[renovate]

This PR contains the following updates:

Package	Type	Update	Change
bon (source)	dependencies	patch	3.10.2 → 3.10.3
musli	dependencies	patch	0.2.0 → 0.2.1
sentry (source)	dependencies	patch	0.49.3 → 0.49.5
sigstore/cosign-installer	action	patch	v4.1.2 → v4.1.3
tokio (source)	dependencies	patch	1.54.0 → 1.54.1

---

Release Notes

elastio/bon (bon)

v3.10.3

Compare Source

Fixed

• Fix a panic with cfg attributes on items named with raw identifiers (#​411)

Internal

• Regular maintenance (#​410, #​413, #​414)

udoprog/musli (musli)

v0.2.1

Compare Source

getsentry/sentry-rust (sentry)

v0.49.5

Compare Source

Documentation

• Added code examples to the ErrorLayer::enable_span_attributes and BreadcrumbLayer::enable_span_attributes docs, which were missing from the 0.49.4 release (#​1373).

v0.49.4

Compare Source

Minimum Supported Rust Version

• Bump minimum supported Rust version to 1.89.0 (#​1365).

Features

• Redesigned sentry-tracing around independently selectable SpanLayer, LogLayer, ErrorLayer, and BreadcrumbLayer. Most applications should use the span and log layers (#​1342).

Fixes

• The Actix and Tower integrations now set the already_exists span status on transactions for HTTP 409 Conflict responses, instead of invalid_argument (#​1353).

Deprecations

• Deprecated sentry_tracing::layer() and SentryLayer, along with their associated filtering and mapping types and helpers, in favor of independently selectable SpanLayer, LogLayer, ErrorLayer, and BreadcrumbLayer. A migration guide is available (#​1342, #​1348).
  • As this is a larger change, we would love to hear your feedback about the new API if you have trouble migrating. Please open a GitHub issue, and we will help identify a solution.

sigstore/cosign-installer

v4.1.3

Compare Source

What's Changed

• Bump Cosign to v3.1.4 (latest release) in #​257

Full Changelog: sigstore/cosign-installer@v4.1.2...v4.1.3

tokio-rs/tokio (tokio)

v1.54.1: Tokio v1.54.1

Compare Source

1.54.1 (October 21st, 2026)

Fixed

• time: revert "remove the runtime handle from timers" (#​8692)

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 30.33%. Comparing base (14fc426) to head (9730527).

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #85   +/-   ##
=======================================
  Coverage   30.33%   30.33%           
=======================================
  Files          63       63           
  Lines        1892     1892           
  Branches     1892     1892           
=======================================
  Hits          574      574           
  Misses       1306     1306           
  Partials       12       12           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.