lilly/cookied

Fork 0

Update all non-major dependencies #2

Open

renovatebot wants to merge 1 commit from renovate/all-minor-patch into main

renovatebot commented

2026-03-01 16:08:10 +01:00

Collaborator

This PR contains the following updates:

Package	Type	Update	Change
anyhow	dependencies	patch	`1.0.100` → `1.0.102`
clap	dependencies	minor	`4.5.53` → `4.6.1`
opentelemetry (source)	dependencies	minor	`0.31.0` → `0.32.0`
opentelemetry-otlp (source)	dependencies	minor	`0.31.0` → `0.32.0`
opentelemetry-semantic-conventions (source)	dependencies	minor	`0.31.0` → `0.32.0`
opentelemetry-stdout (source)	dependencies	minor	`0.31.0` → `0.32.0`
opentelemetry_sdk (source)	dependencies	minor	`0.31.0` → `0.32.0`
time (source)	dependencies	patch	`0.3.44` → `0.3.47`
tokio (source)	dependencies	minor	`1.48.0` → `1.52.3`

Release Notes

dtolnay/anyhow (anyhow)

`v1.0.102`

Compare Source

Remove backtrace dependency (#438, #439, #440, #441, #442)

`v1.0.101`

Compare Source

Add #[inline] to anyhow::Ok helper (#437, thanks @Ibitier)

clap-rs/clap (clap)

`v4.6.1`

Compare Source

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

`v4.5.60`

Compare Source

Fixes

(help) Quote empty default values, possible values

`v4.5.59`

Compare Source

Fixes

Command::ignore_errors no longer masks help/version on subcommands

`v4.5.57`

Compare Source

Fixes

Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

`v4.5.56`

Compare Source

Fixes

On conflict error, don't show conflicting arguments in the usage

`v4.5.55`

Compare Source

Fixes

Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

`v4.5.54`

Compare Source

Fixes

(help) Move [default] to its own paragraph when PossibleValue::help is present in --help

open-telemetry/opentelemetry-rust (opentelemetry)

`v0.32.0`

Compare Source

Released 2026-May-08

Added BoundCounter<T> and BoundHistogram<T> types that cache resolved
aggregator references for a fixed attribute set. Created via Counter::bind()
and Histogram::bind(), bound instruments bypass per-call attribute lookup,
providing significant performance improvements for hot paths where the same
attributes are used repeatedly. Both types implement Clone so a single bound
state can be shared across threads or modules without re-binding. Also adds
the SyncInstrument::bind() trait method and BoundSyncInstrument<T> trait
for SDK implementors; the trait method has a no-op default so custom
SyncInstrument impls degrade gracefully without panicking. Gated behind the
experimental_metrics_bound_instruments feature flag.
Add reserve method to opentelemetry::propagation::Injector to hint at the number of elements that will be added to avoid multiple resize operations of the underlying data structure. Has an empty default implementation.
Breaking Removed the following public fields and methods from the SpanBuilder #3227:
- trace_id, span_id, end_time, status, sampling_result
- with_trace_id, with_span_id, with_end_time, with_status, with_sampling_result
Added #[must_use] attribute to opentelemetry::metrics::AsyncInstrumentBuilder to add compile time warning when .build() is not called on observable instrument builders, preventing silent failures where callbacks are never registered and metrics are never reported.
Breaking Moved the following SDK sampling types from opentelemetry::trace to opentelemetry_sdk::trace #3277:
- SamplingDecision, SamplingResult
- These types are SDK implementation details and should be imported from opentelemetry_sdk::trace instead.
"spec_unstable_logs_enabled" feature flag is removed. The capability (and the
backing specification) is now stable and is enabled by default.
3278
Remove the empty "message" field from tracing events emitted via the internal-logs feature
Fix panic when calling Context::current() from Drop implementations triggered by ContextGuard cleanup (#3262).

open-telemetry/opentelemetry-rust (opentelemetry-otlp)

`v0.32.0`

Compare Source

Released 2026-May-08

Add tls-provider-agnostic feature flag for environments that require a custom crypto backend (e.g., OpenSSL for FIPS compliance). Enables TLS code paths without bundling ring or aws-lc-rs.
Add build() directly on SpanExporterBuilder, MetricExporterBuilder, and LogExporterBuilder
(before selecting a transport), which auto-selects the transport based on the
OTEL_EXPORTER_OTLP_PROTOCOL environment variable or enabled features.
#3394
Breaking Removed ExportConfig, HasExportConfig, with_export_config(), HasTonicConfig, HasHttpConfig, TonicConfig, and HttpConfig from public API.
Use the public WithExportConfig, WithTonicConfig, and WithHttpConfig trait methods instead, which remain unchanged.
The gRPC/tonic OTLP exporter's build method now returns an error for all signals (traces, metrics, logs) when
an https:// endpoint is configured but no TLS feature (tls-ring or tls-aws-lc) is enabled, instead of
silently sending unencrypted traffic. When a TLS feature is enabled and an https:// endpoint is used without
an explicit .with_tls_config(), a default ClientTlsConfig is automatically applied.
#3182
Prevent auth tokens from leaking in export error messages. gRPC and HTTP
exporter errors no longer include potentially sensitive server responses
(e.g., authentication tokens echoed back). Error messages returned to SDK
processors contain only the gRPC status code or HTTP status code. Full
details are logged at DEBUG level only.
#3021
Surface pre-flight transport error details at ERROR level when grpc-tonic
OTLP export fails due to a local misconfiguration. When the returned
tonic::Status wraps a local transport error (invalid URL, connect failure,
DNS), its source chain (e.g., "transport error: invalid URI") is appended
to the returned error so SDK processors surface it at ERROR without
requiring DEBUG logging. Server-returned gRPC status messages remain
DEBUG-only to preserve the auth-token leak safeguards from
#3021.
#3331
Add support for per-signal protocol environment variables:
OTEL_EXPORTER_OTLP_TRACES_PROTOCOL, OTEL_EXPORTER_OTLP_METRICS_PROTOCOL,
OTEL_EXPORTER_OTLP_LOGS_PROTOCOL. These allow configuring different transport protocols
per signal type. Signal-specific vars take precedence over generic OTEL_EXPORTER_OTLP_PROTOCOL.
The auto-select build() method on each exporter builder now respects the full priority chain:
signal-specific env var > generic env var > feature-based default.
Transport/protocol mismatch validation: HTTP transport returns InvalidConfig when gRPC protocol
is requested; gRPC transport returns InvalidConfig when an HTTP protocol is requested.
Breaking: Protocol::default() no longer consults the OTEL_EXPORTER_OTLP_PROTOCOL
environment variable. It now returns only the feature-based default (http-json > http-proto >
grpc-tonic). Protocol resolution from environment variables is handled internally by the
exporter builders. Users who relied on Protocol::default() to read env vars should use
Protocol::from_env() instead.
Add support for OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE environment variable
to configure metrics temporality. Accepted values: cumulative (default), delta,
lowmemory (case-insensitive). Programmatic .with_temporality() overrides the env var.
Fix NoHttpClient error when multiple HTTP client features are enabled by using priority-based selection (reqwest-client > hyper-client > reqwest-blocking-client). #2994
Add partial success response handling for OTLP exporters (traces, metrics, logs) per OTLP spec. Exporters now log warnings when the server returns partial success responses with rejected items and error messages. #865
Refactor internal-logs feature in opentelemetry-otlp to reduce unnecessary dependencies3191
Fixed [#2777](https://github.com/open-telemetry/opentelemetry rust/issues/2777) to properly handle shutdown_with_timeout() when using grpc-tonic.
Deprecate tls feature in favor of explicit tls-ring and tls-aws-lc features.
Migration: Replace tls with tls-ring (or tls-aws-lc). Users of tls-roots or tls-webpki-roots must now also enable one of these.
Prevent logging of header values in OTLP tonic exporter #3465

`v0.31.1`: opentelemetry-otlp 0.31.1

Compare Source

What's Changed

feat(OTLP): add tls-ring, tls-aws-lc, and tls-provider-agnostic feature flags [patch release v0.31.1] by @lalitb in #3426

Full Changelog: https://github.com/open-telemetry/opentelemetry-rust/compare/v0.31.0...opentelemetry-otlp-0.31.1

open-telemetry/opentelemetry-rust (opentelemetry-semantic-conventions)

`v0.32.0`

Compare Source

Released 2026-May-08

open-telemetry/opentelemetry-rust (opentelemetry-stdout)

`v0.32.0`

Compare Source

Released 2026-May-08

ExponentialHistogram supported in stdout

open-telemetry/opentelemetry-rust (opentelemetry_sdk)

`v0.32.0`

Compare Source

Released 2026-May-08

SimpleSpanProcessor now suppresses telemetry during export, preventing
telemetry-induced-telemetry feedback loops. This aligns with the existing
behavior in BatchSpanProcessor and SimpleLogProcessor.
Removed SimpleConcurrentLogProcessor and the experimental_logs_concurrent_log_processor
feature flag. The use cases it was designed for (ETW/user_events exporters) are
better served by modeling those exporters as processors directly.
Added Counter::bind() and Histogram::bind() SDK implementations that
return pre-bound measurement handles (BoundCounter<T>, BoundHistogram<T>).
Bound instruments resolve the attribute-to-aggregator mapping once at bind time
and cache the result, eliminating per-call HashMap lookups. View attribute
filtering is applied at bind time so the hot path stays free of per-call
attribute processing. Bound and unbound recordings with the same (post-view)
attribute set always aggregate into the same data point, including the empty
attribute set. Bound entries are never evicted during delta collection while
a handle exists — idle cycles produce no export but the tracker persists. If
bind() is called at the cardinality limit, the handle binds directly to
the overflow tracker — its writes stay on the same direct (no-lookup) hot
path and consistently land in the otel.metric.overflow=true bucket for
the lifetime of the handle. To recover a bound handle after delta collection
frees space, drop the existing handle and call bind() again. Gated behind
the experimental_metrics_bound_instruments feature flag. Benchmarks show
~28x speedup for counter operations and ~9x for histograms.
Delta metrics collection now uses in-place eviction instead of draining the
HashMap on every collect cycle. Stale attribute sets that received no measurements
since the last collection are evicted. Note: recovery from cardinality overflow
now requires 2 collect cycles — the first marks entries as stale, the second
evicts them.
Breaking The SDK testing feature is now runtime agnostic. #3407
- TokioSpanExporter and new_tokio_test_exporter have been renamed to TestSpanExporter and new_test_exporter.
- The following transitive dependencies and features have been removed: tokio/rt, tokio/time, tokio/macros, tokio/rt-multi-thread, tokio-stream, experimental_async_runtime
Store InstrumentationScope in Arc internally in SdkTracer, making tracer clones cheaper (Arc refcount increment instead of deep copy).
Add 32-bit platform support by using portable-atomic for AtomicI64 and AtomicU64 in the metrics module. This enables compilation on 32-bit ARM targets (e.g., armv5te-unknown-linux-gnueabi, armv7-unknown-linux-gnueabihf).
Aggregation enum and StreamBuilder::with_aggregation() are now stable and no longer require the spec_unstable_metrics_views feature flag.
Fix service.name Resource attribute fallback to follow OpenTelemetry
specification by using unknown_service:<process.executable.name> format when
service name is not explicitly configured. Previously, it only used
unknown_service.
Fix SpanExporter::shutdown() default timeout from 5 nanoseconds to 5 seconds.
Breaking SpanExporter trait methods shutdown, shutdown_with_timeout, and force_flush now take &self instead of &mut self for consistency with LogExporter and PushMetricExporter. Implementers using interior mutability (e.g., Mutex, AtomicBool) require no changes.
Added Resource::get_ref(&self, key: &Key) -> Option<&Value> to allow retrieving a reference to a resource value without cloning.
Breaking Removed the following public hidden methods from the SdkTracer #3227:
- id_generator, should_sample
Breaking Moved the following SDK sampling types from opentelemetry::trace to opentelemetry_sdk::trace #3277:
- SamplingDecision, SamplingResult
- These types are SDK implementation details and should be imported from opentelemetry_sdk::trace instead.
StreamBuilder::build() now rejects usize::MAX as a cardinality limit
with a validation error. #3506
Fix Histogram boundaries being ignored in the presence of views #3312
TracerProviderBuilder::with_sampler allows to pass boxed instance of ShouldSample [#3313][3313]
Fix ObservableCounter and ObservableUpDownCounter now correctly report only data points from the current measurement cycle, removing stale attribute combinations that are no longer observed. #3248
Fix panic when SpanProcessor::on_end calls Context::current() (#3262).
- Updated SpanProcessor::on_end documentation to clarify that Context::current() returns the parent context, not the span's context
Fix traceparent headers with unknown flags (e.g. W3C random-trace-id flag 0x02) being incorrectly rejected. Unknown flags are now accepted and zeroed out as required by the W3C trace-context spec. #3435
Breaking InMemoryExporterError has been removed and replaced by OTelSdkError, and a new JaegerRemoteSamplerBuildError introduced to replace last uses of TraceError. #3458
"spec_unstable_logs_enabled" feature flag is removed. The capability (and the
backing specification) is now stable and is enabled by default. #3278

time-rs/time (time)

`v0.3.47`

Compare Source

Security

The possibility of a stack exhaustion denial of service attack when parsing RFC 2822 has been
eliminated. Previously, it was possible to craft input that would cause unbounded recursion. Now,
the depth of the recursion is tracked, causing an error to be returned if it exceeds a reasonable
limit.

This attack vector requires parsing user-provided input, with any type, using the RFC 2822 format.

Compatibility

Attempting to format a value with a well-known format (i.e. RFC 3339, RFC 2822, or ISO 8601) will
error at compile time if the type being formatted does not provide sufficient information. This
would previously fail at runtime. Similarly, attempting to format a value with ISO 8601 that is
only configured for parsing (i.e. Iso8601::PARSING) will error at compile time.

Added

Builder methods for format description modifiers, eliminating the need for verbose initialization
when done manually.
date!(2026-W01-2) is now supported. Previously, a space was required between W and 01.
[end] now has a trailing_input modifier which can either be prohibit (the default) or
discard. When it is discard, all remaining input is ignored. Note that if there are components
after [end], they will still attempt to be parsed, likely resulting in an error.

Changed

More performance gains when parsing.

Fixed

If manually formatting a value, the number of bytes written was one short for some components.
This has been fixed such that the number of bytes written is always correct.
The possibility of integer overflow when parsing an owned format description has been effectively
eliminated. This would previously wrap when overflow checks were disabled. Instead of storing the
depth as u8, it is stored as u32. This would require multiple gigabytes of nested input to
overflow, at which point we've got other problems and trivial mitigations are available by
downstream users.

`v0.3.46`

Compare Source

Added

All possible panics are now documented for the relevant methods.
The need to use #[serde(default)] when using custom serde formats is documented. This applies
only when deserializing an Option<T>.
Duration::nanoseconds_i128 has been made public, mirroring
std::time::Duration::from_nanos_u128.
Various methods for truncating components have been added, avoiding the need to call the fallible
replace methods multiple times.

For PrimitiveDateTime, UtcDateTime, and OffsetDateTime:
- truncate_to_day
For Time, PrimitiveDateTime, UtcDateTime, and OffsetDateTime:
- truncate_to_hour
- truncate_to_minute
- truncate_to_second
- truncate_to_millisecond
- truncate_to_microsecond

Changed

The minimum supported Rust version is now 1.88.0.
Significant performance gains in numerous locations. No public APIs were changed or removed as
part of this.
The size of error::ComponentRange, along with types that contain it, has been significantly
reduced.

Fixed

The PartialOrd and Ord implementations of UtcOffset now return the expected result.

`v0.3.45`

Compare Source

Added

time::format_description::StaticFormatDescription type alias for &'static [BorrowedFormatItem<'static>]. This is the type returned by the
time::macros::format_description! macro.

Changed

The minimum supported Rust version is now 1.83.0.
All floating point methods on Duration are now const fn.
All setters on Parsed are now const fn.
The serde dependency has been replaced with serde_core, This reduces compile times by not
including unused parts of serde.
Date::from_julian_day uses a new algorithm, resulting in an approximately 16% performance
improvement. This method is used internally by numerous other methods.
util::is_leap_year uses a new algorithm, resulting in an approximately 8% performance
improvement.

tokio-rs/tokio (tokio)

`v1.52.3`: Tokio v1.52.3

Compare Source

1.52.3 (May 8th, 2026)

Fixed

sync: fix underflow in mpsc channel len() (#8062)
sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
sync: require that an RwLock has max_readers != 0 (#8076)
sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

`v1.52.1`: Tokio v1.52.1

Compare Source

1.52.1 (April 16th, 2026)

Fixed

runtime: revert #7757 to fix a regression that causes spawn_blocking to hang (#8057)

`v1.52.0`: Tokio v1.52.0

Compare Source

1.52.0 (April 14th, 2026)

Added

io: AioSource::register_borrowed for I/O safety support (#7992)
net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)
taskdump: add trace_with() for customized task dumps (#8025)
taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)
fs: support io_uring in AsyncRead for File (#7907)

Changed

runtime: improve spawn_blocking scalability with sharded queue (#7757)
runtime: use compare_exchange_weak() in worker queue (#8028)

Fixed

runtime: overflow second half of tasks when local queue is filled instead of first half (#8029)

Documented

docs: fix typo in oneshot::Sender::send docs (#8026)
docs: hide #[tokio::main] attribute in the docs of sync::watch (#8035)
net: add docs on ConnectionRefused errors with UDP sockets (#7870)

`v1.51.3`: Tokio v1.51.3

Compare Source

1.51.3 (May 8th, 2026)

Fixed

sync: fix underflow in mpsc channel len() (#8062)
sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
sync: require that an RwLock has max_readers != 0 (#8076)
sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

`v1.51.1`: Tokio v1.51.1

Compare Source

1.51.1 (April 8th, 2026)

Fixed

sync: fix semaphore reopens after forget (#8021)
net: surface errors from SO_ERROR on recv for UDP sockets on Linux (#8001)

Fixed (unstable)

metrics: fix worker_local_schedule_count test (#8008)
rt: do not leak fd when cancelling io_uring open operation (#7983)

`v1.51.0`: Tokio v1.51.0

Compare Source

1.51.0 (April 3rd, 2026)

Added

net: implement get_peer_cred on Hurd (#7989)
runtime: add tokio::runtime::worker_index() (#7921)
runtime: add runtime name (#7924)
runtime: stabilize LocalRuntime (#7557)
wasm: add wasm32-wasip2 networking support (#7933)

Changed

runtime: steal tasks from the LIFO slot (#7431)

Fixed

docs: do not show "Available on non-loom only." doc label (#7977)
macros: improve overall macro hygiene (#7997)
sync: fix notify_waiters priority in Notify (#7996)
sync: fix panic in Chan::recv_many when called with non-empty vector on closed channel (#7991)

`v1.50.0`: Tokio v1.50.0

Compare Source

1.50.0 (Mar 3rd, 2026)

Added

net: add TcpStream::set_zero_linger (#7837)
rt: add is_rt_shutdown_err (#7771)

Changed

io: add optimizer hint that memchr returns in-bounds pointer (#7792)
io: implement vectored writes for write_buf (#7871)
runtime: panic when event_interval is set to 0 (#7838)
runtime: shorten default thread name to fit in Linux limit (#7880)
signal: remember the result of SetConsoleCtrlHandler (#7833)
signal: specialize windows Registry (#7885)

Fixed

io: always cleanup AsyncFd registration list on deregister (#7773)
macros: remove (most) local use declarations in tokio::select! (#7929)
net: fix GET_BUF_SIZE constant for target_os = "android" (#7889)
runtime: avoid redundant unpark in current_thread scheduler (#7834)
runtime: don't park in current_thread if before_park defers waker (#7835)
io: fix write readiness on ESP32 on short writes (#7872)
runtime: wake deferred tasks before entering block_in_place (#7879)
sync: drop rx waker when oneshot receiver is dropped (#7886)
runtime: fix double increment of num_idle_threads on shutdown (#7910, #7918, #7922)

Unstable

fs: check for io-uring opcode support (#7815)
runtime: avoid lock acquisition after uring init (#7850)

Documented

docs: update outdated unstable features section (#7839)
io: clarify the behavior of AsyncWriteExt::shutdown() (#7908)
io: explain how to flush stdout/stderr (#7904)
io: fix incorrect and confusing AsyncWrite documentation (#7875)
rt: clarify the documentation of Runtime::spawn (#7803)
rt: fix missing quotation in docs (#7925)
runtime: correct the default thread name in docs (#7896)
runtime: fix event_interval doc (#7932)
sync: clarify RwLock fairness documentation (#7919)
sync: clarify that recv returns None once closed and no more messages (#7920)
task: clarify when to use spawn_blocking vs dedicated threads (#7923)
task: doc that task drops before JoinHandle completion (#7825)
signal: guarantee that listeners never return None (#7869)
task: fix task module feature flags in docs (#7891)
task: fix two typos (#7913)
task: improve the docs of Builder::spawn_local (#7828)
time: add docs about auto-advance and when to use sleep (#7858)
util: fix typo in docs (#7926)

`v1.49.0`: Tokio v1.49.0

Compare Source

1.49.0 (January 3rd, 2026)

Added

net: add support for TCLASS option on IPv6 (#7781)
runtime: stabilize runtime::id::Id (#7125)
task: implement Extend for JoinSet (#7195)
task: stabilize the LocalSet::id() (#7776)

Changed

net: deprecate {TcpStream,TcpSocket}::set_linger (#7752)

Fixed

macros: fix the hygiene issue of join! and try_join! (#7766)
runtime: revert "replace manual vtable definitions with Wake" (#7699)
sync: return TryRecvError::Disconnected from Receiver::try_recv after Receiver::close (#7686)
task: remove unnecessary trait bounds on the Debug implementation (#7720)

Unstable

fs: handle EINTR in fs::write for io-uring (#7786)
fs: support io-uring with tokio::fs::read (#7696)
runtime: disable io-uring on EPERM (#7724)
time: add alternative timer for better multicore scalability (#7467)

Documented

docs: fix a typos in bounded.rs and park.rs (#7817)
io: add SyncIoBridge cross-references to copy and copy_buf (#7798)
io: doc that AsyncWrite does not inherit from std::io::Write (#7705)
metrics: clarify that num_alive_tasks is not strongly consistent (#7614)
net: clarify the cancellation safety of the TcpStream::peek (#7305)
net: clarify the drop behavior of unix::OwnedWriteHalf (#7742)
net: clarify the platform-dependent backlog in TcpSocket docs (#7738)
runtime: mention LocalRuntime in new_current_thread docs (#7820)
sync: add missing period to mpsc::Sender::try_send docs (#7721)
sync: clarify the cancellation safety of oneshot::Receiver (#7780)
sync: improve the docs for the errors of mpsc (#7722)
task: add example for spawn_local usage on local runtime (#7689)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [anyhow](https://github.com/dtolnay/anyhow) | dependencies | patch | `1.0.100` → `1.0.102` | | [clap](https://github.com/clap-rs/clap) | dependencies | minor | `4.5.53` → `4.6.1` | | [opentelemetry](https://github.com/open-telemetry/opentelemetry-rust/tree/main/opentelemetry) ([source](https://github.com/open-telemetry/opentelemetry-rust/tree/HEAD/opentelemetry)) | dependencies | minor | `0.31.0` → `0.32.0` | | [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust/tree/main/opentelemetry-otlp) ([source](https://github.com/open-telemetry/opentelemetry-rust/tree/HEAD/opentelemetry-otlp)) | dependencies | minor | `0.31.0` → `0.32.0` | | [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-rust/tree/main/opentelemetry-semantic-conventions) ([source](https://github.com/open-telemetry/opentelemetry-rust/tree/HEAD/opentelemetry-semantic-conventions)) | dependencies | minor | `0.31.0` → `0.32.0` | | [opentelemetry-stdout](https://github.com/open-telemetry/opentelemetry-rust/tree/main/opentelemetry-stdout) ([source](https://github.com/open-telemetry/opentelemetry-rust/tree/HEAD/opentelemetry-stdout)) | dependencies | minor | `0.31.0` → `0.32.0` | | [opentelemetry_sdk](https://github.com/open-telemetry/opentelemetry-rust/tree/main/opentelemetry-sdk) ([source](https://github.com/open-telemetry/opentelemetry-rust/tree/HEAD/opentelemetry-sdk)) | dependencies | minor | `0.31.0` → `0.32.0` | | [time](https://time-rs.github.io) ([source](https://github.com/time-rs/time)) | dependencies | patch | `0.3.44` → `0.3.47` | | [tokio](https://tokio.rs) ([source](https://github.com/tokio-rs/tokio)) | dependencies | minor | `1.48.0` → `1.52.3` | --- ### Release Notes <details> <summary>dtolnay/anyhow (anyhow)</summary> ### [`v1.0.102`](https://github.com/dtolnay/anyhow/releases/tag/1.0.102) [Compare Source](https://github.com/dtolnay/anyhow/compare/1.0.101...1.0.102) - Remove backtrace dependency ([#438](https://github.com/dtolnay/anyhow/issues/438), [#439](https://github.com/dtolnay/anyhow/issues/439), [#440](https://github.com/dtolnay/anyhow/issues/440), [#441](https://github.com/dtolnay/anyhow/issues/441), [#442](https://github.com/dtolnay/anyhow/issues/442)) ### [`v1.0.101`](https://github.com/dtolnay/anyhow/releases/tag/1.0.101) [Compare Source](https://github.com/dtolnay/anyhow/compare/1.0.100...1.0.101) - Add #\[inline] to anyhow::Ok helper ([#437](https://github.com/dtolnay/anyhow/issues/437), thanks [@Ibitier](https://github.com/Ibitier)) </details> <details> <summary>clap-rs/clap (clap)</summary> ### [`v4.6.1`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#461---2026-04-15) [Compare Source](https://github.com/clap-rs/clap/compare/v4.6.0...v4.6.1) ##### Fixes - *(derive)* Ensure rebuilds happen when an read env variable is changed ### [`v4.6.0`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#460---2026-03-12) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.61...v4.6.0) ##### Compatibility - Update MSRV to 1.85 ### [`v4.5.61`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4561---2026-03-12) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.60...v4.5.61) ##### Internal - Update dependencies ### [`v4.5.60`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4560---2026-02-19) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.59...v4.5.60) ##### Fixes - *(help)* Quote empty default values, possible values ### [`v4.5.59`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4559---2026-02-16) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.58...v4.5.59) ##### Fixes - `Command::ignore_errors` no longer masks help/version on subcommands ### [`v4.5.58`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4558---2026-02-11) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.57...v4.5.58) ### [`v4.5.57`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4557---2026-02-03) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.56...v4.5.57) ##### Fixes - Regression from 4.5.55 where having an argument with `.value_terminator("--")` caused problems with an argument with `.last(true)` ### [`v4.5.56`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4556---2026-01-29) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.55...v4.5.56) ##### Fixes - On conflict error, don't show conflicting arguments in the usage ### [`v4.5.55`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4555---2026-01-27) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.54...v4.5.55) ##### Fixes - Fix inconsistency in precedence between positionals with a `value_terminator("--")` and escapes (`--`) where `./foo -- bar` means the first arg is empty, rather than escaping future args ### [`v4.5.54`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4554---2026-01-02) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.53...v4.5.54) ##### Fixes - *(help)* Move `[default]` to its own paragraph when `PossibleValue::help` is present in `--help` </details> <details> <summary>open-telemetry/opentelemetry-rust (opentelemetry)</summary> ### [`v0.32.0`](https://github.com/open-telemetry/opentelemetry-rust/blob/HEAD/opentelemetry/CHANGELOG.md#0320) [Compare Source](https://github.com/open-telemetry/opentelemetry-rust/compare/v0.31.0...opentelemetry-0.32.0) Released 2026-May-08 - **Added** `BoundCounter<T>` and `BoundHistogram<T>` types that cache resolved aggregator references for a fixed attribute set. Created via `Counter::bind()` and `Histogram::bind()`, bound instruments bypass per-call attribute lookup, providing significant performance improvements for hot paths where the same attributes are used repeatedly. Both types implement `Clone` so a single bound state can be shared across threads or modules without re-binding. Also adds the `SyncInstrument::bind()` trait method and `BoundSyncInstrument<T>` trait for SDK implementors; the trait method has a no-op default so custom `SyncInstrument` impls degrade gracefully without panicking. Gated behind the `experimental_metrics_bound_instruments` feature flag. - Add `reserve` method to `opentelemetry::propagation::Injector` to hint at the number of elements that will be added to avoid multiple resize operations of the underlying data structure. Has an empty default implementation. - **Breaking** Removed the following public fields and methods from the `SpanBuilder` [#3227][3227]: - `trace_id`, `span_id`, `end_time`, `status`, `sampling_result` - `with_trace_id`, `with_span_id`, `with_end_time`, `with_status`, `with_sampling_result` - **Added** `#[must_use]` attribute to `opentelemetry::metrics::AsyncInstrumentBuilder` to add compile time warning when `.build()` is not called on observable instrument builders, preventing silent failures where callbacks are never registered and metrics are never reported. - **Breaking** Moved the following SDK sampling types from `opentelemetry::trace` to `opentelemetry_sdk::trace` [#3277][3277]: - `SamplingDecision`, `SamplingResult` - These types are SDK implementation details and should be imported from `opentelemetry_sdk::trace` instead. - "spec\_unstable\_logs\_enabled" feature flag is removed. The capability (and the backing specification) is now stable and is enabled by default. [3278](https://github.com/open-telemetry/opentelemetry-rust/pull/3278) - Remove the empty "message" field from `tracing` events emitted via the `internal-logs` feature - Fix panic when calling `Context::current()` from `Drop` implementations triggered by `ContextGuard` cleanup ([#3262][3262]). [3227]: https://github.com/open-telemetry/opentelemetry-rust/pull/3227 [3262]: https://github.com/open-telemetry/opentelemetry-rust/pull/3262 [3277]: https://github.com/open-telemetry/opentelemetry-rust/pull/3277 </details> <details> <summary>open-telemetry/opentelemetry-rust (opentelemetry-otlp)</summary> ### [`v0.32.0`](https://github.com/open-telemetry/opentelemetry-rust/blob/HEAD/opentelemetry-otlp/CHANGELOG.md#0320) [Compare Source](https://github.com/open-telemetry/opentelemetry-rust/compare/opentelemetry-otlp-0.31.1...opentelemetry-otlp-0.32.0) Released 2026-May-08 - Add `tls-provider-agnostic` feature flag for environments that require a custom crypto backend (e.g., OpenSSL for FIPS compliance). Enables TLS code paths without bundling `ring` or `aws-lc-rs`. - Add `build()` directly on `SpanExporterBuilder`, `MetricExporterBuilder`, and `LogExporterBuilder` (before selecting a transport), which auto-selects the transport based on the `OTEL_EXPORTER_OTLP_PROTOCOL` environment variable or enabled features. [#3394](https://github.com/open-telemetry/opentelemetry-rust/pull/3394) - **Breaking** Removed `ExportConfig`, `HasExportConfig`, `with_export_config()`, `HasTonicConfig`, `HasHttpConfig`, `TonicConfig`, and `HttpConfig` from public API. Use the public `WithExportConfig`, `WithTonicConfig`, and `WithHttpConfig` trait methods instead, which remain unchanged. - The gRPC/tonic OTLP exporter's build method now returns an error for all signals (traces, metrics, logs) when an `https://` endpoint is configured but no TLS feature (`tls-ring` or `tls-aws-lc`) is enabled, instead of silently sending unencrypted traffic. When a TLS feature is enabled and an `https://` endpoint is used without an explicit `.with_tls_config()`, a default `ClientTlsConfig` is automatically applied. [#3182](https://github.com/open-telemetry/opentelemetry-rust/issues/3182) - Prevent auth tokens from leaking in export error messages. gRPC and HTTP exporter errors no longer include potentially sensitive server responses (e.g., authentication tokens echoed back). Error messages returned to SDK processors contain only the gRPC status code or HTTP status code. Full details are logged at DEBUG level only. [#3021](https://github.com/open-telemetry/opentelemetry-rust/issues/3021) - Surface pre-flight transport error details at ERROR level when `grpc-tonic` OTLP export fails due to a local misconfiguration. When the returned `tonic::Status` wraps a local transport error (invalid URL, connect failure, DNS), its source chain (e.g., `"transport error: invalid URI"`) is appended to the returned error so SDK processors surface it at ERROR without requiring DEBUG logging. Server-returned gRPC status messages remain DEBUG-only to preserve the auth-token leak safeguards from [#3021](https://github.com/open-telemetry/opentelemetry-rust/issues/3021). [#3331](https://github.com/open-telemetry/opentelemetry-rust/issues/3331) - Add support for per-signal protocol environment variables: `OTEL_EXPORTER_OTLP_TRACES_PROTOCOL`, `OTEL_EXPORTER_OTLP_METRICS_PROTOCOL`, `OTEL_EXPORTER_OTLP_LOGS_PROTOCOL`. These allow configuring different transport protocols per signal type. Signal-specific vars take precedence over generic `OTEL_EXPORTER_OTLP_PROTOCOL`. The auto-select `build()` method on each exporter builder now respects the full priority chain: signal-specific env var > generic env var > feature-based default. - Transport/protocol mismatch validation: HTTP transport returns `InvalidConfig` when gRPC protocol is requested; gRPC transport returns `InvalidConfig` when an HTTP protocol is requested. - **Breaking**: `Protocol::default()` no longer consults the `OTEL_EXPORTER_OTLP_PROTOCOL` environment variable. It now returns only the feature-based default (http-json > http-proto > grpc-tonic). Protocol resolution from environment variables is handled internally by the exporter builders. Users who relied on `Protocol::default()` to read env vars should use `Protocol::from_env()` instead. - Add support for `OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE` environment variable to configure metrics temporality. Accepted values: `cumulative` (default), `delta`, `lowmemory` (case-insensitive). Programmatic `.with_temporality()` overrides the env var. - Fix `NoHttpClient` error when multiple HTTP client features are enabled by using priority-based selection (`reqwest-client` > `hyper-client` > `reqwest-blocking-client`). [#2994](https://github.com/open-telemetry/opentelemetry-rust/issues/2994) - Add partial success response handling for OTLP exporters (traces, metrics, logs) per OTLP spec. Exporters now log warnings when the server returns partial success responses with rejected items and error messages. [#865](https://github.com/open-telemetry/opentelemetry-rust/issues/865) - Refactor `internal-logs` feature in `opentelemetry-otlp` to reduce unnecessary dependencies[3191](https://github.com/open-telemetry/opentelemetry-rust/pull/3192) - Fixed \[[#2777](https://github.com/open-telemetry/opentelemetry-rust/issues/2777)]\(<https://github.com/open-telemetry/opentelemetry> rust/issues/2777) to properly handle `shutdown_with_timeout()` when using `grpc-tonic`. - Deprecate `tls` feature in favor of explicit `tls-ring` and `tls-aws-lc` features. **Migration**: Replace `tls` with `tls-ring` (or `tls-aws-lc`). Users of `tls-roots` or `tls-webpki-roots` must now also enable one of these. - Prevent logging of header values in OTLP tonic exporter [#3465](https://github.com/open-telemetry/opentelemetry-rust/pull/3465) ### [`v0.31.1`](https://github.com/open-telemetry/opentelemetry-rust/releases/tag/opentelemetry-otlp-0.31.1): opentelemetry-otlp 0.31.1 [Compare Source](https://github.com/open-telemetry/opentelemetry-rust/compare/v0.31.0...opentelemetry-otlp-0.31.1) #### What's Changed - feat(OTLP): add tls-ring, tls-aws-lc, and tls-provider-agnostic feature flags \[patch release v0.31.1] by [@lalitb](https://github.com/lalitb) in [#3426](https://github.com/open-telemetry/opentelemetry-rust/pull/3426) **Full Changelog**: <https://github.com/open-telemetry/opentelemetry-rust/compare/v0.31.0...opentelemetry-otlp-0.31.1> </details> <details> <summary>open-telemetry/opentelemetry-rust (opentelemetry-semantic-conventions)</summary> ### [`v0.32.0`](https://github.com/open-telemetry/opentelemetry-rust/blob/HEAD/opentelemetry-semantic-conventions/CHANGELOG.md#0320) [Compare Source](https://github.com/open-telemetry/opentelemetry-rust/compare/v0.31.0...opentelemetry-semantic-conventions-0.32.0) Released 2026-May-08 </details> <details> <summary>open-telemetry/opentelemetry-rust (opentelemetry-stdout)</summary> ### [`v0.32.0`](https://github.com/open-telemetry/opentelemetry-rust/blob/HEAD/opentelemetry-stdout/CHANGELOG.md#0320) [Compare Source](https://github.com/open-telemetry/opentelemetry-rust/compare/v0.31.0...opentelemetry-stdout-0.32.0) Released 2026-May-08 - ExponentialHistogram supported in stdout </details> <details> <summary>open-telemetry/opentelemetry-rust (opentelemetry_sdk)</summary> ### [`v0.32.0`](https://github.com/open-telemetry/opentelemetry-rust/blob/HEAD/opentelemetry-sdk/CHANGELOG.md#0320) [Compare Source](https://github.com/open-telemetry/opentelemetry-rust/compare/v0.31.0...opentelemetry_sdk-0.32.0) Released 2026-May-08 - `SimpleSpanProcessor` now suppresses telemetry during export, preventing telemetry-induced-telemetry feedback loops. This aligns with the existing behavior in `BatchSpanProcessor` and `SimpleLogProcessor`. - Removed `SimpleConcurrentLogProcessor` and the `experimental_logs_concurrent_log_processor` feature flag. The use cases it was designed for (ETW/user\_events exporters) are better served by modeling those exporters as processors directly. - **Added** `Counter::bind()` and `Histogram::bind()` SDK implementations that return pre-bound measurement handles (`BoundCounter<T>`, `BoundHistogram<T>`). Bound instruments resolve the attribute-to-aggregator mapping once at bind time and cache the result, eliminating per-call HashMap lookups. View attribute filtering is applied at bind time so the hot path stays free of per-call attribute processing. Bound and unbound recordings with the same (post-view) attribute set always aggregate into the same data point, including the empty attribute set. Bound entries are never evicted during delta collection while a handle exists — idle cycles produce no export but the tracker persists. If `bind()` is called at the cardinality limit, the handle binds directly to the overflow tracker — its writes stay on the same direct (no-lookup) hot path and consistently land in the `otel.metric.overflow=true` bucket for the lifetime of the handle. To recover a bound handle after delta collection frees space, drop the existing handle and call `bind()` again. Gated behind the `experimental_metrics_bound_instruments` feature flag. Benchmarks show \~28x speedup for counter operations and \~9x for histograms. - Delta metrics collection now uses in-place eviction instead of draining the HashMap on every collect cycle. Stale attribute sets that received no measurements since the last collection are evicted. Note: recovery from cardinality overflow now requires 2 collect cycles — the first marks entries as stale, the second evicts them. - **Breaking** The SDK `testing` feature is now runtime agnostic. [#3407][3407] - `TokioSpanExporter` and `new_tokio_test_exporter` have been renamed to `TestSpanExporter` and `new_test_exporter`. - The following transitive dependencies and features have been removed: `tokio/rt`, `tokio/time`, `tokio/macros`, `tokio/rt-multi-thread`, `tokio-stream`, `experimental_async_runtime` - Store `InstrumentationScope` in `Arc` internally in `SdkTracer`, making tracer clones cheaper (Arc refcount increment instead of deep copy). - Add 32-bit platform support by using `portable-atomic` for `AtomicI64` and `AtomicU64` in the metrics module. This enables compilation on 32-bit ARM targets (e.g., `armv5te-unknown-linux-gnueabi`, `armv7-unknown-linux-gnueabihf`). - `Aggregation` enum and `StreamBuilder::with_aggregation()` are now stable and no longer require the `spec_unstable_metrics_views` feature flag. - Fix `service.name` Resource attribute fallback to follow OpenTelemetry specification by using `unknown_service:<process.executable.name>` format when service name is not explicitly configured. Previously, it only used `unknown_service`. - Fix `SpanExporter::shutdown()` default timeout from 5 nanoseconds to 5 seconds. - **Breaking** `SpanExporter` trait methods `shutdown`, `shutdown_with_timeout`, and `force_flush` now take `&self` instead of `&mut self` for consistency with `LogExporter` and `PushMetricExporter`. Implementers using interior mutability (e.g., `Mutex`, `AtomicBool`) require no changes. - Added `Resource::get_ref(&self, key: &Key) -> Option<&Value>` to allow retrieving a reference to a resource value without cloning. - **Breaking** Removed the following public hidden methods from the `SdkTracer` [#3227][3227]: - `id_generator`, `should_sample` - **Breaking** Moved the following SDK sampling types from `opentelemetry::trace` to `opentelemetry_sdk::trace` [#3277][3277]: - `SamplingDecision`, `SamplingResult` - These types are SDK implementation details and should be imported from `opentelemetry_sdk::trace` instead. - `StreamBuilder::build()` now rejects `usize::MAX` as a cardinality limit with a validation error. [#3506][3506] - Fix Histogram boundaries being ignored in the presence of views [#3312][3312] - `TracerProviderBuilder::with_sampler` allows to pass boxed instance of `ShouldSample` \[[#3313](https://github.com/open-telemetry/opentelemetry-rust/issues/3313)]\[3313] - Fix ObservableCounter and ObservableUpDownCounter now correctly report only data points from the current measurement cycle, removing stale attribute combinations that are no longer observed. [#3248][3248] - Fix panic when `SpanProcessor::on_end` calls `Context::current()` ([#3262][3262]). - Updated `SpanProcessor::on_end` documentation to clarify that `Context::current()` returns the parent context, not the span's context - Fix `traceparent` headers with unknown flags (e.g. W3C random-trace-id flag `0x02`) being incorrectly rejected. Unknown flags are now accepted and zeroed out as required by the W3C trace-context spec. [#3435][3435] - **Breaking** `InMemoryExporterError` has been removed and replaced by `OTelSdkError`, and a new `JaegerRemoteSamplerBuildError` introduced to replace last uses of `TraceError`. [#3458][3458] - "spec\_unstable\_logs\_enabled" feature flag is removed. The capability (and the backing specification) is now stable and is enabled by default. [#3278][3278] [3227]: https://github.com/open-telemetry/opentelemetry-rust/pull/3227 [3277]: https://github.com/open-telemetry/opentelemetry-rust/pull/3277 [3278]: https://github.com/open-telemetry/opentelemetry-rust/pull/3278 [3312]: https://github.com/open-telemetry/opentelemetry-rust/pull/3312 [3248]: https://github.com/open-telemetry/opentelemetry-rust/pull/3248 [3262]: https://github.com/open-telemetry/opentelemetry-rust/pull/3262 [3407]: https://github.com/open-telemetry/opentelemetry-rust/pull/3407 [3435]: https://github.com/open-telemetry/opentelemetry-rust/issues/3435 [3458]: https://github.com/open-telemetry/opentelemetry-rust/pull/3458 [3506]: https://github.com/open-telemetry/opentelemetry-rust/pull/3506 </details> <details> <summary>time-rs/time (time)</summary> ### [`v0.3.47`](https://github.com/time-rs/time/blob/HEAD/CHANGELOG.md#0347-2026-02-05) [Compare Source](https://github.com/time-rs/time/compare/v0.3.46...v0.3.47) ##### Security - The possibility of a stack exhaustion denial of service attack when parsing RFC 2822 has been eliminated. Previously, it was possible to craft input that would cause unbounded recursion. Now, the depth of the recursion is tracked, causing an error to be returned if it exceeds a reasonable limit. This attack vector requires parsing user-provided input, with any type, using the RFC 2822 format. ##### Compatibility - Attempting to format a value with a well-known format (i.e. RFC 3339, RFC 2822, or ISO 8601) will error at compile time if the type being formatted does not provide sufficient information. This would previously fail at runtime. Similarly, attempting to format a value with ISO 8601 that is only configured for parsing (i.e. `Iso8601::PARSING`) will error at compile time. ##### Added - Builder methods for format description modifiers, eliminating the need for verbose initialization when done manually. - `date!(2026-W01-2)` is now supported. Previously, a space was required between `W` and `01`. - `[end]` now has a `trailing_input` modifier which can either be `prohibit` (the default) or `discard`. When it is `discard`, all remaining input is ignored. Note that if there are components after `[end]`, they will still attempt to be parsed, likely resulting in an error. ##### Changed - More performance gains when parsing. ##### Fixed - If manually formatting a value, the number of bytes written was one short for some components. This has been fixed such that the number of bytes written is always correct. - The possibility of integer overflow when parsing an owned format description has been effectively eliminated. This would previously wrap when overflow checks were disabled. Instead of storing the depth as `u8`, it is stored as `u32`. This would require multiple gigabytes of nested input to overflow, at which point we've got other problems and trivial mitigations are available by downstream users. ### [`v0.3.46`](https://github.com/time-rs/time/blob/HEAD/CHANGELOG.md#0346-2026-01-23) [Compare Source](https://github.com/time-rs/time/compare/v0.3.45...v0.3.46) ##### Added - All possible panics are now documented for the relevant methods. - The need to use `#[serde(default)]` when using custom `serde` formats is documented. This applies only when deserializing an `Option<T>`. - `Duration::nanoseconds_i128` has been made public, mirroring `std::time::Duration::from_nanos_u128`. - Various methods for truncating components have been added, avoiding the need to call the fallible `replace` methods multiple times. For `PrimitiveDateTime`, `UtcDateTime`, and `OffsetDateTime`: - `truncate_to_day` For `Time`, `PrimitiveDateTime`, `UtcDateTime`, and `OffsetDateTime`: - `truncate_to_hour` - `truncate_to_minute` - `truncate_to_second` - `truncate_to_millisecond` - `truncate_to_microsecond` ##### Changed - The minimum supported Rust version is now 1.88.0. - Significant performance gains in numerous locations. No public APIs were changed or removed as part of this. - The size of `error::ComponentRange`, along with types that contain it, has been significantly reduced. ##### Fixed - The `PartialOrd` and `Ord` implementations of `UtcOffset` now return the expected result. ### [`v0.3.45`](https://github.com/time-rs/time/blob/HEAD/CHANGELOG.md#0345-2026-01-13) [Compare Source](https://github.com/time-rs/time/compare/v0.3.44...v0.3.45) ##### Added - `time::format_description::StaticFormatDescription` type alias for `&'static [BorrowedFormatItem<'static>]`. This is the type returned by the `time::macros::format_description!` macro. ##### Changed - The minimum supported Rust version is now 1.83.0. - All floating point methods on `Duration` are now `const fn`. - All setters on `Parsed` are now `const fn`. - The `serde` dependency has been replaced with `serde_core`, This reduces compile times by not including unused parts of `serde`. - `Date::from_julian_day` uses a new algorithm, resulting in an approximately 16% performance improvement. This method is used internally by numerous other methods. - `util::is_leap_year` uses a new algorithm, resulting in an approximately 8% performance improvement. </details> <details> <summary>tokio-rs/tokio (tokio)</summary> ### [`v1.52.3`](https://github.com/tokio-rs/tokio/releases/tag/tokio-1.52.3): Tokio v1.52.3 [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.52.2...tokio-1.52.3) ### 1.52.3 (May 8th, 2026) ##### Fixed - sync: fix underflow in mpsc channel `len()` ([#8062]) - sync: notify receivers in mpsc `OwnedPermit::release()` method ([#8075]) - sync: require that an `RwLock` has `max_readers != 0` ([#8076]) - sync: return `Empty` from `try_recv()` when mpsc is closed with outstanding permits ([#8074]) [#8062]: https://github.com/tokio-rs/tokio/pull/8062 [#8074]: https://github.com/tokio-rs/tokio/pull/8074 [#8075]: https://github.com/tokio-rs/tokio/pull/8075 [#8076]: https://github.com/tokio-rs/tokio/pull/8076 ### [`v1.52.2`](https://github.com/tokio-rs/tokio/compare/tokio-1.52.1...tokio-1.52.2) [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.52.1...tokio-1.52.2) ### [`v1.52.1`](https://github.com/tokio-rs/tokio/releases/tag/tokio-1.52.1): Tokio v1.52.1 [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.52.0...tokio-1.52.1) ### 1.52.1 (April 16th, 2026) #### Fixed - runtime: revert [#7757] to fix [a regression][#8056] that causes `spawn_blocking` to hang ([#8057]) [#7757]: https://github.com/tokio-rs/tokio/pull/7757 [#8056]: https://github.com/tokio-rs/tokio/pull/8056 [#8057]: https://github.com/tokio-rs/tokio/pull/8057 ### [`v1.52.0`](https://github.com/tokio-rs/tokio/releases/tag/tokio-1.52.0): Tokio v1.52.0 [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.51.3...tokio-1.52.0) ### 1.52.0 (April 14th, 2026) #### Added - io: `AioSource::register_borrowed` for I/O safety support ([#7992]) - net: add `try_io` function to `unix::pipe` sender and receiver types ([#8030]) #### Added (unstable) - runtime: `Builder::enable_eager_driver_handoff` setting enable eager hand off of the I/O and time drivers before polling tasks ([#8010]) - taskdump: add `trace_with()` for customized task dumps ([#8025]) - taskdump: allow `impl FnMut()` in `trace_with` instead of just `fn()` ([#8040]) - fs: support `io_uring` in `AsyncRead` for `File` ([#7907]) #### Changed - runtime: improve `spawn_blocking` scalability with sharded queue ([#7757]) - runtime: use `compare_exchange_weak()` in worker queue ([#8028]) #### Fixed - runtime: overflow second half of tasks when local queue is filled instead of first half ([#8029]) #### Documented - docs: fix typo in `oneshot::Sender::send` docs ([#8026]) - docs: hide #\[tokio::main] attribute in the docs of `sync::watch` ([#8035]) - net: add docs on `ConnectionRefused` errors with UDP sockets ([#7870]) [#7757]: https://github.com/tokio-rs/tokio/pull/7757 [#7870]: https://github.com/tokio-rs/tokio/pull/7870 [#7907]: https://github.com/tokio-rs/tokio/pull/7907 [#7992]: https://github.com/tokio-rs/tokio/pull/7992 [#8010]: https://github.com/tokio-rs/tokio/pull/8010 [#8025]: https://github.com/tokio-rs/tokio/pull/8025 [#8026]: https://github.com/tokio-rs/tokio/pull/8026 [#8028]: https://github.com/tokio-rs/tokio/pull/8028 [#8029]: https://github.com/tokio-rs/tokio/pull/8029 [#8030]: https://github.com/tokio-rs/tokio/pull/8030 [#8035]: https://github.com/tokio-rs/tokio/pull/8035 [#8040]: https://github.com/tokio-rs/tokio/pull/8040 ### [`v1.51.3`](https://github.com/tokio-rs/tokio/releases/tag/tokio-1.51.3): Tokio v1.51.3 [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.51.2...tokio-1.51.3) ### 1.51.3 (May 8th, 2026) ##### Fixed - sync: fix underflow in mpsc channel `len()` ([#8062]) - sync: notify receivers in mpsc `OwnedPermit::release()` method ([#8075]) - sync: require that an `RwLock` has `max_readers != 0` ([#8076]) - sync: return `Empty` from `try_recv()` when mpsc is closed with outstanding permits ([#8074]) [#8062]: https://github.com/tokio-rs/tokio/pull/8062 [#8074]: https://github.com/tokio-rs/tokio/pull/8074 [#8075]: https://github.com/tokio-rs/tokio/pull/8075 [#8076]: https://github.com/tokio-rs/tokio/pull/8076 ### [`v1.51.2`](https://github.com/tokio-rs/tokio/compare/tokio-1.51.1...tokio-1.51.2) [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.51.1...tokio-1.51.2) ### [`v1.51.1`](https://github.com/tokio-rs/tokio/releases/tag/tokio-1.51.1): Tokio v1.51.1 [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.51.0...tokio-1.51.1) ### 1.51.1 (April 8th, 2026) ##### Fixed - sync: fix semaphore reopens after forget ([#8021]) - net: surface errors from `SO_ERROR` on `recv` for UDP sockets on Linux ([#8001]) ##### Fixed (unstable) - metrics: fix `worker_local_schedule_count` test ([#8008]) - rt: do not leak fd when cancelling io\_uring open operation ([#7983]) [#7983]: https://github.com/tokio-rs/tokio/pull/7983 [#8001]: https://github.com/tokio-rs/tokio/pull/8001 [#8008]: https://github.com/tokio-rs/tokio/pull/8008 [#8021]: https://github.com/tokio-rs/tokio/pull/8021 ### [`v1.51.0`](https://github.com/tokio-rs/tokio/releases/tag/tokio-1.51.0): Tokio v1.51.0 [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.50.0...tokio-1.51.0) ### 1.51.0 (April 3rd, 2026) ##### Added - net: implement `get_peer_cred` on Hurd ([#7989]) - runtime: add `tokio::runtime::worker_index()` ([#7921]) - runtime: add runtime name ([#7924]) - runtime: stabilize `LocalRuntime` ([#7557]) - wasm: add wasm32-wasip2 networking support ([#7933]) ##### Changed - runtime: steal tasks from the LIFO slot ([#7431]) ##### Fixed - docs: do not show "Available on non-loom only." doc label ([#7977]) - macros: improve overall macro hygiene ([#7997]) - sync: fix `notify_waiters` priority in `Notify` ([#7996]) - sync: fix panic in `Chan::recv_many` when called with non-empty vector on closed channel ([#7991]) [#7431]: https://github.com/tokio-rs/tokio/pull/7431 [#7557]: https://github.com/tokio-rs/tokio/pull/7557 [#7921]: https://github.com/tokio-rs/tokio/pull/7921 [#7924]: https://github.com/tokio-rs/tokio/pull/7924 [#7933]: https://github.com/tokio-rs/tokio/pull/7933 [#7977]: https://github.com/tokio-rs/tokio/pull/7977 [#7989]: https://github.com/tokio-rs/tokio/pull/7989 [#7991]: https://github.com/tokio-rs/tokio/pull/7991 [#7996]: https://github.com/tokio-rs/tokio/pull/7996 [#7997]: https://github.com/tokio-rs/tokio/pull/7997 ### [`v1.50.0`](https://github.com/tokio-rs/tokio/releases/tag/tokio-1.50.0): Tokio v1.50.0 [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.49.0...tokio-1.50.0) ### 1.50.0 (Mar 3rd, 2026) ##### Added - net: add `TcpStream::set_zero_linger` ([#7837]) - rt: add `is_rt_shutdown_err` ([#7771]) ##### Changed - io: add optimizer hint that `memchr` returns in-bounds pointer ([#7792]) - io: implement vectored writes for `write_buf` ([#7871]) - runtime: panic when `event_interval` is set to 0 ([#7838]) - runtime: shorten default thread name to fit in Linux limit ([#7880]) - signal: remember the result of `SetConsoleCtrlHandler` ([#7833]) - signal: specialize windows `Registry` ([#7885]) ##### Fixed - io: always cleanup `AsyncFd` registration list on deregister ([#7773]) - macros: remove (most) local `use` declarations in `tokio::select!` ([#7929]) - net: fix `GET_BUF_SIZE` constant for `target_os = "android"` ([#7889]) - runtime: avoid redundant unpark in current\_thread scheduler ([#7834]) - runtime: don't park in `current_thread` if `before_park` defers waker ([#7835]) - io: fix write readiness on ESP32 on short writes ([#7872]) - runtime: wake deferred tasks before entering `block_in_place` ([#7879]) - sync: drop rx waker when oneshot receiver is dropped ([#7886]) - runtime: fix double increment of `num_idle_threads` on shutdown ([#7910], [#7918], [#7922]) ##### Unstable - fs: check for io-uring opcode support ([#7815]) - runtime: avoid lock acquisition after uring init ([#7850]) ##### Documented - docs: update outdated unstable features section ([#7839]) - io: clarify the behavior of `AsyncWriteExt::shutdown()` ([#7908]) - io: explain how to flush stdout/stderr ([#7904]) - io: fix incorrect and confusing `AsyncWrite` documentation ([#7875]) - rt: clarify the documentation of `Runtime::spawn` ([#7803]) - rt: fix missing quotation in docs ([#7925]) - runtime: correct the default thread name in docs ([#7896]) - runtime: fix `event_interval` doc ([#7932]) - sync: clarify RwLock fairness documentation ([#7919]) - sync: clarify that `recv` returns `None` once closed and no more messages ([#7920]) - task: clarify when to use `spawn_blocking` vs dedicated threads ([#7923]) - task: doc that task drops before `JoinHandle` completion ([#7825]) - signal: guarantee that listeners never return `None` ([#7869]) - task: fix task module feature flags in docs ([#7891]) - task: fix two typos ([#7913]) - task: improve the docs of `Builder::spawn_local` ([#7828]) - time: add docs about auto-advance and when to use sleep ([#7858]) - util: fix typo in docs ([#7926]) [#7771]: https://github.com/tokio-rs/tokio/pull/7771 [#7773]: https://github.com/tokio-rs/tokio/pull/7773 [#7792]: https://github.com/tokio-rs/tokio/pull/7792 [#7803]: https://github.com/tokio-rs/tokio/pull/7803 [#7815]: https://github.com/tokio-rs/tokio/pull/7815 [#7825]: https://github.com/tokio-rs/tokio/pull/7825 [#7828]: https://github.com/tokio-rs/tokio/pull/7828 [#7833]: https://github.com/tokio-rs/tokio/pull/7833 [#7834]: https://github.com/tokio-rs/tokio/pull/7834 [#7835]: https://github.com/tokio-rs/tokio/pull/7835 [#7837]: https://github.com/tokio-rs/tokio/pull/7837 [#7838]: https://github.com/tokio-rs/tokio/pull/7838 [#7839]: https://github.com/tokio-rs/tokio/pull/7839 [#7850]: https://github.com/tokio-rs/tokio/pull/7850 [#7858]: https://github.com/tokio-rs/tokio/pull/7858 [#7869]: https://github.com/tokio-rs/tokio/pull/7869 [#7871]: https://github.com/tokio-rs/tokio/pull/7871 [#7872]: https://github.com/tokio-rs/tokio/pull/7872 [#7875]: https://github.com/tokio-rs/tokio/pull/7875 [#7879]: https://github.com/tokio-rs/tokio/pull/7879 [#7880]: https://github.com/tokio-rs/tokio/pull/7880 [#7885]: https://github.com/tokio-rs/tokio/pull/7885 [#7886]: https://github.com/tokio-rs/tokio/pull/7886 [#7889]: https://github.com/tokio-rs/tokio/pull/7889 [#7891]: https://github.com/tokio-rs/tokio/pull/7891 [#7896]: https://github.com/tokio-rs/tokio/pull/7896 [#7904]: https://github.com/tokio-rs/tokio/pull/7904 [#7908]: https://github.com/tokio-rs/tokio/pull/7908 [#7910]: https://github.com/tokio-rs/tokio/pull/7910 [#7913]: https://github.com/tokio-rs/tokio/pull/7913 [#7918]: https://github.com/tokio-rs/tokio/pull/7918 [#7919]: https://github.com/tokio-rs/tokio/pull/7919 [#7920]: https://github.com/tokio-rs/tokio/pull/7920 [#7922]: https://github.com/tokio-rs/tokio/pull/7922 [#7923]: https://github.com/tokio-rs/tokio/pull/7923 [#7925]: https://github.com/tokio-rs/tokio/pull/7925 [#7926]: https://github.com/tokio-rs/tokio/pull/7926 [#7929]: https://github.com/tokio-rs/tokio/pull/7929 [#7932]: https://github.com/tokio-rs/tokio/pull/7932 ### [`v1.49.0`](https://github.com/tokio-rs/tokio/releases/tag/tokio-1.49.0): Tokio v1.49.0 [Compare Source](https://github.com/tokio-rs/tokio/compare/tokio-1.48.0...tokio-1.49.0) ### 1.49.0 (January 3rd, 2026) ##### Added - net: add support for `TCLASS` option on IPv6 ([#7781]) - runtime: stabilize `runtime::id::Id` ([#7125]) - task: implement `Extend` for `JoinSet` ([#7195]) - task: stabilize the `LocalSet::id()` ([#7776]) ##### Changed - net: deprecate `{TcpStream,TcpSocket}::set_linger` ([#7752]) ##### Fixed - macros: fix the hygiene issue of `join!` and `try_join!` ([#7766]) - runtime: revert "replace manual vtable definitions with Wake" ([#7699]) - sync: return `TryRecvError::Disconnected` from `Receiver::try_recv` after `Receiver::close` ([#7686]) - task: remove unnecessary trait bounds on the `Debug` implementation ([#7720]) ##### Unstable - fs: handle `EINTR` in `fs::write` for io-uring ([#7786]) - fs: support io-uring with `tokio::fs::read` ([#7696]) - runtime: disable io-uring on `EPERM` ([#7724]) - time: add alternative timer for better multicore scalability ([#7467]) ##### Documented - docs: fix a typos in `bounded.rs` and `park.rs` ([#7817]) - io: add `SyncIoBridge` cross-references to `copy` and `copy_buf` ([#7798]) - io: doc that `AsyncWrite` does not inherit from `std::io::Write` ([#7705]) - metrics: clarify that `num_alive_tasks` is not strongly consistent ([#7614]) - net: clarify the cancellation safety of the `TcpStream::peek` ([#7305]) - net: clarify the drop behavior of `unix::OwnedWriteHalf` ([#7742]) - net: clarify the platform-dependent backlog in `TcpSocket` docs ([#7738]) - runtime: mention `LocalRuntime` in `new_current_thread` docs ([#7820]) - sync: add missing period to `mpsc::Sender::try_send` docs ([#7721]) - sync: clarify the cancellation safety of `oneshot::Receiver` ([#7780]) - sync: improve the docs for the `errors` of mpsc ([#7722]) - task: add example for `spawn_local` usage on local runtime ([#7689]) [#7125]: https://github.com/tokio-rs/tokio/pull/7125 [#7195]: https://github.com/tokio-rs/tokio/pull/7195 [#7305]: https://github.com/tokio-rs/tokio/pull/7305 [#7467]: https://github.com/tokio-rs/tokio/pull/7467 [#7614]: https://github.com/tokio-rs/tokio/pull/7614 [#7686]: https://github.com/tokio-rs/tokio/pull/7686 [#7689]: https://github.com/tokio-rs/tokio/pull/7689 [#7696]: https://github.com/tokio-rs/tokio/pull/7696 [#7699]: https://github.com/tokio-rs/tokio/pull/7699 [#7705]: https://github.com/tokio-rs/tokio/pull/7705 [#7720]: https://github.com/tokio-rs/tokio/pull/7720 [#7721]: https://github.com/tokio-rs/tokio/pull/7721 [#7722]: https://github.com/tokio-rs/tokio/pull/7722 [#7724]: https://github.com/tokio-rs/tokio/pull/7724 [#7738]: https://github.com/tokio-rs/tokio/pull/7738 [#7742]: https://github.com/tokio-rs/tokio/pull/7742 [#7752]: https://github.com/tokio-rs/tokio/pull/7752 [#7766]: https://github.com/tokio-rs/tokio/pull/7766 [#7776]: https://github.com/tokio-rs/tokio/pull/7776 [#7780]: https://github.com/tokio-rs/tokio/pull/7780 [#7781]: https://github.com/tokio-rs/tokio/pull/7781 [#7786]: https://github.com/tokio-rs/tokio/pull/7786 [#7798]: https://github.com/tokio-rs/tokio/pull/7798 [#7817]: https://github.com/tokio-rs/tokio/pull/7817 [#7820]: https://github.com/tokio-rs/tokio/pull/7820 </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovatebot added 1 commit

2026-03-01 16:08:10 +01:00

Update all non-major dependencies 9c5c8448d6

renovatebot force-pushed renovate/all-minor-patch from 9c5c8448d6 to b5bc42f235

2026-03-03 11:01:16 +01:00

Compare

renovatebot force-pushed renovate/all-minor-patch from b5bc42f235 to 3729b86e4c

2026-03-12 18:17:00 +01:00

Compare

renovatebot force-pushed renovate/all-minor-patch from 3729b86e4c to dc5c8ef2ce

2026-03-12 20:16:20 +01:00

Compare

renovatebot force-pushed renovate/all-minor-patch from dc5c8ef2ce to c5aa84e19f

2026-03-25 19:17:15 +01:00

Compare

renovatebot force-pushed renovate/all-minor-patch from c5aa84e19f to c51f380918

2026-04-03 11:01:43 +02:00

Compare

renovatebot force-pushed renovate/all-minor-patch from c51f380918 to 9b04b6501a

2026-04-08 13:01:47 +02:00

Compare

renovatebot force-pushed renovate/all-minor-patch from 9b04b6501a to 4657a8e498

2026-04-14 21:16:18 +02:00

Compare

renovatebot force-pushed renovate/all-minor-patch from 4657a8e498 to c240fe6ff7

2026-04-15 21:16:51 +02:00

Compare

renovatebot force-pushed renovate/all-minor-patch from c240fe6ff7 to 6007b379eb

2026-04-17 00:01:45 +02:00

Compare

renovatebot force-pushed renovate/all-minor-patch from 6007b379eb to f21ffc752c

2026-05-04 15:01:39 +02:00

Compare

renovatebot force-pushed renovate/all-minor-patch from f21ffc752c to 04caccf4af

2026-05-08 15:31:36 +02:00

Compare

renovatebot force-pushed renovate/all-minor-patch from 04caccf4af to b12df3bde4

2026-05-09 01:46:21 +02:00

Compare

renovatebot force-pushed renovate/all-minor-patch from b12df3bde4 to 003a348438

2026-05-09 02:31:22 +02:00

Compare

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/all-minor-patch:renovate/all-minor-patch

git switch renovate/all-minor-patch

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff renovate/all-minor-patch

git switch renovate/all-minor-patch

git rebase main

git switch main

git merge --ff-only renovate/all-minor-patch

git switch renovate/all-minor-patch

git rebase main

git switch main

git merge --no-ff renovate/all-minor-patch

git switch main

git merge --squash renovate/all-minor-patch

git switch main

git merge --ff-only renovate/all-minor-patch

git switch main

git merge renovate/all-minor-patch

git push origin main

No reviewers

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

lilly/cookied!2

No description provided.

Rows
Columns

Update all non-major dependencies #2

Release Notes

Fixes

Compatibility

Internal

Fixes

Fixes

Fixes

Fixes

Fixes

Fixes

v0.31.1: opentelemetry-otlp 0.31.1

What's Changed

Security

Compatibility

Added

Changed

Fixed

Added

Changed

Fixed

Added

Changed

v1.52.3: Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

v1.52.1: Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

v1.52.0: Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

Added (unstable)

Changed

Fixed

Documented

v1.51.3: Tokio v1.51.3

1.51.3 (May 8th, 2026)

Fixed

v1.51.1: Tokio v1.51.1

1.51.1 (April 8th, 2026)

Fixed

Fixed (unstable)

v1.51.0: Tokio v1.51.0

1.51.0 (April 3rd, 2026)

Added

Changed

Fixed

v1.50.0: Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

Changed

Fixed

Unstable

Documented

v1.49.0: Tokio v1.49.0

1.49.0 (January 3rd, 2026)

Added

Changed

Fixed

Unstable

Documented

Configuration

Checkout

Merge

`v0.31.1`: opentelemetry-otlp 0.31.1

`v1.52.3`: Tokio v1.52.3

`v1.52.1`: Tokio v1.52.1

`v1.52.0`: Tokio v1.52.0

`v1.51.3`: Tokio v1.51.3

`v1.51.1`: Tokio v1.51.1

`v1.51.0`: Tokio v1.51.0

`v1.50.0`: Tokio v1.50.0

`v1.49.0`: Tokio v1.49.0