build(deps): bump the simple2 group across 1 directory with 9 updates

[dependabot]

Bumps the simple2 group with 7 updates in the / directory:

Package	From	To
openssl	0.10.80	0.10.81
quote	1.0.45	1.0.46
rustls	0.23.38	0.23.41
sentry	0.48.2	0.48.3
sentry-panic	0.48.2	0.48.3
time	0.3.47	0.3.51
which	8.0.3	8.0.4

Updates openssl from 0.10.80 to 0.10.81

Release notes

Sourced from openssl's releases.

openssl-v0.10.81

What's Changed

• Bump aws-ls-sys to 0.41 by @​joshgodsiff in rust-openssl/rust-openssl#2640
• Add brainpoolP224r1 and brainpoolP224t1 NID constants by @​sfarestam-iproov in rust-openssl/rust-openssl#2642
• x509: add minimal support for CRL building by @​DavidFontaineOcd in rust-openssl/rust-openssl#2538
• add mldsa.h to the boringssl bindgen by @​reaperhulk in rust-openssl/rust-openssl#2650
• Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string by @​alex in rust-openssl/rust-openssl#2652
• Fix verify_mode() panic on unmodeled verify mode bits by @​alex in rust-openssl/rust-openssl#2651
• Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in rust-openssl/rust-openssl#2653
• Release openssl 0.10.81 and openssl-sys 0.9.117 by @​reaperhulk in rust-openssl/rust-openssl#2655

New Contributors

• @​joshgodsiff made their first contribution in rust-openssl/rust-openssl#2640
• @​sfarestam-iproov made their first contribution in rust-openssl/rust-openssl#2642
• @​DavidFontaineOcd made their first contribution in rust-openssl/rust-openssl#2538

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.80...openssl-v0.10.81

Commits

• db9c9e2 Release openssl 0.10.81 and openssl-sys 0.9.117 (#2655)
• 3a7fb56 Bump actions/checkout from 6.0.2 to 6.0.3 (#2653)
• d059c43 Fix verify_mode() panic on unmodeled verify mode bits (#2651)
• 8b1519e Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string (#2652)
• d5713d6 add mldsa.h to the boringssl bindgen (#2650)
• 9fac317 Merge pull request #2538 from ocdlroux/feat/crl-full
• 4dae20b x509: adding minimal support for X509CrlBuilder
• 47f7777 Add brainpoolP224r1 and brainpoolP224t1 NID constants (#2642)
• 659da17 Bump aws-ls-sys to 0.41 (#2640)
• See full diff in compare view

Updates openssl-sys from 0.9.116 to 0.9.117

Release notes

Sourced from openssl-sys's releases.

openssl-sys-v0.9.117

What's Changed

• Bump aws-ls-sys to 0.41 by @​joshgodsiff in rust-openssl/rust-openssl#2640
• Add brainpoolP224r1 and brainpoolP224t1 NID constants by @​sfarestam-iproov in rust-openssl/rust-openssl#2642
• x509: add minimal support for CRL building by @​DavidFontaineOcd in rust-openssl/rust-openssl#2538
• add mldsa.h to the boringssl bindgen by @​reaperhulk in rust-openssl/rust-openssl#2650
• Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string by @​alex in rust-openssl/rust-openssl#2652
• Fix verify_mode() panic on unmodeled verify mode bits by @​alex in rust-openssl/rust-openssl#2651
• Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in rust-openssl/rust-openssl#2653
• Release openssl 0.10.81 and openssl-sys 0.9.117 by @​reaperhulk in rust-openssl/rust-openssl#2655

New Contributors

• @​joshgodsiff made their first contribution in rust-openssl/rust-openssl#2640
• @​sfarestam-iproov made their first contribution in rust-openssl/rust-openssl#2642
• @​DavidFontaineOcd made their first contribution in rust-openssl/rust-openssl#2538

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.116...openssl-sys-v0.9.117

Commits

• db9c9e2 Release openssl 0.10.81 and openssl-sys 0.9.117 (#2655)
• 3a7fb56 Bump actions/checkout from 6.0.2 to 6.0.3 (#2653)
• d059c43 Fix verify_mode() panic on unmodeled verify mode bits (#2651)
• 8b1519e Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string (#2652)
• d5713d6 add mldsa.h to the boringssl bindgen (#2650)
• 9fac317 Merge pull request #2538 from ocdlroux/feat/crl-full
• 4dae20b x509: adding minimal support for X509CrlBuilder
• 47f7777 Add brainpoolP224r1 and brainpoolP224t1 NID constants (#2642)
• 659da17 Bump aws-ls-sys to 0.41 (#2640)
• See full diff in compare view

Updates quote from 1.0.45 to 1.0.46

Release notes

Sourced from quote's releases.

1.0.46

• Avoid repeated get_span in quote_spanned (#329, thanks @​Noratrieb)

Commits

• bc4caf2 Release 1.0.46
• dc0e304 Format with rustfmt
• 712114c Drop arrow from syntax of quote_spanned_with_expanded_span
• f93ab8a Eliminate quote_spanned_with_expanded_span_as_expr macro
• 1ff3951 Eliminate __quote_spanned macro
• 64e913a Unify quote_spanned definitions
• 2978e8b Wrap comment to 80 columns
• 7f311a0 Fix PR 329 fat arrow spacing
• 313a8a2 Remove unneeded get_span from PR 329
• 0b33821 Merge pull request #329 from Noratrieb/avoid-repeat-expand
• Additional commits viewable in compare view

Updates rustls from 0.23.38 to 0.23.41

Commits

• 642a103 ci: drop Taplo job
• 752c144 Drop nightly clippy tests
• 8d8611a Fix new clippy::useless-borrows-in-formatting
• ebf3297 Fix new clippy::manual_clear
• 46808e7 ci: sync cargo-check-external-types nightly
• 041a8d2 Cargo deny: allow RUSTSEC-2026-0173
• 62e220e Take semver-compatible dependency updates
• 3c14696 Upgrade to hickory-resolver 0.26
• 848a2cc connect-tests: delete ech.rs
• 5ce9cac Bump version to 0.23.41
• Additional commits viewable in compare view

Updates sentry from 0.48.2 to 0.48.3

Release notes

Sourced from sentry's releases.

0.48.3

The Sentry Rust SDK now reports data discarded by the SDK to Sentry’s Stats page. The SDK reports approximate counts for drops from transports, queues, rate-limit backoff, sampling, event processors, and before_send* callbacks, including span counts for dropped transactions and byte counts for dropped logs and metrics.

New Features

• Added EnvelopeFilter and EnvelopeFilterCallbacks, which let callers observe envelope items removed by Envelope::filter, including attachments removed after their event or transaction is filtered out. Existing Envelope::filter closure callers continue to work, although some closures may require an explicit item type annotation (#1182).
• Added the LossSource trait, which provides the client report data categories and quantities to report when supported Sentry data is dropped (#1170).
• Added TransportFactory::create_transport_with_options, which constructs transports from TransportOptions instead of full ClientOptions (#1142).
• Added transport-specific options types and with_options constructors for built-in HTTP transports, including ReqwestHttpTransportOptions, CurlHttpTransportOptions, UreqHttpTransportOptions, and EmbeddedSVCHttpTransportOptions (#1142).
• Added transport worker options types and deprecated the legacy constructors for built-in background transport workers, including StdTransportThreadOptions and TokioTransportThreadOptions (#1142).
• Added client report protocol types in sentry-types, including ClientReport, client_report::Item, client_report::Category, and client_report::Reason, plus support for serializing client_report envelope items (#1144).
• Added a client report Recorder type, which modern TransportFactory implementations receive via TransportOptions. Transports can use this recorder to record discarded Sentry data; the SDK aggregates these reported losses and automatically sends them in a future envelope (#1158).

Deprecations

• Deprecated Hub::with. Use Hub::current instead (#1126).

Fixes

• Fixed ureq transport handling for HTTP error statuses so 429 rate limits and 413 payload-too-large responses are processed correctly (#1177).

Behavior Changes

• Custom transport factories that implement TransportFactory::create_transport now receive ClientOptions reconstructed from TransportOptions. The reconstructed options include only transport-relevant fields, such as DSN, user agent, proxy settings, and TLS certificate validation settings. This may affect code that reads non-transport fields in create_transport, but the API remains source-compatible and this change is included in a minor/patch release (#1142).

Changelog

Sourced from sentry's changelog.

0.48.3

The Sentry Rust SDK now reports data discarded by the SDK to Sentry’s Stats page. The SDK reports approximate counts for drops from transports, queues, rate-limit backoff, sampling, event processors, and before_send* callbacks, including span counts for dropped transactions and byte counts for dropped logs and metrics.

New Features

• Added EnvelopeFilter and EnvelopeFilterCallbacks, which let callers observe envelope items removed by Envelope::filter, including attachments removed after their event or transaction is filtered out. Existing Envelope::filter closure callers continue to work, although some closures may require an explicit item type annotation (#1182).
• Added the LossSource trait, which provides the client report data categories and quantities to report when supported Sentry data is dropped (#1170).
• Added TransportFactory::create_transport_with_options, which constructs transports from TransportOptions instead of full ClientOptions (#1142).
• Added transport-specific options types and with_options constructors for built-in HTTP transports, including ReqwestHttpTransportOptions, CurlHttpTransportOptions, UreqHttpTransportOptions, and EmbeddedSVCHttpTransportOptions (#1142).
• Added transport worker options types and deprecated the legacy constructors for built-in background transport workers, including StdTransportThreadOptions and TokioTransportThreadOptions (#1142).
• Added client report protocol types in sentry-types, including ClientReport, client_report::Item, client_report::Category, and client_report::Reason, plus support for serializing client_report envelope items (#1144).
• Added a client report Recorder type, which modern TransportFactory implementations receive via TransportOptions. Transports can use this recorder to record discarded Sentry data; the SDK aggregates these reported losses and automatically sends them in a future envelope (#1158).

Deprecations

• Deprecated Hub::with. Use Hub::current instead (#1126).

Fixes

• Fixed ureq transport handling for HTTP error statuses so 429 rate limits and 413 payload-too-large responses are processed correctly (#1177).

Behavior Changes

• Custom transport factories that implement TransportFactory::create_transport now receive ClientOptions reconstructed from TransportOptions. The reconstructed options include only transport-relevant fields, such as DSN, user agent, proxy settings, and TLS certificate validation settings. This may affect code that reads non-transport fields in create_transport, but the API remains source-compatible and this change is included in a minor/patch release (#1142).

Commits

• 12658ea release: 0.48.3
• 06d4d5e meta(changelog): Add entry for Hub::with deprecation (#1196)
• f22532b chore(client-reports): Prevent client report loss when envelope dropped (#1195)
• 2c33119 meta(changelog): Prepare for client reports release (#1194)
• 63525ed chore: Record client reports for dropped logs/metrics (#1193)
• a80cf84 chore: Record transaction and span drops in client reports (#1192)
• 964f17d chore(client-reports): Record event pipeline drops (#1191)
• ad1a65a chore(transport): Record tokio thread client report losses (#1186)
• 4908b0b chore(transport): Record std thread client report losses (#1184)
• 753e68a chore(ureq): Record envelope losses in the Ureq transport (#1178)
• Additional commits viewable in compare view

Updates sentry-panic from 0.48.2 to 0.48.3

Release notes

Sourced from sentry-panic's releases.

0.48.3

The Sentry Rust SDK now reports data discarded by the SDK to Sentry’s Stats page. The SDK reports approximate counts for drops from transports, queues, rate-limit backoff, sampling, event processors, and before_send* callbacks, including span counts for dropped transactions and byte counts for dropped logs and metrics.

New Features

• Added EnvelopeFilter and EnvelopeFilterCallbacks, which let callers observe envelope items removed by Envelope::filter, including attachments removed after their event or transaction is filtered out. Existing Envelope::filter closure callers continue to work, although some closures may require an explicit item type annotation (#1182).
• Added the LossSource trait, which provides the client report data categories and quantities to report when supported Sentry data is dropped (#1170).
• Added TransportFactory::create_transport_with_options, which constructs transports from TransportOptions instead of full ClientOptions (#1142).
• Added transport-specific options types and with_options constructors for built-in HTTP transports, including ReqwestHttpTransportOptions, CurlHttpTransportOptions, UreqHttpTransportOptions, and EmbeddedSVCHttpTransportOptions (#1142).
• Added transport worker options types and deprecated the legacy constructors for built-in background transport workers, including StdTransportThreadOptions and TokioTransportThreadOptions (#1142).
• Added client report protocol types in sentry-types, including ClientReport, client_report::Item, client_report::Category, and client_report::Reason, plus support for serializing client_report envelope items (#1144).
• Added a client report Recorder type, which modern TransportFactory implementations receive via TransportOptions. Transports can use this recorder to record discarded Sentry data; the SDK aggregates these reported losses and automatically sends them in a future envelope (#1158).

Deprecations

• Deprecated Hub::with. Use Hub::current instead (#1126).

Fixes

• Fixed ureq transport handling for HTTP error statuses so 429 rate limits and 413 payload-too-large responses are processed correctly (#1177).

Behavior Changes

• Custom transport factories that implement TransportFactory::create_transport now receive ClientOptions reconstructed from TransportOptions. The reconstructed options include only transport-relevant fields, such as DSN, user agent, proxy settings, and TLS certificate validation settings. This may affect code that reads non-transport fields in create_transport, but the API remains source-compatible and this change is included in a minor/patch release (#1142).

Changelog

Sourced from sentry-panic's changelog.

0.48.3

The Sentry Rust SDK now reports data discarded by the SDK to Sentry’s Stats page. The SDK reports approximate counts for drops from transports, queues, rate-limit backoff, sampling, event processors, and before_send* callbacks, including span counts for dropped transactions and byte counts for dropped logs and metrics.

New Features

• Added EnvelopeFilter and EnvelopeFilterCallbacks, which let callers observe envelope items removed by Envelope::filter, including attachments removed after their event or transaction is filtered out. Existing Envelope::filter closure callers continue to work, although some closures may require an explicit item type annotation (#1182).
• Added the LossSource trait, which provides the client report data categories and quantities to report when supported Sentry data is dropped (#1170).
• Added TransportFactory::create_transport_with_options, which constructs transports from TransportOptions instead of full ClientOptions (#1142).
• Added transport-specific options types and with_options constructors for built-in HTTP transports, including ReqwestHttpTransportOptions, CurlHttpTransportOptions, UreqHttpTransportOptions, and EmbeddedSVCHttpTransportOptions (#1142).
• Added transport worker options types and deprecated the legacy constructors for built-in background transport workers, including StdTransportThreadOptions and TokioTransportThreadOptions (#1142).
• Added client report protocol types in sentry-types, including ClientReport, client_report::Item, client_report::Category, and client_report::Reason, plus support for serializing client_report envelope items (#1144).
• Added a client report Recorder type, which modern TransportFactory implementations receive via TransportOptions. Transports can use this recorder to record discarded Sentry data; the SDK aggregates these reported losses and automatically sends them in a future envelope (#1158).

Deprecations

• Deprecated Hub::with. Use Hub::current instead (#1126).

Fixes

• Fixed ureq transport handling for HTTP error statuses so 429 rate limits and 413 payload-too-large responses are processed correctly (#1177).

Behavior Changes

• Custom transport factories that implement TransportFactory::create_transport now receive ClientOptions reconstructed from TransportOptions. The reconstructed options include only transport-relevant fields, such as DSN, user agent, proxy settings, and TLS certificate validation settings. This may affect code that reads non-transport fields in create_transport, but the API remains source-compatible and this change is included in a minor/patch release (#1142).

Commits

• 12658ea release: 0.48.3
• 06d4d5e meta(changelog): Add entry for Hub::with deprecation (#1196)
• f22532b chore(client-reports): Prevent client report loss when envelope dropped (#1195)
• 2c33119 meta(changelog): Prepare for client reports release (#1194)
• 63525ed chore: Record client reports for dropped logs/metrics (#1193)
• a80cf84 chore: Record transaction and span drops in client reports (#1192)
• 964f17d chore(client-reports): Record event pipeline drops (#1191)
• ad1a65a chore(transport): Record tokio thread client report losses (#1186)
• 4908b0b chore(transport): Record std thread client report losses (#1184)
• 753e68a chore(ureq): Record envelope losses in the Ureq transport (#1178)
• Additional commits viewable in compare view

Updates sentry-tracing from 0.48.2 to 0.48.3

Release notes

Sourced from sentry-tracing's releases.

0.48.3

The Sentry Rust SDK now reports data discarded by the SDK to Sentry’s Stats page. The SDK reports approximate counts for drops from transports, queues, rate-limit backoff, sampling, event processors, and before_send* callbacks, including span counts for dropped transactions and byte counts for dropped logs and metrics.

New Features

• Added EnvelopeFilter and EnvelopeFilterCallbacks, which let callers observe envelope items removed by Envelope::filter, including attachments removed after their event or transaction is filtered out. Existing Envelope::filter closure callers continue to work, although some closures may require an explicit item type annotation (#1182).
• Added the LossSource trait, which provides the client report data categories and quantities to report when supported Sentry data is dropped (#1170).
• Added TransportFactory::create_transport_with_options, which constructs transports from TransportOptions instead of full ClientOptions (#1142).
• Added transport-specific options types and with_options constructors for built-in HTTP transports, including ReqwestHttpTransportOptions, CurlHttpTransportOptions, UreqHttpTransportOptions, and EmbeddedSVCHttpTransportOptions (#1142).
• Added transport worker options types and deprecated the legacy constructors for built-in background transport workers, including StdTransportThreadOptions and TokioTransportThreadOptions (#1142).
• Added client report protocol types in sentry-types, including ClientReport, client_report::Item, client_report::Category, and client_report::Reason, plus support for serializing client_report envelope items (#1144).
• Added a client report Recorder type, which modern TransportFactory implementations receive via TransportOptions. Transports can use this recorder to record discarded Sentry data; the SDK aggregates these reported losses and automatically sends them in a future envelope (#1158).

Deprecations

• Deprecated Hub::with. Use Hub::current instead (#1126).

Fixes

• Fixed ureq transport handling for HTTP error statuses so 429 rate limits and 413 payload-too-large responses are processed correctly (#1177).

Behavior Changes

• Custom transport factories that implement TransportFactory::create_transport now receive ClientOptions reconstructed from TransportOptions. The reconstructed options include only transport-relevant fields, such as DSN, user agent, proxy settings, and TLS certificate validation settings. This may affect code that reads non-transport fields in create_transport, but the API remains source-compatible and this change is included in a minor/patch release (#1142).

Changelog

Sourced from sentry-tracing's changelog.

0.48.3

The Sentry Rust SDK now reports data discarded by the SDK to Sentry’s Stats page. The SDK reports approximate counts for drops from transports, queues, rate-limit backoff, sampling, event processors, and before_send* callbacks, including span counts for dropped transactions and byte counts for dropped logs and metrics.

New Features

• Added EnvelopeFilter and EnvelopeFilterCallbacks, which let callers observe envelope items removed by Envelope::filter, including attachments removed after their event or transaction is filtered out. Existing Envelope::filter closure callers continue to work, although some closures may require an explicit item type annotation (#1182).
• Added the LossSource trait, which provides the client report data categories and quantities to report when supported Sentry data is dropped (#1170).
• Added TransportFactory::create_transport_with_options, which constructs transports from TransportOptions instead of full ClientOptions (#1142).
• Added transport-specific options types and with_options constructors for built-in HTTP transports, including ReqwestHttpTransportOptions, CurlHttpTransportOptions, UreqHttpTransportOptions, and EmbeddedSVCHttpTransportOptions (#1142).
• Added transport worker options types and deprecated the legacy constructors for built-in background transport workers, including StdTransportThreadOptions and TokioTransportThreadOptions (#1142).
• Added client report protocol types in sentry-types, including ClientReport, client_report::Item, client_report::Category, and client_report::Reason, plus support for serializing client_report envelope items (#1144).
• Added a client report Recorder type, which modern TransportFactory implementations receive via TransportOptions. Transports can use this recorder to record discarded Sentry data; the SDK aggregates these reported losses and automatically sends them in a future envelope (#1158).

Deprecations

• Deprecated Hub::with. Use Hub::current instead (#1126).

Fixes

• Fixed ureq transport handling for HTTP error statuses so 429 rate limits and 413 payload-too-large responses are processed correctly (#1177).

Behavior Changes

• Custom transport factories that implement TransportFactory::create_transport now receive ClientOptions reconstructed from TransportOptions. The reconstructed options include only transport-relevant fields, such as DSN, user agent, proxy settings, and TLS certificate validation settings. This may affect code that reads non-transport fields in create_transport, but the API remains source-compatible and this change is included in a minor/patch release (#1142).

Commits

• 12658ea release: 0.48.3
• 06d4d5e meta(changelog): Add entry for Hub::with deprecation (#1196)
• f22532b chore(client-reports): Prevent client report loss when envelope dropped (#1195)
• 2c33119 meta(changelog): Prepare for client reports release (#1194)
• 63525ed chore: Record client reports for dropped logs/metrics (#1193)
• a80cf84 chore: Record transaction and span drops in client reports (#1192)
• 964f17d chore(client-reports): Record event pipeline drops (#1191)
• ad1a65a chore(transport): Record tokio thread client report losses (#1186)
• 4908b0b chore(transport): Record std thread client report losses (#1184)
• 753e68a chore(ureq): Record envelope losses in the Ureq transport (#1178)
• Additional commits viewable in compare view

Updates time from 0.3.47 to 0.3.51

Release notes

Sourced from time's releases.

v0.3.51

See the changelog for details.

v0.3.49

See the changelog for details.

v0.3.48

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.51 [2026-06-22]

Fixed

• time compiles with macros enabled. This version is otherwise identical to v0.3.50.

0.3.50 [2026-06-22]

Added

• Timestamp type

Fixed

• [year] in a runtime-parsed version 3 format description when the large-dates feature is not enabled now succeeds. This previously failed due to a missing #[cfg].

Performance

• Further gains when parsing with the non-deprecated parts of the RFC 2822 well-known format
• Gains when formatting with the ISO 8601 well-known format
• Date arithmetic is improved in common situations

0.3.49 [2026-06-13]

Fixed

• Due to a long-standing bug in the Rust compiler, v0.3.48 caused a number of crates to stop compiling. A patch has been added that avoids triggering the bug.

0.3.48 [2026-06-12] [YANKED]

Security

• The number of digits parsed by [subsecond digits:1+] is capped at 32 to avoid parsing unbounded user input. Digits after the 9th have no semantic meaning.
• Explicitly specify #[repr] for Weekday. The value of the variants is relied upon in multiple locations for soundness. The practical effect of this change is nothing, as Rust has always mapped C-like enums to 0..N in memory.

Compatibility

• Non-UTF-8 formatting and parsing is deprecated without replacement. It is recommended to only format and parse valid UTF-8.
• format_description::parse is deprecated. It is recommended to use format_description::parse_borrowed::<3> or format_description::parse_owned::<3>.

Added

• All types in the unit module have a generic parameter, though this is currently not used for

... (truncated)

Commits

• 4ae...

  Description has been truncated