chore(deps): update cargo non-major dependencies by dd-octo-sts[bot] · Pull Request #329 · DataDog/dd-sensitive-data-scanner

dd-octo-sts · 2026-03-06T16:37:38Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
afl	dependencies	minor	`0.14.5` → `0.17.0`
base62	dependencies	patch	`2.2.1` → `2.2.3`
bitcoin	dependencies	patch	`0.32.7` → `0.32.8`
chrono	dependencies	patch	`0.4.41` → `0.4.44`
criterion (source)	dev-dependencies	minor	`0.5.1` → `0.8.0`
futures (source)	dependencies	patch	`0.3.31` → `0.3.32`
httpmock	dev-dependencies	minor	`0.7.0` → `0.8.0`
metrics	dependencies	patch	`0.24.2` → `0.24.3`
metrics-util	dependencies	minor	`0.18.0` → `0.20.0`
moka	dependencies	patch	`0.12.12` → `0.12.14`
rand (source)	dependencies	minor	`0.8.5` → `0.10.0`
rayon	dependencies	minor	`1.10.0` → `1.11.0`
regex	dependencies	minor	`1.11.1` → `1.12.3`
regex-automata (source)	dependencies	patch	`0.4.9` → `0.4.14`
regex-syntax (source)	dependencies	minor	`0.7.5` → `0.8.0`
reqwest	dependencies	minor	`0.12` → `0.13`
serde (source)	dependencies	patch	`1.0.219` → `1.0.228`
serde_json	dev-dependencies	patch	`1.0.142` → `1.0.149`
serde_json	dependencies	patch	`1.0.142` → `1.0.149`
serde_path_to_error	dependencies	patch	`0.1.17` → `0.1.20`
serde_with	dependencies	minor	`3.14.0` → `3.17.0`
slab	dependencies	patch	`0.4.11` → `0.4.12`
slotmap	dependencies	minor	`1.0.7` → `1.1.1`
strum	dependencies	minor	`0.25` → `0.28`
tokio (source)	dependencies	minor	`1.48.0` → `1.50.0`

Release Notes

rust-fuzz/afl.rs (afl)

`v0.15.23`

Internal refactor. The changes should not be noticeable to end users. If you experience breakage, please open an issue.

`v0.15.22`

Go back to conventional publishing. Attempting to use trusted publishing caused the AFLplusplus submodule to not be included.

`v0.15.21`

Compare Source

Enable link time optimization and strip symbols for release builds

`v0.15.20`

Compare Source

Update AFLplusplus to 4.33c

`v0.15.19`

Compare Source

Remove images from published crates.io source code

`v0.15.18`

Compare Source

Update AFLplusplus to 4.32c

`v0.15.17`

Compare Source

The version of AFL++ on crates.io was 4.21a, not 4.31c. This release correct the error.

Note that if AFL++ is built for your default Rust toolchain, then cargo afl --version will show AFL++'s version:
```
$ cargo afl --version
cargo-afl 0.15.17 (AFL++ version 4.31c)
                                 ^^^^^
```

`v0.15.16`

Compare Source

Eliminate use of gold linker

`v0.15.15`

Compare Source

Update AFLplusplus to 4.31c

Version 0.15.14 claimed that it updated AFLplusplus to 4.31c. However, commit e586a66 incorrectly undid the update. This release corrects the error.

`v0.15.14`

Compare Source

Update AFLplusplus to 4.31c

`v0.15.13`

Compare Source

Update AFLplusplus to 4.30c

`v0.15.12`

Compare Source

Reorder passes and add split-switches-pass to AFL++ instrumentation

`v0.15.11`

Compare Source

Introduce AFLRS_REQUIRE_PLUGINS and AFL_OPT_LEVEL environment variable options

`v0.15.10`

Compare Source

`v0.15.9`

`v0.15.8`

Update AFLplusplus to 4.21c

`v0.15.7`

Use expr metavariable in fuzz! macro

`v0.15.6`

Update AFLplusplus to commit fd71341 (latest on branch stable) to address a performance regression

`v0.15.5`

Update AFLplusplus to 4.20c

`v0.15.4`

Don't panic in config::config

`v0.15.3`

Update AFLplusplus to 4.10c

`v0.15.2`

Update AFLplusplus to 4.34c

`v0.15.1`

Remove images from published crates.io source code

`v0.15.0`

fbernier/base62 (base62)

`v2.2.3`

Compare Source

What's Changed

Remove rustversion dependency and bump to edition 2021
Encode performance improvements

Full Changelog: fbernier/base62@v2.2.2...v2.2.3

`v2.2.2`

Compare Source

What's Changed

Use multiply shift instead of u128 division to 2x encoding speed by @jackkleeman in #25
Specialise for u64 and particular digit counts of u128 by @jackkleeman in #26
Branchless decode_char by @fbernier in d5f0ee6
Speed up encoding by @fbernier in 4d210c3

New Contributors

@jackkleeman made their first contribution in #25

Full Changelog: fbernier/base62@v2.2.1...v2.2.2

rust-bitcoin/rust-bitcoin (bitcoin)

`v0.32.8`

Compare Source

chronotope/chrono (chrono)

`v0.4.44`: 0.4.44

Compare Source

What's Changed

docs: match MSRV with Cargo.toml contents by @coryan in #1772
Add track_caller to non-deprecated functions by @svix-jplatte in #1774

`v0.4.43`: 0.4.43

Compare Source

What's Changed

Install extra components for lint workflow by @djc in #1741
Upgrade windows-bindgen to 0.64 by @djc in #1742
Improve windows-bindgen setup by @djc in #1744
Drop stabilized feature doc_auto_cfg by @djc in #1745
Faster RFC 3339 parsing by @djc in #1748
Update windows-bindgen requirement from 0.64 to 0.65 by @dependabot[bot] in #1751
add NaiveDate::abs_diff by @Kinrany in #1752
Add feature gated defmt support. by @pebender in #1747
Drop deny lints, eager Debug impls are a mixed blessing by @djc in #1753
chore: minor improvement for docs by @spuradage in #1756
Added doctest for the NaiveDate years_since function by @LucasBou in #1755
Prepare 0.4.43 by @djc in #1765
Update copyright year to 2026 in LICENSE.txt by @taozui472 in #1767

`v0.4.42`: 0.4.42

Compare Source

What's Changed

Add fuzzer for DateTime::parse_from_str by @tyler92 in #1700
Fix wrong amount of micro/milliseconds by @nmlt in #1703
Add warning about MappedLocalTime and wasm by @lutzky in #1702
Fix incorrect parsing of fixed-length second fractions by @chris-leach in #1705
Fix cfgs for wasm32-linux support by @arjunr2 in #1707
Fix OpenHarmony's tzdata parsing by @ldm0 in #1679
Convert NaiveDate to/from days since unix epoch by @findepi in #1715
Add ?Sized bound to related methods of DelayedFormat::write_to by @Huliiiiii in #1721
Add from_timestamp_secs method to DateTime by @jasonaowen in #1719
Migrate to core::error::Error by @benbrittain in #1704
Upgrade to windows-bindgen 0.63 by @djc in #1730
strftime: simplify error handling by @djc in #1731

criterion-rs/criterion.rs (criterion)

`v0.8.2`

Compare Source

Fixed

don't build alloca on unsupported targets

Other

(deps) bump crate-ci/typos from 1.40.0 to 1.43.0
Fix panic with uniform iteration durations in benchmarks
Update Readme
Exclude development scripts from published package

`v0.8.1`

Compare Source

Fixed

Homepage link

Other

(deps) bump crate-ci/typos from 1.23.5 to 1.40.0
(deps) bump jontze/action-mdbook from 3 to 4
(deps) bump actions/checkout from 4 to 6

`v0.8.0`

Compare Source

BREAKING

Drop async-std support

Changed

Bump MSRV to 1.86, stable to 1.91.1

Added

Add ability to plot throughput on summary page.
Add support for reporting throughput in elements and bytes - Throughput::ElementsAndBytes allows the text summary to report throughput in both units simultaneously.
Add alloca-based memory layout randomisation to mitigate memory effects on measurements.
Add doc comment to benchmark runner in criterion_group macro (removes linter warnings)

Fixed

Fix plotting NaN bug

Other

Remove Master API Docs links temporarily while we restore the docs publishing.

`v0.7.0`

Compare Source

Bump version of criterion-plot to align dependencies.

`v0.6.0`

Compare Source

Changed

MSRV bumped to 1.80
The real_blackbox feature no longer has any impact. Criterion always uses std::hint::black_box() now.
Users of criterion::black_box() should switch to std::hint::black_box().
clap dependency unpinned.

Fixed

gnuplot version is now correctly detected when using certain Windows binaries/configurations that used to fail

Added

Async benchmarking with Tokio may be done via a tokio::runtime::Handle, not only a tokio::runtime::Runtime

rust-lang/futures-rs (futures)

`v0.3.32`

Compare Source

Bump MSRV of utility crates to 1.71. (#2989)
Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#2925)
Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#2929)
Add FuturesOrdered::clear (#2927)
Add mpsc::*Receiver::recv (#2947)
Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#2944)
Implement FusedStream for sink::With (#2948)
Add no_std support for shared (#2868)
Make Mutex::new() const (#2956)
Add #[clippy::has_significant_drop] to guards (#2967)
Remove dependency to pin-utils (#2929)
Remove dependency on num_cpus (#2946)
Performance improvements (#2983)
Documentation improvements (#2925, #2926, #2940, #2971)

httpmock/httpmock (httpmock)

`v0.8.3`

Compare Source

Minimum supported Rust version has been raised to 1.88.

#186: "Remove unused code and trait methods for cleanup" (thanks @FalkWoldmann)
#191: "upgrade Rust" (thanks @sebdotv)
#201: "Replace unmaintained rustls-pemfile with rustls-pki-types" (thanks @aleics)
#205: "Fix is_false custom matcher" (thanks @dfaust)
#206: "fix: remove unneeded 'Deserialize' trait bound" (thanks @danieleades and @FalkWoldmann)
#211: "style: remove unneeded 'mut'" (thanks @danieleades)

`v0.8.2`

Compare Source

The following pull requests have been merged:

#178: "Expose proxy method to obtain the recorded yaml without saving to a file" (thanks @janeisklar)
#180: "Add missing query parameters in recordings"
#181: "Append Headers Instead of Inserting"
#182: "Add Dynamic Responses"
#184: "Use read_file in body_from_file"

`v0.8.1`

Compare Source

This release includes bug fixes and documentation enhancements.

The following pull requests have been merged:

#179: "Use scheme of target url for forwarding"

`v0.8.0`

Compare Source

This release includes refactoring, dependency updates, and internal cleanups.
No breaking changes expected.

The minimum required Rust version has been increased to 1.82.

The following pull requests have been merged:

#172: "Update Rust edition to 2021" (thanks @FalkWoldmann)
#169: "Proxy HTTPS fix"
#167: "Replace log and env_logger with tracing and tracing-subscriber" (thanks @FalkWoldmann)
#166: "Remove unused code" (thanks @FalkWoldmann)
#163: "fix: issue 162, non localhost hosts match" (thanks @Thomblin)
#160: "Replace custom read_file with std::fs::read_to_string" (thanks @FalkWoldmann)
#158: "Improve async executor support"
#156: "Bump async-object-pool to replace async-std"
#153: "ci(deps): bump actions/checkout from 4 to 5"
#152: "Fix missing standalone routes"
#151: "Cleanup unused test functions"
#147: "ci(deps): bump codecov/codecov-action from 2 to 5"
#146: "cargo(deps): update thiserror requirement from 1 to 2"
#145: "ci(deps): bump actions/checkout from 2 to 4"
#144: "ci(deps): bump docker/build-push-action from 4 to 6
#141: "cargo(deps): update path-tree requirement from >=0.8.0, <0.8.1 to >=0.8.0, <0.8.4"
#140: "ci(deps): bump docker/login-action from 1 to 3"
#139: "ci(deps): bump withastro/action from 2 to 4"
#138: "Create dependabot.yml" (thanks @FalkWoldmann)
#136: "Replace async_std with tokio" (thanks @FalkWoldmann)

metrics-rs/metrics (metrics)

`v0.24.3`

Compare Source

moka-rs/moka (moka)

`v0.12.14`

Compare Source

Fixed

Fixed a race condition in the and_compute_with method in the future::Cache.
([#574][gh-pull-0574] by [@Squadrick][gh-Squadrick]):
- When multiple calls are made concurrently for the same key, the f closure may
  read a stale value, causing the first update to be lost when it is overwritten
  by a later one.

Changed

Use dep: keyword in the crate features. ([#577][gh-pull-0577] by
[@alexanderkjall][gh-alexanderkjall]).

`v0.12.13`

Compare Source

Fixed

Fixed/mitigated use-after-free issues in the hierarchical timer wheels when Expiry
returns None (Issue [#565][gh-issue-0565], reported by
[@sharksforarms][gh-sharksforarms]).
- Fixed a bug that caused freed timer nodes to remain in the timer wheels in
  some edge cases ([#566][gh-pull-0566] by [@powergee][gh-powergee]).
- The mitigation added to v0.12.12 was enhanced by atomically reading the
  expiration state to prevent rare race conditions that could cause use-after-free
  issues ([#570][gh-pull-0570]).
Fixed Expiry::expire_after_update not clearing expiration time for expired entries
(future::Cache: [#549][gh-pull-0549], by [@singulared][gh-singulared],
sync::Cache: [#564][gh-pull-0564]).

rust-random/rand (rand)

`v0.10.0`

Compare Source

Changes

The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
Use Edition 2024 and MSRV 1.85 (#1653)
Let Fill be implemented for element types, not sliceable types (#1652)
Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
Remove Clone support for StdRng, ReseedingRng (#1677)
Use postcard instead of bincode to test the serde feature (#1693)
Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

Removed ReseedingRng (#1722)
Removed unused feature "nightly" (#1732)
Removed feature small_rng (#1732)

`v0.9.2`

Compare Source

Deprecated

Deprecate rand::rngs::mock module and StepRng generator ([#1634])

Additions

Enable WeightedIndex<usize> (de)serialization ([#1646])

`v0.9.1`

Compare Source

Security and unsafe

Revise "not a crypto library" policy again (#1565)
Remove zerocopy dependency from rand (#1579)

Fixes

Fix feature simd_support for recent nightly rust (#1586)

Changes

Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change ([#1382]) to the previous release.

Additions

Add rand::distr::Alphabetic distribution. (#1587)
Re-export rand_core (#1604)

`v0.9.0`

Compare Source

Security and unsafe

Policy: "rand is not a crypto library" (#1514)
Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
Update to rand_core v0.9.0 (#1558)

Features

Support std feature without getrandom or rand_chacha (#1354)
Enable feature small_rng by default (#1455)
Remove implicit feature rand_chacha; use std_rng instead. (#1473)
Rename feature serde1 to serde (#1477)
Rename feature getrandom to os_rng (#1537)
Add feature thread_rng (#1547)

API changes: rand_core traits

Add fn RngCore::read_adapter implementing std::io::Read (#1267)
Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)
Add traits TryRngCore, TryCryptoRng (#1424, #1499)
Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)
Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)
Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)
Remove fn rand::random() from the prelude (#1506)
Add top-level fns random_iter, random_range, random_bool, random_ratio, fill (#1488)
Re-introduce fn Rng::gen_iter as random_iter (#1305, #1500)
Rename fn Rng::gen to random to avoid conflict with the new gen keyword in Rust 2024 (#1438)
Rename fns Rng::gen_range to random_range, gen_bool to random_bool, gen_ratio to random_ratio (#1505)
Annotate panicking methods with #[track_caller] (#1442, #1447)

API changes: RNGs

Fix <SmallRng as SeedableRng>::Seed size to 256 bits (#1455)
Remove first parameter (rng) of ReseedingRng::new (#1533)

API changes: Sequences

Split trait SliceRandom into IndexedRandom, IndexedMutRandom, SliceRandom (#1382)
Add IndexedRandom::choose_multiple_array, index::sample_array (#1453, #1469)

API changes: Distributions: renames

Rename module rand::distributions to rand::distr (#1470)
Rename distribution Standard to StandardUniform (#1526)
Move distr::Slice -> distr::slice::Choose, distr::EmptySlice -> distr::slice::Empty (#1548)
Rename trait distr::DistString -> distr::SampleString (#1548)
Rename distr::DistIter -> distr::Iter, distr::DistMap -> distr::Map (#1548)

API changes: Distributions

Relax Sized bound on Distribution<T> for &D (#1278)
Remove impl of Distribution<Option<T>> for StandardUniform (#1526)
Let distribution StandardUniform support all NonZero* types (#1332)
Fns {Uniform, UniformSampler}::{new, new_inclusive} return a Result (instead of potentially panicking) (#1229)
Distribution Uniform implements TryFrom instead of From for ranges (#1229)
Add UniformUsize (#1487)
Remove support for generating isize and usize values with StandardUniform, Uniform (except via UniformUsize) and Fill and usage as a WeightedAliasIndex weight (#1487)
Add impl DistString for distributions Slice<char> and Uniform<char> (#1315)
Add fn Slice::num_choices (#1402)
Add fn p() for distribution Bernoulli to access probability (#1481)

API changes: Weighted distributions

Add pub module rand::distr::weighted, moving WeightedIndex there (#1548)
Add trait weighted::Weight, allowing WeightedIndex to trap overflow (#1353)
Add fns weight, weights, total_weight to distribution WeightedIndex (#1420)
Rename enum WeightedError to weighted::Error, revising variants (#1382) and mark as #[non_exhaustive] (#1480)

API changes: SIMD

Switch to std::simd, expand SIMD & docs (#1239)

Reproducibility-breaking changes

Make ReseedingRng::reseed discard remaining data from the last block generated (#1379)
Change fn SmallRng::seed_from_u64 implementation (#1203)
Allow UniformFloat::new samples and UniformFloat::sample_single to yield high (#1462)
Fix portability of distribution Slice (#1469)
Make Uniform for usize portable via UniformUsize (#1487)
Fix IndexdRandom::choose_multiple_weighted for very small seeds and optimize for large input length / low memory (#1530)

Reproducibility-breaking optimisations

Optimize fn sample_floyd, affecting output of rand::seq::index::sample and rand::seq::SliceRandom::choose_multiple (#1277)
New, faster algorithms for IteratorRandom::choose and choose_stable (#1268)
New, faster algorithms for SliceRandom::shuffle and partial_shuffle (#1272)
Optimize distribution Uniform: use Canon's method (single sampling) / Lemire's method (distribution sampling) for faster sampling (breaks value stability; #1287)
Optimize fn sample_single_inclusive for floats (+~20% perf) (#1289)

Other optimisations

Improve SmallRng initialization performance (#1482)
Optimise SIMD widening multiply (#1247)

Other

Add Cargo.lock.msrv file (#1275)
Reformat with rustfmt and enforce (#1448)
Apply Clippy suggestions and enforce (#1448, #1474)
Move all benchmarks to new benches crate (#1329, #1439) and migrate to Criterion (#1490)

Documentation

Improve ThreadRng related docs (#1257)
Docs: enable experimental --generate-link-to-definition feature (#1327)
Better doc of crate features, use doc_auto_cfg (#1411, #1450)

rayon-rs/rayon (rayon)

`v1.11.0`

Compare Source

The minimum supported rustc is now 1.80.
iter::repeatn has been renamed to iter::repeat_n to match the name
stabilized in the standard library. The old name still exists as a deprecated
function for compatibility.
Fixed a bug in in_place_scope when the default global registry uses the
current thread, like on WebAssembly without threading support.
binary_heap::Iter no longer requires a temporary allocation.
Relaxed trait bounds on many of the public structs.
Implemented IntoParallelIterator for Box<[T]> and its references.
Implemented FromParallelIterator<_> for Box<str> via String.

rust-lang/regex (regex)

`v1.12.3`

Compare Source

===================
This release excludes some unnecessary things from the archive published to
crates.io. Specifically, fuzzing data and various shell scripts are now
excluded. If you run into problems, please file an issue.

Improvements:

#1319:
Switch from a Cargo exclude list to an include list, and exclude some
unnecessary stuff.

`v1.12.2`

Compare Source

===================
This release fixes a cargo doc breakage on nightly when --cfg docsrs is
enabled. This caused documentation to fail to build on docs.rs.

Bug fixes:

BUG #1305:
Switches the doc_auto_cfg feature to doc_cfg on nightly for docs.rs builds.

`v1.12.1`

Compare Source

===================
This release makes a bug fix in the new regex::Captures::get_match API
introduced in 1.12.0. There was an oversight with the lifetime parameter
for the Match returned. This is technically a breaking change, but given
that it was caught almost immediately and I've yanked the 1.12.0 release,
I think this is fine.

`v1.12.0`

Compare Source

===================
This release contains a smattering of bug fixes, a fix for excessive memory
consumption in some cases and a new regex::Captures::get_match API.

Improvements:

FEATURE #1146:
Add Capture::get_match for returning the overall match without unwrap().

Bug fixes:

BUG #1083:
Fixes a panic in the lazy DFA (can only occur for especially large regexes).
BUG #1116:
Fixes a memory usage regression for large regexes (introduced in regex 1.9).
BUG #1195:
Fix universal start states in sparse DFA.
BUG #1295:
Fixes a panic when deserializing a corrupted dense DFA.
BUG 8f5d9479:
Make regex_automata::meta::Regex::find consistently return None when
WhichCaptures::None is used.

`v1.11.3`

Compare Source

===================
This is a small patch release with an improvement in memory usage in some
cases.

Improvements:

BUG #1297:
Improve memory usage by trimming excess memory capacity in some spots.

`v1.11.2`

Compare Source

===================
This is a new patch release of regex with some minor fixes. A larger number
of typo or lint fix patches were merged. Also, we now finally recommend using
std::sync::LazyLock.

Improvements:

BUG #1217:
Switch recommendation from once_cell to std::sync::LazyLock.
BUG #1225:
Add DFA::set_prefilter to regex-automata.

Bug fixes:

BUG #1165:
Remove std dependency from perf-literal-multisubstring crate feature.
BUG #1165:
Clarify the meaning of (?R)$ in the documentation.
BUG #1281:
Remove fuzz/ and record/ directories from published crate on crates.io.

seanmonstar/reqwest (reqwest)

`v0.13.2`

Compare Source

Fix HTTP/2 and native-tls ALPN feature combinations.
Fix HTTP/3 to send h3 ALPN.
(wasm) fix RequestBuilder::json() from override previously set content-type.

`v0.13.1`

Compare Source

Fixes compiling with rustls on Android targets.

`v0.13.0`

Compare Source

Breaking changes:
- rustls is now the default TLS backend, instead of native-tls.
- rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
- rustls-tls has been renamed to rustls.
- rustls roots features removed, rustls-platform-verifier is used by default.
  - To use different roots, call tls_certs_only(your_roots).
- native-tls now includes ALPN. To disable, use native-tls-no-alpn.
- query and form are now crate features, disabled by default.
- Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
- For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

Fix compiling on Windows if TLS and SOCKS features are not enabled.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

dd-octo-sts · 2026-03-06T16:37:41Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: sds/Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path sds/Cargo.toml --package base62@2.2.1 --precise 2.2.3
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dd-sds v0.1.2 (/tmp/renovate/repos/github/DataDog/dd-sensitive-data-scanner/sds)`
    ... which satisfies path dependency `dd-sds` (locked to 0.1.2) of package `sds-fuzz v0.1.0 (/tmp/renovate/repos/github/DataDog/dd-sensitive-data-scanner/sds/tools/fuzz)`
versions that meet the requirements `^0.13` are: 0.13.2, 0.13.1, 0.13.0

package `dd-sds` depends on `reqwest` with feature `rustls-tls-native-roots` but `reqwest` does not have that feature.


failed to select a version for `reqwest` which could resolve this conflict

File name: sds/Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path sds/tools/fuzz/Cargo.toml --package afl@0.14.5 --precise 0.17.1
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dd-sds v0.1.2 (/tmp/renovate/repos/github/DataDog/dd-sensitive-data-scanner/sds)`
    ... which satisfies path dependency `dd-sds` (locked to 0.1.2) of package `sds-fuzz v0.1.0 (/tmp/renovate/repos/github/DataDog/dd-sensitive-data-scanner/sds/tools/fuzz)`
versions that meet the requirements `^0.13` are: 0.13.2, 0.13.1, 0.13.0

package `dd-sds` depends on `reqwest` with feature `rustls-tls-native-roots` but `reqwest` does not have that feature.


failed to select a version for `reqwest` which could resolve this conflict

File name: sds-go/rust/Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path sds-go/rust/Cargo.toml --package serde@1.0.219 --precise 1.0.228
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dd-sds v0.1.2 (/tmp/renovate/repos/github/DataDog/dd-sensitive-data-scanner/sds)`
    ... which satisfies path dependency `dd-sds` (locked to 0.1.2) of package `dd_sds_go v0.1.2 (/tmp/renovate/repos/github/DataDog/dd-sensitive-data-scanner/sds-go/rust)`
versions that meet the requirements `^0.13` are: 0.13.2, 0.13.1, 0.13.0

package `dd-sds` depends on `reqwest` with feature `rustls-tls-native-roots` but `reqwest` does not have that feature.


failed to select a version for `reqwest` which could resolve this conflict

chore(deps): update cargo non-major dependencies

43f27ae

dd-octo-sts bot added adms-dependency-update adms-renovate labels Mar 6, 2026

dd-octo-sts bot added the adms-renovate label Mar 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update cargo non-major dependencies#329

chore(deps): update cargo non-major dependencies#329
dd-octo-sts[bot] wants to merge 1 commit intomainfrom
engraver-auto-version-upgrade/renovate/cargo-non-major-dependencies

dd-octo-sts bot commented Mar 6, 2026 •

edited

Loading

Uh oh!

dd-octo-sts bot commented Mar 6, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dd-octo-sts bot commented Mar 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

v0.4.44: 0.4.44

What's Changed

v0.4.43: 0.4.43

What's Changed

v0.4.42: 0.4.42

What's Changed

Fixed

Other

Fixed

Other

BREAKING

Changed

Added

Fixed

Other

Changed

Fixed

Added

Fixed

Changed

Fixed

Changes

Additions

Removals

Deprecated

Additions

Security and unsafe

Fixes

Changes

Additions

Security and unsafe

Dependencies

Features

API changes: rand_core traits

API changes: Rng trait and top-level fns

API changes: RNGs

API changes: Sequences

API changes: Distributions: renames

API changes: Distributions

API changes: Weighted distributions

API changes: SIMD

Reproducibility-breaking changes

Reproducibility-breaking optimisations

Other optimisations

Other

Documentation

v0.12.28

Configuration

Uh oh!

dd-octo-sts bot commented Mar 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: sds/Cargo.lock

File name: sds/Cargo.lock

File name: sds-go/rust/Cargo.lock

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dd-octo-sts bot commented Mar 6, 2026 •

edited

Loading

`v0.4.44`: 0.4.44

`v0.4.43`: 0.4.43

`v0.4.42`: 0.4.42

dd-octo-sts bot commented Mar 6, 2026 •

edited

Loading