chore(deps): weekly safe cargo updates · 4 packages

[mendral-app]

Packages bumped

Package	Old	New	Role
tonic	0.14.2	0.14.6	gRPC framework
tonic-prost	0.14.2	0.14.6	Tonic + Prost integration
tonic-prost-build	0.14.2	0.14.6	Build-time codegen
prost-wkt-types	0.7	0.7.1	Well-known protobuf types extension

Per-package details

tonic / tonic-prost / tonic-prost-build 0.14.2 → 0.14.6

Changelog highlights (v0.14.6):

• Expose ServerCertVerifier API on transport/channel
• Fix: map no-trailers OK status to unknown
• Add max_frame_size to client Endpoint
• Allow setting HTTP/2 client header table size
• Fix panic when client drops connection early
• Support well-known types resolved by prost to their Rust counterparts

Impact on this repo: This repo defines gRPC APIs via protobuf and generates Rust bindings. The tonic ecosystem is used for code generation (tonic-prost-build) and the generated server/client stubs (tonic, tonic-prost). These are all additive/fix changes — no breaking API modifications. The new features (ServerCertVerifier, max_frame_size, header table size) are opt-in and not used here.

prost-wkt-types 0.7 → 0.7.1

Changelog highlights:

• Update schemars dependency to 1.2
• Project structure refactored to use cargo workspace features

Impact on this repo: This crate provides well-known protobuf type wrappers used in the generated code. The 0.7.1 bump is purely internal (dependency update + workspace restructuring). No API changes.

Files modified

• Cargo.toml — version bumps for 4 packages

Skipped this ecosystem

Package	Reason
prost	Open PR #3 already targets latest (0.14.4)
prost-types	Open PR #3 already targets latest (0.14.4)
tokio	Open PR #9 already targets 1.53.1
serde	Specified as range "1.0" in Cargo.toml; lockfile resolves latest automatically

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session

---

Note

Low Risk
Patch-level dependency bumps with no code changes; tonic 0.14.x fixes/features are opt-in and prost-wkt-types 0.7.1 is internal.

Overview
Dependency-only update in Cargo.toml: the gRPC stack (tonic, tonic-prost, tonic-prost-build) moves from 0.14.2 → 0.14.6, and prost-wkt-types from 0.7 → 0.7.1.

No application or protobuf source changes—only manifest version pins for the crates used to generate and run Dragonfly’s gRPC API bindings.

^{Reviewed by Cursor Bugbot for commit 618aba0. Bugbot is set up for automated code reviews on this repo. Configure here.}