Skip to content

fix(deps): update cargo minor/patch - #12000

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/cargo-minorpatch
Open

fix(deps): update cargo minor/patch#12000
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/cargo-minorpatch

Conversation

@renovate

@renovate renovate Bot commented Oct 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
aes dependencies minor 0.8 → 0.9
aes-gcm dependencies minor 0.10 → 0.11
arc-swap dependencies patch 1.9.2 → 1.9.3
argon2 (source) dependencies minor 0.5 → 0.6
async-trait dependencies patch 0.1.91 → 0.1.92
async-trait dev-dependencies patch 0.1.91 → 0.1.92
aws-lc-sys dependencies minor =0.43.0 → =0.46.0
aws-sdk-dynamodb dependencies minor =1.104.0 → =1.134.0
base64 dependencies minor 0.22 → 0.23
calamine dependencies minor 0.30.1 → 0.37.0
calamine dev-dependencies minor 0.30.1 → 0.37.0
cbc dependencies minor 0.1 → 0.2
deadpool-postgres dependencies patch 0.14.1 → 0.14.2
duckdb dependencies minor 1.10505.0 → 1.20000.0
encoding_rs (source) dependencies patch 0.8.35 → 0.8.42
flate2 dependencies patch 1.1.9 → 1.1.10
futures (source) dependencies patch 0.3.33 → 0.3.34
futures-util (source) dev-dependencies patch 0.3.33 → 0.3.34
grep (source) dependencies minor 0.3 → 0.4
gtk (source) dependencies minor 0.18 → 0.19
hyper-util (source) dependencies patch =0.1.20 → =0.1.21
ignore (source) dependencies patch 0.4.32 → 0.4.33
insta (source) dev-dependencies minor 1.48.0 → 1.49.0
libc dependencies patch 0.2.189 → 0.2.191
libloading dependencies minor 0.8 → 0.9
log dependencies patch 0.4.33 → 0.4.34
minijinja dependencies minor 2.21.0 → 2.24.0
minisign-verify dependencies minor 0.2.5 → 0.3.0
mongodb (source) dependencies minor 3.8.0 → 3.9.1
mysql_async dependencies patch 0.37.0 → 0.37.1
objc2 dependencies patch 0.6.4 → 0.6.5
pageant dependencies patch 0.2.1 → 0.2.5
pbkdf2 (source) dependencies minor 0.12 → 0.13
quick-xml dependencies minor 0.37 → 0.42
redis dependencies minor 1.7.1 → 1.8.0
reqwest dependencies minor 0.12 → 0.13
reqwest dependencies minor =0.12.28 → =0.13.5
reqwest dev-dependencies minor 0.12 → 0.13
rmcp dev-dependencies minor 3.5.1 → 3.7.0
rmcp dependencies minor 3.5.1 → 3.7.0
rumqttc dependencies minor 0.24 → 0.25
rusqlite dependencies minor 0.32 → 0.41
rusqlite dev-dependencies minor 0.32 → 0.41
russh dependencies minor 0.60 → 0.65
rust-embed dependencies minor 8.12.0 → 8.13.0
rust_decimal dependencies minor 1.42.1 → 1.43.0
rustls dependencies patch 0.23.43 → 0.23.46
rustls dev-dependencies patch 0.23.43 → 0.23.46
schemars (source) dependencies patch 1.2.2 → 1.2.3
serde_json dependencies patch 1.0.151 → 1.0.154
serde_json build-dependencies patch 1.0.151 → 1.0.154
serde_json dev-dependencies patch 1.0.151 → 1.0.154
sha1 dependencies minor 0.10 → 0.11
sha2 dependencies minor 0.10 → 0.11
sqlparser dependencies minor 0.62.0 → 0.63.0
sqlparser dependencies minor 0.62 → 0.63
sysinfo dependencies minor 0.32 → 0.39
sysinfo dev-dependencies minor 0.32 → 0.39
tauri (source) dev-dependencies minor 2.11.5 → 2.12.5
tauri (source) dependencies minor 2.11.5 → 2.12.5
tauri-build (source) build-dependencies minor 2.6.3 → 2.7.4
tauri-plugin-clipboard-manager dependencies minor 2.3.2 → 2.5.0
tauri-plugin-deep-link dependencies minor 2.4.9 → 2.6.2
tauri-plugin-dialog dependencies minor 2.7.2 → 2.8.3
tauri-plugin-fs dependencies minor 2.5.1 → 2.7.1
tauri-plugin-log dependencies minor 2.9.0 → 2.10.1
tauri-plugin-opener dependencies minor 2.5.4 → 2.7.2
tauri-plugin-shell dependencies minor 2.3.5 → 2.5.0
tauri-plugin-single-instance dependencies minor 2.4.3 → 2.5.4
tauri-plugin-updater dependencies minor =2.10.1 → =2.14.0
tauri-plugin-window-state dependencies minor 2.4.1 → 2.5.0
tiberius dependencies minor 0.12.3 → 0.13.0
tokio (source) dependencies minor 1.53.1 → 1.54.1
tokio (source) dependencies minor 1.53.2 → 1.54.1
tokio (source) dev-dependencies minor 1.53.1 → 1.54.1
tokio-postgres-rustls dependencies minor 0.13 → 0.14
tokio-rustls dev-dependencies patch 0.26.4 → 0.26.6
tokio-util (source) dependencies patch 0.7.19 → 0.7.20
tokio-util (source) dev-dependencies patch 0.7.19 → 0.7.20
toml dependencies minor 0.8 → 0.9
tower-http dependencies minor 0.6 → 0.7
unicode-ident dependencies patch 1.0.24 → 1.0.27
uuid dependencies minor 1.24.0 → 1.29.0
uuid dev-dependencies minor 1.24.0 → 1.29.0
webview2-com dependencies minor 0.38 → 0.39
windows dependencies minor 0.61 → 0.62
windows-core dependencies minor 0.61 → 0.100
zstd dependencies minor 0.13 → 0.14
zstd dev-dependencies minor 0.13 → 0.14

Release Notes

RustCrypto/block-ciphers (aes)

v0.9.3

Compare Source

v0.9.2

Compare Source

v0.9.1

Compare Source

v0.9.0

Compare Source

RustCrypto/AEADs (aes-gcm)

v0.11.1

Compare Source

v0.11.0

Compare Source

vorner/arc-swap (arc-swap)

v1.9.3

  • rwlock-strategy feature: RwLock<()> as an explicit, opt-in strategy
    (ArcSwapAny<Arc<T>, RwLock<()>>). DefaultStrategy is unchanged (#​210, #​211).
RustCrypto/password-hashes (argon2)

v0.6.0

Compare Source

dtolnay/async-trait (async-trait)

v0.1.92

Compare Source

  • Resolve double_must_use clippy lint in generated code (#​303)
marshallpierce/rust-base64 (base64)

v0.23.1

Compare Source

  • Make the tests build again on non-SIMD architectures

v0.23.0

Compare Source

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
    instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
    GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
    detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
tafia/calamine (calamine)

v0.37.0

Compare Source

Changed

  • Updated dependencies for release 0.37.0:

    • zip: 8.6 to 9.0, since the 8.x releases were yanked upstream. ZipError
      is part of the public error types, hence the minor version bump. PR #​741.
    • quick-xml: 0.41 to 0.42. PR #​711.
Added
  • Added workbook_properties() methods to Xlsx, Xlsb and Sheets to read
    the workbook document properties, such as creator, title, and creation date,
    into a new WorkbookProperties struct. Issue #​677 and PR #​685.
Fixed

  • Fixed an issue with XLS worksheets that contain nested substreams, such as an
    embedded chart, leaking the chart cells into the worksheet. PR #​701.

  • Fixed an issue where the column letters beyond Z in formulas where
    reconstructed incorrectly. PR #​699.

  • Fixed the XLSX 1904 date epoch flag being reset by an <x15:workbookPr>
    extension element. Issue #​706.

  • Fixed an issue to allow XLSX formula string results to decode Excel _xHHHH_
    escapes, in the same way as shared and inline strings. PR #​727.

  • Fixed an issue to allow XLSX hyperlink attributes to decode XML entities, so
    that & in a URL is no longer returned as &amp;. PR #​728.

  • Fixed an XLS panic on a PtgExp formula token with a truncated operand.
    PR #​707.

  • Fixed XLS parsing of PtgStr formula tokens with UTF-16 string operands.
    PR #​730.

  • Fixed XLS parsing to accept DIMENSIONS records with 2 extra trailing bytes.
    PR #​735.

  • Fixed the CFB reader to check the header sector counts before allocating, to
    avoid huge allocations on corrupt files. PR #​729.

  • Fixed the East Asian built-in number formats (ids 27-36 and 50-58) to be
    recognized as dates and times instead of numbers. PR #​734.

  • Fixed a panic in ExcelDateTime::to_ymd_hms_milli() for very large serial
    dates. Values are now limited to 9999-12-31. Issue #​722.

  • Fixed XLSX boolean cells to only accept 0, 1, false and true. Any
    other value is now an error instead of being read as true. Issue #​724.

v0.36.1

Compare Source

Fixed

  • Fixed a regression in 0.36.0 that broke Strict OOXML (ISO/IEC 29500)
    _rels/.rels links.

  • Fixed XLS string handling to preserve empty strings instead of discarding
    them. PR #​679.

  • Fixed XLSB workbook parsing to consume the body of unhandled workbook-global
    records. A leftover body was misread as the next record id, which either
    silently dropped the worksheet or panicked from an empty buffer. PR #​675.

v0.36.0

Compare Source

Added

  • Added an XLSX streaming API for cell and formula records, including shared
    formula metadata. There are two new APIs:
    XlsxCellReader::next_cell_with_formula() and
    XlsxCellReader::next_cell_with_formula_metadata(). Previously it required 2
    separate reads to get similar information. PR #​654.

  • Added a per-sheet, lazy XLSX API to read worksheet hyperlinks:
    Xlsx::hyperlinks_by_sheet_name() and Xlsx::hyperlinks_by_sheet_id(). Each
    hyperlink reports its anchor range (Dimensions), external target
    (URL/file/mailto), optional internal location, displayed text, and optional
    tooltip. PR #​659.

  • Extended the picture feature to also extract cell position information and
    the raw image data, and to handle newer Excel 365 style embedded images.
    PR #​652.

  • Added support for reading XLSX rich string (rstring) records. Issue #​655.

Changed

  • Updated dependencies and the minimum supported Rust version (MSRV) for
    release 0.36.0:

  • Performance improvements:

    • Custom zero-overhead attribute extraction and optimized local_name
      matching. PR #​621
    • Optimized buffer use for XLSB cell reads. PR #​662

  • Refactored and unified the merged-cell handling APIs. For historical reasons
    the XLSX methods for accessing merged cells were duplicated. This change
    introduces a cleaner API, deprecates the older methods, and aligns the XLS
    merged-cell handling with the new XLSX APIs. Issue #​536.

  • Made XLSX package path resolution more robust for non-standard package
    layouts. Issue #​638.

  • Changed XLSX <t> text handling in shared strings and inline strings to trim
    leading and trailing ASCII whitespace (space, tab, CR, LF) unless the element
    carries xml:space="preserve". See PR #​671 and PR #​673.

Fixed

  • Fixed XLSX shared-formula cell-name replacement to be more precise for defined
    names. PR #​664.

  • Fixed XLSX custom number-format detection to treat the * (fill/repeat)
    operator as escaping the character that follows it. PR #​667.

  • Improved the XLS error message when a file is too small to be a valid
    workbook. PR #​670.

v0.35.0

Compare Source

Added

  • Added has_1904_epoch() method to Xls/Xlsx/Xlsb structs to allow the user to
    determine which date epoch is in use by Excel. PR #​630.

  • Made RowDeserializer public to allow a custom DeserializeSeed.
    PR #​635.

Changed

  • Added deserialization examples. PR #​649.

  • Performance improvements:

Fixed

  • Fixed issue with redundant <v> value in inlineStr XLSX cells. Issue #​633.

  • Fixed issue when processing XLSX files to ignore namespace prefix when reading
    relation ids. Previously accepted only r: and relationships: prefixes.
    Issue #​634.

  • Fixed XLSX issue where rich text <r> elements were ignored after initial
    plain <t> elements. Issue #​636.

  • Fixed XLS issue where date format was ignored for formula values.
    Issue #​640.

  • Fixed XLSX shared formula expansion corrupting function names. The
    replace_cell_names() function treated LOG10 as a cell reference (column
    LOG, row 10). Issue #​644.

  • Fixed XLSX inlineStr issue for elements that contain CDATA. Issue #​648.

  • Fixed panic when parsing formulas in XLS BIFF5 workbooks.The parse_formula
    function decoded the non-3D PtgRef, PtgArea, PtgRefErr, and PtgAreaErr tokens
    assuming BIFF8 sizes. PR #​643.

  • Fixed XLS panic with unsupported formula functions. Handle unsupported XLS
    function ids as formula parse errors instead of indexing past the function
    table. Issue #​646.

v0.34.0

Compare Source

Changed

  • Updated benchmarking to uses the criterion.rs crate. This removed the
    requirement for using +nightly for cargo bench. PR #​620.

  • Updated dependencies for release 0.34.0:

  • Refactored CFB to resolve special case in the caller of fn get_chain.
    PR #​615.

  • Performance improvements:

    • Cell reader buffer reuse and optimized maps. PR #​611
    • Optimized XLS sector chain reads. PR #​609
    • Ensured fast_float2 is used at all float-parsing call sites. PR #​608
    • Cached path and attr lookups, reused buffers, minimized allocations. PR #​606
Fixed

  • Fixed capitalized workbook/book stream handling in XLS files. PR #​618.

  • Fixed issue where BIFF5 Lbl and ExternSheet records were incorrectly
    parsed as BIFF8. PR #​613.

  • Fixed VBA check_variable_record to handle optional records. PR #​614.

  • Fixed premature error when BIFF version is not Biff8 in XLS files. PR #​619.

  • Fixed issue where XLSX cells with an empty <v/> value returned a string with
    index 0 instead of an Empty value. Issue #​607.

  • Fixed millisecond rounding issue where 1000 milliseconds weren't rounded up to
    the next second. Issue #​602, PR #​605.

v0.33.0

Compare Source

Added
  • Added support for reading data from Pivot Tables, which involves reading data
    from the internal Pivot Cache. PR #​559.
Changed

  • Update dependencies for release 0.33.0:

    • zip: 4.2.0 -> 7.0.
    • atoi_simd: 0.16 -> 0.17
Fixed

  • Fixed potential memory exhaustion issue in ODS files that could be triggered
    via repeated empty rows/columns.

    The fix adds limits to prevent memory exhaustion from malicious ODS files that
    declare billions of repeated cells via table:number-rows-repeated and
    table:number-columns-repeated attributes.

    The change adds the following protection layers:

    • Add cap for columns per row at MAX_COLUMNS (16,384).
    • Add cap for total row repeats at MAX_ROWS (1,048,576).
    • Add cap for total cells at MAX_CELLS (100 million) in get_range().

    These limits match XLSX's existing row/column limits and prevent a 7KB
    malicious file from attempting to allocate memory for 17+ billion cells.

    When MAX_CELLS is exceeded, return OdsError::CellLimitExceeded instead
    of silently returning an empty range. This ensures callers are properly
    informed of truncation rather than receiving silent data loss.

    Issue #​594, PR #​596.

  • Fixed an issue where XLSX files with tables that had the internal insertRow
    attribute set returned a Dimensions object where the end row was less than
    the start row. This caused an assert/panic when trying to create a Range
    object to return the table range. Issue #​589.

  • Fixed an issue with XLSX files where worksheet tables used the unusual, but
    valid, absolute reference system like "/xl/tables/table1.xml" instead of the
    common Excel generated relative system "../tables/table1.xml". Issue #​587.

v0.32.0

Compare Source

Changed

  • Refactored VBA reading functions to be on-demand for better performance.

  • Simplified vba_project() function return type from Option<Result<T>> to
    Result<Option<T>> for more idiomatic error handling. This is a breaking
    change.

Fixed

  • Fixed out-of-memory vulnerabilities in XLS file parsing by bounding
    allocations.

  • Fixed and extended support for XLSX shared formulas with handling of ranges,
    absolute references, and column/row ranges in XLSX files.

  • Fixed XLSX issue with missing shared string sub-elements. Also improved error
    messages for shared string parsing issues.

  • Fixed acceptance of XLS XLUnicodeRichExtendedString records without reserved
    tags.

  • Fixed various edge cases in XLS handling that could lead to parsing errors.

v0.31.0

Compare Source

Changed

  • Upgraded quick-xml to v0.38. This was a significant change in quick-xml
    relative to v0.37 and required changes in calamine to entity handling. It
    also fixes EOL handling which may lead to regressions in calamine
    applications if they expected to see "\r\n" in strings instead of the
    correct (for XML and Excel) "\n".

    For most users these will be inconsequential changes but please take note
    before upgrading production code.

  • Renamed the "dates" feature flag to "chrono" since there is now some
    native date handling features without "chrono". The "chrono" flag is more
    specific and accurate. The "dates" flag is still supported as before for
    backward compatibility.

    This change also made some datatype methods related to date/times available in
    the "default" feature set. They were previously hidden unnecessarily behind
    the "dates/"chrono" flag.

Added
  • Added a conversion function to ExcelDateTime to convert the inner serial
    Excel datetime to standard year, month, date, hour, minute, second and
    millisecond components. Works for 1900 and 1904 epochs.
Fixed

  • Fixed issue where Excel xlsx shared formula failed if it contained Unicode
    characters. Issue #​553.

  • Fixed issue where Excel XML escapes in strings weren't unescaped. For example
    "_x000D_" -> "\r". Issue #​469.

RustCrypto/block-modes (cbc)

v0.2.1

Compare Source

v0.2.0

Compare Source

deadpool-rs/deadpool (deadpool-postgres)

v0.14.2

Compare Source

duckdb/duckdb-rs (duckdb)

v1.20000.0

Compare Source

What's Changed

New Contributors

Full Changelog: duckdb/duckdb-rs@v1.10505.0...v1.20000.0

v1.10506.1

Compare Source

What's Changed

Full Changelog: duckdb/duckdb-rs@v1.10506.0...v1.10506.1

v1.10506.0

Compare Source

What's Changed

New Contributors

Full Changelog: duckdb/duckdb-rs@v1.10505.0...v1.10506.0

hsivonen/encoding_rs (encoding_rs)

v0.8.42

Compare Source

v0.8.41

Compare Source

v0.8.40

Compare Source

rust-lang/flate2-rs (flate2)

v1.1.10

Compare Source

What's Changed
New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

rust-lang/futures-rs (futures)

v0.3.34

Compare Source

BurntSushi/ripgrep (grep)

v0.4.1

Compare Source

v0.4.0

Compare Source

=====
This is a new minor version release of ripgrep that includes a couple very
minor breaking changes, a few new features and lots of bug fixes.

This version of ripgrep upgrades its regex dependency from 0.1 to 0.2,
which includes a few minor syntax changes:

  • POSIX character classes now require double bracketing. Previously, the regex
    [:upper:] would parse as the upper POSIX character class. Now it parses
    as the character class containing the characters :upper:. The fix to this
    change is to use [[:upper:]] instead. Note that variants like
    [[:upper:][:blank:]] continue to work.
  • The character [ must always be escaped inside a character class.
  • The characters &, - and ~ must be escaped if any one of them are
    repeated consecutively. For example, [&], [\&], [\&\&], [&-&] are all
    equivalent while [&&] is illegal. (The motivation for this and the prior
    change is to provide a backwards compatible path for adding character class
    set notation.)

Feature enhancements:

  • Added or improved file type filtering for Crystal, Kotlin, Perl, PowerShell,
    Ruby, Swig
  • FEATURE #​83:
    Type definitions can now include other type definitions.
  • FEATURE #​243:
    BREAKING CHANGE: The --column flag now implies --line-number.
  • FEATURE #​263:
    Add a new --sort-files flag.
  • FEATURE #​275:
    Add a new --path-separator flag. Useful in cygwin.

Bug fixes:

  • BUG #​182:
    Redux: use more portable ANSI color escape sequences when possible.
  • BUG #​258:
    Fix bug that caused ripgrep's parallel iterator to spin and burn CPU.
  • BUG #​262:
    Document how to install shell completion files.
  • BUG #​266,
    BUG #​293:
    Fix handling of bold styling and change the default colors.
  • BUG #​268:
    Make lack of backreference support more explicit.
  • BUG #​271:
    Remove ~ dependency on clap.
  • BUG #​277:
    Fix cosmetic issue in globset crate docs.
  • BUG #​279:
    ripgrep did not terminate when -q/--quiet was given.
  • BUG #​281:
    BREAKING CHANGE: Completely remove ^C handling from ripgrep.
  • BUG #​284:
    Make docs for -g/--glob clearer.
  • BUG #​286:
    When stdout is redirected to a file, don't search that file.
  • BUG #​287:
    Fix ZSH completions.
  • BUG #​295:
    Remove superfluous memmap dependency in grep crate.
  • BUG #​308:
    Improve docs for -r/--replace.
  • BUG #​313:
    Update bytecount dep to latest version.
  • BUG #​318:
    Fix invalid UTF-8 output bug in Windows consoles.
gtk-rs/gtk3-rs (gtk)

v0.19.0

Features
  • Several new classes and interfaces can now be subclassed:
    • gtk::CellEditable
    • gtk::CellLayout
    • gtk::Editable
    • gtk::Grid
    • gtk::ListStore
    • gtk::Orientable
    • gtk::Scrollable

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/cargo-minorpatch branch from e1b45c9 to 114564e Compare October 13, 2026 15:28
@renovate

renovate Bot commented Oct 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: agents/drivers/duckdb/Cargo.lock
    Updating git repository `https://github.com/t8y2/mysql_async.git`
    Updating git repository `https://github.com/t8y2/tokio-postgres-gaussdb.git`
    Updating crates.io index
    Updating git repository `https://github.com/t8y2/rust_mysql_common.git`
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx-duckdb-driver v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/agents/drivers/duckdb)`
versions that meet the requirements `^0.13` are: 0.13.5, 0.13.4, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating git repository `https://github.com/zipg/mysql_async.git`
    Updating crates.io index
    Updating git repository `https://github.com/zipg/libsqlite3-hotbundle.git`
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: scripts/ai-proxy-12277/Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-ai-proxy-12277-proof v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/scripts/ai-proxy-12277)`
versions that meet the requirements `=0.13.5` are: 0.13.5

package `dbx-ai-proxy-12277-proof` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-no-provider, socks, stream, system-proxy, zstd


failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0 (/tmp/renovate/repos/github/t8y2/dbx/crates/dbx-core)`
    ... which satisfies path dependency `dbx-core` (locked to 0.1.0) of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`
versions that meet the requirements `^0.13` are: 0.13.4, 0.13.5, 0.13.3, 0.13.2, 0.13.1, 0.13.0

package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, h2, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-native-certs, rustls-no-provider, socks, stream, system-proxy, webpki-roots, zstd


all possible versions conflict with previously selected packages

  previously selected package `reqwest v0.13.2`
    ... which satisfies dependency `reqwest = "^0.13"` of package `dbx v0.6.54 (/tmp/renovate/repos/github/t8y2/dbx/src-tauri)`

failed to select a version for `reqwest` which could resolve this conflict
File name: Cargo.lock
    Updating crates.io index
error: package ID specification `serde_json@1.0.151` did not match any packages
help: there are similar package ID specifications:

  serde_json@1.0.154

@renovate
renovate Bot force-pushed the renovate/cargo-minorpatch branch 6 times, most recently from fb288e0 to d03dca8 Compare October 17, 2026 12:31
t8y2
t8y2 requested changes Oct 18, 2026
View reviewed changes

@t8y2 t8y2 left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the batch, but this PR can't merge as-is and should be re-scoped rather than rebased:

  1. Root Cargo.lock is missing. The renovate/artifacts step failed ("Artifact file update failure") — almost certainly because tiberius, rumqttc, tauri-plugin-updater, and webview2-com are bumped past their [patch.crates-io] vendored copies in vendor/ (0.12.3 / 0.24.0 / 2.10.1 / 0.38.2), so cargo update cannot resolve. Every Rust CI job at the current head fails immediately on the manifest/lock mismatch.

  2. This is not a minor/patch batch. It carries ~30 manifest bumps, at least 24 of them breaking — reqwest 0.12 → 0.13 is a major; rusqlite 0.32 → 0.40, sqlparser 0.62 → 0.63, tiberius, sysinfo 0.39, calamine 0.36, quick-xml 0.42, and the RustCrypto digest-0.11 wave (sha2/sha1/aes-gcm/argon2/pbkdf2) are 0.x breaking — with no source-code changes, so the workspace cannot compile against these versions regardless of lockfile state.

  3. Lockstep pins are bypassed. The tauri Rust updater plugin is bumped past its vendored patch while the @tauri-apps/* npm batch is untouched (per renovate.json these move together, manually), and the win7 fixture's aws-lc-sys =0.46.0 now drifts from the root lock's 0.43.0.

Suggested path: close and re-issue the cargo minor/patch group limited to genuine minor/patch updates (the secondary-lockfile items — futures 0.3.34, serde_json 1.0.154, tokio 1.53.3, tokio-util 0.7.20, uuid 1.28.0 — are fine; exclude aws-lc-sys), and add the vendored-patch crates plus the 0.x/major set (reqwest, rusqlite, sqlparser, tiberius, sysinfo, calamine, quick-xml, russh, RustCrypto crates, base64, toml) to the renovate ignore list or handle them as dedicated manual PRs with the required code migrations.

@renovate
renovate Bot force-pushed the renovate/cargo-minorpatch branch 13 times, most recently from 6931828 to 7666548 Compare October 22, 2026 14:06
t8y2
t8y2 requested changes Oct 22, 2026
View reviewed changes

@t8y2 t8y2 left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 2026-10-22 re-push does not address the review from Oct 18; requesting changes again.

  1. Still unmergeable: the root Cargo.lock (and agents/drivers/duckdb/Cargo.lock) is absent from the diff because renovate/artifacts cannot resolve — reqwest 0.13 removed the rustls-tls feature that dbx-core and 10+ manifests still request. Every Rust CI job fails on the manifest/lock mismatch.

  2. Vendored patch pins are bypassed again: tauri-plugin-updater =2.14.0, tiberius 0.13.0, rumqttc 0.25, and webview2-com 0.39 / windows-core 0.100 all exceed the [patch.crates-io] copies under vendor/ (2.10.1 / 0.12.3 / 0.24.0 / 0.38.2). The webview2-com/windows-core bump also contradicts the comment in src-tauri/Cargo.toml requiring 0.38.x alignment for the Win7 WebView2 loader, and moving the updater pin alone breaks the tauri npm/Rust lockstep that renovate.json keeps manual.

  3. Still not a minor/patch batch: ~24 of the 31 bumps are semver-incompatible (reqwest 0.12→0.13, rusqlite 0.32→0.40, sqlparser 0.62→0.63, calamine 0.37, sysinfo 0.39, quick-xml 0.42, the sha2/sha1/aes/aes-gcm/cbc/argon2/pbkdf2 wave, base64 0.23, toml 0.9, tower-http 0.7) with no source changes, so the workspace cannot compile against them regardless of lockfile state. The PR body's table is also stale relative to this head (duckdb/tauri/gtk entries are not in the diff).

Please close and re-issue the cargo minor/patch group limited to compatible updates (futures 0.3.34, serde_json 1.0.154, tokio 1.54.1, tokio-util 0.7.20, uuid 1.28.0 are fine), exclude aws-lc-sys in the win7 fixture, and handle the vendored-patch crates and the 0.x/major set as dedicated manual PRs with the required code migrations (reqwest 0.13 renames rustls-tls→rustls).

@renovate
renovate Bot force-pushed the renovate/cargo-minorpatch branch 6 times, most recently from c972c5d to 01b9105 Compare October 23, 2026 10:16
@renovate
renovate Bot force-pushed the renovate/cargo-minorpatch branch 2 times, most recently from 32ab809 to bea1795 Compare October 24, 2026 14:57
t8y2
t8y2 requested changes Oct 24, 2026
View reviewed changes

@t8y2 t8y2 left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-reviewed at bea1795. The 2026-10-25 re-push does not address the review from Oct 18, and CI now reports the exact consequence.

  1. Unmergeable: resolver failure, no lockfile. fast-checks ("Check workspace and standalone Cargo locks"), packages, windows-standard-check and duckdb-windows-driver all fail at this head with error: failed to select a version for reqwest / package dbx-core depends on reqwest with feature rustls-tls but reqwest does not have that feature. The root Cargo.lock and agents/drivers/duckdb/Cargo.lock are still absent from the diff, so every Rust job is dead on arrival.

  2. Vendored patch pins bypassed. tauri-plugin-updater =2.14.0, tiberius 0.13.0, rumqttc 0.25, webview2-com 0.39 and windows 0.62 all sit above the [patch.crates-io] copies under vendor/ (2.10.1 / 0.12.3 / 0.24.0 / 0.38.x / 0.61), and the webview2-com/windows bump contradicts the src-tauri/Cargo.toml comment that requires 0.38.x alignment for the Win7 WebView2 loader. Moving the updater pin alone also breaks the tauri npm/Rust lockstep that renovate.json keeps manual.

  3. Still not a minor/patch batch. ~24 of the 31 bumps are semver-incompatible (reqwest 0.13, rusqlite 0.40, sqlparser 0.63, calamine 0.37, sysinfo 0.39, quick-xml 0.42, the sha2/sha1/aes/aes-gcm/cbc/argon2/pbkdf2 wave, base64 0.23, toml 0.9, tower-http 0.7) with no source changes, so the workspace cannot compile against them regardless of lockfile state.

Please close this one and re-issue the cargo minor/patch group limited to compatible updates (futures 0.3.34, serde_json 1.0.154, tokio 1.54.1, tokio-util 0.7.20, uuid 1.28.0), with aws-lc-sys excluded in the win7 fixture; the vendored-patch crates and the 0.x/major set need dedicated manual PRs with their code migrations (reqwest 0.13 renames the rustls-tls feature to rustls).

@renovate
renovate Bot force-pushed the renovate/cargo-minorpatch branch from bea1795 to bdc46f2 Compare October 24, 2026 19:14
t8y2
t8y2 requested changes Oct 25, 2026
View reviewed changes

@t8y2 t8y2 left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

request changes: this batch can't merge as-is and needs re-scoping rather than another rebase.

The reqwest bump alone breaks resolution. 0.13 replaced rustls-tls with rustls / rustls-no-provider — the 0.13.5 feature list is rustls, rustls-no-provider, rustls-aws-lc-rs, rustls-platform-verifier, with no rustls-tls left (https://docs.rs/crate/reqwest/0.13.5/features). Twelve manifests still request rustls-tls (crates/dbx-core/Cargo.toml:61, dbx-ai-provider:13, dbx-driver-agent:22, dbx-driver-elasticsearch:13, dbx-driver-mongodb:18, dbx-driver-support:20, dbx-drivers:61, dbx-mcp:36, dbx-platform:15, dbx-plugin-runtime:24, dbx-web:46, scripts/ai-proxy-12277:11), so the dependents cannot resolve. That is why the root Cargo.lock, agents/drivers/duckdb/Cargo.lock and scripts/ai-proxy-12277/Cargo.lock never regenerate and every --locked job fails on manifest/lock mismatch.

The [patch.crates-io] crates are the second problem. tiberius = "0.13.0", rumqttc = "0.25", tauri-plugin-updater = "=2.14.0" and webview2-com = "0.39" all sit above their vendored copies (vendor/tiberius 0.12.3, vendor/rumqttc 0.24.0, vendor/tauri-plugin-updater 2.10.1, vendor/webview2-com-sys 0.38.2), so the patch either fails to apply or silently drops the vendored fixes (SQL Server ATTENTION, MQTT 3.1 CONNECT, signed offline update, Win7 WebView2 loader). .github/fixtures/win7-aws-lc-cache/Cargo.toml:8 also drifts to =0.46.0 while the app still links aws-lc-sys 0.43.0.

Scope-wise, 29 of the 32 bumps are pre-1.0-minor or major and none carries source changes: reqwest 0.12→0.13, rusqlite 0.32→0.41, sqlparser 0.62→0.63, sysinfo 0.32→0.39, russh 0.60→0.64, gtk 0.18→0.19, calamine 0.30→0.37, the RustCrypto digest-0.11 wave, … Several also raise the floor past the declared rust-version = "1.88.0": rusqlite 0.41 needs 1.89, sysinfo 0.39 needs 1.95, russh 0.64 needs 1.89, gtk 0.19 needs 1.92, and windows-core = "0.100" (published, but rustc 1.95) contradicts the 0.61 alignment comment in src-tauri/Cargo.toml:105-109. Only hyper-util 0.1.20→0.1.21 is a clean compatible bump.

Please close this and re-issue the group limited to compatible updates (futures 0.3.34, serde_json 1.0.154, tokio 1.54.1, tokio-util 0.7.20, uuid 1.28.0), with aws-lc-sys excluded from the win7 fixture. The vendored-patch crates and the 0.x/major set belong on renovate's ignore list or in per-crate manual PRs with their code migrations.

@renovate
renovate Bot force-pushed the renovate/cargo-minorpatch branch from bdc46f2 to 399e624 Compare October 25, 2026 15:39
t8y2
t8y2 requested changes Oct 25, 2026
View reviewed changes

@t8y2 t8y2 left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm going to request changes again. The new head (399e6247) is a fresh commit, but it still carries the same batch and the blocker from the last review is unchanged.

  1. reqwest is still 0.13 in all twelve manifests, still asking for rustls-tls. The resolver says it plainly at this head:

    error: failed to select a version for `reqwest`.
    ... required by package `dbx-core v0.1.0`
package `dbx-core` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: ... rustls, rustls-native-certs, rustls-no-provider, ... webpki-roots ...

    fast-checks, packages, duckdb-windows-driver and windows-standard-check all die on that line (the rust, agents and ci jobs just gate on it), so the root Cargo.lock, agents/drivers/duckdb/Cargo.lock and scripts/ai-proxy-12277/Cargo.lock are still not regenerated — the root lock still pins reqwest 0.12.28, sqlparser 0.62.0, rusqlite 0.32.1, tiberius 0.12.3, calamine 0.30.1 and sysinfo 0.32.1.

    Evidence: reqwest 0.13.5 feature list — features include rustls, rustls-no-provider, webpki-roots; there is no rustls-tls.

    If you keep reqwest in the batch, the rename is rustls-tls → rustls (or rustls-no-provider) in those twelve manifests, plus regenerate the three locks. Note that 0.13's rustls pulls the platform verifier + aws-lc-rs while 0.12's rustls-tls used bundled webpki roots, so decide explicitly whether you also want webpki-roots. That is a migration PR of its own, not a rebase of this one.

  2. The [patch.crates-io] pins are still bypassed — tiberius 0.13.0 (vendor 0.12.3), rumqttc 0.25 (vendor 0.24.0), tauri-plugin-updater =2.14.0 (vendor 2.10.1), and webview2-com 0.39 / windows 0.62 / windows-core 0.100 against the vendored webview2-com-sys 0.38.2 — which also contradicts the src-tauri/Cargo.toml comment that these must stay on 0.38.x/0.61 for the Win7 WebView2 loader. The fixture bump to aws-lc-sys =0.46.0 breaks the prebuilt cache job at this head (windows-win7-bundle: "AWS-LC did not create the required headers and static library.").

  3. This is still not a minor/patch batch: roughly 30 of the bumps are semver-incompatible (reqwest, rusqlite, sqlparser, calamine, quick-xml, sysinfo, russh, tiberius, tower-http, toml, base64, the RustCrypto digest/cipher wave, zstd, gtk, windows-core …), none has a source change, and several raise the MSRV above the declared rust-version = "1.88.0" (sysinfo 0.39 and windows-core 0.100 need 1.95, gtk 0.19 needs 1.92, rusqlite 0.41 and russh 0.64 need 1.89).

Please close this PR and re-issue the cargo minor/patch group limited to genuinely compatible updates. The vendored-patch crates and the 0.x/major set should go on renovate's ignore list or into per-crate manual PRs with their code migrations. The PR body also looks stale relative to this head — the tauri/rmcp/uuid rows in the table are not in the diff.

@renovate
renovate Bot force-pushed the renovate/cargo-minorpatch branch from 399e624 to 9306469 Compare October 25, 2026 16:46
@renovate
renovate Bot force-pushed the renovate/cargo-minorpatch branch from 9306469 to f0e4a78 Compare October 25, 2026 17:06

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@t8y2 t8y2 t8y2 requested changes

Requested changes must be addressed to merge this pull request.

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@t8y2