8000 build(deps): bump the cargo group across 1 directory with 16 updates by dependabot[bot] · Pull Request #875 · nix-community/nix-init · GitHub
[go: up one dir, main page]

Skip to content

build(deps): bump the cargo group across 1 directory with 16 updates - #875

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-fc160591c2
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-fc160591c2

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Sep 10, 2026 •
Copy link
Copy Markdown
Contributor

Bumps the cargo group with 15 updates in the / directory:

Package From To
anyhow 1.0.103 1.0.104
cargo 0.98.0 0.99.0
flate2 1.1.9 1.1.10
owo-colors 4.3.0 4.4.0
serde 1.0.228 1.0.229
serde_json 1.0.150 1.0.151
serde_with 3.21.0 3.22.0
spdx 0.13.4 0.13.5
time 0.3.53 0.3.55
which 8.0.5 8.0.6
clap 4.6.2 4.6.6
tokio 1.53.0 1.53.1
trycmd 1.2.0 1.2.1
clap_complete 4.6.7 4.6.9
clap_mangen 0.3.0 0.3.3

Updates anyhow from 1.0.103 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3
Commits

Updates cargo from 0.98.0 to 0.99.0

Commits
  • 797e8a9 [beta 1.98] revert(compiler): forward verbose flag to rustc for local crates ...
  • 4d29d6c docs(changelog): Pull the --verbose item
  • 3aba9da Revert "test(compiler): add test for verbose flag forwarding"
  • c3916b9 Revert "fix(compiler): forward verbose flag to rustc for local crates"
  • d33be5d [beta 1.97] dont apply host-config gating to stable behavior (#17211)
  • e681230 fix: dont apply host-config gating to stable behavior
  • f47ede6 test: capture linker selection for host artifacts
  • 9582e30 test: capture runner selection for host artifacts
  • 8640645 [beta 1.98] Backport new build-dir layout bug fixes (#17207)
  • 663ee80 tests: use a larger placeholder future rust version
  • Additional commits viewable in compare view

Updates cargo-util-terminal from 0.1.0 to 0.1.1

Commits

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits
  • ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
  • fb5228d Merge pull request #559 from bushrat011899/no_std
  • 6ed3ba3 Add executable no_std example
  • faed8a0 Expand CI to test no_std compatibility and correctness
  • 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
  • 3fe1126 Centralize usage of std for error and io
  • 98e313a Add GzHeader::mtime_as_duration
  • 0642965 Switch to core implicit prelude and only use std where required
  • 454a63c Remove left-over dbg! statement
  • 2a490b7 Add runtime_detection feature
  • Additional commits viewable in compare view

Updates owo-colors from 4.3.0 to 4.4.0

Release notes

Sourced from owo-colors's releases.

owo-colors 4.4.0

Changed

  • Updated MSRV to Rust 1.83. Thanks Expyron for your first contribution!
Changelog

Sourced from owo-colors's changelog.

[4.4.0] - 2026-08-27

Changed

  • Updated MSRV to Rust 1.83. Thanks Expyron for your first contribution!
Commits
  • 7392e40 [owo-colors] version 4.4.0
  • 8037325 [meta] update changelog
  • 9f8e57e [meta] automate changelog updates via cargo-release (#161)
  • 540fd51 Increase MSRV to 1.83 (#160)
  • 367baea Remove .claude directory to disincentivize LLM contributions
  • f83e6e2 [release] use trusted publishing
  • See full diff in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates serde_with from 3.21.0 to 3.22.0

Release notes

Sourced from serde_with's releases.

serde_with v3.22.0

Added

  • Add support for jiff v0.2 behind the new jiff_0_2 feature flag (#936) jiff::SignedDuration works with DurationSeconds and its variants. jiff::Timestamp, jiff::Zoned, and jiff::civil::DateTime work with TimestampSeconds and its variants. Deserializing a jiff::Zoned uses the system time zone, like chrono::DateTime<Local>.

Fixed

  • Extend the GHSA-7gcf-g7xr-8hxj fix to the duplicate-key-prevention collections. The rust::sets_duplicate_value_is_error, rust::maps_duplicate_key_is_error, rust::sets_last_value_wins, and rust::maps_first_key_wins adapters created their backing sets/maps with with_capacity_and_hasher using the raw deserializer size_hint, bypassing the size_hint_cautious cap added in #966 (the clippy.toml disallowed_methods lint only covers Vec::with_capacity, not with_capacity_and_hasher, so these sites were not flagged). Attacker-controlled input claiming a huge length could panic with Hash table capacity overflow before a single element was read. All such constructions now route through size_hint_cautious.
Commits
  • 88f576a Bump version to 3.22.0 (#991)
  • 931e664 Bump version to 3.22.0
  • e26930e Bump github/codeql-action from 4.37.3 to 4.37.4 in the github-actions group (...
  • 92cd5a0 Bump github/codeql-action in the github-actions group
  • 32be66f Guard with_capacity_and_hasher against untrusted size_hint (DoS) (#971)
  • 33871cd Merge branch 'master' into fix/duplicate-key-impls-capacity-overflow
  • bb1e064 Change function position within impl (#968)
  • 202d3dd Improve the time unit macros to remove unnecessary repetition and make the co...
  • b347efb Move the use_duration_signed_ser/*_de macros utils
  • 6590545 chrono_0_4: Implement the same time unit macro cleanup as jiff_0_2
  • Additional commits viewable in compare view

Updates spdx from 0.13.4 to 0.13.5

Release notes

Sourced from spdx's releases.

0.13.5

Fixed

  • PR#96 fixed LicenseItem's PartialEq and PartialOrd implementations to agree with its total ordering, resolving #95.
Changelog

Sourced from spdx's changelog.

[0.13.5] - 2026-08-06

Fixed

  • PR#96 fixed LicenseItem's PartialEq and PartialOrd implementations to agree with its total ordering, resolving #95.
Commits

Updates time from 0.3.53 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

v0.3.54

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

  • Avoid underflow in DateIter::nth, ensuring correct behavior.
  • Avoid overflow when deserializing timestamps.
  • Handle out-of-bounds data when deserializing.
  • Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
  • No longer silence errors when deserializing UtcOffset.
  • OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
  • OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

0.3.54 [2026-07-20]

Added

  • PrimitiveDateTime has been renamed to PlainDateTime.
  • Duration has been renamed to SignedDuration.
  • Iteration is now possible over Date, Month, and Weekday. Relevant iterator methods have been overridden to ensure maximum performance.

For both PlainDateTime and SignedDuration, a non-deprecated type alias has been added for backwards compatibility. The new names should be preferred.

Changed

  • The associated metadata type (for powerfmt implementations) for various types has been changed to () and made public. This guarantees that no additional metadata will be present.

Performance

  • More gains when parsing RFC 2822.
Commits
  • 857d9c4 v0.3.55 release
  • 2b72fcd Precise feature gating for macro
  • c1089eb Run check-targets, miri in parallel
  • f377fad Avoid range-validated ordinal => year in cascade
  • 2eacb0a Report miscellaneous tasks, overall status
  • 29621ac Speed up CI
  • 08de7ba Fix nano-timestamp validation
  • 3c3f046 Fix copy-paste error
  • 3c0c81c Cascade errors when deserializing UtcOffset
  • c21acd5 Handle more deserializations of SignedDuration
  • Additional commits viewable in compare view

Updates which from 8.0.5 to 8.0.6

Release notes

Sourced from which's releases.

8.0.6

What's Changed

New Contributors

Full Changelog: harryfei/which-rs@8.0.5...8.0.6

Changelog

Sourced from which's changelog.

8.0.6

  • Bug fix: #128 Resolve relative PATH entries against the user provided CWD when available, rather than the process CWD. Thanks @​RSS1102 for your contribution to whi 8000 ch!
Commits

Updates clap from 4.6.2 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values
Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values
Commits
  • 348cff3 chore: Release
  • d478377 docs: Update changelog
  • 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
  • 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
  • f90a966 fix(complete): Use spaces for indentation in fish
  • dd4997b fix(complete): Don't glob-expand bash positionals
  • 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
  • 8141e11 chore(deps): Update compatible (dev) (#6398)
  • 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
  • Additional commits viewable in compare view

Updates tokio from 1.53.0 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

  • time: fix alt timer cancellation and insertion race (#8252)

Documented

  • runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Commits
  • 75fef53 chore: prepare Tokio v1.53.1 (#8303)
  • ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
  • eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
  • 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
  • a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
  • See full diff in compare view

Updates trycmd from 1.2.0 to 1.2.1

Commits

Updates clap_complete from 4.6.7 to 4.6.9

Commits
  • 715b812 chore: Release
  • 89e6e9b docs: Update changelog
  • 3918cb4 Merge pull request #6468 from sjh9714/fix-bash-posix-fn-name
  • 526c819 Merge pull request #6469 from latent-9/docs/fix-derive-reference-link
  • b2bd685 docs(clap_derive): Fix derive reference link
  • ecee8a4 fix(complete): Name the function after fn_name
  • 6dd2e5a test(complete): Show POSIX bash will not source
  • 4684d7a chore: Release
  • 51d50ad docs: Update changelog
  • 3bc3622 Merge pull request #6457 from bl4ck4t/master
  • Additional commits viewable in compare view

Updates clap_mangen from 0.3.0 to 0.3.3

Commits
  • 5b81f10 chore: Release
  • 7b02708 docs: Update changelog
  • 6689200 Merge pull request #6482 from codeAnqiang-ma/fix/mangen-hidden-positional-syn...
  • 07c6fd2 fix(mangen): Hide hidden positionals from the SYNOPSIS
  • 2003b34 test(mangen): Show hidden positionals in the SYNOPSIS
  • 8e50ec8 chore: Release
  • 1f7ca4e chore: Update transitive clap
  • 3e790f2 docs: Update changelog
  • 0b83f87 Merge pull request #6477 from antoniszymanski/master
  • dee8b8e fix(clap_complete_nushell): Set argument type to directory for `ValueHint::...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.103` | `1.0.104` |
| [cargo](https://github.com/rust-lang/cargo) | `0.98.0` | `0.99.0` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` |
| [owo-colors](https://github.com/owo-colors/owo-colors) | `4.3.0` | `4.4.0` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.21.0` | `3.22.0` |
| [spdx](https://github.com/EmbarkStudios/spdx) | `0.13.4` | `0.13.5` |
| [time](https://github.com/time-rs/time) | `0.3.53` | `0.3.55` |
| [which](https://github.com/harryfei/which-rs) | `8.0.5` | `8.0.6` |
| [clap](https://github.com/clap-rs/clap) | `4.6.2` | `4.6.6` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.0` | `1.53.1` |
| [trycmd](https://github.com/assert-rs/snapbox) | `1.2.0` | `1.2.1` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.6.7` | `4.6.9` |
| [clap_mangen](https://github.com/clap-rs/clap) | `0.3.0` | `0.3.3` |



Updates `anyhow` from 1.0.103 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.103...1.0.104)

Updates `cargo` from 0.98.0 to 0.99.0
- [Changelog](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md)
- [Commits](rust-lang/cargo@0.98.0...0.99.0)

Updates `cargo-util-terminal` from 0.1.0 to 0.1.1
- [Changelog](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/cargo/commits)

Updates `flate2` from 1.1.9 to 1.1.10
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.9...1.1.10)

Updates `owo-colors` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/owo-colors/owo-colors/releases)
- [Changelog](https://github.com/owo-colors/owo-colors/blob/main/CHANGELOG.md)
- [Commits](owo-colors/owo-colors@v4.3.0...v4.4.0)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `serde_with` from 3.21.0 to 3.22.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.21.0...v3.22.0)

Updates `spdx` from 0.13.4 to 0.13.5
- [Release notes](https://github.com/EmbarkStudios/spdx/releases)
- [Changelog](https://github.com/EmbarkStudios/spdx/blob/main/CHANGELOG.md)
- [Commits](EmbarkStudios/spdx@0.13.4...0.13.5)

Updates `time` from 0.3.53 to 0.3.55
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.53...v0.3.55)

Updates `which` from 8.0.5 to 8.0.6
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@8.0.5...8.0.6)

Updates `clap` from 4.6.2 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.2...clap_complete-v4.6.6)

Updates `tokio` from 1.53.0 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.0...tokio-1.53.1)

Updates `trycmd` from 1.2.0 to 1.2.1
- [Commits](assert-rs/snapbox@trycmd-v1.2.0...trycmd-v1.2.1)

Updates `clap_complete` from 4.6.7 to 4.6.9
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.7...clap_complete-v4.6.9)

Updates `clap_mangen` from 0.3.0 to 0.3.3
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_mangen-v0.3.0...clap_mangen-v0.3.3)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: cargo
  dependency-version: 0.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: cargo-util-terminal
  dependency-version: 0.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: flate2
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: owo-colors
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_with
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: spdx
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: time
  dependency-version: 0.3.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: which
  dependency-version: 8.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: trycmd
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap_complete
  dependency-version: 4.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap_mangen
  dependency-version: 0.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust labels Sep 10, 2026
@dependabot @github
dependabot Bot commented on behalf of github Sep 14, 2026
Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 14, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-fc160591c2 branch September 14, 2026 08:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants

0