Repository navigation
build(deps): Bump tokio from 1.53.2 to 1.53.3 - #153
Merged
Merged
Conversation
dependabot
Bot
added
dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
dependabot
Bot
force-pushed
the
dependabot/cargo/tokio-1.53.3
branch
from
October 18, 2026 19:25
aa77f13 to
1cbe063
Compare
jatmn
force-pushed
the
dependabot/cargo/tokio-1.53.3
branch
from
October 19, 2026 04:15
1cbe063 to
b720b12
Compare
6 of 7 tasks
jatmn
added a commit
that referenced
this pull request
Oct 19, 2026
## Summary The dependency audit seen on #153 reports nine published advisories already present on `main`: five in `quinn-proto 0.11.15` and four in `rustls 0.23.45`. The Tokio-only update does not change either dependency, so rerunning it cannot clear these findings. Update the lockfile to `quinn-proto 0.11.18` and `rustls 0.23.46`, including the RNG dependency changes required by Quinn. This is a separate fix based on `main`; #153's Tokio update remains independent. Once this lands, dependency PRs need to incorporate the updated base lockfile. No advisory ignores, checks, feature flags, or application code change. ## Contribution checklist - [x] I checked for duplicate or overlapping existing pull requests. #154 updates serde_json, #155 updates the TOML family, and #130 updates the release version; none repairs these dependencies. - [x] This PR does not introduce a new implementation language. - [x] This PR does not add Python for any reason. - [x] My PR title follows the Conventional Commit templates in AGENTS.md. ## Validation - Original lockfile: `cargo audit` reports 9 vulnerabilities. - Updated lockfile: `cargo audit` reports 0 vulnerabilities and 0 warnings against the same RustSec database. - `bash scripts/ci-preflight.sh` passed: source/release harnesses, Clippy, Dylint, 996 tests, build, docs, CLI smoke, diff checks, cargo-deny, and cargo-audit. - Durable preflight hooks are installed and enabled for commit and push. - GitHub CI passed: Source Checks (996 tests), Windows, Dylint, incremental mutation status, cargo-deny, cargo-audit, Socket checks, and release planning. Publication jobs are skipped as expected for this PR. - The remote audit log confirms 0 vulnerabilities, 0 warnings, and an empty ignore list. No Rust source diff; mutation testing follows the existing skip policy. ## Maintainer checklist - [x] Security-sensitive changes are called out in the summary. - [ ] This PR is ready for review by @jatmn. - [x] The PR should only be merged by @jatmn. Reviewed commit: `06992a96487e435b8533018252cdd22541cb05d2`.
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.53.2 to 1.53.3. - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.2...tokio-1.53.3) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.53.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
jatmn
force-pushed
the
dependabot/cargo/tokio-1.53.3
branch
from
October 19, 2026 15:47
b720b12 to
d9b6b2e
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps tokio from 1.53.2 to 1.53.3.
Release notes
Sourced from tokio's releases.
Commits
a85c3f5chore: prepare Tokio v1.53.3 (#8639)df4443eMerge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)f00b2e6chore: prepare Tokio v1.51.6 (#8637)482eaddruntime: record time wake when unparking tasks on current thread (#8595)55fbab7io: wake and dropDuplexStreamwakers outside the lock (#8618)c5e4d9eruntime: keep io_uring op alive when submission fails after push (#8185)0448618sync: maketracing_synctests synchronous (#8427)2bc1146net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)bb28a94Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)6b97913macros: avoidunreachable_codeinjoin!andtry_join!forInfallible...