[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anyhow	workspace.dependencies	patch	1 → 1.0.104
arc-swap	workspace.dependencies	patch	1 → 1.9.3
async-stream	workspace.dependencies	patch	0.3 → 0.3.6
async-trait	dependencies	patch	0.1 → 0.1.92
aws-credential-types	workspace.dependencies	patch	1 → 1.3.1
aws-sigv4	workspace.dependencies	patch	1 → 1.6.2
axum	workspace.dependencies	patch	0.8 → 0.8.9
bytes	dependencies	patch	1 → 1.12.1
bytes	workspace.dependencies	patch	1 → 1.12.1
chrono	workspace.dependencies	patch	0.4 → 0.4.45
clickhouse (source)	workspace.dependencies	patch	0.15 → 0.15.3
data-encoding	workspace.dependencies	patch	2 → 2.11.1
dotenvy	workspace.dependencies	patch	0.15 → 0.15.7
fred	workspace.dependencies	patch	10 → 10.1.0
futures (source)	workspace.dependencies	patch	0.3 → 0.3.34
hex	workspace.dependencies	patch	0.4 → 0.4.3
http-body-util	workspace.dependencies	patch	0.1 → 0.1.5
http_1x	dev-dependencies	patch	1 → 1.5.0
http_1x	dependencies	patch	1 → 1.5.0
hyper (source)	workspace.dependencies	minor	1 → 1.12.0
hyper-util (source)	workspace.dependencies	patch	0.1 → 0.1.21
metrics	workspace.dependencies	patch	0.24 → 0.24.6
metrics-exporter-prometheus	workspace.dependencies	patch	0.18 → 0.18.3
once_cell	dependencies	patch	1 → 1.21.4
openidconnect	workspace.dependencies	patch	4 → 4.0.1
rand (source)	workspace.dependencies	patch	0.10 → 0.10.3
regex	dependencies	patch	1 → 1.13.1
reqwest	workspace.dependencies	patch	0.13 → 0.13.5
rust_decimal	workspace.dependencies	patch	1 → 1.43.0
rustls	workspace.dependencies	patch	0.23 → 0.23.46
rustls-platform-verifier	workspace.dependencies	patch	0.7 → 0.7.1
serde (source)	workspace.dependencies	patch	1 → 1.0.229
serde_json	workspace.dependencies	patch	1 → 1.0.154
serde_urlencoded	dependencies	patch	0.7 → 0.7.1
thiserror	workspace.dependencies	patch	2 → 2.0.21
tokio (source)	workspace.dependencies	minor	1 → 1.54.0
tokio-stream (source)	workspace.dependencies	patch	0.1 → 0.1.19
tower	workspace.dependencies	patch	0.5 → 0.5.3
tower-http	workspace.dependencies	patch	0.7 → 0.7.1
tracing (source)	workspace.dependencies	patch	0.1 → 0.1.44
tracing-subscriber (source)	workspace.dependencies	patch	0.3 → 0.3.23
url	workspace.dependencies	patch	2 → 2.5.8
utoipa-swagger-ui	workspace.dependencies	patch	10 → 10.0.2
uuid	workspace.dependencies	minor	1 → 1.28.0
wiremock	dependencies	patch	0.6 → 0.6.5
wiremock	dev-dependencies	patch	0.6 → 0.6.5
xxhash-rust	workspace.dependencies	patch	0.8 → 0.8.19

---

Release Notes

vorner/arc-swap (arc-swap)

v1.9.3

• rwlock-strategy feature: RwLock<()> as an explicit, opt-in strategy
  (ArcSwapAny<Arc<T>, RwLock<()>>). DefaultStrategy is unchanged (#​210, #​211).

ClickHouse/clickhouse-rs (clickhouse)

v0.15.3

Compare Source

Changed

• Changed query parameters to be sent through a multipart/form-data body to avoid issues with URL length limits. (#​455)
  • If the Content-Type, Content-Length or Transfer-Encoding headers are already set, they will be overridden.
    This is not considered a breaking behavior change because user code should never be setting these headers.
• enable_http_compression and http_zlib_compression_level are no longer sent because they may trigger an error
  in readonly mode. (release PR #​487)
  • Only affects Query.
  • See added documentation on Client::with_compression() for details.

Fixed

• Fixed JSON type hints parsing to properly handle parenthesized types. (#​478)
• Switched internal schema fetch query issued by Client::insert() to not use the user-set query ID. (#​481)
  • If a query ID is already set, a derived query ID is used instead ({query_id}-describe).
• Switched Lz4 compression to use HTTP standard Accept-Encoding negotiation, fixing a regression in ClickHouse 26.9. (#​482)
• Fixed handling of JSON type hints starting with SKIP. (#​485)

hyperium/hyper (hyper)

v1.12.0

Compare Source

Bug Fixes

• http1:
  • withdraw a stale want when the client dispatcher takes a request (#​4208) (c44f1cc5)
  • remove content-length if transfer-encoding is auto-added (#​4224) (69396fdd)
  • always remove content-length if transfer-encoding is sent (#​4223) (a5d7fd78)
  • let a Connection close token win over a later keep-alive (#​4201) (5dadff76)
  • preserve hop-by-hop when setting close or keep-alive (#​4196) (74a39081)
• http2: do not reserve capacity for idle Upgraded streams (#​4198) (e89d0d93)

Features

• http1: add max_header_size limit for server and client (#​4183) (d1cd14ef, closes #​3832)

v1.11.1 (2026-08-27)

Bug Fixes

• http1:
  • detect TE: trailers caselessly and with other values (#​4152) (72fcf545)
  • recognize \n\r\n as a head terminator in the partial-read fast path (#​4147) (3534d75c, closes #​4145)
  • flush bytes buffered by the write re-check before yielding (#​4143) (f660f5bf)
  • evict pooled conn on request-side Connection: close (#​4110) (da19be08)

serde-rs/json (serde_json)

v1.0.154

Compare Source

• Support preserve_order in no_std builds (#​1333, thanks @​razmser)

v1.0.153

Compare Source

• Report invalid UTF-8 at the first bad byte (#​1345, thanks @​00200200)

v1.0.152

Compare Source

• Preserve sign of -0 in arbitrary_precision mode (#​1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#​1347, thanks @​yuxi-liu-wired)

tokio-rs/tokio (tokio)

v1.54.0: Tokio v1.54.0

Compare Source

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#​8514)

Added

• fs: add File::set_times, File::set_modified, and fs::FileTimes (#​8504)
• net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#​8378)
• runtime: add Builder::max_io_events_per_busy_tick (#​8410)
• runtime: stabilize tokio::runtime::worker_index() (#​8431)
• sync: add SemaphorePermit::semaphore() (#​8482)
• sync: add blocking_acquire methods to Semaphore (#​8269)
• sync: add watch::Receiver::is_closed (#​8481)
• wasm: support JSPI for Emscripten target (#​8285, #​8627)
• wasm: support the wasm32-unknown-emscripten target (#​8281, #​8422, #​8528, #​8628)

Changed

• fs: reject zero in File::set_max_buf_size (#​8449)
• io: make copy_buf cooperative (#​8459)
• io: panic when BufReader or BufStream is created with zero capacity (#​8494)
• io: panic when in-memory pipe is created with zero capacity (#​8397)
• io: reject zero buffer size in copy_bidirectional_with_sizes (#​8454)
• io: support vectored writes in Sink (#​8663)
• net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#​8444)
• net: start accepted sockets as readable and writable (#​8435)
• net: support UCred on Fuchsia (#​8257)
• process: use mio::unix::pipe for Unix child stdio (#​8603)
• runtime: cache-pad the shared injection queue and idle state (#​8622)
• runtime: decide auto-boxing of spawned futures at monomorphization time (#​8414)
• runtime: make enable_io available whenever rt is enabled (#​8387)
• runtime: move block_in_place setup into a non-generic function (#​8315)
• runtime: move the multi-thread inject queue to its own mutex (#​8382)
• runtime: panic when max_io_events_per_tick is zero (#​8476)
• runtime: suggest .await in nested block_on panic message (#​8501)
• sync: avoid atomic reader count in broadcast slots (#​8357)
• sync: use acquire/release orderings in Notify (#​8325)
• time: remove the runtime handle from timers (#​8458)

Fixed

• fs: restore File internal state when op fails (#​8291)
• io: complete zero-length memory stream operations immediately (#​8323)
• io: flush the writer when the reader stalls in copy_buf (#​8424)
• io: keep the shutdown bit when clearing readiness (#​8435)
• io: preserve the full ScheduledIo tick in readiness events (#​8331)
• io: read lines as bytes so a partial line survives an I/O error (#​8400)
• io: retry on ErrorKind::Interrupted in more I/O operations (#​8417, #​8432, #​8448, #​8453, #​8455, #​8460)
• io: use spawn_mandatory_blocking for stdout and stderr (#​8506)
• io: wait for pending operations before BufReader seeks (#​8599)
• net: close CreateFileW handle on SetNamedPipeHandleState failure (#​8418)
• net: fix peer credentials on NetBSD (#​8589)
• net: saturate TcpSocket and UnixSocket listen backlog (#​8511)
• net: treat ENOTCONN as success in UnixStream::shutdown (#​8526)
• runtime: allow building with --all-features without tokio_unstable (#​8401)
• runtime: avoid overflow in shutdown_timeout() (#​8497)
• runtime: fix spawn_blocking hang when only scheduler workers exist (#​8408)
• runtime: fix misleading signal driver panic message (#​8419)
• sync: preserve FIFO lock order when coop budget is exhausted (#​8371)
• sync: use usize for permit count in SemaphorePermit (#​8405)
• time: avoid interval deadline overflow (#​8385)
• time: handle wrapped top-level timer-wheel slots (#​8334)

Unstable

• fs: fall back when io_uring has no IO driver (#​8165)
• metrics: cap log histogram precision (#​8496)
• runtime: add an opt-in sharded spawn_blocking queue (#​8337)
• runtime: expose schedule latency in task hooks (#​8282)
• taskdump: fix idle bookkeeping when a task dump wakes parked workers (#​8372)
• taskdump: skip non-idle tasks during taskdumps (#​8568)

Documented

• docs: fix stray braces and broken links in rustdoc (#​8605)
• fs: document cancellation behavior of tokio::fs (#​8265)
• net: add Safety docs for named pipe from_raw_handle (#​8378)
• net: document that TcpStream::connect returns only the last error (#​8421)
• runtime: add error documentation for runtime::Builder (#​8297)
• runtime: link available_parallelism in worker count docs (#​8625)
• sync: clarify panic behavior of broadcast::channel() (#​8420)
• sync: fix typo in Semaphore documentation (#​8521)

v1.53.3: Tokio v1.53.3

Compare Source

1.53.3 (October 13th, 2026)

Added

• io: add AsyncFd::register and AsyncFd::register_with_interest (#​8587)

Changed

• io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#​8587)

Fixed

• io: wake and drop DuplexStream wakers outside the lock (#​8618)
• macros: avoid unreachable_code in join! and try_join! for Infallible (#​8518)
• runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#​8595)
• sync: wake waiters outside the lock when closing a semaphore (#​8529)
• test: fix several flaky tests (#​8196, #​8427, #​8609)

Fixed (unstable)

• rt: keep io_uring op alive when submission fails after push (#​8185)

juhaku/utoipa (utoipa-swagger-ui)

v10.0.2

Compare Source

What's New 💎 🆕 🎉

• (c7fd8ad) Update utoipa-swagger-ui release versions @​juhaku
• (5aff30b) Minimal fix to update zip to 9.0x (#​1645) @​KarstenB

Full change log

uuid-rs/uuid (uuid)

v1.28.0

Compare Source

What's Changed

• Add optional serde format adapters by @​RanaPriyansh in #​916
• Prepare for 1.28.0 release by @​KodrAus in #​918

New Contributors

• @​RanaPriyansh made their first contribution in #​916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 6am on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.