Skip to content

build(deps): bump the prod-cargo-major-dependencies group across 1 directory with 21 updates#748

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/prod-cargo-major-dependencies-84467dad19
Open

build(deps): bump the prod-cargo-major-dependencies group across 1 directory with 21 updates#748
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/prod-cargo-major-dependencies-84467dad19

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 13, 2026

Bumps the prod-cargo-major-dependencies group with 20 updates in the / directory:

Package From To
async-openai 0.33.1 0.34.0
sentry 0.46.2 0.47.0
sqlparser 0.37.0 0.58.0
arrow 56.2.0 58.1.0
bcrypt 0.17.1 0.19.0
clickhouse 0.13.3 0.15.0
dashmap 5.5.3 6.1.0
hmac 0.12.1 0.13.0
indicatif 0.17.11 0.18.4
ndarray 0.16.1 0.17.2
opentelemetry 0.27.1 0.31.0
opentelemetry-otlp 0.27.0 0.31.1
opentelemetry_sdk 0.27.1 0.31.0
rand 0.8.5 0.9.2
rmcp 0.8.5 0.10.0
serde_arrow 0.13.7 0.14.0
sha2 0.10.9 0.11.0
statrs 0.17.1 0.18.0
tqdm 0.7.0 0.8.0
tracing-opentelemetry 0.28.0 0.32.1

Updates async-openai from 0.33.1 to 0.34.0

Release notes

Sourced from async-openai's releases.

v0.34.0

Breaking changes in upstream spec for certain types (details in PR), if you're not using any of those types upgrade should be no-op!

What's Changed

Full Changelog: 64bit/async-openai@async-openai-v0.33.1...async-openai-v0.34.0

Commits

Updates sentry from 0.46.2 to 0.47.0

Release notes

Sourced from sentry's releases.

0.47.0

Breaking Changes

  • Update reqwest from 0.12.25 to 0.13.1 (#998). This change is breaking for users who use the RequestHttpTransport::with_client method.
  • sentry_core::HubSwitchGuard is now !Send, preventing it from being moved across threads (#957).

New Features

  • Added a Envelope::into_items method, which returns an iterator over owned EnvelopeItems in the Envelope (#983).
  • Expose transport utilities (#949)

Fixes

  • Fixed thread corruption bug where HubSwitchGuard could be dropped on wrong thread (#957).
  • We now fork the Hub every time a span is entered. This prevents data from leaking across spans (#957).
Changelog

Sourced from sentry's changelog.

0.47.0

Breaking Changes

  • Update reqwest from 0.12.25 to 0.13.1 (#998). This change is breaking for users who use the RequestHttpTransport::with_client method.
  • sentry_core::HubSwitchGuard is now !Send, preventing it from being moved across threads (#957).

New Features

  • Added a Envelope::into_items method, which returns an iterator over owned EnvelopeItems in the Envelope (#983).
  • Expose transport utilities (#949)

Fixes

  • Fixed thread corruption bug where HubSwitchGuard could be dropped on wrong thread (#957).
  • We now fork the Hub every time a span is entered. This prevents data from leaking across spans (#957).
Commits
  • f638ca0 release: 0.47.0
  • 79ada42 build(cargo): Run cargo update (#1030)
  • e66f897 meta(changelog): Prepare for release (#1029)
  • d7a6da9 ref(protocol): Generic items serializer (#1021)
  • 1795e4a meta(zed): Add project settings for Zed editor (#1019)
  • fe351f6 ref(sentry-core): Refactor logs batching into generic Batcher (#1018)
  • 0600229 meta(ai): Remove trailing comma in .claude/settings.json (#1015)
  • b913085 fix!(core): Make HubSwitchGuard !Send to prevent thread corruption (#957)
  • a819520 build!: Update reqwest to v0.13.1 (#998)
  • 108c51d chore(repo): Add Claude Code settings with basic permissions (#959)
  • Additional commits viewable in compare view

Updates sqlparser from 0.37.0 to 0.58.0

Commits
  • 40bbcc9 Prepare 0.58.0 release: update version + Changelog (#1955)
  • 5f69df2 Add support for DROP USER statement (#1951)
  • 92db206 Snowflake: Improve accuracy of lookahead in implicit LIMIT alias (#1941)
  • 4d93386 Fix for Postgres regex and like binary operators (#1928)
  • 6506814 docs: Update rust badge (#1943)
  • ecd5d88 Add identifier start unicode support for Postegres, MySql and Redshift (#1944)
  • c5e6ba5 Add identifier unicode support in Mysql, Postgres and Redshift (#1933)
  • 9b9ffe4 MSSQL: Add support for EXEC output and default keywords (#1940)
  • 750a7aa Snowflake: support trailing options in CREATE TABLE (#1931)
  • bc2c4e2 Support optional semicolon between statements (#1937)
  • Additional commits viewable in compare view

Updates arrow from 56.2.0 to 58.1.0

Release notes

Sourced from arrow's releases.

arrow 58.1.0

Changelog

58.1.0 (2026-03-20)

Full Changelog

Implemented enhancements:

  • Reuse compression dict lz4_block #9566
  • [Variant] Add variant_to_arrow Struct type support #9529
  • [Variant] Add unshred_variant support for Binary and LargeBinary types #9526
  • [Variant] Add shred_variant support for LargeUtf8 and LargeBinary types #9525
  • [Variant] variant_get tests clean up #9517
  • parquet_variant: Support LargeUtf8 typed value in unshred_variant #9513
  • parquet-variant: Support string view typed value in unshred_variant #9512
  • Deprecate ArrowTimestampType::make_value in favor of from_naive_datetime #9490 [arrow]
  • Followup for support ['fieldName'] in VariantPath #9478
  • Speedup DELTA_BINARY_PACKED decoding when bitwidth is 0 #9476 [parquet]
  • Support CSV files encoded with charsets other than UTF-8 #9465 [arrow]
  • Expose Avro writer schema when building the reader #9460 [arrow]
  • Python: avoid importing pyarrow classes ever time #9438
  • Add append_nulls to MapBuilder #9431 [arrow]
  • Add append_non_nulls to StructBuilder #9429 [arrow]
  • Add append_value_n to GenericByteBuilder #9425 [arrow]
  • Optimize from_bitwise_binary_op #9378 [arrow]
  • Configurable Arrow representation of UTC timestamps for Avro reader #9279 [arrow]

Fixed bugs:

  • MutableArrayData::extend does not copy child values for ListView arrays #9561 [arrow]

... (truncated)

Changelog

Sourced from arrow's changelog.

58.1.0 (2026-03-20)

Full Changelog

Implemented enhancements:

  • Reuse compression dict lz4_block #9566
  • [Variant] Add variant_to_arrow Struct type support #9529
  • [Variant] Add unshred_variant support for Binary and LargeBinary types #9526
  • [Variant] Add shred_variant support for LargeUtf8 and LargeBinary types #9525
  • [Variant] variant_get tests clean up #9517
  • parquet_variant: Support LargeUtf8 typed value in unshred_variant #9513
  • parquet-variant: Support string view typed value in unshred_variant #9512
  • Deprecate ArrowTimestampType::make_value in favor of from_naive_datetime #9490 [arrow]
  • Followup for support ['fieldName'] in VariantPath #9478
  • Speedup DELTA_BINARY_PACKED decoding when bitwidth is 0 #9476 [parquet]
  • Support CSV files encoded with charsets other than UTF-8 #9465 [arrow]
  • Expose Avro writer schema when building the reader #9460 [arrow]
  • Python: avoid importing pyarrow classes ever time #9438
  • Add append_nulls to MapBuilder #9431 [arrow]
  • Add append_non_nulls to StructBuilder #9429 [arrow]
  • Add append_value_n to GenericByteBuilder #9425 [arrow]
  • Optimize from_bitwise_binary_op #9378 [arrow]
  • Configurable Arrow representation of UTC timestamps for Avro reader #9279 [arrow]

Fixed bugs:

  • MutableArrayData::extend does not copy child values for ListView arrays #9561 [arrow]
  • ListView interleave bug #9559 [arrow]
  • Flight encoding panics with "no dict id for field" with nested dict arrays #9555 [arrow] [arrow-flight]
  • "DeltaBitPackDecoder only supports Int32Type and Int64Type" but unsigned types are supported too #9551 [parquet]
  • Potential overflow when calling util::bit_mask::set_bits (soundness issue) #9543 [arrow]
  • handle Null type in try_merge for Struct, List, LargeList, and Union #9523 [arrow]
  • Invalid offset in sparse column chunk data for multiple predicates #9516 [parquet]
  • debug_assert_eq! in BatchCoalescer panics in debug mode when batch_size < 4 #9506 [arrow]
  • Parquet Statistics::null_count_opt wrongly returns Some(0) when stats are missing #9451 [parquet]
  • Error "Not all children array length are the same!" when decoding rows spanning across page boundaries in parquet file when using RowSelection #9370 [parquet]
  • Avro schema resolution not properly supported for complex types #9336 [arrow]

Documentation updates:

  • Update planned release schedule in README.md #9466 (alamb)

Performance improvements:

  • Introduce NullBuffer::try_from_unsliced to simplify array construction #9385 [parquet] [arrow]
  • perf: Coalesce page fetches when RowSelection selects all rows #9578 [parquet] (Dandandan)
  • Use chunks_exact for has_true/has_false to enable compiler unrolling #9570 [arrow] (adriangb)
  • pyarrow: Cache the imported classes to avoid importing them each time #9439 (Tpt)

... (truncated)

Commits
  • 6cadf3b Prepare for 58.1.0 Release (#9573)
  • 322f9ce [Variant] Add unshred_variant support for Binary and LargeBinary types (#9576)
  • bc74c71 feat(parquet): add content defined chunking for arrow writer (#9450)
  • 39dda22 Make Sbbf Constructers Public (#9569)
  • d53df60 feat: Optimize from_bitwise_binary_op with 64-bit alignment (#9441)
  • 44f5dfc perf: Coalesce page fetches when RowSelection selects all rows (#9578)
  • 14f1eb9 pyarrow: Cache the imported classes to avoid importing them each time (#9439)
  • 55a7768 [Variant] Add variant_to_arrow Struct type support (#9572)
  • 42ab0bc fix: Used checked_add for bounds checks to avoid UB (#9568)
  • 88422cb arrow-flight: generate dict_ids for dicts nested inside complex types (#9556)
  • Additional commits viewable in compare view

Updates bcrypt from 0.17.1 to 0.19.0

Commits

Updates clickhouse from 0.13.3 to 0.15.0

Changelog

Sourced from clickhouse's changelog.

[0.15.0] - 2026-04-03

Added

  • Deprecated ::*_option() methods in favor of ::*_setting() (#380)
  • Added support for zstd compression (#388)
  • Added support for tracing and OpenTelemetry trace propagation to ClickHouse (#390)
  • Exposed X-ClickHouse-Summary fields from server response (#397)
    • Added RowCursor::summary() and BytesCursor::summary() which is populated once the response from the server is received, containing potentially useful statistics about the query.

Changed

  • Dropped abandoned fxhash and linked-hash-map dev-dependencies (#403)

#380: ClickHouse/clickhouse-rs#380 #388: ClickHouse/clickhouse-rs#388 #390: ClickHouse/clickhouse-rs#390 #397: ClickHouse/clickhouse-rs#397 #403: ClickHouse/clickhouse-rs#403

[0.14.3] - 2026-03-27

Added

  • Added support for SimpleAggregateFunction type (#394)

Fixed

  • Fixed serialization of Option::None with Query::param() (#385)
  • Fixed handling of Json type with type hints (#387)
  • Fixed Insert for temporary tables and qualified table names (#391)
  • Updated lz4_flex to get fix for [RUSTSEC-2026-0041] (#396)

#385: ClickHouse/clickhouse-rs#385 #387: ClickHouse/clickhouse-rs#387 #391: ClickHouse/clickhouse-rs#391 #394: ClickHouse/clickhouse-rs#394 #396: ClickHouse/clickhouse-rs#396 [RUSTSEC-2026-0041]: https://rustsec.org/advisories/RUSTSEC-2026-0041

[0.14.2] - 2026-01-14

... (truncated)

Commits

Updates dashmap from 5.5.3 to 6.1.0

Release notes

Sourced from dashmap's releases.

v6.1.0

v6.0.1

This is a patch release, now the main release for v6 as v6.0.0 was yanked shortly after release.

Thanks to @​JesusGuzmanJr for notifying me about a critical bug that was introduced so that I could resolve it: #304.

PRs for this release: #305 + xacrimon/dashmap@d5c8be6

v6.0.0

This release contains performance optimizations, most notably 10-40% gains on Apple Silicon but also 5-10% gains when measured in Intel Sapphire Rapids. This work was accomplished in:

Minor QoL improvements were made in:

Special to the following contributors for making this release possible:

v6.0.0-rc.1

This release contains performance optimizations, most notably 10-40% gains on Apple Silicon but also 5-10% gains when measured in Intel Sapphire Rapids. This work was accomplished in:

Minor QoL improvements were made in:

Special to the following contributors for making this release possible:

Commits

Updates hmac from 0.12.1 to 0.13.0

Commits

Updates indicatif from 0.17.11 to 0.18.4

Release notes

Sourced from indicatif's releases.

0.18.4

What's Changed

0.18.3

What's Changed

0.18.2

What's Changed

0.18.1

What's Changed

0.18.0

Unfortunately 0.17.12 had to be yanked because the console upgrade was a semver-incompatible change. Rerelease as 0.18.0 instead.

What's Changed

0.17.12

What's Changed

Commits
  • 4de2f60 Bump version to 0.18.4
  • 8e0ab0e fix: respect NO_COLOR and TERM=dumb environment variables
  • 781b2d0 Take semver-compatible dependency updates
  • 34aee07 Introduce unicode-width feature
  • 51d284f Introduce wasmbind feature
  • ee057e5 Bump tokio from 1.48.0 to 1.49.0
  • 31bcea3 Bump portable-atomic from 1.11.1 to 1.12.0
  • dbd26eb Bump console from 0.16.1 to 0.16.2
  • 7ac4a0d Expose the current tab width
  • 95088ff iter: clean up variable names, casting
  • Additional commits viewable in compare view

Updates ndarray from 0.16.1 to 0.17.2

Changelog

Sourced from ndarray's changelog.

Version 0.17.2 (2026-01-10)

Version 0.17.2 is mainly a patch fix to bugs related to the new ArrayRef implementation.

In addition, ndarray has reduced its packaging footprint to ease supply chain reviews (and shrink the binary size!). A special thanks to @​SwishSwushPow and @​weiznich for bringing this to our attention and making the necessary changes.

Added

Fixed

Documentation

Version 0.17.1 (2025-11-02)

Version 0.17.1 provides a patch to fix the originally-unsound implementation of the new array reference types.

The reference types are now all unsized. Practically speaking, this has one major implication: writing functions and traits that accept RawRef and LayoutRef will now need a + ?Sized bound to work ergonomically with ArrayRef. For example, the release notes for 0.17.0 said

Reading / Writing Shape: LayoutRef<A, D>

LayoutRef lets functions view or modify shape/stride information without touching data. This replaces verbose signatures like:

fn alter_view<S>(a: &mut ArrayBase<S, Ix1>)
where S: Data<Elem = f64>;

Use AsRef / AsMut for best compatibility:

fn alter_shape<T>(a: &mut T)
where T: AsMut<LayoutRef<f64>>;

However, these functions now need an additional bound to allow for callers to pass in &ArrayRef types:

fn alter_shape<T>(a: &mut T)
where T: AsMut<LayoutRef<f64>> + ?Sized; // Added bound here

A huge thank you to Sarah Quiñones (@​sarah-quinones) for catching the original unsound bug and helping to fix it. She does truly excellent work with faer-rs; check it out!

Version 0.17.0 (2025-10-14) [YANKED]

... (truncated)

Commits

Updates opentelemetry from 0.27.1 to 0.31.0

Release notes

Sourced from opentelemetry's releases.

0.30.0 Release

See changelog for individual crates to know the exact set of changes. All crates in this repo follows same version (0.30.0 for this release).

This release also upgrades Metrics-SDK to stable!

See summary of release notes: https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md

0.29.0 Release

See changelog for individual crates to know the exact set of changes. All crates in this repo follows same version (0.29.0 for this release).

This release also upgrades

  • Logs-SDK to stable
  • Logs-Appender-Tracing to stable
  • Baggage to RC

And deprecates

  • Prometheus exporter is - now deprecated in favor of OTLP exporter.

0.28.0 Release

See changelog for individual crates to know the exact set of changes. All crates in this repo follows same version (0.28.0 for this release).

This release also upgrades

  • Logs API to stable
  • Logs-SDK, Logs OTLP exporter, Logs-Appender-Tracing to RC
  • Metrics-API to stable
  • Metrics-SDK, Metrics OTLP exporter to RC.

This release introduces several breaking changes as we progress toward a stable version for logs and metrics. We recommend reviewing the Migration Guide along with the changelogs to ensure a smooth upgrade.

Changelog

Sourced from opentelemetry's changelog.

Release Notes 0.30

OpenTelemetry Rust 0.30 introduces a few breaking changes to the opentelemetry_sdk crate in the metrics feature. These changes were essential to drive the Metrics SDK towards stability. With this release, the Metrics SDK is officially declared stable. The Metrics API was declared stable last year, and previously, the Logs API, SDK, and OTel-Appender-Tracing were also marked stable. Importantly, no breaking changes have been introduced to components already marked as stable.

It is worth noting that the opentelemetry-otlp crate remains in a Release-Candidate state and is not yet considered stable. With the API and SDK for Logs and Metrics now stable, the focus will shift towards further refining and stabilizing the OTLP Exporters in upcoming releases. Additionally, Distributed Tracing is expected to progress towards stability, addressing key interoperability challenges.

For detailed changelogs of individual crates, please refer to their respective changelog files. This document serves as a summary of the main changes.

Key Changes

Metrics SDK Improvements

  1. Stabilized "view" features: Previously under an experimental feature flag, views can now be used to modify the name, unit, description, and cardinality limit of a metric. Advanced view capabilities, such as changing aggregation or dropping attributes, remain under the experimental feature flag.

  2. Cardinality capping: Introduced the ability to cap cardinality and configure limits using views.

  3. Polished public API: Refined the public API to hide implementation details from exporters, enabling future internal optimizations and ensuring consistency. Some APIs related to authoring custom metric readers have been moved behind experimental feature flags. These advanced use cases require more time to finalize the API surface before being included in the stable release.

Context-Based Suppression

Added the ability to suppress telemetry based on Context. This feature prevents telemetry-induced-telemetry scenarios and addresses a long-standing issue. Note that suppression relies on proper context propagation. Certain libraries used in OTLP Exporters utilize tracing but do not adopt OpenTelemetry's context propagation. As a result, not all telemetry is automatically suppressed with this feature. Improvements in this area are expected in future releases.

Next Release

... (truncated)

Commits
  • 2b63b75 fix: Panics and exploding memory usage from large cardinality limit (#3290)
  • c346d4b feat: Upgrade SDK version to 0.31.0 (#3287)
  • 07bb613 feat: Improve support for exponential histogram (#3259)
  • 693dcc0 chore: Unify SpanExporter with LogExporter and PushMetricExporter (#3281)
  • 65969fd docs: logs enrichment (#3266)
  • 627f252 feat: Stabilize Logger Enabled (#3278)
  • 4c16d9b fix: Remove unused tracing dependency from opentelemetry-otlp (#3264)
  • 759b539 chore(sampling): move sdk types from opentelemetry to opentelemetry_sdk (#3277)
  • 483b420 fix: handle shutdown in logs exporter (#3255)
  • 53c9f47 chore(deps): bump step-security/harden-runner from 2.13.1 to 2.13.2 (#3273)
  • Additional commits viewable in compare view

Updates opentelemetry-otlp from 0.27.0 to 0.31.1

Release notes

Sourced from opentelemetry-otlp's releases.

opentelemetry-otlp 0.31.1

What's Changed

Full Changelog: open-telemetry/opentelemetry-rust@v0.31.0...opentelemetry-otlp-0.31.1

Changelog

Sourced from opentelemetry-otlp's changelog.

Release Notes 0.30

OpenTelemetry Rust 0.30 introduces a few breaking changes to the opentelemetry_sdk crate in the metrics feature. These changes were essential to drive the Metrics SDK towards stability. With this release, the Metrics SDK is officially declared stable. The Metrics API was declared stable last year, and previously, the Logs API, SDK, and OTel-Appender-Tracing were also marked stable. Importantly, no breaking changes have been introduced to components already marked as stable.

It is worth noting that the opentelemetry-otlp crate remains in a Release-Candidate state and is not yet considered stable. With the API and SDK for Logs and Metrics now stable, the focus will shift towards further refining and stabilizing the OTLP Exporters in upcoming releases. Additionally, Distributed Tracing is expected to progress towards stability, addressing key interoperability challenges.

For detailed changelogs of individual crates, please refer to their respective changelog files. This document serves as a summary of the main changes.

Key Changes

Metrics SDK Improvements

  1. Stabilized "view" features: Prev...

    Description has been truncated

@dependabot
build(deps): bump the prod-cargo-major-dependencies group across 1 di…
85bd189 
…rectory with 21 updates

Bumps the prod-cargo-major-dependencies group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [async-openai](https://github.com/64bit/async-openai) | `0.33.1` | `0.34.0` |
| [sentry](https://github.com/getsentry/sentry-rust) | `0.46.2` | `0.47.0` |
| [sqlparser](https://github.com/apache/datafusion-sqlparser-rs) | `0.37.0` | `0.58.0` |
| [arrow](https://github.com/apache/arrow-rs) | `56.2.0` | `58.1.0` |
| [bcrypt](https://github.com/Keats/rust-bcrypt) | `0.17.1` | `0.19.0` |
| [clickhouse](https://github.com/ClickHouse/clickhouse-rs) | `0.13.3` | `0.15.0` |
| [dashmap](https://github.com/xacrimon/dashmap) | `5.5.3` | `6.1.0` |
| [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` |
| [indicatif](https://github.com/console-rs/indicatif) | `0.17.11` | `0.18.4` |
| [ndarray](https://github.com/rust-ndarray/ndarray) | `0.16.1` | `0.17.2` |
| [opentelemetry](https://github.com/open-telemetry/opentelemetry-rust) | `0.27.1` | `0.31.0` |
| [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) | `0.27.0` | `0.31.1` |
| [opentelemetry_sdk](https://github.com/open-telemetry/opentelemetry-rust) | `0.27.1` | `0.31.0` |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.2` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `0.8.5` | `0.10.0` |
| [serde_arrow](https://github.com/chmp/serde_arrow) | `0.13.7` | `0.14.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [statrs](https://github.com/statrs-dev/statrs) | `0.17.1` | `0.18.0` |
| [tqdm](https://github.com/mrlazy1708/tqdm) | `0.7.0` | `0.8.0` |
| [tracing-opentelemetry](https://github.com/tokio-rs/tracing-opentelemetry) | `0.28.0` | `0.32.1` |



Updates `async-openai` from 0.33.1 to 0.34.0
- [Release notes](https://github.com/64bit/async-openai/releases)
- [Commits](64bit/async-openai@async-openai-v0.33.1...async-openai-v0.34.0)

Updates `sentry` from 0.46.2 to 0.47.0
- [Release notes](https://github.com/getsentry/sentry-rust/releases)
- [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-rust@0.46.2...0.47.0)

Updates `sqlparser` from 0.37.0 to 0.58.0
- [Changelog](https://github.com/apache/datafusion-sqlparser-rs/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion-sqlparser-rs@v0.37.0...v0.58.0)

Updates `arrow` from 56.2.0 to 58.1.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@56.2.0...58.1.0)

Updates `bcrypt` from 0.17.1 to 0.19.0
- [Commits](Keats/rust-bcrypt@v0.17.1...v0.19.0)

Updates `clickhouse` from 0.13.3 to 0.15.0
- [Changelog](https://github.com/ClickHouse/clickhouse-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ClickHouse/clickhouse-rs/commits)

Updates `dashmap` from 5.5.3 to 6.1.0
- [Release notes](https://github.com/xacrimon/dashmap/releases)
- [Commits](xacrimon/dashmap@v.5.5.3...v6.1.0)

Updates `hmac` from 0.12.1 to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0)

Updates `indicatif` from 0.17.11 to 0.18.4
- [Release notes](https://github.com/console-rs/indicatif/releases)
- [Commits](console-rs/indicatif@0.17.11...0.18.4)

Updates `ndarray` from 0.16.1 to 0.17.2
- [Release notes](https://github.com/rust-ndarray/ndarray/releases)
- [Changelog](https://github.com/rust-ndarray/ndarray/blob/master/RELEASES.md)
- [Commits](rust-ndarray/ndarray@0.16.1...0.17.2)

Updates `opentelemetry` from 0.27.1 to 0.31.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-0.27.1...opentelemetry-prometheus-0.31.0)

Updates `opentelemetry-otlp` from 0.27.0 to 0.31.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-otlp-0.27.0...opentelemetry-otlp-0.31.1)

Updates `opentelemetry_sdk` from 0.27.1 to 0.31.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry_sdk-0.27.1...v0.31.0)

Updates `rand` from 0.8.5 to 0.9.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...rand_core-0.9.2)

Updates `reqwest` from 0.12.28 to 0.13.2
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.28...v0.13.2)

Updates `rmcp` from 0.8.5 to 0.10.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v0.8.5...rmcp-v0.10.0)

Updates `serde_arrow` from 0.13.7 to 0.14.0
- [Release notes](https://github.com/chmp/serde_arrow/releases)
- [Changelog](https://github.com/chmp/serde_arrow/blob/main/Changes.md)
- [Commits](chmp/serde_arrow@v0.13.7...v0.14.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `statrs` from 0.17.1 to 0.18.0
- [Release notes](https://github.com/statrs-dev/statrs/releases)
- [Changelog](https://github.com/statrs-dev/statrs/blob/master/CHANGELOG.md)
- [Commits](statrs-dev/statrs@v0.17.1...v0.18.0)

Updates `tqdm` from 0.7.0 to 0.8.0
- [Commits](https://github.com/mrlazy1708/tqdm/commits)

Updates `tracing-opentelemetry` from 0.28.0 to 0.32.1
- [Release notes](https://github.com/tokio-rs/tracing-opentelemetry/releases)
- [Changelog](https://github.com/tokio-rs/tracing-opentelemetry/blob/v0.1.x/CHANGELOG.md)
- [Commits](tokio-rs/tracing-opentelemetry@v0.28.0...v0.32.1)

---
updated-dependencies:
- dependency-name: async-openai
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: sentry
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: sqlparser
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: arrow
  dependency-version: 58.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-cargo-major-dependencies
- dependency-name: bcrypt
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: clickhouse
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: dashmap
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-cargo-major-dependencies
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: indicatif
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: ndarray
  dependency-version: 0.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: opentelemetry
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: opentelemetry-otlp
  dependency-version: 0.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: opentelemetry_sdk
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: rand
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: reqwest
  dependency-version: 0.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: rmcp
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: serde_arrow
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: statrs
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: tqdm
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
- dependency-name: tracing-opentelemetry
  dependency-version: 0.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-cargo-major-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 13, 2026
@deepsource-io
Copy link
Copy Markdown
Contributor

deepsource-io bot commented Apr 13, 2026 •
edited
Loading

DeepSource Code Review

We reviewed changes in 0594766...85bd189 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
Rust Apr 13, 2026 12:25p.m. Review ↗
Shell Apr 13, 2026 12:25p.m. Review ↗
JavaScript Apr 13, 2026 12:25p.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants