Bump the cargo group across 1 directory with 30 updates

[dependabot]

Bumps the cargo group with 30 updates in the / directory:

Package	From	To
arc-swap	1.7.1	1.8.0
moka	0.12.11	0.12.12
tokio	1.48.0	1.49.0
uuid	1.18.1	1.19.0
serde_json	1.0.145	1.0.149
http	1.3.1	1.4.0
object_store	0.11.2	0.13.0
tokio-tungstenite	0.24.0	0.28.0
axum	0.7.9	0.8.8
url	2.5.7	2.5.8
tokio-util	0.7.16	0.7.18
tower-http	0.6.6	0.6.8
tracing	0.1.41	0.1.44
tracing-subscriber	0.3.20	0.3.22
sentry	0.35.0	0.46.0
sentry-tracing	0.35.0	0.46.0
axum-tracing-opentelemetry	0.24.2	0.32.2
opentelemetry	0.26.0	0.31.0
opentelemetry_sdk	0.26.0	0.31.0
opentelemetry-http	0.26.0	0.31.0
opentelemetry-otlp	0.26.0	0.31.0
tracing-opentelemetry	0.27.0	0.32.0
opentelemetry-semantic-conventions	0.26.0	0.31.0
thiserror	1.0.69	2.0.17
backon	1.5.2	1.6.0
rand	0.8.5	0.9.2
axum-prometheus	0.7.0	0.10.0
clap	4.5.49	4.5.54
criterion	0.3.6	0.8.1
insta	1.43.2	1.46.0

Updates arc-swap from 1.7.1 to 1.8.0

Changelog

Sourced from arc-swap's changelog.

1.8.0

• Support for Pin (#185, #183).
• Fix (hopefully) crash on ARM (#164).
• Fix Miri check (#186, #156).
• Fix support for Rust 1.31.0.
• Some minor clippy lints.

Commits

• 2540d26 Version bump to 1.8.0
• 9981e3a Keep "old" Cargo.lock around
• 57a8abb Fix documentation links
• 346c5b6 Fix some clippy warnings
• 0bd349a Fix support for Rust 1.31.0
• 57aa522 Merge pull request #185 from SpriteOvO/pin
• 4c0c4ab Implement RefCnt for Pin\<Arc> and Pin\<Rc>
• e596275 Avoid warnings about hidden lifetimes
• d849a2d Use SeqCst in debt-lists
• 1f9b221 Merge pull request #186 from nbdd0121/prov
• Additional commits viewable in compare view

Updates moka from 0.12.11 to 0.12.12

Release notes

Sourced from moka's releases.

Moka 0.12.12

Version 0.12.12

Bumped the minimum supported Rust version (MSRV) to 1.71.1, released on August 3, 2023 (#555gh-pull-0555).

Fixed

• Fixed use-after-free panic in the hierarchical timer wheels when Expiry returns None (#548gh-pull-0548, by @​awarus).
• Fixed a subtle undefined behavior (UB) in the internal deque::move_to_back method (found by Miri) (#553gh-pull-0553).

Added

• impl Expiry for some types (#519gh-pull-0519, by @​koushiro).

Removed

• Removed several unneeded files from the published package (#541gh-pull-0541, by @​weiznich).
• Removed the once_cell crate from the dependencies (#520gh-pull-0520, by @​Expyron).
• Removed the rustc_version crate from the dev-dependencies (#554gh-pull-0554).

Changelog

Sourced from moka's changelog.

Version 0.12.12

Bumped the minimum supported Rust version (MSRV) to 1.71.1, released on August 3, 2023 (#555[gh-pull-0555]).

Fixed

• Fixed use-after-free panic in the hierarchical timer wheels when Expiry returns None (#548[gh-pull-0548], by [@​awarus][gh-awarus]).
• Fixed a subtle undefined behavior (UB) in the internal deque::move_to_back method (found by Miri) (#553[gh-pull-0553]).

Added

• impl Expiry for some types (#519[gh-pull-0519], by [@​koushiro][gh-koushiro]).

Removed

• Removed several unneeded files from the published package (#541[gh-pull-0541], by [@​weiznich][gh-weiznich]).
• Removed the once_cell crate from the dependencies (#520[gh-pull-0520], by [@​Expyron][gh-Expyron]).
• Removed the rustc_version crate from the dev-dependencies (#554[gh-pull-0554]).

Commits

• 4ffcc25 Merge pull request #559 from moka-rs/tweak-changelog-format
• c37c952 dox: Fix identation in the CHANGELOG.md
• 28c692c Merge pull request #558 from moka-rs/prepare-0.12.12
• 13a8ec9 doc: Update the CHANGELOG and README for v0.12.12
• a0b263f doc: Update the CHANGELOG and README for v0.12.12
• f3d7822 feat: Version 0.12.12
• 65cfeb4 Merge pull request #557 from moka-rs/fix-cd/2025-12-20-msrv-1.71.1
• 78b6299 chore: Fix Clippy warnings
• 3763451 Merge pull request #553 from moka-rs/fix-deque-ub
• 7f9c40f Merge pull request #556 from moka-rs/msrv-1.71.1-cargo.toml
• Additional commits viewable in compare view

Updates tokio from 1.48.0 to 1.49.0

Release notes

Sourced from tokio's releases.

Tokio v1.49.0

1.49.0 (January 3rd, 2026)

Added

• net: add support for TCLASS option on IPv6 (#7781)
• runtime: stabilize runtime::id::Id (#7125)
• task: implement Extend for JoinSet (#7195)
• task: stabilize the LocalSet::id() (#7776)

Changed

• net: deprecate {TcpStream,TcpSocket}::set_linger (#7752)

Fixed

• macros: fix the hygiene issue of join! and try_join! (#7766)
• runtime: revert "replace manual vtable definitions with Wake" (#7699)
• sync: return TryRecvError::Disconnected from Receiver::try_recv after Receiver::close (#7686)
• task: remove unnecessary trait bounds on the Debug implementation (#7720)

Unstable

• fs: handle EINTR in fs::write for io-uring (#7786)
• fs: support io-uring with tokio::fs::read (#7696)
• runtime: disable io-uring on EPERM (#7724)
• time: add alternative timer for better multicore scalability (#7467)

Documented

• docs: fix a typos in bounded.rs and park.rs (#7817)
• io: add SyncIoBridge cross-references to copy and copy_buf (#7798)
• io: doc that AsyncWrite does not inherit from std::io::Write (#7705)
• metrics: clarify that num_alive_tasks is not strongly consistent (#7614)
• net: clarify the cancellation safety of the TcpStream::peek (#7305)
• net: clarify the drop behavior of unix::OwnedWriteHalf (#7742)
• net: clarify the platform-dependent backlog in TcpSocket docs (#7738)
• runtime: mention LocalRuntime in new_current_thread docs (#7820)
• sync: add missing period to mpsc::Sender::try_send docs (#7721)
• sync: clarify the cancellation safety of oneshot::Receiver (#7780)
• sync: improve the docs for the errors of mpsc (#7722)
• task: add example for spawn_local usage on local runtime (#7689)

#7125: tokio-rs/tokio#7125 #7195: tokio-rs/tokio#7195 #7305: tokio-rs/tokio#7305 #7467: tokio-rs/tokio#7467 #7614: tokio-rs/tokio#7614 #7686: tokio-rs/tokio#7686 #7689: tokio-rs/tokio#7689

... (truncated)

Commits

• e3b89bb chore: prepare Tokio v1.49.0 (#7824)
• 4f577b8 Merge 'tokio-1.47.3' into 'master'
• f320197 chore: prepare Tokio v1.47.3 (#7823)
• ea6b144 ci: freeze rustc on nightly-2025-01-25 in netlify.toml (#7652)
• 264e703 Merge tokio-1.43.4 into tokio-1.47.x (#7822)
• dfb0f00 chore: prepare Tokio v1.43.4 (#7821)
• 4a91f19 ci: fix wasm32-wasip1 tests (#7788)
• 601c383 ci: upgrade FreeBSD from 14.2 to 14.3 (#7758)
• 484cb52 sync: return TryRecvError::Disconnected from Receiver::try_recv after `Re...
• 16f20c3 rt: mention LocalRuntime in new_current_thread docs (#7820)
• Additional commits viewable in compare view

Updates uuid from 1.18.1 to 1.19.0

Release notes

Sourced from uuid's releases.

v1.19.0

What's Changed

• Switch serde dependency to serde_core by @​paolobarbolini in uuid-rs/uuid#843
• Upgrade to 2021 edition and fix most clippy warnings by @​paolobarbolini in uuid-rs/uuid#848
• Prepare for 1.19.0 release by @​KodrAus in uuid-rs/uuid#849

Full Changelog: uuid-rs/uuid@v1.18.1...v1.19.0

Commits

• 7527cef Merge pull request #849 from uuid-rs/cargo/v1.19.0
• d0422fa prepare for 1.19.0 release
• f9a36e2 Merge pull request #848 from paolobarbolini/maintenance
• 029a57e Fix most clippy warnings
• e73bb27 Upgrade to 2021 edition
• c597622 Merge pull request #843 from paolobarbolini/serde_core-migration
• 9835bd6 Switch serde dependency to serde_core
• See full diff in compare view

Updates serde_json from 1.0.145 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

• Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

• Update zmij dependency to 1.0

v1.0.147

• Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

• Set fast_arithmetic=64 for riscv64 (#1305, thanks @​Xeonacid)

Commits

• 4f6dbfa Release 1.0.149
• f3df680 Touch up PR 1306
• e16730f Merge pull request #1306 from b41sh/fix-float-number-display
• eeb2bcd Align arbitrary_precision number strings with zmij’s formatting
• 8b291c4 Release 1.0.148
• 1aefe15 Update to zmij 1.0
• 62d6e8d Release 1.0.147
• fd829a6 Merge pull request #1304 from dtolnay/zmij
• e757a3d Switch from ryu -> zmij for float formatting
• 75ad7e6 Release 1.0.146
• Additional commits viewable in compare view

Updates http from 1.3.1 to 1.4.0

Release notes

Sourced from http's releases.

v1.4.0

Highlights

• Add StatusCode::EARLY_HINTS constant for 103 Early Hints.
• Make StatusCode::from_u16 now a const fn.
• Make Authority::from_static now a const fn.
• Make PathAndQuery::from_static now a const fn.
• MSRV increased to 1.57 (allows legible const fn panic messages).

What's Changed

• Updated Rand dependency to v0.9.1 by @​FarzadMohtasham in hyperium/http#763
• Fix compilation on latest nightly by @​akonradi-signal in hyperium/http#769
• Avoid unnecessary .expect()s for empty HeaderMap by @​akonradi-signal in hyperium/http#768
• feat: show types in Extensions debug output by @​crepererum in hyperium/http#773
• Docs: Clarify the HeaderMap documentaion by @​Sol-Ell in hyperium/http#774
• style: update format for tests by @​seanmonstar in hyperium/http#782
• Make StatusCode::from_u16 const by @​coolreader18 in hyperium/http#761
• docs: Fix typo 'an' to 'and' in http::status module documentation by @​zxzxovo in hyperium/http#784
• fix: Prevent panic in try_reserve/try_with_capacity on capacity overflow by @​AriajSarkar in hyperium/http#787
• fix: Add reserve() to Extend impl for (Option, T)) by @​AriajSarkar in hyperium/http#788
• chore: minor improvement for docs by @​claudecodering in hyperium/http#790
• chore: bump MSRV to 1.57 by @​seanmonstar in hyperium/http#793
• Add EARLY_HINTS status code by @​mdevino in hyperium/http#758
• refactor(header): use better panic message in const HeaderName and HeaderValue by @​seanmonstar in hyperium/http#797
• docs: remove unnecessary extern crate sentence by @​tottoto in hyperium/http#799
• chore(ci): update to actions/checkout@v5 by @​tottoto in hyperium/http#800
• feat(uri): make Authority/PathAndQuery::from_static const by @​WaterWhisperer in hyperium/http#786
• refactor(header): inline FNV hasher to reduce dependencies by @​seanmonstar in hyperium/http#796
• v1.4.0 by @​seanmonstar in hyperium/http#803

New Contributors

• @​FarzadMohtasham made their first contribution in hyperium/http#763
• @​akonradi-signal made their first contribution in hyperium/http#769
• @​crepererum made their first contribution in hyperium/http#773
• @​Sol-Ell made their first contribution in hyperium/http#774
• @​coolreader18 made their first contribution in hyperium/http#761
• @​zxzxovo made their first contribution in hyperium/http#784
• @​AriajSarkar made their first contribution in hyperium/http#787
• @​claudecodering made their first contribution in hyperium/http#790
• @​mdevino made their first contribution in hyperium/http#758
• @​WaterWhisperer made their first contribution in hyperium/http#786

Full Changelog: hyperium/http@v1.3.1...v1.4.0

Changelog

Sourced from http's changelog.

1.4.0 (November 24, 2025)

• Add StatusCode::EARLY_HINTS constant for 103 Early Hints.
• Make StatusCode::from_u16 now a const fn.
• Make Authority::from_static now a const fn.
• Make PathAndQuery::from_static now a const fn.
• MSRV increased to 1.57 (allows legible const fn panic messages).

Commits

• b9625d8 v1.4.0
• 50b009c refactor(header): inline FNV hasher to reduce dependencies (#796)
• b370d36 feat(uri): make Authority/PathAndQuery::from_static const (#786)
• 0d74251 chore(ci): update to actions/checkout@v5 (#800)
• a760767 docs: remove unnecessary extern crate sentence (#799)
• fb1d457 refactor(header): use better panic message in const HeaderName and HeaderValu...
• 20dbd6e feat(status): Add 103 EARLY_HINTS status code (#758)
• e7a7337 chore: bump MSRV to 1.57
• 1888e28 tests: downgrade rand back to 0.8 for now
• 918bbc3 chore: minor improvement for docs (#790)
• Additional commits viewable in compare view

Updates object_store from 0.11.2 to 0.13.0

Changelog

Sourced from object_store's changelog.

Historical Changelog

v0.12.4 (2025-09-19)

Full Changelog

Implemented enhancements:

• Allow flagging PUT operations as idempotent. #464
• Release object store 0.12.3 (non breaking API) Release July 2025 #428
• LocalFileSystem: offset for list_with_offset can't be identified / List results *must* be sorted #388
• Support setting storage class when objects are written #330
• Support auth using AssumeRoleWithWebIdentity for non-AWS S3-compatible implementations #283
• Types from http through request leak into object_store public interfaces but aren't re-exported #263

Fixed bugs:

• Retry does not cover connection errors #368

Documentation updates:

• Improve documentation for http client timeout #390 (alamb)

Closed issues:

• When a client http request is retried, I would like more information in the info! about the retry #486
• Range header causing AWS Signature issues #471
• Impossible to downcast an Error::Generic into a RetryError #469
• JWT session tokens cause SignatureDoesNotMatch with Supabase S3 #466
• Double url-encoding of special characters in key names #457

... (truncated)

Commits

• See full diff in compare view

Updates tokio-tungstenite from 0.24.0 to 0.28.0

Changelog

Sourced from tokio-tungstenite's changelog.

0.28.0

• Update tungstenite to 0.18.0. See tungstenite release.

0.27.0

• See performance updates in tungstenite-rs.

0.26.2

• Update tungstenite, see changes here.

0.26.1

• Update tungstenite to address an issue that might cause UB in certain cases.

0.26.0

• Update tungstenite to 0.26.0 (breaking changes).

0.25.0

• Update tungstenite to 0.25.0 (important updates!).

Commits

• 35d110c Implement into_inner to get the underlying stream (#367)
• f3ae75d Update tungstenite version and fix bugs
• 25b544e Allow getting a reference to the shared inner stream (#363)
• e855f9e Fix errors in the examples caused by Utf8Error
• 21c5d19 Bump version
• fbd1471 Update performance notes in README
• a8d9f19 Bump version
• aafb2f9 Bump version
• 0eefa27 Bump version
• 2d23077 Update to new tungstenite and bump version
• Additional commits viewable in compare view

Updates axum from 0.7.9 to 0.8.8

Release notes

Sourced from axum's releases.

axum v0.8.8

• Clarify documentation for Router::route_layer (#3567)

#3567: tokio-rs/axum#3567

axum v0.8.7

• Relax implicit Send / Sync bounds on RouterAsService, RouterIntoService (#3555)
• Make it easier to visually scan for default features (#3550)
• Fix some documentation typos

#3550: tokio-rs/axum#3550 #3555: tokio-rs/axum#3555

axum v0.8.5

• fixed: Reject JSON request bodies with trailing characters after the JSON document (#3453)
• added: Implement OptionalFromRequest for Multipart (#3220)
• added: Getter methods Location::{status_code, location}
• added: Support for writing arbitrary binary data into server-sent events (#3425)]
• added: middleware::ResponseAxumBodyLayer for mapping response body to axum::body::Body (#3469)
• added: impl FusedStream for WebSocket (#3443)
• changed: The sse module and Sse type no longer depend on the tokio feature (#3154)
• changed: If the location given to one of Redirects constructors is not a valid header value, instead of panicking on construction, the IntoResponse impl now returns an HTTP 500, just like Json does when serialization fails (#3377)
• changed: Update minimum rust version to 1.78 (#3412)

#3154: tokio-rs/axum#3154 #3220: tokio-rs/axum#3220 #3377: tokio-rs/axum#3377 #3412: tokio-rs/axum#3412 #3425: tokio-rs/axum#3425 #3443: tokio-rs/axum#3443 #3453: tokio-rs/axum#3453 #3469: tokio-rs/axum#3469

axum v0.8.4

• added: Router::reset_fallback (#3320)
• added: WebSocketUpgrade::selected_protocol (#3248)
• fixed: Panic location for overlapping method routes (#3319)
• fixed: Don't leak a tokio task when using serve without graceful shutdown (#3129)

#3319: tokio-rs/axum#3319 #3320: tokio-rs/axum#3320 #3248: tokio-rs/axum#3248 #3129: tokio-rs/axum#3129

axum v0.8.3

• added: Implement From<Bytes> for Message (#3273)
• added: Implement OptionalFromRequest for Json (#3142)
• added: Implement OptionalFromRequest for Extension (#3157)
• added: Allow setting the read buffer capacity of WebSocketUpgrade (#3178)

... (truncated)

Commits

• d07863f Release axum v0.8.8 and axum-extra v0.12.3
• 287c674 axum-extra: Make typed-routing feature enable routing feature (#3514)
• f5804aa SecondElementIs: Correct a small inconsistency (#3559)
• f51f3ba axum-extra: Add trailing newline to pretty JSON response (#3526)
• 816407a Fix integer underflow in try_range_response for empty files (#3566)
• 78656eb docs: Clarify route_layer does not apply middleware to the fallback handler...
• 4404f27 Release axum v0.8.7 and axum-extra v0.12.2
• 8f1545a Fix typo in extractors guide (#3554)
• 4fc3faa Relax implicit Send / Sync bounds (#3555)
• a05920c Make it easier to visually scan for default features (#3550)
• Additional commits viewable in compare view

Updates url from 2.5.7 to 2.5.8

Commits

• d6ea13c Bump to 2.5.8
• 8269ac3 ci: update cargo-deny config, bump cargo-deny-action to v2 (#1092)
• 6dfdf17 chore: fix some typos in comments (#1090)
• b06048d Attempt to fix 1.82 CI (#1085)
• 9771ab5 Fix roundtripping issue (#1079)
• 22b925f Improve Compile Times with serde_derive (#1075)
• 0afccc9 fix outdated docs for ParseError (#1074)
• See full diff in compare view

Updates tokio-util from 0.7.16 to 0.7.18

Commits

• 9cc02cc chore: prepare tokio-util 0.7.18 (#7829)
• d2799d7 task: improve the docs of Builder::spawn_local (#7828)
• 4d4870f task: doc that task drops before JoinHandle completion (#7825)
• fdb1509 fs: check for io-uring opcode support (#7815)
• 426a562 rt: remove allow(dead_code) after JoinSet stabilization (#7826)
• e3b89bb chore: prepare Tokio v1.49.0 (#7824)
• 4f577b8 Merge 'tokio-1.47.3' into 'master'
• f320197 chore: prepare Tokio v1.47.3 (#7823)
• ea6b144 ci: freeze rustc on nightly-2025-01-25 in netlify.toml (#7652)
• 264e703 Merge tokio-1.43.4 into tokio-1.47.x (#7822)
• Additional commits viewable in compare view

Updates tower-http from 0.6.6 to 0.6.8

Release notes

Sourced from tower-http's releases.

tower-http-0.6.8

Fixed

• Disable multiple_members in Gzip decoder, since HTTP context only uses one member. (#621)

#621: tower-rs/tower-http#621

What's Changed

• Disable multiple_members option for gzip decoder by @​ducaale in tower-rs/tower-http#621
• ci: Pin tracing in MSRV job by @​ducaale in tower-rs/tower-http#622
• ci: Switch cargo-public-api-crates to cargo-check-external-types by @​tottoto in tower-rs/tower-http#613
• Remove deprecated annotations and Refactor From implementations by @​sinder38 in tower-rs/tower-http#608
• v0.6.8 by @​seanmonstar in tower-rs/tower-http#624

New Contributors

• @​sinder38 made their first contribution in tower-rs/tower-http#608

Full Changelog: tower-rs/tower-http@tower-http-0.6.7...tower-http-0.6.8

tower-http-0.6.7

Added

• TimeoutLayer::with_status_code(status) to define the status code returned when timeout is reached. (#599)

Deprecated

• auth::require_authorization is too basic for real-world. (#591)
• TimeoutLayer::new() should be replaced with TimeoutLayer::with_status_code(). (Previously was StatusCode::REQUEST_TIMEOUT) (#599)

Fixed

• on_eos is now called even for successful responses. (#580)
• ServeDir: call fallback when filename is invalid (#586)
• decompression will not fail when body is empty (#618)

#580: tower-rs/tower-http#580 #586: tower-rs/tower-http#586 #591: tower-rs/tower-http#591 #599: tower-rs/tower-http#599 #618: tower-rs/tower-http#618

New Contributors

• @​mladedav made their first contribution in tower-rs/tower-http#580
• @​aryaveersr made their first contribution in tower-rs/tower-http#586
• @​soerenmeier made their first contribution in tower-rs/tower-http#588

... (truncated)

Commits

• 33166c8 v0.6.8
• 6680160 Fix deprecated lints (#608)
• 81b8231 ci: Switch cargo-public-api-crates to cargo-check-external-types (#613)
• 1fb0144 ci: pin tracing in msrv job (#622)
• 1fe4c09 fix(decompression): disable multiple_members option for gzip decoder (#621)
• 3bf1ba7 v0.6.7
• 723ca9a fix(decompression): Suppress EOF errors caused by decompressing empty body (#...
• 8ab9f82 chore(ci): use newer cargo-public-api-crates job (#619)
• 7cfdf76 doc: Replace doc_auto_cfg with doc_cfg (#609)
• 50beeaf Add support for custom status code in TimeoutLayer (#599)
• Additional commits viewable in compare view

Updates tracing from 0.1.41 to 0.1.44

Release notes

Sourced from tracing's releases.

tracing 0.1.44

Fixed

• Fix record_all panic (#3432)

Changed

• tracing-core: updated to 0.1.36 (#3440)

#3432: tokio-rs/tracing#3432 #3440: tokio-rs/tracing#3440

tracing 0.1.43

Important

The previous release [0.1.42] was yanked because #3382 was a breaking change. See further details in #3424. This release contains all the changes from that version, plus a revert for the problematic part of the breaking PR.

Fixed

• Revert "make valueset macro sanitary" (#3425)

#3382: tokio-rs/tracing#3382 #3424: tokio-rs/tracing#3424 #3425: tokio-rs/tracing#3425 [0.1.42]: https://github.com/tokio-rs/tracing/releases/tag/tracing-0.1.42

tracing 0.1.42

Important

The [Span::record_all] method has been removed from the documented API. It was always unsuable via the documented API as it requried a ValueSet which has no publically documented constructors. The method remains, but should not be used outside of tracing macros.

A...

Description has been truncated