build(deps): bump the build group across 1 directory with 19 updates

[dependabot]

Bumps the build group with 19 updates in the / directory:

Package	From	To
anyhow	1.0.102	1.0.104
base64	0.22.1	0.23.1
bytes	1.11.1	1.12.1
byte-unit	5.2.0	5.2.5
clap_mangen	0.2.31	0.3.2
glob	0.3.3	0.3.4
gptman	1.1.4	3.1.1
libc	0.2.182	0.2.189
nix	0.29.0	0.31.3
openssl	0.10.79	0.10.81
regex	1.12.3	1.13.1
reqwest	0.12.28	0.13.4
serde	1.0.228	1.0.229
serde_json	1.0.149	1.0.151
tempfile	3.26.0	3.27.0
thiserror	2.0.18	2.0.20
uuid	1.21.0	1.24.0
mbrman	0.5.4	0.6.1
rand	0.8.6	0.10.2

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

• Update syn dev-dependency to version 3

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 1dbe186 Release 1.0.104
• f6479f8 Update to syn 3
• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

• Make the tests build again on non-SIMD architectures

0.23.0

• Added more consts for preconfigured configs and engines
• Make DecodeError::InvalidLastSymbol more clear by including the decoded value
• Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
• Update MSRV to 1.71.0
• Add support for custom padding symbols

Commits

• 069bf70 v0.23.1
• 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
• 7cffce6 Fix testing on architectures without unsafe SIMD support
• e34f9a0 Merge pull request #308 from atouchet/com
• e9240c9 Remove outdated comment
• 9e9220a v0.23.0
• 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
• fbec5f1 Document no trailing trailing bits
• 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
• f10b7e2 Update deps & edition
• Additional commits viewable in compare view

Updates bytes from 1.11.1 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

• 76c0fbb Release bytes v1.12.1 (#838)
• 924c82b Handle unwinding from Box::new (#837)
• 91402ce Release bytes v1.12.0 (#831)
• 2256e6d chore: add safety comments on unsafe blocks (#827)
• 245adff Pass vtable data by value (#826)
• 00cc5ff Implement BytesMut::extend_from_within (#818)
• 5b79d31 Merge tag 'v1.11.1'
• 804ee6d Make try_unsplit method public (#746)
• fd426ca Exclude development scripts from published package (#810)
• b4ed70d Add test for copy_to_bytes() -> BytesMut avoiding clone (#809)
• Additional commits viewable in compare view

Updates byte-unit from 5.2.0 to 5.2.5

Commits

• 8acd4c0 update docs cfg
• 4b87f59 fix min-dependencies
• 9bc780f Merge pull request #36 from magiclen/dependabot/github_actions/actions/checko...
• a41d974 Bump actions/checkout from 6 to 7
• 17c920e bump version
• 4a79eb1 update MSRV to 1.85 and use Rust 2024
• d4d9ba7 fix a bug and bump version
• 51be64c improve code
• 9f48af6 Merge pull request #34 from fogti/no-std
• 035d1e1 bump version
• Additional commits viewable in compare view

Updates clap_mangen from 0.2.31 to 0.3.2

Changelog

Sourced from clap_mangen's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

5.0.0 - TBD

available through unstable-v5 feature flag

Breaking Changes

• Made ArgPredicate non_exhaustive
• (help) Change default Command::term_width to "source format"
• (help) Change default Command::max_term_width to 100
• (derive) Vec<Vec<T>> types are now assuming to capture occurrences
• (derive) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

Features

• (derive) Group values by their occurrence with Vec<Vec<T>>

[Unreleased] - ReleaseDate

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

... (truncated)

Commits

• 4a622b4 chore: Release
• e1f6b90 docs: Update changelog
• a9660f4 Merge pull request #6467 from sylvestre/mangen-override-usage
• 715b812 chore: Release
• 89e6e9b docs: Update changelog
• 3918cb4 Merge pull request #6468 from sjh9714/fix-bash-posix-fn-name
• 526c819 Merge pull request #6469 from latent-9/docs/fix-derive-reference-link
• b2bd685 docs(clap_derive): Fix derive reference link
• ecee8a4 fix(complete): Name the function after fn_name
• 6dd2e5a test(complete): Show POSIX bash will not source
• Additional commits viewable in compare view

Updates glob from 0.3.3 to 0.3.4

Release notes

Sourced from glob's releases.

v0.3.4

• Cache filename for sorting in fill_todo (#181)
• Replace into_error method with impl Into (#179)
• Replace tempdir with tempfile (#176)
• Set the edition to 2021 (#188)

Changelog

Sourced from glob's changelog.

0.3.4 - 2026-07-21

• Cache filename for sorting in fill_todo (#181)
• Replace into_error method with impl Into (#179)
• Replace tempdir with tempfile (#176)
• Set the edition to 2021 (#188)

Commits

• cfa2a58 chore: release v0.3.4
• 8a903ef Set the edition to 2021
• 1f75324 Bump actions/checkout from 6 to 7
• 7df5575 ci: Bump ubuntu-24.04 to ubuntu-26.04
• e476c2a ci: Replace macos-13 and macos-15 with macos-26-intel and macos-26
• 0dc6566 ci: Get MSRV directly from crate metadata
• c3c81de ci: Bump MSRV of test dependencies
• 6bde970 Bump actions/checkout from 5 to 6 (#184)
• 0639988 Cache filename for sorting in fill_todo (#181)
• 335da33 Replace into_error method with impl Into (#179)
• Additional commits viewable in compare view

Updates gptman from 1.1.4 to 3.1.1

Changelog

Sourced from gptman's changelog.

v3.1.1 (2026-04-28)

• Add release workflow with OIDC trusted publishing
• Add CONTRIBUTING.md
• Document nix feature flag in README
• Use README as crate-level documentation via include_str!
• Add dates to all changelog entries
• Replace broken LOC badge with CHANGELOG badge

v3.1.0 (2026-04-14)

• Fix fallback to backup GPT header when primary partition entry array CRC fails (#145)
• Add GPTHeader::read_partitions to read and validate the partition entry array for a given header (#145)

v3.0.0 (2026-01-19)

• Replace unmaintained bincode dependency with wincode (#144)
• Remove serde dependency (#144)

v2.0.2 (2025-12-23)

• Properly perform checksums on partition table arrays when partition names contains garbage data after the null terminator (#142)

v2.0.1 (2025-06-16)

• Fix underflow when input is shorter than one sector (#141)

v2.0.0 (2025-05-14)

• Bump versions of bincode, thiserror nix

Commits

• 307f819 chore: release v3.1.1
• fb68859 docs: replace broken LOC badge with CHANGELOG badge
• efc8d04 docs: replace crate-level doc with include_str! of README
• 58cdb1c docs: add dates to all changelog entries
• 7bdbb8d docs: add CONTRIBUTING.md
• fc815a1 docs: document nix feature flag in README
• a5c92c4 ci: add release workflow with OIDC trusted publishing, bump checkout to v4
• ceff6c9 Update nix dependency to 0.31 (#146)
• e4ded83 docs: clarify Seserialize typo compatibility
• 2c98562 chore: add CHANGELOG.md to crate include list
• Additional commits viewable in compare view

Updates libc from 0.2.182 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

• Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
• Linux SPARC: Enable the clone3 syscall (#4980)
• Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

• Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

• Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
• NuttX: Fix wchar_t definition under Arm (#5245)
• Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

• uClibc now supports a similar configuration option:

  RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

• Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
• Linux SPARC: Enable the clone3 syscall (#4980)
• Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

• Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

• Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
• NuttX: Fix wchar_t definition under Arm (#5245)
• Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
• uClibc now supports a similar configuration option:

... (truncated)

Commits

• ef0906e libc: Release 0.2.189
• 5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
• 3e51062 psp: Fix overflowing_literals warnings
• e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
• 63221b3 macros: Require safe in safe_f! invocations
• 707ab52 macros: Require unsafe in f! invocations
• 8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
• 8427909 windows: Add back link names for time-related symbols
• b4863fa nuttx: fix wchar_t definition under arm
• 41c683d nuttx: mirror type definitions
• Additional commits viewable in compare view

Updates nix from 0.29.0 to 0.31.3

Changelog

Sourced from nix's changelog.

[0.31.3] - 2026-05-11

Added

• Enable module ioctl for Cygwin (#2715)
• Add CLOCK_BOOTTIME/CLOCK_PROCESS_CPUTIME_ID/CLOCK_THREAD_CPUTIME_ID/CLOCK_UPTIME to NetBSD-like platforms (#2716)
• unistd: add mkfifo for redox (#2749)
• Added kevent64 support on apple targets: Kqueue::kevent64, KEvent64, and Kevent64Flags. (#2781)

Fixed

• fix SaFlags_t definition on redox (#2751)
• Fixed EpollEvent::events() to use from_bits_retain instead of from_bits().unwrap(), preventing panics when the kernel returns unknown epoll flags. (#2783)
• Fixed KEvent::flags() and KEvent::fflags() to use from_bits_retain instead of from_bits().unwrap(), preventing panics when the kernel returns unknown kqueue flags. (#2784)

[0.31.2] - 2026-02-28

Added

• Add WatchDescriptor::as_raw, to get libc id of WatchDescriptor. (#2718)
• Added process::pthread_getthreadid_np() on FreeBSD. (#2725)
• Added timerfd support on FreeBSD (#2728)

Fixed

• The libc requirement is now 0.2.181, rather than pinned to 0.2.180. (#2744)

[0.31.1] - 2026-01-23

Added

• termios: Add definition for IUCLC to supported platforms (#2702)

... (truncated)

Commits

• b5933ca chore: release v0.31.3
• 5d6a46e Replace Cirrus CI with more Github Workflows jobs (#2776)
• 3407489 event: add kevent64 support on apple targets (#2781)
• fe80fc5 chore: resolve clippy useless_borrows_in_formatting (#2790)
• 3310fc7 Revert "fix(ci): temporarily disable armv7-unknown-linux-uclibceabihf (#2764)...
• e3ab917 epoll: use from_bits_retain to avoid panics on unknown flags (#2783)
• 6c15701 kqueue: use from_bits_retain to avoid panics on unknown flags (#2784)
• 73028cf fix(ci): enable Hurd target (#2765)
• 1a680a9 cargo: Remove deprecated package authors field (#2789)
• 85cff07 docs: add missing changelog entries (#2786)
• Additional commits viewable in compare view

Updates openssl from 0.10.79 to 0.10.81

Release notes

Sourced from openssl's releases.

openssl-v0.10.81

What's Changed

• Bump aws-ls-sys to 0.41 by @​joshgodsiff in rust-openssl/rust-openssl#2640
• Add brainpoolP224r1 and brainpoolP224t1 NID constants by @​sfarestam-iproov in rust-openssl/rust-openssl#2642
• x509: add minimal support for CRL building by @​DavidFontaineOcd in rust-openssl/rust-openssl#2538
• add mldsa.h to the boringssl bindgen by @​reaperhulk in rust-openssl/rust-openssl#2650
• Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string by @​alex in rust-openssl/rust-openssl#2652
• Fix verify_mode() panic on unmodeled verify mode bits by @​alex in rust-openssl/rust-openssl#2651
• Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in rust-openssl/rust-openssl#2653
• Release openssl 0.10.81 and openssl-sys 0.9.117 by @​reaperhulk in rust-openssl/rust-openssl#2655

New Contributors

• @​joshgodsiff made their first contribution in rust-openssl/rust-openssl#2640
• @​sfarestam-iproov made their first contribution in rust-openssl/rust-openssl#2642
• @​DavidFontaineOcd made their first contribution in rust-openssl/rust-openssl#2538

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.80...openssl-v0.10.81

openssl-v0.10.80

What's Changed

• Prefer Homebrew openssl@4 and stop looking for openssl@1.1 by @​alex in rust-openssl/rust-openssl#2633
• Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-padding by @​alex in rust-openssl/rust-openssl#2638
• Release openssl 0.10.80 and openssl-sys 0.9.116 by @​alex in rust-openssl/rust-openssl#2639

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.79...openssl-v0.10.80

Commits

• db9c9e2 Release openssl 0.10.81 and openssl-sys 0.9.117 (#2655)
• 3a7fb56 Bump actions/checkout from 6.0.2 to 6.0.3 (#2653)
• d059c43 Fix verify_mode() panic on unmodeled verify mode bits (#2651)
• 8b1519e Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string (#2652)
• d5713d6 add mldsa.h to the boringssl bindgen (#2650)
• 9fac317 Merge pull request #2538 from ocdlroux/feat/crl-full
• 4dae20b x509: adding minimal support for X509CrlBuilder
• 47f7777 Add brainpoolP224r1 and brainpoolP224t1 NID constants (#2642)
• 659da17 Bump aws-ls-sys to 0.41 (#2640)
• 35be7ae Release openssl 0.10.80 and openssl-sys 0.9.116 (#2639)
• Additional commits viewable in compare view

Updates regex from 1.12.3 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

• #1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

• #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

1.12.4 (2026-06-09)

This release includes a performance optimization for compilation of regexes

... (truncated)

Commits

• 2b52759 1.13.1, redux
• 40e9823 1.13.1
• 75fcb96 changelog: 1.13.1
• 64ad0b6 automata: fix bug in reverse suffix/inner optimization
• fa91c31 automata: fix a bug caught by Codex review
• 30390ec automata: formatting tweaks
• 821a8eb automata: refactor reverse suffix/inner search slightly
• 10afd70 automata: expose the extracted literals for inner literal extraction
• 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
• 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
• Additional commits viewable in compare view

Updates reqwest from 0.12.28 to 0.13.4

Release notes

Sourced from reqwest's releases.

v0.13.4

tl;dr

• Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
• Add ClientBuilder::http2_keep_alive_* options for the blocking client.
• Add TLS 1.3 support when using native-tls backend.
• Fix redirect handling to strip sensitive headers when the scheme changes.
• Fix HTTP/3 happy-eyeball connection creation.
• Upgrade hickory-resolver to 0.26.

What's Changed

• fix(tls): improve rustls-no-provider panic message and add module docs by @​smythg4 in seanmonstar/reqwest#3021
• fix: do not lose the url in error when decoding json by @​Dushistov in seanmonstar/reqwest#3026
• Add tls_sslkeylogfile builder method by @​passcod in seanmonstar/reqwest#2923
• fix(redirect): strip sensitive headers on scheme change across redirects by @​SAY-5 in seanmonstar/reqwest#3034
• chore: upgrade MSRV to 1.85 by @​seanmonstar in seanmonstar/reqwest#3038
• chore: clean up minimal-versions CI job by @​seanmonstar in seanmonstar/reqwest#3039
• fix(http3): use happy eyeballs for h3 connect by @​lyuzichong in seanmonstar/reqwest#3030
• fix: update hickory-resolver to 0.26 and adjust code accordingly by @​seanmonstar in seanmonstar/reqwest#3040
• fix: remove unwrap in hickory initialization by @​mat813 in seanmonstar/reqwest#3041
• feat(https): support TLS 1.3 as min version under native-tls 🎉 by @​AverageHelper in seanmonstar/reqwest#2975
• Expose keep alive configurations in blocking client by @​aeb-dev in seanmonstar/reqwest#3043
• Prepare v0.13.4 by @​seanmonstar in seanmonstar/reqwest#3046

New Contributors

• @​smythg4 made their first contribution in seanmonstar/reqwest#3021
• @​Dushistov made their first contribution in seanmonstar/reqwest#3026
• @​SAY-5 made their first contribution in seanmonstar/reqwest#3034
• @​mat813 made their first contribution in seanmonstar/reqwest#3041
• @​AverageHelper made their first contribution in seanmonstar/reqwest#2975
• @​aeb-dev made their first contribution in seanmonstar/reqwest#3043

Full Changelog: seanmonstar/reqwest@v0.13.3...v0.13.4

v0.13.3

tl;dr

• Fix CertificateRevocationList parsing of PEM values.
• Fix logging in resolver to only show host, not full URL.
• Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
• Fix HTTP/3 to handle STOP_SENDING as not an error.
• Fix HTTP/3 pool to remove timed out QUIC connections.
• Fix HTTP/3 connection establishment picking IPv4 and IPv6.
• Upgrade rustls-platform-verifier.
• (wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

• Update docs.rs Features by @​JamesWiresmith in seanmonstar/reqwest#2961
• fix: fallback to hickory_resolver's default config if reading /etc/resolv.conf fails by @​monosans in seanmonstar/reqwest#2797
• fix: remove timeout con by @​cuiweixie in seanmonstar/reqwest#2967
• http3: handle stop_sending without error by @​anuraaga in seanmonstar/reqwest#2978

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.4

• Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
• Add ClientBuilder::http2_keep_alive_* options for the blocking client.
• Add TLS 1.3 support when using native-tls backend.
• Fix redirect handling to strip sensitive headers when the scheme changes.
• Fix HTTP/3 happy-eyeball connection creation.
• Upgrade hickory-resolver to 0.26.

v0.13.3

• Fix CertificateRevocationList parsing of PEM values.
• Fix logging in resolver to only show host, not full URL.
• Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
• Fix HTTP/3 to handle STOP_SENDING as not an error.
• Fix HTTP/3 pool to remove timed out QUIC connections.
• Fix HTTP/3 connection establishment picking IPv4 and IPv6.
• Upgrade rustls-platform-verifier.
• (wasm) Only use wasm-bindgen on unknown-* targets.

v0.13.2

• Fix HTTP/2 and native-tls ALPN feature combinations.
• Fix HTTP/3 to send h3 ALPN.
• (wasm) fix RequestBuilder::json() from override previously set content-type.

v0.13.1

• Fixes compiling with rustls on Android targets.

v0.13.0

• Breaking changes:
  • rustls is now the default TLS backend, instead of native-tls.
  • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
  • rustls-tls has been renamed to rustls.
  • rustls roots features removed, rustls-platform-verifier is used by default.
    • To use different roots, call tls_certs_only(your_roots).
  • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
  • query and form are now crate features, disabled by default.
  • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
• Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
  • For example, prefer tls_backend_rustls() over use_rustls_tls().

Commits

• 11489b3 v0.13.4
• d31ffbb feat: Expose HTTP2 keep alive configurations in blocking client (#3043)
• 79ed0d7 feat: support TLS 1.3 as min version under native-tls 🎉 (#2975)
• fb7bf6a fix: remove unwrap in hickory initialization (#3041)
• 3da616f fix: update hickory-resolver to 0.26 and adjust code accordingly (#3040)
• c77e7b2 fix(http3): use happy eyeballs for h3 connect (#3030)
• 9cbb65b chore: clean up minimal-versions CI job (#3039)
• 17a7dc5 chore: upgrade MSRV to 1.85 (#3038)
• 03db63a fix(redirect): strip sensitive headers on scheme change across redirects (#3034)
• 4b813a8 feat: add tls_sslkeylogfile builder method (#2923)
• Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in ...

  Description has been truncated