chore(deps): update rust-zerover-patch-updates #1825

Merged

ginger merged 1 commit from renovate/rust-zerover-patch-updates into main

2026-06-03 03:11:53 +00:00

renovate commented

2026-05-30 05:05:10 +00:00

Collaborator

This PR contains the following updates:

Package	Type	Update	Change
log	workspace.dependencies	patch	`0.4.29` → `0.4.30`
opentelemetry_sdk (source)	workspace.dependencies	patch	`0.32.0` → `0.32.1`
reqwest	workspace.dependencies	patch	`0.13.3` → `0.13.4`

Release Notes

rust-lang/log (log)

`v0.4.30`

Compare Source

What's Changed

Support capturing of std::net types by @KodrAus in #724

New Contributors

@V0ldek made their first contribution in #720
@woodruffw made their first contribution in #723

Full Changelog: https://github.com/rust-lang/log/compare/0.4.29...0.4.30

Notable Changes

MSRV is bumped to 1.71.0 in #723

open-telemetry/opentelemetry-rust (opentelemetry_sdk)

`v0.32.1`

Released 2026-May-23

BaggagePropagator now enforces the W3C Baggage maximum header length
(8192 bytes) and maximum list-member count (64) when extracting an inbound
baggage header. Headers exceeding 8192 bytes are dropped at the
propagator boundary; headers with more than 64 list members are
truncated to the first 64 entries. The change keeps the propagator from
parsing attacker-controlled input beyond the W3C limits instead of doing
per-entry parse, decode, and allocation work only to discard the excess
on Baggage insert. See https://www.w3.org/TR/baggage/#limits.
Reverted the SimpleSpanProcessor telemetry suppression added in 0.32.0
(see #3494), which caused a RefCell already borrowed panic when a span
was started and dropped inside a get_active_span (or Context::map_current)
closure. Tracked in #3510. A proper fix for the underlying
Context::map_current re-entrancy will be investigated separately, after
which the suppression can be safely re-applied.
View-provided metric stream name (set via Stream::builder().with_name(...))
is no longer validated against the instrument name syntax, per
spec clarification.
unit and other stream parameters continue to be validated.

seanmonstar/reqwest (reqwest)

`v0.13.4`

Compare Source

Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
Add ClientBuilder::http2_keep_alive_* options for the blocking client.
Add TLS 1.3 support when using native-tls backend.
Fix redirect handling to strip sensitive headers when the scheme changes.
Fix HTTP/3 happy-eyeball connection creation.
Upgrade hickory-resolver to 0.26.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [log](https://github.com/rust-lang/log) | workspace.dependencies | patch | `0.4.29` → `0.4.30` | | [opentelemetry_sdk](https://github.com/open-telemetry/opentelemetry-rust/tree/main/opentelemetry-sdk) ([source](https://github.com/open-telemetry/opentelemetry-rust/tree/HEAD/opentelemetry-sdk)) | workspace.dependencies | patch | `0.32.0` → `0.32.1` | | [reqwest](https://github.com/seanmonstar/reqwest) | workspace.dependencies | patch | `0.13.3` → `0.13.4` | --- ### Release Notes <details> <summary>rust-lang/log (log)</summary> ### [`v0.4.30`](https://github.com/rust-lang/log/blob/HEAD/CHANGELOG.md#0430---2026-05-21) [Compare Source](https://github.com/rust-lang/log/compare/0.4.29...0.4.30) ##### What's Changed - Support capturing of `std::net` types by [@KodrAus](https://github.com/KodrAus) in [#724](https://github.com/rust-lang/log/pull/724) ##### New Contributors - [@V0ldek](https://github.com/V0ldek) made their first contribution in [#720](https://github.com/rust-lang/log/pull/720) - [@woodruffw](https://github.com/woodruffw) made their first contribution in [#723](https://github.com/rust-lang/log/pull/723) **Full Changelog**: <https://github.com/rust-lang/log/compare/0.4.29...0.4.30> ##### Notable Changes - MSRV is bumped to 1.71.0 in [#723](https://github.com/rust-lang/log/pull/723) </details> <details> <summary>open-telemetry/opentelemetry-rust (opentelemetry_sdk)</summary> ### [`v0.32.1`](https://github.com/open-telemetry/opentelemetry-rust/blob/HEAD/opentelemetry-sdk/CHANGELOG.md#0321) Released 2026-May-23 - `BaggagePropagator` now enforces the W3C Baggage maximum header length (8192 bytes) and maximum list-member count (64) when extracting an inbound `baggage` header. Headers exceeding 8192 bytes are dropped at the propagator boundary; headers with more than 64 list members are truncated to the first 64 entries. The change keeps the propagator from parsing attacker-controlled input beyond the W3C limits instead of doing per-entry parse, decode, and allocation work only to discard the excess on `Baggage` insert. See <https://www.w3.org/TR/baggage/#limits>. - Reverted the `SimpleSpanProcessor` telemetry suppression added in 0.32.0 (see [#3494](https://github.com/open-telemetry/opentelemetry-rust/issues/3494)), which caused a `RefCell already borrowed` panic when a span was started and dropped inside a `get_active_span` (or `Context::map_current`) closure. Tracked in [#3510](https://github.com/open-telemetry/opentelemetry-rust/issues/3510). A proper fix for the underlying `Context::map_current` re-entrancy will be investigated separately, after which the suppression can be safely re-applied. - View-provided metric stream `name` (set via `Stream::builder().with_name(...)`) is no longer validated against the instrument name syntax, per [spec clarification](https://github.com/open-telemetry/opentelemetry-specification/pull/5094). `unit` and other stream parameters continue to be validated. </details> <details> <summary>seanmonstar/reqwest (reqwest)</summary> ### [`v0.13.4`](https://github.com/seanmonstar/reqwest/blob/HEAD/CHANGELOG.md#v0134) [Compare Source](https://github.com/seanmonstar/reqwest/compare/v0.13.3...v0.13.4) - Add `ClientBuilder::tls_sslkeylogfile(bool)` option to allow using the related environment variable. - Add `ClientBuilder::http2_keep_alive_*` options for the `blocking` client. - Add TLS 1.3 support when using `native-tls` backend. - Fix redirect handling to strip sensitive headers when the scheme changes. - Fix HTTP/3 happy-eyeball connection creation. - Upgrade hickory-resolver to 0.26. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate added the

Dependencies

Dependencies/Renovate

labels

2026-05-30 05:05:10 +00:00

renovate added 1 commit

2026-05-30 05:05:10 +00:00

chore(deps): update rust-zerover-patch-updates

Auto Labeler / Apply labels based on changed files (pull_request_target) Successful in 3s

Details

Documentation / Build and Deploy Documentation (pull_request) Successful in 56s

Details