Combined Dependabot PRs 2026-09-02

[code-search-bot]

This PR combines 5 Dependabot PRs.

• Closes Bump prost-wkt-build from 0.7.1 to 0.7.2 #343
• Closes Bump prettyplease from 0.2.37 to 0.3.0 #344
• Closes Bump http-body-util from 0.1.3 to 0.1.5 #345
• Closes Bump glob from 0.3.3 to 0.3.4 #346
• Closes Bump futures from 0.3.32 to 0.3.34 #347

ℹ️ Details from merged PRs:

Details from Bump prost-wkt-build from 0.7.1 to 0.7.2

Release notes

Sourced from prost-wkt-build's releases.

Release v0.7.2

What's Changed

• Raise the minimum Rust version to 1.85 by @​LucaCappelletti94 in fdeantoni/prost-wkt#87
• Ship the imported google.protobuf schemas by @​LucaCappelletti94 in fdeantoni/prost-wkt#86
• Add utoipa feature to prost-wkt-types by @​AlJohri in fdeantoni/prost-wkt#88
• Corrected the schemars and utoipa schemas: Duration accepts negative values and no longer claims format: duration, Timestamp no longer claims format: date-time, and Any only requires @type. utoipa components are registered as google.protobuf.*.
• The schemars and utoipa features are now built and tested in CI and enabled on docs.rs

Notes

• prost-wkt-types now vendors the google.protobuf well-known type schemas (protobuf v35.1), so the generated code no longer depends on the installed protoc or on protox. These files are BSD-3-Clause, so the crate's license expression is now Apache-2.0 AND BSD-3-Clause.
• The minimum supported Rust version is now 1.85.

Full Changelog: fdeantoni/prost-wkt@v0.7.1...v0.7.2

Changelog

Sourced from prost-wkt-build's changelog.

Release 0.7.2

What's Changed

• Raise the minimum Rust version to 1.85 by @​LucaCappelletti94 in fdeantoni/prost-wkt#87
• Ship the imported google.protobuf schemas by @​LucaCappelletti94 in fdeantoni/prost-wkt#86
• Add utoipa feature to prost-wkt-types by @​AlJohri in fdeantoni/prost-wkt#88
• Corrected the schemars and utoipa schemas: Duration accepts negative values and no longer claims format: duration, Timestamp no longer claims format: date-time, and Any only requires @type. utoipa components are registered as google.protobuf.*.
• The schemars and utoipa features are now built and tested in CI and enabled on docs.rs

Notes

• prost-wkt-types now vendors the google.protobuf well-known type schemas (protobuf v35.1), so the generated code no longer depends on the installed protoc or on protox. These files are BSD-3-Clause, so the crate's license expression is now Apache-2.0 AND BSD-3-Clause.
• The minimum supported Rust version is now 1.85.

Full Changelog: fdeantoni/prost-wkt@v0.7.1...v0.7.2

Commits

• 2f30fc6 Merge pull request #90 from fdeantoni/pr88-fixes
• 0ce88c9 Prepare for release 0.7.2
• 2d7bff4 Declare schema features explicitly and document their scope
• ee2cf86 Share schema descriptions and examples between schemars and utoipa
• 14fb204 Build and test the schemars and utoipa features in CI
• 19d7c4d Namespace utoipa component names as google.protobuf.*
• efb019b Fix the Any schema to match what the crate actually serializes
• 14a0a66 Fix Duration/Timestamp schema contracts for schemars and utoipa
• 51d1bdf Merge pull request #88 from AlJohri/utoipa-feature
• 253bd25 Merge pull request #86 from LucaCappelletti94/ship-well-known-type-schemas
• Additional commits viewable in compare view

Details from Bump prettyplease from 0.2.37 to 0.3.0

Release notes

Sourced from prettyplease's releases.

0.3.0

• Update to syn 3 (release notes: https://github.com/dtolnay/syn/releases/tag/3.0.0)

Commits

• 49e5089 Release 0.3.0
• fcbf4d3 Merge pull request #128 from dtolnay/syn3
• 3bcd9d9 Update to syn 3
• 1a89d07 Format with rustfmt
• daa39f5 Update actions/upload-artifact@v6 -> v7
• 44d4c3d Update actions/checkout@v6 -> v7
• 87d1c22 Update examples to nightly-2026-02-09
• 50a7042 Raise required compiler to Rust 1.71
• ae76ee8 Resolve unnecessary_map_or clippy lint
• 938b756 Raise required compiler to Rust 1.70
• Additional commits viewable in compare view

Details from Bump http-body-util from 0.1.3 to 0.1.5

Release notes

Sourced from http-body-util's releases.

http-body-util-v0.1.4

What's Changed

• Add Fused body combinator that always returns None once completed.
• Add BodyExt::into_stream() to convert a body into a Stream.
• Add Full::into_inner() to get the full Buf.
• Add InspectFrame and InspectErr combinators.

Commits

• 07838bd http-body-util v0.1.5
• 612118c docs: migrate from doc_auto_cfg to doc_cfg (#175)
• 7685047 http-body-util v0.1.4
• 3396328 http-body v1.1.0
• 2fb78de chore: bump license year (#170)
• b16554b chore(ci): bump checkout to v7
• c0c53ca chore(ci): use msrv aware update for msrv job
• 5ed15d2 tests: fix clippy::double_parens
• c8cb37f Derive Copy trait to SizeHint struct (#164)
• 915d6d5 feat(util): add InspectErr, InspectFrame combinators (#161)
• Additional commits viewable in compare view

Details from Bump glob from 0.3.3 to 0.3.4

Release notes

Sourced from glob's releases.

v0.3.4

• Cache filename for sorting in fill_todo (#181)
• Replace into_error method with impl Into (#179)
• Replace tempdir with tempfile (#176)
• Set the edition to 2021 (#188)

Changelog

Sourced from glob's changelog.

0.3.4 - 2026-07-21

• Cache filename for sorting in fill_todo (#181)
• Replace into_error method with impl Into (#179)
• Replace tempdir with tempfile (#176)
• Set the edition to 2021 (#188)

Commits

• cfa2a58 chore: release v0.3.4
• 8a903ef Set the edition to 2021
• 1f75324 Bump actions/checkout from 6 to 7
• 7df5575 ci: Bump ubuntu-24.04 to ubuntu-26.04
• e476c2a ci: Replace macos-13 and macos-15 with macos-26-intel and macos-26
• 0dc6566 ci: Get MSRV directly from crate metadata
• c3c81de ci: Bump MSRV of test dependencies
• 6bde970 Bump actions/checkout from 5 to 6 (#184)
• 0639988 Cache filename for sorting in fill_todo (#181)
• 335da33 Replace into_error method with impl Into (#179)
• Additional commits viewable in compare view

Details from Bump futures from 0.3.32 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

0.3.33

• Fix ReadLine's soundness issue regarding to exception safety. (#3020)
• Fix unsound Send impl for IterPinRef and Iter. (#3003)
• Fix stacked borrows violation in compat01as03 implementation. (#3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
• Re-export alloc::task::Wake. (#3010)
• Update spin to 0.12. (#3014)

Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

• Fix ReadLine's soundness issue regarding to exception safety. (#3020)
• Fix unsound Send impl for IterPinRef and Iter. (#3003)
• Fix stacked borrows violation in compat01as03 implementation. (#3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
• Re-export alloc::task::Wake. (#3010)
• Update spin to 0.12. (#3014)

Commits

• 705e6b5 Release 0.3.34
• 616dac7 compat: Inline RawWaker clone function
• 4176369 Inline remaining RawWaker clone functions
• f17a895 Fix cloned FuturesUnordered waker identity
• 51d62ad macro: bump syn to v3 (#3028)
• 9e26177 ci: Reduce timeout-minutes
• b2d0983 tsan: Enable Adaptive Delay
• f733d0e Miri: Ignore compat tests
• e5def2f Rename default branch to main
• 89cc254 Release 0.3.33
• Additional commits viewable in compare view

[Copilot]

🟡 Changes recommended

prettyplease 0.3 expects syn 3 AST types, but twirp-build still directly uses syn 2.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates five Rust dependencies across the workspace.

Changes:

• Upgrades prettyplease to 0.3.
• Refreshes lockfile versions for Futures, glob, http-body-util, and prost-wkt-build.

File summaries

File	Description
crates/twirp-build/Cargo.toml	Updates the code formatter dependency.
Cargo.lock	Records resolved dependency upgrades and checksums.

Review details

• Files reviewed: 1/2 changed files
• Comments generated: 1
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.