chore(deps): bump the cargo-deps group across 1 directory with 9 updates by dependabot[bot] · Pull Request #4081 · yewstack/yew

dependabot · 2026-03-27T03:16:48Z

Bumps the cargo-deps group with 9 updates in the / directory:

Package	From	To
tracing-subscriber	`0.3.22`	`0.3.23`
tokise	`0.2.0`	`0.2.1`
toml	`1.0.6+spec-1.1.0`	`1.0.7+spec-1.1.0`
gloo-net	`0.6.0`	`0.7.0`
yew-autoprops	`0.4.1`	`0.5.0`
gloo-timers	`0.3.0`	`0.4.0`
pulldown-cmark	`0.13.1`	`0.13.3`
fake	`4.4.0`	`5.1.0`
env_logger	`0.11.9`	`0.11.10`

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

54ede4d chore: prepare tracing-subscriber 0.3.23 (#3490)
37558d5 subscriber: allow ansi sanitization to be disabled (#3484)
efc690f core: add missing const (#3449)
0c32367 core: Use const initializers instead of once_cell
9feb241 docs: add arcswap reload crate to related (#3442)
2d55f6f chore: prepare tracing 0.1.44 (#3439)
10a9e83 chore: prepare tracing-core 0.1.36 (#3440)
ee82cf9 tracing: fix record_all panic (#3432)
9978c36 chore: prepare tracing-mock 0.1.0-beta.3 (#3429)
See full diff in compare view

Updates tokise from 0.2.0 to 0.2.1

Release notes

Sourced from tokise's releases.

v0.2.1

What's Changed

Fix nightly doc build by removing the removed doc_auto_cfg feature flag (merged into doc_cfg in Rust 1.92.0) by @Madoshakalaka

Modernize CI: replace archived actions-rs actions with dtolnay/rust-toolchain and direct cargo commands, bump actions/checkout to v6

Fixes

yewstack/tokise#15

Full Changelog: yewstack/tokise@v0.2.0...v0.2.1

Commits

50a11d1 v0.2.1
3374695 Fix nightly doc build and modernize CI
See full diff in compare view

Updates toml from 1.0.6+spec-1.1.0 to 1.0.7+spec-1.1.0

Commits

9079072 chore: Release
06f2ba3 docs: Update changelog
7fc5ce1 chore: Update to winnow 1.0.0 (#1121)
bf5a157 chore: Update to winnow 1.0.0
0aeb2df chore(deps): Update Rust crate snapbox to v1 (#1112)
9a34541 chore(deps): Update Rust crate snapbox to v1
a576cae docs(gh): Add sponsor link
See full diff in compare view

Updates gloo-net from 0.6.0 to 0.7.0

Release notes

Sourced from gloo-net's releases.

gloo-net 0.7.0

MSRV updated to 1.82

Breaking

Remove Clone implementation for EventSource (#417) by @vpochapuis Cloning had a bug where dropping any clone would disconnect all instances.

New Features

Add EventSourceBuilder for configuring EventSource with credentials (#530) by @zn3x

Add WebSocket::buffered_amount (#510) by @vi

Add PartialEq, Eq, Hash derives to CloseEvent (#504) by @Alexi24601

Fixes

Fix RequestBuilder::build producing a URL with an extra & (#497) by @hmacias-avaya

Fix WebSocket binary send panicking when SharedArrayBuffer is enabled (#502) by @Fedeparma74

Maintenance

Bump pin-project to 1.1 and http to 1.4 (#536) by @Madoshakalaka

Changelog

Sourced from gloo-net's changelog.

Version 0.7.0

Remove Clone implementation for EventSource (#417) by @vpochapuis Cloning had a bug where dropping any clone would disconnect all instances.

Add EventSourceBuilder for configuring EventSource with credentials (#530) by @zn3x

Add WebSocket::buffered_amount (#510) by @vi

Add PartialEq, Eq, Hash derives to CloseEvent (#504) by @Alexi24601

Fix RequestBuilder::build producing a URL with an extra & (#497) by @hmacias-avaya

Fix WebSocket binary send panicking when SharedArrayBuffer is enabled (#502) by @Fedeparma74

Update MSRV to 1.82 (#505) by @martinfrances107

Bump pin-project to 1.1 and http to 1.4 (#536) by @Madoshakalaka

Commits

d69fcff chore: release gloo-net 0.7.0
7a57df3 chore: release gloo-file 0.4.0
2685476 fix: correct gloo-history category slugs
b1d5129 fix: correct gloo-storage category slugs
8316f33 fix: correct gloo-render category slugs
0734551 chore: release gloo-console 0.4.0, gloo-dialogs 0.3.0, gloo-events 0.3.0, glo...
e6280d4 chore: release gloo-utils 0.3.0
cca8089 chore: release gloo-worker-macros 0.2.0 and gloo-worker 0.6.0
a8af99c chore: update rust dependencies (#536)
0de5865 fix(net)!: remove EventSource Clone implementation (#417)
Additional commits viewable in compare view

Updates yew-autoprops from 0.4.1 to 0.5.0

Release notes

Sourced from yew-autoprops's releases.

v0.5.0

MSRV raised to 1.85.0 to align with yew 0.23

Breaking

Reference types in function component signatures were ignored but now they will be copied to the generated struct. (#13 by @kirillsemyonkin )

This helps with ergonomics: the very ugly &&'static str pattern can be simplified to just &'static str now. So this compiles just fine now:
#[autoprops]
#[component]
pub fn Foo(bar: &'static str) -> Html {
  // ...
}
#[component]
pub fn App() -> Html {
html! {
<Foo bar="bar" />
}
}
This is almost never breaking, unless you had this kind of code for some reason:
#[autoprops]
#[component]
pub fn Foo(bar: &'static String) -> Html { // the `&'static` used to be stripped by autoprops
  // ...
}
#[component]
pub fn App() -> Html {
html! {
<Foo bar={String::from("bar")} /> // so that you could just pass a String
}
}
Now you have to pass some kind of Box::leak(Box::new(String::from("bar"))) fr fr

Commits

3b0b092 chore: Release yew-autoprops version 0.5.0 (#15)
53eeb0b Treat some references differently for ergonomics (#13)
018b8be Update for yew 0.23: use #[component], modernize CI (#14)
See full diff in compare view

Updates gloo-timers from 0.3.0 to 0.4.0

Release notes

Sourced from gloo-timers's releases.

gloo-timers 0.4.0

MSRV updated to 1.82

Changelog

Sourced from gloo-timers's changelog.

Version 0.4.0

Update MSRV to 1.82 (#505) by @martinfrances107

Commits

c8feeb1 chore: release gloo-timers 0.4.0
d69fcff chore: release gloo-net 0.7.0
7a57df3 chore: release gloo-file 0.4.0
2685476 fix: correct gloo-history category slugs
b1d5129 fix: correct gloo-storage category slugs
8316f33 fix: correct gloo-render category slugs
0734551 chore: release gloo-console 0.4.0, gloo-dialogs 0.3.0, gloo-events 0.3.0, glo...
e6280d4 chore: release gloo-utils 0.3.0
cca8089 chore: release gloo-worker-macros 0.2.0 and gloo-worker 0.6.0
a8af99c chore: update rust dependencies (#536)
Additional commits viewable in compare view

Updates pulldown-cmark from 0.13.1 to 0.13.3

Release notes

Sourced from pulldown-cmark's releases.

0.13.3

Bug Fixes

Fix Wikilink offset.

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.2...v0.13.3

0.13.2

Security

Bump tar to 0.4.45.

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.1...v0.13.2

Commits

b0e6f65 chore: bump pulldown-cmark version in Cargo.lock
ed2ee59 chore: bump pulldown-cmark version
676afd2 fix: wrong wikilink end-offset
bad7926 chore: bump pulldown-cmark in Cargo.lock
f67922d fix: bump tar to 0.4.45 for security purposes
See full diff in compare view

Updates fake from 4.4.0 to 5.1.0

Release notes

Sourced from fake's releases.

v5.0.0

What's Changed

Add dutch translation by @mss-cyclist in cksac/fake-rs#251

fix time OffsetDateTime by @cksac in cksac/fake-rs#253

fix: include Cargo.lock in git by @Rolv-Apneseth in cksac/fake-rs#257

Implement quiet flag to suppress generating info text by @heinthanth in cksac/fake-rs#258

Update to latest ferroid by @s0l0ist in cksac/fake-rs#259

Update ferroid and remove transient dep by @s0l0ist in cksac/fake-rs#261

add more zh_cn impl by @lawrance599 in cksac/fake-rs#262

chore: bump ferroid to latest stable 1.0 by @s0l0ist in cksac/fake-rs#265

Add turkish examples by @metinbinbir in cksac/fake-rs#264

feat: add persian (Iran) language by @A1Gard in cksac/fake-rs#263

removed space from CityName and CitySuffix in ADDRESS_CITY_TPL by @alvaromuir in cksac/fake-rs#255

Upgrade glam to latest version by @thomas-tribus in cksac/fake-rs#267

Bump glam to 0.32 and update lock deps by @zpervan in cksac/fake-rs#268

chore: bump rand(_core, _chacha) to 0.10 by @wuvs in cksac/fake-rs#269

New Contributors

@mss-cyclist made their first contribution in cksac/fake-rs#251

@Rolv-Apneseth made their first contribution in cksac/fake-rs#257

@heinthanth made their first contribution in cksac/fake-rs#258

@lawrance599 made their first contribution in cksac/fake-rs#262

@metinbinbir made their first contribution in cksac/fake-rs#264

@A1Gard made their first contribution in cksac/fake-rs#263

@alvaromuir made their first contribution in cksac/fake-rs#255

@wuvs made their first contribution in cksac/fake-rs#269

Full Changelog: cksac/fake-rs@v4.4.0...v5.0.0

Commits

See full diff in compare view

Updates env_logger from 0.11.9 to 0.11.10

Release notes

Sourced from env_logger's releases.

v0.11.10

[0.11.10] - 2026-03-23

Internal

Update dependencies

Changelog

Sourced from env_logger's changelog.

[0.11.10] - 2026-03-23

Internal

Update dependencies

Commits

41320bf chore: Release
de8c74f docs: Update changelog
d550741 docs(gh): Add sponsor link
458b075 chore(deps): Update Rust Stable to v1.94 (#401)
8bc3fc3 Merge pull request #400 from epage/update
143fa64 chore: Upgrade incompatible
b687a24 chore: Upgrade compatible
8cf1ba9 Merge pull request #397 from rust-cli/renovate/crate-ci-typos-1.x
094ecf7 Merge pull request #396 from rust-cli/renovate/crate-ci-committed-1.x
34ad626 chore(deps): Update pre-commit hook crate-ci/typos to v1.44.0
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
pulldown-cmark	[>= 0.11.a, < 0.12]
pulldown-cmark	[>= 0.10.a, < 0.11]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo-deps group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` | | [tokise](https://github.com/yewstack/tokise) | `0.2.0` | `0.2.1` | | [toml](https://github.com/toml-rs/toml) | `1.0.6+spec-1.1.0` | `1.0.7+spec-1.1.0` | | [gloo-net](https://github.com/rustwasm/gloo) | `0.6.0` | `0.7.0` | | [yew-autoprops](https://github.com/yewstack/yew-autoprops) | `0.4.1` | `0.5.0` | | [gloo-timers](https://github.com/rustwasm/gloo) | `0.3.0` | `0.4.0` | | [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark) | `0.13.1` | `0.13.3` | | [fake](https://github.com/cksac/fake-rs) | `4.4.0` | `5.1.0` | | [env_logger](https://github.com/rust-cli/env_logger) | `0.11.9` | `0.11.10` | Updates `tracing-subscriber` from 0.3.22 to 0.3.23 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23) Updates `tokise` from 0.2.0 to 0.2.1 - [Release notes](https://github.com/yewstack/tokise/releases) - [Commits](yewstack/tokise@v0.2.0...v0.2.1) Updates `toml` from 1.0.6+spec-1.1.0 to 1.0.7+spec-1.1.0 - [Commits](toml-rs/toml@toml-v1.0.6...toml-v1.0.7) Updates `gloo-net` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/rustwasm/gloo/releases) - [Changelog](https://github.com/ranile/gloo/blob/master/CHANGELOG.md) - [Commits](ranile/gloo@0.6.0...gloo-net-v0.7.0) Updates `yew-autoprops` from 0.4.1 to 0.5.0 - [Release notes](https://github.com/yewstack/yew-autoprops/releases) - [Commits](yewstack/yew-autoprops@v0.4.1...v0.5.0) Updates `gloo-timers` from 0.3.0 to 0.4.0 - [Release notes](https://github.com/rustwasm/gloo/releases) - [Changelog](https://github.com/ranile/gloo/blob/master/CHANGELOG.md) - [Commits](ranile/gloo@0.3.0...gloo-timers-v0.4.0) Updates `pulldown-cmark` from 0.13.1 to 0.13.3 - [Release notes](https://github.com/raphlinus/pulldown-cmark/releases) - [Commits](pulldown-cmark/pulldown-cmark@v0.13.1...v0.13.3) Updates `fake` from 4.4.0 to 5.1.0 - [Release notes](https://github.com/cksac/fake-rs/releases) - [Commits](https://github.com/cksac/fake-rs/commits) Updates `env_logger` from 0.11.9 to 0.11.10 - [Release notes](https://github.com/rust-cli/env_logger/releases) - [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md) - [Commits](rust-cli/env_logger@v0.11.9...v0.11.10) --- updated-dependencies: - dependency-name: tracing-subscriber dependency-version: 0.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: tokise dependency-version: 0.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: toml dependency-version: 1.0.7+spec-1.1.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: gloo-net dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: yew-autoprops dependency-version: 0.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: gloo-timers dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: pulldown-cmark dependency-version: 0.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: fake dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo-deps - dependency-name: env_logger dependency-version: 0.11.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-03-27T03:19:40Z

Benchmark - core

Yew Master

vnode           fastest       │ slowest       │ median        │ mean          │ samples │ iters
╰─ vnode_clone  2.127 ns      │ 2.217 ns      │ 2.129 ns      │ 2.132 ns      │ 100     │ 1000000000

Pull Request

vnode           fastest       │ slowest       │ median        │ mean          │ samples │ iters
╰─ vnode_clone  2.094 ns      │ 3.344 ns      │ 2.097 ns      │ 2.124 ns      │ 100     │ 1000000000

github-actions · 2026-03-27T03:40:00Z

Benchmark - SSR

Yew Master

Details

Benchmark	Round	Min (ms)	Max (ms)	Mean (ms)	Standard Deviation
Baseline	10	257.917	259.084	258.163	0.403
Hello World	10	450.359	455.675	451.819	1.462
Function Router	10	39061.512	39477.225	39340.680	153.591
Concurrent Task	10	1005.550	1006.871	1006.092	0.479
Many Providers	10	1022.007	1065.347	1046.625	13.254

Pull Request

Details

Benchmark	Round	Min (ms)	Max (ms)	Mean (ms)	Standard Deviation
Baseline	10	257.793	258.334	258.027	0.194
Hello World	10	455.759	459.716	457.586	1.205
Function Router	10	39165.043	39515.556	39345.642	103.933
Concurrent Task	10	1005.185	1006.658	1005.874	0.516
Many Providers	10	1039.403	1060.454	1054.457	6.113

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Mar 27, 2026

github-actions bot approved these changes Mar 27, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the cargo-deps group across 1 directory with 9 updates#4081

chore(deps): bump the cargo-deps group across 1 directory with 9 updates#4081
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/cargo-deps-8679a4aa13

dependabot bot commented on behalf of github Mar 27, 2026

Uh oh!

github-actions bot commented Mar 27, 2026

Uh oh!

github-actions bot commented Mar 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 27, 2026

tracing-subscriber 0.3.23

Fixed

v0.2.1

What's Changed

Fixes

gloo-net 0.7.0

Breaking

New Features

Fixes

Maintenance

Version 0.7.0

v0.5.0

Breaking

gloo-timers 0.4.0

Version 0.4.0

0.13.3

Bug Fixes

0.13.2

Security

v5.0.0

What's Changed

New Contributors

v0.11.10

[0.11.10] - 2026-03-23

Internal

[0.11.10] - 2026-03-23

Internal

Uh oh!

github-actions bot commented Mar 27, 2026

Benchmark - core

Yew Master

Pull Request

Uh oh!

github-actions bot commented Mar 27, 2026

Benchmark - SSR

Yew Master

Pull Request

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants