Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 10, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actix-files (source) dependencies patch 0.6.80.6.9
actix-web (source) dependencies minor 4.11.04.12.1
argon2 (source) dependencies patch 0.6.0-rc.10.6.0-rc.6
askama (source) dependencies minor 0.14.00.15.4
chrono dependencies patch 0.4.420.4.43
jsonwebtoken dependencies minor 10.1.010.3.0
quote dependencies patch ^1.0.41^1.0.44
reqwest dependencies minor 0.12.240.13.1
sea-orm (source) workspace.dependencies patch 1.1.171.1.19
sea-orm-migration (source) dependencies patch 1.1.171.1.19
serde_json dependencies patch 1.0.1451.0.149
syn dependencies patch ^2.0.108^2.0.114
testcontainers dev-dependencies minor 0.25.20.26.3
thiserror dependencies patch 2.0.172.0.18
tokio (source) workspace.dependencies minor 1.48.01.49.0
tracing (source) dependencies patch 0.1.410.1.44
tracing-subscriber (source) dependencies patch 0.3.200.3.22
url dependencies patch 2.5.72.5.8
uuid dependencies minor 1.18.11.20.0

Release Notes

actix/actix-web (actix-files)

v0.6.9: Actix web 0.6.9

Compare Source

Changes

  • Drop connection if request's payload is not fully consumed #​236

  • Fix streaming response with body compression

RustCrypto/password-hashes (argon2)

v0.6.0-rc.6

Compare Source

v0.6.0-rc.5

Compare Source

v0.6.0-rc.4

Compare Source

v0.6.0-rc.3

Compare Source

v0.6.0-rc.2

Compare Source

askama-rs/askama (askama)

v0.15.4

Compare Source

What's Changed

Full Changelog: askama-rs/askama@v0.15.3...v0.15.4

v0.15.3

Compare Source

What's Changed

Full Changelog: askama-rs/askama@v0.15.2...v0.15.3

v0.15.2

Compare Source

What's Changed

New Contributors

Full Changelog: askama-rs/askama@v0.15.1...v0.15.2

v0.15.1

Compare Source

What's Changed

New Contributors

Full Changelog: askama-rs/askama@v0.15.0...v0.15.1

v0.15.0

Compare Source

The main breaking change is about custom filters, they now require the filter_fn attribute. More information about it in the askama book.

(❗ = breaking change)

New features

Major internal changes

Improve error location to give better errors:

Other

Book/documentation

Internal changes

Performance

Bugfixes

New Contributors

Full Changelog: askama-rs/askama@v0.14.0...v0.15.0

chronotope/chrono (chrono)

v0.4.43: 0.4.43

Compare Source

What's Changed

Keats/jsonwebtoken (jsonwebtoken)

v10.3.0

Compare Source

  • Export everything needed to define your own CryptoProvider
  • Fix type confusion with exp/nbf when not required

v10.2.0

Compare Source

  • Remove Clone bound from decode functions
dtolnay/quote (quote)

v1.0.44

Compare Source

  • Support raw lifetime syntax 'r#async (#​323)

v1.0.43

Compare Source

  • Disambiguate references to stringify! macro inside generated code (#​316)

v1.0.42

Compare Source

seanmonstar/reqwest (reqwest)

v0.13.1

Compare Source

  • Fixes compiling with rustls on Android targets.

v0.13.0

Compare Source

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

v0.12.24

  • Refactor cookie handling to an internal middleware.
  • Refactor internal random generator.
  • Refactor base64 encoding to reduce a copy.
  • Documentation updates.

v0.12.23

  • Add ClientBuilder::unix_socket(path) option that will force all requests over that Unix Domain Socket.
  • Add ClientBuilder::retry(policy) and reqwest::retry::Builder to configure automatic retries.
  • Add ClientBuilder::dns_resolver2() with more ergonomic argument bounds, allowing more resolver implementations.
  • Add http3_* options to blocking::ClientBuilder.
  • Fix default TCP timeout values to enabled and faster.
  • Fix SOCKS proxies to default to port 1080
  • (wasm) Add cache methods to RequestBuilder.

v0.12.22

  • Fix socks proxies when resolving IPv6 destinations.

v0.12.21

  • Fix socks proxy to use socks4a:// instead of socks4h://.
  • Fix Error::is_timeout() to check for hyper and IO timeouts too.
  • Fix request Error to again include URLs when possible.
  • Fix socks connect error to include more context.
  • (wasm) implement Default for Body.

v0.12.20

  • Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
  • Fix proxy headers only using the first matched proxy.
  • (wasm) Fix re-adding Error::is_status().

v0.12.19

  • Fix redirect that changes the method to GET should remove payload headers.
  • Fix redirect to only check the next scheme if the policy action is to follow.
  • (wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

  • Fix compilation when socks enabled without TLS.

v0.12.17

  • Fix compilation on macOS.

v0.12.16

  • Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
  • Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
  • Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
  • Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
  • Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
  • Add Proxy::headers() to add extra headers that should be sent to a proxy.
  • Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
  • Fix HTTP/3 to support streaming request bodies.
  • (wasm) Fix null bodies when calling Response::bytes_stream().

v0.12.15

  • Fix Windows to support both ProxyOverride and NO_PROXY.
  • Fix http3 to support streaming response bodies.
  • Fix http3 dependency from public API misuse.

v0.12.14

  • Fix missing fetch_mode_no_cors(), marking as deprecated when not on WASM.

v0.12.13

  • Add Form::into_reader() for blocking multipart forms.
  • Add Form::into_stream() for async multipart forms.
  • Add support for SOCKS4a proxies.
  • Fix decoding responses with multiple zstd frames.
  • Fix RequestBuilder::form() from overwriting a previously set Content-Type header, like the other builder methods.
  • Fix cloning of request timeout in blocking::Request.
  • Fix http3 synchronization of connection creation, reducing unneccesary extra connections.
  • Fix Windows system proxy to use ProxyOverride as a NO_PROXY value.
  • Fix blocking read to correctly reserve and zero read buffer.
  • (wasm) Add support for request timeouts.
  • (wasm) Fix Error::is_timeout() to return true when from a request timeout.

v0.12.12

  • (wasm) Fix compilation by not compiler tokio/time on WASM.

v0.12.11

  • Fix decompression returning an error when HTTP/2 ends with an empty data frame.

v0.12.10

  • Add ClientBuilder::connector_layer() to allow customizing the connector stack.
  • Add ClientBuilder::http2_max_header_list_size() option.
  • Fix propagating body size hint (content-length) information when wrapping bodies.
  • Fix decompression of chunked bodies so the connections can be reused more often.

v0.12.9

  • Add tls::CertificateRevocationLists support.
  • Add crate features to enable webpki roots without selecting a rustls provider.
  • Fix connection_verbose() to output read logs.
  • Fix multipart::Part::file() to automatically include content-length.
  • Fix proxy to internally no longer cache system proxy settings.

v0.12.8

  • Add support for SOCKS4 proxies.
  • Add multipart::Form::file() method for adding files easily.
  • Add Body::wrap() to wrap any http_body::Body type.
  • Fix the pool configuration to use a timer to remove expired connections.

v0.12.7

  • Revert adding impl Service<http::Request<_>> for Client.

v0.12.6

  • Add support for danger_accept_invalid_hostnames for rustls.
  • Add impl Service<http::Request<Body>> for Client and &'_ Client.
  • Add support for !Sync bodies in Body::wrap_stream().
  • Enable happy eyeballs when hickory-dns is used.
  • Fix Proxy so that HTTP(S)_PROXY values take precedence over ALL_PROXY.
  • Fix blocking::RequestBuilder::header() from unsetting sensitive on passed header values.

v0.12.5

  • Add blocking::ClientBuilder::dns_resolver() method to change DNS resolver in blocking client.
  • Add http3 feature back, still requiring reqwest_unstable.
  • Add rustls-tls-no-provider Cargo feature to use rustls without a crypto provider.
  • Fix Accept-Encoding header combinations.
  • Fix http3 resolving IPv6 addresses.
  • Internal: upgrade to rustls 0.23.

v0.12.4

  • Add zstd support, enabled with zstd Cargo feature.
  • Add ClientBuilder::read_timeout(Duration), which applies the duration for each read operation. The timeout resets after a successful read.

v0.12.3

  • Add FromStr for dns::Name.
  • Add ClientBuilder::built_in_webpki_certs(bool) to enable them separately.
  • Add ClientBuilder::built_in_native_certs(bool) to enable them separately.
  • Fix sending content-length: 0 for GET requests.
  • Fix response body content_length() to return value when timeout is configured.
  • Fix ClientBuilder::resolve() to use lowercase domain names.

v0.12.2

  • Fix missing ALPN when connecting to socks5 proxy with rustls.
  • Fix TLS version limits with rustls.
  • Fix not detected ALPN h2 from server with native-tls.

v0.12.1

  • Fix ClientBuilder::interface() when no TLS is enabled.
  • Fix TlsInfo::peer_certificate() being truncated with rustls.
  • Fix panic if http2 feature disabled but TLS negotiated h2 in ALPN.
  • Fix Display for Error to not include its source error.

v0.12.28

Compare Source

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

Compare Source

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

Compare Source

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

Compare Source

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.
SeaQL/sea-orm (sea-orm)

v1.1.19

Enhancements
  • Add find_linked_recursive method to ModelTrait #​2480
  • Skip drop extension type in fresh #​2716
Bug Fixes
  • Handle null values in from_sqlx_*_row_to_proxy_row functions #​2744
serde-rs/json (serde_json)

v1.0.149

Compare Source

  • Align arbitrary_precision number strings with zmij's formatting (#​1306, thanks @​b41sh)

v1.0.148

Compare Source

  • Update zmij dependency to 1.0

v1.0.147

Compare Source

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#​1304)

v1.0.146

Compare Source

dtolnay/syn (syn)

v2.0.114

Compare Source

  • Make std dependencies more easily discoverable in source code (#​1956, thanks @​tamird)

v2.0.113

Compare Source

  • Allow parsing TypeParam with colon not followed by any type param bounds (#​1953, thanks @​wyfo)

v2.0.112

Compare Source

v2.0.111

Compare Source

  • Allow first argument of braced!, bracketed!, parenthesized! to be an otherwise unused variable (#​1946)

v2.0.110

Compare Source

  • Tweaks to improve build speed (#​1939, thanks @​dishmaker)
  • Make syn::ext::IdentExt::unraw available without "parsing" feature (#​1940)
  • Support parsing syn::Meta followed by => (#​1944)

v2.0.109

Compare Source

testcontainers/testcontainers-rs (testcontainers)

v0.26.3

Compare Source

Details
Features
  • Support for reusable containers that have been stopped (#​896)
  • Support auto-detection of docker-compose client (#​898)
  • Allow customizations of host-config (#​899)

v0.26.2

Compare Source

Details
Features
  • Allow overriding project name (#​894)

v0.26.1

Compare Source

Details
Bug Fixes
  • Reuse container requires name (#​887)
  • Respect TESTCONTAINERS_COMMAND (#​891)
Miscellaneous Tasks
  • Update russh requirement from 0.54.4 to 0.55.0 (#​888)

v0.26.0

Compare Source

Details
Bug Fixes
  • Make port_bindings consistent with docker cli when publish_all_ports = true (#​885)
Features
  • Support build options - no_cache, skip_if_exists and buildargs (#​856)
  • Support docker-compose (#​864)
  • Add target options with custom mode (#​878)
  • Support copying from containers (#​871)
Miscellaneous Tasks
  • Use bollard 0.19.4 (#​870)
  • Update etcetera requirement from 0.10.0 to 0.11.0 (#​869)
Performance
  • Replace ulid with ferroid's ULID for better performance (#​829)
  • Update ferroid for better performance during encode/decode (#​879)
dtolnay/thiserror (thiserror)

v2.0.18

Compare Source

tokio-rs/tokio (tokio)

v1.49.0: Tokio v1.49.0

Compare Source

1.49.0 (January 3rd, 2026)

Added
  • net: add support for TCLASS option on IPv6 ([#​7781])
  • runtime: stabilize runtime::id::Id (#​7125)
  • task: implement Extend for JoinSet (#​7195)
  • task: stabilize the LocalSet::id() ([#​7776])
Changed
  • net: deprecate {TcpStream,TcpSocket}::set_linger ([#​7752])
Fixed
  • macros: fix the hygiene issue of join! and try_join! ([#​7766])
  • runtime: revert "replace manual vtable definitions with Wake" (#​7699)
  • sync: return TryRecvError::Disconnected from Receiver::try_recv after Receiver::close (#​7686)
  • task: remove unnecessary trait bounds on the Debug implementation (#​7720)
Unstable
  • fs: handle EINTR in fs::write for io-uring ([#​7786])
  • fs: support io-uring with tokio::fs::read (#​7696)
  • runtime: disable io-uring on EPERM (#​7724)
  • time: add alternative timer for better multicore scalability (#​7467)
Documented
  • docs: fix a typos in bounded.rs and park.rs ([#​7817])
  • io: add SyncIoBridge cross-references to copy and copy_buf ([#​7798])
  • io: doc that AsyncWrite does not inherit from std::io::Write (#​7705)
  • metrics: clarify that num_alive_tasks is not strongly consistent (#​7614)
  • net: clarify the cancellation safety of the TcpStream::peek (#​7305)
  • net: clarify the drop behavior of unix::OwnedWriteHalf (#​7742)
  • net: clarify the platform-dependent backlog in TcpSocket docs (#​7738)
  • runtime: mention LocalRuntime in new_current_thread docs ([#​7820])
  • sync: add missing period to mpsc::Sender::try_send docs (#​7721)
  • sync: clarify the cancellation safety of oneshot::Receiver ([#​7780])
  • sync: improve the docs for the errors of mpsc (#​7722)
  • task: add example for spawn_local usage on local runtime (#​7689)

[#​775


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner November 10, 2025 02:29
@hack4krak-deployment
Copy link

hack4krak-deployment bot commented Nov 10, 2025

Dokploy Preview Deployment

Name Status Preview Updated (UTC)
Frontend ✅ Done Preview URL 2026-01-29T00:47:45.367Z

@renovate renovate bot force-pushed the renovate/backend-dependencies branch 4 times, most recently from dae2cb5 to e061f5f Compare November 16, 2025 10:40
@Kubaryt
Copy link
Member

Kubaryt commented Nov 17, 2025

This pr is failing due to RustCrypto/password-hashes#730, this aint critical pull request, so we probably aren't gonna use workaround with manually adding rand_core dep.

@Kubaryt Kubaryt marked this pull request as draft November 17, 2025 07:25
@renovate renovate bot force-pushed the renovate/backend-dependencies branch 4 times, most recently from 55f7a6a to 76ce666 Compare November 28, 2025 10:56
@renovate renovate bot force-pushed the renovate/backend-dependencies branch 3 times, most recently from 8071d41 to cbbf6c7 Compare December 7, 2025 17:53
@renovate renovate bot force-pushed the renovate/backend-dependencies branch 4 times, most recently from 43a9bbf to f360bca Compare December 15, 2025 16:59
@renovate renovate bot force-pushed the renovate/backend-dependencies branch 5 times, most recently from a2630a3 to e0d125e Compare December 22, 2025 17:49
@renovate
Copy link
Contributor Author

renovate bot commented Dec 22, 2025

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: backend/Cargo.lock
Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path backend/Cargo.toml --package actix-files@0.6.8 --precise 0.6.9
    Updating crates.io index
error: failed to select a version for `askama`.
    ... required by package `hack4krak-backend v2.0.0 (/tmp/renovate/repos/github/Hack4Krak/Hack4KrakSite/backend)`
versions that meet the requirements `^0.15.4` are: 0.15.4

package `hack4krak-backend` depends on `askama` with feature `blocks` but `askama` does not have that feature.


failed to select a version for `askama` which could resolve this conflict

File name: backend/Cargo.lock
Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path backend/macros/Cargo.toml --package quote@1.0.41 --precise 1.0.44
    Updating crates.io index
error: failed to select a version for `askama`.
    ... required by package `hack4krak-backend v2.0.0 (/tmp/renovate/repos/github/Hack4Krak/Hack4KrakSite/backend)`
versions that meet the requirements `^0.15.4` are: 0.15.4

package `hack4krak-backend` depends on `askama` with feature `blocks` but `askama` does not have that feature.


failed to select a version for `askama` which could resolve this conflict

File name: backend/Cargo.lock
Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path backend/migration/Cargo.toml --package sea-orm-migration@1.1.17 --precise 1.1.19
    Updating crates.io index
error: failed to select a version for `askama`.
    ... required by package `hack4krak-backend v2.0.0 (/tmp/renovate/repos/github/Hack4Krak/Hack4KrakSite/backend)`
versions that meet the requirements `^0.15.4` are: 0.15.4

package `hack4krak-backend` depends on `askama` with feature `blocks` but `askama` does not have that feature.


failed to select a version for `askama` which could resolve this conflict

@renovate renovate bot force-pushed the renovate/backend-dependencies branch 4 times, most recently from 4301a9e to 4ee2501 Compare December 28, 2025 20:50
@renovate renovate bot force-pushed the renovate/backend-dependencies branch from 4ee2501 to 097feaf Compare December 30, 2025 17:00
@renovate renovate bot force-pushed the renovate/backend-dependencies branch 5 times, most recently from 4db3dae to afdef7b Compare January 6, 2026 17:13
@renovate renovate bot force-pushed the renovate/backend-dependencies branch from afdef7b to 98b6bf3 Compare January 7, 2026 05:01
@Kubaryt Kubaryt force-pushed the master branch 2 times, most recently from 4ccdc47 to 4ab6149 Compare January 10, 2026 01:25
@renovate renovate bot force-pushed the renovate/backend-dependencies branch 3 times, most recently from 16bc5ea to 1a96e30 Compare January 21, 2026 17:25
@renovate renovate bot force-pushed the renovate/backend-dependencies branch 4 times, most recently from 249c3c2 to 29714ab Compare January 28, 2026 02:09
@renovate renovate bot force-pushed the renovate/backend-dependencies branch from 29714ab to 3083a0c Compare January 29, 2026 00:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant