Skip to content

build(deps): bump the external group across 1 directory with 11 updates - #260

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/external-240bde4723
Closed

build(deps): bump the external group across 1 directory with 11 updates#260
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/external-240bde4723

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the external group with 11 updates in the / directory:

Package From To
alloy 2.0.5 2.2.0
alloy-primitives 1.6.0 1.6.1
async-trait 0.1.89 0.1.91
clap 4.6.1 4.6.4
hyper 1.10.1 1.11.0
rand 0.10.1 0.10.2
serde_json 1.0.150 1.0.151
thiserror 2.0.18 2.0.19
tokio 1.52.3 1.53.1
tokio-stream 0.1.18 0.1.19
tokio-util 0.7.18 0.7.19

Updates alloy from 2.0.5 to 2.2.0

Release notes

Sourced from alloy's releases.

v2.2.0

What's Changed

Full Changelog: alloy-rs/alloy@v2.1.1...v2.2.0

v2.1.1

What's Changed

New Contributors

Full Changelog: alloy-rs/alloy@v2.1.0...v2.1.1

v2.1.0

What's Changed

... (truncated)

Changelog

Sourced from alloy's changelog.

2.2.0 - 2026-07-17

Bug Fixes

  • [ci] Work around nightly test attribute ICE (#4081)
  • Address Rust 1.97 clippy lints (#4074)

Dependencies

  • [deps] Bump trezor-client to 0.1.6 (#4079)
  • [deps] Bump the ci-weekly group with 3 updates (#4078)
  • [signer-turnkey] Bump turnkey_client to 0.7 (#4036)
  • Bump MSRV to 1.94.1 (#4068)

Features

  • [consensus] Add block gas limit validation (#4072)
  • [network] Add AnyRpcBlock header conversion (#4073)
  • [rpc-types-engine] Implement FromStr for PayloadId (#4077)

Miscellaneous Tasks

  • Release 2.2.0
  • [eips] Address nightly clippy lint (#4080)

Other

  • Rustdoc no_inline workaround (#4064)

2.1.1 - 2026-07-06

Bug Fixes

  • [consensus] Reject string withdrawals in block RLP (#4058)
  • [tx-macros] Preserve fallback decode cursor (#4059)
  • [docs] Avoid rustdoc ICE on re-exports (#4060)
  • [eips] Serialize hash block ids as bare hashes (#4052)
  • [eips] Avoid fake exponential overflow (#3961)

Dependencies

  • [deps] Bump the ci-weekly group with 3 updates (#4051)

Documentation

  • Fix bug report template link (#4053)
  • Fix contributors guide link in PR template (#4042)

Features

... (truncated)

Commits
  • d2ca48d chore: release 2.2.0
  • 1c81506 chore: release 2.2.0
  • ffaf1da chore(deps): bump trezor-client to 0.1.6 (#4079)
  • 119e9b0 fix(ci): work around nightly test attribute ICE (#4081)
  • eedfb86 feat(consensus): add block gas limit validation (#4072)
  • 35da51b chore(eips): address nightly clippy lint (#4080)
  • 154892f feat(network): add AnyRpcBlock header conversion (#4073)
  • 50519ae feat(rpc-types-engine): implement FromStr for PayloadId (#4077)
  • 843b40d chore(deps): bump the ci-weekly group with 3 updates (#4078)
  • 1c5346f chore(signer-turnkey): bump turnkey_client to 0.7 (#4036)
  • Additional commits viewable in compare view

Updates alloy-primitives from 1.6.0 to 1.6.1

Release notes

Sourced from alloy-primitives's releases.

alloy-core v1.6.1

What's Changed

New Contributors

Full Changelog: alloy-rs/core@v1.6.0...v1.6.1

Changelog

Sourced from alloy-primitives's changelog.

1.6.1 - 2026-07-16

Bug Fixes

  • [sol-macro] Derive namespaced custom types (#1152)
  • [syn-solidity] Strip namespaces from custom types in EIP-712 formatting (#1146)
  • [json-abi] Dedup canonical signatures (#1151)
  • [dyn-abi] Correct packed encoded size for Function (#1149)
  • [sol-macro] Fix UDT NAME constant generation stringify typo (#1145)
  • Fix(dyn-abi): avoid nested zero-sized
  • [json-abi] Preserve anonymous event full signatures (#1141)
  • [sol-macro] Derive Default for dynamic arrays of non-Default elements (#1129)
  • [sol-macro] Derive builtin traits on overloaded event/error enums (#1118)
  • [primitives] Reject underflowing native signed ints (#1139)
  • [dyn-abi] Error on primitive EIP-712 data (#1138)
  • [dyn-abi] Require tuple match arity (#1137)
  • [dyn-abi] Enforce signed int string width (#1136)
  • [dyn-abi] Validate EIP-712 fixed bytes length (#1135)
  • [sol-macro-expander] Propagate extra_derives to the functions enum (#1124)
  • [dyn-abi] Validate event topic count before decoding body (#1122)
  • Switch to proc-macro-error3 (#1121)
  • Reject extra event topics during decoding (#1112)
  • Disable proptest default features (#1110)
  • [EIP-712] PropDef::parse supports extra whitespaces (#1102)
  • [dyn-abi] Allow self-referential struct types in EIP-712 canonicalize (#1103) (#1105)

Dependencies

  • [deps] Bump actions/checkout from 6.0.2 to 7.0.0 in the ci-weekly group across 1 directory (#1130)

Features

  • [primitives] Use foldhash for fixed-size maps (#1153)
  • Allow customizing keccak cache size (#1115)
  • Keccak cache stats (#1114)
  • [primitives] Add Signature v_byte helper (#1111)

Miscellaneous Tasks

  • Release 1.6.1
  • Disable rustc-hash nightly feature (#1132)
  • Group weekly dependabot updates (#1127)

Other

  • Set rust-toolchain inputs explicitly (#1131)

Performance

  • Optimize bloom membership checks (#1134)

... (truncated)

Commits
  • ae40cc4 chore: release 1.6.1
  • 24e3053 fix(sol-macro): derive namespaced custom types (#1152)
  • 3203fa6 fix(syn-solidity): strip namespaces from custom types in EIP-712 formatting (...
  • ca7508b fix(json-abi): dedup canonical signatures (#1151)
  • e63cf6f feat(primitives): use foldhash for fixed-size maps (#1153)
  • 7dc38ba fix(dyn-abi): correct packed encoded size for Function (#1149)
  • 2df1477 fix(sol-macro): fix UDT NAME constant generation stringify typo (#1145)
  • c133daf fix(dyn-abi): avoid nested zero-sized
  • cd07f92 fix(json-abi):
  • ea33d7a fix(sol-macro): derive Default for dynamic arrays of non-Default elements (#1...
  • Additional commits viewable in compare view

Updates async-trait from 0.1.89 to 0.1.91

Release notes

Sourced from async-trait's releases.

0.1.91

  • Update to syn 3 (#299)
  • Fix mutability for by-reference receivers (#301)

0.1.90

(yanked)

Commits
  • d049ee0 Release 0.1.91
  • 7a0961f Merge pull request #301 from dtolnay/mutability
  • 740f86f Ignore mut_mut pedantic clippy lint in test
  • 4699cd3 Fix mutability for by-reference receivers
  • 6dd3573 Add regression test for issue 300
  • 2371797 Release 0.1.90
  • d03f075 Merge pull request #299 from dtolnay/syn3
  • 6cf42c1 Update to syn 3
  • b9daaba Ignore match_same_arms pedantic clippy lint
  • aa706d1 Update actions/upload-artifact@v6 -> v7
  • Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.4

Release notes

Sourced from clap's releases.

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Changelog

Sourced from clap's changelog.

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Commits
  • 87ec1ad chore: Release
  • 78f2529 docs: Update changelog
  • b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
  • 74c6666 fix(complete): Keep zsh candidate order
  • d142d8f Merge pull request #6360 from epage/string
  • ba89563 style: Prefer explicit string operations
  • bea966e Merge pull request #6359 from epage/man
  • b811986 chore(man):Remove unused required-features
  • 0010bf2 Merge pull request #6358 from clap-rs/renovate/crate-ci-typos-1.x
  • bab9b24 chore(deps): Update compatible (dev) (#6357)
  • Additional commits viewable in compare view

Updates hyper from 1.10.1 to 1.11.0

Release notes

Sourced from hyper's releases.

v1.11.0

Features

  • rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)

Bug Fixes

All PRs

New Contributors

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.11.0 (2026-07-20)

Bug Fixes

Features

  • rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)
Commits
  • 67ace64 v1.11.0
  • 540fff9 fix(http1): discard content-length header when received before transfer-encod...
  • ccc1e85 feat(rt): add ReadBufCursor::initialized_unfilled() method (#4115)
  • 0ea8bc2 docs(maintainers): move some collaborators to emeriti (#4125)
  • 2fc06fc docs(governance): define Advisor role (#4098)
  • e0d14d1 style(proto): explicitly allow decimal_literal_representation lint (#4117)
  • de1483d fix(http1): use append for repeat trailer values in encoder (#4118)
  • 08c3416 style(headers): small refactor to remove question_mark lint (#4116)
  • aecf5ab fix(http2): avoid buffering Upgraded writes without send capacity (#4102)
  • f584091 fix(http1): allow up to max_headers trailers (#4108)
  • Additional commits viewable in compare view

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

  • Update to syn 3
Commits
  • e13a785 Release 2.0.19
  • 0a0e76c Update to syn 3
  • ec42ea7 Update actions/upload-artifact@v6 -> v7
  • 4178c4a Update actions/checkout@v6 -> v7
  • 7214e0e Ignore items_after_statements pedantic clippy lint in test
  • febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
  • c50e387 chore: improve thiserror maintenance path
  • d4a2507 Raise minimum tested compiler to rust 1.85
  • 99e8a6c Unpin CI miri toolchain
  • 9ac165c Pin CI miri to nightly-2026-02-11
  • Additional commits viewable in compare view

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

  • time: fix alt timer cancellation and insertion race (#8252)

Documented

  • runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

  • fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
  • metrics: add task schedule latency metric (#7986)
  • net: add SocketAddr methods to Unix sockets (#8144)

Changed

  • io: add #[inline] to IO trait impls for in-memory types (#8242)
  • net: implement UCred::pid on FreeBSD (#8086)
  • net: support Nuttx target os (#8259)
  • signal: refactor global variables on Windows (#8231)
  • sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
  • taskdump: support taskdumps on s390x (#8192)
  • time: add #[track_caller] to timeout_at() (#8077)
  • time: consolidate mutex locks on spurious poll (#8124)
  • time: defer waker clone on spurious poll (#8107)
  • time: move lazy-registration state into Sleep (#8132)
  • tracing: remove unnecessary span clone (#8126)

Fixed

  • io: do not treat zero-length reads as EOF in Chain (#8251)
  • net: use getpeereid for QNX peer credentials (#8270)
  • runtime: avoid illegal state in FastRand (#8078)
  • sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
  • taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
  • time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits
  • 75fef53 chore: prepare Tokio v1.53.1 (#8303)
  • ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
  • eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
  • 91d3b4c time: fix alt timer cancellation and insertion race (#8252)

Bumps the external group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [alloy](https://github.com/alloy-rs/alloy) | `2.0.5` | `2.2.0` |
| [alloy-primitives](https://github.com/alloy-rs/core) | `1.6.0` | `1.6.1` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.89` | `0.1.91` |
| [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.4` |
| [hyper](https://github.com/hyperium/hyper) | `1.10.1` | `1.11.0` |
| [rand](https://github.com/rust-random/rand) | `0.10.1` | `0.10.2` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` |
| [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.18` | `0.1.19` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.18` | `0.7.19` |



Updates `alloy` from 2.0.5 to 2.2.0
- [Release notes](https://github.com/alloy-rs/alloy/releases)
- [Changelog](https://github.com/alloy-rs/alloy/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/alloy@v2.0.5...v2.2.0)

Updates `alloy-primitives` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/alloy-rs/core/releases)
- [Changelog](https://github.com/alloy-rs/core/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/core@v1.6.0...v1.6.1)

Updates `async-trait` from 0.1.89 to 0.1.91
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.89...0.1.91)

Updates `clap` from 4.6.1 to 4.6.4
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.4)

Updates `hyper` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.10.1...v1.11.0)

Updates `rand` from 0.10.1 to 0.10.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.1...0.10.2)

Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `thiserror` from 2.0.18 to 2.0.19
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.19)

Updates `tokio` from 1.52.3 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1)

Updates `tokio-stream` from 0.1.18 to 0.1.19
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-stream-0.1.18...tokio-stream-0.1.19)

Updates `tokio-util` from 0.7.18 to 0.7.19
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.18...tokio-util-0.7.19)

---
updated-dependencies:
- dependency-name: alloy
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: alloy-primitives
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: async-trait
  dependency-version: 0.1.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: clap
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: hyper
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: thiserror
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: tokio-stream
  dependency-version: 0.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
- dependency-name: tokio-util
  dependency-version: 0.7.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 27, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 27, 2026 14:10
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 27, 2026
@dependabot
dependabot Bot requested review from Ekleog-Polygon and hadjiszs July 27, 2026 14:10

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review for a one-time review, or @claude review always to subscribe this PR to a review on every future push.

Tip: disable this comment in your organization's Code Review settings.

@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 3, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/external-240bde4723 branch August 3, 2026 14:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants