Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps the rust-dependencies group in /integration-test with 4 updates: libherokubuildpack, serde, serde_json and tempfile.

Updates libherokubuildpack from 0.29.1 to 0.29.3

Release notes

Sourced from libherokubuildpack's releases.

v0.29.3

Fixed

  • libherokubuildpack:
    • download::download_file now returns a DownloadError for erroneous HTTP status codes again. The behaviour unintentionally changed in 0.29.2. (#961)

v0.29.2

No release notes provided.

Changelog

Sourced from libherokubuildpack's changelog.

[0.29.3] - 2025-09-29

Fixed

  • libherokubuildpack:
    • download::download_file now returns a DownloadError for erroneous HTTP status codes again. The behaviour unintentionally changed in 0.29.2. (#961)

[0.29.2] - 2025-09-26

Changed

  • libcnb:

    • Updated OpenTelemetry dependencies from 0.28.0 to 0.30.0 (#955)
      • Updated opentelemetry from 0.28.0 to 0.30.0
      • Updated opentelemetry_sdk from 0.28.0 to 0.30.0
      • Updated opentelemetry-proto from 0.28.0 to 0.30.0
      • Updated tracing-opentelemetry from 0.29 to 0.31
  • libherokubuildpack:

    • download::download_file now uses the operating system's certificate facilities when verifying certificates. (#959)
Commits

Updates serde from 1.0.219 to 1.0.228

Release notes

Sourced from serde's releases.

v1.0.228

  • Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

v1.0.227

  • Documentation improvements (#2991)

v1.0.226

  • Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @​Mingun)

v1.0.225

  • Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @​rcrisanti)

v1.0.224

  • Remove private types being suggested in rustc diagnostics (#2979)

v1.0.223

  • Fix serde_core documentation links (#2978)

v1.0.222

  • Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @​aytey)

v1.0.221

  • Documentation improvements (#2973)
  • Deprecate serde_if_integer128! macro (#2975)

v1.0.220

Commits
  • a866b33 Release 1.0.228
  • 5adc9e8 Merge pull request #2995 from dtolnay/rustdocflags
  • ab58178 Workaround for RUSTDOCFLAGS='--cfg=docsrs'
  • 415d9fc Release 1.0.227
  • 7c58427 Merge pull request #2991 from dtolnay/inlinecoredoc
  • 9d3410e Merge pull request #2992 from dtolnay/inplaceseed
  • 2fb6748 Remove InPlaceSeed public re-export
  • f8137c7 Inline serde_core into serde in docsrs mode
  • b7dbf7e Merge pull request #2990 from dtolnay/integer128
  • 7c83691 No longer macro_use integer128 module
  • Additional commits viewable in compare view

Updates serde_json from 1.0.143 to 1.0.145

Release notes

Sourced from serde_json's releases.

v1.0.145

  • Raise serde version requirement to >=1.0.220

v1.0.144

  • Switch serde dependency to serde_core (#1285)
Commits

Updates tempfile from 3.22.0 to 3.23.0

Changelog

Sourced from tempfile's changelog.

3.23.0

  • Remove need for the "nightly" feature to compile with "wasip2".
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group in /integration-test with 4 updates: [libherokubuildpack](https://github.com/heroku/libcnb.rs), [serde](https://github.com/serde-rs/serde), [serde_json](https://github.com/serde-rs/json) and [tempfile](https://github.com/Stebalien/tempfile).


Updates `libherokubuildpack` from 0.29.1 to 0.29.3
- [Release notes](https://github.com/heroku/libcnb.rs/releases)
- [Changelog](https://github.com/heroku/libcnb.rs/blob/main/CHANGELOG.md)
- [Commits](heroku/libcnb.rs@v0.29.1...v0.29.3)

Updates `serde` from 1.0.219 to 1.0.228
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.219...v1.0.228)

Updates `serde_json` from 1.0.143 to 1.0.145
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.143...v1.0.145)

Updates `tempfile` from 3.22.0 to 3.23.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.22.0...v3.23.0)

---
updated-dependencies:
- dependency-name: libherokubuildpack
  dependency-version: 0.29.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: serde
  dependency-version: 1.0.228
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: serde_json
  dependency-version: 1.0.145
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tempfile
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file skip changelog labels Oct 1, 2025
@dependabot dependabot bot requested a review from Malax as a code owner October 1, 2025 01:05
@dependabot dependabot bot added dependencies Pull requests that update a dependency file skip changelog labels Oct 1, 2025
@Malax Malax merged commit 34322df into main Oct 1, 2025
10 checks passed
@Malax Malax deleted the dependabot/cargo/integration-test/rust-dependencies-53dc5084df branch October 1, 2025 13:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file skip changelog

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant