mward4/OpenPXE
1
0 Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 41 Wiki Activity

Dependency updates #1

New Issue
Open
opened 2026-09-20 02:56:58 -04:00 by mward4 · 0 comments
mward4 commented 2026-09-20 02:56:58 -04:00
Owner
Copy link
Copy source

24 routine bumps, 7 breaking changes, 4 base images, and a newer Rust.

A further 72 transitive crates have newer releases blocked behind a breaking boundary upstream has not crossed yet. They are omitted below because nothing here can move them.

Direct dependencies — cargo update covers these

Crate In use Latest
anyhow 1.0.102 1.0.104
async-trait 0.1.89 0.1.92
bcrypt 0.19.1 0.19.3
bytes 1.11.1 1.12.1
clap 4.6.1 4.6.7
flate2 1.1.9 1.1.10
futures 0.3.32 0.3.34
hyper 1.10.1 1.12.0
lettre 0.11.22 0.11.23
nfs3_client 0.9.0 0.9.1
nfs3_types 0.5.2 0.5.3
roxmltree 0.21.1 0.21.2
russh-sftp 2.3.0 3.0.1
rust-embed 8.11.0 8.13.0
serde 1.0.228 1.0.229
serde_json 1.0.150 1.0.154
sha2 0.11.0 0.11.1
socket2 0.6.4 0.6.5
thiserror 2.0.18 2.0.21
time 0.3.47 0.3.55
tokio 1.52.3 1.54.1
tokio-stream 0.1.18 0.1.19
tokio-util 0.7.18 0.7.20
uuid 1.23.3 1.29.0

Direct dependencies — breaking, a human has to decide

These cross a version boundary where semver allows anything to change. cargo update will not touch them: Cargo.toml needs editing and the changelog reading.

Crate In use Latest
base64 0.22.1 0.23.1
bergshamra 0.5.1 0.11.0
parking_lot 0.12.5 0.13.0
reqwest 0.12.28 0.13.5
russh 0.61.2 0.65.0
toml 0.8.23 0.9.8
tower-http 0.6.11 0.7.1

Rust

What Declared Latest Note
Dockerfile RUST_VERSION 1.95 1.99.1 the shipped binary is built by an older compiler
rust-toolchain.toml channel stable 1.99.1 tracks stable, so it is already current

Minimum supported Rust version: 1.95.

Base images

Image In use Latest Note
debian 12-slim 13.7.0 breaking — needs review
debian 12-slim 13.7.0 breaking — needs review
rust 1.95-bookworm 1.99.1
debian 12-slim 13.7.0 breaking — needs review

Checked every 6 hours by .gitea/workflows/dependency-check.yml.

Rewritten by .gitea/workflows/dependency-check.yml every 6 hours, so this is always the latest report rather than a pile of comments.

24 routine bumps, 7 breaking changes, 4 base images, and a newer Rust. _A further 72 transitive crates have newer releases blocked behind a breaking boundary upstream has not crossed yet. They are omitted below because nothing here can move them._ ### Direct dependencies — `cargo update` covers these | Crate | In use | Latest | | --- | --- | --- | | `anyhow` | `1.0.102` | `1.0.104` | | `async-trait` | `0.1.89` | `0.1.92` | | `bcrypt` | `0.19.1` | `0.19.3` | | `bytes` | `1.11.1` | `1.12.1` | | `clap` | `4.6.1` | `4.6.7` | | `flate2` | `1.1.9` | `1.1.10` | | `futures` | `0.3.32` | `0.3.34` | | `hyper` | `1.10.1` | `1.12.0` | | `lettre` | `0.11.22` | `0.11.23` | | `nfs3_client` | `0.9.0` | `0.9.1` | | `nfs3_types` | `0.5.2` | `0.5.3` | | `roxmltree` | `0.21.1` | `0.21.2` | | `russh-sftp` | `2.3.0` | `3.0.1` | | `rust-embed` | `8.11.0` | `8.13.0` | | `serde` | `1.0.228` | `1.0.229` | | `serde_json` | `1.0.150` | `1.0.154` | | `sha2` | `0.11.0` | `0.11.1` | | `socket2` | `0.6.4` | `0.6.5` | | `thiserror` | `2.0.18` | `2.0.21` | | `time` | `0.3.47` | `0.3.55` | | `tokio` | `1.52.3` | `1.54.1` | | `tokio-stream` | `0.1.18` | `0.1.19` | | `tokio-util` | `0.7.18` | `0.7.20` | | `uuid` | `1.23.3` | `1.29.0` | ### Direct dependencies — breaking, a human has to decide These cross a version boundary where semver allows anything to change. `cargo update` will not touch them: `Cargo.toml` needs editing and the changelog reading. | Crate | In use | Latest | | --- | --- | --- | | `base64` | `0.22.1` | `0.23.1` | | `bergshamra` | `0.5.1` | `0.11.0` | | `parking_lot` | `0.12.5` | `0.13.0` | | `reqwest` | `0.12.28` | `0.13.5` | | `russh` | `0.61.2` | `0.65.0` | | `toml` | `0.8.23` | `0.9.8` | | `tower-http` | `0.6.11` | `0.7.1` | ### Rust | What | Declared | Latest | Note | | --- | --- | --- | --- | | Dockerfile `RUST_VERSION` | `1.95` | `1.99.1` | **the shipped binary is built by an older compiler** | | `rust-toolchain.toml` channel | `stable` | `1.99.1` | tracks stable, so it is already current | Minimum supported Rust version: `1.95`. ### Base images | Image | In use | Latest | Note | | --- | --- | --- | --- | | `debian` | `12-slim` | `13.7.0` | **breaking — needs review** | | `debian` | `12-slim` | `13.7.0` | **breaking — needs review** | | `rust` | `1.95-bookworm` | `1.99.1` | | | `debian` | `12-slim` | `13.7.0` | **breaking — needs review** | _Checked every 6 hours by `.gitea/workflows/dependency-check.yml`._ --- Rewritten by `.gitea/workflows/dependency-check.yml` every 6 hours, so this is always the latest report rather than a pile of comments.
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
appleuzer mward4 (Miles Ward)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mward4/OpenPXE#1