chore(deps): weekly safe cargo updates · 5 packages

[mendral-app]

Packages bumped

Crate	Old	New	Published
serde	1.0.228	1.0.229	2026-07-18
serde_json	1.0.149	1.0.151	2026-07-20
thiserror	2.0.18	2.0.19	2026-07-18
tokio	1.49.0	1.53.0	2026-07-17
async-trait	0.1.89	0.1.91	2026-07-18

Per-package detail

serde 1.0.228 → 1.0.229

• Updates internal dependency to syn 3.
• Impact: No public API changes. Purely a build-time dependency update.

serde_json 1.0.149 → 1.0.151

• 1.0.150: Rejects non-string enum object keys (stricter validation).
• 1.0.151: Adds RawValue::from_string_unchecked (new unsafe API, opt-in).
• Impact: We deserialize well-formed JSON from GitHub webhooks and Mistral API responses. All keys are strings — the stricter validation does not affect us.

thiserror 2.0.18 → 2.0.19

• Updates internal dependency to syn 3.
• Impact: No public API changes. Purely a build-time dependency update.

tokio 1.49.0 → 1.53.0

• 1.50: Adds TcpStream::set_zero_linger(), is_rt_shutdown_err(). Panics on event_interval(0).
• 1.51: Adds runtime::worker_index(), stabilizes LocalRuntime. LIFO slot stealing introduced then reverted.
• 1.52: Improves spawn_blocking scalability with sharded queue.
• 1.53: Adds File::From<OwnedFd>, task schedule latency metrics. mpsc receivers now drop waker on drop.
• Impact: We use macros, rt-multi-thread, signal. We don't set event_interval(0), don't rely on mpsc waker persistence, and deploy on Linux (Windows signal refactor irrelevant). No code changes needed.

async-trait 0.1.89 → 0.1.91

• Updates to syn 3.
• Fixes mutability handling for by-reference receivers.
• Impact: Our #[async_trait] usages in port traits use &self (immutable). The mutability fix improves correctness but doesn't change our generated code.

Files modified

• Cargo.toml
• Cargo.lock

Skipped this ecosystem

Crate	Current	Latest eligible	Reason
askama_escape	0.15.4	0.16.0	Open PR #24
axum	0.8.8	0.8.9	Open PR #31
chrono	0.4.44	0.4.45	Open PR #31
hmac	0.12.1	0.13.0	Open PR #33
http	1.4.0	1.4.2	Open PR #29
jsonwebtoken	10.3.0	10.4.0	Open PR #29
octocrab	0.49.5	0.53.1	Open PR #28
reqwest	0.13.2	0.13.4	Open PR #31
sha2	0.10.9	0.11.0	Open PR #33
http-body-util	0.1.3	0.1.4	Open PR #37
rustls	0.23.37	0.23.42	Open PR #37
uuid	1.21.0	1.24.0	Open PR #37
rand	0.10.0	0.10.2	Open PR #37
tracing-subscriber	0.3.22	0.3.23	Open PR #29
mockall	0.14.0	0.15.0	Open PR #35
ammonia	4.1.2	4.1.3	Open PR #35
tracing	0.1.44	0.1.44	Already latest
hex	0.4.3	0.4.3	Already latest
tower	0.5.3	0.5.3	Already latest

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session

[cloudflare-workers-and-pages]

Deploying pratrol with    Cloudflare Pages

Latest commit:	0f78801
Status:	✅  Deploy successful!
Preview URL:	https://122c0468.pratrol.pages.dev
Branch Preview URL:	https://mendral-deps-weekly-safe-car-2lrs.pratrol.pages.dev

View logs