build(deps): bump the cargo group across 1 directory with 21 updates by dependabot[bot] · Pull Request #889 · nix-community/nix-init

dependabot · 2026-10-19T08:55:44Z

Bumps the cargo group with 21 updates in the / directory:

Package	From	To
anyhow	`1.0.103`	`1.0.104`
cargo	`0.98.0`	`0.100.0`
cargo-util-terminal	`0.1.0`	`0.1.2`
flate2	`1.1.9`	`1.1.10`
indoc	`2.0.7`	`2.0.8`
owo-colors	`4.3.0`	`4.4.0`
reqwest	`0.13.4`	`0.13.5`
serde	`1.0.228`	`1.0.229`
serde_json	`1.0.150`	`1.0.154`
serde_with	`3.21.0`	`3.24.0`
spdx	`0.13.4`	`0.13.6`
time	`0.3.53`	`0.3.55`
versions	`7.0.0`	`8.0.1`
which	`8.0.5`	`8.0.6`
zip	`8.6.0`	`9.0.3`
clap	`4.6.2`	`4.6.7`
tokio	`1.53.0`	`1.53.3`
insta	`1.48.0`	`1.49.0`
trycmd	`1.2.0`	`1.2.1`
clap_complete	`4.6.7`	`4.6.11`
clap_mangen	`0.3.0`	`0.3.3`

Updates anyhow from 1.0.103 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

Update syn dev-dependency to version 3

Commits

1dbe186 Release 1.0.104
f6479f8 Update to syn 3
See full diff in compare view

Updates cargo from 0.98.0 to 0.100.0

Commits

5f94df4 [beta-1.99] backport 17401 and 17366 (#17403)
705ebd0 chore(ci): exclude resolver-tests from intra doc link checks
b650220 Bump cargo-test-support version
09d2150 Fix clippy warning
ecb2884 fix(home): rustdoc lint
a2077d6 Revert "refactor: move the sysroot path to the GlobalContext"
177e8ce Revert "refactor: update all users of the sysroot path"
fd5f290 Revert "test(cfg): use the gctx sysroot when building TargetInfo"
1d0bb37 [beta-1.99] use old API to avoid MSRV bump
dd12925 fix(trim-paths): custom workspace-relative member paths remap
Additional commits viewable in compare view

Updates cargo-util-terminal from 0.1.0 to 0.1.2

Commits

See full diff in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

feat: reuse zlib's decoder buffer by @Vaiz in rust-lang/flate2-rs#532

feat: add reset method for read::GzDecoder and buffered::GzDecoder by @Vaiz in rust-lang/flate2-rs#534

Drop cloudflare-zlib by @kornelski in rust-lang/flate2-rs#539

Add a wrapper for the Crc struct by @MikkelPaulson in rust-lang/flate2-rs#540

Bump miniz_oxide to 0.9 by @oscargus in rust-lang/flate2-rs#543

Upgrade miniz_oxide and add unit tests of the different flush kinds by @fintelia in rust-lang/flate2-rs#498

Fix infinite loop in writing gzip header/footer by @Shnatsel in rust-lang/flate2-rs#547

test: generate corrupt gzip fixture at runtime by @nanookclaw in rust-lang/flate2-rs#550

Reject oversized gzip extra fields by @Byron in rust-lang/flate2-rs#553

Reject incomplete deflate streams at EOF by @Guflly in rust-lang/flate2-rs#556

Include README.md in a private module by @bushrat011899 in rust-lang/flate2-rs#562

Add no_std support using nightly alloc_io by @bushrat011899 in rust-lang/flate2-rs#559

Update get_mut() documentation to make clear how 'inner` can be used by @Byron in rust-lang/flate2-rs#558

New Contributors

@Vaiz made their first contribution in rust-lang/flate2-rs#532

@MikkelPaulson made their first contribution in rust-lang/flate2-rs#540

@oscargus made their first contribution in rust-lang/flate2-rs#543

@nanookclaw made their first contribution in rust-lang/flate2-rs#550

@Guflly made their first contribution in rust-lang/flate2-rs#556

@bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
fb5228d Merge pull request #559 from bushrat011899/no_std
6ed3ba3 Add executable no_std example
faed8a0 Expand CI to test no_std compatibility and correctness
2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
3fe1126 Centralize usage of std for error and io
98e313a Add GzHeader::mtime_as_duration
0642965 Switch to core implicit prelude and only use std where required
454a63c Remove left-over dbg! statement
2a490b7 Add runtime_detection feature
Additional commits viewable in compare view

Updates indoc from 2.0.7 to 2.0.8

Release notes

Sourced from indoc's releases.

2.0.8

Add panicdoc macro (#70, thanks @joshka)

Commits

79ab4aa Release 2.0.8
23804cf Touch up PR 70
69d23e5 Merge pull request #70 from joshka/joshka/panicdoc
e769537 Add panicdoc macro
c75dfae Update ui test suite to nightly-2026-08-12
8faf6fa Raise minimum tested compiler to rust 1.88
77d569f Update actions/upload-artifact@v6 -> v7
615b766 Update actions/checkout@v6 -> v7
8ab5301 Lint clippy::from_iter_instead_of_collect has been removed
7d85ef9 Raise minimum tested compiler to rust 1.85
Additional commits viewable in compare view

Updates owo-colors from 4.3.0 to 4.4.0

Release notes

Sourced from owo-colors's releases.

owo-colors 4.4.0

Changed

Updated MSRV to Rust 1.83. Thanks Expyron for your first contribution!

Changelog

Sourced from owo-colors's changelog.

[4.4.0] - 2026-08-27

Changed

Updated MSRV to Rust 1.83. Thanks Expyron for your first contribution!

Commits

7392e40 [owo-colors] version 4.4.0
8037325 [meta] update changelog
9f8e57e [meta] automate changelog updates via cargo-release (#161)
540fd51 Increase MSRV to 1.83 (#160)
367baea Remove .claude directory to disincentivize LLM contributions
f83e6e2 [release] use trusted publishing
See full diff in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

v1.0.151

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates serde_with from 3.21.0 to 3.24.0

Release notes

Sourced from serde_with's releases.

serde_with v3.24.0

Added

Implement JsonSchemaAs for NoneAsEmptyString, so fields using it compile with the schemars_* features (#1014)

Changed

Make with_prefix! and with_suffix! available with the alloc feature, instead of only with std (#1008)

Fixed

Handle potential panics in deserialization of chrono and time DateTimes. This was privately reported by @NotAFlightRisk.

serde_with v3.23.0

Changed

Update syn and darling dependencies to use syn v3 (#992)

Update dev-dependencies to newer versions (#993)

Update base64 to a newer version. This should not have any API change, but some error messages might change. (#993)

serde_as can now parse cfg_attr(true, ...) and cfg_attr(false, ...) (#995) true/false are new literals as of Rust 1.88 but need to be parsed explicitly with the syn types. This is used when emitting schemars annotations.

serde_with v3.22.0

Added

Add support for jiff v0.2 behind the new jiff_0_2 feature flag (#936) jiff::SignedDuration works with DurationSeconds and its variants. jiff::Timestamp, jiff::Zoned, and jiff::civil::DateTime work with TimestampSeconds and its variants. Deserializing a jiff::Zoned uses the system time zone, like chrono::DateTime<Local>.

Fixed

Extend the GHSA-7gcf-g7xr-8hxj fix to the duplicate-key-prevention collections. The rust::sets_duplicate_value_is_error, rust::maps_duplicate_key_is_error, rust::sets_last_value_wins, and rust::maps_first_key_wins adapters created their backing sets/maps with with_capacity_and_hasher using the raw deserializer size_hint, bypassing the size_hint_cautious cap added in #966 (the clippy.toml disallowed_methods lint only covers Vec::with_capacity, not with_capacity_and_hasher, so these sites were not flagged). Attacker-controlled input claiming a huge length could panic with Hash table capacity overflow before a single element was read. All such constructions now route through size_hint_cautious.

Commits

35ac84c Bump version to 3.24 (#1016)
7b8e561 Bump version to 3.24
6e576c8 Bump the github-actions group with 2 updates (#1012)
7b1814b Add schemars support for NoneAsEmptyString (#1014)
92eeedd Handle potential panic during deserialization for large datetimes (#1015)
3404642 Handle potential panic during deserialization for large datetimes
c7073b9 Add schemars support for NoneAsEmptyString
6b32290 Run test with only the alloc feature (#1013)
3361c69 Run test with only the alloc feature
b43bb81 Reduce required feature for with_{prefix,suffix} from std to alloc (#1008)
Additional commits viewable in compare view

Updates spdx from 0.13.4 to 0.13.6

Release notes

Sourced from spdx's releases.

0.13.6

Fixed

PR#98 cleaned up the error representation.

Changed

PR#97 updated SPDX license list to 3.29.0.

0.13.5

Fixed

PR#96 fixed LicenseItem's PartialEq and PartialOrd implementations to agree with its total ordering, resolving #95.

Changelog

Sourced from spdx's changelog.

[0.13.6] - 2026-10-02

Fixed

PR#98 cleaned up the error representation.

Changed

PR#97 updated SPDX license list to 3.29.0.

[0.13.5] - 2026-08-06

Fixed

PR#96 fixed LicenseItem's PartialEq and PartialOrd implementations to agree with its total ordering, resolving #95.

Commits

0ca398c Release 0.13.6
d2bb576 Update CHANGELOG
b8ba627 Avoid duplicate cache error output (#98)
0590fc5 Update license list to 3.29.0 (#97)
10dcdc2 Release 0.13.5
057eb32 Fix CHANGELOG
744e4cd Fix LicenseItem ordering consistency (#96)
See full diff in compare view

Updates time from 0.3.53 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

v0.3.54

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

Avoid underflow in DateIter::nth, ensuring correct behavior.

Avoid overflow when deserializing timestamps.

Handle out-of-bounds data when deserializing.

Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.

No longer silence errors when deserializing UtcOffset.

OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

0.3.54 [2026-07-20]

Added

PrimitiveDateTime has been renamed to PlainDateTime.

Duration has been renamed to SignedDuration.

Iteration is now possible over Date, Month, and Weekday. Relevant iterator methods have been overridden to ensure maximum performance.

For both PlainDateTime and SignedDuration, a non-deprecated type alias has been added for backwards compatibility. The new names should be preferred.

Changed

The associated metadata type (for powerfmt implementations) for various types has been changed to () and made public. This guarantees that no additional metadata will be present.

Performance

More gains when parsing RFC 2822.

Commits

857d9c4 v0.3.55 release
2b72fcd Precise feature gating for macro
c1089eb Run check-targets, miri in parallel
f377fad Avoid range-validated ordinal => year in cascade
2eacb0a Report miscellaneous tasks, overall status
29621ac Speed up CI
08de7ba Fix nano-timestamp validation
3c3f046 Fix copy-paste error
3c0c81c Cascade errors when deserializing UtcOffset
c21acd5 Handle more deserializations of SignedDuration
Additional commits viewable in compare view

Updates versions from 7.0.0 to 8.0.1

Release notes

Sourced from versions's releases.

8.0.1

Fixed

Semver -> Mess conversion was dropping +foo metadata sections.

8.0.0

Added

The Last type.

Version now last an explicit last: Last field to improve comparison behaviour for versions like 1.2.3rc2 and 7.3b.

Fixed

Tmux-style versions like 7.3.b compare correctly again.

Removed

Version::nth_lenient: Just use Version::nth while being aware of Last.

Changelog

Sourced from versions's changelog.

8.0.1 (2026-09-14)

Fixed

Semver -> Mess conversion was dropping +foo metadata sections.

8.0.0 (2026-09-05)

Added

The Last type.

Version now last an explicit last: Last field to improve comparison behaviour for versions like 1.2.3rc2 and 7.3b.

Fixed

Tmux-style versions like 7.3.b compare correctly again.

Removed

Version::nth_lenient: Just use Version::nth while being aware of Last.

Commits

4fdfd94 release: 8.0.1
6b5996c fix: semver to mess conversion keeps metadata section
7b552fa fix: preserve build metadata in SemVer::to_mess
3ae61d0 chore: bump itertools
000b087 ci: bump checkout
94c2c7d release: 8.0.0
284444f feat!: remove Version::nth_lenient
58282a1 feat: SemVer/Version comparison accounts for Last
4200a11 feat: Version comparison accounts for Last
b5439e5 feat: Last comparison
Additional commits viewable in compare view

Updates which from 8.0.5 to 8.0.6

Release notes

Sourced from which's releases.

8.0.6

What's Changed

fix: resolve relative PATH entries against the provided cwd by @RSS1102 in harryfei/which-rs#128

New Contributors

@RSS1102 made their first contribution in harryfei/which-rs#128

Full Changelog: harryfei/which-rs@8.0.5...8.0.6

Changelog

Sourced from which's changelog.

8.0.6

Bug fix: #128 Resolve relative PATH entries against the user provided CWD when available, rather than the process CWD. Thanks @RSS1102 for your contribution to which!

Commits

17fde4a prepare patch release
48e49d5 Resolve relative PATH entries against cwd (#128)
See full diff in compare view

Updates zip from 8.6.0 to 9.0.3

Release notes

Sourced from zip's releases.

v9.0.3

🐛 Bug Fixes

Preserve directories' read-only status when extracting on non-Unix systems (#1054)

v9.0.1

🐛 Bug Fixes

set_permissions was still following symlinks in non-streaming extraction (#1038)

two arithmetic overflows in the implode decoder (#1028)

reject an empty archive whose central directory offset is past the EOCD (#1025)

don't panic when two entries extract to the same path (#1023)

fail reads that exceed the declared uncompressed size (#1022)

shrink decoder skipped LZW code 8191 (#1029)

write only the sentinel-marked values in a central ZIP64 field (#1027)

v9.0.0

🚀 Features

add ZipFileBuilder for parallelizing compression (#911)

add method by_index_with_data_descriptor (#994)

add len, is_empty and entry to ZipArchiveMetadata (#1015)

read data descriptor from binary (#990)

add comment and test for ZipStreamReader and symlinks (#985)

(write) add ZipWriter::hide_file for in-place entry deletion (#924)

add compression (#948)

add test to in place modification (#945)

move CustomExtraField to own file (#941)

add a test on enum size (#939)

use ZipFileEntry instead of ZipStreamFileMetadata (#935)

add ZipFileEntry with no Reader (#933)

change aes_mode to aes_settings() in ZipFileData (#925)

cleanup and harmonize extra fields (#923)

Rewrite zip64 extra (#913)

🐛 Bug Fixes

reading an empty AES entry again at EOF returns Ok(0) (#1024)

reject ZIP64 sizes that overflow u64 when computing data end offsets (#1036)

apply central directory metadata in ZipStreamReader, only to written entries (#1030)

consume the whole extended timestamp field in the central header (#1016)

parse the central header of the extended timestamp (#1002)

don't pre-allocate the declared size in the legacy decoders (#991)

Symlink with very large declared size could lead to out-of-memory panic (#984)

copy extra fields in raw_copy_file (#955) (#982)

add unix_mode when copy_raw_file (#981)

rewrite documentation of add_symlink_from_path (#979)

ignore a ZIP64 extra field that no sentinel asked for (#962)

do not set data descriptor if directory (#973)

expose flags function for easier access (#972)

... (truncated)

Changelog

Sourced from zip's changelog.

9.0.3 - 2026-10-13

🐛 Bug Fixes

Preserve directories' read-only status when extracting on non-Unix systems (#1054)

9.0.2 - 2026-10-11

🐛 Bug Fixes

additional bug fixes for symlink extraction

9.0.1 - 2026-10-10

🐛 Bug Fixes

set_permissions was still following symlinks in non-streaming extraction (#1038)

two arithmetic overflows in the implode decoder (#1028)

reject an empty archive whose central directory offset is past the EOCD (#1025)

don't panic when two entries extract to the same path (#1023)

fail reads that exceed the declared uncompressed size (#1022)

shrink decoder skipped LZW code 8191 (#1029)

write only the sentinel-marked values in a central ZIP64 field (#1027)

9.0.0 - 2026-10-08

🚀 Features

add ZipFileBuilder for parallelizing compression (#911)

add method by_index_with_data_descriptor (#994)

add len, is_empty and entry to ZipArchiveMetadata (#1015)

read data descriptor from binary (#990)

add comment and test for ZipStreamReader and symlinks (#985)

(write) add ZipWriter::hide_file for in-place entry deletion (#924)

add compression (#948)

add test to in place modification (#945)

move CustomExtraField to own file (#941)

add a test on enum size (#939)

use ZipFileEntry instead of ZipStreamFileMetadata (#935)

add ZipFileEntry with no Reader (#933)

change aes_mode to aes_settings() in ZipFileData (#925)

cleanup and harmonize extra fields (#923)

Rewrite zip64 extra (#913)

🐛 Bug Fixes

reading an empty AES entry again at EOF returns Ok(0) (#1024)

reject ZIP64 sizes that overflow u64 when computing data end offsets (#1036)

apply central directory metadata in ZipStreamReader, only to written entries (#1030)

consume the whole extended timestamp field in the central header (#1016)

... (truncated)

Commits

06b1fe7 chore: release v9.0.3 (#1061)
924e06b ci(deps): bump crate-ci/typos from 1.50.3 to 1.51.1 (#1058)
ed3af9b ci(deps): bump step-security/harden-runner from 2.21.1 to 2.22.0 (#1059)
2b0dceb test: add more tests on EOCD (#1055)
009f106 fix: Preserve directories' read-only status when extracting on non-Unix syste...
177a11a test: verify has_overlapping_entries and data_start overflow in overlapping_f...
391fb97 Improve doc comments for has_overlapping_files and has_overlapping_entries (#...
969f77c Merge commit from fork
4989fc3 Merge commit from fork
d4baac6 doc: Manually update CHANGELOG for 9.0.2
Additional commits viewable in compare view

Updates clap from 4.6.2 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

Update to syn v3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

Commits

Bumps the cargo group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.103` | `1.0.104` | | [cargo](https://github.com/rust-lang/cargo) | `0.98.0` | `0.100.0` | | [cargo-util-terminal](https://github.com/rust-lang/cargo) | `0.1.0` | `0.1.2` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` | | [indoc](https://github.com/dtolnay/indoc) | `2.0.7` | `2.0.8` | | [owo-colors](https://github.com/owo-colors/owo-colors) | `4.3.0` | `4.4.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.154` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.21.0` | `3.24.0` | | [spdx](https://github.com/EmbarkStudios/spdx) | `0.13.4` | `0.13.6` | | [time](https://github.com/time-rs/time) | `0.3.53` | `0.3.55` | | [versions](https://github.com/fosskers/rs-versions) | `7.0.0` | `8.0.1` | | [which](https://github.com/harryfei/which-rs) | `8.0.5` | `8.0.6` | | [zip](https://github.com/zip-rs/zip2) | `8.6.0` | `9.0.3` | | [clap](https://github.com/clap-rs/clap) | `4.6.2` | `4.6.7` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.0` | `1.53.3` | | [insta](https://github.com/mitsuhiko/insta) | `1.48.0` | `1.49.0` | | [trycmd](https://github.com/assert-rs/snapbox) | `1.2.0` | `1.2.1` | | [clap_complete](https://github.com/clap-rs/clap) | `4.6.7` | `4.6.11` | | [clap_mangen](https://github.com/clap-rs/clap) | `0.3.0` | `0.3.3` | Updates `anyhow` from 1.0.103 to 1.0.104 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.103...1.0.104) Updates `cargo` from 0.98.0 to 0.100.0 - [Changelog](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md) - [Commits](rust-lang/cargo@0.98.0...0.100.0) Updates `cargo-util-terminal` from 0.1.0 to 0.1.2 - [Changelog](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-lang/cargo/commits) Updates `flate2` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.9...1.1.10) Updates `indoc` from 2.0.7 to 2.0.8 - [Release notes](https://github.com/dtolnay/indoc/releases) - [Commits](dtolnay/indoc@2.0.7...2.0.8) Updates `owo-colors` from 4.3.0 to 4.4.0 - [Release notes](https://github.com/owo-colors/owo-colors/releases) - [Changelog](https://github.com/owo-colors/owo-colors/blob/main/CHANGELOG.md) - [Commits](owo-colors/owo-colors@v4.3.0...v4.4.0) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.150 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.150...v1.0.154) Updates `serde_with` from 3.21.0 to 3.24.0 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.21.0...v3.24.0) Updates `spdx` from 0.13.4 to 0.13.6 - [Release notes](https://github.com/EmbarkStudios/spdx/releases) - [Changelog](https://github.com/EmbarkStudios/spdx/blob/main/CHANGELOG.md) - [Commits](EmbarkStudios/spdx@0.13.4...0.13.6) Updates `time` from 0.3.53 to 0.3.55 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.53...v0.3.55) Updates `versions` from 7.0.0 to 8.0.1 - [Release notes](https://github.com/fosskers/rs-versions/releases) - [Changelog](https://github.com/fosskers/rs-versions/blob/master/CHANGELOG.md) - [Commits](fosskers/rs-versions@v7.0.0...v8.0.1) Updates `which` from 8.0.5 to 8.0.6 - [Release notes](https://github.com/harryfei/which-rs/releases) - [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md) - [Commits](harryfei/which-rs@8.0.5...8.0.6) Updates `zip` from 8.6.0 to 9.0.3 - [Release notes](https://github.com/zip-rs/zip2/releases) - [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md) - [Commits](zip-rs/zip2@v8.6.0...v9.0.3) Updates `clap` from 4.6.2 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.2...clap_complete-v4.6.7) 8BD0 Updates `tokio` from 1.53.0 to 1.53.3 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.0...tokio-1.53.3) Updates `insta` from 1.48.0 to 1.49.0 - [Release notes](https://github.com/mitsuhiko/insta/releases) - [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md) - [Commits](mitsuhiko/insta@1.48.0...1.49.0) Updates `trycmd` from 1.2.0 to 1.2.1 - [Commits](assert-rs/snapbox@trycmd-v1.2.0...trycmd-v1.2.1) Updates `clap_complete` from 4.6.7 to 4.6.11 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.7...clap_complete-v4.6.11) Updates `clap_mangen` from 0.3.0 to 0.3.3 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_mangen-v0.3.0...clap_mangen-v0.3.3) --- updated-dependencies: - dependency-name: anyhow dependency-version: 1.0.104 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: cargo dependency-version: 0.100.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: cargo-util-terminal dependency-version: 0.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: clap_complete dependency-version: 4.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: clap_mangen dependency-version: 0.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: flate2 dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: indoc dependency-version: 2.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: insta dependency-version: 1.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: owo-colors dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: serde_with dependency-version: 3.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: spdx dependency-version: 0.13.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: time dependency-version: 0.3.55 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: trycmd dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: versions dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo - dependency-name: which dependency-version: 8.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: zip dependency-version: 9.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-26T08:55:32Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust labels Oct 19, 2026

dependabot Bot force-pushed the dependabot/cargo/cargo-4d4f7e7940 branch from 5778fa3 to 27710bb Compare October 21, 2026 08:56

dependabot Bot closed this Oct 26, 2026

dependabot Bot deleted the dependabot/cargo/cargo-4d4f7e7940 branch October 26, 2026 08:55

Navigation Menu

Repository navigation

build(deps): bump the cargo group across 1 directory with 21 updates - #889

build(deps): bump the cargo group across 1 directory with 21 updates#889
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-4d4f7e7940

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

Uh oh!

1.0.104

1.1.10

What's Changed

New Contributors

2.0.8

owo-colors 4.4.0

Changed

[4.4.0] - 2026-08-27

Changed

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

v1.0.229

v1.0.154

v1.0.153

v1.0.152

v1.0.151

serde_with v3.24.0

Added

Changed

Fixed

serde_with v3.23.0

Changed

serde_with v3.22.0

Added

Fixed

0.13.6

Fixed

Changed

0.13.5

Fixed

[0.13.6] - 2026-10-02

Fixed

Changed

[0.13.5] - 2026-08-06

Fixed

v0.3.55

v0.3.54

0.3.55 [2026-08-01]

Fixed

0.3.54 [2026-07-20]

Added

Changed

Performance

8.0.1

Fixed

8.0.0

Added

Fixed

Removed

8.0.1 (2026-09-14)

Fixed

8.0.0 (2026-09-05)

Added

Fixed

Removed

8.0.6

What's Changed

New Contributors

8.0.6

v9.0.3

🐛 Bug Fixes

v9.0.1

🐛 Bug Fixes

v9.0.0

🚀 Features

🐛 Bug Fixes

9.0.3 - 2026-10-13

🐛 Bug Fixes

9.0.2 - 2026-10-11

🐛 Bug Fixes

9.0.1 - 2026-10-10

🐛 Bug Fixes

9.0.0 - 2026-10-08

🚀 Features

🐛 Bug Fixes