chore(deps): bump the cargo group across 1 directory with 5 updates by dependabot[bot] · Pull Request #13 · pleaseai/local-hub

dependabot · 2026-04-04T05:33:21Z

Bumps the cargo group with 5 updates in the / directory:

Package	From	To
tokio	`1.50.0`	`1.51.0`
hyper	`1.8.1`	`1.9.0`
reqwest	`0.12.28`	`0.13.2`
sha2	`0.10.9`	`0.11.0`
libsql	`0.6.0`	`0.9.30`

Updates tokio from 1.50.0 to 1.51.0

Release notes

Sourced from tokio's releases.

Tokio v1.51.0

1.51.0 (April 3rd, 2026)

Added

net: implement get_peer_cred on Hurd (#7989)

runtime: add tokio::runtime::worker_index() (#7921)

runtime: add runtime name (#7924)

runtime: stabilize LocalRuntime (#7557)

wasm: add wasm32-wasip2 networking support (#7933)

Changed

runtime: steal tasks from the LIFO slot (#7431)

Fixed

docs: do not show "Available on non-loom only." doc label (#7977)

macros: improve overall macro hygiene (#7997)

sync: fix notify_waiters priority in Notify (#7996)

sync: fix panic in Chan::recv_many when called with non-empty vector on closed channel (#7991)

#7431: tokio-rs/tokio#7431 #7557: tokio-rs/tokio#7557 #7921: tokio-rs/tokio#7921 #7924: tokio-rs/tokio#7924 #7933: tokio-rs/tokio#7933 #7977: tokio-rs/tokio#7977 #7989: tokio-rs/tokio#7989 #7991: tokio-rs/tokio#7991 #7996: tokio-rs/tokio#7996 #7997: tokio-rs/tokio#7997

Commits

0af06b7 chore: prepare Tokio v1.51.0 (#8005)
01a7f1d chore: prepare tokio-macros v2.7.0 (#8004)
eeb55c7 runtime: steal tasks from the LIFO slot (#7431)
1fc450a runtime: stabilize LocalRuntime (#7557)
324218f Merge tag 'tokio-1.47.4' (#8003)
aa65d0d chore: prepare Tokio v1.47.4 (#8002)
bf18ed4 sync: fix panic in Chan::recv_many when called with non-empty vector on clo...
43134f1 wasm: add wasm32-wasip2 networking support (#7933)
b4c3246 macros: improve overall macro hygiene (#7997)
7947fa4 rt: add runtime name (#7924)
Additional commits viewable in compare view

Updates hyper from 1.8.1 to 1.9.0

Release notes

Sourced from hyper's releases.

v1.9.0

Features

client:

expose HTTP/2 current max stream count (#4026) (d51cb715)

add HTTP/2 max_local_error_reset_streams option (#4021) (57787459)

error: add 'Error::is_parse_version_h2' method (393c77c7)

http1: add UpgradeableConnection::into_parts (e21205cf)

Bug Fixes

ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)

http1:

allow keep-alive for chunked requests with trailers (#4043) (7211ec25, closes #4044)

use case-insensitive matching for trailer fields (#4011) (3b344cac, closes #4010)

use httparse config for Servers (#4002) (bcb8ec57, closes #3923)

http2:

cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)

non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Refactors and chores

docs(error): add more information about is_incomplete_message by @seanmonstar in hyperium/hyper#3978

Run cargo-audit in CI to check for known vulnerabilities in dependencies. by @f0rki in hyperium/hyper#3246

refactor(http1): simplify match of Token parse error by @seanmonstar in hyperium/hyper#3981

refactor(http1): use saturating_sub instead of manual impl by @seanmonstar in hyperium/hyper#3983

refactor(http1): replace many args of Chunked::step with struct by @seanmonstar in hyperium/hyper#3982

docs: fix comment in put_slice() by @coryan in hyperium/hyper#3986

test(lib): fix unused warnings due to feature gating test imports by @seanmonstar in hyperium/hyper#3997

docs: improve Read trait and ReadBufCursor documentation by @majiayu000 in hyperium/hyper#4000

fix: use h1 parser config when parsing server req by @0xPoe in hyperium/hyper#4002

test(server): fix flaky disable_keep_alive_mid_request by @seanmonstar in hyperium/hyper#4009

chore(ci): update to actions/checkout@v6 by @tottoto in hyperium/hyper#4005

chore(ci): update to cargo-check-external-types 0.4.0 by @tottoto in hyperium/hyper#4006

update copyright year to 2026 by @jasmyhigh in hyperium/hyper#4007

refactor: avoid unwrap examples by @0xPoe in hyperium/hyper#4001

fix(http1): use case-insensitive matching for trailer fields by @HueCodes in hyperium/hyper#4011

chore: convert bug report template to GitHub form by @njg7194 in hyperium/hyper#4015

chore(ci): force toml mode in yq selecting msrv by @seanmonstar in hyperium/hyper#4020

fix: non-utf8 char may cause panic when calling to_str by @cuiweixie in hyperium/hyper#4019

feat(http2/client): add max_local_error_reset_streams option by @ffuugoo in hyperium/hyper#4021

chore: drop pin-utils dependency by @tottoto in hyperium/hyper#4023

[minor] doc: Fix HTTP/2 max concurrent stream link by @dentiny in hyperium/hyper#4037

fix(ffi): validate null pointers before dereferencing in request/resp… by @DhruvaD1 in hyperium/hyper#4038

h2: expose current max stream count by @howardjohn in hyperium/hyper#4026

fix(http1): allow keep-alive for chunked requests with trailers by @wi-adam in hyperium/hyper#4043

fix(http2): cancel pipe_task and send RST_STREAM on response future drop by @mmishra100 in hyperium/hyper#4042

Add APIs to allow switching an HTTP1 connection to HTTP2 if H2 preface is seen by @pborzenkov in hyperium/hyper#3996

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.9.0 (2026-03-31)

Bug Fixes

ffi: validate null pointers before dereferencing in request/response functions (#4038 (28e73ccd)

http1:

allow keep-alive for chunked requests with trailers (#4043) (7211ec25, closes #4044)

use case-insensitive matching for trailer fields (#4011) (3b344cac, closes #4010)

use httparse config for Servers (#4002) (bcb8ec57, closes #3923)

http2:

cancel sending client request body on response future drop (#4042) (5b17a69e, closes #4040)

non-utf8 char in Connection header may cause panic when calling to_str (#4019) (c36ca8a5)

Features

client:

expose HTTP/2 current max stream count (#4026) (d51cb715)

add HTTP/2 max_local_error_reset_streams option (#4021) (57787459)

error: add 'Error::is_parse_version_h2' method (393c77c7)

http1: add UpgradeableConnection::into_parts (e21205cf)

Commits

0d6c7d5 v1.9.0
e21205c feat(http1): add UpgradeableConnection::into_parts
393c77c feat(error): add 'Error::is_parse_version_h2' method
5b17a69 fix(http2): cancel sending client request body on response future drop (#4042)
7211ec2 fix(http1): allow keep-alive for chunked requests with trailers (#4043)
d51cb71 feat(client): expose HTTP/2 current max stream count (#4026)
28e73cc fix(ffi): validate null pointers before dereferencing in request/response fun...
e13e783 docs(client): fix HTTP/2 max concurrent stream link to spec (#4037)
8ba9008 chore(dependencies): drop pin-utils dependency (#4023)
5778745 feat(client): add HTTP/2 max_local_error_reset_streams option (#4021)
Additional commits viewable in compare view

Updates reqwest from 0.12.28 to 0.13.2

Release notes

Sourced from reqwest's releases.

v0.13.2

tl;dr

Fix HTTP/2 and native-tls ALPN feature combinations.

Fix HTTP/3 to send h3 ALPN.

(wasm) fix RequestBuilder::json() from override previously set content-type.

What's Changed

chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in seanmonstar/reqwest#2921

Update readme for 0.13 by @VojtaStanek in seanmonstar/reqwest#2926

fix http2 feature is not enabled for "native-tls" by @fox0 in seanmonstar/reqwest#2927

chore(deps): remove unused webpki-roots and rustls-native-certs by @seanmonstar in seanmonstar/reqwest#2932

docs: native-tls-alpn has changed to native-tls-no-alpn by @seanmonstar in seanmonstar/reqwest#2940

Specify h3 alpn for http3 connector by @passcod in seanmonstar/reqwest#2929

update copyright year to 2026 by @taozui472 in seanmonstar/reqwest#2943

fix(json): custom content-type overidden by json method for wasm by @Narendran-KT in seanmonstar/reqwest#2908

chore: upgrade wasm-streams to v0.5 by @xangelix in seanmonstar/reqwest#2958

chore(ci): add windows and linux arm64 to ci by @dennisameling in seanmonstar/reqwest#2960

New Contributors

@VojtaStanek made their first contribution in seanmonstar/reqwest#2926

@fox0 made their first contribution in seanmonstar/reqwest#2927

@passcod made their first contribution in seanmonstar/reqwest#2929

@taozui472 made their first contribution in seanmonstar/reqwest#2943

@Narendran-KT made their first contribution in seanmonstar/reqwest#2908

@xangelix made their first contribution in seanmonstar/reqwest#2958

@dennisameling made their first contribution in seanmonstar/reqwest#2960

Full Changelog: seanmonstar/reqwest@v0.13.1...v0.13.2

v0.13.1

What's Changed

http3: depend on quinn/rustls-aws-lc-rs to avoid ring dependency by @djc in seanmonstar/reqwest#2917

fix rustls on android by @seanmonstar in seanmonstar/reqwest#2918

Full Changelog: seanmonstar/reqwest@v0.13.0...v0.13.1

v0.13.0

Breaking changes

rustls is now the default TLS backend, instead of native-tls.

rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)

rustls-tls has been renamed to rustls.

rustls roots features removed, rustls-platform-verifier is used by default.

To use different roots, call tls_certs_only(your_roots).

native-tls now includes ALPN. To disable, use native-tls-no-alpn.

query and form are now crate features, disabled by default.

Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.2

Fix HTTP/2 and native-tls ALPN feature combinations.

Fix HTTP/3 to send h3 ALPN.

(wasm) fix RequestBuilder::json() from override previously set content-type.

v0.13.1

Fixes compiling with rustls on Android targets.

v0.13.0

Breaking changes:

rustls is now the default TLS backend, instead of native-tls.

rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)

rustls-tls has been renamed to rustls.

rustls roots features removed, rustls-platform-verifier is used by default.

To use different roots, call tls_certs_only(your_roots).

native-tls now includes ALPN. To disable, use native-tls-no-alpn.

query and form are now crate features, disabled by default.

Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).

Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)

For example, prefer tls_backend_rustls() over use_rustls_tls().

Commits

ad83b63 v0.13.2
c25f3db chore: Add Windows and Linux arm64 to CI (#2960)
761b89e chore: upgrade wasm-streams to v0.5 (#2958)
fd2d507 fix(wasm): custom content-type overidden by json method for wasm (#2908)
23eb7d4 chore: update copyright year to 2026 (#2943)
10c31c2 fix(http3): specify h3 alpn for http3 connector (#2929)
8530ec3 docs: native-tls-alpn has changed to native-tls-no-alpn (#2940)
04a216f chore(deps): remove unused webpki-roots and rustls-native-certs (#2932)
406b59e fix http2 feature is not enabled for native-tls ALPN (#2927)
325a020 Update readme for 0.13 (#2926)
Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

ffe0939 Release sha2 0.11.0 (#806)
8991b65 Use the standard order of the [package] section fields (#807)
3d2bc57 sha2: refactor backends (#802)
faa55fb sha3: bump keccak to v0.2 (#803)
d3e6489 sha3 v0.11.0-rc.9 (#801)
bbf6f51 sha2: tweak backend docs (#800)
155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
ed514f2 Use published version of keccak v0.2 (#799)
702bcd8 Migrate to closure-based keccak (#796)
827c043 sha3 v0.11.0-rc.8 (#794)
Additional commits viewable in compare view

Updates libsql from 0.6.0 to 0.9.30

Commits

0653c57 0.9.30
dda0414 libsql: Fix total_changes accumulation for SQL over HTTP batch execution (#2220)
eb0fe77 Pin cargo-chef to 0.1.75 to fix Docker build on rustc 1.85.0
3044eb7 Fix Docker build by using --locked for cargo-chef install (#2222)
46a0527 Fix Docker build by using --locked for cargo-chef install
5835b55 bindings/c: Add support for Intel architecture (#2218)
b7cc2b8 libsql: Fix total_changes accumulation for SQL over HTTP batch execution
99e6ad3 libsql-sqlite3: Pin psm version in extension tests (#2221)
79b5ace libsql-sqlite3: Pin psm version in extension tests
cd605eb Add support for intel
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.50.0` | `1.51.0` | | [hyper](https://github.com/hyperium/hyper) | `1.8.1` | `1.9.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.28` | `0.13.2` | | [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` | | [libsql](https://github.com/tursodatabase/libsql) | `0.6.0` | `0.9.30` | Updates `tokio` from 1.50.0 to 1.51.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.50.0...tokio-1.51.0) Updates `hyper` from 1.8.1 to 1.9.0 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.8.1...v1.9.0) Updates `reqwest` from 0.12.28 to 0.13.2 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.12.28...v0.13.2) Updates `sha2` from 0.10.9 to 0.11.0 - [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0) Updates `libsql` from 0.6.0 to 0.9.30 - [Release notes](https://github.com/tursodatabase/libsql/releases) - [Commits](tursodatabase/libsql@v0.6.0...libsql-0.9.30) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: hyper dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: reqwest dependency-version: 0.13.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: libsql dependency-version: 0.9.30 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-04-04T05:34:01Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

codecov · 2026-04-04T05:36:00Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

dependabot · 2026-04-18T05:33:00Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 4, 2026

dependabot Bot closed this Apr 18, 2026

dependabot Bot deleted the dependabot/cargo/cargo-a30d8b6542 branch April 18, 2026 05:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the cargo group across 1 directory with 5 updates#13

chore(deps): bump the cargo group across 1 directory with 5 updates#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-a30d8b6542

dependabot Bot commented on behalf of github Apr 4, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Apr 4, 2026

Uh oh!

codecov Bot commented Apr 4, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Tokio v1.51.0

1.51.0 (April 3rd, 2026)

Added

Changed

Fixed

v1.9.0

Features

Bug Fixes

Refactors and chores

v1.9.0 (2026-03-31)

Bug Fixes

Features

v0.13.2

tl;dr

What's Changed

New Contributors

v0.13.1

What's Changed

v0.13.0

Breaking changes

v0.13.2

v0.13.1

v0.13.0

Uh oh!

sonarqubecloud Bot commented Apr 4, 2026

Quality Gate passed

Uh oh!

codecov Bot commented Apr 4, 2026

Codecov Report

Uh oh!

dependabot Bot commented on behalf of github Apr 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 4, 2026 •

edited

Loading