chore(deps): bump the cargo-packages group across 1 directory with 7 updates by dependabot[bot] · Pull Request #339 · hardbyte/netchecks

dependabot · 2026-07-19T21:04:37Z

Bumps the cargo-packages group with 7 updates in the /operator directory:

Package	From	To
kube	`3.1.0`	`4.0.0`
k8s-openapi	`0.27.1`	`0.28.0`
serde	`1.0.228`	`1.0.229`
thiserror	`2.0.18`	`2.0.19`
anyhow	`1.0.102`	`1.0.104`
tokio	`1.52.3`	`1.53.0`
futures	`0.3.32`	`0.3.33`

Updates kube from 3.1.0 to 4.0.0

Release notes

Sourced from kube's releases.

4.0.0

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Changelog

Sourced from kube's changelog.

4.0.0 / 2026-06-16

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Commits

b4f0cc4 re-hook cel feature and move dev-dep pin
163ade1 unhook dev-dep temporarily
2a14dec release 4.0.0
2310a06 feat(derive): client-side CEL validation via #[kube(cel)] / #[x_kube(cel)] (#...
8d61784 Enable RetryPolicy::server_retry by default for Client (#2007)
a5b4f3f Box a large runtime error in ReconcilerErr (#1880)
3dd76bc bump k8s-openapi to 0.28 (#2009)
60ffe61 chore: group cel into the just hack feature-powerset (#2006)
c261d78 deps: bump kube-cel to 0.6.1 (validation surface flattened) (#2005)
6c26657 refactor(runtime): rename Store::state_with/state_filtered per review feedbac...
Additional commits viewable in compare view

Updates k8s-openapi from 0.27.1 to 0.28.0

Release notes

Sourced from k8s-openapi's releases.

v0.28.0

k8s-openapi

BREAKING CHANGE: Added support for Kubernetes 1.36 under the v1_36 feature.

BREAKING CHANGE: Dropped support for Kubernetes 1.31.

FEATURE: schemars v0.8 support has been restored under the schemars08 feature flag. This can be enabled independently of the existing schemars feature that enables schemars v1 support.

FEATURE: StatefulSetSpec::volume_claim_templates field now uses a map merge strategy using its .metadata.name as the key.

Corresponding Kubernetes API server versions:

v1.32.13

v1.33.13

v1.34.9

v1.35.6

v1.36.2

k8s-openapi-codegen-common

FEATURE: schemars v0.8 support has been restored via a new parameter to fn run().

k8s-openapi-derive

FEATURE: schemars v0.8 support has been restored via a new #[custom_resource_definition(generate_schema08)] attr.

Changelog

Sourced from k8s-openapi's changelog.

v0.28.0 (2026-06-14)

k8s-openapi

BREAKING CHANGE: Added support for Kubernetes 1.36 under the v1_36 feature.

BREAKING CHANGE: Dropped support for Kubernetes 1.31.

FEATURE: schemars v0.8 support has been restored under the schemars08 feature flag. This can be enabled independently of the existing schemars feature that enables schemars v1 support.

FEATURE: StatefulSetSpec::volume_claim_templates field now uses a map merge strategy using its .metadata.name as the key.

Corresponding Kubernetes API server versions:

v1.32.13

v1.33.13

v1.34.9

v1.35.6

v1.36.2

k8s-openapi-codegen-common

FEATURE: schemars v0.8 support has been restored via a new parameter to fn run().

k8s-openapi-derive

FEATURE: schemars v0.8 support has been restored via a new #[custom_resource_definition(generate_schema08)] attr.

Commits

b2c839b v0.28.0
ebea539 Update to v1.33.13, v1.34.9, v1.35.6, v1.36.2
b7acde4 Restore schemars 0.8 support.
366b480 Update kind to v0.32.0
f1b5881 Update to v1.33.12, v1.34.8, v1.35.5, v1.36.1
8a891b9 Add v1.36 and drop v1.31
bcd3499 Fix StatefulSet::volumeClaimTemplates to deep merge by name.
654a839 Update to v1.33.11, v1.34.7, v1.35.4
eda35ab Update to v1.33.10, v1.34.6, v1.35.3
See full diff in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

Update to syn 3

Commits

e13a785 Release 2.0.19
0a0e76c Update to syn 3
ec42ea7 Update actions/upload-artifact@v6 -> v7
4178c4a Update actions/checkout@v6 -> v7
7214e0e Ignore items_after_statements pedantic clippy lint in test
febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
c50e387 chore: improve thiserror maintenance path
d4a2507 Raise minimum tested compiler to rust 1.85
99e8a6c Unpin CI miri toolchain
9ac165c Pin CI miri to nightly-2026-02-11
Additional commits viewable in compare view

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

Update syn dev-dependency to version 3

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

1dbe186 Release 1.0.104
f6479f8 Update to syn 3
5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates tokio from 1.52.3 to 1.53.0

Release notes

Sourced from tokio's releases.

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)

metrics: add task schedule latency metric (#7986)

net: add SocketAddr methods to Unix sockets (#8144)

Changed

io: add #[inline] to IO trait impls for in-memory types (#8242)

net: implement UCred::pid on FreeBSD (#8086)

net: support Nuttx target os (#8259)

signal: refactor global variables on Windows (#8231)

sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)

taskdump: support taskdumps on s390x (#8192)

time: add #[track_caller] to timeout_at() (#8077)

time: consolidate mutex locks on spurious poll (#8124)

time: defer waker clone on spurious poll (#8107)

time: move lazy-registration state into Sleep (#8132)

tracing: remove unnecessary span clone (#8126)

Fixed

io: do not treat zero-length reads as EOF in Chain (#8251)

net: use getpeereid for QNX peer credentials (#8270)

runtime: avoid illegal state in FastRand (#8078)

sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)

taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)

time: avoid stack overflow in runtime constructor (#8093)

time (alt timer): ensure timers stay in the same runtime after .reset() (#8169)

IO uring (unstable)

fs: use io-uring for fs::try_exists (#8080)

fs: use io-uring for renaming files (#7800)

rt: flush io-uring CQE in case of CQE overflow (#8277)

Documented

docs: clarify cancel safety wording (#8181)

fs: clarify create_dir_all succeeds if path exists (#8149)

io: add warning about stdout reordering with multiple handles (#8276)

net: document pipe try_read*/try_write* readiness behavior (#8032)

runtime: document interaction with fork() (#8202)

sync: clarify broadcast lagging semantics (#8239)

sync: document memory ordering guarantees for Semaphore (#8119)

task: explain why yield_now defers its waker (#8254)

time: add panic docs to timeout_at() (#8077)

... (truncated)

Commits

be689a3 chore: prepare Tokio v1.53.0 (#8294)
50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
efdba5f chore: prepare Tokio v1.52.4 (#8289)
b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
7bcd2d3 taskdump: remove crate disambiguators from output (#8288)
f84b209 chore: prepare Tokio v1.51.4 (#8286)
eacb98e runtime: don't skip the driver when before_park schedules work (#8222)
5e16ee0 task: avoid replacing the JoinQueue waker in try_join_next (#8279)
88212ab sync: document memory ordering guarantees for Semaphore (#8119)
Additional commits viewable in compare view

Updates futures from 0.3.32 to 0.3.33

Release notes

Sourced from futures's releases.

0.3.33

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Changelog

Sourced from futures's changelog.

0.3.33 - 2026-07-18

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Commits

89cc254 Release 0.3.33
cd9f5be ci: Update release workflow
d79a499 Resolve rustdoc::broken_intra_doc_links warning
95bbcf8 Resolve rustdoc ambiguous link error
303c165 Resolve rustdoc::redundant_explicit_links warning
f34e3f5 ci: Cleanup
66591a2 Enable Miri for more tests
ab1072f Simplify target_has_atomic cfg in utility crates
cf5d23b Fix unsound compat01as03 implementation (fixes #2514) (#3012)
8ae794f Add portable-atomic-alloc feature and use it in FuturesUnordered (#3007)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Bumps the cargo-packages group with 7 updates in the /operator directory: | Package | From | To | | --- | --- | --- | | [kube](https://github.com/kube-rs/kube) | `3.1.0` | `4.0.0` | | [k8s-openapi](https://github.com/Arnavion/k8s-openapi) | `0.27.1` | `0.28.0` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.0` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.33` | Updates `kube` from 3.1.0 to 4.0.0 - [Release notes](https://github.com/kube-rs/kube/releases) - [Changelog](https://github.com/kube-rs/kube/blob/main/CHANGELOG.md) - [Commits](kube-rs/kube@3.1.0...4.0.0) Updates `k8s-openapi` from 0.27.1 to 0.28.0 - [Release notes](https://github.com/Arnavion/k8s-openapi/releases) - [Changelog](https://github.com/Arnavion/k8s-openapi/blob/master/CHANGELOG.md) - [Commits](Arnavion/k8s-openapi@v0.27.1...v0.28.0) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `thiserror` from 2.0.18 to 2.0.19 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.19) Updates `anyhow` from 1.0.102 to 1.0.104 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.104) Updates `tokio` from 1.52.3 to 1.53.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.0) Updates `futures` from 0.3.32 to 0.3.33 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.32...0.3.33) --- updated-dependencies: - dependency-name: kube dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo-packages - dependency-name: k8s-openapi dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-packages - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-packages - dependency-name: thiserror dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-packages - dependency-name: anyhow dependency-version: 1.0.104 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-packages - dependency-name: tokio dependency-version: 1.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-packages - dependency-name: futures dependency-version: 0.3.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-packages ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-19T21:04:38Z

Labels

The following labels could not be found: operator. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

cloudflare-workers-and-pages · 2026-07-19T21:04:39Z

Deploying netchecks-docs with Cloudflare Pages

Latest commit:	`7128dcb`
Status:	✅ Deploy successful!
Preview URL:	https://e4f68d71.netchecks-docs.pages.dev
Branch Preview URL:	https://dependabot-cargo-operator-ca-nsc7.netchecks-docs.pages.dev

View logs

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 19, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the cargo-packages group across 1 directory with 7 updates#339

chore(deps): bump the cargo-packages group across 1 directory with 7 updates#339
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/operator/cargo-packages-7edb6ff192

dependabot Bot commented on behalf of github Jul 19, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 19, 2026

Uh oh!

cloudflare-workers-and-pages Bot commented Jul 19, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 19, 2026

4.0.0

New Major

Kubernetes v1_36 support via k8s-openapi 0.28

CEL Validation

Config

Retry and Timeouts

Client

4.0.0 / 2026-06-16

New Major

Kubernetes v1_36 support via k8s-openapi 0.28

CEL Validation

Config

Retry and Timeouts

Client

v0.28.0

k8s-openapi

k8s-openapi-codegen-common

k8s-openapi-derive

v0.28.0 (2026-06-14)

k8s-openapi

k8s-openapi-codegen-common

k8s-openapi-derive

v1.0.229

2.0.19

1.0.104

1.0.103

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

Changed

Fixed

IO uring (unstable)

Documented

0.3.33

0.3.33 - 2026-07-18

Uh oh!

dependabot Bot commented on behalf of github Jul 19, 2026

Labels

Uh oh!

cloudflare-workers-and-pages Bot commented Jul 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying netchecks-docs with Cloudflare Pages

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Kubernetes `v1_36` support via k8s-openapi 0.28

Kubernetes `v1_36` support via k8s-openapi 0.28

cloudflare-workers-and-pages Bot commented Jul 19, 2026 •

edited

Loading