chore(deps): bump the cargo-minor-and-patch group across 1 directory with 14 updates by dependabot[bot] · Pull Request #9178 · aaif-goose/goose

dependabot · 2026-05-13T00:12:02Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the cargo-minor-and-patch group with 14 updates in the / directory:

Package	From	To
rmcp	`1.5.0`	`1.6.0`
reqwest	`0.13.2`	`0.13.3`
tower-http	`0.6.8`	`0.6.10`
tree-sitter-swift	`0.7.1`	`0.7.2`
aws-config	`1.8.12`	`1.8.13`
aws-sdk-bedrockruntime	`1.120.0`	`1.124.0`
aws-sdk-sagemakerruntime	`1.93.0`	`1.95.0`
jsonwebtoken	`10.3.0`	`10.4.0`
rustls	`0.23.39`	`0.23.40`
open	`5.3.4`	`5.3.5`
clap_complete	`4.6.2`	`4.6.5`
sigstore-verify	`0.6.5`	`0.6.6`
rcgen	`0.14.7`	`0.14.8`
openssl	`0.10.78`	`0.10.79`

Updates rmcp from 1.5.0 to 1.6.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v1.6.0

Fixed

(docs) use correct Parameters syntax in tool examples (#814)

Other

add systemprompt-template to Built with rmcp (#820)

rmcp-v1.6.0

Added

(http) log Host/Origin rejections (#826)

(http) add Origin header validation (#823)

(router) support runtime disabling of tools (#809)

optional session store (resumabillity support) (#775)

Fixed

add init_timeout for streamable-http sessions (#811)

(http) fall back to :authority for HTTP/2 (#827)

(docs) use correct Parameters syntax in tool examples (#814)

Other

add systemprompt-template to Built with rmcp (#820)

Commits

014fb2e chore: release v1.6.0 (#818)
c1e0ead fix: add init_timeout for streamable-http sessions (#811)
ef74147 fix(http): fall back to :authority for HTTP/2 (#827)
4cf7873 feat(http): log Host/Origin rejections (#826)
fffe138 docs: add systemprompt-template to Built with rmcp (#820)
9753d61 feat(http): add Origin header validation (#823)
63583b1 feat(router): support runtime disabling of tools (#809)
8f696e6 feat: optional session store (resumabillity support) (#775)
f6893a7 ci: add semver check job for pull requests (#819)
7eb252a fix(docs): use correct Parameters<T> syntax in tool examples (#814)
See full diff in compare view

Updates reqwest from 0.13.2 to 0.13.3

Release notes

Sourced from reqwest's releases.

v0.13.3

tl;dr

Fix CertificateRevocationList parsing of PEM values.

Fix logging in resolver to only show host, not full URL.

Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.

Fix HTTP/3 to handle STOP_SENDING as not an error.

Fix HTTP/3 pool to remove timed out QUIC connections.

Fix HTTP/3 connection establishment picking IPv4 and IPv6.

Upgrade rustls-platform-verifier.

(wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

Update docs.rs Features by @JamesWiresmith in seanmonstar/reqwest#2961

fix: fallback to hickory_resolver's default config if reading /etc/resolv.conf fails by @monosans in seanmonstar/reqwest#2797

fix: remove timeout con by @cuiweixie in seanmonstar/reqwest#2967

http3: handle stop_sending without error by @anuraaga in seanmonstar/reqwest#2978

resolve: debug log to change only host by @lms0806 in seanmonstar/reqwest#2992

Edit reference link by @lms0806 in seanmonstar/reqwest#2996

docs: more accurate about default HTTP2 window sizes by @seanmonstar in seanmonstar/reqwest#3007

[HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 by @lyuzichong in seanmonstar/reqwest#3006

Upgrade rustls-platform-verifier by @jplatte in seanmonstar/reqwest#3010

use wasm-bindgen ecosystem only for wasm32-unknown-* target by @Ludea in seanmonstar/reqwest#3000

fix rustls crl pem parsing by @Threated in seanmonstar/reqwest#3013

docs(retry): include ReqRep in docsrs by @seanmonstar in seanmonstar/reqwest#3020

New Contributors

@JamesWiresmith made their first contribution in seanmonstar/reqwest#2961

@monosans made their first contribution in seanmonstar/reqwest#2797

@cuiweixie made their first contribution in seanmonstar/reqwest#2967

@anuraaga made their first contribution in seanmonstar/reqwest#2978

@lms0806 made their first contribution in seanmonstar/reqwest#2992

@lyuzichong made their first contribution in seanmonstar/reqwest#3006

@Ludea made their first contribution in seanmonstar/reqwest#3000

Full Changelog: seanmonstar/reqwest@v0.13.2...v0.13.3

Changelog

Sourced from reqwest's changelog.

v0.13.3

Fix CertificateRevocationList parsing of PEM values.

Fix logging in resolver to only show host, not full URL.

Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.

Fix HTTP/3 to handle STOP_SENDING as not an error.

Fix HTTP/3 pool to remove timed out QUIC connections.

Fix HTTP/3 connection establishment picking IPv4 and IPv6.

Upgrade rustls-platform-verifier.

(wasm) Only use wasm-bindgen on unknown-* targets.

Commits

a9a88c4 v0.13.3
f3f6d9d docs(retry): include ReqRep in docsrs (#3020)
5f9c231 fix rustls CRL PEM parsing (#3013)
11d835d use wasm-bindgen ecosystem only for wasm32-unknown-* target (#3000)
1f72916 Upgrade rustls-platform-verifier (#3010)
5d5bf35 [HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 (#3006)
93dc1b2 docs: more accurate about default HTTP2 window sizes (#3007)
c5e50f0 docs: update outdated link in comments
b25611f resolve: debug log to change only host (#2992)
ca1f479 http3: handle stop_sending without error (#2978)
Additional commits viewable in compare view

Updates tower-http from 0.6.8 to 0.6.10

Release notes

Sourced from tower-http's releases.

tower-http-0.6.10

Added

follow-redirect: expose Attempt::method() and Attempt::previous_method() so redirect policies can react to method changes across redirects (e.g. POST to GET on 301/303) (#559)

Fixed

Restore tokio and async-compression as no-op features. These will be removed next breaking release (#667)

#559: tower-rs/tower-http#559 #667: tower-rs/tower-http#667

What's Changed

fix: restore tokio and async-compression as no-op features by @jlizen in tower-rs/tower-http#667

fix gate-ing of atomic64 in tests by @alexanderkjall in tower-rs/tower-http#607

follow_redirect: expose previous and next request methods by @lucab in tower-rs/tower-http#559

chore: release tower-http 0.6.10 by @jlizen in tower-rs/tower-http#669

New Contributors

@lucab made their first contribution in tower-rs/tower-http#559

Full Changelog: tower-rs/tower-http@tower-http-0.6.9...tower-http-0.6.10

tower-http-0.6.9

Added:
on-early-drop: middleware that detects when a response future or response body is dropped before completion (#636)

Two events get hooks: the response future being dropped before the inner service produces a response, and the response body being dropped before reaching end-of-stream.

Install custom callbacks with OnEarlyDropLayer::builder():
use http::Request;
use tower_http::on_early_drop::{OnBodyDropFn, OnEarlyDropLayer};
let layer = OnEarlyDropLayer::builder()
.on_future_drop(|req: &Request<()>| {
let uri = req.uri().clone();
move || eprintln!("future dropped for {}", uri)
})
.on_body_drop(OnBodyDropFn::new(|req: &Request<()>| {

... (truncated)

Commits

4532fc2 v0.6.10
8508cb2 follow_redirect: expose previous and next request methods (#559)
890f66a fix gate-ing of atomic64 in tests (#607)
578c2b2 fix: restore tokio and async-compression as no-op features (#667)
eab7cbf v0.6.9
9c64770 feat(on-early-drop): Add middleware for client early drop detection (#636)
67786ff ci: Remove unnecessary protoc setup (#665)
e442e2b examples: Use axum::body::to_bytes (#650)
218fe6b Make AsyncReadBody::with_capacity public (#415)
ffd4d7c trace: adds back call to classify_eos on trailers (#483)
Additional commits viewable in compare view

Updates tree-sitter-swift from 0.7.1 to 0.7.2

Release notes

Sourced from tree-sitter-swift's releases.

0.7.2 release

NOTE: Download tree-sitter-swift.tar.gz for the complete source code.

What's Changed

Use correct URL for project home by @pombredanne in alex-pinkus/tree-sitter-swift#506

Include LICENSE file in crate by @michel-slm in alex-pinkus/tree-sitter-swift#537

fix: calloc(0, ...) allocates zero bytes in scanner by @apanloco in alex-pinkus/tree-sitter-swift#554

Fix UB in eat_operators by @alex-pinkus in alex-pinkus/tree-sitter-swift#560

Bump Python package version to 0.7.1 by @danfaer in alex-pinkus/tree-sitter-swift#562

Add typed throws (throws(E)) grammar support by @danfaer in alex-pinkus/tree-sitter-swift#567

New Contributors

@pombredanne made their first contribution in alex-pinkus/tree-sitter-swift#506

@michel-slm made their first contribution in alex-pinkus/tree-sitter-swift#537

@apanloco made their first contribution in alex-pinkus/tree-sitter-swift#554

@danfaer made their first contribution in alex-pinkus/tree-sitter-swift#562

Full Changelog: alex-pinkus/tree-sitter-swift@0.7.1-pypi...0.7.2-pypi

Commits

78521a2 Version bump to 0.7.2
7e8a58c Updating top repository version
c354345 Add typed throws (throws(E)) grammar support — SE-0413
e2b3816 Bump Python package version to 0.7.1
64f26c3 Updating top repository version
da7f937 Updating top repository version
fb63a70 Fix UB in eat_operators
50f2735 Updating top repository version
59b5dc9 Updating top repository version
8abb3e8 fix: calloc(0, ...) allocates zero bytes in external scanner
Additional commits viewable in compare view

Updates aws-config from 1.8.12 to 1.8.13

Commits

See full diff in compare view

Updates aws-sdk-bedrockruntime from 1.120.0 to 1.124.0

Commits

See full diff in compare view

Updates aws-sdk-sagemakerruntime from 1.93.0 to 1.95.0

Commits

See full diff in compare view

Updates jsonwebtoken from 10.3.0 to 10.4.0

Changelog

Sourced from jsonwebtoken's changelog.

10.4.0 (2026-05-11)

Fix incorrect encoding for Ed25519 JWK thumbprints

Make Algorithm.family public and add Validation.new_for_family

EncodingKey and DecodingKey are now partially zeroized on drop (the intermediate PemEncodedKey isn't so far)

Commits

69a8fbf v10.4.0
d18e40f Update changelog for 10.4.0 (#507)
ddd2389 security: zeroize encoding and decoding keys (#483)
991e89a Fix more clippy complaints (#503)
75f2113 algorithms: expose AlgorithmFamily (#466)
0c5931a Fixup typo in the DecodingKey::from_ec_der method (#501)
8a80349 Small fixes (#498)
9934c7f Fix formatting in Ed25519 key serialization (#485)
See full diff in compare view

Updates rustls from 0.23.39 to 0.23.40

Commits

b44c09f Prepare 0.23.40
e7a555f Prefer Ord::max to core::cmp
c0005be ech: base inner name padding on actual extension
4e49529 ech: test inner name padding
3e06ef1 ech: add both name and "gross" padding
c574ffd ech: avoid short-lived allocation for padding
8bf935c ech: pop comment from match arm
9088004 ech: expand maximum_name_length to usize ASAP
a612901 Default require_ems based on CryptoProvider FIPS status
See full diff in compare view

Updates open from 5.3.4 to 5.3.5

Release notes

Sourced from open's releases.

v5.3.5

Bug Fixes

delegate to winebrowser under Wine When running a Windows-targeted binary under Wine, open requests previously fell back to Wine's bundled explorer.exe, which lacks proper host desktop integration.

This change detects the Wine environment at runtime (via WINEPREFIX, WINELOADER, or WINEDEBUG) and prepends a winebrowser command to the launcher list. winebrowser is Wine's official utility for forwarding file/URL requests to the host OS's default handler (e.g., xdg-open on Linux, open on macOS).

If winebrowser is unavailable or fails, the existing cmd /c start fallback is used automatically, preserving backward compatibility. No public API changes or compile-time flags are introduced.

Commit Statistics

3 commits contributed to the release.

22 days passed between releases.

1 commit was understood as conventional.

0 issues like '(#ID)' were seen in commit messages

Commit Details

Uncategorized

Merge pull request #121 from gsurrel/wine-awareness (bb28d04)

Review (f72e644)

Delegate to winebrowser under Wine (db81369)

Changelog

Sourced from open's changelog.

5.3.5 (2026-05-12)

Bug Fixes

delegate to winebrowser under Wine When running a Windows-targeted binary under Wine, open requests previously fell back to Wine's bundled explorer.exe, which lacks proper host desktop integration.

This change detects the Wine environment at runtime (via WINEPREFIX, WINELOADER, or WINEDEBUG) and prepends a winebrowser command to the launcher list. winebrowser is Wine's official utility for forwarding file/URL requests to the host OS's default handler (e.g., xdg-open on Linux, open on macOS).

If winebrowser is unavailable or fails, the existing cmd /c start fallback is used automatically, preserving backward compatibility. No public API changes or compile-time flags are introduced.

Commit Statistics

3 commits contributed to the release.

22 days passed between releases.

1 commit was understood as conventional.

0 issues like '(#ID)' were seen in commit messages

Commit Details

Uncategorized

Merge pull request #121 from gsurrel/wine-awareness (bb28d04)

Review (f72e644)

Delegate to winebrowser under Wine (db81369)

Commits

b98fc01 Release open v5.3.5
bb28d04 Merge pull request #121 from gsurrel/wine-awareness
f72e644 review
db81369 fix(windows): delegate to winebrowser under Wine
See full diff in compare view

Updates clap_complete from 4.6.2 to 4.6.5

Commits

c8c9355 chore: Release
af74def docs: Update changelog
c96f222 Merge pull request #6368 from truffle-dev/fix/fish-env-escaping
49a05cd fix(complete): Two-pass quote fish env-completer
e791004 test(complete): Snapshot fish env quoting cases
87ec1ad chore: Release
78f2529 docs: Update changelog
b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
74c6666 fix(complete): Keep zsh candidate order
d142d8f Merge pull request #6360 from epage/string
Additional commits viewable in compare view

Updates sigstore-verify from 0.6.5 to 0.6.6

Release notes

Sourced from sigstore-verify's releases.

sigstore-verify-v0.6.6

Other

API for fetching / using the trust root (#69)

Commits

c9d7606 chore: release v0.6.6 (#84)
70a07a9 fix(sigstore-types): handle missing optional fields in cosign v3 bundles (#82)
6661478 fix(sigstore-tsa): honor SignerInfo digest algorithm in CMS verification (#83)
See full diff in compare view

Updates rcgen from 0.14.7 to 0.14.8

Release notes

Sourced from rcgen's releases.

0.14.8

What's Changed

Fix incorrect identifier for ML-DSA signature algorithms by @DarkmatterVale in rustls/rcgen#412

Upgrade yasna to 0.6 by @djc in rustls/rcgen#419

Add support for is_ca in CSR Params by @5Dev24 in rustls/rcgen#420

Add support for serializing BasicConstraints in CSR's by @5Dev24 in rustls/rcgen#422

update key_pair to signing_key in README.md by @fakelozic in rustls/rcgen#427

Fix encoding of directoryName constraints by @sfackler in rustls/rcgen#429

Commits

a70f083 Bump version to 0.14.8
a32fdb1 Fix encoding of directoryName constraints
7111a79 update key_pair to signing_key
10664c9 Take semver-compatible dependency updates
0ec4d09 Add testing of CSR serializing basic constraints
5f94ef9 Add support for serializing BasicConstraints in CSR's
fb835c1 Add writing basic constraints logic
0cf161d Bump codecov/codecov-action from 5 to 6
4909041 Add testing of CSR Params parsing Basic Constraints variants
6675a94 Add support for is_ca in CSR Params
Additional commits viewable in compare view

Updates openssl from 0.10.78 to 0.10.79

Release notes

Sourced from openssl's releases.

openssl-v0.10.79

What's Changed

Bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in rust-openssl/rust-openssl#2610

Try to fix OpenSSL 1.1.0l download by @botovq in rust-openssl/rust-openssl#2614

Require &mut BigNumContextRef for EcPointRef mul/invert by @alex in rust-openssl/rust-openssl#2615

Fix UB in EcGroupRef::generator on groups without a generator by @alex in rust-openssl/rust-openssl#2617

Replace use libc::*; with targeted imports in openssl-sys by @alex in rust-openssl/rust-openssl#2618

Add PKeyRef::is_a and KeyType for name-based key identification by @reaperhulk in rust-openssl/rust-openssl#2619

Add PKey::{public,private}_key_from_raw_bytes_ex by @reaperhulk in rust-openssl/rust-openssl#2620

Bump MSRV to 1.80 by @reaperhulk in rust-openssl/rust-openssl#2622

Drop once_cell in favor of std::sync::{LazyLock, OnceLock} by @reaperhulk in rust-openssl/rust-openssl#2623

Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import by @reaperhulk in rust-openssl/rust-openssl#2621

parallelize more builds in CI for cold caches by @reaperhulk in rust-openssl/rust-openssl#2625

Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction by @reaperhulk in rust-openssl/rust-openssl#2626

Fix process abort when verify/PSK callbacks fire after SSL_CTX swap by @alex in rust-openssl/rust-openssl#2624

Bind OSSL_PARAM_modified and use it for seed_into by @reaperhulk in rust-openssl/rust-openssl#2628

Add PkeyCtxRef::set_context_string for ML-DSA by @reaperhulk in rust-openssl/rust-openssl#2629

Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders by @alex in rust-openssl/rust-openssl#2631

Fix output buffer overflow for AES key-wrap-with-padding ciphers by @alex in rust-openssl/rust-openssl#2630

Release openssl 0.10.79 and openssl-sys 0.9.115 by @reaperhulk in rust-openssl/rust-openssl#2632

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79

Commits

649f2d9 Release openssl 0.10.79 and openssl-sys 0.9.115 (#2632)
257f9b2 Fix output buffer overflow for AES key-wrap-with-padding ciphers (#2630)
d43e917 Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders (#2631)
f46519c Add PkeyCtxRef::set_context_string for ML-DSA (#2629)
ad9ae31 Bind OSSL_PARAM_modified and use it for seed_into (#2628)
4e25c9b Fix process abort when verify/PSK callbacks fire after SSL_CTX swap (#2624)
3dd8f42 Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction (#2626)
2c5e5a8 parallelize more builds in CI for cold caches (#2625)
6685591 Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import (#2621)
8f8fdce Drop once_cell in favor of std::sync::{LazyLock, OnceLock} (#2623)
Additional commits viewable in compare view

…with 14 updates Bumps the cargo-minor-and-patch group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.5.0` | `1.6.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.2` | `0.13.3` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.8` | `0.6.10` | | [tree-sitter-swift](https://github.com/alex-pinkus/tree-sitter-swift) | `0.7.1` | `0.7.2` | | [aws-config](https://github.com/smithy-lang/smithy-rs) | `1.8.12` | `1.8.13` | | [aws-sdk-bedrockruntime](https://github.com/awslabs/aws-sdk-rust) | `1.120.0` | `1.124.0` | | [aws-sdk-sagemakerruntime](https://github.com/awslabs/aws-sdk-rust) | `1.93.0` | `1.95.0` | | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `10.3.0` | `10.4.0` | | [rustls](https://github.com/rustls/rustls) | `0.23.39` | `0.23.40` | | [open](https://github.com/Byron/open-rs) | `5.3.4` | `5.3.5` | | [clap_complete](https://github.com/clap-rs/clap) | `4.6.2` | `4.6.5` | | [sigstore-verify](https://github.com/prefix-dev/sigstore-rust) | `0.6.5` | `0.6.6` | | [rcgen](https://github.com/rustls/rcgen) | `0.14.7` | `0.14.8` | | [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.78` | `0.10.79` | Updates `rmcp` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.5.0...rmcp-v1.6.0) Updates `reqwest` from 0.13.2 to 0.13.3 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.2...v0.13.3) Updates `tower-http` from 0.6.8 to 0.6.10 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.8...tower-http-0.6.10) Updates `tree-sitter-swift` from 0.7.1 to 0.7.2 - [Release notes](https://github.com/alex-pinkus/tree-sitter-swift/releases) - [Commits](alex-pinkus/tree-sitter-swift@0.7.1...0.7.2) Updates `aws-config` from 1.8.12 to 1.8.13 - [Release notes](https://github.com/smithy-lang/smithy-rs/releases) - [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-rs/commits) Updates `aws-sdk-bedrockruntime` from 1.120.0 to 1.124.0 - [Release notes](https://github.com/awslabs/aws-sdk-rust/releases) - [Commits](https://github.com/awslabs/aws-sdk-rust/commits) Updates `aws-sdk-sagemakerruntime` from 1.93.0 to 1.95.0 - [Release notes](https://github.com/awslabs/aws-sdk-rust/releases) - [Commits](https://github.com/awslabs/aws-sdk-rust/commits) Updates `jsonwebtoken` from 10.3.0 to 10.4.0 - [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](Keats/jsonwebtoken@v10.3.0...v10.4.0) Updates `rustls` from 0.23.39 to 0.23.40 - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md) - [Commits](rustls/rustls@v/0.23.39...v/0.23.40) Updates `open` from 5.3.4 to 5.3.5 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.3.4...v5.3.5) Updates `clap_complete` from 4.6.2 to 4.6.5 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.2...clap_complete-v4.6.5) Updates `sigstore-verify` from 0.6.5 to 0.6.6 - [Release notes](https://github.com/prefix-dev/sigstore-rust/releases) - [Changelog](https://github.com/sigstore/sigstore-rust/blob/main/release-plz.toml) - [Commits](sigstore/sigstore-rust@sigstore-verify-v0.6.5...sigstore-verify-v0.6.6) Updates `rcgen` from 0.14.7 to 0.14.8 - [Release notes](https://github.com/rustls/rcgen/releases) - [Commits](rustls/rcgen@v0.14.7...v0.14.8) Updates `openssl` from 0.10.78 to 0.10.79 - [Release notes](https://github.com/rust-openssl/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79) --- updated-dependencies: - dependency-name: aws-config dependency-version: 1.8.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: aws-sdk-bedrockruntime dependency-version: 1.124.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: aws-sdk-sagemakerruntime dependency-version: 1.95.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: clap_complete dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: jsonwebtoken dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: open dependency-version: 5.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: openssl dependency-version: 0.10.79 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: rcgen dependency-version: 0.14.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: reqwest dependency-version: 0.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: rmcp dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: rustls dependency-version: 0.23.40 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: sigstore-verify dependency-version: 0.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tower-http dependency-version: 0.6.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tree-sitter-swift dependency-version: 0.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-13T15:42:58Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

DOsinga · 2026-05-13T18:52:05Z

@dependabot rebase

* main: (66 commits) Switch GH pages deploy to actions/artifact workflow (#9025) fix(summon): re-apply canonical limits when delegate overrides model (#9183) Split code signing from build (#8587) refactor(logging): consolidate logging setup into shared helper in goose crate (#8817) fix(cli): report cumulative total_tokens in stream-json/json output (#8910) plugins: add open plugins (just skills for now) (#9063) fix(providers): refresh GCP metadata server token on expiration (#8929) chore(deps): bump the cargo-minor-and-patch group across 1 directory with 14 updates (#9178) chore(deps): bump bzip2 from 0.5.2 to 0.6.1 (#8964) chore(deps): bump tauri from 2.10.3 to 2.11.1 in /ui/goose2/src-tauri (#9066) chore(deps): bump hono from 4.12.14 to 4.12.18 in /evals/open-model-gym/mcp-harness (#9073) localize hardcoded strings in provider settings UI (#8931) chore(deps): bump @babel/plugin-transform-modules-systemjs from 7.28.5 to 7.29.4 in /documentation (#9122) move settings into app shell (#9047) Add Location column to CLI skills table (#8785) (feat): add routstr as a declarative provider (#9175) Add FuturMix provider (#8840) fix: convert quoted numeric config values to numbers if needed (#8844) fix(ui): keep SSE reconnect loop alive on long disconnects (#8717) (#8846) fix(openai): apply request_params to outgoing API payload (#9151) ...

…with 14 updates (aaif-goose#9178) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 13, 2026

github-actions Bot approved these changes May 13, 2026

View reviewed changes

github-actions Bot enabled auto-merge May 13, 2026 00:12

dependabot Bot force-pushed the dependabot/cargo/cargo-minor-and-patch-be2a696a46 branch from b813b7a to dff608f Compare May 13, 2026 03:40

github-actions Bot approved these changes May 13, 2026

View reviewed changes

DOsinga closed this May 13, 2026

auto-merge was automatically disabled May 13, 2026 15:42
Pull request was closed

DOsinga deleted the dependabot/cargo/cargo-minor-and-patch-be2a696a46 branch May 13, 2026 15:42

DOsinga restored the dependabot/cargo/cargo-minor-and-patch-be2a696a46 branch May 13, 2026 15:44

DOsinga reopened this May 13, 2026

github-actions Bot approved these changes May 13, 2026

View reviewed changes

github-actions Bot enabled auto-merge May 13, 2026 15:45

DOsinga merged commit 2edfc30 into main May 13, 2026
46 of 47 checks passed

DOsinga deleted the dependabot/cargo/cargo-minor-and-patch-be2a696a46 branch May 13, 2026 19:02

github-actions Bot mentioned this pull request May 20, 2026

chore(release): release version 1.35.0 #9346

Closed

Navigation Menu

Uh oh!

chore(deps): bump the cargo-minor-and-patch group across 1 directory with 14 updates - #9178

chore(deps): bump the cargo-minor-and-patch group across 1 directory with 14 updates#9178
DOsinga merged 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-be2a696a46

dependabot Bot commented on behalf of github May 13, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github May 13, 2026

Uh oh!

DOsinga commented May 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

rmcp-macros-v1.6.0

Fixed

Other

rmcp-v1.6.0

Added

Fixed

Other

v0.13.3

tl;dr

What's Changed

New Contributors

v0.13.3

tower-http-0.6.10

Added

Fixed

What's Changed

New Contributors

tower-http-0.6.9

Added:

0.7.2 release

What's Changed

New Contributors

10.4.0 (2026-05-11)

v5.3.5

Bug Fixes

Commit Statistics

Commit Details

5.3.5 (2026-05-12)

Bug Fixes

Commit Statistics

Commit Details

sigstore-verify-v0.6.6

Other

0.14.8

What's Changed

openssl-v0.10.79

What's Changed

Uh oh!

dependabot Bot commented on behalf of github May 13, 2026

Uh oh!

DOsinga commented May 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github May 13, 2026 •

edited

Loading