chore(deps): update rust-minor-patch by bug-ops · Pull Request #6809 · bug-ops/zeph

bug-ops · 2026-10-02T17:56:22Z

This PR contains the following updates:

Package	Type	Update	Change
agent-client-protocol	workspace.dependencies	minor	`2.0.0` → `2.2.0`
agent-client-protocol-schema	workspace.dependencies	minor	`=1.5.0` → `=1.10.2`
lru	workspace.dependencies	patch	`0.18.4` → `0.18.5`
rand (source)	workspace.dependencies	patch	`0.10.2` → `0.10.3`
reqwest012	dependencies	minor	`0.12` → `0.13.5`
rmcp	workspace.dependencies	patch	`3.4.0` → `3.5.0`
rubato	workspace.dependencies	patch	`5.0.0` → `5.0.1`
scrape-core	workspace.dependencies	patch	`0.2.12` → `0.2.13`
testcontainers	workspace.dependencies	minor	`0.27.3` → `0.28.0`
thiserror	workspace.dependencies	patch	`2.0.20` → `2.0.21`
tiktoken-rs	workspace.dependencies	patch	`0.12.0` → `0.12.1`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

agentclientprotocol/rust-sdk (agent-client-protocol)

`v2.2.0`: agent-client-protocol-v2.2.0

Compare Source

Added

(acp) update schema dependency to 1.9.0 (#366)
(acp) update schema to 1.8 (#360)

Fixed

(acp) preserve stderr when shutdown drain times out (#365)
(acp) support JavaScript-hosted WebAssembly (#308)

Other

(cookbook) demonstrate v2 session coordination (#364)
(acp) exercise v2 example projection semantics (#363)
(cookbook) demonstrate ordered application dispatch (#362)
(deps) bump actions-rust-lang/setup-rust-toolchain from 1.17.0 to 2.0.0 (#356)

Added

Update agent-client-protocol-schema to 1.8.0, stabilizing optional
programmatic tool-call names in v1 and draft v2. Remove the
unstable_tool_call_name feature; v2 still requires unstable_protocol_v2.

Fixed

Preserve already-captured stderr in nonzero process-exit errors when the
bounded shutdown wait expires before stderr EOF. The capture limit and
process-group cleanup behavior are unchanged.
Support JavaScript-hosted wasm32-unknown-unknown builds through the opt-in
wasm_js feature, which selects Web Crypto through wasm-bindgen as the UUID
randomness backend. WASI builds continue to work without an additional
feature. (#308)

`v2.1.0`: agent-client-protocol-v2.1.0

Compare Source

Added

(acp) add stable session restore builders (#347)
(acp) update schema to 1.7 (#331)
(unstable-v2) Add runnable v2 quickstart examples (#330)
(unstable-v2) add v2 resume session builder (#329)
(acp) add proxy protocol router for v2 (#324)
(acp) Add v2 proxy MCP attachment (#314)
(acp) Add v2 session MCP attachment (#303)
(conductor) add v2 proxy initialization (#302)
(acp) expose unstable LLM provider methods (#298)
(unstable-v2) Better v2 session builders (#295)
(acp) expose unstable plan operations (#297)
(acp) expose unstable tool-call names (#296)

Fixed

(acp) Preserve session config options (#332)
(acp) box handler chain links to bound dispatch stack use (#306)
(acp) Allow v2 initialize with future params (#304)
(acp) preserve same-version initialize fields (#299)
(acp) Support WASI builds (#294)

Added

Add stable-v1 load_session* and resume_session* builders that produce a
RestoredSession containing an ActiveSession and the exact operation
response. Session routing is active before either restore request is
published, preserving required session/load replay, and provisional routing
is removed after failed restores or dropped in-flight blocking starts.
(#323)
(unstable-v2) Add runnable draft-v2 agent and one-shot client examples. The
agent implements the complete baseline session lifecycle; the client handles
permissions, projects chunk and snapshot updates by message ID, and waits for
the matching idle state. Add a compiled cookbook recipe and mdbook quickstart
for the same lifecycle.
(unstable-v2) Add Proxy::protocol_router and ProxyProtocolRouter to
compose strict v1 and v2 proxy implementations behind one connection.
Routing requires the exact version selected by the conductor and preserves
the complete initial transport frame.
(unstable) Expose programmatic tool-call names through the
unstable_tool_call_name feature.
(unstable) Expose v1 and draft-v2 plan operations through the
unstable_plan_operations feature.
(unstable-v2) Add high-level protocol v2 session builders and handles with
independent prompt-acceptance requests, create, resume, and feature-gated
fork setup responses, cloneable command handles, configuration, close, and
session-wide cancellation. Client.v2() and Agent.v2() callbacks receive
a V2ConnectionTo whose unversioned build_session*, resume_session*, and
feature-gated fork_session* methods expose only the v2 lifecycle. Resume
and fork return V2ResumeSessionBuilder and V2ForkSessionBuilder, so their
requests are not published until start_session or
on_proxy_session_start is called. Session updates and interactive requests
remain on typed connection handlers. With unstable_mcp_over_acp, all
available session builders support native per-session MCP attachment while
preserving independent response consumption. MCP routes are installed and
runners begin executing before the setup request is published; successful
attachments remain active for the connection lifetime while setup failures,
including cancellation error responses, clean up pending state. The
builders' on_proxy_session_start helpers forward the complete setup
response and cancellation, install routing before later inbound traffic, and
then spawn user work with the OpenedV2Session. New and fork builders use
the response session ID for the installed route and returned command handle;
resume routing is ready before request publication so replay can precede the
response as required by the protocol.
(unstable-v2) Add Proxy::v2() as the draft-v2-only proxy builder while
keeping Proxy::builder() on stable v1. With unstable_mcp_over_acp,
Proxy.v2().with_mcp_server(...) injects a connection-scoped MCP server
declaration into v2 new, resume, and feature-gated fork setup requests while
preserving unrelated fields. Version-neutral routing infrastructure can
continue to use Builder::without_acp_version_guard when it owns raw
version selection and validation.
(unstable-v2) Expose protocol-neutral dynamic handler registration on
V2ConnectionTo.
(unstable-v2) Add ConnectionTo::spawn_connection_with_context for raw
parents that need the context selected by a child builder.
V2ConnectionTo::spawn_connection also returns that natural typed context.
The existing ConnectionTo::spawn_connection::<Role> API remains
source-compatible and returns a raw ConnectionTo, including when the v2
child builder's callbacks receive V2ConnectionTo.
(unstable-v2) Add a version-correct
schema::v2::InitializeProxyRequest for _proxy/initialize. Proxy
forwarding now preserves same-version raw initialize fields and raw session
creation fields instead of interpreting v2 messages as permissive v1
payloads. Add the low-level
Builder::without_acp_version_guard escape hatch for routing infrastructure
that performs its own raw version selection, plus
Builder::with_v2_protocol_guard for raw-context links after v2 is selected.
(unstable) Add typed v1 and draft-v2 JSON-RPC routing for configurable LLM
provider methods behind unstable_llm_providers.

Fixed

Preserve stable v1 NewSessionResponse::config_options on ActiveSession,
expose them through ActiveSession::config_options, and include them in
reconstructed and proxied session responses.
(#301)
(unstable-v2) Require native v2 client and agent connections to complete
their single initialization handshake before sending or accepting other
protocol traffic. Reject initialization in the wrong direction and reject
reinitialization after a successful handshake while allowing retries after an
initialization error. Protocol-level request cancellation remains available
while initialization is in progress.
(unstable-v2) Preserve unknown initialize fields when the protocol router
hands a same-version connection to its selected implementation.
(unstable-v2) Do not retain unhandled v2 session messages for a dynamic v1
session route that will never be installed.
Register framework-owned ordered response handling before outbound requests
become visible to the peer, preventing fast responses from overtaking session
routing or proxy forwarding.
Allow the portable protocol engine and transport abstractions to build for
the wasm32-wasip1 and wasm32-wasip2 targets. The native process-backed
AcpAgent, thread-backed Stdio, and associated LineDirection type are not
exposed on these targets. This crate does not provide a WASI runtime adapter;
embedders can supply transport through Channel, Lines, or
futures::io-compatible ByteStreams.
(#262)

agentclientprotocol/agent-client-protocol (agent-client-protocol-schema)

`v1.10.2`

Compare Source

Fixed

(rust) remove skipped-entry deserialization logging (#2273)

Fixed

(rust) silently skip malformed list entries without logging Serde errors or private payload values. The tracing feature remains available as a backwards-compatible no-op.

`v1.10.1`

Compare Source

Fixed

(unstable) allow MCP response extensions (#2265)

`v1.10.0`

Compare Source

Added

(unstable-v2) return available commands in session responses (#2259)
(unstable) Initial RFD and schema for subagents (#1992)
(unstable) make MCP-over-ACP request-scoped (#2223)

`v1.9.1`

Compare Source

Fixed

(rust) accept null for defaultable payloads (#2178)

`v1.9.0`

Compare Source

Added

(unstable-v2) return message ID on prompt insertion (#2175)
(unstable) add v1 session notice capability (#2171)

Other

(unstable-v2) cover stateful tool and terminal patches (#2174)

`v1.8.0`

Compare Source

Added

(schema) stabilize tool call name (#2166)
(unstable) add session notices schema (#2004)

Other

(deps) bump actions-rust-lang/setup-rust-toolchain from 1.17.0 to 2.0.0 (#2156)

`v1.7.0`

Compare Source

Added

(unstable) add session compaction updates (#2002)
(schema) stabilize terminal authentication (#2000)
(rust) make schemars optional (#1939)
(schema) stabilize elicitation (#1779)

Other

(unstable-v2) remove conversion helpers (#1809)
(rfd) Move terminal auth to preview (#1796)

`v1.6.0`

Compare Source

Added

(unstable) add tool call name (#1752)
(unstable-v2) add cancelled variant to tool call and plan item (#1750)

seanmonstar/reqwest (reqwest012)

`v0.13.5`

Compare Source

Add Error::is_dns() to identify errors caused by DNS resolution failures.
Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
Add TLS version to TlsInfo extension.
Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

`v0.13.4`

Compare Source

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
Add ClientBuilder::http2_keep_alive_* options for the blocking client.
Add TLS 1.3 support when using native-tls backend.
Fix redirect handling to strip sensitive headers when the scheme changes.
Fix HTTP/3 happy-eyeball connection creation.
Upgrade hickory-resolver to 0.26.

`v0.13.3`

Compare Source

Fix CertificateRevocationList parsing of PEM values.
Fix logging in resolver to only show host, not full URL.
Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
Fix HTTP/3 to handle STOP_SENDING as not an error.
Fix HTTP/3 pool to remove timed out QUIC connections.
Fix HTTP/3 connection establishment picking IPv4 and IPv6.
Upgrade rustls-platform-verifier.
(wasm) Only use wasm-bindgen on unknown-* targets.

`v0.13.2`

Compare Source

Fix HTTP/2 and native-tls ALPN feature combinations.
Fix HTTP/3 to send h3 ALPN.
(wasm) fix RequestBuilder::json() from override previously set content-type.

`v0.13.1`

Compare Source

Fixes compiling with rustls on Android targets.

`v0.13.0`

Compare Source

Breaking changes:
- rustls is now the default TLS backend, instead of native-tls.
- rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
- rustls-tls has been renamed to rustls.
- rustls roots features removed, rustls-platform-verifier is used by default.
  - To use different roots, call tls_certs_only(your_roots).
- native-tls now includes ALPN. To disable, use native-tls-no-alpn.
- query and form are now crate features, disabled by default.
- Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
- For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
Fix sending Proxy-Authorization if only username is configured.
Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
Refactor internal decompression handling to use tower-http.

v0.12.24

Refactor cookie handling to an internal middleware.
Refactor internal random generator.
Refactor base64 encoding to reduce a copy.
Documentation updates.

v0.12.23

Add ClientBuilder::unix_socket(path) option that will force all requests over that Unix Domain Socket.
Add ClientBuilder::retry(policy) and reqwest::retry::Builder to configure automatic retries.
Add ClientBuilder::dns_resolver2() with more ergonomic argument bounds, allowing more resolver implementations.
Add http3_* options to blocking::ClientBuilder.
Fix default TCP timeout values to enabled and faster.
Fix SOCKS proxies to default to port 1080
(wasm) Add cache methods to RequestBuilder.

v0.12.22

Fix socks proxies when resolving IPv6 destinations.

v0.12.21

Fix socks proxy to use socks4a:// instead of socks4h://.
Fix Error::is_timeout() to check for hyper and IO timeouts too.
Fix request Error to again include URLs when possible.
Fix socks connect error to include more context.
(wasm) implement Default for Body.

v0.12.20

Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
Fix proxy headers only using the first matched proxy.
(wasm) Fix re-adding Error::is_status().

v0.12.19

Fix redirect that changes the method to GET should remove payload headers.
Fix redirect to only check the next scheme if the policy action is to follow.
(wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

Fix compilation when socks enabled without TLS.

v0.12.17

Fix compilation on macOS.

v0.12.16

Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
Add Proxy::headers() to add extra headers that should be sent to a proxy.
Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
Fix HTTP/3 to support streaming request bodies.
(wasm) Fix null bodies when calling Response::bytes_stream().

v0.12.15

Fix Windows to support both ProxyOverride and NO_PROXY.
Fix http3 to support streaming response bodies.
Fix http3 dependency from public API misuse.

v0.12.14

Fix missing fetch_mode_no_cors(), marking as deprecated when not on WASM.

v0.12.13

Add Form::into_reader() for blocking multipart forms.
Add Form::into_stream() for async multipart forms.
Add support for SOCKS4a proxies.
Fix decoding responses with multiple zstd frames.
Fix RequestBuilder::form() from overwriting a previously set Content-Type header, like the other builder methods.
Fix cloning of request timeout in blocking::Request.
Fix http3 synchronization of connection creation, reducing unneccesary extra connections.
Fix Windows system proxy to use ProxyOverride as a NO_PROXY value.
Fix blocking read to correctly reserve and zero read buffer.
(wasm) Add support for request timeouts.
(wasm) Fix Error::is_timeout() to return true when from a request timeout.

v0.12.12

(wasm) Fix compilation by not compiler tokio/time on WASM.

v0.12.11

Fix decompression returning an error when HTTP/2 ends with an empty data frame.

v0.12.10

Add ClientBuilder::connector_layer() to allow customizing the connector stack.
Add ClientBuilder::http2_max_header_list_size() option.
Fix propagating body size hint (content-length) information when wrapping bodies.
Fix decompression of chunked bodies so the connections can be reused more often.

v0.12.9

Add tls::CertificateRevocationLists support.
Add crate features to enable webpki roots without selecting a rustls provider.
Fix connection_verbose() to output read logs.
Fix multipart::Part::file() to automatically include content-length.
Fix proxy to internally no longer cache system proxy settings.

v0.12.8

Add support for SOCKS4 proxies.
Add multipart::Form::file() method for adding files easily.
Add Body::wrap() to wrap any http_body::Body type.
Fix the pool configuration to use a timer to remove expired connections.

v0.12.7

Revert adding impl Service<http::Request<_>> for Client.

v0.12.6

Add support for danger_accept_invalid_hostnames for rustls.
Add impl Service<http::Request<Body>> for Client and &'_ Client.
Add support for !Sync bodies in Body::wrap_stream().
Enable happy eyeballs when hickory-dns is used.
Fix Proxy so that HTTP(S)_PROXY values take precedence over ALL_PROXY.
Fix blocking::RequestBuilder::header() from unsetting sensitive on passed header values.

v0.12.5

Add blocking::ClientBuilder::dns_resolver() method to change DNS resolver in blocking client.
Add http3 feature back, still requiring reqwest_unstable.
Add rustls-tls-no-provider Cargo feature to use rustls without a crypto provider.
Fix Accept-Encoding header combinations.
Fix http3 resolving IPv6 addresses.
Internal: upgrade to rustls 0.23.

v0.12.4

Add zstd support, enabled with zstd Cargo feature.
Add ClientBuilder::read_timeout(Duration), which applies the duration for each read operation. The timeout resets after a successful read.

v0.12.3

Add FromStr for dns::Name.
Add ClientBuilder::built_in_webpki_certs(bool) to enable them separately.
Add ClientBuilder::built_in_native_certs(bool) to enable them separately.
Fix sending content-length: 0 for GET requests.
Fix response body content_length() to return value when timeout is configured.
Fix ClientBuilder::resolve() to use lowercase domain names.

v0.12.2

Fix missing ALPN when connecting to socks5 proxy with rustls.
Fix TLS version limits with rustls.
Fix not detected ALPN h2 from server with native-tls.

v0.12.1

Fix ClientBuilder::interface() when no TLS is enabled.
Fix TlsInfo::peer_certificate() being truncated with rustls.
Fix panic if http2 feature disabled but TLS negotiated h2 in ALPN.
Fix Display for Error to not include its source error.

testcontainers/testcontainers-rs (testcontainers)

`v0.28.0`

Compare Source

Details

Miscellaneous Tasks

Update astral-tokio-tar from 0.6.0 to 0.6.1 (#940)
Update parse-display requirement from 0.9.0 to 0.11.0 (#942)
Bump testcontainers/sshd image from 1.3.0 to 1.4.0 (#952)
Update russh requirement from 0.60.0 to 0.61.2 (#950)
[❗] Update bollard 0.20 to 0.21 (#943)
Update docker-compose-types requirement from 0.23 to 0.24 (#951)

Configuration

📅 Schedule: (in timezone UTC)

Branch creation
- "before 6am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

bug-ops · 2026-10-02T17:56:31Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `agent-client-protocol`.
    ... required by package `zeph-acp v0.22.5 (/tmp/renovate/repos/github/bug-ops/zeph/crates/zeph-acp)`
versions that meet the requirements `^2.2.0` are: 2.2.0

package `zeph-acp` depends on `agent-client-protocol` with feature `unstable_auth_methods` but `agent-client-protocol` does not have that feature.
help: available features: default, unstable, unstable_end_turn_token_usage, unstable_llm_providers, unstable_mcp_over_acp, unstable_plan_operations, unstable_protocol_v2, unstable_session_compaction, unstable_session_fork, unstable_session_notices, wasm_js


failed to select a version for `agent-client-protocol` which could resolve this conflict

File name: Cargo.lock

    Updating crates.io index
error: failed to select a version for `agent-client-protocol`.
    ... required by package `zeph-acp v0.22.5 (/tmp/renovate/repos/github/bug-ops/zeph/crates/zeph-acp)`
versions that meet the requirements `^2.2.0` are: 2.2.0

package `zeph-acp` depends on `agent-client-protocol` with feature `unstable_auth_methods` but `agent-client-protocol` does not have that feature.
help: available features: default, unstable, unstable_end_turn_token_usage, unstable_llm_providers, unstable_mcp_over_acp, unstable_plan_operations, unstable_protocol_v2, unstable_session_compaction, unstable_session_fork, unstable_session_notices, wasm_js


failed to select a version for `agent-client-protocol` which could resolve this conflict

…2 bumps agent-client-protocol 2.2.0 drops the unstable_auth_methods and unstable_elicitation features zeph-acp depends on, testcontainers 0.28 is incompatible with testcontainers-modules 0.15, and reqwest012 must stay on 0.12 to match ollama-rs.

bug-ops added the dependencies Dependency updates label Oct 2, 2026

bug-ops enabled auto-merge (squash) October 2, 2026 17:56

github-actions Bot added chore Maintenance tasks size/S Small PR (11-50 lines) llm zeph-llm crate (Ollama, Claude) rust Rust code changes labels Oct 2, 2026

bug-ops force-pushed the renovate/rust-minor-patch branch from 4fe719a to 828120f Compare October 5, 2026 06:53

chore(deps): update rust-minor-patch

96de60c

bug-ops force-pushed the renovate/rust-minor-patch branch from 828120f to 96de60c Compare October 6, 2026 15:02

github-actions Bot removed the llm zeph-llm crate (Ollama, Claude) label Oct 6, 2026

bug-ops merged commit 666a041 into main Oct 6, 2026
54 checks passed

bug-ops deleted the renovate/rust-minor-patch branch October 6, 2026 15:22

Navigation Menu

Repository navigation

chore(deps): update rust-minor-patch - #6809

chore(deps): update rust-minor-patch#6809
bug-ops merged 2 commits into
mainfrom
renovate/rust-minor-patch

bug-ops commented Oct 2, 2026 •

edited

Loading

Uh oh!

bug-ops commented Oct 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

bug-ops commented Oct 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.2.0: agent-client-protocol-v2.2.0

Added

Fixed

Other

Added

Fixed

v2.1.0: agent-client-protocol-v2.1.0

Added

Fixed

Added

Fixed

Fixed

Fixed

Fixed

Added

Fixed

Added

Other

Added

Other

Added

Other

Added

v0.12.28

v0.12.27

v0.12.26

v0.12.25

v0.12.24

v0.12.23

v0.12.22

v0.12.21

v0.12.20

v0.12.19

v0.12.18

v0.12.17

v0.12.16

v0.12.15

v0.12.14

v0.12.13

v0.12.12

v0.12.11

v0.12.10

v0.12.9

v0.12.8

v0.12.7

v0.12.6

v0.12.5

v0.12.4

v0.12.3

v0.12.2

v0.12.1

Details

Miscellaneous Tasks

Configuration

Uh oh!

bug-ops commented Oct 2, 2026

⚠️ Artifact update problem

File name: Cargo.lock

File name: Cargo.lock

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

bug-ops commented Oct 2, 2026 •

edited

Loading

`v2.2.0`: agent-client-protocol-v2.2.0

`v2.1.0`: agent-client-protocol-v2.1.0