[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anyhow	workspace.dependencies	patch	1 → 1.0.104
arc-swap	workspace.dependencies	patch	1 → 1.9.3
async-stream	workspace.dependencies	patch	0.3 → 0.3.6
async-trait	dependencies	patch	0.1 → 0.1.92
aws-credential-types	workspace.dependencies	patch	1 → 1.3.1
aws-sigv4	workspace.dependencies	patch	1 → 1.6.4
axum	workspace.dependencies	patch	0.8 → 0.8.9
bytes	dependencies	patch	1 → 1.12.1
bytes	workspace.dependencies	patch	1 → 1.12.1
chrono	workspace.dependencies	patch	0.4 → 0.4.45
clickhouse (source)	workspace.dependencies	patch	0.15 → 0.15.3
data-encoding	workspace.dependencies	patch	2 → 2.11.1
dotenvy	workspace.dependencies	patch	0.15 → 0.15.7
fred	workspace.dependencies	patch	10 → 10.1.0
futures (source)	workspace.dependencies	patch	0.3 → 0.3.34
hex	workspace.dependencies	patch	0.4 → 0.4.3
http-body	dependencies	patch	1 → 1.1.0
http-body-util	workspace.dependencies	patch	0.1 → 0.1.5
http_1x	dev-dependencies	patch	1 → 1.5.0
http_1x	dependencies	patch	1 → 1.5.0
hyper (source)	workspace.dependencies	minor	1 → 1.12.0
hyper-util (source)	workspace.dependencies	patch	0.1 → 0.1.21
libc	dependencies	patch	0.2 → 0.2.191
metrics	workspace.dependencies	patch	0.24 → 0.24.6
metrics-exporter-prometheus	workspace.dependencies	patch	0.18 → 0.18.3
once_cell	dependencies	patch	1 → 1.21.4
openidconnect	workspace.dependencies	minor	4 → 4.1.0
rand (source)	workspace.dependencies	patch	0.10 → 0.10.3
regex	dependencies	patch	1 → 1.13.1
reqwest	workspace.dependencies	patch	0.13 → 0.13.5
rust_decimal	workspace.dependencies	patch	1 → 1.43.0
rustls	workspace.dependencies	patch	0.23 → 0.23.46
rustls-platform-verifier	workspace.dependencies	patch	0.7 → 0.7.1
serde (source)	workspace.dependencies	patch	1 → 1.0.229
serde_json	workspace.dependencies	patch	1 → 1.0.154
serde_urlencoded	dependencies	patch	0.7 → 0.7.1
sysinfo	dependencies	minor	0.36 → 0.40.1
tempfile (source)	dev-dependencies	patch	3 → 3.27.0
thiserror	workspace.dependencies	patch	2 → 2.0.21
tokio (source)	workspace.dependencies	minor	1 → 1.54.1
tokio-stream (source)	workspace.dependencies	patch	0.1 → 0.1.19
tower	workspace.dependencies	patch	0.5 → 0.5.3
tower-http	workspace.dependencies	patch	0.7 → 0.7.1
tracing (source)	workspace.dependencies	patch	0.1 → 0.1.44
tracing-subscriber (source)	workspace.dependencies	patch	0.3 → 0.3.23
url	workspace.dependencies	patch	2 → 2.5.8
utoipa-swagger-ui	workspace.dependencies	patch	10 → 10.0.2
uuid	workspace.dependencies	minor	1 → 1.29.0
wiremock	dependencies	patch	0.6 → 0.6.5
wiremock	dev-dependencies	patch	0.6 → 0.6.5
xxhash-rust	workspace.dependencies	patch	0.8 → 0.8.19

---

Release Notes

vorner/arc-swap (arc-swap)

v1.9.3

• rwlock-strategy feature: RwLock<()> as an explicit, opt-in strategy
  (ArcSwapAny<Arc<T>, RwLock<()>>). DefaultStrategy is unchanged (#​210, #​211).

ClickHouse/clickhouse-rs (clickhouse)

v0.15.3

Compare Source

Changed

• Changed query parameters to be sent through a multipart/form-data body to avoid issues with URL length limits. (#​455)
  • If the Content-Type, Content-Length or Transfer-Encoding headers are already set, they will be overridden.
    This is not considered a breaking behavior change because user code should never be setting these headers.
• enable_http_compression and http_zlib_compression_level are no longer sent because they may trigger an error
  in readonly mode. (release PR #​487)
  • Only affects Query.
  • See added documentation on Client::with_compression() for details.

Fixed

• Fixed JSON type hints parsing to properly handle parenthesized types. (#​478)
• Switched internal schema fetch query issued by Client::insert() to not use the user-set query ID. (#​481)
  • If a query ID is already set, a derived query ID is used instead ({query_id}-describe).
• Switched Lz4 compression to use HTTP standard Accept-Encoding negotiation, fixing a regression in ClickHouse 26.9. (#​482)
• Fixed handling of JSON type hints starting with SKIP. (#​485)

hyperium/hyper (hyper)

v1.12.0

Compare Source

Bug Fixes

• http1:
  • withdraw a stale want when the client dispatcher takes a request (#​4208) (c44f1cc5)
  • remove content-length if transfer-encoding is auto-added (#​4224) (69396fdd)
  • always remove content-length if transfer-encoding is sent (#​4223) (a5d7fd78)
  • let a Connection close token win over a later keep-alive (#​4201) (5dadff76)
  • preserve hop-by-hop when setting close or keep-alive (#​4196) (74a39081)
• http2: do not reserve capacity for idle Upgraded streams (#​4198) (e89d0d93)

Features

• http1: add max_header_size limit for server and client (#​4183) (d1cd14ef, closes #​3832)

v1.11.1 (2026-08-27)

Bug Fixes

• http1:
  • detect TE: trailers caselessly and with other values (#​4152) (72fcf545)
  • recognize \n\r\n as a head terminator in the partial-read fast path (#​4147) (3534d75c, closes #​4145)
  • flush bytes buffered by the write re-check before yielding (#​4143) (f660f5bf)
  • evict pooled conn on request-side Connection: close (#​4110) (da19be08)

rust-lang/libc (libc)

v0.2.191

Compare Source

Support

• Emscripten: Support v4.0.12 to v6.0.11 (#​5610)

Added

• Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#​5609)
• Apple: add ifaliasreq and in6_aliasreq (#​5557)
• FreeBSD: Add PT_* constants (#​5625)
• Haiku: Add AI_* and NI_* constants from netdb.h (#​5585)
• Hurd: Add POSIX_SPAWN_* flags (#​5578)
• NuttX: Add AT_SYMLINK_NOFOLLOW (#​5614)
• OpenBSD: Add sensordev (#​5534)
• QuRT: Add isatty (#​5618)
• WASI: Add pthread_condattr_{get,set}clock (#​5626)

Fixed

• FreeBSD-aarch64: Fix gpregs and fpregs (#​5603)

Changed

• AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#​5616)
• Android: Make prop_info an extern type (#​5561)
• Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#​5612), (#​5636)
• FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#​5600)

ramosbugs/openidconnect-rs (openidconnect)

v4.1.0

Compare Source

This release increases the Minimum Supported Rust Version (MSRV) of this crate to 1.88.

New Features

• Implement into_secret on secret types by @​nhaef in (#​223)

Bug Fixes

• Fix "invalid_request_obbject" typo in CoreAuthErrorResponseType by @​adamgreg (#​248)
• Update p256 and p384 to 0.14 to fix RUSTSEC-2026-0387. This adds a dependency on getrandom 0.4, which by default breaks compilation on wasm32-unknown-unknown and wasm64-unknown-unknown targets.

Other Changes

• Update itertools to 0.14 and base64 to 0.22 by @​davidbarsky (#​225)
• Enable wasm_js feature on getrandom 0.4 to keep backward compatibility for WASM builds (see above)
• Fix warnings in rustc 1.99
• Update curve25519-dalek to 5.0

Full Changelog: ramosbugs/openidconnect-rs@4.0.1...4.1.0

serde-rs/json (serde_json)

v1.0.154

Compare Source

• Support preserve_order in no_std builds (#​1333, thanks @​razmser)

v1.0.153

Compare Source

• Report invalid UTF-8 at the first bad byte (#​1345, thanks @​00200200)

v1.0.152

Compare Source

• Preserve sign of -0 in arbitrary_precision mode (#​1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#​1347, thanks @​yuxi-liu-wired)

GuillaumeGomez/sysinfo (sysinfo)

v0.40.1

Compare Source

• Add back From<X> for Vec<Y> trait implementations for Disks, Gpus, Groups and Users.
• Windows: System::load_average now returns Err(Error::Unsupported).

v0.40.0

Compare Source

• Add new gpu feature.
• Add new Process::gpu_usage and Process::gpu_memory API.
• Add new GPUs API.
• Add new NetworkData::transmit_link_speed and NetworkData::receive_link_speed API.
• Add new Disk::id API.
• Remove IS_SUPPORTED_SYSTEM constant.
• Remove set_open_files_limit API.
• Remove list[_mut] methods for Users, Components and Disks.
• Remove Networks::list method.
• Remove From trait implementations for Users, Groups and Disks.
• Fix Networks refresh.
• Networks interface names have been switched from String to OsString.
• Unix: Fix not thread-safe code in Groups.
• Unix: Fix potential crash when a user's group cannot be retrieved.
• Linux: Correctly mark a process as existing after update.
• Linux: Fix cgroup memory information retrieval.
• Linux: Multiple performance optimizations and memory usage reduction.
• Linux: Fixes for thermal zone temperatures.
• Linux: Keep Component max temperature across refreshes.
• Android: Fall back to /proc/cpuinfo when /proc/stat is unreadable.
• Raspberry Pi: Fix toolchain package name in README.
• FreeBSD/NetBSD: Fix System::free_memory and System::available_memory.
• FreeBSD: Correctly query sysctl values.
• FreeBSD: Fix swap memory information retrieval.
• NetBSD: Fix Process::accumulated_cpu_time unit.
• macOS: Implement System::open_files_limit.
• macOS: Fix bug in Disks::refresh.
• iOS: Mark Networks as unsupported.
• iOS: Make Process::open_files return None.
• Windows: Don't keep thread-less processes alive.
• Windows: Fix CPU brand on ARM64.
• Windows: Fix crash in Components::refresh.

v0.39.6

Compare Source

• NetBSD: Add support for disk I/O usage.
• NetBSD: Improve retrieval of disk information.

v0.39.5

Compare Source

• macOS: Fix build for apple app store

v0.39.4

Compare Source

• Unix: Fix soundness issue when retrieving user's groups.
• macOS: Add new macOS version name.
• macOS: Fix inaccurate open_files returned value.

v0.39.3

Compare Source

• Unix: Fix retrieval of Network::mac_addr.
• Linux: Improve retrieval of process information if process terminates while doing so.

v0.39.2

Compare Source

• Windows: Greatly improve performance of System::refresh_cpu_specifics when CPU usage is not requested.
• iOS: Fix compilation error when user feature is enabled.
• Linux: Correctly set thread information for processes.

v0.39.1

Compare Source

• Linux: Fix wrong network numbers computation.

v0.39.0

Compare Source

• Update minimum supported rust version to 1.95.
• Add new NetworkData::operational_state API.
• Add new Process::cgroup_limits API (only returning data on Linux).
• All supported systems other than Windows: Improve performance of Networks::refresh*.
• All supported systems other than Windows: Fix soundness issue when retrieving users.
• Linux: Take into account parent cgroup memory limits.
• Linux: Fix panic when retrieving process information on ESXi.
• FreeBSD: Use the name of dataset as name for zfs disks.

v0.38.4

Compare Source

• macOS: Unpin objc2-* crates version.
• Linux: Fix computation of disk size.

v0.38.3

Compare Source

• macOS: Improve accuracy of System::available_memory and System::used_memory.
• Documentation: add missing unit for CPU::frequency returned value.

v0.38.2

Compare Source

• Implement Error trait for MacAddrFromStrError, IpNetworkFromStrError and KillError types.

v0.38.1

Compare Source

• macOS: Put back support for versions below macOS 12.

v0.38.0

Compare Source

• Add NetBSD support.
• Windows: Fix unsoundness for a function used in Motherboard and Product.
• Linux: Improve CPU info parsing.
• Fix serde serialization of MacAddr and of Disk::file_system.

v0.37.2

Compare Source

• Improve documentation of System::refresh_cpu_all and of System::refresh_cpu_specifics.
• Android: Fix System::uptime.
• Linux: Correctly handled modified/removed Process::exe paths.

v0.37.1

Compare Source

• Fix serde serialization on Process::name.
• Linux: Fix get_cpu_frequency on loongarch64.
• Windows: Correctly handle invalid UTF-8 string in Motherboard.

v0.37.0

Compare Source

• Update minimum supported Rust version to 1.88 (for 2024 edition and if let chain feature).
• Added Component::id API.
• Linux: Greatly improve partial processes retrieval.
• Linux: Simplify internal components retrieval code.

tokio-rs/tokio (tokio)

v1.54.1: Tokio v1.54.1

Compare Source

1.54.1 (October 21st, 2026)

Fixed

• time: revert "remove the runtime handle from timers" (#​8692)

v1.54.0: Tokio v1.54.0

Compare Source

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#​8514)

Added

• fs: add File::set_times, File::set_modified, and fs::FileTimes (#​8504)
• net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#​8378)
• runtime: add Builder::max_io_events_per_busy_tick (#​8410)
• runtime: stabilize tokio::runtime::worker_index() (#​8431)
• sync: add SemaphorePermit::semaphore() (#​8482)
• sync: add blocking_acquire methods to Semaphore (#​8269)
• sync: add watch::Receiver::is_closed (#​8481)
• wasm: support JSPI for Emscripten target (#​8285, #​8627)
• wasm: support the wasm32-unknown-emscripten target (#​8281, #​8422, #​8528, #​8628)

Changed

• fs: reject zero in File::set_max_buf_size (#​8449)
• io: make copy_buf cooperative (#​8459)
• io: panic when BufReader or BufStream is created with zero capacity (#​8494)
• io: panic when in-memory pipe is created with zero capacity (#​8397)
• io: reject zero buffer size in copy_bidirectional_with_sizes (#​8454)
• io: support vectored writes in Sink (#​8663)
• net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#​8444)
• net: start accepted sockets as readable and writable (#​8435)
• net: support UCred on Fuchsia (#​8257)
• process: use mio::unix::pipe for Unix child stdio (#​8603)
• runtime: cache-pad the shared injection queue and idle state (#​8622)
• runtime: decide auto-boxing of spawned futures at monomorphization time (#​8414)
• runtime: make enable_io available whenever rt is enabled (#​8387)
• runtime: move block_in_place setup into a non-generic function (#​8315)
• runtime: move the multi-thread inject queue to its own mutex (#​8382)
• runtime: panic when max_io_events_per_tick is zero (#​8476)
• runtime: suggest .await in nested block_on panic message (#​8501)
• sync: avoid atomic reader count in broadcast slots (#​8357)
• sync: use acquire/release orderings in Notify (#​8325)
• time: remove the runtime handle from timers (#​8458)

Fixed

• fs: restore File internal state when op fails (#​8291)
• io: complete zero-length memory stream operations immediately (#​8323)
• io: flush the writer when the reader stalls in copy_buf (#​8424)
• io: keep the shutdown bit when clearing readiness (#​8435)
• io: preserve the full ScheduledIo tick in readiness events (#​8331)
• io: read lines as bytes so a partial line survives an I/O error (#​8400)
• io: retry on ErrorKind::Interrupted in more I/O operations (#​8417, #​8432, #​8448, #​8453, #​8455, #​8460)
• io: use spawn_mandatory_blocking for stdout and stderr (#​8506)
• io: wait for pending operations before BufReader seeks (#​8599)
• net: close CreateFileW handle on SetNamedPipeHandleState failure (#​8418)
• net: fix peer credentials on NetBSD (#​8589)
• net: saturate TcpSocket and UnixSocket listen backlog (#​8511)
• net: treat ENOTCONN as success in UnixStream::shutdown (#​8526)
• runtime: allow building with --all-features without tokio_unstable (#​8401)
• runtime: avoid overflow in shutdown_timeout() (#​8497)
• runtime: fix spawn_blocking hang when only scheduler workers exist (#​8408)
• runtime: fix misleading signal driver panic message (#​8419)
• sync: preserve FIFO lock order when coop budget is exhausted (#​8371)
• sync: use usize for permit count in SemaphorePermit (#​8405)
• time: avoid interval deadline overflow (#​8385)
• time: handle wrapped top-level timer-wheel slots (#​8334)

Unstable

• fs: fall back when io_uring has no IO driver (#​8165)
• metrics: cap log histogram precision (#​8496)
• runtime: add an opt-in sharded spawn_blocking queue (#​8337)
• runtime: expose schedule latency in task hooks (#​8282)
• taskdump: fix idle bookkeeping when a task dump wakes parked workers (#​8372)
• taskdump: skip non-idle tasks during taskdumps (#​8568)

Documented

• docs: fix stray braces and broken links in rustdoc (#​8605)
• fs: document cancellation behavior of tokio::fs (#​8265)
• net: add Safety docs for named pipe from_raw_handle (#​8378)
• net: document that TcpStream::connect returns only the last error (#​8421)
• runtime: add error documentation for runtime::Builder (#​8297)
• runtime: link available_parallelism in worker count docs (#​8625)
• sync: clarify panic behavior of broadcast::channel() (#​8420)
• sync: fix typo in Semaphore documentation (#​8521)

v1.53.3: Tokio v1.53.3

Compare Source

1.53.3 (October 13th, 2026)

Added

• io: add AsyncFd::register and AsyncFd::register_with_interest (#​8587)

Changed

• io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#​8587)

Fixed

• io: wake and drop DuplexStream wakers outside the lock (#​8618)
• macros: avoid unreachable_code in join! and try_join! for Infallible (#​8518)
• runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#​8595)
• sync: wake waiters outside the lock when closing a semaphore (#​8529)
• test: fix several flaky tests (#​8196, #​8427, #​8609)

Fixed (unstable)

• rt: keep io_uring op alive when submission fails after push (#​8185)

juhaku/utoipa (utoipa-swagger-ui)

v10.0.2

Compare Source

What's New 💎 🆕 🎉

• (c7fd8ad) Update utoipa-swagger-ui release versions @​juhaku
• (5aff30b) Minimal fix to update zip to 9.0x (#​1645) @​KarstenB

Full change log

uuid-rs/uuid (uuid)

v1.29.0

Compare Source

What's Changed

• Add versioned constructors to NonNilUuid by @​RanaPriyansh in #​919
• Prepare for 1.29.0 release by @​KodrAus in #​920

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

v1.28.0

Compare Source

What's Changed

• Add optional serde format adapters by @​RanaPriyansh in #​916
• Prepare for 1.28.0 release by @​KodrAus in #​918

New Contributors

• @​RanaPriyansh made their first contribution in #​916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 6am on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.