[dependabot]

Bumps the rust group with 3 updates: notify, uuid and axum-server.

Updates notify from 8.2.1 to 8.2.2

Release notes

Sourced from notify's releases.

notify: v8.2.2

notify 8.2.2 (2026-11-08)

• CHANGE: raise MSRV from 1.85 to 1.88 breaking
• FIX: [windows] prevent watch shutdown from rearming reads on closed handles, which could deadlock when handles are reused #958 #1051 #1052

#958: notify-rs/notify#958 #1051: notify-rs/notify#1051 #1052: notify-rs/notify#1052

Changelog

Sourced from notify's changelog.

notify 8.2.2 (2026-11-08)

• CHANGE: raise MSRV from 1.85 to 1.88 breaking
• FIX: [windows] prevent watch shutdown from rearming reads on closed handles, which could deadlock when handles are reused #958 #1051 #1052

#958: notify-rs/notify#958 #1051: notify-rs/notify#1051 #1052: notify-rs/notify#1052

Commits

• 603674a prepare notify 8.2.2 (#1084)
• 3386e5f windows: backport #958 (#1083)
• See full diff in compare view

Updates uuid from 1.29.0 to 1.29.1

Release notes

Sourced from uuid's releases.

v1.29.1

What's Changed

• Remove some deprecated attrs and resolve Cargo lints by @​KodrAus in uuid-rs/uuid#921
• Deprecate the borsh feature of uuid in favour of a uuid feature in borsh by @​KodrAus in uuid-rs/uuid#923
• Fix up several bugs in v7 monotonicity raised by automated scanning by @​KodrAus in uuid-rs/uuid#926
• Prepare for 1.29.1 release by @​KodrAus in uuid-rs/uuid#927

Full Changelog: uuid-rs/uuid@v1.29.0...v1.29.1

Commits

• 0fe2dab Merge pull request #927 from uuid-rs/cargo/v1.29.1
• 8896d2e prepare for 1.29.1 release
• 2eef370 Merge pull request #926 from uuid-rs/fix/timestamp-edges
• de33fde fix up several bugs in v7 monotonicity raised by automated scanning
• 7c7326d Merge pull request #923 from uuid-rs/fix/deprecate-borsh
• 13e1ff0 deprecate the borsh feature of uuid in favour of a uuid feature in borsh
• 4eba67b Merge pull request #921 from uuid-rs/chore/lint-fixup
• 8a052e0 resolve some clippy lints
• 3d24508 bump gungruan version
• c097ab7 remove some deprecated attrs and resolve Cargo lints
• See full diff in compare view

Updates axum-server from 0.8.0 to 0.9.0

Release notes

Sourced from axum-server's releases.

v0.9.0

• added: Server::first_request_timeout, which closes connections that do not send a request in time. This also covers the protocol detection read that hyper does before any HTTP timeout applies.
• added: Server::accept_error_handler, which reports connection accept errors instead of silently dropping them.
• added: TLS acceptors now add axum_server::tls::TlsInfo (SNI, ALPN, and client certificates) to request extensions as Arc<TlsInfo> for both rustls and OpenSSL.
• added: axum_server::accept::LocalAddrAcceptor adds the local socket address of the connection to request extensions as LocalAddr.
• added: RustlsConfig::from_sni_pem_files, which selects the certificate using the server name sent by the client through SNI.
• added: the tls-rustls-encrypted-keys feature and RustlsConfig::from_pem_with_password plus file and reload variants, for encrypted PKCS#8 private keys.
• added: accept::TcpConfigAcceptor, accept::TcpSocketConfig, and accept::TcpKeepaliveConfig apply TCP_NODELAY and TCP keepalive settings to accepted connections.
• added: a timeouts example showing the request, header, keep-alive, and TLS handshake timeouts.
• added: a reverse_proxy example that terminates TLS and forwards requests to an HTTP upstream.
• breaking: TLS acceptors now return a tls::TlsService wrapper service. Custom acceptors that wrap a TLS acceptor and assume the service type is unchanged need to be updated; examples/rustls_session.rs now uses the built-in TlsInfo.
• fixed: Handle::listening() now returns None after a bind failure instead of waiting forever, and no longer races with server startup.
• fixed: RustlsConfig::from_pem_chain_file now sets the h2 and http/1.1 ALPN protocols like the other RustlsConfig constructors.
• fixed: Connections that are still performing the TLS handshake are now cancelled on shutdown instead of keeping a task and file descriptor alive until the handshake timeout.
• fixed: A timer is now installed by default, so header_read_timeout and keep_alive_timeout no longer panic with "timeout set, but no timer set".
• fixed: from_tcp and from_unix now put the provided listener into non-blocking mode, as required by Tokio. The from_std_listener examples work without extra setup.
• fixed: Server::acceptor and Server::map now preserve the HTTP version selected by http1_only/http2_only.
• changed: The tls-rustls feature now enables TLS 1.2, restoring the behavior from before 0.7.0.
• changed: fs-err is now an optional dependency and is only pulled in by the rustls features.

Changelog

Sourced from axum-server's changelog.

0.9.0 (6. November 2026)

• added: Server::first_request_timeout, which closes connections that do not send a request in time. This also covers the protocol detection read that hyper does before any HTTP timeout applies.
• added: Server::accept_error_handler, which reports connection accept errors instead of silently dropping them.
• added: TLS acceptors now add axum_server::tls::TlsInfo (SNI, ALPN, and client certificates) to request extensions as Arc<TlsInfo> for both rustls and OpenSSL.
• added: axum_server::accept::LocalAddrAcceptor adds the local socket address of the connection to request extensions as LocalAddr.
• added: RustlsConfig::from_sni_pem_files, which selects the certificate using the server name sent by the client through SNI.
• added: the tls-rustls-encrypted-keys feature and RustlsConfig::from_pem_with_password plus file and reload variants, for encrypted PKCS#8 private keys.
• added: accept::TcpConfigAcceptor, accept::TcpSocketConfig, and accept::TcpKeepaliveConfig apply TCP_NODELAY and TCP keepalive settings to accepted connections.
• added: a timeouts example showing the request, header, keep-alive, and TLS handshake timeouts.
• added: a reverse_proxy example that terminates TLS and forwards requests to an HTTP upstream.
• breaking: TLS acceptors now return a tls::TlsService wrapper service. Custom acceptors that wrap a TLS acceptor and assume the service type is unchanged need to be updated; examples/rustls_session.rs now uses the built-in TlsInfo.
• fixed: Handle::listening() now returns None after a bind failure instead of waiting forever, and no longer races with server startup.
• fixed: RustlsConfig::from_pem_chain_file now sets the h2 and http/1.1 ALPN protocols like the other RustlsConfig constructors.
• fixed: Connections that are still performing the TLS handshake are now cancelled on shutdown instead of keeping a task and file descriptor alive until the handshake timeout.
• fixed: A timer is now installed by default, so header_read_timeout and keep_alive_timeout no longer panic with "timeout set, but no timer set".
• fixed: from_tcp and from_unix now put the provided listener into non-blocking mode, as required by Tokio. The from_std_listener examples work without extra setup.
• fixed: Server::acceptor and Server::map now preserve the HTTP version selected by http1_only/http2_only.
• changed: The tls-rustls feature now enables TLS 1.2, restoring the behavior from before 0.7.0.
• changed: fs-err is now an optional dependency and is only pulled in by the rustls features.

Commits

• d456d10 Merge pull request #200 from programatik29/release/0.9.0
• b66eddc Version 0.9.0
• d5e59a9 Merge pull request #198 from programatik29/feature/tcp-socket-options
• 5d15eb7 feat(accept): add TCP socket option acceptor
• 66117ae Merge pull request #197 from programatik29/feature/tls-config-conveniences
• 59b7814 feat(tls-rustls): add SNI certificate selection and encrypted keys
• dc6c073 Merge pull request #196 from programatik29/feature/connection-info
• bf02c3d feat(tls): expose TLS connection info and local address to handlers
• 4a992c9 Merge pull request #195 from programatik29/feature/server-timeout-and-errors
• cf74b72 feat(server): add first request timeout and accept error handler
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions