete setup on initial oidc login
Added site url to oidc setup endpoint
Added env var for skipping setup with oidc
Added option to change admin group name

🐛 Bug Fixes

Feature gate oidc image sync
Image sync unused
Added serde default for new fields
Disable group and image sync per default
No password reset for oidc users
Send update for user convertion
Dont save env config to db
Env default values
Enable sso user creation on setup skip
Add first oidc user to admin group on setup skip

🚜 Refactor

Improved oidc state locking
Made image sync async to not block login
Make all config fields optional
Made oidc init async

`v0.12.2`

Compare Source

🐛 Bug Fixes

Oidc scope as string instead of vec

`v0.12.1`

Compare Source

🚀 Features

Added init for stderr logging
Added method for db connection without migration

🚜 Refactor

Log non fatal errors to debug instead of warning

`v0.12.0`

Compare Source

🚀 Features

Allow chaning name and users of admin group
Added settings loading from env
Moved user avatar to seperate table
Added new user avatar endpoints
Added oidc flag to user
Added field to flag oidc users
Added file storage
Added user change email endpoint
Added self email change endpoints
Added email state init

🐛 Bug Fixes

Smtp enabled default
Correct config loading

🚜 Refactor

Moved user avatar to seperate table
Remove self avatar endpoint

⚙️ Miscellaneous Tasks

Fix code style issues with rustfmt

`v0.11.2`

Compare Source

🚀 Features

Added more options for implementing permissions checks
Added migration from old migrations to centaurus migrations

🐛 Bug Fixes

Migration skip
Migration names
Delete old avatar migration
Move delete migration to separate stmt

`v0.11.1`

Compare Source

🐛 Bug Fixes

Metrics flag

`v0.11.0`

Compare Source

🐛 Bug Fixes

Metrics deps

`v0.10.0`

Compare Source

🚀 Features

Added http3 feature

🐛 Bug Fixes

Image feature flags
File names
Update message derive

🚜 Refactor

Migration numbering
Db feature flags
Backend req + middleware
Endpoints
Auth feature flags
Deps order
Use error report

⚙️ Miscellaneous Tasks

Fix code style issues with clippy
Added feature test
Fix code style issues with rustfmt

`v0.9.1`

Compare Source

🐛 Bug Fixes

Memory usage

`v0.9.0`

Compare Source

🐛 Bug Fixes

Added avatar to detailed user info endpoint

`v0.8.0`

Compare Source

🚀 Features

Added option to serve metrics over a different port

🐛 Bug Fixes

Feature flags
Wrong derive
Metrics middleware panic
Metrics extraction

⚙️ Miscellaneous Tasks

Enabled renovate lock file maintenance

`v0.7.0`

Compare Source

🐛 Bug Fixes

Rename user info to prevent collision

`v0.6.0`

Compare Source

🚀 Features

Added version middleware macro
Added http proxy
Added virtual host rewrite and gravatar
Added db invalid jwt, key and settings table
Added auth
Added user and group table
Added auth handling logic
Added mail endpoints
Added settings
Added setup table
Added setup endpoints
Added group endpoints
Added user endpoints
Added if not exists to index creation
Added update message derive macro

🐛 Bug Fixes

Naming
Wrong item paths
Better endpoint exposure
User endpoint pub
Feature inconsistencies
Version header location

🚜 Refactor

Use trait for proxy
Backend file structure

⚙️ Miscellaneous Tasks

Updated deps

`v0.5.0`

Compare Source

🚀 Features

Implement operation output for error report
Added aide derive to db
Added aide derive to all state
Added rate limiter
Added config trait
Use api router when using openapi
Better support for other service for run app
Added openapi json route
Added swagger docs
Added config derive macro

🐛 Bug Fixes

Aide trait impl
Router build lifetime

⚙️ Miscellaneous Tasks

Update aide

`v0.4.13`

Compare Source

🐛 Bug Fixes

Errors not working without http feature

`v0.4.12`

Compare Source

🐛 Bug Fixes

Impl error report macro not working because of http feature

`v0.4.11`

Compare Source

🚀 Features

Added separate serde json features

`v0.4.10`

Compare Source

🚀 Features

Only pass log level to logging init

🐛 Bug Fixes

Errors without http status

`v0.4.9`

Compare Source

🚀 Features

Added run app with connect info

`v0.4.8`

Compare Source

🚀 Features

Added url error impl

chronotope/chrono (chrono)

`v0.4.45`: 0.4.45

Compare Source

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in #1787
tz_data: fix tzdata locations on Android by @caruschalalamove in #1789

`v0.4.44`: 0.4.44

Compare Source

What's Changed

docs: match MSRV with Cargo.toml contents by @coryan in #1772
Add track_caller to non-deprecated functions by @svix-jplatte in #1774

`v0.4.43`: 0.4.43

Compare Source

What's Changed

Install extra components for lint workflow by @djc in #1741
Upgrade windows-bindgen to 0.64 by @djc in #1742
Improve windows-bindgen setup by @djc in #1744
Drop stabilized feature doc_auto_cfg by @djc in #1745
Faster RFC 3339 parsing by @djc in #1748
Update windows-bindgen requirement from 0.64 to 0.65 by @dependabot[bot] in #1751
add NaiveDate::abs_diff by @Kinrany in #1752
Add feature gated defmt support. by @pebender in #1747
Drop deny lints, eager Debug impls are a mixed blessing by @djc in #1753
chore: minor improvement for docs by @spuradage in #1756
Added doctest for the NaiveDate years_since function by @LucasBou in #1755
Prepare 0.4.43 by @djc in #1765
Update copyright year to 2026 in LICENSE.txt by @taozui472 in #1767

rust-lang/futures-rs (futures)

`v0.3.33`

Compare Source

Fix ReadLine's soundness issue regarding to exception safety. (#3020)
Fix unsound Send impl for IterPinRef and Iter. (#3003)
Fix stacked borrows violation in compat01as03 implementation. (#3012)
Fix memory leak in FuturesUnordered::IntoIter. (#3005)
Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
Re-export alloc::task::Wake. (#3010)
Update spin to 0.12. (#3014)

`v0.3.32`

Compare Source

Bump MSRV of utility crates to 1.71. (#2989)
Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#2925)
Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#2929)
Add FuturesOrdered::clear (#2927)
Add mpsc::*Receiver::recv (#2947)
Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#2944)
Implement FusedStream for sink::With (#2948)
Add no_std support for shared (#2868)
Make Mutex::new() const (#2956)
Add #[clippy::has_significant_drop] to guards (#2967)
Remove dependency to pin-utils (#2929)
Remove dependency on num_cpus (#2946)
Performance improvements (#2983)
Documentation improvements (#2925, #2926, #2940, #2971)

RustCrypto/MACs (hmac)

`v0.13.0`

Compare Source

hyperium/http (http)

`v1.5.0`

Compare Source

Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
Fix uri::PathAndQuery parsing to enforce URI max length.

`v1.4.2`

Compare Source

Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.
Fix Uri to properly reject DEL characters.

`v1.4.1`

Compare Source

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.
Fix Extend for HeaderMap to clamp max size hint and not overflow.
Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.
Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

hyperium/hyper-util (hyper-util)

`v0.1.20`

Compare Source

Fix proxy::Matcher to properly match domains regardless of casing
Fix system proxy matcher dependency on macOS when used in sandboxed environements.
Increased MSRV to 1.64.

Keats/jsonwebtoken (jsonwebtoken)

`v10.4.0`

Compare Source

Fix incorrect encoding for Ed25519 JWK thumbprints
Make Algorithm.family public and add Validation.new_for_family
EncodingKey and DecodingKey are now partially zeroized on drop (the intermediate PemEncodedKey isn't so far)

BurntSushi/memchr (memchr)

seanmonstar/reqwest (reqwest)

`v0.13.4`

Compare Source

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
Add ClientBuilder::http2_keep_alive_* options for the blocking client.
Add TLS 1.3 support when using native-tls backend.
Fix redirect handling to strip sensitive headers when the scheme changes.
Fix HTTP/3 happy-eyeball connection creation.
Upgrade hickory-resolver to 0.26.

`v0.13.3`

Compare Source

Fix CertificateRevocationList parsing of PEM values.
Fix logging in resolver to only show host, not full URL.
Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
Fix HTTP/3 to handle STOP_SENDING as not an error.
Fix HTTP/3 pool to remove timed out QUIC connections.
Fix HTTP/3 connection establishment picking IPv4 and IPv6.
Upgrade rustls-platform-verifier.
(wasm) Only use wasm-bindgen on unknown-* targets.

`v0.13.2`

Compare Source

Fix HTTP/2 and native-tls ALPN feature combinations.
Fix HTTP/3 to send h3 ALPN.
(wasm) fix RequestBuilder::json() from override previously set content-type.

`v0.13.1`

Compare Source

Fixes compiling with rustls on Android targets.

`v0.13.0`

Compare Source

Breaking changes:
- rustls is now the default TLS backend, instead of native-tls.
- rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
- rustls-tls has been renamed to rustls.
- rustls roots features removed, rustls-platform-verifier is used by default.
  - To use different roots, call tls_certs_only(your_roots).
- native-tls now includes ALPN. To disable, use native-tls-no-alpn.
- query and form are now crate features, disabled by default.
- Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
- For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
Fix sending Proxy-Authorization if only username is configured.
Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
Refactor internal decompression handling to use tower-http.

v0.12.24

Refactor cookie handling to an internal middleware.
Refactor internal random generator.
Refactor base64 encoding to reduce a copy.
Documentation updates.

v0.12.23

Add ClientBuilder::unix_socket(path) option that will force all requests over that Unix Domain Socket.
Add ClientBuilder::retry(policy) and reqwest::retry::Builder to configure automatic retries.
Add ClientBuilder::dns_resolver2() with more ergonomic argument bounds, allowing more resolver implementations.
Add http3_* options to blocking::ClientBuilder.
Fix default TCP timeout values to enabled and faster.
Fix SOCKS proxies to default to port 1080
(wasm) Add cache methods to RequestBuilder.

v0.12.22

Fix socks proxies when resolving IPv6 destinations.

v0.12.21

Fix socks proxy to use socks4a:// instead of socks4h://.
Fix Error::is_timeout() to check for hyper and IO timeouts too.
Fix request Error to again include URLs when possible.
Fix socks connect error to include more context.
(wasm) implement Default for Body.

v0.12.20

Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
Fix proxy headers only using the first matched proxy.
(wasm) Fix re-adding Error::is_status().

v0.12.19

Fix redirect that changes the method to GET should remove payload headers.
Fix redirect to only check the next scheme if the policy action is to follow.
(wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

Fix compilation when socks enabled without TLS.

v0.12.17

Fix compilation on macOS.

v0.12.16

Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
Add Proxy::headers() to add extra headers that should be sent to a proxy.
Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
Fix HTTP/3 to support streaming request bodies.
(wasm) Fix null bodies when calling Response::bytes_stream().

v0.12.15

Fix Windows to support both ProxyOverride and NO_PROXY.
Fix http3 to support streaming response bodies.
Fix http3 dependency from public API misuse.

v0.12.14

Fix missing fetch_mode_no_cors(), marking as deprecated when not on WASM.

v0.12.13

Add Form::into_reader() for blocking multipart forms.
Add Form::into_stream() for async multipart forms.
Add support for SOCKS4a proxies.
Fix decoding responses with multiple zstd frames.
Fix RequestBuilder::form() from overwriting a previously set Content-Type header, like the other builder methods.
Fix cloning of request timeout in blocking::Request.
Fix http3 synchronization of connection creation, reducing unneccesary extra connections.
Fix Windows system proxy to use ProxyOverride as a NO_PROXY value.
Fix blocking read to correctly reserve and zero read buffer.
(wasm) Add support for request timeouts.
(wasm) Fix Error::is_timeout() to return true when from a request timeout.

v0.12.12

(wasm) Fix compilation by not compiler tokio/time on WASM.

v0.12.11

Fix decompression returning an error when HTTP/2 ends with an empty data frame.

v0.12.10

Add ClientBuilder::connector_layer() to allow customizing the connector stack.
Add ClientBuilder::http2_max_header_list_size() option.
Fix propagating body size hint (content-length) information when wrapping bodies.
Fix decompression of chunked bodies so the connections can be reused more often.

v0.12.9

Add tls::CertificateRevocationLists support.
Add crate features to enable webpki roots without selecting a rustls provider.
Fix connection_verbose() to output read logs.
Fix multipart::Part::file() to automatically include content-length.
Fix proxy to internally no longer cache system proxy settings.

v0.12.8

Add support for SOCKS4 proxies.
Add multipart::Form::file() method for adding files easily.
Add Body::wrap() to wrap any http_body::Body type.
Fix the pool configuration to use a timer to remove expired connections.

v0.12.7

Revert adding impl Service<http::Request<_>> for Client.

v0.12.6

Add support for danger_accept_invalid_hostnames for rustls.
Add impl Service<http::Request<Body>> for Client and &'_ Client.
Add support for !Sync bodies in Body::wrap_stream().
Enable happy eyeballs when hickory-dns is used.
Fix Proxy so that HTTP(S)_PROXY values take precedence over ALL_PROXY.
Fix blocking::RequestBuilder::header() from unsetting sensitive on passed header values.

v0.12.5

Add blocking::ClientBuilder::dns_resolver() method to change DNS resolver in blocking client.
Add http3 feature back, still requiring reqwest_unstable.
Add rustls-tls-no-provider Cargo feature to use rustls without a crypto provider.
Fix Accept-Encoding header combinations.
Fix http3 resolving IPv6 addresses.
Internal: upgrade to rustls 0.23.

v0.12.4

Add zstd support, enabled with zstd Cargo feature.
Add ClientBuilder::read_timeout(Duration), which applies the duration for each read operation. The timeout resets after a successful read.

v0.12.3

Add FromStr for dns::Name.
Add ClientBuilder::built_in_webpki_certs(bool) to enable them separately.
Add ClientBuilder::built_in_native_certs(bool) to enable them separately.
Fix sending content-length: 0 for GET requests.
Fix response body content_length() to return value when timeout is configured.
Fix ClientBuilder::resolve() to use lowercase domain names.

v0.12.2

Fix missing ALPN when connecting to socks5 proxy with rustls.
Fix TLS version limits with rustls.
Fix not detected ALPN h2 from server with native-tls.

v0.12.1

Fix ClientBuilder::interface() when no TLS is enabled.
Fix TlsInfo::peer_certificate() being truncated with rustls.
Fix panic if http2 feature disabled but TLS negotiated h2 in ALPN.
Fix Display for Error to not include its source error.

SeaQL/sea-orm (sea-orm)

`v1.1.20`

Compare Source

Enhancements

Add exists method to PaginatorTrait https://redirect.github.com/SeaQL/sea-orm/discussions/730

Bug Fixes

Fix conversion of TIMESTAMPTZ values to proxy row in Postgres driver #3005
Fix no-default-features compile errors #3000

serde-rs/serde (serde)

`v1.0.229`

Compare Source

Update to syn 3

serde-rs/json (serde_json)

`v1.0.151`

Compare Source

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

`v1.0.150`

Compare Source

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

`v1.0.149`

Compare Source

Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @b41sh)

RustCrypto/hashes (sha2)

`v0.11.0`

Compare Source

time-rs/time (time)

`v0.3.55`

Compare Source

Fixed

Avoid underflow in DateIter::nth, ensuring correct behavior.
Avoid overflow when deserializing timestamps.
Handle out-of-bounds data when deserializing.
Don't assume that the format being deserialized was generated by the serializer; this previously
led to some valid values being parsed incorrectly and others being rejected.
No longer silence errors when deserializing UtcOffset.
OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly
return None for all out-of-range values, rather than unexpectedly panicking in some situations.
OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None
for all out-of-range values, rather than unexpectedly panicking in some situations.

`v0.3.54`

Compare Source

Added

PrimitiveDateTime has been renamed to PlainDateTime.
Duration has been renamed to SignedDuration.
Iteration is now possible over Date, Month, and Weekday. Relevant iterator methods have been
overridden to ensure maximum performance.

For both PlainDateTime and SignedDuration, a non-deprecated type alias has been added for
backwards compatibility. The new names should be preferred.

Changed

The associated metadata type (for powerfmt implementations) for various types has been changed
to () and made public. This guarantees that no additional metadata will be present.

Performance

More gains when parsing RFC 2822.

`v0.3.53`

Compare Source

There are no publicly-facing changes in this release. It solely works around the cookie crate
relying on an implementation detail of time that was never part of the public API (and thus
subject to semver guarantees). The internal API has been reverted to the extent necessary for
cookie to compile. This measure is temporary; the internal change will be re-applied in an
yet-to-be-determined future release.

`v0.3.52`

Compare Source

Fixed

Subsecond values in the time! macro are parsed using the textual representation, ensuring
accuracy. Previously, they were parsed using the floating point representation, which could result
in a loss of precision and even invalid values.
The date! macro could previously create an invalid value that would then panic at compile time.
The macro now emits a proper error instead.
When parsing an invalid format description, an edge case would inadvertently panic. This now
returns an error as intended.

Added

Support default values when parsing

`v0.3.51`

Compare Source

Fixed

time compiles with macros enabled. This version is otherwise identical to v0.3.50.

`v0.3.50`

Compare Source

Fixed

time compiles with macros enabled. This version is otherwise identical to v0.3.50.

`v0.3.49`

Compare Source

Fixed

Due to a long-standing bug in the Rust compiler, v0.3.48 caused a number of crates to stop
compiling. A patch has been added that avoids triggering the bug.

`v0.3.48`

Compare Source

Security

The number of digits parsed by [subsecond digits:1+] is capped at 32 to avoid parsing unbounded
user input. Digits after the 9^th have no semantic meaning.
Explicitly specify #[repr] for Weekday. The value of the variants is relied upon in multiple
locations for soundness. The practical effect of this change is nothing, as Rust has always mapped
C-like enums to 0..N in memory.

Compatibility

Non-UTF-8 formatting and parsing is deprecated without replacement. It is recommended to only
format and parse valid UTF-8.
format_description::parse is deprecated. It is recommended to use
format_description::parse_borrowed::<3> or format_description::parse_owned::<3>.

Added

All types in the unit module have a generic parameter, though this is currently not used for
much. Usage will be expanded in the future.
Comparisons between types in the unit module and the generic Unit type are permitted.
Support for rand 0.10
Version 3 format descriptions
- Only UTF-8 is supported. As a side effect of this, [ignore] requires that the remaining input
  not begin mid-codepoint.
- Representation is deliberately opaque to allow for arbitrary changes going forward.
- format:false is supported on [optional] components. This is not possible in version 1 and
  version 2 format descriptions due to API compatibility.
- The time::serde::format_description! macro uses a new, clearer syntax for version 3.
  - time::serde::format_description!(mod foo [Date] = "[year]-[month]-[day]");
  - Unlike version 1 and version 2 format descriptions, the type is not automatically brought into
    scope. You must import it yourself.
- Nonsensical combinations of modifiers are rejected. For example, you cannot specify
  case-sensitivity when parsing a numerical month.
- [year] defaults to range:standard
- Components and modifiers are case sensitive (and always lowercase).

Changed

The convert module has been renamed to unit.

Fixed

Macro hygiene has been improved by specifying re-exports.
Fix handling of T in ISO 8601
Support parsing the full range of UTC offset hours
Version 1 nested format descriptions may now start with a component. Previously, a lexer bug
unintentionally prohibited this.
Error when ISO week date overflows the max year. This would previously panic.
Error when padding is specified in strftime format descriptions but the component is not. This
would previously panic.

Performance

Huge performance gains across multiple areas, including:

optimizing equality checks for Duration
optimizing Display impls for all major types
optimizing the formatting of components and well-known formats
precomputing metadata when formatting, reducing allocations
adding fast path for typical RFC 2822 usage
optimizing strftime parsing
refactoring format description parsing

Depending on the area, gains range from 3× to even 11×.

tokio-rs/tokio (tokio)

`v1.53.1`: Tokio v1.53.1

Compare Source

1.53.1 (July 20th, 2026)

Fixed

signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

time: fix alt timer cancellation and insertion race (#8252)

Documented

runtime: remove dead link definition in Runtime::block_on (#8301)

`v1.53.0`: Tokio v1.53.0

Compare Source

1.53.0 (July 17th, 2026)

Added

fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
metrics: add task schedule latency metric (#7986)
net: add SocketAddr methods to Unix sockets (#8144)

Changed

io: add #[inline] to IO trait impls for in-memory types (#8242)
net: implement UCred::pid on FreeBSD (#8086)
net: support Nuttx target os (#8259)
signal: refactor global variables on Windows (#8231)
sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
taskdump: support taskdumps on s390x (#8192)
time: add #[track_caller] to timeout_at() (#8077)
time: consolidate mutex locks on spurious poll (#8124)
time: defer waker clone on spurious poll (#8107)
time: move lazy-registration state into Sleep (#8132)
tracing: remove unnecessary span clone (#8126)

Fixed

io: do not treat zero-length reads as EOF in Chain (#8251)
net: use getpeereid for QNX peer credentials (#8270)
runtime: avoid illegal state in FastRand (#8078)
sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
time: avoid stack overflow in runtime constructor (#8093)
time (alt timer): ensure timers stay in the same runtime after .reset() (#8169)

IO uring (unstable)

fs: use io-uring for fs::try_exists (#8080)
fs: use io-uring for renaming files (#7800)
rt: flush io-uring CQE in case of CQE overflow (#8277)

Documented

docs: clarify cancel safety wording (#8181)
fs: clarify create_dir_all succeeds if path exists (#8149)
io: add warning about stdout reordering with multiple handles (#8276)
net: document pipe try_read*/try_write* readiness behavior (#8032)
runtime: document interaction with fork() (#8202)
sync: clarify broadcast lagging semantics (#8239)
sync: document memory ordering guarantees for Semaphore (#8119)
task: explain why yield_now defers its waker (#8254)
time: add panic docs to timeout_at() (#8077)
time: fix reversed poll order in timeout doc (#8214)

`v1.52.4`: Tokio v1.52.4

Compare Source

1.52.4 (July 16th, 2026)

Fixed

runtime: don't skip the driver when before_park schedules work (#8222)

Fixed (unstable)

taskdump: remove crate disambiguators from output (#8264)

`v1.52.3`: Tokio v1.52.3

Compare Source

1.52.3 (May 8th, 2026)

Fixed

sync: fix underflow in mpsc channel len() (#8062)
sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
sync: require that an RwLock has max_readers != 0 (#8076)
sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

`v1.52.2`: Tokio v1.52.2

Compare Source

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to its performance impact. (#8100)

`v1.52.1`: Tokio v1.52.1

Compare Source

1.52.1 (April 16th, 2026)

Fixed

runtime: revert [#7757] to fix [a regression][#8056] that causes `spa

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-01-05T02:12:51Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path backend/Cargo.toml --package async-trait@0.1.89 --precise 0.1.91
    Updating crates.io index
error: failed to select a version for `hmac`.
    ... required by package `backend v0.1.0 (/tmp/renovate/repos/github/ichwilldich/sagittarius/backend)`
versions that meet the requirements `^0.13.0` are: 0.13.0

package `backend` depends on `hmac` with feature `std` but `hmac` does not have that feature.
help: available features: zeroize


failed to select a version for `hmac` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --package sea-orm@1.1.19 --precise 1.1.20
    Updating crates.io index
error: failed to select a version for `hmac`.
    ... required by package `backend v0.1.0 (/tmp/renovate/repos/github/ichwilldich/sagittarius/backend)`
versions that meet the requirements `^0.13.0` are: 0.13.0

package `backend` depends on `hmac` with feature `std` but `hmac` does not have that feature.
help: available features: zeroize


failed to select a version for `hmac` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path backend/migration/Cargo.toml --package sea-orm-migration@1.1.19 --precise 1.1.20
    Updating crates.io index
error: failed to select a version for `hmac`.
    ... required by package `backend v0.1.0 (/tmp/renovate/repos/github/ichwilldich/sagittarius/backend)`
versions that meet the requirements `^0.13.0` are: 0.13.0

package `backend` depends on `hmac` with feature `std` but `hmac` does not have that feature.
help: available features: zeroize


failed to select a version for `hmac` which could resolve this conflict

renovate Bot enabled auto-merge (squash) January 5, 2026 02:12

renovate Bot force-pushed the renovate/cargo branch 2 times, most recently from 7c4a834 to a6c101b Compare January 7, 2026 00:23

renovate Bot force-pushed the renovate/cargo branch 3 times, most recently from 9baede7 to 24147e0 Compare January 16, 2026 02:43

renovate Bot force-pushed the renovate/cargo branch from 24147e0 to 8c3724e Compare January 19, 2026 06:05

renovate Bot force-pushed the renovate/cargo branch from 8c3724e to fd329f3 Compare February 4, 2026 00:54

renovate Bot force-pushed the renovate/cargo branch 4 times, most recently from edfa5e4 to 37bb07f Compare February 17, 2026 16:32

renovate Bot force-pushed the renovate/cargo branch 3 times, most recently from 1dd75eb to 27ff51e Compare February 23, 2026 10:08

renovate Bot force-pushed the renovate/cargo branch from 27ff51e to f0da245 Compare February 28, 2026 09:03

renovate Bot force-pushed the renovate/cargo branch 2 times, most recently from b600113 to 49b4c7f Compare March 9, 2026 08:42

renovate Bot force-pushed the renovate/cargo branch 3 times, most recently from 38c67b7 to a4ae12b Compare March 23, 2026 05:46

renovate Bot force-pushed the renovate/cargo branch 3 times, most recently from 8b09a4a to 29ee198 Compare March 30, 2026 05:30

renovate Bot force-pushed the renovate/cargo branch 5 times, most recently from 7b18f8d to 929b5a5 Compare April 9, 2026 09:51

renovate Bot force-pushed the renovate/cargo branch 2 times, most recently from 36e6c06 to 6ecd2f5 Compare April 25, 2026 15:16

renovate Bot force-pushed the renovate/cargo branch 2 times, most recently from 11ea997 to 8ae930d Compare May 28, 2026 19:38

renovate Bot force-pushed the renovate/cargo branch 3 times, most recently from 52d5329 to 4ab536a Compare June 18, 2026 19:07

renovate Bot force-pushed the renovate/cargo branch from 4ab536a to ffde462 Compare June 23, 2026 07:52

fix(deps): update cargo

daa74a9

renovate Bot force-pushed the renovate/cargo branch from ffde462 to daa74a9 Compare July 23, 2026 16:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update cargo - #65

fix(deps): update cargo#65
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/cargo

renovate Bot commented Jan 5, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jan 5, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jan 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

🚀 Features

🚀 Features

🐛 Bug Fixes

🧪 Testing

🚀 Features

🐛 Bug Fixes

🧪 Testing

🐛 Bug Fixes

🚀 Features

🐛 Bug Fixes

🧪 Testing

⚙️ Miscellaneous Tasks

🐛 Bug Fixes

🧪 Testing

⚙️ Miscellaneous Tasks

🐛 Bug Fixes

🐛 Bug Fixes

🐛 Bug Fixes

🐛 Bug Fixes

🐛 Bug Fixes

🚀 Features

🐛 Bug Fixes

🚀 Features

🐛 Bug Fixes

🚜 Refactor

🐛 Bug Fixes

🚀 Features

🚜 Refactor

🚀 Features

🐛 Bug Fixes

🚜 Refactor

⚙️ Miscellaneous Tasks

🚀 Features

🐛 Bug Fixes

🐛 Bug Fixes

🐛 Bug Fixes

🚀 Features

🐛 Bug Fixes

🚜 Refactor

⚙️ Miscellaneous Tasks

🐛 Bug Fixes

🐛 Bug Fixes

🚀 Features

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

🐛 Bug Fixes

🚀 Features

🐛 Bug Fixes

🚜 Refactor

⚙️ Miscellaneous Tasks

🚀 Features

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

🐛 Bug Fixes

🐛 Bug Fixes

🚀 Features

🚀 Features

🐛 Bug Fixes

🚀 Features

🚀 Features

v0.4.45: 0.4.45

What's Changed

v0.4.44: 0.4.44

What's Changed

v0.4.43: 0.4.43

What's Changed

v0.12.28

v0.12.27

v0.12.26

v0.12.25

v0.12.24

v0.12.23

v0.12.22

renovate Bot commented Jan 5, 2026 •

edited

Loading

`v0.4.45`: 0.4.45

`v0.4.44`: 0.4.44

`v0.4.43`: 0.4.43