chore(deps): bump the rust-minor-patch group across 1 directory with 9 updates by dependabot[bot] · Pull Request #87 · ByteVeda/paperjam

dependabot · 2026-05-08T17:31:38Z

Bumps the rust-minor-patch group with 9 updates in the / directory:

Package	From	To
rayon	`1.11.0`	`1.12.0`
image	`0.25.9`	`0.25.10`
rustls	`0.23.37`	`0.23.40`
tokio	`1.50.0`	`1.52.3`
clap	`4.5.60`	`4.6.1`
rmcp	`1.3.0`	`1.6.0`
uuid	`1.23.0`	`1.23.1`
axum	`0.8.8`	`0.8.9`
tower-http	`0.6.8`	`0.6.10`

Updates rayon from 1.11.0 to 1.12.0

Changelog

Sourced from rayon's changelog.

Release rayon 1.12.0 (2026-04-13)

Fixed a bug in parallel Range<char> when the end is 0xE000, just past the surrogate boundary, which was unsafely producing invalid char values.

The new method ParallelSlice::par_array_windows works like par_windows but with a constant length, producing &[T; N] items.

Commits

7449d7d Merge #1093
b3d9e3f Release rayon 1.8.0 and rayon-core 1.12.0
3fe51e5 Fix clippy::let_and_return
082f215 Merge #1087
ea0c06d core: registry: Factor out "wait till out of work" part of the main loop.
75524e2 Merge #1063
01d2800 Ignore the multi-threaded test on emscripten/wasm
40b59c0 core: Make use_current_thread error rather than panic when already in the pool.
f4db4d7 core: tests: Add some basic tests for ThreadPoolBuilder::use_current_thread.
87274ad core: registry: Add some more documentation for ThreadPoolBuilder::use_curren...
Additional commits viewable in compare view

Updates image from 0.25.9 to 0.25.10

Changelog

Sourced from image's changelog.

Version 0.25.10

Features:

Added GenericImage::copy_from_samples that can be implemented for images that can be efficiently filled from a matrix-layout of samples. Its default implementation will not defer to copy_from, consider implementing this if you specialized the latter.

Added GenericImageView::to_pixel_view that can be implemented to describe the buffer in terms our FlatSamples matrix layout, if applicable. This allows algorithms over generic images to run a specialized version where they can be more efficient over an raw input slice.

Added ImageBuffer::from_raw_bgr{,a} to efficiently byte-swap images into the RGBA layout of the buffer (#2596).

Added ExtendedColorType::Rgb5x1 to represent 5-bit colors as from TGA (#2609).

Added metadata::LoopCount and AnimationDecoder::loop_count to query if animations should repeat in a uniform manner (gif, webp, avif) (#2719, #2786).

load_from_memory now utilizes format detection hooks if any are applicable.

Structural changes:

Various changes that reduce the compile time of image on codegen by reducing the number of monomorphizations (#2804, #2800, #2807).

GenericImage::copy_from's default implementation tries copy_from_samples first if the source can be successfully cast with to_pixel_view.

<ImageBuffer as GenericImage>::copy_from is now must faster for ImageBuffer when the source implements GenericImageView::to_pixel_view.

<SubImage<_> as GenericImage>::copy_from inherits the previously mentioned optimizations for pixel sources when the inner type provides them. It also provides to_pixel_view based on the inner type.

ImageBuffer::as_flat_samples no longer requires AsRef<[P::Subpixel]> for the underlying container, just Deref (#2777).

Bug fixes:

Fixed a panic in TGA where indices have more bits than mapped colors (#2673).

Notable decoder changes:

Bump tiff to 0.11, supporting planar layout images (#2743).

ICC profiles can now be written for TIFF files (#2746)

Update ravif to 0.13, supporting EXIF (#2733).

Update jpeg-encoder to 0.7 bringing SIMD acceleration (#2736).

The pnm decoder decodes binary data quicker with fewer allocations (#2797).

The tga decoder handles 5-bit data and colormaps correctly (#2608, #2609).

Compatibility notes (new section):

Bump rust-version to 1.88.

Registered hooks now normalize the file extension they are registered against to ascii-lowercase. It is no longer necessary to register all such variants. This may conflate two hooks that previously hooked the same format with different casing.

Commits

76e5718 Merge pull request #2836 from image-rs/version-0.25.10
38b81dc Change notes for 0.25.10
2fb9e61 Merge pull request #2835 from image-rs/ravif-tiff-integration
4263471 Bump ravif/dav1d versions
a7781b3 Merge pull request #2833 from image-rs/backport-from-bgra
6ea7369 Adjust bounds on from_raw_rgb
dd60a60 Add utility from_raw_bgr{,a} for ImageBuffer
933251a Merge pull request #2832 from image-rs/backport-moxcms
02c039e Update to moxcms 0.8.0 per reviewer feedback
6ac2dd6 Allow moxcms 0.8.x versions
Additional commits viewable in compare view

Updates rustls from 0.23.37 to 0.23.40

Commits

b44c09f Prepare 0.23.40
e7a555f Prefer Ord::max to core::cmp
c0005be ech: base inner name padding on actual extension
4e49529 ech: test inner name padding
3e06ef1 ech: add both name and "gross" padding
c574ffd ech: avoid short-lived allocation for padding
8bf935c ech: pop comment from match arm
9088004 ech: expand maximum_name_length to usize ASAP
a612901 Default require_ems based on CryptoProvider FIPS status
0541605 Cargo: version 0.23.38 -> 0.23.39
Additional commits viewable in compare view

Updates tokio from 1.50.0 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

sync: fix underflow in mpsc channel len() (#8062)

sync: notify receivers in mpsc OwnedPermit::release() method (#8075)

sync: require that an RwLock has max_readers != 0 (#8076)

sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

io: AioSource::register_borrowed for I/O safety support (#7992)

net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)

taskdump: add trace_with() for customized task dumps (#8025)

taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)

fs: support io_uring in AsyncRead for File (#7907)

... (truncated)

Commits

d875691 chore: prepare Tokio v1.52.3 (#8130)
e1aebb0 Merge 'tokio-1.51.3' into 'tokio-1.52.x' (#8129)
fd63094 chore: prepare Tokio v1.51.3 (#8127)
8c600d0 Merge 'tokio-1.47.5' into 'tokio-1.51.x' (#8123)
11bfc13 chore: prepare Tokio v1.47.5 (#8122)
f085b62 sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
30d25cc sync: require that an RwLock has max_readers != 0 (#8076)
9fccf53 sync: return Empty from try_recv() when mpsc is closed with outstanding p...
ebf61b4 sync: fix underflow in mpsc channel len() (#8062)
4abe9d7 chore: prepare Tokio v1.52.2 (#8115)
Additional commits viewable in compare view

Updates clap from 4.5.60 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

[4.6.0] - 2026-03-12

Compatibility

Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

Update dependencies

Commits

1420275 chore: Release
d2c817d docs: Update changelog
f88c94e Merge pull request #6341 from epage/sep
acbb822 fix(complete): Reduce risk of conflict with actual subcommands
a49fadb refactor(complete): Pull out subcommand separator
ddc008b Merge pull request #6332 from epage/update
497dc50 chore: Update compatible dependencies
dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
54bdaa3 chore(deps): Update j178/prek-action action to v2
f0d30d9 chore: Release
Additional commits viewable in compare view

Updates rmcp from 1.3.0 to 1.6.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v1.6.0

Fixed

(docs) use correct Parameters syntax in tool examples (#814)

Other

add systemprompt-template to Built with rmcp (#820)

rmcp-v1.6.0

Added

(http) log Host/Origin rejections (#826)

(http) add Origin header validation (#823)

(router) support runtime disabling of tools (#809)

optional session store (resumabillity support) (#775)

Fixed

add init_timeout for streamable-http sessions (#811)

(http) fall back to :authority for HTTP/2 (#827)

(docs) use correct Parameters syntax in tool examples (#814)

Other

add systemprompt-template to Built with rmcp (#820)

rmcp-macros-v1.5.0

Fixed

(macros) respect local feature in #[prompt] macro — omit + Send bound (#803)

rmcp-v1.5.0

Added

(transport) add constructors for non_exhaustive error types (#806)

add 2025-11-25 protocol version support (#802)

Fixed

treat resource metadata JSON parse failure as soft error (#810)

include http_request_id in request-wise priming event IDs (#799)

(http) drain SSE stream for connection reuse (#790)

Other

(deps) update which requirement from 7 to 8 (#807)

rmcp-macros-v1.4.0

Added

... (truncated)

Commits

014fb2e chore: release v1.6.0 (#818)
c1e0ead fix: add init_timeout for streamable-http sessions (#811)
ef74147 fix(http): fall back to :authority for HTTP/2 (#827)
4cf7873 feat(http): log Host/Origin rejections (#826)
fffe138 docs: add systemprompt-template to Built with rmcp (#820)
9753d61 feat(http): add Origin header validation (#823)
63583b1 feat(router): support runtime disabling of tools (#809)
8f696e6 feat: optional session store (resumabillity support) (#775)
f6893a7 ci: add semver check job for pull requests (#819)
7eb252a fix(docs): use correct Parameters<T> syntax in tool examples (#814)
Additional commits viewable in compare view

Updates uuid from 1.23.0 to 1.23.1

Release notes

Sourced from uuid's releases.

v1.23.1

What's Changed

Remove deprecated msrv feature from wasm-bindgen dependency by @guybedford in uuid-rs/uuid#877

fix: Timestamp::from_gregorian deprecation note by @aznashwan in uuid-rs/uuid#878

Prepare for 1.23.1 release by @KodrAus in uuid-rs/uuid#879

New Contributors

@guybedford made their first contribution in uuid-rs/uuid#877

@aznashwan made their first contribution in uuid-rs/uuid#878

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

Commits

ca0c85f Merge pull request #879 from uuid-rs/cargo/v1.23.1
b4db015 prepare for 1.23.1 release
771069d Merge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note
80994a2 fix: Timestamp::from_gregorian deprecation note
90c5be8 Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv
8b8c4f4 Remove deprecated feature from wasm-bindgen dependency
See full diff in compare view

Updates axum from 0.8.8 to 0.8.9

Release notes

Sourced from axum's releases.

axum-v0.8.9

added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)

changed: Update minimum rust version to 1.80 (#3620)

fixed: Set connect endpoint on correct field in MethodRouter (#3656)

fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3597: tokio-rs/axum#3597 #3620: tokio-rs/axum#3620 #3656: tokio-rs/axum#3656 #3611: tokio-rs/axum#3611

Commits

c59208c revert axum-core changelog changes
99068f5 Revert "Fix IntoResponse for tuples overriding error response codes (#3603)"
23d7098 Revert "axum-core 0.5.6"
e8a39ad axum-macros 0.5.1
6e9a249 axum-extra 0.12.6
0ec9041 axum 0.8.9
c3fcebb axum-core 0.5.6
a8790fc update release notes
26ba7bb docs: consolidate state management docs in crate root (#3683)
9fc59ef Update to tokio-tungstenite 0.29 (#3689)
Additional commits viewable in compare view

Updates tower-http from 0.6.8 to 0.6.10

Release notes

Sourced from tower-http's releases.

tower-http-0.6.10

Added

follow-redirect: expose Attempt::method() and Attempt::previous_method() so redirect policies can react to method changes across redirects (e.g. POST to GET on 301/303) (#559)

Fixed

Restore tokio and async-compression as no-op features. These will be removed next breaking release (#667)

#559: tower-rs/tower-http#559 #667: tower-rs/tower-http#667

What's Changed

fix: restore tokio and async-compression as no-op features by @jlizen in tower-rs/tower-http#667

fix gate-ing of atomic64 in tests by @alexanderkjall in tower-rs/tower-http#607

follow_redirect: expose previous and next request methods by @lucab in tower-rs/tower-http#559

chore: release tower-http 0.6.10 by @jlizen in tower-rs/tower-http#669

New Contributors

@lucab made their first contribution in tower-rs/tower-http#559

Full Changelog: tower-rs/tower-http@tower-http-0.6.9...tower-http-0.6.10

tower-http-0.6.9

Added:
on-early-drop: middleware that detects when a response future or response body is dropped before completion (#636)

Two events get hooks: the response future being dropped before the inner service produces a response, and the response body being dropped before reaching end-of-stream.

Install custom callbacks with OnEarlyDropLayer::builder():
use http::Request;
use tower_http::on_early_drop::{OnBodyDropFn, OnEarlyDropLayer};
let layer = OnEarlyDropLayer::builder()
.on_future_drop(|req: &Request<()>| {
let uri = req.uri().clone();
move || eprintln!("future dropped for {}", uri)
})
.on_body_drop(OnBodyDropFn::new(|req: &Request<()>| {

... (truncated)

Commits

4532fc2 v0.6.10
8508cb2 follow_redirect: expose previous and next request methods (#559)
890f66a fix gate-ing of atomic64 in tests (#607)
578c2b2 fix: restore tokio and async-compression as no-op features (#667)
eab7cbf v0.6.9
9c64770 feat(on-early-drop): Add middleware for client early drop detection (#636)
67786ff ci: Remove unnecessary protoc setup (#665)
e442e2b examples: Use axum::body::to_bytes (#650)
218fe6b Make AsyncReadBody::with_capacity public (#415)
ffd4d7c trace: adds back call to classify_eos on trailers (#483)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…9 updates Bumps the rust-minor-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rayon](https://github.com/rayon-rs/rayon) | `1.11.0` | `1.12.0` | | [image](https://github.com/image-rs/image) | `0.25.9` | `0.25.10` | | [rustls](https://github.com/rustls/rustls) | `0.23.37` | `0.23.40` | | [tokio](https://github.com/tokio-rs/tokio) | `1.50.0` | `1.52.3` | | [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.1` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.3.0` | `1.6.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.0` | `1.23.1` | | [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.8` | `0.6.10` | Updates `rayon` from 1.11.0 to 1.12.0 - [Changelog](https://github.com/rayon-rs/rayon/blob/main/RELEASES.md) - [Commits](rayon-rs/rayon@rayon-core-v1.11.0...rayon-core-v1.12.0) Updates `image` from 0.25.9 to 0.25.10 - [Changelog](https://github.com/image-rs/image/blob/v0.25.10/CHANGES.md) - [Commits](image-rs/image@v0.25.9...v0.25.10) Updates `rustls` from 0.23.37 to 0.23.40 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.37...v/0.23.40) Updates `tokio` from 1.50.0 to 1.52.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.50.0...tokio-1.52.3) Updates `clap` from 4.5.60 to 4.6.1 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.1) Updates `rmcp` from 1.3.0 to 1.6.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.3.0...rmcp-v1.6.0) Updates `uuid` from 1.23.0 to 1.23.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.0...v1.23.1) Updates `axum` from 0.8.8 to 0.8.9 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9) Updates `tower-http` from 0.6.8 to 0.6.10 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.8...tower-http-0.6.10) --- updated-dependencies: - dependency-name: rayon dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-patch - dependency-name: image dependency-version: 0.25.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-patch - dependency-name: rustls dependency-version: 0.23.40 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-patch - dependency-name: tokio dependency-version: 1.52.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-patch - dependency-name: clap dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-patch - dependency-name: rmcp dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor-patch - dependency-name: uuid dependency-version: 1.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-patch - dependency-name: axum dependency-version: 0.8.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-patch - dependency-name: tower-http dependency-version: 0.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 8, 2026

github-actions Bot added the mcp MCP server / paperjam-mcp crate label May 8, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the rust-minor-patch group across 1 directory with 9 updates#87

chore(deps): bump the rust-minor-patch group across 1 directory with 9 updates#87
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-patch-4ecbd0d3f0

dependabot Bot commented on behalf of github May 8, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release rayon 1.12.0 (2026-04-13)

Version 0.25.10

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

Tokio v1.52.2

1.52.2 (May 4th, 2026)

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

Added (unstable)

v4.6.1

[4.6.1] - 2026-04-15

Fixes

[4.6.1] - 2026-04-15

Fixes

[4.6.0] - 2026-03-12

Compatibility

[4.5.61] - 2026-03-12

Internal

rmcp-macros-v1.6.0

Fixed

Other

rmcp-v1.6.0

Added

Fixed

Other

rmcp-macros-v1.5.0

Fixed

rmcp-v1.5.0

Added

Fixed

Other

rmcp-macros-v1.4.0

Added

v1.23.1

What's Changed

New Contributors

axum-v0.8.9

tower-http-0.6.10

Added

Fixed

What's Changed

New Contributors

tower-http-0.6.9

Added:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 8, 2026 •

edited

Loading