[dependabot]

Bumps the minor-and-patch group with 7 updates in the /frameworks/rust/actix-web directory:

Package	From	To
actix-files	0.7.0	0.7.2
actix-web	4.15.0	4.18.0
actix-web-lab	0.29.0	0.29.5
cached	4.0.1	4.0.3
lambda_runtime	1.4.0	1.5.0
serde_json	1.0.151	1.0.154
actix-http	3.18.12	3.20.0
cached	4.0.1	4.0.3
serde_json	1.0.151	1.0.154
serde_json	1.0.151	1.0.154
cached	4.0.1	4.0.3
serde_json	1.0.151	1.0.154
cached	4.0.1	4.0.3
lambda_runtime	1.4.0	1.5.0
serde_json	1.0.151	1.0.154
serde_json	1.0.151	1.0.154
cached	4.0.1	4.0.3
serde_json	1.0.151	1.0.154

Bumps the minor-and-patch group with 4 updates in the /frameworks/rust/axum directory: cached, serde_json, lambda_http and tokio.
Bumps the minor-and-patch group with 3 updates in the /frameworks/rust/loco directory: serde_json, lambda_http and tokio.
Bumps the minor-and-patch group with 3 updates in the /frameworks/rust/poem directory: cached, serde_json and tokio.
Bumps the minor-and-patch group with 5 updates in the /frameworks/rust/rocket directory:

Package	From	To
cached	4.0.1	4.0.3
lambda_runtime	1.4.0	1.5.0
serde_json	1.0.151	1.0.154
cached	4.0.1	4.0.3
serde_json	1.0.151	1.0.154
serde_json	1.0.151	1.0.154
cached	4.0.1	4.0.3
serde_json	1.0.151	1.0.154
cached	4.0.1	4.0.3
entity-tag	0.2.0	0.2.2
lambda_runtime	1.4.0	1.5.0
serde_json	1.0.151	1.0.154
tokio-util	0.7.19	0.7.20
serde_json	1.0.151	1.0.154
cached	4.0.1	4.0.3
serde_json	1.0.151	1.0.154

Bumps the minor-and-patch group with 3 updates in the /frameworks/rust/salvo directory: serde_json, tokio and salvo.
Bumps the minor-and-patch group with 4 updates in the /frameworks/rust/warp directory: cached, serde_json, lambda_http and tokio.

Updates actix-files from 0.7.0 to 0.7.2

Release notes

Sourced from actix-files's releases.

actix-files: v0.7.2

• Evaluate request preconditions before processing Range headers when serving a NamedFile.
• Ignore Range headers for methods other than GET when serving a NamedFile.
• Ignore If-Unmodified-Since when If-Match is present when serving a NamedFile.
• Respond with 412 Precondition Failed for matching If-None-Match on methods other than GET and HEAD when serving a NamedFile.
• Ignore If-Modified-Since on methods other than GET and HEAD when serving a NamedFile.
• Accept case-insensitive byte range units and ignore unknown range units when serving a NamedFile.

actix-files: v0.7.1

• Honor If-Range headers when serving a NamedFile.
• Use the Windows file index in NamedFile ETags to distinguish different files with the same size and modification time.
• Minimum supported Rust version (MSRV) is now 1.89.

Commits

• fc7e7b3 chore(actix-files): prepare release 0.7.2
• 5ec8159 fix(actix-files): handle range units per RFC 9110 (#4340)
• 2c4fe2a fix(files): apply conditional response rules by request method (#4339)
• 16ba564 ci: use preinstalled OpenSSL on Windows (#4344)
• e2d691f fix(files): ignore Range for non-GET requests (#4337)
• ff27b4a fix(files): evaluate preconditions before range requests (#4336)
• c98973e fix(files): give If-Match precedence over If-Unmodified-Since (#4338)
• cb58a7d docs: note on_connect must be called before bind (#4341)
• fd7b074 chore(actix-files): prepare release 0.7.1
• 8487ab7 fix(files): use file index for Windows ETags (#4335)
• Additional commits viewable in compare view

Updates actix-web from 4.15.0 to 4.18.0

Release notes

Sourced from actix-web's releases.

actix-web: v4.18.0

• Add #[query] route handler macro.
• Add support for method = "QUERY" in #[route].
• Add guard::Query() method guard.
• Document that HttpServer::on_connect() must be called before bind().
• Minimum supported Rust version (MSRV) is now 1.89.

actix-web: v4.17.0

• Fix Accept parsing and preference selection for quality parameters before media type parameters and for quoted parameter values containing semicolons.
• Update zstd dependency to 0.14.
• Update brotli dependency to 9.

actix-web: v4.16.0

• The TLS crate features no longer enable the http2 crate feature.
• Prevent TestRequest app data retention by disabling its request pooling.

Commits

• e4bce82 chore: fix example
• f82b37e chore: update lockfile
• 15b897f chore(actix-web): prepare release 4.18.0
• ae5ae1a chore(actix-web-codegen): prepare release 4.5.0
• 32eba26 feat: add first-class support for HTTP QUERY method (#4346)
• 2db7119 chore(files): update http-range to 0.1.6 (#4345)
• fc7e7b3 chore(actix-files): prepare release 0.7.2
• 5ec8159 fix(actix-files): handle range units per RFC 9110 (#4340)
• 2c4fe2a fix(files): apply conditional response rules by request method (#4339)
• 16ba564 ci: use preinstalled OpenSSL on Windows (#4344)
• Additional commits viewable in compare view

Updates actix-web-lab from 0.29.0 to 0.29.5

Release notes

Sourced from actix-web-lab's releases.

actix-web-lab: v0.29.5

• Add deser_0_10::DeserJson, a JSON extractor with payload size limits and deserialization error context, behind the deser-0_10 feature.

actix-web-lab: v0.29.4

• No significant changes since 0.29.3.

actix-web-lab: v0.29.3

• No significant changes since 0.29.2.

actix-web-lab: v0.29.2

• No significant changes since 0.29.1.

actix-web-lab-derive: v0.29.1

No release notes provided.

actix-web-lab: v0.29.1

• Normalize line endings in SSE data and comments, and report encoding errors through the response body.

Commits

• d2402be chore(actix-web-lab): prepare release 0.29.5
• 7ea535f chore: import futures extension traits from the root (#519)
• 97dcb57 chore: use futures-util re-exports (#518)
• 3332f13 docs: generate READMEs from all workspace crates (#517)
• 925271b feat(actix-web-lab): add deser 0.10 JSON extractor with error context (#458)
• 310f0d6 docs(russe): correct 0.3.0 changelog (#514)
• 29c74b6 ci: update release-plz
• 86c7c85 chore: release (#511)
• 4db1969 fix(russe): report invalid fields and initial request errors (#510)
• 0689ef7 chore: allow all russe 0.2
• Additional commits viewable in compare view

Updates cached from 4.0.1 to 4.0.3

Changelog

Sourced from cached's changelog.

[4.0.3] - 2026-10-18

Changed

• Raise the minimum redis version to 1.2.3, the first release on lru 0.18. Earlier 1.x releases depend on lru 0.16, which is affected by RUSTSEC-2026-0253 (use-after-free in LruCache::pop() when a key's Drop panics), fixed in lru 0.18.2.

Added

• CI runs cargo audit against the RustSec advisory database on every push and pull request, and weekly so new advisories surface without a code change.

[4.0.2] - 2026-10-12

Fixed

• Fix two unit tests that failed on 32-bit targets (#330). The ExpiringCache layout test checks field types instead of comparing size_of against UnboundCache, and the LruCache::pop_raw_with_hash wrong-hash test asserts only that the cache stays consistent. No change to the published crates' behavior.

Added

• make tests/32bit runs the test suite on i686-unknown-linux-gnu, and CI runs it. make tests/32bit/docker runs the same target in a container, with no local 32-bit toolchain needed.

Commits

• c97b333 raise redis floor to 1.2.3, add cargo audit ci job, release 4.0.3 (#333)
• aa020a3 release 4.0.2 (#332)
• a8b893c fix unit tests on 32-bit targets, add make tests/32bit and i686 ci job (#331)
• See full diff in compare view

Updates lambda_runtime from 1.4.0 to 1.5.0

Release notes

Sourced from lambda_runtime's releases.

v1.5.0

Added

• log worker count and max concurrency (#1167)

Other

• explain AWS-LC cold-start tradeoff (#1172)
• Add #[serde(default)] to to field of SimpleEmailCommonHeaders (#1171)

Commits

• 7f89224 chore: release (#1174)
• 5670a2e Add #[serde(default)] to to field of SimpleEmailCommonHeaders (#1171)
• 0bf2d70 feat: log worker count and max concurrency (#1167)
• 8d8da6b chore(deps): bump aws-cdk-lib from 2.250.0 to 2.262.0 in /examples/http-axum/...
• 7f8a913 chore(deps): bump js-yaml (#1170)
• ac9675a docs: explain AWS-LC cold-start tradeoff (#1172)
• See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates actix-http from 3.18.12 to 3.20.0

Release notes

Sourced from actix-http's releases.

actix-http: v3.20.0

• Release oversized HTTP/1 write buffers after flushing to reduce memory retained by idle connections.
• Minimum supported Rust version (MSRV) is now 1.89.

actix-http: v3.19.0

• Fix QualityItem parsing to recognize quality parameters before other parameters and ignore semicolons inside quoted values.
• Parse header quality values as exact decimals and reject invalid numeric syntax.
• Round float quality conversions to the nearest thousandth to preserve all three decimal places.
• Reject WebSocket frames whose 64-bit payload length has the most significant bit set, or whose length does not fit in usize on 32-bit targets, using ws::ProtocolError::Overflow.
• Update zstd dependency to 0.14.
• Update brotli dependency to 9.

actix-http: v3.18.13

• Emit required Connection options for HTTP/1 response upgrade advertisements without changing connection state.
• Parse all HTTP/1 Connection header options consistently.
• Only treat Expect: 100-continue as a continue expectation in HTTP/1.1 requests.
• Reject WebSocket handshakes with a Sec-WebSocket-Key value that is not valid Base64 or does not decode to 16 bytes.
• Reject WebSocket Close frames with payloads larger than 125 bytes.
• Return a 426 Upgrade Required response when an unsupported WebSocket version is requested.

Commits

• 88d7742 chore(actix-http): prepare release 3.20.0
• c04807d fix(actix-http): release oversized HTTP/1 write buffers (#4270)
• c1e9675 docs: clarify server startup and add readiness example (#4269)
• 7b23d81 build(deps): bump base64 from 0.22.1 to 0.23.1 (#4348)
• 852b892 build(deps): bump taiki-e/install-action from 2.87.27 to 2.87.30 (#4349)
• 57d7951 build(deps): bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 (#4347)
• afd1602 ci: verify locked GitHub Actions tags (#4355)
• 5dbb892 docs(test): fix changelog
• 9ed549d chore(actix-test): prepare release 0.1.6
• ccc4290 chore(actix-http-test): prepare release 3.4.0
• Additional commits viewable in compare view

Updates cached from 4.0.1 to 4.0.3

Changelog

Sourced from cached's changelog.

[4.0.3] - 2026-10-18

Changed

• Raise the minimum redis version to 1.2.3, the first release on lru 0.18. Earlier 1.x releases depend on lru 0.16, which is affected by RUSTSEC-2026-0253 (use-after-free in LruCache::pop() when a key's Drop panics), fixed in lru 0.18.2.

Added

• CI runs cargo audit against the RustSec advisory database on every push and pull request, and weekly so new advisories surface without a code change.

[4.0.2] - 2026-10-12

Fixed

• Fix two unit tests that failed on 32-bit targets (#330). The ExpiringCache layout test checks field types instead of comparing size_of against UnboundCache, and the LruCache::pop_raw_with_hash wrong-hash test asserts only that the cache stays consistent. No change to the published crates' behavior.

Added

• make tests/32bit runs the test suite on i686-unknown-linux-gnu, and CI runs it. make tests/32bit/docker runs the same target in a container, with no local 32-bit toolchain needed.

Commits

• c97b333 raise redis floor to 1.2.3, add cargo audit ci job, release 4.0.3 (#333)
• aa020a3 release 4.0.2 (#332)
• a8b893c fix unit tests on 32-bit targets, add make tests/32bit and i686 ci job (#331)
• See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates cached from 4.0.1 to 4.0.3

Changelog

Sourced from cached's changelog.

[4.0.3] - 2026-10-18

Changed

• Raise the minimum redis version to 1.2.3, the first release on lru 0.18. Earlier 1.x releases depend on lru 0.16, which is affected by RUSTSEC-2026-0253 (use-after-free in LruCache::pop() when a key's Drop panics), fixed in lru 0.18.2.

Added

• CI runs cargo audit against the RustSec advisory database on every push and pull request, and weekly so new advisories surface without a code change.

[4.0.2] - 2026-10-12

Fixed

• Fix two unit tests that failed on 32-bit targets (#330). The ExpiringCache layout test checks field types instead of comparing size_of against UnboundCache, and the LruCache::pop_raw_with_hash wrong-hash test asserts only that the cache stays consistent. No change to the published crates' behavior.

Added

• make tests/32bit runs the test suite on i686-unknown-linux-gnu, and CI runs it. make tests/32bit/docker runs the same target in a container, with no local 32-bit toolchain needed.

Commits

• c97b333 raise redis floor to 1.2.3, add cargo audit ci job, release 4.0.3 (#333)
• aa020a3 release 4.0.2 (#332)
• a8b893c fix unit tests on 32-bit targets, add make tests/32bit and i686 ci job (#331)
• See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates cached from 4.0.1 to 4.0.3

Changelog

Sourced from cached's changelog.

[4.0.3] - 2026-10-18

Changed

• Raise the minimum redis version to 1.2.3, the first release on lru 0.18. Earlier 1.x releases depend on lru 0.16, which is affected by RUSTSEC-2026-0253 (use-after-free in LruCache::pop() when a key's Drop panics), fixed in lru 0.18.2.

Added

• CI runs cargo audit against the RustSec advisory database on every push and pull request, and weekly so new advisories surface without a code change.

[4.0.2] - 2026-10-12

Fixed

• Fix two unit tests that failed on 32-bit targets (#330). The ExpiringCache layout test checks field types instead of comparing size_of against UnboundCache, and the LruCache::pop_raw_with_hash wrong-hash test asserts only that the cache stays consistent. No change to the published crates' behavior.

Added

• make tests/32bit runs the test suite on i686-unknown-linux-gnu, and CI runs it. make tests/32bit/docker runs the same target in a container, with no local 32-bit toolchain needed.

Commits

• c97b333 raise redis floor to 1.2.3, add cargo audit ci job, release 4.0.3 (#333)
• aa020a3 release 4.0.2 (#332)
• a8b893c fix unit tests on 32-bit targets, add make tests/32bit and i686 ci job (#331)
• See full diff in compare view

Updates lambda_runtime from 1.4.0 to 1.5.0

Release notes

Sourced from lambda_runtime's releases.

v1.5.0

Added

• log worker count and max concurrency (#1167)

Other

• explain AWS-LC cold-start tradeoff (#1172)
• Add #[serde(default)] to to field of SimpleEmailCommonHeaders (#1171)

Commits

• 7f89224 chore: release (#1174)
• 5670a2e Add #[serde(default)] to to field of SimpleEmailCommonHeaders (#1171)
• 0bf2d70 feat: log worker count and max concurrency (#1167)
• 8d8da6b chore(deps): bump aws-cdk-lib from 2.250.0 to 2.262.0 in /examples/http-axum/...
• 7f8a913 chore(deps): bump js-yaml (#1170)
• ac9675a docs: explain AWS-LC cold-start tradeoff (#1172)
• See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates cached from 4.0.1 to 4.0.3

Changelog

Sourced from cached's changelog.

[4.0.3] - 2026-10-18

Changed

• Raise the minimum redis version to 1.2.3, the first release on lru 0.18. Earlier 1.x releases depend on lru 0.16, which is affected by RUSTSEC-2026-0253 (use-after-free in LruCache::pop() when a key's Drop panics), fixed in lru 0.18.2.

Added

• CI runs cargo audit against the RustSec advisory database on every push and pull request, and weekly so new advisories surface without a code change.

[4.0.2] - 2026-10-12

Fixed

• Fix two unit tests that failed on 32-bit targets (#330). The ExpiringCache layout test checks field types instead of comparing size_of against UnboundCache, and the LruCache::pop_raw_with_hash wrong-hash test asserts only that the cache stays consistent. No change to the published crates' behavior.

Added

• make tests/32bit runs the test suite on i686-unknown-linux-gnu, and CI runs it. make tests/32bit/docker runs the same target in a container, with no local 32-bit toolchain needed.

Commits

• c97b333 raise redis floor to 1.2.3, add cargo audit ci job, release 4.0.3 (#333)
• aa020a3 release 4.0.2 (#332)
• a8b893c fix unit tests on 32-bit targets, add make tests/32bit and i686 ci job (#331)
• See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates cached from 4.0.1 to 4.0.3

Changelog

Sourced from cached's changelog.

[4.0.3] - 2026-10-18

Changed

• Raise the minimum redis version to 1.2.3, the first release on lru 0.18. Earlier 1.x releases depend on lru 0.16, which is affected by RUSTSEC-2026-0253 (use-after-free in LruCache::pop() when a key's Drop panics), fixed in lru 0.18.2.

Added

• CI runs cargo audit against the RustSec advisory database on every push and pull request, and weekly so new advisories surface without a code change.

[4.0.2] - 2026-10-12

Fixed

• Fix two unit tests that failed on 32-bit targets (#330). The ExpiringCache layout test checks field types instead of comparing size_of against UnboundCache, and the LruCache::pop_raw_with_hash wrong-hash test asserts only that the cache stays consistent. No change to the published crates' behavior.

Added

• make tests/32bit runs the test suite on i686-unknown-linux-gnu, and CI runs it. make tests/32bit/docker runs the same target in a container, with no local 32-bit toolchain needed.

Commits

• c97b333 raise redis floor to 1.2.3, add cargo audit ci job, release 4.0.3 (#333)
• aa020a3 release 4.0.2 (#332)
• a8b893c fix unit tests on 32-bit targets, add make tests/32bit and i686 ci job (#331)
• See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates cached from 4.0.1 to 4.0.3

Changelog

Sourced from cached's changelog.

[4.0.3] - 2026-10-18

Changed

• Raise the minimum redis version to 1.2.3, the first release on lru 0.18. Earlier 1.x releases depend on lru 0.16, which is affected by RUSTSEC-2026-0253 (use-after-free in LruCache::pop() when a key's Drop panics), fixed in lru 0.18.2.

Added

• CI runs cargo audit against the RustSec advisory database on every push and pull request, and weekly so new advisories surface without a code change.

[4.0.2] - 2026-10-12

Fixed

• Fix two unit tests that failed on 32-bit targets (#330). The ExpiringCache layo...

  Description has been truncated