Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 9, 2025

Bumps alloy-transport-http from 0.6.4 to 1.0.38.

Release notes

Sourced from alloy-transport-http's releases.

v1.0.38

What's Changed

New Contributors

Full Changelog: alloy-rs/alloy@v1.0.37...v1.0.38

v1.0.37

What's Changed

... (truncated)

Changelog

Sourced from alloy-transport-http's changelog.

1.0.38 - 2025-10-08

Bug Fixes

  • [eip7547] InclusionListStatusV1 serialize_map size hint (#3005)
  • Use injected #alloy_rlp path in generated typed_decode error mapping (#2996)
  • [cache] Prevent caching for tag-based BlockId in get_block_receipts (#2969)
  • Silent truncation in Ledger message signing (#2971)
  • [provider] Correct TxFiller rustdoc link (#2973)
  • [provider] Use StateContext::default() placeholder in eth_callMany serialization (#2968)
  • [beacon] Use u64 for gas equality errors (#2961)

Dependencies

  • [deps] Bump crate-ci/typos from 1.36.3 to 1.37.2 (#2990)
  • [deps] Bump foundry-rs/foundry-toolchain from 1.4.0 to 1.5.0 (#2991)
  • [deps] Bump taiki-e/install-action from 2.62.13 to 2.62.21 (#2992)

Documentation

  • [rpc-types-eth] Clarify EIP-4844 preferred_type docs to include blob_versioned_hashes (#2978)

Features

  • Generate TypedTransaction enum in envelope macro (#2925)
  • [beacon-types] GetBlobsResponse (#2994)
  • Relax Clone bound for PollerBuilder and prepare_static_poller (#2993)

Miscellaneous Tasks

  • [meta] Add onbjerg + zerosnacks, remove yash as a code owner (#3000)
  • [rpc-client] Remove duplicate localhost:8545 parsing assertion (#2989)
  • Deduplicate Either async_trait attribute (#2982)
  • Remove outdated TODO about current-thread polling (#2977)

Other

  • Add grandizzy as codeowner (#3002)

Performance

  • [serde] Avoid allocation in B256 hex serialization (#2998)

Refactor

  • Remove redundant struct update syntax in AnyHeader construction (#2980)
  • Simplify PreStateConfig initialization in tests (#2964)
  • [consensus] Unify try_get_provider body across std/no_std (#2963)

1.0.37 - 2025-09-30

... (truncated)

Commits
  • 52455a1 chore: release 1.0.38 (#3007)
  • 6d2b3c7 fix(eip7547): InclusionListStatusV1 serialize_map size hint (#3005)
  • b55015c feat: generate TypedTransaction enum in envelope macro (#2925)
  • 1fe36e6 Add grandizzy as codeowner (#3002)
  • 50b347f perf(serde): avoid allocation in B256 hex serialization (#2998)
  • 6929d34 chore(meta): add onbjerg + zerosnacks, remove yash as a code owner (#3000)
  • ff56451 chore(deps): bump crate-ci/typos from 1.36.3 to 1.37.2 (#2990)
  • 4599c60 fix: Use injected #alloy_rlp path in generated typed_decode error mapping (#2...
  • 9f93438 chore(deps): bump foundry-rs/foundry-toolchain from 1.4.0 to 1.5.0 (#2991)
  • a6f7db0 feat(beacon-types): GetBlobsResponse (#2994)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [alloy-transport-http](https://github.com/alloy-rs/alloy) from 0.6.4 to 1.0.38.
- [Release notes](https://github.com/alloy-rs/alloy/releases)
- [Changelog](https://github.com/alloy-rs/alloy/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/alloy@v0.6.4...v1.0.38)

---
updated-dependencies:
- dependency-name: alloy-transport-http
  dependency-version: 1.0.38
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 9, 2025
@github-actions
Copy link

github-actions bot commented Oct 9, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
cargo/alloy-json-rpc 1.0.38 UnknownUnknown
cargo/alloy-primitives 1.4.0 UnknownUnknown
cargo/alloy-sol-macro 1.4.0 UnknownUnknown
cargo/alloy-sol-macro-expander 1.4.0 UnknownUnknown
cargo/alloy-sol-macro-input 1.4.0 UnknownUnknown
cargo/alloy-sol-types 1.4.0 UnknownUnknown
cargo/alloy-transport 1.0.38 UnknownUnknown
cargo/alloy-transport-http 1.0.38 UnknownUnknown
cargo/foldhash 0.2.0 UnknownUnknown
cargo/syn-solidity 1.4.0 UnknownUnknown
cargo/alloy-transport-http >= 1.0.0, < 2.0.0 UnknownUnknown

Scanned Files

  • Cargo.lock
  • Cargo.toml

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Oct 20, 2025

Superseded by #21.

@dependabot dependabot bot closed this Oct 20, 2025
@dependabot dependabot bot deleted the dependabot/cargo/alloy-transport-http-1.0.38 branch October 20, 2025 07:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant