Skip to content

Bump the rust-dependencies group across 1 directory with 7 updates - #446

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-cf98b63f67
Open

Bump the rust-dependencies group across 1 directory with 7 updates#446
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-cf98b63f67

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 7 updates in the / directory:

Package From To
serde_with 3.21.0 3.22.0
clap 4.6.5 4.6.6
clap_complete 4.6.8 4.6.9
axoupdater 0.10.0 0.10.2
async-trait 0.1.91 0.1.92
http-body-util 0.1.4 0.1.5
regex 1.13.0 1.13.1

Updates serde_with from 3.21.0 to 3.22.0

Release notes

Sourced from serde_with's releases.

serde_with v3.22.0

Added

  • Add support for jiff v0.2 behind the new jiff_0_2 feature flag (#936) jiff::SignedDuration works with DurationSeconds and its variants. jiff::Timestamp, jiff::Zoned, and jiff::civil::DateTime work with TimestampSeconds and its variants. Deserializing a jiff::Zoned uses the system time zone, like chrono::DateTime<Local>.

Fixed

  • Extend the GHSA-7gcf-g7xr-8hxj fix to the duplicate-key-prevention collections. The rust::sets_duplicate_value_is_error, rust::maps_duplicate_key_is_error, rust::sets_last_value_wins, and rust::maps_first_key_wins adapters created their backing sets/maps with with_capacity_and_hasher using the raw deserializer size_hint, bypassing the size_hint_cautious cap added in #966 (the clippy.toml disallowed_methods lint only covers Vec::with_capacity, not with_capacity_and_hasher, so these sites were not flagged). Attacker-controlled input claiming a huge length could panic with Hash table capacity overflow before a single element was read. All such constructions now route through size_hint_cautious.
Commits
  • 88f576a Bump version to 3.22.0 (#991)
  • 931e664 Bump version to 3.22.0
  • e26930e Bump github/codeql-action from 4.37.3 to 4.37.4 in the github-actions group (...
  • 92cd5a0 Bump github/codeql-action in the github-actions group
  • 32be66f Guard with_capacity_and_hasher against untrusted size_hint (DoS) (#971)
  • 33871cd Merge branch 'master' into fix/duplicate-key-impls-capacity-overflow
  • bb1e064 Change function position within impl (#968)
  • 202d3dd Improve the time unit macros to remove unnecessary repetition and make the co...
  • b347efb Move the use_duration_signed_ser/*_de macros utils
  • 6590545 chrono_0_4: Implement the same time unit macro cleanup as jiff_0_2
  • Additional commits viewable in compare view

Updates clap from 4.6.5 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage
Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage
Commits
  • 348cff3 chore: Release
  • d478377 docs: Update changelog
  • 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
  • 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
  • f90a966 fix(complete): Use spaces for indentation in fish
  • dd4997b fix(complete): Don't glob-expand bash positionals
  • 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
  • 8141e11 chore(deps): Update compatible (dev) (#6398)
  • 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
  • See full diff in compare view

Updates clap_complete from 4.6.8 to 4.6.9

Commits
  • 715b812 chore: Release
  • 89e6e9b docs: Update changelog
  • 3918cb4 Merge pull request #6468 from sjh9714/fix-bash-posix-fn-name
  • 526c819 Merge pull request #6469 from latent-9/docs/fix-derive-reference-link
  • b2bd685 docs(clap_derive): Fix derive reference link
  • ecee8a4 fix(complete): Name the function after fn_name
  • 6dd2e5a test(complete): Show POSIX bash will not source
  • 4684d7a chore: Release
  • 51d50ad docs: Update changelog
  • 3bc3622 Merge pull request #6457 from bl4ck4t/master
  • Additional commits viewable in compare view

Updates axoupdater from 0.10.0 to 0.10.2

Release notes

Sourced from axoupdater's releases.

Version 0.10.2 (2026-08-11)

Release Notes

This release follows up the previous one by adding binaries for aarch64-pc-windows-msvc.

Download axoupdater-cli 0.10.2

File Platform Checksum
axoupdater-cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
axoupdater-cli-x86_64-apple-darwin.tar.xz Intel macOS checksum
axoupdater-cli-x86_64-pc-windows-gnu.zip x64 MinGW checksum
axoupdater-cli-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
axoupdater-cli-x86_64-pc-windows-msvc.zip x64 Windows checksum
axoupdater-cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
axoupdater-cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
axoupdater-cli-armv7-unknown-linux-gnueabi.tar.xz armv7-unknown-linux-gnueabi checksum
axoupdater-cli-arm-unknown-linux-gnueabihf.tar.xz ARMv6 Linux (Hardfloat) checksum
axoupdater-cli-armv7-unknown-linux-gnueabihf.tar.xz ARMv7 Linux checksum
axoupdater-cli-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
axoupdater-cli-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

Version 0.10.1 (2026-08-10)

Release Notes

This release contains no code changes but adds binaries for the arm-unknown-linux-gnueabihf, armv7-unknown-linux-gnueabi, and armv7-unknown-linux-gnueabihf targets.

Note that these new targets are currently untested. If you encounter any issues with them, please report them!

Download axoupdater-cli 0.10.1

File Platform Checksum
axoupdater-cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
axoupdater-cli-x86_64-apple-darwin.tar.xz Intel macOS checksum
axoupdater-cli-x86_64-pc-windows-gnu.zip x64 MinGW checksum
axoupdater-cli-x86_64-pc-windows-msvc.zip x64 Windows checksum
axoupdater-cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
axoupdater-cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
axoupdater-cli-armv7-unknown-linux-gnueabi.tar.xz armv7-unknown-linux-gnueabi checksum
axoupdater-cli-arm-unknown-linux-gnueabihf.tar.xz ARMv6 Linux (Hardfloat) checksum
axoupdater-cli-armv7-unknown-linux-gnueabihf.tar.xz ARMv7 Linux checksum
axoupdater-cli-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
axoupdater-cli-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum
Changelog

Sourced from axoupdater's changelog.

Version 0.10.2 (2026-08-11)

This release follows up the previous one by adding binaries for aarch64-pc-windows-msvc.

Version 0.10.1 (2026-08-10)

This release contains no code changes but adds binaries for the arm-unknown-linux-gnueabihf, armv7-unknown-linux-gnueabi, and armv7-unknown-linux-gnueabihf targets.

Note that these new targets are currently untested. If you encounter any issues with them, please report them!

Commits

Updates async-trait from 0.1.91 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

  • Resolve double_must_use clippy lint in generated code (#303)
Commits

Updates http-body-util from 0.1.4 to 0.1.5

Commits

Updates regex from 1.13.0 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

  • #1354: Fixes previously unsound reverse suffix and inner optimizations.
Commits
  • 2b52759 1.13.1, redux
  • 40e9823 1.13.1
  • 75fcb96 changelog: 1.13.1
  • 64ad0b6 automata: fix bug in reverse suffix/inner optimization
  • fa91c31 automata: fix a bug caught by Codex review
  • 30390ec automata: formatting tweaks
  • 821a8eb automata: refactor reverse suffix/inner search slightly
  • 10afd70 automata: expose the extracted literals for inner literal extraction
  • 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
  • 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.21.0` | `3.22.0` |
| [clap](https://github.com/clap-rs/clap) | `4.6.5` | `4.6.6` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.6.8` | `4.6.9` |
| [axoupdater](https://github.com/axodotdev/axoupdater) | `0.10.0` | `0.10.2` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.91` | `0.1.92` |
| [http-body-util](https://github.com/hyperium/http-body) | `0.1.4` | `0.1.5` |
| [regex](https://github.com/rust-lang/regex) | `1.13.0` | `1.13.1` |



Updates `serde_with` from 3.21.0 to 3.22.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.21.0...v3.22.0)

Updates `clap` from 4.6.5 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.5...clap_complete-v4.6.6)

Updates `clap_complete` from 4.6.8 to 4.6.9
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.8...clap_complete-v4.6.9)

Updates `axoupdater` from 0.10.0 to 0.10.2
- [Release notes](https://github.com/axodotdev/axoupdater/releases)
- [Changelog](https://github.com/axodotdev/axoupdater/blob/main/CHANGELOG.md)
- [Commits](axodotdev/axoupdater@v0.10.0...v0.10.2)

Updates `async-trait` from 0.1.91 to 0.1.92
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.91...0.1.92)

Updates `http-body-util` from 0.1.4 to 0.1.5
- [Release notes](https://github.com/hyperium/http-body/releases)
- [Commits](hyperium/http-body@http-body-util-v0.1.4...http-body-util-v0.1.5)

Updates `regex` from 1.13.0 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.13.0...1.13.1)

---
updated-dependencies:
- dependency-name: serde_with
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: clap
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap_complete
  dependency-version: 4.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: axoupdater
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: async-trait
  dependency-version: 0.1.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: http-body-util
  dependency-version: 0.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: regex
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants