Update all non-major dependencies (minor)

[dependency-concierge]

This PR contains the following updates:

Package	Type	Update	Change
docker/login-action	action	minor	v3.5.0 → v3.7.0
mongodb (source)	dependencies	minor	3.3.0 → 3.5.1
reqwest	dependencies	minor	0.12.12 → 0.13.0
rust	stage	minor	1.90.0-slim-bookworm → 1.93.1-slim-bookworm
tokio (source)	dependencies	minor	1.47.3 → 1.50.0
twilight-cache-inmemory (source)	dependencies	minor	0.16.0 → 0.17.0
twilight-gateway (source)	dependencies	minor	0.16.0 → 0.17.0
twilight-http (source)	dependencies	minor	0.16.0 → 0.17.0
twilight-model (source)	dependencies	minor	0.16.0 → 0.17.0
twilight-standby (source)	dependencies	minor	0.16.0 → 0.17.0
twilight-util (source)	dependencies	minor	0.16.0 → 0.17.0
uuid	dependencies	minor	1.18.1 → 1.21.0

---

Release Notes

docker/login-action (docker/login-action)

v3.7.0

Compare Source

• Add scope input to set scopes for the authentication token by @​crazy-max in #​912
• Add support for AWS European Sovereign Cloud ECR by @​dphi in #​914
• Ensure passwords are redacted with registry-auth input by @​crazy-max in #​911
• build(deps): bump lodash from 4.17.21 to 4.17.23 in #​915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

v3.6.0

Compare Source

• Add registry-auth input for raw authentication to registries by @​crazy-max in #​887
• Bump @​aws-sdk/client-ecr to 3.890.0 in #​882 #​890
• Bump @​aws-sdk/client-ecr-public to 3.890.0 in #​882 #​890
• Bump @​docker/actions-toolkit from 0.62.1 to 0.63.0 in #​883
• Bump brace-expansion from 1.1.11 to 1.1.12 in #​880
• Bump undici from 5.28.4 to 5.29.0 in #​879
• Bump tmp from 0.2.3 to 0.2.4 in #​881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

mongodb/mongo-rust-driver (mongodb)

v3.5.1

Compare Source

The MongoDB Rust driver team is pleased to announce the v3.5.1 release of the mongodb crate, now available for download from crates.io.

This release removes a check added in 3.4.0 that would reject metadata containing the | character.

Full Release Notes

Bugfixes

• RUST-2346 Remove check for '|' in metadata (#​1599)

v3.5.0

Compare Source

The MongoDB Rust driver team is pleased to announce the v3.5.0 release of the mongodb crate, now available for download from crates.io.

Highlighted Changes

SOCKS5 Proxy Support

3.5.0 includes the optional socks5-proxy feature, which enables connecting to the database via a SOCKS5 proxy. This can be configured either with the proxyHost, proxyPort, proxyUsername, and proxyPassword connection string options or the ClientOptions::socks5_proxy field.

Raw Batch Cursors

This release adds support for iterating over the raw document batches returned by the server for cursors rather than individual deserialized values. For some applications, this can enable significant performance improvements; see the module documentation for more details.

AWS Authentication Property Deprecation

Specifying AWS authentication properties via the username and password in URI strings and the AWS_SESSION_TOKEN field of the auth mechanism properties doc is deprecated; using these is almost never the correct setup and can lead to the driver losing connectivity. This functionality will be removed in the next major version of the driver.

Full Release Notes

Impactful changes are listed below; for a complete list of changes see this GitHub query.

New Features

• RUST-1054 SOCKS5 Proxy Support (#​1550)
• RUST-2300 Provide a raw batched cursor mode for all cursor-returning actions

Improvements

• RUST-2303 extend ALLOWED_HOSTS (#​1544)
• RUST-2308 Derive Clone for ConnectionString (#​1546) (thanks @​jeroenvervaeke!)
• RUST-2309 Include message in display for custom errors containing strings
• RUST-2279 Add snapshot_time option for snapshot sessions (#​1555)
• RUST-2321 Deprecate the socketTimeoutMS option (#​1582)
• RUST-2310 Deprioritize servers in server selection for all topologies (#​1576)

Bugfixes

• RUST-2304 Add workarounds for bulk write server bugs (#​1551)

v3.4.1

Compare Source

The MongoDB Rust driver team is pleased to announce the v3.4.1 release of the mongodb crate, now available for download from crates.io.

Highlighted Changes

Atlas Search Helpers

The driver now includes helpers for building Atlas Search aggregation pipelines. See the documentation for more details and examples.

OpenTelemetry Support

The driver now supports tracing database commands and driver operations for OpenTelemetry.

Text Indexes for Queryable Encryption

The driver now supports text indexes for both automatic and explicit encryption. Note that this feature is in preview and should only be used in experimental workloads. The text-indexes-unstable feature flag must be enabled to use text indexes. The GA version of this feature may not be backwards-compatible with the preview version.

Dependency Improvements

Thank you to @​tottoto and @​FalkWoldmann for their several contributions to update and refine our dependencies!

Full Release Notes

Impactful changes are listed below; for a complete list of changes, see this GitHub query.

New Features

• RUST-2138 Add optional support for OpenTelemetry (#​1495)
• RUST-1308 Implement Display and Serialize for ConnectionString (#​1494)
• RUST-2237 Support for text indexes in explicit encryption (#​1479)
• RUST-1405 Expose full server response in Error (#​1474)
• RUST-2113 Add has_next to cursor API (#​1485)
• RUST-2203 Allow client metadata to be appended post-construction (#​1471)
• RUST-2157 Complete set of Atlas Search helpers (#​1462)
• RUST-2137 Support $lookup in CSFLE and QE (#​1521)

Improvements

• RUST-2293 Un-deprecate and_run (#​1497)
• RUST-2127 Lint for sign loss when casting (#​1481)

Bug Fixes

• TUNE-449 Fix a potential duration overflow (#​1530)

[!NOTE]
Version 3.4.0 of the driver was skipped due to an issue in the release process.

seanmonstar/reqwest (reqwest)

v0.13.2

Compare Source

• Fix HTTP/2 and native-tls ALPN feature combinations.
• Fix HTTP/3 to send h3 ALPN.
• (wasm) fix RequestBuilder::json() from override previously set content-type.

v0.13.1

Compare Source

• Fixes compiling with rustls on Android targets.

v0.13.0

Compare Source

• Breaking changes:
  • rustls is now the default TLS backend, instead of native-tls.
  • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
  • rustls-tls has been renamed to rustls.
  • rustls roots features removed, rustls-platform-verifier is used by default.
    • To use different roots, call tls_certs_only(your_roots).
  • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
  • query and form are now crate features, disabled by default.
  • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
• Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
  • For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

• Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

• Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

• Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

• Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
• Fix sending Proxy-Authorization if only username is configured.
• Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
• Refactor internal decompression handling to use tower-http.

v0.12.24

• Refactor cookie handling to an internal middleware.
• Refactor internal random generator.
• Refactor base64 encoding to reduce a copy.
• Documentation updates.

v0.12.23

• Add ClientBuilder::unix_socket(path) option that will force all requests over that Unix Domain Socket.
• Add ClientBuilder::retry(policy) and reqwest::retry::Builder to configure automatic retries.
• Add ClientBuilder::dns_resolver2() with more ergonomic argument bounds, allowing more resolver implementations.
• Add http3_* options to blocking::ClientBuilder.
• Fix default TCP timeout values to enabled and faster.
• Fix SOCKS proxies to default to port 1080
• (wasm) Add cache methods to RequestBuilder.

v0.12.22

• Fix socks proxies when resolving IPv6 destinations.

v0.12.21

• Fix socks proxy to use socks4a:// instead of socks4h://.
• Fix Error::is_timeout() to check for hyper and IO timeouts too.
• Fix request Error to again include URLs when possible.
• Fix socks connect error to include more context.
• (wasm) implement Default for Body.

v0.12.20

• Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
• Fix proxy headers only using the first matched proxy.
• (wasm) Fix re-adding Error::is_status().

v0.12.19

• Fix redirect that changes the method to GET should remove payload headers.
• Fix redirect to only check the next scheme if the policy action is to follow.
• (wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

• Fix compilation when socks enabled without TLS.

v0.12.17

• Fix compilation on macOS.

v0.12.16

• Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
• Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
• Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
• Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
• Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
• Add Proxy::headers() to add extra headers that should be sent to a proxy.
• Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
• Fix HTTP/3 to support streaming request bodies.
• (wasm) Fix null bodies when calling Response::bytes_stream().

v0.12.15

• Fix Windows to support both ProxyOverride and NO_PROXY.
• Fix http3 to support streaming response bodies.
• Fix http3 dependency from public API misuse.

v0.12.14

• Fix missing fetch_mode_no_cors(), marking as deprecated when not on WASM.

v0.12.13

• Add Form::into_reader() for blocking multipart forms.
• Add Form::into_stream() for async multipart forms.
• Add support for SOCKS4a proxies.
• Fix decoding responses with multiple zstd frames.
• Fix RequestBuilder::form() from overwriting a previously set Content-Type header, like the other builder methods.
• Fix cloning of request timeout in blocking::Request.
• Fix http3 synchronization of connection creation, reducing unneccesary extra connections.
• Fix Windows system proxy to use ProxyOverride as a NO_PROXY value.
• Fix blocking read to correctly reserve and zero read buffer.
• (wasm) Add support for request timeouts.
• (wasm) Fix Error::is_timeout() to return true when from a request timeout.

v0.12.12

• (wasm) Fix compilation by not compiler tokio/time on WASM.

v0.12.11

• Fix decompression returning an error when HTTP/2 ends with an empty data frame.

v0.12.10

• Add ClientBuilder::connector_layer() to allow customizing the connector stack.
• Add ClientBuilder::http2_max_header_list_size() option.
• Fix propagating body size hint (content-length) information when wrapping bodies.
• Fix decompression of chunked bodies so the connections can be reused more often.

v0.12.9

• Add tls::CertificateRevocationLists support.
• Add crate features to enable webpki roots without selecting a rustls provider.
• Fix connection_verbose() to output read logs.
• Fix multipart::Part::file() to automatically include content-length.
• Fix proxy to internally no longer cache system proxy settings.

v0.12.8

• Add support for SOCKS4 proxies.
• Add multipart::Form::file() method for adding files easily.
• Add Body::wrap() to wrap any http_body::Body type.
• Fix the pool configuration to use a timer to remove expired connections.

v0.12.7

• Revert adding impl Service<http::Request<_>> for Client.

v0.12.6

• Add support for danger_accept_invalid_hostnames for rustls.
• Add impl Service<http::Request<Body>> for Client and &'_ Client.
• Add support for !Sync bodies in Body::wrap_stream().
• Enable happy eyeballs when hickory-dns is used.
• Fix Proxy so that HTTP(S)_PROXY values take precedence over ALL_PROXY.
• Fix blocking::RequestBuilder::header() from unsetting sensitive on passed header values.

v0.12.5

• Add blocking::ClientBuilder::dns_resolver() method to change DNS resolver in blocking client.
• Add http3 feature back, still requiring reqwest_unstable.
• Add rustls-tls-no-provider Cargo feature to use rustls without a crypto provider.
• Fix Accept-Encoding header combinations.
• Fix http3 resolving IPv6 addresses.
• Internal: upgrade to rustls 0.23.

v0.12.4

• Add zstd support, enabled with zstd Cargo feature.
• Add ClientBuilder::read_timeout(Duration), which applies the duration for each read operation. The timeout resets after a successful read.

v0.12.3

• Add FromStr for dns::Name.
• Add ClientBuilder::built_in_webpki_certs(bool) to enable them separately.
• Add ClientBuilder::built_in_native_certs(bool) to enable them separately.
• Fix sending content-length: 0 for GET requests.
• Fix response body content_length() to return value when timeout is configured.
• Fix ClientBuilder::resolve() to use lowercase domain names.

v0.12.2

• Fix missing ALPN when connecting to socks5 proxy with rustls.
• Fix TLS version limits with rustls.
• Fix not detected ALPN h2 from server with native-tls.

v0.12.1

• Fix ClientBuilder::interface() when no TLS is enabled.
• Fix TlsInfo::peer_certificate() being truncated with rustls.
• Fix panic if http2 feature disabled but TLS negotiated h2 in ALPN.
• Fix Display for Error to not include its source error.

tokio-rs/tokio (tokio)

v1.50.0: Tokio v1.50.0

Compare Source

1.50.0 (Mar 3rd, 2026)

Added

• net: add TcpStream::set_zero_linger (#​7837)
• rt: add is_rt_shutdown_err (#​7771)

Changed

• io: add optimizer hint that memchr returns in-bounds pointer (#​7792)
• io: implement vectored writes for write_buf (#​7871)
• runtime: panic when event_interval is set to 0 (#​7838)
• runtime: shorten default thread name to fit in Linux limit (#​7880)
• signal: remember the result of SetConsoleCtrlHandler (#​7833)
• signal: specialize windows Registry (#​7885)

Fixed

• io: always cleanup AsyncFd registration list on deregister (#​7773)
• macros: remove (most) local use declarations in tokio::select! (#​7929)
• net: fix GET_BUF_SIZE constant for target_os = "android" (#​7889)
• runtime: avoid redundant unpark in current_thread scheduler (#​7834)
• runtime: don't park in current_thread if before_park defers waker (#​7835)
• io: fix write readiness on ESP32 on short writes (#​7872)
• runtime: wake deferred tasks before entering block_in_place (#​7879)
• sync: drop rx waker when oneshot receiver is dropped (#​7886)
• runtime: fix double increment of num_idle_threads on shutdown (#​7910, #​7918, #​7922)

Unstable

• fs: check for io-uring opcode support (#​7815)
• runtime: avoid lock acquisition after uring init (#​7850)

Documented

• docs: update outdated unstable features section (#​7839)
• io: clarify the behavior of AsyncWriteExt::shutdown() (#​7908)
• io: explain how to flush stdout/stderr (#​7904)
• io: fix incorrect and confusing AsyncWrite documentation (#​7875)
• rt: clarify the documentation of Runtime::spawn (#​7803)
• rt: fix missing quotation in docs (#​7925)
• runtime: correct the default thread name in docs (#​7896)
• runtime: fix event_interval doc (#​7932)
• sync: clarify RwLock fairness documentation (#​7919)
• sync: clarify that recv returns None once closed and no more messages (#​7920)
• task: clarify when to use spawn_blocking vs dedicated threads (#​7923)
• task: doc that task drops before JoinHandle completion (#​7825)
• signal: guarantee that listeners never return None (#​7869)
• task: fix task module feature flags in docs (#​7891)
• task: fix two typos (#​7913)
• task: improve the docs of Builder::spawn_local (#​7828)
• time: add docs about auto-advance and when to use sleep (#​7858)
• util: fix typo in docs (#​7926)

v1.49.0: Tokio v1.49.0

Compare Source

1.49.0 (January 3rd, 2026)

Added

• net: add support for TCLASS option on IPv6 (#​7781)
• runtime: stabilize runtime::id::Id (#​7125)
• task: implement Extend for JoinSet (#​7195)
• task: stabilize the LocalSet::id() (#​7776)

Changed

• net: deprecate {TcpStream,TcpSocket}::set_linger (#​7752)

Fixed

• macros: fix the hygiene issue of join! and try_join! (#​7766)
• runtime: revert "replace manual vtable definitions with Wake" (#​7699)
• sync: return TryRecvError::Disconnected from Receiver::try_recv after Receiver::close (#​7686)
• task: remove unnecessary trait bounds on the Debug implementation (#​7720)

Unstable

• fs: handle EINTR in fs::write for io-uring (#​7786)
• fs: support io-uring with tokio::fs::read (#​7696)
• runtime: disable io-uring on EPERM (#​7724)
• time: add alternative timer for better multicore scalability (#​7467)

Documented

• docs: fix a typos in bounded.rs and park.rs (#​7817)
• io: add SyncIoBridge cross-references to copy and copy_buf (#​7798)
• io: doc that AsyncWrite does not inherit from std::io::Write (#​7705)
• metrics: clarify that num_alive_tasks is not strongly consistent (#​7614)
• net: clarify the cancellation safety of the TcpStream::peek (#​7305)
• net: clarify the drop behavior of unix::OwnedWriteHalf (#​7742)
• net: clarify the platform-dependent backlog in TcpSocket docs (#​7738)
• runtime: mention LocalRuntime in new_current_thread docs (#​7820)
• sync: add missing period to mpsc::Sender::try_send docs (#​7721)
• sync: clarify the cancellation safety of oneshot::Receiver (#​7780)
• sync: improve the docs for the errors of mpsc (#​7722)
• task: add example for spawn_local usage on local runtime (#​7689)

v1.48.0: Tokio v1.48.0

Compare Source

1.48.0 (October 14th, 2025)

The MSRV is increased to 1.71.

Added

• fs: add File::max_buf_size (#​7594)
• io: export Chain of AsyncReadExt::chain (#​7599)
• net: add SocketAddr::as_abstract_name (#​7491)
• net: add TcpStream::quickack and TcpStream::set_quickack (#​7490)
• net: implement AsRef<Self> for TcpStream and UnixStream (#​7573)
• task: add LocalKey::try_get (#​7666)
• task: implement Ord for task::Id (#​7530)

Changed

• deps: bump windows-sys to version 0.61 (#​7645)
• fs: preserve max_buf_size when cloning a File (#​7593)
• macros: suppress clippy::unwrap_in_result in #[tokio::main] (#​7651)
• net: remove PollEvented noise from Debug formats (#​7675)
• process: upgrade Command::spawn_with to use FnOnce (#​7511)
• sync: remove inner mutex in SetOnce (#​7554)
• sync: use UnsafeCell::get_mut in Mutex::get_mut and RwLock::get_mut (#​7569)
• time: reduce the generated code size of Timeout<T>::poll (#​7535)

Fixed

• macros: fix hygiene issue in join! and try_join! (#​7638)
• net: fix copy/paste errors in udp peek methods (#​7604)
• process: fix error when runtime is shut down on nightly-2025-10-12 (#​7672)
• runtime: use release ordering in wake_by_ref() even if already woken (#​7622)
• sync: close the broadcast::Sender in broadcast::Sender::new() (#​7629)
• sync: fix implementation of unused RwLock::try_* methods (#​7587)

Unstable

• tokio: use cargo features instead of --cfg flags for taskdump and io_uring (#​7655, #​7621)
• fs: support io_uring in fs::write (#​7567)
• fs: support io_uring with File::open() (#​7617)
• fs: support io_uring with OpenOptions (#​7321)
• macros: add local runtime flavor (#​7375, #​7597)

Documented

• io: clarify the zero capacity case of AsyncRead::poll_read (#​7580)
• io: fix typos in the docs of AsyncFd readiness guards (#​7583)
• net: clarify socket gets closed on drop (#​7526)
• net: clarify the behavior of UCred::pid() on Cygwin (#​7611)
• net: clarify the supported platform of set_reuseport() and reuseport() (#​7628)
• net: qualify that SO_REUSEADDR is only set on Unix (#​7533)
• runtime: add guide for choosing between runtime types (#​7635)
• runtime: clarify the behavior of Handle::block_on (#​7665)
• runtime: clarify the edge case of Builder::global_queue_interval() (#​7605)
• sync: clarify bounded channel panic behavior (#​7641)
• sync: clarify the behavior of tokio::sync::watch::Receiver (#​7584)
• sync: document cancel safety on SetOnce::wait (#​7506)
• sync: fix the docs of parking_lot feature flag (#​7663)
• sync: improve the docs of UnboundedSender::send (#​7661)
• sync: improve the docs of sync::watch (#​7601)
• sync: reword allocation failure paragraph in broadcast docs (#​7595)
• task: clarify the behavior of several spawn_local methods (#​7669)
• task: clarify the task ID reuse guarantees (#​7577)
• task: improve the example of poll_proceed (#​7586)

uuid-rs/uuid (uuid)

v1.21.0

Compare Source

What's Changed

• Update getrandom to 0.4 by @​KodrAus in #​858
• feat: impl core::error::Error for Error by @​XAMPPRocky in #​852
• Prepare for 1.21.0 release by @​KodrAus in #​859

New Contributors

• @​XAMPPRocky made their first contribution in #​852

Full Changelog: uuid-rs/uuid@v1.20.0...v1.21.0

v1.20.0

Compare Source

What's Changed

• Derive Ord and PartialOrd for NonNilUuid by @​mivort in #​854
• Implement Deserialize on adapter types by @​KodrAus in #​855
• Deprecate macro-diagnostics by @​KodrAus in #​856
• Prepare for 1.20.0 release by @​KodrAus in #​857

New Contributors

• @​mivort made their first contribution in #​854

Full Changelog: uuid-rs/uuid@v1.19.0...v1.20.0

v1.19.0

Compare Source

What's Changed

• Switch serde dependency to serde_core by @​paolobarbolini in #​843
• Upgrade to 2021 edition and fix most clippy warnings by @​paolobarbolini in #​848
• Prepare for 1.19.0 release by @​KodrAus in #​849

Full Changelog: uuid-rs/uuid@v1.18.1...v1.19.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Sunday and Saturday ( * 0-3 * * 0,6 ) in timezone Australia/Perth, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[dependency-concierge]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks