Update rust dependencies (dev) (major) - #379

v1.3.1

Compare Source

Full Changelog: imbolc/axum-client-ip@v1.3.0...v1.3.1

v1.2.0

Compare Source

What's Changed

• Display imp for ClientIpSource by @​calum4 in #​38
• Make tokio optional by @​sagikazarmark in #​40

Full Changelog: imbolc/axum-client-ip@v1.1.3...v1.2.0

v1.1.3

Compare Source

Fix installation without default features

Full Changelog: imbolc/axum-client-ip@v1.1.2...v1.1.3

v1.1.2

docs.rs features-related improvements

Full Changelog: imbolc/axum-client-ip@v1.1.0...v1.1.2

v1.1.0

Compare Source

• for appropriate headers added a check for a single occurrence
• the IP extraction logic is extracted into a framework-independent client-ip crate
• the RightmostForwarded extractor is hidden behind a non-default feature

Full Changelog: imbolc/axum-client-ip@v1.0.0...v1.1.0

v1.0.0

Compare Source

• Removed InsecureClientIp and related "leftmost" IP logic. The library now focuses solely on secure extraction
  based on trusted headers.
• Renamed SecureClientIp to ClientIp.
• Renamed SecureClientIpSource to ClientIpSource.

The changes are triggered by "rightmost" IP extraction bug.

Full Changelog: imbolc/axum-client-ip@v0.7.0...v1.0.0

v10.0.2

Compare Source

v10.0.1: vergen 10.0.1

Compare Source

vergen 10.0.1

Patch release adding a new error-fallback knob, a builder-access API addition, dependency updates, and a security-audit refresh.

New features

• VERGEN_DEFAULT_ON_ERROR fallback (#​509) — When building outside a git worktree (or any time an instruction cannot be generated), the new VERGEN_DEFAULT_ON_ERROR env var and Emitter::default_on_error() builder method populate missing instructions with the idempotent default (VERGEN_IDEMPOTENT_OUTPUT) so env!("VERGEN_GIT_SHA") keeps compiling — while builds inside a real worktree still emit real values.
• all() builder accessor (#​513) — Exposes Build::all(), Cargo::all(), Rustc::all(), and Sysinfo::all() as public methods that return the builder with all instructions enabled, enabling subtractive modification (turn all on, then selectively disable).

Dependency updates

• bon 3.9.1 → 3.9.3
• gix 0.84.0 → 0.85.0
• regex 1.12.3 → 1.12.4
• time 0.3.47 → 0.3.51
• sysinfo 0.39.3 → 0.39.5
• memmap2 0.9.10 → 0.9.11 (resolves RUSTSEC-2026-0186)

Security audit refresh

• Added RUSTSEC-2026-0173 ignore (proc-macro-error2 unmaintained, informational only)
• Removed RUSTSEC-2025-0055 ignore (tracing-subscriber now resolved to ≥ 0.3.20)
• Removed RUSTSEC-2025-0141 ignore (bincode no longer in the dependency tree)
• cargo audit passes clean

Other

• Fixed inaccurate fail_on_error and idempotent docs (#​509)
• Added cargo:rerun-if-changed=VERGEN_DEFAULT_ON_ERROR rerun directive
• Bumped cargo-binstall in CI (#​503)
• Parse deprecation fixes (#​505)

Full Changelog: rustyhorde/vergen@v10.0.0...10.0.1

v10.0.0: vergen 10.0.0

vergen 10.0.0

Major release of the vergen suite (vergen, vergen-lib, vergen-git2, vergen-gitcl, vergen-gix, vergen-pretty).

Highlights

• MSRV raised to 1.95.0 (#​496, prior bumps via #​487, #​440).
• Raw Unix-seconds timestamps — emit build timestamps as raw Unix seconds (#​444).
• SOURCE_DATE_EPOCH decoupling plus a .cargo_vcs_info.json fallback for reproducible builds when building from a published crate without a git repo (#​452, #​448).
• Remote URL support for git functionality (#​459).
• GIT_DIRTY instruction documented and dirty-output fixes for vergen-gix (#​465, #​423).

Internal / maintenance

• Replaced getset with hand-written getters in vergen-lib (#​491).
• Removed bincode from vergen-pretty (#​481).
• Added a cargo-semver-checks CI job (#​478).
• Numerous dependency updates, including gix bumps to address RUSTSEC advisories (#​473, #​488, #​490).
• CI: skip coverage jobs for forked PRs (#​492), pinning + parallelization (#​496).
• Lint and doc fixes across the workspace.

Full Changelog: rustyhorde/vergen@vergen_9.0.6...v10.0.0