Skip to content

Comments

Bump the cargo group across 2 directories with 2 updates#36

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/frameworks/Rust/actix/cargo-0c705c174f
Open

Bump the cargo group across 2 directories with 2 updates#36
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/frameworks/Rust/actix/cargo-0c705c174f

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 2, 2025

Bumps the cargo group with 1 update in the /frameworks/Rust/actix directory: mongodb.
Bumps the cargo group with 1 update in the /frameworks/Rust/pavex directory: tokio.

Updates mongodb from 2.6.0 to 2.8.2

Release notes

Sourced from mongodb's releases.

v2.8.2

The MongoDB Rust driver team is pleased to announce the v2.8.2 release of the mongodb crate, now available for download from crates.io.

This release fixes a potential issue when serializing messages.

Full Release Notes

Improvements

  • RUST-1553 Add support for document sequences (OP_MSG payload type 1) (#1009)

Bugfixes

  • RUST-1881 Check integer conversions (#1045)

v2.8.1

The MongoDB Rust driver team is pleased to announce the v2.8.1 release of the mongodb crate, now available for download from crates.io.

This release fixes two bugs:

  • on-demand KMS credentials wouldn't work with automatic encryption, and
  • initial connection responses from the server could fail to parse under certain circumstances.

Full Release Notes

Bugfixes

  • RUST-1883 Set use_need_kms_credentials_state unconditionally when creating a new ClientState (#1018)
  • RUST-1841 Allow double-valued connectionIds (#1025)

v2.8.0

The MongoDB Rust driver team is pleased to announce the v2.8.0 release of the mongodb crate, now available for download from crates.io.

Highlighted Changes

Search Index Management Helpers

The Collection type now has the create_search_index, create_search_indexes, update_search_index, drop_search_index, and list_search_indexes methods, allowing comprehensive management of search indexes from client code.

Reliability Improvements

More error types will be automatically retried, and retries will avoid mongos backends with network connectivity issues. Also note that the documentation for with_transaction has been updated to clarify error handling requirements to avoid a deadlock.

Included Changes

Below are a selected list of changes with user impact; for a full list of changes see this GitHub query.

New Features

  • RUST-1703 Add docker and kubernetes metrics (#940)
  • RUST-1701 Log when CosmosDB or DocumentDB are detected (#958)
  • RUST-1707 Add durations to connection pool events (#976)
  • RUST-933 Add support for the srvMaxHosts option (#977)
  • RUST-1667 Add search index management helpers (#989)

... (truncated)

Commits
  • f424aed release v2.8.2 (#1050)
  • 8eac3bc RUST-1881 (#1047)
  • 1f3ab87 release v2.8.1
  • ce26e04 RUST-1841 Allow double-valued connectionIds (#1025)
  • a264462 RUST-1883 Set use_need_kms_credentials_state unconditionally when creating a ...
  • 5bc56ca release v2.8.0 (#999)
  • bda4509 RUST-1788 Update docs for with_transaction to avoid infinite loop (#998)
  • e87f4dd RUST-1785 Make ExceededTimeLimit a read-retryable error (#997)
  • 8b22217 RUST-1786 Make ReadConcernMajorityNotAvailableYet a retryable read error (#996)
  • a2e277e RUST-1806 Fix in use encryption tests (#995)
  • Additional commits viewable in compare view

Updates tokio from 1.27.0 to 1.29.1

Release notes

Sourced from tokio's releases.

Tokio v1.29.1

Fixed

  • rt: fix nesting two block_in_place with a block_on between (#5837)

#5837: tokio-rs/tokio#5837

Tokio v1.29.0

Technically a breaking change, the Send implementation is removed from runtime::EnterGuard. This change fixes a bug and should not impact most users.

Breaking

  • rt: EnterGuard should not be Send (#5766)

Fixed

  • fs: reduce blocking ops in fs::read_dir (#5653)
  • rt: fix possible starvation (#5686, #5712)
  • rt: fix stacked borrows issue in JoinSet (#5693)
  • rt: panic if EnterGuard dropped incorrect order (#5772)
  • time: do not overflow to signal value (#5710)
  • fs: wait for in-flight ops before cloning File (#5803)

Changed

  • rt: reduce time to poll tasks scheduled from outside the runtime (#5705, #5720)

Added

  • net: add uds doc alias for unix sockets (#5659)
  • rt: add metric for number of tasks (#5628)
  • sync: implement more traits for channel errors (#5666)
  • net: add nodelay methods on TcpSocket (#5672)
  • sync: add broadcast::Receiver::blocking_recv (#5690)
  • process: add raw_arg method to Command (#5704)
  • io: support PRIORITY epoll events (#5566)
  • task: add JoinSet::poll_join_next (#5721)
  • net: add support for Redox OS (#5790)

Unstable

  • rt: add the ability to dump task backtraces (#5608, #5676, #5708, #5717)
  • rt: instrument task poll times with a histogram (#5685)

#5766: tokio-rs/tokio#5766 #5653: tokio-rs/tokio#5653 #5686: tokio-rs/tokio#5686 #5712: tokio-rs/tokio#5712

... (truncated)

Commits
  • 1b1b9dc chore: prepare Tokio v1.29.1 release
  • 012c848 rt: fix nesting block_in_place with block_on (#5837)
  • 48c5576 chore: prepare Tokio v1.29.0 release (#5826)
  • 657fd88 task: add guarantee about when a spawned task may be polled (#5816)
  • 6b076a2 fs: wait for in-flight ops before cloning File (#5803)
  • 910a1e2 io: fix futures_io::AsyncSeek implementaion for Compat (#5783)
  • 6d25a00 fs: update cfg attr in fs::read_dir (#5806)
  • 78bf8a9 sync: replace Poll::Ready with Ready (#5815)
  • b8af5aa task: add spawn_blocking methods to JoinMap (#5797)
  • 2e62374 rt: pad the task struct to avoid false sharing (#5809)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the cargo group with 1 update in the /frameworks/Rust/actix directory: [mongodb](https://github.com/mongodb/mongo-rust-driver).
Bumps the cargo group with 1 update in the /frameworks/Rust/pavex directory: [tokio](https://github.com/tokio-rs/tokio).


Updates `mongodb` from 2.6.0 to 2.8.2
- [Release notes](https://github.com/mongodb/mongo-rust-driver/releases)
- [Commits](mongodb/mongo-rust-driver@v2.6.0...v2.8.2)

Updates `tokio` from 1.27.0 to 1.29.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.27.0...tokio-1.29.1)

---
updated-dependencies:
- dependency-name: mongodb
  dependency-version: 2.8.2
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.29.1
  dependency-type: direct:production
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 2, 2025
@coderabbitai
Copy link

coderabbitai bot commented Oct 2, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants