chore(deps): bump the cargo-minor-patch group across 1 directory with 17 updates by dependabot[bot] · Pull Request #290 · sharkAndshark/mapflow

dependabot · 2026-06-15T01:12:24Z

Bumps the cargo-minor-patch group with 17 updates in the / directory:

Package	From	To
axum	`0.8.8`	`0.8.9`
tower-http	`0.6.8`	`0.6.11`
serde_json	`1.0.149`	`1.0.150`
chrono	`0.4.44`	`0.4.45`
zip	`8.2.0`	`8.6.0`
duckdb	`1.10500.0`	`1.10503.1`
axum-extra	`0.12.5`	`0.12.6`
bcrypt	`0.19.0`	`0.19.1`
regex	`1.12.3`	`1.12.4`
uuid	`1.22.0`	`1.23.3`
time	`0.3.47`	`0.3.49`
rusqlite	`0.40.0`	`0.40.1`
moka	`0.12.14`	`0.12.15`
clap	`4.6.0`	`4.6.1`
tokio-postgres	`0.7.16`	`0.7.18`
mvt-reader	`2.3.0`	`2.4.0`
embed-resource	`3.0.7`	`3.0.9`

Updates axum from 0.8.8 to 0.8.9

Release notes

Sourced from axum's releases.

axum-v0.8.9

added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)

changed: Update minimum rust version to 1.80 (#3620)

fixed: Set connect endpoint on correct field in MethodRouter (#3656)

fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3597: tokio-rs/axum#3597 #3620: tokio-rs/axum#3620 #3656: tokio-rs/axum#3656 #3611: tokio-rs/axum#3611

Commits

c59208c revert axum-core changelog changes
99068f5 Revert "Fix IntoResponse for tuples overriding error response codes (#3603)"
23d7098 Revert "axum-core 0.5.6"
e8a39ad axum-macros 0.5.1
6e9a249 axum-extra 0.12.6
0ec9041 axum 0.8.9
c3fcebb axum-core 0.5.6
a8790fc update release notes
26ba7bb docs: consolidate state management docs in crate root (#3683)
9fc59ef Update to tokio-tungstenite 0.29 (#3689)
Additional commits viewable in compare view

Updates tower-http from 0.6.8 to 0.6.11

Release notes

Sourced from tower-http's releases.

tower-http-0.6.11

Added
set-header: add SetMultipleResponseHeadersLayer and SetMultipleResponseHeader for setting multiple response headers at once. Supports overriding, appending, and if_not_present modes. Header values can be fixed or computed dynamically via closures (#672)
use http::{Response, header::{self, HeaderValue}};
use http_body::Body as _;
use tower_http::set_header::response::SetMultipleResponseHeadersLayer;
let layer = SetMultipleResponseHeadersLayer::overriding(vec![
(header::X_FRAME_OPTIONS, HeaderValue::from_static("DENY")).into(),
(header::CONTENT_LENGTH, |res: &Response<MyBody>| {
res.body().size_hint().exact()
.map(|size| HeaderValue::from_str(&size.to_string()).unwrap())
}).into(),
]);
set-header: add SetMultipleRequestHeadersLayer and SetMultipleRequestHeaders for setting multiple request headers at once, mirroring the response-side API (#677)

classify: add From<i32> and From<NonZeroI32> impls for GrpcCode. Unrecognized status codes map to GrpcCode::Unknown (#506)
Changed

compression: compress application/grpc-web responses. Previously all application/grpc* content types were excluded from compression; now only application/grpc (non-web) is excluded (#408)

Fixed

fs: fix ServeDir returning 500 instead of 405 for non-GET/HEAD requests when call_fallback_on_method_not_allowed is enabled but no fallback service is configured (#587)

fs: remove duplicate cfg attribute on is_reserved_dos_name (#675)

#408: tower-rs/tower-http#408 #506: tower-rs/tower-http#506 #587: tower-rs/tower-http#587 #672: tower-rs/tower-http#672 #675: tower-rs/tower-http#675 #677: tower-rs/tower-http#677

All PRs

ci: fix flaky encoding test, add nightly stress test job by @jlizen in tower-rs/tower-http#670

... (truncated)

Commits

1d082ef v0.6.11
9c3117d feat: set multiple request header (#677)
667e7c7 Remove duplicate cfg attribute for is_reserved_dos_name (#675)
7551a9b feat(set_header): refactor and improve multiple header middleware (#672)
991e9ee add From<i32> impl for GrpcCode (#506)
3962dba Do compress grpc-web responses (#408)
f0b3bb6 Fix serve_dir method not allowed handling when no fallback is configured (#587)
d1a571b ci: use static timeout in stress-test workflow (#671)
309555a ci: fix flaky encoding test, add nightly stress test job (#670)
4532fc2 v0.6.10
Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in chronotope/chrono#1787

tz_data: fix tzdata locations on Android by @caruschalalamove in chronotope/chrono#1789

Commits

1703382 Prepare 0.4.45 release
881f9ab tz_data: fix tzdata locations on Android
f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
120686c Bump codecov/codecov-action from 5 to 6
See full diff in compare view

Updates zip from 8.2.0 to 8.6.0

Release notes

Sourced from zip's releases.

v8.6.0

🚀 Features

add compression not supported as enum error (#774)

🐛 Bug Fixes

allow for [u8] as filename (#775)

🚜 Refactor

mark ZipFlags as non-exhaustive and add test for HasZipMetadata (#777)

use and simplify is_dir (#776)

v8.5.1

🚜 Refactor

change magic finder to stack buffer (#763)

simplify extra field parsing (#764)

v8.5.0

🐛 Bug Fixes

remove zip64 comment and add zip64 extensible data sector (#747)

🚜 Refactor

remove useless magic in struct (#730)

change extra_field from Arc<Vec> to Arc<[u8]> (#741)

⚙️ Miscellaneous Tasks

cleanup README (#758)

v8.4.0

🚀 Features

add a check for building benches (#748)

🚜 Refactor

split part of read.rs for code readability (#744)

remove unused allow (#745)

⚡ Performance

skip BufReader for Stored files in make_reader (#739)

⚙️ Miscellaneous Tasks

... (truncated)

Changelog

Sourced from zip's changelog.

8.6.0 - 2026-04-25

🚀 Features

add compression not supported as enum error (#774)

🐛 Bug Fixes

allow for [u8] as filename (#775)

🚜 Refactor

mark ZipFlags as non-exhaustive and add test for HasZipMetadata (#777)

use and simplify is_dir (#776)

8.5.1 - 2026-04-06

🚜 Refactor

change magic finder to stack buffer (#763)

simplify extra field parsing (#764)

8.5.0 - 2026-04-01

🐛 Bug Fixes

remove zip64 comment and add zip64 extensible data sector (#747)

🚜 Refactor

remove useless magic in struct (#730)

change extra_field from Arc<Vec> to Arc<[u8]> (#741)

⚙️ Miscellaneous Tasks

cleanup README (#758)

8.4.0 - 2026-03-23

🚀 Features

add a check for building benches (#748)

🚜 Refactor

split part of read.rs for code readability (#744)

remove unused allow (#745)

⚡ Performance

... (truncated)

Commits

771dfc5 chore: release v8.6.0 (#781)
8e480cc chore(deps): update sha1 requirement from 0.10 to 0.11 (#767)
2513bbe chore(deps): update aes requirement from 0.8 to 0.9 (#787)
957e240 ci(deps): bump actions/cache from 5.0.4 to 5.0.5 (#786)
0329d9d fix: allow for [u8] as filename (#775)
ddcf854 ci(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#788)
42323a8 ci(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (#785)
901014a ci(deps): bump crate-ci/typos from 1.45.0 to 1.45.1 (#784)
07702d4 feat: add compression not supported as enum error (#774)
2d0c46b ci(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#783)
Additional commits viewable in compare view

Updates duckdb from 1.10500.0 to 1.10503.1

Release notes

Sourced from duckdb's releases.

v1.10503.1

What's Changed

Avoid Windows mtime restore in bundled builds by @mlafeldt in duckdb/duckdb-rs#766

Add patch-release mode to upgrade script by @mlafeldt in duckdb/duckdb-rs#767

Crate patch release v1.10503.1 by @mlafeldt in duckdb/duckdb-rs#768

Full Changelog: duckdb/duckdb-rs@v1.10503.0...v1.10503.1

v1.10503.0

Highlights

New ergonomic named parameter binding: named_params! macro, &[(&str, &dyn ToSql)] slices, and a generic HashMap Params impl.

New build env vars: DUCKDB_DISABLE_EXTENSION_LOAD=1 disables extension install/load, and DUCKDB_DISABLE_JEMALLOC=1 opts bundled-cmake builds out of jemalloc (now re-enabled by default on supported targets).

FFI soundness: typed vector slice/set_child APIs are now unsafe; DuckDB-owned C strings use RAII; binding unsupported Value variants errors instead of panicking.

ArrowVTab view rebinds no longer dereference freed Arrow FFI memory.

vtab::Value gains typed primitive getters and to_list() -> Option<Vec<Value>>.

Bundled DuckDB upgraded to v1.5.3 (adds VARIANT metadata).

What's Changed

Fix unsound vector slice API by @mlafeldt in duckdb/duckdb-rs#745

Refine vtab::Value API from #676 by @mlafeldt in duckdb/duckdb-rs#747

Build out vtab::Value to enable more diverse parameters to Table Functions by @marksomething in duckdb/duckdb-rs#676

Bump rustls-webpki from 0.103.11 to 0.103.13 by @dependabot[bot] in duckdb/duckdb-rs#744

Add ergonomic named parameter binding by @mlafeldt in duckdb/duckdb-rs#748

Implement Params for HashMap and serde_json::Value by @ryanschneider in duckdb/duckdb-rs#615

Harden DuckDB-owned string handling at FFI boundaries by @mlafeldt in duckdb/duckdb-rs#750

Update Rust to 1.95 by @mlafeldt in duckdb/duckdb-rs#751

Stop panicking when binding/appending unsupported Value variants by @mlafeldt in duckdb/duckdb-rs#749

Fix ArrowVTab view rebind lifetime by @mlafeldt in duckdb/duckdb-rs#754

Retain ArrowVTab batches for sanitizer visibility by @mlafeldt in duckdb/duckdb-rs#755

Pass Rust edition to rust.vim for proper formatting by @mlafeldt in duckdb/duckdb-rs#756

Make DuckDB source archive reproducible by @mlafeldt in duckdb/duckdb-rs#759

Change LogicalTypeHandle::set_alias to take &mut self by @vergenzt in duckdb/duckdb-rs#758

libduckdb-sys: expose DEP_DUCKDB_INCLUDE for downstream C/C++ shims by @frhack in duckdb/duckdb-rs#753

Update DuckDB to v1.5.3 by @mlafeldt in duckdb/duckdb-rs#760

Allow to disable extension install/load support by @mlafeldt in duckdb/duckdb-rs#738

Use improved upstream extension loader by @mlafeldt in duckdb/duckdb-rs#746

Stop disabling jemalloc in bundled-cmake builds by @mlafeldt in duckdb/duckdb-rs#762

Add bundled-cmake jemalloc escape hatch by @mlafeldt in duckdb/duckdb-rs#763

New Contributors

@marksomething made their first contribution in duckdb/duckdb-rs#676

@ryanschneider made their first contribution in duckdb/duckdb-rs#615

@vergenzt made their first contribution in duckdb/duckdb-rs#758

@frhack made their first contribution in duckdb/duckdb-rs#753

Full Changelog: duckdb/duckdb-rs@v1.10502.0...v1.10503.0

v1.10502.0

... (truncated)

Commits

3191caa Crate patch release v1.10503.1 (#768)
c67fcab Tighten bundled-cmake docs
b274f16 Crate patch release v1.10503.1
22bf6ce Add patch-release mode to upgrade script (#767)
e5c6785 Harden upgrade script validation
7e5749f Document patch-compatible version requirements
310fb00 Add patch-release mode to upgrade script
2f11774 Avoid Windows mtime restore in bundled builds (#766)
ee8c88c Avoid Windows mtime restore in bundled builds
1d999dd Add bundled-cmake jemalloc escape hatch (#763)
Additional commits viewable in compare view

Updates axum-extra from 0.12.5 to 0.12.6

Release notes

Sourced from axum-extra's releases.

axum-extra-v0.12.6

fixed: Escape backslashes and double quotes in Content-Disposition filenames to prevent header parameter injection in Attachment and FileStream (#3664)

vpath! macro now stops the compilation if your path is using deprecated path variables in the old 107 format, such as :var and *var. the only allowed way now is {var}. (#3618)

fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3664: tokio-rs/axum#3664 #3618: tokio-rs/axum#3618 #3611: tokio-rs/axum#3611

Commits

c59208c revert axum-core changelog changes
99068f5 Revert "Fix IntoResponse for tuples overriding error response codes (#3603)"
23d7098 Revert "axum-core 0.5.6"
e8a39ad axum-macros 0.5.1
6e9a249 axum-extra 0.12.6
0ec9041 axum 0.8.9
c3fcebb axum-core 0.5.6
a8790fc update release notes
26ba7bb docs: consolidate state management docs in crate root (#3683)
9fc59ef Update to tokio-tungstenite 0.29 (#3689)
Additional commits viewable in compare view

Updates bcrypt from 0.19.0 to 0.19.1

Commits

4aed95a New version
66b6192 Update blowfish dependency version to 0.10 (#102)
c420fca chore: Update build status badge (#99)
3a6d31d docs: Fix bare URL to clickable link (#98)
See full diff in compare view

Updates regex from 1.12.3 to 1.12.4

Changelog

Sourced from regex's changelog.

1.12.4 (2025-06-09)

This release includes a performance optimization for compilation of regexes with very large character classes.

Improvements:

#1308: Avoid re-canonicalizing the entire interval set when pushing new class ranges.

Commits

7b96fdc 1.12.4
7b89cf0 deps: update to regex-syntax 0.8.11
1401679 regex-syntax-0.8.11
d709000 changelog: 1.12.4
9825c74 syntax: avoid re-canonicalizing the entire IntervalSet on push (#1308)
a7f2ff6 docs: clarify regex-lite word boundaries
2c7b172 docs: clarify unsupported Anchored::Pattern searches
839d16b regex-syntax-0.8.10
c4865a0 syntax: fix negation handling in HIR translation
d8761c0 cargo: also include benches
Additional commits viewable in compare view

Updates uuid from 1.22.0 to 1.23.3

Release notes

Sourced from uuid's releases.

v1.23.3

What's Changed

Fix up parser panic on empty input by @KodrAus in uuid-rs/uuid#886

Prepare for 1.23.3 release by @KodrAus in uuid-rs/uuid#887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

v1.23.2

What's Changed

Improve error messages for ambiguous formats by @KodrAus in uuid-rs/uuid#882

Prepare for 1.23.2 release by @KodrAus in uuid-rs/uuid#883

Full Changelog: uuid-rs/uuid@v1.23.1...v1.23.2

v1.23.1

What's Changed

Remove deprecated msrv feature from wasm-bindgen dependency by @guybedford in uuid-rs/uuid#877

fix: Timestamp::from_gregorian deprecation note by @aznashwan in uuid-rs/uuid#878

Prepare for 1.23.1 release by @KodrAus in uuid-rs/uuid#879

New Contributors

@guybedford made their first contribution in uuid-rs/uuid#877

@aznashwan made their first contribution in uuid-rs/uuid#878

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

v1.23.0

What's Changed

feat: add support for 'hyphenated' format in the serde module by @FrenchDilettante in uuid-rs/uuid#865

Fix a number of bugs in time-related code by @KodrAus in uuid-rs/uuid#872

Reword invalid char error message by @KodrAus in uuid-rs/uuid#873

Impl cleanups by @KodrAus in uuid-rs/uuid#874

Use LazyLock to synchronize v1/v6 context initialization by @KodrAus in uuid-rs/uuid#875

Prepare for 1.23.0 release by @KodrAus in uuid-rs/uuid#876

New Contributors

@FrenchDilettante made their first contribution in uuid-rs/uuid#865

Special thanks

@meng-xu-cs raised a series of bugs against the timestamp logic in uuid using automated tooling. The issues themselves were reasonably and responsibly presented and the end result is a better uuid library for everyone. Thanks!

Deprecations

This release includes the following deprecations:

Context: Renamed to ContextV1

Timestamp::from_gregorian: Renamed to Timestamp::from_gregorian_time

... (truncated)

Commits

20da78b Merge pull request #887 from uuid-rs/cargo/v1.23.3
62232ca prepare for 1.23.3 release
2320c6a Merge pull request #886 from uuid-rs/fix/parser-panics
2d034d4 fix some invalid indexers on error reporting
a8b9f14 update fuzz infra and run in CI
d119657 Merge pull request #883 from uuid-rs/cargo/v1.23.2
0651cfc prepare for 1.23.2 release
e8dea0c Merge pull request #882 from uuid-rs/fix/error-msgs
bdc429a fix up serde messages
d4342e4 make indexes 0 based and fix up more error messages
Additional commits viewable in compare view

Updates time from 0.3.47 to 0.3.49

Release notes

Sourced from time's releases.

v0.3.49

See the changelog for details.

v0.3.48

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.49 [2026-06-13]

Fixed

Due to a long-standing bug in the Rust compiler, v0.3.48 caused a number of crates to stop compiling. A patch has been added that avoids triggering the bug.

0.3.48 [2026-06-12] [YANKED]

Security

The number of digits parsed by [subsecond digits:1+] is capped at 32 to avoid parsing unbounded user input. Digits after the 9th have no semantic meaning.

Explicitly specify #[repr] for Weekday. The value of the variants is relied upon in multiple locations for soundness. The practical effect of this change is nothing, as Rust has always mapped C-like enums to 0..N in memory.

Compatibility

Non-UTF-8 formatting and parsing is deprecated without replacement. It is recommended to only format and parse valid UTF-8.

format_description::parse is deprecated. It is recommended to use format_description::parse_borrowed::<3> or format_description::parse_owned::<3>.

Added

All types in the unit module have a generic parameter, though this is currently not used for much. Usage will be expanded in the future.

Comparisons between types in the unit module and the generic Unit type are permitted.

Support for rand 0.10

Version 3 format descriptions

Only UTF-8 is supported. As a side effect of this, [ignore] requires that the remaining input not begin mid-codepoint.

Representation is deliberately opaque to allow for arbitrary changes going forward.

format:false is supported on [optional] components. This is not possible in version 1 and version 2 format descriptions due to API compatibility.

The time::serde::format_description! macro uses a new, clearer syntax for version 3.

time::serde::format_description!(mod foo [Date] = "[year]-[month]-[day]");

Unlike version 1 and version 2 format descriptions, the type is not automatically brought into scope. You must import it yourself.

Nonsensical combinations of modifiers are rejected. For example, you cannot specify case-sensitivity when parsing a numerical month.

[year] defaults to range:standard

Components and modifiers are case sensitive (and always lowercase).

Changed

The convert module has been renamed to unit.

Fixed

... (truncated)

Commits

ff8683c v0.3.49 release
f189886 fix: resolve E0119 trait coherence error in rustc >= 1.95.0
5d8737c v0.3.48 release
1bfca87 Use widen instead of extend in sys code
c57284f fix: return error instead of panicking on truncated strftime padding modifier
a74f35f Use v3 format descriptions for serde defaults
96ff36c Allow eliding serde format description version
edc58b1 Permit duplicates in v1/v2 in permit_modifiers!
a838f69 Bump codecov action
f2f99f8 Fix unused warning
Additional commits viewable in compare view

Updates rusqlite from 0.40.0 to 0.40.1

Release notes

Sourced from rusqlite's releases.

0.40.1

What's Changed

Fix clippy warnings #1852

Bump bundled SQLite version to 3.53.2 #1853

Bump hashlink version #1855

Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

Commits

6d3c282 Merge pull request #1856 from gwenn/0.40.1
2ba28b7 Prepare next release
a021dc7 Merge pull request #1854 from gwenn/savepoint
534a149 Merge pull request #1855 from gwenn/hashlink
6d9764f Bump hashlink version
fa574eb Use sqlite3_keyword_check
15385cc Fix SQL injection when SAVEPOINT name is tainted
e5e48f2 Merge pull request #1853 from gwenn/3.53.2
ac22292 Bump bundled SQLite version to 3.53.2
c5f8828 Merge pull request #1852 from gwenn/clippy
Additional commits viewable in compare view

Updates moka from 0.12.14 to 0.12.15

Release notes

Sourced from moka's releases.

Moka 0.12.15

Version 0.12.15

Fixed

Fixed a bug where re-inserting an expired entry could cause it to lose its expiration time and remain in the cache indefinitely when using a custom Expiry policy with per-entry expiration. (#582 gh-pull-0582 by @jiangzhe, #581 gh-pull-0581 by @atrocities, reported in #575 gh-issue-0575):

This occurred when an entry that had expired but not yet been evicted was re-inserted, and expire_after_update returned None. This primarily affected users who only override expire_after_create, since the default expire_after_update returns duration_until_expiry, which is None for expired entries.

This bug was introduced by the changes in v0.12.13 (#549 gh-pull-0549 and #564 gh-pull-0564).

Subtle behavior change:

Before this fix, re-inserting an expired entry was treated as an update, so Expiry::expire_after_update was called.

After this fix, re-inserting an expired entry is treated as a creation, so Expiry::expire_after_create is called instead.

This may change the expiration time of re-inserted entries, depending on your Expiry trait implementation.

Fixed flaky tests cht::segment::tests::drop_many_values and drop_many_values_concurrent that were failing on high-core-count machines (#586 gh-pull-0586):

These tests were using a CPU-dependent segment count, causing inconsistent bucket array shrinking behavior of the internal segmented hash map across different machines.

Changed these tests to use a fixed segment count (4) for consistent results.

Changed

Disabled flaky GC-dependent tests by default using run_flaky_tests cfg (#584 gh-pull-0584):

These tests rely on epoch-based garbage collection (crossbeam-epoch) timing that is not guaranteed, causing intermittent failures.

Fixed #539 gh-issue-0539 and #580 gh-issue-0580.

To run these tests, set RUSTFLAGS='--cfg run_flaky_tests'.

Changelog

Sourced from moka's changelog.

Version 0.12.15

Fixed

Fixed a bug where re-inserting an expired entry could cause it to lose its expiration time and remain in the cache indefinitely when using a custom Expiry policy with per-entry expiration. (#582[gh-pull-0582] by [@jiangzhe][gh-jiangzhe], #581[gh-pull-0581] by [@atrocities][gh-atrocities], reported in #575[gh-issue-0575]):

This occurred when an entry that had expired but not yet been evicted was re-inserted, and expire_after_update returned None. This primarily affected users who only override expire_after_create, since the default expire_after_update returns duration_until_expiry, which is None for expired entries.

This bug was introduced by the changes in v0.12.13 (#549[gh-pull-0549] and #564[gh-pull-0564]).

Subtle behavior change:

Before this fix, re-inserting an expired entry was treated as an update, so Expiry::expire_after_update was called.

After this fix, re-inserting an expired entry is treated as a creation, so Expiry::expire_after_create is called instead.

This may change the expiration time of re-inserted entries, depending on your Expiry trait implementation.

Fixed flaky tests cht::segment::tests::drop_many_values and drop_many_values_concurrent that were failing on high-core-count machines (#586[gh-pull-0586]):

These tests were using a CPU-dependent segment count, causing inconsistent bucket array shrinking behavior of the internal segmented hash map across different machines.

Changed these tests to use a fixed segment count (4) for consistent results.

Changed

Disabled flaky GC-dependent tests by default using run_flaky_tests cfg (#584[gh-pull-0584]):

These tests rely on epoch-based garbage collection (crossbeam-epoch) timing that is not guaranteed, causing intermittent failures.

Fixed #539[gh-issue-0539] and #580[gh-issue-0580].

To run these tests, set RUSTFLAGS='--cfg run_flaky_tests'.

Commits

616473e Merge pull request #586 from moka-rs/fix-flaky-cht-test-on-many-core-machines
caf8c82 Apply cargo fmt
65ff433 Fix flaky test cht::segment::tests::drop_many_values on many-core machines
fd103ad Update the change log for PR #586
5baf38c Fix flaky test cht::segment::tests::drop_many_values_concurrent
4b709c8 Merge pull request #585 from moka-rs/chore/prepare-v0.12.15
9e7c73b Remove an unused link from the change log
fa14f78 Bump the version to v0.12.15
98968b3 Update the change log for v0.12.15
4c37fd4 Merge pull request #584 from moka-rs/chore/disable-...
Description has been truncated

… 17 updates Bumps the cargo-minor-patch group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.8` | `0.6.11` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` | | [zip](https://github.com/zip-rs/zip2) | `8.2.0` | `8.6.0` | | [duckdb](https://github.com/duckdb/duckdb-rs) | `1.10500.0` | `1.10503.1` | | [axum-extra](https://github.com/tokio-rs/axum) | `0.12.5` | `0.12.6` | | [bcrypt](https://github.com/Keats/rust-bcrypt) | `0.19.0` | `0.19.1` | | [regex](https://github.com/rust-lang/regex) | `1.12.3` | `1.12.4` | | [uuid](https://github.com/uuid-rs/uuid) | `1.22.0` | `1.23.3` | | [time](https://github.com/time-rs/time) | `0.3.47` | `0.3.49` | | [rusqlite](https://github.com/rusqlite/rusqlite) | `0.40.0` | `0.40.1` | | [moka](https://github.com/moka-rs/moka) | `0.12.14` | `0.12.15` | | [clap](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.1` | | [tokio-postgres](https://github.com/rust-postgres/rust-postgres) | `0.7.16` | `0.7.18` | | [mvt-reader](https://github.com/codeart1st/mvt-reader) | `2.3.0` | `2.4.0` | | [embed-resource](https://github.com/nabijaczleweli/rust-embed-resource) | `3.0.7` | `3.0.9` | Updates `axum` from 0.8.8 to 0.8.9 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9) Updates `tower-http` from 0.6.8 to 0.6.11 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.8...tower-http-0.6.11) Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `chrono` from 0.4.44 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.44...v0.4.45) Updates `zip` from 8.2.0 to 8.6.0 - [Release notes](https://github.com/zip-rs/zip2/releases) - [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md) - [Commits](zip-rs/zip2@v8.2.0...v8.6.0) Updates `duckdb` from 1.10500.0 to 1.10503.1 - [Release notes](https://github.com/duckdb/duckdb-rs/releases) - [Commits](duckdb/duckdb-rs@v1.10500.0...v1.10503.1) Updates `axum-extra` from 0.12.5 to 0.12.6 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-extra-v0.12.5...axum-extra-v0.12.6) Updates `bcrypt` from 0.19.0 to 0.19.1 - [Commits](Keats/rust-bcrypt@v0.19.0...v0.19.1) Updates `regex` from 1.12.3 to 1.12.4 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.3...1.12.4) Updates `uuid` from 1.22.0 to 1.23.3 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.22.0...v1.23.3) Updates `time` from 0.3.47 to 0.3.49 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.47...v0.3.49) Updates `rusqlite` from 0.40.0 to 0.40.1 - [Release notes](https://github.com/rusqlite/rusqlite/releases) - [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md) - [Commits](rusqlite/rusqlite@v0.40.0...v0.40.1) Updates `moka` from 0.12.14 to 0.12.15 - [Release notes](https://github.com/moka-rs/moka/releases) - [Changelog](https://github.com/moka-rs/moka/blob/main/CHANGELOG.md) - [Commits](moka-rs/moka@v0.12.14...v0.12.15) Updates `clap` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.1) Updates `tokio-postgres` from 0.7.16 to 0.7.18 - [Release notes](https://github.com/rust-postgres/rust-postgres/releases) - [Commits](rust-postgres/rust-postgres@tokio-postgres-v0.7.16...tokio-postgres-v0.7.18) Updates `mvt-reader` from 2.3.0 to 2.4.0 - [Release notes](https://github.com/codeart1st/mvt-reader/releases) - [Commits](codeart1st/mvt-reader@v2.3.0...v2.4.0) Updates `embed-resource` from 3.0.7 to 3.0.9 - [Release notes](https://github.com/nabijaczleweli/rust-embed-resource/releases) - [Commits](nabijaczleweli/rust-embed-resource@v3.0.7...v3.0.9) --- updated-dependencies: - dependency-name: axum dependency-version: 0.8.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tower-http dependency-version: 0.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: zip dependency-version: 8.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: duckdb dependency-version: 1.10503.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: axum-extra dependency-version: 0.12.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: bcrypt dependency-version: 0.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: regex dependency-version: 1.12.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.23.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: time dependency-version: 0.3.49 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: rusqlite dependency-version: 0.40.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: moka dependency-version: 0.12.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: clap dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio-postgres dependency-version: 0.7.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: mvt-reader dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: embed-resource dependency-version: 3.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-15T01:12:25Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-06-22T01:11:14Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot requested review from evan-zhang11 and sharkAndshark as code owners June 15, 2026 01:12

dependabot Bot closed this Jun 22, 2026

dependabot Bot deleted the dependabot/cargo/cargo-minor-patch-ca56aa9bef branch June 22, 2026 01:11

Navigation Menu

chore(deps): bump the cargo-minor-patch group across 1 directory with 17 updates - #290

chore(deps): bump the cargo-minor-patch group across 1 directory with 17 updates#290
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-ca56aa9bef

dependabot Bot commented on behalf of github Jun 15, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 15, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

axum-v0.8.9

tower-http-0.6.11

Added

Changed

Fixed

All PRs

v1.0.150

0.4.45

What's Changed

v8.6.0

🚀 Features

🐛 Bug Fixes

🚜 Refactor

v8.5.1

🚜 Refactor

v8.5.0

🐛 Bug Fixes

🚜 Refactor

⚙️ Miscellaneous Tasks

v8.4.0

🚀 Features

🚜 Refactor

⚡ Performance

⚙️ Miscellaneous Tasks

8.6.0 - 2026-04-25

🚀 Features

🐛 Bug Fixes

🚜 Refactor

8.5.1 - 2026-04-06

🚜 Refactor

8.5.0 - 2026-04-01

🐛 Bug Fixes

🚜 Refactor

⚙️ Miscellaneous Tasks

8.4.0 - 2026-03-23

🚀 Features

🚜 Refactor

⚡ Performance

v1.10503.1

What's Changed

v1.10503.0

Highlights

What's Changed

New Contributors

v1.10502.0

axum-extra-v0.12.6

1.12.4 (2025-06-09)

v1.23.3

What's Changed

v1.23.2

What's Changed

v1.23.1

What's Changed

New Contributors

v1.23.0

What's Changed

New Contributors

Special thanks

Deprecations

v0.3.49

v0.3.48

0.3.49 [2026-06-13]

Fixed

0.3.48 [2026-06-12] [YANKED]

Security

Compatibility

Added

Changed

Fixed

0.40.1

What's Changed

Moka 0.12.15

Version 0.12.15

Fixed

Changed

Version 0.12.15

Fixed

dependabot Bot commented on behalf of github Jun 15, 2026 •

edited

Loading