build(deps): bump the external group with 5 updates by dependabot[bot] · Pull Request #248 · agglayer/interop

dependabot · 2026-06-15T14:09:59Z

Bumps the external group with 5 updates:

Package	From	To
http	`1.4.0`	`1.4.2`
hyper	`1.9.0`	`1.10.1`
insta	`1.47.2`	`1.48.0`
serde_json	`1.0.149`	`1.0.150`
serde_with	`3.20.0`	`3.21.0`

Updates http from 1.4.0 to 1.4.2

Release notes

Sourced from http's releases.

v1.4.1

tl;dr

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

chore(header): fix clippy::assign_op_pattern by @rxc-amzn in hyperium/http#806

ci: pin itoa in msrv job by @seanmonstar in hyperium/http#813

Remove unnecessary explicit lifetimes by @jplatte in hyperium/http#815

chore(ci): update to actions/checkout@v6 by @tottoto in hyperium/http#819

tests: update to rand 0.10 by @tottoto in hyperium/http#818

refactor: Remove usage of float instruction by @AurelienFT in hyperium/http#823

refactor(uri): consolidate PathAndQuery::from_shared and from_static by @seanmonstar in hyperium/http#825

fix(uri): reject Path::from_shared/from_static if doesn't start with slash by @seanmonstar in hyperium/http#826

Rephrase comment by @daalfox in hyperium/http#827

Fix typo in request builder docs by @vleksis in hyperium/http#831

fix: clamp Extend size hint so HeaderMap reserve cannot overflow by @SAY-5 in hyperium/http#833

fix(headers): fix stacked borrows for IterMut/ValuesIterMut by @seanmonstar in hyperium/http#837

fix(header): use a set_len guard in IntoIter drop by @seanmonstar in hyperium/http#838

New Contributors

@rxc-amzn made their first contribution in hyperium/http#806

@AurelienFT made their first contribution in hyperium/http#823

@daalfox made their first contribution in hyperium/http#827

@vleksis made their first contribution in hyperium/http#831

@SAY-5 made their first contribution in hyperium/http#833

Full Changelog: hyperium/http@v1.4.0...v1.4.1

Changelog

Sourced from http's changelog.

1.4.2 (June 8, 2026)

Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.

Fix Uri to properly reject DEL characters.

1.4.1 (May 25, 2026)

Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.

Fix Extend for HeaderMap to clamp max size hint and not overflow.

Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.

Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

Commits

82db5b8 v1.4.2
a9cdbf8 fix(uri): reject DEL character (#842)
df75ca3 fix(uri): allow STAR paths with scheme/auth (#843)
ec3f8ce feat(method): impl PartialOrd + Ord (#840)
a24c968 v1.4.1
bc3b044 fix(header): use a set_len guard in IntoIter drop (#838)
1b968dc fix(header): fix stacked borrows for IterMut/ValuesIterMut (#837)
6e2dd42 fix: clamp Extend size hint so HeaderMap reserve cannot overflow (#833)
68e0abb docs: fix typo in request builder docs (#831)
29dd307 docs(extensions): rephrase internal comment (#827)
Additional commits viewable in compare view

Updates hyper from 1.9.0 to 1.10.1

Release notes

Sourced from hyper's releases.

v1.10.1

What's Changed

fix(http1): fix busy loop when peer half-closes and open body by @seanmonstar in hyperium/hyper#4086

Full Changelog: hyperium/hyper@v1.10.0...v1.10.1

v1.10.0

Features

http2:

add reset_stream_duration() client option (#4068) (156a6f6a, closes #2599)

Add 'header_table_size()' method to server builder (#4062) (6c9182c4)

Bug Fixes

http1:

send error when dispatcher is dropped mid-body (#4069) (b7a679ba, closes #3995, #4016)

fix reading large bodies on 32-bit systems (#4056) (b12f6525, closes #4055)

fix rare missed write wakeup on connections v2 (743a3ba0)

http2:

do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)

reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Refactors, chores, et al

fix(http1): fix rare missed write wakeup on connections v2 by @lthiery in hyperium/hyper#3988

fix(client): reading trailers shouldn't propagate NO_ERROR from early response by @ulyssa in hyperium/hyper#3998

fix(http1): fix reading large bodies on 32-bit systems by @seanmonstar in hyperium/hyper#4056

fix(http2): do not reserve capacity before body data is available by @seanmonstar in hyperium/hyper#4061

Fix two clippy lints by @jplatte in hyperium/hyper#4063

docs(client): document Drop behavior for Connection types by @lihan3238 in hyperium/hyper#4064

Add header_table_size method to server builder by @ArniDagur in hyperium/hyper#4062

feat(http2/client): expose reset_stream_duration option by @kimjune01 in hyperium/hyper#4068

fix(http1): send error when dispatcher is dropped mid-body by @seanmonstar in hyperium/hyper#4069

docs: document cancel safety for client send_request futures by @lihan3238 in hyperium/hyper#4070

docs(error): add detailed doc comments to Error query methods by @kimjune01 in hyperium/hyper#4065

refactor(lib): use a panic_if_poisoned() helper for mutexes by @seanmonstar in hyperium/hyper#4072

refactor(lib): replace unwraps with expects by @seanmonstar in hyperium/hyper#4073

docs(lib): fixup markdown and grammar in doc comments by @seanmonstar in hyperium/hyper#4074

chore(ci): fix security-audit job by @seanmonstar in hyperium/hyper#4076

chore(lib): start a strict clippy config by @seanmonstar in hyperium/hyper#4075

tests(client): fix misuse of path_and_query in CONNECT test by @seanmonstar in hyperium/hyper#4078

Removing wildcard_imports lint allowance by @Lori-Shu in hyperium/hyper#4080

Fix manual_assert lint by @xd009642 in hyperium/hyper#4079

New Contributors

@ulyssa made their first contribution in hyperium/hyper#3998

@lihan3238 made their first contribution in hyperium/hyper#4064

@ArniDagur made their first contribution in hyperium/hyper#4062

@kimjune01 made their first contribution in hyperium/hyper#4068

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.10.1 (2026-05-29)

Bug Fixes

http1: fix busy loop when peer half-closes and open body (#4086) (c6cb906f, closes #4085)

v1.10.0 (2026-05-27)

Bug Fixes

http1:

send error when dispatcher is dropped mid-body (#4069) (b7a679ba, closes #3995, #4016)

fix reading large bodies on 32-bit systems (#4056) (b12f6525, closes #4055)

fix rare missed write wakeup on connections v2 (743a3ba0)

http2:

do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)

reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Features

http2:

add reset_stream_duration() client option (#4068) (156a6f6a, closes #2599)

Add 'header_table_size()' method to server builder (#4062) (6c9182c4)

Commits

e3bcd37 v1.10.1
c6cb906 fix(http1): fix busy loop when peer half-closes and open body (#4086)
54e8511 v1.10.0
79dbab6 style(ext): fix manual_assert lint (#4079)
cca6bf1 style(client): removing wildcard_imports lint allowance (#4080)
3cc1158 test(client): fix misuse of path_and_query in CONNECT test (#4078)
cad38b7 chore(lib): start a strict clippy config (#4075)
7bb1d03 chore(ci): fix security-audit job (#4076)
5dbcae7 docs(lib): fixup markdown and grammar in doc comments (#4074)
08ef365 refactor(lib): replace unwraps with expects (#4073)
Additional commits viewable in compare view

Updates insta from 1.47.2 to 1.48.0

Release notes

Sourced from insta's releases.

1.48.0

Release Notes

Add strip_ansi_escape_codes setting which removes ANSI escape sequences (color codes, cursor movement, etc.) from snapshot content before comparison. Requires the filters feature. #899 (@pierluigilenoci)

Add opt-in support for YAML literal blocks for multiline strings in snapshot metadata fields such as description and expression. Set INSTA_YAML_BLOCK_STYLE=1 to enable. #851 (@ivov)

Setting CI=true normally makes cargo insta test behave as though --check was passed. Explicit snapshot handling options such as --accept now take precedence over this environment variable, allowing users to override this behavior if they want to. #924

Fix cargo insta test --profile being forwarded to nextest as the nextest profile instead of the cargo build profile; it now translates to --cargo-profile for the nextest runner. Add --nextest-profile to select the nextest profile. #910

Fix cargo insta pending-snapshots printing unusable \\?\-prefixed paths on Windows. The --snapshot filter now also accepts partial paths: any trailing path suffix of the snapshot file matches, so a bare --snapshot my_test.snap works. #904

Accepting a binary snapshot no longer fails with os error 2 when its data file is missing (e.g. gitignored and not committed). #914

Install cargo-insta 1.48.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-installer.ps1 | iex"
Download cargo-insta 1.48.0

File Platform Checksum

cargo-insta-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum

cargo-insta-x86_64-apple-darwin.tar.xz Intel macOS checksum

cargo-insta-x86_64-pc-windows-msvc.zip x64 Windows checksum

cargo-insta-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

cargo-insta-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

Changelog

Sourced from insta's changelog.

1.48.0

Add strip_ansi_escape_codes setting which removes ANSI escape sequences (color codes, cursor movement, etc.) from snapshot content before comparison. Requires the filters feature. #899 (@pierluigilenoci)

Add opt-in support for YAML literal blocks for multiline strings in snapshot metadata fields such as description and expression. Set INSTA_YAML_BLOCK_STYLE=1 to enable. #851 (@ivov)

Setting CI=true normally makes cargo insta test behave as though --check was passed. Explicit snapshot handling options such as --accept now take precedence over this environment variable, allowing users to override this behavior if they want to. #924

Fix cargo insta test --profile being forwarded to nextest as the nextest profile instead of the cargo build profile; it now translates to --cargo-profile for the nextest runner. Add --nextest-profile to select the nextest profile. #910

Fix cargo insta pending-snapshots printing unusable \\?\-prefixed paths on Windows. The --snapshot filter now also accepts partial paths: any trailing path suffix of the snapshot file matches, so a bare --snapshot my_test.snap works. #904

Accepting a binary snapshot no longer fails with os error 2 when its data file is missing (e.g. gitignored and not committed). #914

Commits

7f23d2e Release 1.48.0 (#925)
ee9cae1 Allow CI=true to be overridden by an explicitly passed --accept CLI flag ...
043cf82 fix: translate --profile to --cargo-profile for nextest (#913)
9c77f13 test: cover deep-wildcard redaction through arrays (#915)
362f432 Fix --snapshot filter on Windows; allow partial paths (#904)
a436836 fix: tolerate a missing binary snapshot data file (#914)
bf5fcdf fix: regenerate Cargo.lock and guard it with --locked in CI (#912)
a761a9c feat: Support YAML literal blocks for multiline strings (#851)
f9633f3 ci: pin check-minver to nightly-2026-04-25 (#905)
c7b98b8 feat: add strip_ansi_escape_codes setting (#899)
See full diff in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates serde_with from 3.20.0 to 3.21.0

Release notes

Sourced from serde_with's releases.

serde_with v3.21.0

Security

GHSA-7gcf-g7xr-8hxj: KeyValueMap serialization panics on empty sequence or map entries Bad or attacker controlled values could cause a panic while allocating too large values. Fixed in #966 by setting a maximum allocation size during the creation of collections like Vec or sets.

Thanks to @7thParkk for reporting the issue.

Added

Add NoneAsZero adapter that maps Option<NonZero*> to a plain integer, encoding None as 0 by @SAY-5 (#486)

Changed

Re-enable link-to-definition on docs.rs (#964)

Fixed

Fix some doc links to point to the correct types (#963)

Re-enable unused_qualifications and fix the resulting findings by @lms0806 (#962)

Commits

0f4ca67 Update changelog for 3.21.0 (#967)
7654841 Update changelog for 3.21.0
c8a1d82 Protect all collection creations against capacity overflow by using `size_hin...
6ad5fa5 Properly feature gate the vec_with_capacity_cautious function
ef7d141 Protect all collection creations against capacity overflow by using `size_hin...
a348da3 Add serde_as deserialize_as explain (#958)
2e5bc20 Bump the github-actions group with 3 updates (#965)
927a3d6 Bump the github-actions group with 3 updates
62d14ec Enable link-to-definition on docs.rs again, after the upstream issue was reso...
4584d94 Enable link-to-definition on docs.rs again, after the upstream issue was reso...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the external group with 5 updates: | Package | From | To | | --- | --- | --- | | [http](https://github.com/hyperium/http) | `1.4.0` | `1.4.2` | | [hyper](https://github.com/hyperium/hyper) | `1.9.0` | `1.10.1` | | [insta](https://github.com/mitsuhiko/insta) | `1.47.2` | `1.48.0` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.20.0` | `3.21.0` | Updates `http` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.0...v1.4.2) Updates `hyper` from 1.9.0 to 1.10.1 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v1.9.0...v1.10.1) Updates `insta` from 1.47.2 to 1.48.0 - [Release notes](https://github.com/mitsuhiko/insta/releases) - [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md) - [Commits](mitsuhiko/insta@1.47.2...1.48.0) Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `serde_with` from 3.20.0 to 3.21.0 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.20.0...v3.21.0) --- updated-dependencies: - dependency-name: http dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: hyper dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: insta dependency-version: 1.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: serde_with dependency-version: 3.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external ... Signed-off-by: dependabot[bot] <support@github.com>

claude

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 15, 2026

dependabot Bot requested a review from a team as a code owner June 15, 2026 14:10

dependabot Bot requested review from Ekleog-Polygon, Freyskeyd and hadjiszs June 15, 2026 14:10

claude Bot reviewed Jun 15, 2026

View reviewed changes

Freyskeyd enabled auto-merge June 18, 2026 09:29

Freyskeyd approved these changes Jun 18, 2026

View reviewed changes

Freyskeyd added this pull request to the merge queue Jun 18, 2026

Merged via the queue into main with commit 3b8aa58 Jun 18, 2026
16 checks passed

Freyskeyd deleted the dependabot/cargo/external-61b8bb13d0 branch June 18, 2026 09:49

Navigation Menu

Uh oh!

build(deps): bump the external group with 5 updates - #248

build(deps): bump the external group with 5 updates#248
Freyskeyd merged 1 commit into
mainfrom
dependabot/cargo/external-61b8bb13d0

dependabot Bot commented on behalf of github Jun 15, 2026

Uh oh!

claude Bot left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

File	Platform	Checksum
cargo-insta-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
cargo-insta-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
cargo-insta-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 15, 2026

v1.4.1

tl;dr

What's Changed

New Contributors

1.4.2 (June 8, 2026)

1.4.1 (May 25, 2026)

v1.10.1

What's Changed

v1.10.0

Features

Bug Fixes

Refactors, chores, et al

New Contributors

v1.10.1 (2026-05-29)

Bug Fixes

v1.10.0 (2026-05-27)

Bug Fixes

Features

1.48.0

Release Notes

Install cargo-insta 1.48.0

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download cargo-insta 1.48.0

1.48.0

v1.0.150

serde_with v3.21.0

Security

Added

Changed

Fixed

Uh oh!

claude Bot left a comment

Choose a reason for hiding this comment

Claude Code Review

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant