chore(deps): bump the prod-deps group across 1 directory with 10 updates by dependabot[bot] · Pull Request #150 · onsails/right-agent

dependabot · 2026-06-29T07:50:24Z

Bumps the prod-deps group with 9 updates in the / directory:

Package	From	To
serde-saphyr	`0.0.27`	`0.0.28`
rustls	`0.23.40`	`0.23.41`
turso	`0.7.0-pre.8`	`0.7.0-pre.13`
rmcp	`1.7.0`	`1.8.0`
frankenstein	`0.50.0`	`0.50.1`
uuid	`1.23.3`	`1.23.4`
cron	`0.16.0`	`0.17.0`
anyhow	`1.0.102`	`1.0.103`
arc-swap	`1.9.1`	`1.9.2`

Updates serde-saphyr from 0.0.27 to 0.0.28

Release notes

Sourced from serde-saphyr's releases.

0.0.28 Property interpolation extensions and even faster builds

Significant extension of property interpolation ( @CommanderStorm)

Added support for default property interpolation in plain scalars: ${NAME:-default} now resolves to default when NAME is unset or explicitly empty.

${VAR}: Values that must be configured (DB URLs, API keys). An unset var is a misconfiguration, not something to paper over -> a loud error at parse time

${VAR-fallback}: Empty value is meaningful and distinct from "not configured". F.ex. PREFIX="" -> "no prefix".

${VAR:-fallback}: The "regular" default, so f.ex. ${PORT:-8080}

${VAR+text}: F.ex. ${DEBUG+--verbose} emits the flag whenever DEBUG exists in the environment, regardless of value.

${VAR:+text}: Same as above, but differentiating empty <-> null

Also

Fix #120 LastWins not honored when deserializing struct. This was implemented and well tested, but only with maps.

Reduced owning of comment strings (parsing very heavily commented YAML while discarding comments should be lighter on resources).

Fixed indentation enforcement (@CommanderStorm), making sure it also works for multiline scalars.

Fixed tuple serialization (@CommanderStorm)

New SingleQuoted<..> and DoubleQuoted<..> wrappers to emit quoted strings. SingleQuoted may provide additional safety, as control characters will be rejected (with error), rather than written as YAML escape sequences. NullableTilde<T> is like Option and emits tilde ( ~ ) rather than null.

Faster compilation times with serde_core

serde-saphyr now avoids compiling serde_derive by default. The crate core uses serde_core instead that allows building serde-saphyr in parallel with serde_derive. However this also means that we needed to drop the previously built-in (de)serialization support for some serde-saphyr own configuration and reporting types like Options. (De)serialization support for these types can be re-enabled with the new feature serde_derived_types:
serde-saphyr = { version = "...", features = ["serde_derived_types"] }
This does not affect normal use of serde-saphyr for user data, you can still serialize and deserialize your own structs as before.

Commits

958bb94 NullableTilde implementation (#148)
e2453d1 Integrate granit parser 0.0.6 parsing.
38f602d Implement DoubleQuoted and SingleQuoted (#146)
07fbcf7 Remove redundant #[cfg(test)]
3541006 Remaining issue: flow maps still bypass the simple-key limit
65d41ca fix: long string keys not roundtripping (#141)
2adf2c4 Split serde and make serde-saphyr core to depend on serde-core only. (#144)
07708ed fix fmt (#145)
f2cd59c Implement <Quoted> (#140)
1a291ca fix: quoting support not counting trailing whitespace in keys, BOM, .. (#139)
Additional commits viewable in compare view

Updates rustls from 0.23.40 to 0.23.41

Commits

642a103 ci: drop Taplo job
752c144 Drop nightly clippy tests
8d8611a Fix new clippy::useless-borrows-in-formatting
ebf3297 Fix new clippy::manual_clear
46808e7 ci: sync cargo-check-external-types nightly
041a8d2 Cargo deny: allow RUSTSEC-2026-0173
62e220e Take semver-compatible dependency updates
3c14696 Upgrade to hickory-resolver 0.26
848a2cc connect-tests: delete ech.rs
5ce9cac Bump version to 0.23.41
Additional commits viewable in compare view

Updates turso from 0.7.0-pre.8 to 0.7.0-pre.13

Release notes

Sourced from turso's releases.

v0.7.0-pre.13

Install turso_cli 0.7.0-pre.13

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.13/turso_cli-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.13/turso_cli-installer.ps1 | iex"
Download turso_cli 0.7.0-pre.13

File Platform Checksum

turso_cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum

turso_cli-x86_64-apple-darwin.tar.xz Intel macOS checksum

turso_cli-x86_64-pc-windows-msvc.zip x64 Windows checksum

turso_cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum

turso_cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
v0.7.0-pre.11

Install turso_cli 0.7.0-pre.11

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.11/turso_cli-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.11/turso_cli-installer.ps1 | iex"
</tr></table> 

... (truncated)

Commits

5fa8222 Turso 0.7.0-pre.13
413d43e Merge 'github: fix Windows codesign repack, use 7z instead of zip' from Pekka...
1e7068a Merge 'Clarify in CONTRIBUTING.md that mold linker is Linux only' from n3on p...
c84b571 github: fix Windows codesign repack, use 7z instead of zip
92e8498 Turso 0.7.0-pre.12
5ab60ba Merge 'github: code-sign Windows artifacts with Azure Artifact Signing' from ...
5ddb235 Clarify mold linker is Linux only
8a54641 Merge 'Update references from limbo to turso in docs' from n3on p0rtal
907174f Merge 'Exercise MVCC recovery in turso_stress (v2)' from Mikaël Francoeur
7165c37 Merge 'antithesis diff-focused tests' from Mikaël Francoeur
Additional commits viewable in compare view

Updates turso_core from 0.7.0-pre.8 to 0.7.0-pre.13

Release notes

Sourced from turso_core's releases.

v0.7.0-pre.13

Install turso_cli 0.7.0-pre.13

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.13/turso_cli-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.13/turso_cli-installer.ps1 | iex"
Download turso_cli 0.7.0-pre.13

File Platform Checksum

turso_cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum

turso_cli-x86_64-apple-darwin.tar.xz Intel macOS checksum

turso_cli-x86_64-pc-windows-msvc.zip x64 Windows checksum

turso_cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum

turso_cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
v0.7.0-pre.11

Install turso_cli 0.7.0-pre.11

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.11/turso_cli-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.7.0-pre.11/turso_cli-installer.ps1 | iex"
</tr></table> 

... (truncated)

Commits

5fa8222 Turso 0.7.0-pre.13
413d43e Merge 'github: fix Windows codesign repack, use 7z instead of zip' from Pekka...
1e7068a Merge 'Clarify in CONTRIBUTING.md that mold linker is Linux only' from n3on p...
c84b571 github: fix Windows codesign repack, use 7z instead of zip
92e8498 Turso 0.7.0-pre.12
5ab60ba Merge 'github: code-sign Windows artifacts with Azure Artifact Signing' from ...
5ddb235 Clarify mold linker is Linux only
8a54641 Merge 'Update references from limbo to turso in docs' from n3on p0rtal
907174f Merge 'Exercise MVCC recovery in turso_stress (v2)' from Mikaël Francoeur
7165c37 Merge 'antithesis diff-focused tests' from Mikaël Francoeur
Additional commits viewable in compare view

Updates rmcp from 1.7.0 to 1.8.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v1.8.0

Added

deprecate roots, sampling, and logging (SEP-2577) (#884)

Fixed

strip and validate tool outputSchema and inputSchema (#860)

remove unnecessary fields from tools' inputSchema (#856)

Other

refine mcpmate listing copy (#885)

added jilebi-mcp to the list of built with rmcp (#861)

rmcp-v1.8.0
[!WARNING]

⚠️ Breaking Changes

Despite being a minor version bump, this release contains a source-breaking API change (it should have been 2.0.0). If you depend on rmcp = "1.7", Cargo will resolve to 1.8.0 automatically and your build may fail. Pin to =1.7.x if you are not ready to migrate.

Peer::peer_info() return type changed (#862):
- pub fn peer_info(&self) -> Option<&R::PeerInfo>
+ pub fn peer_info(&self) -> Option<Arc<R::PeerInfo>>
This was needed so peer info can be re-set on a duplicate initialize (it now lives behind an RwLock), which is why a borrow can no longer be returned.

Migration: field access still works through Arc's Deref. If you need the old &InitializeResult (e.g. you bound the type explicitly), use .as_deref():
// Before (1.7.x): info is &InitializeResult
let info: Option<&InitializeResult> = client.peer_info();
// After (1.8.0): info is Arc<InitializeResult>
let info: Option<Arc<InitializeResult>> = client.peer_info();
// To recover the old reference type:
let info: Option<&InitializeResult> = client.peer_info().as_deref();
Added

standardize resource-not-found error code (SEP-2164) (#899)

validate OAuth authorization response issuer (#896)

specify OIDC application_type during dynamic client registration (SEP-837) (#883)

deprecate roots, sampling, and logging (SEP-2577) (#884)

... (truncated)

Commits

2522036 chore: release v1.8.0 (#850)
6d020c9 fix(auth): preserve configured reqwest client (#917)
de898dd Allow custom HTTP clients for OAuth (#908)
3c5ce2b fix(auth): align OAuth metadata discovery ordering (#887)
443677c fix: align progress timeout token (#909)
4fd4986 fix(elicitation): preserve enumNames through ElicitationSchema serde round-tr...
bf71eb8 chore(deps): bump actions/checkout from 6 to 7 (#911)
5d00e20 Add progress-aware request timeout reset (#858)
4b82e41 docs(server): document Err vs Ok(CallToolResult::error) visibility contract o...
95a8e96 feat: standardize resource-not-found error code (SEP-2164) (#899)
Additional commits viewable in compare view

Updates frankenstein from 0.50.0 to 0.50.1

Release notes

Sourced from frankenstein's releases.

0.50.1

What's Changed

Telegram Bot API 10.1 by @ayrat555 in ayrat555/frankenstein#325

Full Changelog: ayrat555/frankenstein@0.50.0...0.50.1

Changelog

Sourced from frankenstein's changelog.

0.50.1 (2026-06-20)

feat: Bot API 10.1 - #325

Commits

f9e9352 release 0.50.1 (#326)
0e924b8 Telegram Bot API 10.1 (#325)
See full diff in compare view

Updates uuid from 1.23.3 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

Fix up name of fuzz script in readme by @KodrAus in uuid-rs/uuid#888

document fixes by @frostyplanet in uuid-rs/uuid#889

Prepare for 1.23.4 release by @KodrAus in uuid-rs/uuid#890

New Contributors

@frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits

3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
cba53d0 prepare for 1.23.4 release
e347af4 Merge pull request #889 from frostyplanet/main
e9bf55c doc: Fix broken link warnings
5351af4 doc: Enable feature flag label for docs.rs
1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
c9619f6 fix up name of fuzz script in readme
See full diff in compare view

Updates cron from 0.16.0 to 0.17.0

Commits

See full diff in compare view

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates arc-swap from 1.9.1 to 1.9.2

Changelog

Sourced from arc-swap's changelog.

1.9.2

Document RefCnt must not panic (#208).

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [serde-saphyr](https://github.com/bourumir-wyngs/serde-saphyr) | `0.0.27` | `0.0.28` | | [rustls](https://github.com/rustls/rustls) | `0.23.40` | `0.23.41` | | [turso](https://github.com/tursodatabase/turso) | `0.7.0-pre.8` | `0.7.0-pre.13` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.7.0` | `1.8.0` | | [frankenstein](https://github.com/ayrat555/frankenstein) | `0.50.0` | `0.50.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.3` | `1.23.4` | | [cron](https://github.com/zslayton/cron) | `0.16.0` | `0.17.0` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` | | [arc-swap](https://github.com/vorner/arc-swap) | `1.9.1` | `1.9.2` | Updates `serde-saphyr` from 0.0.27 to 0.0.28 - [Release notes](https://github.com/bourumir-wyngs/serde-saphyr/releases) - [Commits](bourumir-wyngs/serde-saphyr@0.0.27...0.0.28) Updates `rustls` from 0.23.40 to 0.23.41 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.40...v/0.23.41) Updates `turso` from 0.7.0-pre.8 to 0.7.0-pre.13 - [Release notes](https://github.com/tursodatabase/turso/releases) - [Changelog](https://github.com/tursodatabase/turso/blob/main/CHANGELOG.md) - [Commits](tursodatabase/turso@v0.7.0-pre.8...v0.7.0-pre.13) Updates `turso_core` from 0.7.0-pre.8 to 0.7.0-pre.13 - [Release notes](https://github.com/tursodatabase/turso/releases) - [Changelog](https://github.com/tursodatabase/turso/blob/main/CHANGELOG.md) - [Commits](tursodatabase/turso@v0.7.0-pre.8...v0.7.0-pre.13) Updates `rmcp` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.7.0...rmcp-v1.8.0) Updates `frankenstein` from 0.50.0 to 0.50.1 - [Release notes](https://github.com/ayrat555/frankenstein/releases) - [Changelog](https://github.com/ayrat555/frankenstein/blob/master/CHANGELOG.md) - [Commits](ayrat555/frankenstein@0.50.0...0.50.1) Updates `uuid` from 1.23.3 to 1.23.4 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.3...v1.23.4) Updates `cron` from 0.16.0 to 0.17.0 - [Release notes](https://github.com/zslayton/cron/releases) - [Commits](https://github.com/zslayton/cron/commits) Updates `anyhow` from 1.0.102 to 1.0.103 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.103) Updates `arc-swap` from 1.9.1 to 1.9.2 - [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md) - [Commits](https://github.com/vorner/arc-swap/commits) --- updated-dependencies: - dependency-name: serde-saphyr dependency-version: 0.0.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: rustls dependency-version: 0.23.41 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: turso dependency-version: 0.7.0-pre.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: turso_core dependency-version: 0.7.0-pre.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: rmcp dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: frankenstein dependency-version: 0.50.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: uuid dependency-version: 1.23.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: cron dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: anyhow dependency-version: 1.0.103 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: arc-swap dependency-version: 1.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 29, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the prod-deps group across 1 directory with 10 updates#150

chore(deps): bump the prod-deps group across 1 directory with 10 updates#150
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/prod-deps-ca1fcd68ae

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

File	Platform	Checksum
turso_cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
turso_cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
turso_cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
turso_cli-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
turso_cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026

0.0.28 Property interpolation extensions and even faster builds

Significant extension of property interpolation ( @​CommanderStorm)

Also

Faster compilation times with serde_core

v0.7.0-pre.13

Install turso_cli 0.7.0-pre.13

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download turso_cli 0.7.0-pre.13

Verifying GitHub Artifact Attestations

v0.7.0-pre.11

Install turso_cli 0.7.0-pre.11

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

v0.7.0-pre.13

Install turso_cli 0.7.0-pre.13

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download turso_cli 0.7.0-pre.13

Verifying GitHub Artifact Attestations

v0.7.0-pre.11

Install turso_cli 0.7.0-pre.11

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

rmcp-macros-v1.8.0

Added

Fixed

Other

rmcp-v1.8.0

⚠️ Breaking Changes

Added

0.50.1

What's Changed

0.50.1 (2026-06-20)

v1.23.4

What's Changed

New Contributors

1.0.103

1.9.2

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Significant extension of property interpolation ( `@CommanderStorm`)

Faster compilation times with `serde_core`