Skip to content

chore(deps): update rust crate tower to v0.5.3#681

Merged
stmh merged 1 commit into
mainfrom
renovate/rust-dependencies-auto-merge-(patch)
Jan 12, 2026
Merged

chore(deps): update rust crate tower to v0.5.3#681
stmh merged 1 commit into
mainfrom
renovate/rust-dependencies-auto-merge-(patch)

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Jan 12, 2026

This PR contains the following updates:

Package Type Update Change
tower workspace.dependencies patch 0.5.20.5.3

Release Notes

tower-rs/tower (tower)

v0.5.3: tower 0.5.3

Compare Source

Added
  • builder: Add ServiceBuilder::boxed_clone_sync() helper (#​804)
Fixed
  • retry: Check that supplied jitter is not NaN (#​843)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file renovate rust labels Jan 12, 2026
@claude
Copy link
Copy Markdown

claude Bot commented Jan 12, 2026

PR Review: Update tower from 0.5.2 to 0.5.3

Summary

This is a minor patch update from Renovate that updates the tower crate from version 0.5.2 to 0.5.3. The change is safe to merge.


Code Quality ✅

  • Change scope: Minimal - only updates Cargo.lock with new version and checksum
  • Conventional commits: Follows project standards with chore(deps): prefix
  • Automated maintenance: Proper use of Renovate for dependency updates

Potential Issues ✅ None Found

After reviewing the codebase:

  1. Tower usage is minimal and safe:

    • Only used for basic Layer and Service traits in scotty/src/api/rate_limiting/middleware.rs
    • Project only uses tower with util feature: tower = { version = "0.5", features = ["util"] }
    • No usage of the features affected by this patch (retry with jitter, ServiceBuilder boxed_clone_sync)
  2. Retry logic is custom:

    • Project implements its own retry mechanism in scotty-core/src/http/retry.rs
    • Does NOT use tower's retry functionality (which had the jitter NaN fix)
  3. Service builder not used:

    • No usage of ServiceBuilder in the codebase
    • The new boxed_clone_sync() helper is irrelevant

Performance Considerations ✅

  • Patch version bump - no performance impact expected
  • Tower v0.5.3 fixes:
    • Added ServiceBuilder::boxed_clone_sync() helper (#804)
    • Fixed retry jitter NaN validation (#843)

Neither of these changes affects the current usage patterns in Scotty.


Security Concerns ✅

  • No security-related changes in this patch
  • Standard dependency update from a trusted crate (tower-rs)
  • Checksum update is expected and correct

Test Coverage ✅

  • This is a patch-level dependency update
  • Existing tests should provide adequate coverage
  • CI checks will validate compatibility (if enabled)

Recommendation

✅ APPROVE & MERGE - This is a safe, routine dependency update with no breaking changes or compatibility concerns for the Scotty project.

@stmh stmh merged commit 156e7e9 into main Jan 12, 2026
24 checks passed
@renovate renovate Bot deleted the renovate/rust-dependencies-auto-merge-(patch) branch January 12, 2026 22:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file renovate rust

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant