Skip to content

Bump the "backend" group with 1 update across multiple ecosystems#112

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/backend-e5d5364dfc
Open

Bump the "backend" group with 1 update across multiple ecosystems#112
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/backend-e5d5364dfc

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026 •
edited
Loading

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the backend group with 7 updates:

Package From To
askama 0.15.4 0.15.6
cached 0.56.0 0.59.0
clap 4.5.60 4.6.0
hmac 0.12.1 0.13.0
lambda_http 1.0.2 1.1.2
sha2 0.10.9 0.11.0
tracing-subscriber 0.3.22 0.3.23

Updates askama from 0.15.4 to 0.15.6

Release notes

Sourced from askama's releases.

v0.15.6

What's Changed

Full Changelog: askama-rs/askama@v0.15.5...v0.15.6

v0.15.5

What's Changed

Full Changelog: askama-rs/askama@v0.15.4...v0.15.5

Commits
  • 4260d0d Merge pull request #719 from GuillaumeGomez/update-crate-version
  • 1471702 Update crate version to 0.15.6
  • fb6f3fb Merge pull request #718 from GuillaumeGomez/improve-ui-tests
  • 4f36391 Merge pull request #717 from GuillaumeGomez/fix-non-ident-block
  • 1b4350b Update trybuild version to 1.0.116 to enforce diagnostics width
  • 2ad677c Correctly handle non-ident item in block error
  • 5e12585 Merge pull request #714 from jplatte/jplatte/lt-refactor
  • 0ebfd0f Merge pull request #716 from jplatte/jplatte/clippy
  • 3c0f1b0 Merge pull request #715 from jplatte/jplatte/winnow1
  • acc29f3 Remove unnecessary .clone()
  • Additional commits viewable in compare view

Updates cached from 0.56.0 to 0.59.0

Changelog

Sourced from cached's changelog.

[0.59.0 / [cached_proc_macro[0.27.0]]]

Added

Changed

  • Fix examples/wasm build: add time_stores feature to the cached dependency (required when using default-features = false with TimedCache)

Removed

[0.58.0]

Added

  • Add redis_async_cache feature for Redis client-side caching support via the RESP3 protocol

Changed

  • Update redis to 1.0

Removed

[0.57.0 / [cached_proc_macro[0.26.0]]]

Added

  • Add parking_lot dependency

Changed

  • Switch to parking_lot's Mutex and RwLock in all macros.
  • Remove unwrap() calls from lock operations.

Removed

Commits

Updates clap from 4.5.60 to 4.6.0

Changelog

Sourced from clap's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits

Updates hmac from 0.12.1 to 0.13.0

Commits

Updates lambda_http from 1.0.2 to 1.1.2

Release notes

Sourced from lambda_http's releases.

v1.1.2

Fixed

  • fix handling of null groupConfiguration (#1130)

Other

v1.1.1

Thank you to all the contributors who helped make this release possible. We appreciate your time, effort, and passion for the Rust Lambda community. ❤️

Lambda Managed Instances

The runtime now supports Lambda Managed Instances via the concurrency-tokio feature flag (previously experimental-concurrency). Lambda Managed Instances allow multiple concurrent requests to be processed within a single execution environment. When AWS_LAMBDA_MAX_CONCURRENCY is set, the runtime spawns multiple independent long-poll workers to handle concurrent invocations. If the env var is unset or <= 1, it falls back to sequential behavior automatically. This lets you use the same handler for both classic Lambda and Lambda Managed Instances. (#1067)

[dependencies]
lambda_runtime = { version = "1.1", features = ["concurrency-tokio"] }
lambda_runtime::run_concurrent(service_fn(my_handler)).await?;

For a complete working example, see examples/basic-lambda-concurrent. For detailed guidance on building functions for multi-concurrency, including shared state patterns and database connection pools, see the Rust runtime for Lambda Managed Instances documentation.

We would like also to involve the community in a broader discussion about improving our approach on multiconcurrency. You can find the discussion in (#1120)

lambda_runtime - 1.1.1

Added

  • (lambda-managed-instances) log non-2xx Lambda Runtime API responses with status and body (#1109)
  • tenant ID propagation for multi-tenant Lambda use cases. The tenant_id is available in the context.tenant_id field (Option<String>) and is automatically extracted from the lambda-runtime-aws-tenant-id header when present (#1082)
  • Add builder pattern support for event response types (#1090)

Fixed

  • (test) fix test_concurrent_structured_logging_isolation (#1121)

Changed

  • MSRV updated from 1.82.0 to 1.84.0, enabled MSRV-aware resolver (#1078)
  • X-Ray trace ID now sourced from Context instead of environment variables (#1067)

Other

  • (lambda-managed-instances) add tokio_unstable to known cfgs to avoid linter warns (#1095)

... (truncated)

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

  • Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the backend group with 7 updates
feecc52 
Bumps the backend group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [askama](https://github.com/askama-rs/askama) | `0.15.4` | `0.15.6` |
| [cached](https://github.com/jaemk/cached) | `0.56.0` | `0.59.0` |
| [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.0` |
| [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` |
| [lambda_http](https://github.com/aws/aws-lambda-rust-runtime) | `1.0.2` | `1.1.2` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |


Updates `askama` from 0.15.4 to 0.15.6
- [Release notes](https://github.com/askama-rs/askama/releases)
- [Commits](askama-rs/askama@v0.15.4...v0.15.6)

Updates `cached` from 0.56.0 to 0.59.0
- [Changelog](https://github.com/jaemk/cached/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jaemk/cached/commits)

Updates `clap` from 4.5.60 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.0)

Updates `hmac` from 0.12.1 to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0)

Updates `lambda_http` from 1.0.2 to 1.1.2
- [Release notes](https://github.com/aws/aws-lambda-rust-runtime/releases)
- [Changelog](https://github.com/aws/aws-lambda-rust-runtime/blob/main/release-plz.toml)
- [Commits](aws/aws-lambda-rust-runtime@v1.0.2...lambda_http-v1.1.2)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

---
updated-dependencies:
- dependency-name: askama
  dependency-version: 0.15.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: cached
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: clap
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: lambda_http
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants