Skip to content

feat(deps): bump the minor group with 14 updates - #381

Merged
benbrandt merged 2 commits into
mainfrom
dependabot/cargo/minor-c9ad67bc87
Sep 28, 2026
Merged

feat(deps): bump the minor group with 14 updates#381
benbrandt merged 2 commits into
mainfrom
dependabot/cargo/minor-c9ad67bc87

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor group with 14 updates:

Package From To
thiserror 2.0.20 2.0.21
rmcp 3.4.0 3.4.1
cc 1.4.7 1.5.0
find-msvc-tools 0.1.13 0.1.14
hyper-rustls 0.27.9 0.27.10
hyper-util 0.1.20 0.1.21
rand 0.10.2 0.10.3
rmcp-macros 3.4.0 3.5.0
rustls-platform-verifier 0.7.0 0.7.1
rustls-platform-verifier-android 0.1.1 0.2.0
smallvec 1.16.1 1.16.2
thiserror-impl 2.0.20 2.0.21
zerocopy 0.8.57 0.8.58
zerocopy-derive 0.8.57 0.8.59

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

  • Fix parsing of generic unit variants in display expressions (#459)
Commits
  • b1827ee Release 2.0.21
  • 58037b5 Merge pull request #459 from dtolnay/turbofish
  • f82a0cf Keep track of nested turbofish depth
  • 72ea492 Raise required compiler to Rust 1.77
  • 72eea0d Resolve io_other_error clippy lint in tests
  • 07f09a2 Raise required compiler to Rust 1.74
  • 2715388 Update ui test suite to nightly-2026-09-22
  • 5a306c7 Update ui test suite to nightly-2026-09-05
  • ef9383b Update ui test suite to nightly-2026-08-22
  • 8336b84 Update ui tests for version 2.0.20
  • See full diff in compare view

Updates rmcp from 3.4.0 to 3.4.1

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.4.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-v3.4.1

Fixed

  • (transport) fall back after JSON discover rejections (#1288)
  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

Other

  • (deps) update rstest requirement from 0.26.1 to 0.27.0 (#1276)
Commits
  • 9427a92 chore: release v3.4.1 (#1294)
  • a730321 chore(deps): bump the codeql-action group with 4 updates (#1290)
  • fa05883 chore(deps): bump crate-ci/typos from 1.50.1 to 1.50.2 (#1291)
  • 5311a0f chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#1292)
  • 71e3081 fix(transport): fall back after JSON discover rejections (#1288)
  • 16d2186 fix(macros): accept const paths and concat! in tool/prompt descriptions (#1243)
  • dbd2382 chore(deps): update rstest requirement from 0.26.1 to 0.27.0 (#1276)
  • 9f7ace3 chore(deps): bump the codeql-action group with 4 updates (#1277)
  • 011f281 chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (#1278)
  • 0cfbe7f chore(deps): bump taiki-e/install-action from 2.87.6 to 2.87.12 (#1279)
  • See full diff in compare view

Updates cc from 1.4.7 to 1.5.0

Release notes

Sourced from cc's releases.

cc-v1.5.0

Added

  • inherit x86 target features from RUSTFLAGS (#1948)

Fixed

  • don't report the file name cl.exe echoes as a warning in expand() (#1950)
  • ignore MSVC /link flags with a warning (#1949)
  • Make windows_sys more private and re-export types needed by cc-rs (#1944)
  • pass -Tp on MSVC for .cc so they are not treated as objects (#1930)

Other

  • document macOS SDKROOT and Xcode CLT for testing (#1943)
  • remove License section from CONTRIBUTING.md (#1942)
  • add CONTRIBUTING.md and Conventional Commit PR title check (#1938)

Fixed

  • Pass -Tp immediately before .cc sources on MSVC (not clang-cl) when compiling C++ so they are not treated as object files (#1877)
Changelog

Sourced from cc's changelog.

1.5.0 - 2026-09-25

Added

  • inherit x86 target features from RUSTFLAGS (#1948)

Fixed

  • don't report the file name cl.exe echoes as a warning in expand() (#1950)
  • ignore MSVC /link flags with a warning (#1949)
  • Make windows_sys more private and re-export types needed by cc-rs (#1944)
  • pass -Tp on MSVC for .cc so they are not treated as objects (#1930)

Other

  • document macOS SDKROOT and Xcode CLT for testing (#1943)
  • remove License section from CONTRIBUTING.md (#1942)
  • add CONTRIBUTING.md and Conventional Commit PR title check (#1938)

Fixed

  • Pass -Tp immediately before .cc sources on MSVC (not clang-cl) when compiling C++ so they are not treated as object files (#1877)
Commits
  • 6b0d8e6 chore: release (#1952)
  • b7d59a9 fix: don't report the file name cl.exe echoes as a warning in expand() (#1950)
  • fc01fd7 fix: ignore MSVC /link flags with a warning (#1949)
  • b81fc77 feat: inherit x86 target features from RUSTFLAGS (#1948)
  • 0da3fab ci: add additional targets for MSRV testing (#1945)
  • 0c74c6a ci(deps): bump release-plz/action from 0.5.137 to 0.5.138 (#1947)
  • e2bff2c docs: document macOS SDKROOT and Xcode CLT for testing (#1943)
  • fa75298 fix: Make windows_sys more private and re-export types needed by cc-rs (#1944)
  • 5b5d671 docs: remove License section from CONTRIBUTING.md (#1942)
  • 3651c0c docs: add CONTRIBUTING.md and Conventional Commit PR title check (#1938)
  • Additional commits viewable in compare view

Updates find-msvc-tools from 0.1.13 to 0.1.14

Release notes

Sourced from find-msvc-tools's releases.

find-msvc-tools-v0.1.14

Fixed

  • Make windows_sys more private and re-export types needed by cc-rs (#1944)
Commits
  • 6b0d8e6 chore: release (#1952)
  • b7d59a9 fix: don't report the file name cl.exe echoes as a warning in expand() (#1950)
  • fc01fd7 fix: ignore MSVC /link flags with a warning (#1949)
  • b81fc77 feat: inherit x86 target features from RUSTFLAGS (#1948)
  • 0da3fab ci: add additional targets for MSRV testing (#1945)
  • 0c74c6a ci(deps): bump release-plz/action from 0.5.137 to 0.5.138 (#1947)
  • e2bff2c docs: document macOS SDKROOT and Xcode CLT for testing (#1943)
  • fa75298 fix: Make windows_sys more private and re-export types needed by cc-rs (#1944)
  • 5b5d671 docs: remove License section from CONTRIBUTING.md (#1942)
  • 3651c0c docs: add CONTRIBUTING.md and Conventional Commit PR title check (#1938)
  • Additional commits viewable in compare view

Updates hyper-rustls from 0.27.9 to 0.27.10

Release notes

Sourced from hyper-rustls's releases.

0.27.10

Maintenance release, principally fixing #344

What's Changed

Full Changelog: rustls/hyper-rustls@v/0.27.9...v/0.27.10

Commits
  • ce45b6b Bump rustls from 0.23.44 to 0.23.45
  • a3a1838 Bump rustls from 0.23.43 to 0.23.44
  • 6e1d602 Bump tokio-rustls from 0.26.4 to 0.26.5
  • 96e3b92 Bump hyper from 1.11.0 to 1.11.1
  • 3989e37 Bump log from 0.4.33 to 0.4.34
  • eed79ba Bump http-body-util from 0.1.4 to 0.1.5
  • fadbc9e Bump http from 1.4.2 to 1.5.0
  • 9519052 Bump rustls from 0.23.42 to 0.23.43
  • a2f1a60 Bump webpki-roots from 1.0.8 to 1.0.9
  • acce69f Bump tokio from 1.53.0 to 1.53.1
  • Additional commits viewable in compare view

Updates hyper-util from 0.1.20 to 0.1.21

Release notes

Sourced from hyper-util's releases.

v0.1.21

Additions

  • Add crate-level documentation. (#327)
  • Add client::legacy::Builder::http2_header_table_size() method. (#274)
  • Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
  • Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
  • Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
  • Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

  • Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
  • Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
  • Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
  • Fix client::pool::cache to preserve readiness with clones. (#297)
  • Fix client::pool::cache to wake its waiters in FIFO order. (#298)
  • Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
  • Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
  • Fix client::proxy::matcher handling for IP wildcards. (#309)
  • The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
  • Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

... (truncated)

Changelog

Sourced from hyper-util's changelog.

0.1.21 (2026-09-24)

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

Additions

  • Add crate-level documentation. (#327)
  • Add client::legacy::Builder::http2_header_table_size() method. (#274)
  • Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
  • Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
  • Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
  • Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

  • Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
  • Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
  • Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
  • Fix client::pool::cache to preserve readiness with clones. (#297)
  • Fix client::pool::cache to wake its waiters in FIFO order. (#298)
  • Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
  • Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
  • Fix client::proxy::matcher handling for IP wildcards. (#309)
  • The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
  • Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

Commits
  • 23a8689 v0.1.21
  • cdb2346 doc(client/pool): add broken_intra_doc_links allowance (#326)
  • 13b6110 chore(error): remove disabled hyper_util::error submodule (#325)
  • b9ee451 docs(lib): add crate-level documentation (#327)
  • d6b7d7e feat(rt/tracing): introduce tracing executors (#323)
  • f2da915 feat(client): add HttpConnector::set_mark for SO_MARK (#303)
  • 4dbd494 feat(rt): change TokioExecutor to not trace, add rt-tracing-exec-force feat...
  • d480d9f fix(client): parse proxy CONNECT response with httparse (#315)
  • 7e0958b chore(ci): simplify msrv check (#317)
  • 0734568 chore(ci): update to actions/checkout@v7 (#316)
  • Additional commits viewable in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

  • Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
  • Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
  • Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

  • Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits
  • 9e7d328 Prepare rand 0.10.3 (#1840)
  • f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
  • ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
  • c994eb1 docs: fix angle unit in quick start example (#1839)
  • 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
  • 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
  • bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
  • 521fab6 Stop pinning dependencies (#1820)
  • 3f7c433 Stop pinning dependencies
  • cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
  • Additional commits viewable in compare view

Updates rmcp-macros from 3.4.0 to 3.5.0

Release notes

Sourced from rmcp-macros's releases.

rmcp-macros-v3.5.0

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)

rmcp-macros-v3.4.1

Fixed

  • (macros) accept const paths and concat! in tool/prompt descriptions (#1243)
Commits
  • 0cde3c5 chore: release v3.5.0 (#1296)
  • e02efbf fix(model): decode float fields through serde_json::Number (#1300)
  • 972af86 feat: update LATEST and add LATEST_WITH_INITIALIZE (#1105)
  • 6e47ca3 chore(deps): bump the github-actions group with 2 updates (#1297)
  • 6255c37 chore: reduce dependency update noise (#1293)
  • 22ef52a fix(rmcp): reject duplicate sep-2243 headers (#1274)
  • 26f3b2e fix(transport): match explicit default ports in Origin allowlist (#1270)
  • 6677eee style: cargo fmt fixes on validate_standard_headers changes (#1275)
  • fbed447 fix(rmcp): tolerate empty cacheScope instead of silently dropping the whole r...
  • 90516bf fix(model): preserve explicit null structuredContent in CallToolResult (#1295)
  • Additional commits viewable in compare view

Updates rustls-platform-verifier from 0.7.0 to 0.7.1

Release notes

Sourced from rustls-platform-verifier's releases.

0.7.1

About

This version contains Windows and Android bugfixes, but its headline feature is a migration to an improved distribution strategy for the Android component of the crate, which must be included by Gradle for Android application/library builds. If you don't build for Android, no need to worry these changes don't affect you. But if you do, please continue reading to understand the required migration steps and benefits. 0.7.1 requires the Android migration to be performed once manually.

Android Revocation

The biggest improvement to functionality in this release is proper support for revocation on Android. As OCSP moves to deprecation, more CAs are exclusively using CRLs to distribute revocation data. Previously this failed to work on Android without workarounds since by default the network fetches for this were blocked. As of 0.2.0 of rustls-platform-verifier-android, this works again as expected. We now bundle an Android App manifest with the library, which Android Studio merges into the main manifest of the app being built.

Android Distribution

As of this release, we have stopped bundling pre-compiled .aar artifacts and a local Maven repository inside each release of rustls-platform-verifier-android. Instead, all future (and past!) Maven artifacts are now hosted on GitHub under the maven-archive branch. The branch's structure creates a remote Maven repository that Gradle can download and synchronize with just like any other. Importantly, this now means that the Android library can be downloaded and resolved independently of cargo's own downloads.

0.2.0 of the Android component is exclusively distributed through this new mechanism, but the 0.1.0 and 0.1.1 releases were also backported to the new repository. This means that no matter what version of rustls-platform-verifier you are using, its possible to migrate your Gradle build configuration to the more modern approach. Once again we have included out-of-the-box Gradle and Kotlin script snippets to configure the repository. See our README guide for more info.

What's Changed

New Contributors

Full Changelog: rustls/rustls-platform-verifier@v/0.7.0...v/0.7.1

Commits
  • 252e251 Release 0.7.1
  • 18f5c53 Bump Maven release to 0.2.0
  • 2885f2f Bump android-release-support to 0.2.0
  • 0e76b93 Update Android documentation and release process for GitHub-published artifacts
  • c87abb8 Remove Cargo-bundled Maven repository to setup for GitHub-published artifacts
  • 7c3e664 Bundle generated CRL networkSecurityConfig into release manifest
  • f4d7c89 Update Android build tooling and associated versions
  • f48a4b9 Fix groupId in POM template
  • 027c029 Update Android network security config
  • a8aa23d Take semver-compatible dependency updates
  • Additional commits viewable in compare view

Updates rustls-platform-verifier-android from 0.1.1 to 0.2.0

Release notes

Sourced from rustls-platform-verifier-android's releases.

0.2.0

  • Rustls version updated from 0.21 to 0.22

What's Changed

Full Changelog: rustls/rustls-platform-verifier@v/0.1.0...v/0.2.0

v/0.1.2

Fix an error in the handling of allowed EKUs on Windows; see rustls/rustls-platform-verifier#126

What's Changed

Full Changelog: rustls/rustls-platform-verifier@v/0.1.1...v/0.1.2

Commits
  • 9188474 Cargo: rustls-platform-verifier 0.1.0 -> 0.2.0
  • c18a7e2 Cargo: update to rustls 0.22, associated updates
  • b51d933 ci: add FreeBSD cargo test job
  • 52b8b61 proj: relax cfg gates to allow FreeBSD
  • abb3710 Fix README extra roots documentation on other OSes
  • 5df10ea Fix incorrect platform-specific Verifier documentation
  • a586af9 Update release documentation and scripts to record flushed-out steps
  • 09be880 docs: clarify Linux certificate store
  • 0da4cd6 docs: fix broken ServerCertVerifier link
  • dc8de0a verification_real_world: update 1password test data comments
  • Additional commits viewable in compare view

Updates smallvec from 1.16.1 to 1.16.2

Release notes

Sourced from smallvec's releases.

v1.16.2

What's Changed

New Contributors

Full Changelog: servo/rust-smallvec@v1.16.1...v1.16.2

Commits
  • ccf5fc7 chore: bump version (#617)
  • af207cc Merge pull request #608 from Rayan-and-beyond/fix/manual-readme-warning-606
  • cda4b73 Merge pull request #594 from astral-sh/charlie/codex-fix-may-dangle
  • d0556cb Merge pull request #596 from astral-sh/charlie/codex-v1-compact
  • f73914c Flatten retain tests into the unit test module
  • 954d599 Move retain tests into the unit test module
  • 8d93633 Remove added retain benchmark harness
  • 88c6bfa Limit compaction optimization to retain
  • b9ef17d Fix element ownership tracking with may_dangle
  • 42029c2 Compact retained elements directly in retain and dedup_by
  • See full diff in compare view

Updates thiserror-impl from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror-impl's releases.

2.0.21

  • Fix parsing of generic unit variants in display expressions (#459)
Commits
  • b1827ee Release 2.0.21
  • 58037b5 Merge pull request #459 from dtolnay/turbofish
  • f82a0cf Keep track of nested turbofish depth
  • 72ea492 Raise required compiler to Rust 1.77
  • 72eea0d Resolve io_other_error clippy lint in tests
  • 07f09a2 Raise required compiler to Rust 1.74
  • 2715388 Update ui test suite to nightly-2026-09-22
  • 5a306c7 Update ui test suite to nightly-2026-09-05
  • ef9383b Update ui test suite to nightly-2026-08-22
  • 8336b84 Update ui tests for version 2.0.20
  • See full diff in compare view

Updates zerocopy from 0.8.57 to 0.8.58

Release notesDescription has been truncated

@dependabot
feat(deps): bump the minor group with 14 updates
75bb0cb 
Bumps the minor group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.4.0` | `3.4.1` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.4.7` | `1.5.0` |
| [find-msvc-tools](https://github.com/rust-lang/cc-rs) | `0.1.13` | `0.1.14` |
| [hyper-rustls](https://github.com/rustls/hyper-rustls) | `0.27.9` | `0.27.10` |
| [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.20` | `0.1.21` |
| [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` |
| [rmcp-macros](https://github.com/modelcontextprotocol/rust-sdk) | `3.4.0` | `3.5.0` |
| [rustls-platform-verifier](https://github.com/rustls/rustls-platform-verifier) | `0.7.0` | `0.7.1` |
| [rustls-platform-verifier-android](https://github.com/rustls/rustls-platform-verifier) | `0.1.1` | `0.2.0` |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.16.1` | `1.16.2` |
| [thiserror-impl](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.57` | `0.8.58` |
| [zerocopy-derive](https://github.com/google/zerocopy) | `0.8.57` | `0.8.59` |


Updates `thiserror` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.20...2.0.21)

Updates `rmcp` from 3.4.0 to 3.4.1
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.4.0...rmcp-v3.4.1)

Updates `cc` from 1.4.7 to 1.5.0
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.4.7...cc-v1.5.0)

Updates `find-msvc-tools` from 0.1.13 to 0.1.14
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@find-msvc-tools-v0.1.13...find-msvc-tools-v0.1.14)

Updates `hyper-rustls` from 0.27.9 to 0.27.10
- [Release notes](https://github.com/rustls/hyper-rustls/releases)
- [Commits](rustls/hyper-rustls@v/0.27.9...v/0.27.10)

Updates `hyper-util` from 0.1.20 to 0.1.21
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper-util@v0.1.20...v0.1.21)

Updates `rand` from 0.10.2 to 0.10.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.2...0.10.3)

Updates `rmcp-macros` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-macros-v3.4.0...rmcp-macros-v3.5.0)

Updates `rustls-platform-verifier` from 0.7.0 to 0.7.1
- [Release notes](https://github.com/rustls/rustls-platform-verifier/releases)
- [Changelog](https://github.com/rustls/rustls-platform-verifier/blob/main/CHANGELOG)
- [Commits](rustls/rustls-platform-verifier@v/0.7.0...v/0.7.1)

Updates `rustls-platform-verifier-android` from 0.1.1 to 0.2.0
- [Release notes](https://github.com/rustls/rustls-platform-verifier/releases)
- [Changelog](https://github.com/rustls/rustls-platform-verifier/blob/main/CHANGELOG)
- [Commits](rustls/rustls-platform-verifier@v/0.1.1...v/0.2.0)

Updates `smallvec` from 1.16.1 to 1.16.2
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](servo/rust-smallvec@v1.16.1...v1.16.2)

Updates `thiserror-impl` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.20...2.0.21)

Updates `zerocopy` from 0.8.57 to 0.8.58
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.57...v0.8.58)

Updates `zerocopy-derive` from 0.8.57 to 0.8.59
- [Release notes](https://github.com/google/zerocopy/releases)
- [Commits](google/zerocopy@v0.8.57...v0.8.59)

---
updated-dependencies:
- dependency-name: thiserror
  dependency-version: 2.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: rmcp
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: cc
  dependency-version: 1.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: find-msvc-tools
  dependency-version: 0.1.14
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: hyper-rustls
  dependency-version: 0.27.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: hyper-util
  dependency-version: 0.1.21
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: rand
  dependency-version: 0.10.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: rmcp-macros
  dependency-version: 3.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: rustls-platform-verifier
  dependency-version: 0.7.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: rustls-platform-verifier-android
  dependency-version: 0.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: smallvec
  dependency-version: 1.16.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: thiserror-impl
  dependency-version: 2.0.21
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: zerocopy
  dependency-version: 0.8.58
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: zerocopy-derive
  dependency-version: 0.8.59
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 28, 2026
@benbrandt
test(conductor): normalize rmcp version in MCP trace snapshot
3176e62 
rmcp 3.5.0 moved `ProtocolVersion::LATEST` to 2026-07-28, so the rmcp
client in the trace now requests that revision in `initialize` and the
server negotiates down to 2025-11-25 (the newest version that still has
an `initialize` handshake). Update the snapshot to capture that.

The snapshot also embedded the crate version rmcp reports for itself in
`clientInfo`/`serverInfo`, which forced a manual snapshot edit on every
rmcp release. Normalize it to "<rmcp version>" alongside the existing
ID and endpoint normalization.
@benbrandt
benbrandt merged commit b55cdc7 into main Sep 28, 2026
14 checks passed
@benbrandt
benbrandt deleted the dependabot/cargo/minor-c9ad67bc87 branch September 28, 2026 13:53
@acp-release-bot acp-release-bot Bot mentioned this pull request Sep 28, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@benbrandt