Skip to content

Bump TinyUFO from 0.8.0 to 0.8.1#17

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/TinyUFO-0.8.1
Open

Bump TinyUFO from 0.8.0 to 0.8.1#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/TinyUFO-0.8.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown

Bumps TinyUFO from 0.8.0 to 0.8.1.

Release notes

Sourced from TinyUFO's releases.

Pingora 0.8.1

0.8.1 - 2026-06-04

🔒 Security

  • Bound default HTTP/2 server limits to mitigate memory exhaustion.
  • Upgrade Rustls-related dev-dependencies to address rustls-webpki security advisories.

⚙️ Miscellaneous Tasks

  • Pin tracing dependencies to preserve Rust 1.84 compatibility.
  • Use cargo check for MSRV verification instead of compiling dev-dependencies during tests.
  • Update the Semgrep OSS scanning workflow.
  • Use valid paths in header serialization tests.
  • Gate HTTP/1 CONNECT tests on patched HTTP/1 support.
Changelog

Sourced from TinyUFO's changelog.

0.8.1 - 2026-06-04

🔒 Security

  • Bound default HTTP/2 server limits to mitigate memory exhaustion.
  • Upgrade Rustls-related dev-dependencies to address rustls-webpki security advisories.

⚙️ Miscellaneous Tasks

  • Pin tracing dependencies to preserve Rust 1.84 compatibility.
  • Use cargo check for MSRV verification instead of compiling dev-dependencies during tests.
  • Update the Semgrep OSS scanning workflow.
  • Use valid paths in header serialization tests.
  • Gate HTTP/1 CONNECT tests on patched HTTP/1 support.
Commits
  • 719ef6c Release 0.8.1
  • 2e59680 RUSTSEC-2026-0098 and RUSTSEC-2026-0099 fixes
  • a444389 Gate CONNECT tests on patched HTTP/1 support
  • 45dbece Use valid paths in header serialization tests
  • f7ad7ce ci: add Semgrep OSS scanning workflow
  • 5eeddba ci: use cargo check for MSRV instead of cargo test
  • 783b673 Pin cf-rustracing and cf-rustracing-jaeger due to rand 0.10 edition 2024 depe...
  • d193c8d Bound default HTTP/2 server limits to mitigate memory exhaustion
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [TinyUFO](https://github.com/cloudflare/pingora) from 0.8.0 to 0.8.1.
- [Release notes](https://github.com/cloudflare/pingora/releases)
- [Changelog](https://github.com/cloudflare/pingora/blob/0.8.1/CHANGELOG.md)
- [Commits](cloudflare/pingora@0.8.0...0.8.1)

---
updated-dependencies:
- dependency-name: TinyUFO
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants