[dependabot]

Bumps the cargo-patch group with 3 updates in the / directory: http-body-util, hyper and mongodb.

Updates http-body-util from 0.1.4 to 0.1.5

Commits

• 07838bd http-body-util v0.1.5
• 612118c docs: migrate from doc_auto_cfg to doc_cfg (#175)
• See full diff in compare view

Updates hyper from 1.11.0 to 1.11.1

Release notes

Sourced from hyper's releases.

v1.11.1

Bug Fixes

• http1:
  • detect TE: trailers caselessly and with other values (#4152) (72fcf545)
  • recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)
  • flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)
  • evict pooled conn on request-side Connection: close (#4110) (da19be08)

---

What's Changed

• fix(http1): evict pooled conn on request-side Connection: close by @​samlandfried in hyperium/hyper#4110
• test(http1): rewrite disabled old 0.1-futures conn tests by @​seanmonstar in hyperium/hyper#4138
• Update CONTRIBUTING.md by @​Catwoman08 in hyperium/hyper#4140
• refactor(error/upgrade): move from the use of ref patterns to & and remove allow for lint ref_patterns by @​logan-bobo in hyperium/hyper#4141
• fix(http1): flush bytes buffered by the write re-check before yielding by @​ricochet in hyperium/hyper#4143
• Fix documentation typo by @​latent-9 in hyperium/hyper#4146
• perf(http2): reserve minimal send capacity when piping request bodies by @​sandersaares in hyperium/hyper#4149
• chore(lib): cleanup old commented code by @​dswij in hyperium/hyper#4151
• fix(http1): recognize \n\r\n as a head terminator in the partial-read fast path by @​nam2ee in hyperium/hyper#4147
• docs(body): add streaming read examples by @​fzlzjerry in hyperium/hyper#4148
• fix(http1): detect TE: trailers caselessly and with other values by @​seanmonstar in hyperium/hyper#4152
• fix missing_errors_doc lint by @​CinisBorn in hyperium/hyper#4154
• refactor: drop redundant continue and remove needless_continue allow by @​MsfPablo in hyperium/hyper#4157
• docs: expand crate-level cancel safety section with HTTP/1 vs HTTP/2 by @​MsfPablo in hyperium/hyper#4156
• style(lib): temporarily allow some new clippy lints by @​seanmonstar in hyperium/hyper#4165
• Add an initial COLLABORATORS guide by @​seanmonstar in hyperium/hyper#4158
• clippy: remove lints removed in newer clippy versions by @​tangaac in hyperium/hyper#4167
• Prepare v1.11.1 by @​seanmonstar in hyperium/hyper#4169

New Contributors

• @​samlandfried made their first contribution in hyperium/hyper#4110
• @​Catwoman08 made their first contribution in hyperium/hyper#4140
• @​logan-bobo made their first contribution in hyperium/hyper#4141
• @​ricochet made their first contribution in hyperium/hyper#4143
• @​latent-9 made their first contribution in hyperium/hyper#4146
• @​sandersaares made their first contribution in hyperium/hyper#4149
• @​nam2ee made their first contribution in hyperium/hyper#4147
• @​fzlzjerry made their first contribution in hyperium/hyper#4148
• @​CinisBorn made their first contribution in hyperium/hyper#4154
• @​MsfPablo made their first contribution in hyperium/hyper#4157
• @​tangaac made their first contribution in hyperium/hyper#4167

Full Changelog: hyperium/hyper@v1.11.0...v1.11.1

Changelog

Sourced from hyper's changelog.

v1.11.1 (2026-08-27)

Bug Fixes

• http1:
  • detect TE: trailers caselessly and with other values (#4152) (72fcf545)
  • recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)
  • flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)
  • evict pooled conn on request-side Connection: close (#4110) (da19be08)

Commits

• 6371cd4 v1.11.1
• 37c9d0c style(lib): remove lints that have been removed in newer clippy (#4167)
• 08a2881 docs(contrib): add initial COLLABORATORS guide (#4158)
• 8b2e533 style(lib): temporarily allow some new clippy lints (#4165)
• 8fcaf1a docs(lib): expand crate-level cancel safety section with HTTP/1 vs HTTP/2 (#4...
• d32b294 style(lib): fix needless_continue lint (#4157)
• fca07bd style(lib): fix missing_errors_doc lint (#4154)
• 72fcf54 fix(http1): detect TE: trailers caselessly and with other values (#4152)
• af432e9 docs(body): add streaming read examples (#4148)
• 3534d75 fix(http1): recognize \n\r\n as a head terminator in the partial-read fast ...
• Additional commits viewable in compare view

Updates mongodb from 3.8.0 to 3.8.2

Release notes

Sourced from mongodb's releases.

v3.8.2

The MongoDB Rust driver team is pleased to announce the v3.8.2 release of the mongodb crate, now available for download from crates.io.

[!IMPORTANT] This is a security patch release for CVE-2026-81526. Upgrading is recommended for all users.

This release fixes a bug that would allow Client::bulk_write to write to a different database than the one specified in a write model's namespace.

Full Release Notes

Bugfixes

• RUST-2467 / CVE-2026-81526: Validate database and collection name arguments against "." and NUL bytes

v3.8.1

The MongoDB Rust driver team is pleased to announce the v3.8.1 release of the mongodb crate, now available for download from crates.io.

This release fixes two bugs: a potential infinite loop in change streams, and the find_one_and_* methods not reporting errors in some circumstances.

Full Release Notes

Bugfixes

• RUST-2465 Fix an infinite loop in ChangeStream iteration (#1760)
• RUST-2479 Report write concern errors for findAndModify (#1768)

Commits

• 78b87a5 release 3.8.2 (#1778)
• a127aa4 release v3.8.1 (#1774)
• 98f8d9c RUST-2476 Additional cherrypicks for 3.8.1 (#1773)
• 85f6928 RUST-2465 Fix an infinite loop in ChangeStream iteration (#1760) (#1767)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.