Bump the cargo group across 1 directory with 3 updates
Bumps the cargo group with 3 updates in the /conformance/runner/rust directory: serde_json, tokio and sha2.
Updates serde_json from 1.0.151 to 1.0.154
Release notes
Sourced from serde_json's releases.
v1.0.154
v1.0.153
- Report invalid UTF-8 at the first bad byte (#1345, thanks
@00200200)v1.0.152
- Preserve sign of
-0in arbitrary_precision mode (#1346, thanks@yuxi-liu-wired)- Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks
@yuxi-liu-wired)
Commits
20572a6Release 1.0.154a91bfafFix RandomState links in map documentation3c932c0Merge pull request #1333 from razmser/no-std-preserve-order4b2d726Release 1.0.15383335eeTouch up PR 13454b4810aResolve range_plus_one pedantic clippy lint8af71ccMerge pull request #1345 from 00200200/fix-invalid-utf8-error-column452afa2Correct multiline raw UTF-8 error positions and simplify indexingc9f1e3bRelease 1.0.152854fc70Touch up PR 1347- Additional commits viewable in compare view
Updates tokio from 1.53.1 to 1.53.3
Release notes
Sourced from tokio's releases.
Tokio v1.53.3
1.53.3 (October 13th, 2026)
Added
- io: add
AsyncFd::registerandAsyncFd::register_with_interest(#8587)Changed
- io: deprecate
AsyncFd::{new, with_interest, try_new, try_with_interest}(#8587)Fixed
- io: wake and drop
DuplexStreamwakers outside the lock (#8618)- macros: avoid
unreachable_codeinjoin!andtry_join!forInfallible(#8518)- runtime: fix paused time auto-advancing when I/O wakes a task on
current_thread(#8595)- sync: wake waiters outside the lock when closing a semaphore (#8529)
- test: fix several flaky tests (#8196, #8427, #8609)
Fixed (unstable)
- rt: keep
io_uringop alive when submission fails after push (#8185)#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618
Tokio v1.53.2
1.53.2 (October 3rd, 2026)
Fixed
- fs: handle integer overflow in buffered relative seek (#8574)
- io: revert "always cleanup
AsyncFdregistration list on deregister" (#8540)- process: unregister Windows wait before closing child handle (#8564)
- rt: drop blocking pool mutex before shutting down rejected task (#8562)
- sync: fix mpsc index wraparound in block reclamation (#8546)
- sync: forget mpsc
Permitbefore sending value (#8560)- sync: validate
MAX_PERMITSinSemaphore::acquire(#8548)- sync: wake broadcast
Sender::closedoutside mutex (#8558)- task: drop replaced waker outside lock in
JoinSet(#8554)- time: drop timer lock before dropping waker in
clear_entry(#8552)- time: expire timers directly on shutdown without rotating wheel (#8570)
... (truncated)
Commits
a85c3f5chore: prepare Tokio v1.53.3 (#8639)df4443eMerge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)f00b2e6chore: prepare Tokio v1.51.6 (#8637)482eaddruntime: record time wake when unparking tasks on current thread (#8595)55fbab7io: wake and dropDuplexStreamwakers outside the lock (#8618)c5e4d9eruntime: keep io_uring op alive when submission fails after push (#8185)0448618sync: maketracing_synctests synchronous (#8427)2bc1146net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)bb28a94Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)6b97913macros: avoidunreachable_codeinjoin!andtry_join!forInfallible...- Additional commits viewable in compare view
Updates sha2 from 0.11.0 to 0.11.1
Commits
138dc5aRelease sha2 v0.11.1 (#927)cf01056sha2: fixunsafe_op_in_unsafe_fnlint, bump MSRV to 1.88 (#926)7c59cadUpdate Cargo.lock (#921)f57b947streebog: tweak internal implementation (#925)336611fFixcargo::manual_readmelint (#924)1df8877md2: fixclippy::needless_range_looplint (#923)6075989sha2: fix loading of round constants on AArch64 backends (#922)eadfd90Update Cargo.lock (#913)fa30840blake2 v0.11.0 (#911)f6c786dci: bump the all-deps group across 1 directory with 3 updates (#896)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Summary by cubic
Updates serde_json to 1.0.154, tokio to 1.53.3, and sha2 to 0.11.1 in the conformance runner. All are patch-level dependency bumps with no API changes; only Cargo.lock was modified.