[dependabot]

Bumps the minor-and-patch group with 5 updates:

Package	From	To
actix-web	4.17.0	4.18.1
redis	1.7.1	1.8.0
tokio	1.54.0	1.54.1
uuid	1.28.0	1.29.0
tonic	0.14.6	0.14.8

Updates actix-web from 4.17.0 to 4.18.1

Release notes

Sourced from actix-web's releases.

actix-web: v4.18.1

• Add TestRequest::query() method for constructing HTTP QUERY test requests.

actix-web: v4.18.0

• Add #[query] route handler macro.
• Add support for method = "QUERY" in #[route].
• Add guard::Query() method guard.
• Document that HttpServer::on_connect() must be called before bind().
• Minimum supported Rust version (MSRV) is now 1.89.

Commits

• 9ed549d chore(actix-test): prepare release 0.1.6
• ccc4290 chore(actix-http-test): prepare release 3.4.0
• 3fb90dc chore(awc): prepare release 3.11.0
• f151a43 chore(actix-web): prepare release 4.18.1
• 2048d16 feat(test): add QUERY helpers to test servers (#4352)
• f3e2972 feat(awc): add QUERY request helper (#4351)
• 6cb998e fix: deny vulnerable TLS dependency versions (#4353)
• c84dd4a feat(web): add QUERY test request helper (#4140)
• 7cb678a docs: update query example
• e4bce82 chore: fix example
• Additional commits viewable in compare view

Updates redis from 1.7.1 to 1.8.0

Release notes

Sourced from redis's releases.

redis-1.8.0

Changes & Bug fixes

• Use a const chunking function in tuple impl of FromRedisValue (#2424 by @​nihohit)
• lint: Add FromStr for NodeAddress (#2444 by @​somechris)
• Add Debug implementation to AsyncConnectionConfig, PubSubSink and dependent types (#2450 by @​nihohit)
• Add Debug implementation to Sentinel configuration types (#2451 by @​nihohit)
• Add debug impl for cluster config types (#2453 by @​nihohit)
• Add Debug impls for command input types (#2454 by @​nihohit)
• Add Debug impls for return types (#2455 by @​nihohit)
• Add FLAT vector field support for FT.CREATE [5/8] (#2319 by @​StefanPalashev)
• Replace assert with an error when a multi-slot shard returns a wrong result count (#2471 by @​17krishna8)
• Handle TLS handshake errors when connecting with a timeout (#2473 by @​17krishna8)
• Add HNSW vector field support for FT.CREATE [6/8] (#2467 by @​StefanPalashev)
• Add SVS-VAMANA vector field support for FT.CREATE [7/8] (#2468 by @​StefanPalashev)
• Route FT.CREATE as a keyless command and add cluster integration tests [8/8] (#2469 by @​StefanPalashev)
• Reject mismatched shard response lengths in logical_aggregate (#2472 by @​17krishna8)
• Redact secrets in Debug for BasicAuth and ClientCertificate (#2487 by @​varun3257)
• AsyncPubsub: await all confirmations of subscription commands (#2475 by @​nihohit)
• Multiplexed Connection: await all confirmations of subscription commands (#2491 by @​nihohit)
• fix(streams): parse the fields of XINFO STREAM's first and last entries (#2494 by @​LindseyZ1205)
• Support custom root certificates under tls-native-tls (#2488 by @​MohitKS5)
• Reject mixed TLS initial nodes regardless of order in ClusterClientBuilder (#2496 by @​varun3257)
• fix(types): forward num_of_args and describe_numeric_behavior for Cow (#2500 by @​LindseyZ1205)
• fix(connection-manager, cluster): await all confirmations of subscription commands (#2504 by @​nihohit)
• sentinel: ask the next sentinel when one has no valid master for the name (#2427 by @​1jeffchristensen)

CI & operational improvements

• ci: Fix Valkey Bloom module caching (#2420 by @​nkaradzhov)
• Add test harness and CI support for the Search module [4/8] (#2318 by @​StefanPalashev)
• doc: Add the environment variable for the search module (#2429 by @​somechris)
• feat: add a seeded randomized test to ensure that interleaved MOVED/broken_connection does not cause a deadlock (#2425 by @​virratanasangpunth)
• Fix new nightly lints lints (#2460 by @​nihohit)
• ci: Switch lint-and-check to stabilized dependencies format (#2477 by @​somechris)
• Pin all github runners (#2501 by @​nihohit)
• Add asserts on error content in tests. (#2498 by @​nihohit)
• Improve caching (#2497 by @​nihohit)
• Pick the parser microbenchmark harnesses over from #2199 (#2484 by @​nihohit)

Commits

• fec5ef0 Prepare version 1.8.0 (#2507)
• 9758f38 sentinel: ask the next sentinel when one has no valid master for the name (#2...
• 1d666d1 fix(connection-manager, cluster): await all confirmations of subscription com...
• a61f735 fix(types): forward num_of_args and describe_numeric_behavior for Cow (#2500)
• d7f0bcc build(deps): bump xxhash-rust from 0.8.15 to 0.8.16 (#2503)
• ceec309 benches: bring the parser microbenchmark harnesses over from pr-2199 (#2484)
• 78e1da0 Improve caching (#2497)
• f54cc50 Add asserts on error content in tests. (#2498)
• d415e4b Pin all github runners (#2501)
• 3911503 Reject mixed TLS initial nodes regardless of order in ClusterClientBuilder (#...
• Additional commits viewable in compare view

Updates tokio from 1.54.0 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

• time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Commits

• b53b200 chore: prepare Tokio v1.54.1 (#8693)
• 5ed619b time: revert "remove the runtime handle from timers" (#8692)
• See full diff in compare view

Updates uuid from 1.28.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

• Add versioned constructors to NonNilUuid by @​RanaPriyansh in uuid-rs/uuid#919
• Prepare for 1.29.0 release by @​KodrAus in uuid-rs/uuid#920

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

Commits

• 4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
• a3631fd prepare for 1.29.0 release
• 304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
• d49f963 Reuse existing version tests for NonNilUuid constructors
• 2f02404 Add versioned constructors to NonNilUuid
• See full diff in compare view

Updates tonic from 0.14.6 to 0.14.8

Release notes

Sourced from tonic's releases.

tonic-build-v0.14.8

Fixed

• fix/silence all clippy warnings (#2807)

Other

• fix changelog duplicate and update repository URLs (#2943)
• License update (#2749)

tonic-health-v0.14.8

Other

• fix changelog duplicate and update repository URLs (#2943)
• License update (#2749)

tonic-prost-build-v0.14.8

Fixed

• fix/silence all clippy warnings (#2807)

Other

• fix changelog duplicate and update repository URLs (#2943)
• License update (#2749)

tonic-prost-v0.14.8

Fixed

• fix/silence all clippy warnings (#2807)

Other

• fix changelog duplicate and update repository URLs (#2943)
• relax codec Default bounds (#2681)
• License update (#2749)

tonic-reflection-v0.14.8

Fixed

• (reflection) preserve custom options in served descriptors (#2730)

Other

• fix changelog duplicate and update repository URLs (#2943)
• enable missing feature for test build (#2820)
• License update (#2749)

tonic-types-v0.14.8

Fixed

... (truncated)

Commits

• 5413799 chore: release v0.14.8 (#2966)
• b8282b9 fix(tonic-web): fix dropped trailers in combined streaming call. (#2474)
• 818532d chore: release v0.14.7 (#2800)
• e24a5a6 chore(ci): set publish = false for unpublished grpc crates in release-plz (#2...
• a5cefe2 chore(deps): require patched zstd (#2962)
• dccf644 grpc: ChannelBuilder should be exported (#2957)
• efa4c61 tonic-xds: parse gRFC A61 additional endpoint addresses (#2942)
• b75851d grpc-xds: add route matching (#2948)
• 2a87efe grpc/client: propagate all ResolverUpdate fields when sharding endpoints (#2954)
• 0ecf925 Upgrade to Protobuf 36.2 (#2956)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 0b6c1c44-5543-47d2-a1e7-d1bbd77e3713

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn