Skip to content

build(deps): bump the cargo group with 15 updates - #149

Merged
jaudiger merged 1 commit into
mainfrom
dependabot/cargo/cargo-c0d1bc2971
Aug 18, 2026
Merged

build(deps): bump the cargo group with 15 updates#149
jaudiger merged 1 commit into
mainfrom
dependabot/cargo/cargo-c0d1bc2971

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 15 updates:

Package From To
brioche-pack 8565b11 aa0275a
eyre 0.6.12 0.6.14
thiserror 2.0.19 2.0.20
clap 4.6.5 4.6.6
serde_with 3.21.0 3.22.0
bitflags 2.13.1 1.3.2
bstr 1.13.0 1.13.1
cc 1.4.0 1.4.2
clap_builder 4.6.5 4.6.6
find-msvc-tools 0.1.9 0.1.11
futures-core 0.3.33 0.3.34
futures-task 0.3.33 0.3.34
futures-util 0.3.33 0.3.34
serde_with_macros 3.21.0 3.22.0
thiserror-impl 2.0.19 2.0.20

Updates brioche-pack from 8565b11 to aa0275a

Commits

Updates eyre from 0.6.12 to 0.6.14

Commits

Updates thiserror from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

  • Suppress redundant_field_names clippy lint in generated code (#454)
Commits

Updates clap from 4.6.5 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage
Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage
Commits
  • 348cff3 chore: Release
  • d478377 docs: Update changelog
  • 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
  • 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
  • f90a966 fix(complete): Use spaces for indentation in fish
  • dd4997b fix(complete): Don't glob-expand bash positionals
  • 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
  • 8141e11 chore(deps): Update compatible (dev) (#6398)
  • 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
  • See full diff in compare view

Updates serde_with from 3.21.0 to 3.22.0

Release notes

Sourced from serde_with's releases.

serde_with v3.22.0

Added

  • Add support for jiff v0.2 behind the new jiff_0_2 feature flag (#936) jiff::SignedDuration works with DurationSeconds and its variants. jiff::Timestamp, jiff::Zoned, and jiff::civil::DateTime work with TimestampSeconds and its variants. Deserializing a jiff::Zoned uses the system time zone, like chrono::DateTime<Local>.

Fixed

  • Extend the GHSA-7gcf-g7xr-8hxj fix to the duplicate-key-prevention collections. The rust::sets_duplicate_value_is_error, rust::maps_duplicate_key_is_error, rust::sets_last_value_wins, and rust::maps_first_key_wins adapters created their backing sets/maps with with_capacity_and_hasher using the raw deserializer size_hint, bypassing the size_hint_cautious cap added in #966 (the clippy.toml disallowed_methods lint only covers Vec::with_capacity, not with_capacity_and_hasher, so these sites were not flagged). Attacker-controlled input claiming a huge length could panic with Hash table capacity overflow before a single element was read. All such constructions now route through size_hint_cautious.
Commits
  • 88f576a Bump version to 3.22.0 (#991)
  • 931e664 Bump version to 3.22.0
  • e26930e Bump github/codeql-action from 4.37.3 to 4.37.4 in the github-actions group (...
  • 92cd5a0 Bump github/codeql-action in the github-actions group
  • 32be66f Guard with_capacity_and_hasher against untrusted size_hint (DoS) (#971)
  • 33871cd Merge branch 'master' into fix/duplicate-key-impls-capacity-overflow
  • bb1e064 Change function position within impl (#968)
  • 202d3dd Improve the time unit macros to remove unnecessary repetition and make the co...
  • b347efb Move the use_duration_signed_ser/*_de macros utils
  • 6590545 chrono_0_4: Implement the same time unit macro cleanup as jiff_0_2
  • Additional commits viewable in compare view

Updates bitflags from 2.13.1 to 1.3.2

Changelog

Sourced from bitflags's changelog.

2.13.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.13.0...2.13.1

2.13.0

What's Changed

Full Changelog: bitflags/bitflags@2.12.1...2.13.0

2.12.1

What's Changed

Full Changelog: bitflags/bitflags@2.12.0...2.12.1

2.12.0

Yanked

This release has been yanked because the #[flag_name] processing noticeably increases macro recursion, hitting the default limit in cases that are already close to it.

What's Changed

Full Changelog: bitflags/bitflags@2.11.1...2.12.0

2.11.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

2.11.0

... (truncated)

Commits
  • ed185cf Merge pull request #258 from KodrAus/cargo/1.3.2
  • 54e47f7 prepare for 1.3.2 release
  • ac957a5 Merge pull request #257 from KodrAus/chore/more-compile-tests
  • df838ab more work on compile tests
  • acfba7d Merge pull request #256 from saiintbrisson/issue-237
  • 93ce27c fix: allowed non_snake_case on trait impls
  • b234906 Merge pull request #254 from KodrAus/cargo/1.3.1
  • b4dbed0 don't worry about stderr for non integer base types
  • 7b722c6 prepare for 1.3.1 release
  • 186af85 Merge pull request #253 from KodrAus/chore/test-organization
  • Additional commits viewable in compare view

Updates bstr from 1.13.0 to 1.13.1

Commits

Updates cc from 1.4.0 to 1.4.2

Release notes

Sourced from cc's releases.

cc-v1.4.2

Fixed

  • Infer NEON, not VFPv4, from neon in the target name (#1843)
  • do not emit -mno-omit-leaf-frame-pointer if unsupported (#1845)

cc-v1.4.1

Fixed

  • Fix -Cforce-frame-pointers's corresponding CFLAGS (#1814)
  • Fix parsing of thumbv7a-vex-v5 (#1840)

Other

  • Regenerate target info (#1839)
  • Add aarch64_be to prefix_for_target (#1835)
  • Use lp64d ABI for Managarm riscv64 (#1829)
  • Make cc work on Motor OS (#1822)
  • Update edition to 2021 (#1811)
  • Update MSRV to 1.64 (#1808)
Changelog

Sourced from cc's changelog.

1.4.2 - 2026-08-08

Fixed

  • Infer NEON, not VFPv4, from neon in the target name (#1843)
  • do not emit -mno-omit-leaf-frame-pointer if unsupported (#1845)

1.4.1 - 2026-08-07

Fixed

  • Fix -Cforce-frame-pointers's corresponding CFLAGS (#1814)
  • Fix parsing of thumbv7a-vex-v5 (#1840)

Other

  • Regenerate target info (#1839)
  • Add aarch64_be to prefix_for_target (#1835)
  • Use lp64d ABI for Managarm riscv64 (#1829)
  • Make cc work on Motor OS (#1822)
  • Update edition to 2021 (#1811)
  • Update MSRV to 1.64 (#1808)
Commits

Updates clap_builder from 4.6.5 to 4.6.6

Release notes

Sourced from clap_builder's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage
Changelog

Sourced from clap_builder's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage
Commits
  • 4a622b4 chore: Release
  • e1f6b90 docs: Update changelog
  • a9660f4 Merge pull request #6467 from sylvestre/mangen-override-usage
  • 715b812 chore: Release
  • 89e6e9b docs: Update changelog
  • 3918cb4 Merge pull request #6468 from sjh9714/fix-bash-posix-fn-name
  • 526c819 Merge pull request #6469 from latent-9/docs/fix-derive-reference-link
  • b2bd685 docs(clap_derive): Fix derive reference link
  • ecee8a4 fix(complete): Name the function after fn_name
  • 6dd2e5a test(complete): Show POSIX bash will not source
  • Additional commits viewable in compare view

Updates find-msvc-tools from 0.1.9 to 0.1.11

Release notes

Sourced from find-msvc-tools's releases.

find-msvc-tools-v0.1.11

Other

  • Update MSRV to 1.65 (#1834)

find-msvc-tools-v0.1.10

Other

  • Update edition to 2021 (#1811)
  • Update MSRV to 1.64 (#1808)
Commits

Updates futures-core from 0.3.33 to 0.3.34

Release notes

Sourced from futures-core's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Changelog

Sourced from futures-core's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Commits

Updates futures-task from 0.3.33 to 0.3.34

Release notes

Sourced from futures-task's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Changelog

Sourced from futures-task's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Commits

Updates futures-util from 0.3.33 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)
Commits

Updates serde_with_macros from 3.21.0 to 3.22.0

Release notes

Sourced from serde_with_macros's releases.

serde_with v3.22.0

Added

  • Add support for jiff v0.2 behind the new jiff_0_2 feature flag (#936) jiff::SignedDuration works with DurationSeconds and its variants. jiff::Timestamp, jiff::Zoned, and jiff::civil::DateTime work with TimestampSeconds and its variants. Deserializing a jiff::Zoned uses the system time zone, like chrono::DateTime<Local>.

Fixed

  • Extend the GHSA-7gcf-g7xr-8hxj fix to the duplicate-key-prevention collections. The rust::sets_duplicate_value_is_error, rust::maps_duplicate_key_is_error, rust::sets_last_value_wins, and rust::maps_first_key_wins adapters created their backing sets/maps with with_capacity_and_hasher using the raw deserializer size_hint, bypassing the size_hint_cautious cap added in #966 (the clippy.toml disallowed_methods lint only covers Vec::with_capacity, not with_capacity_and_hasher, so these sites were not flagged). Attacker-controlled input claiming a huge length could panic with Hash table capacity overflow before a single element was read. All such constructions now route through size_hint_cautious.
Commits
  • 88f576a Bump version to 3.22.0 (#991)
  • 931e664 Bump version to 3.22.0
  • e26930e Bump github/codeql-action from 4.37.3 to 4.37.4 in the github-actions group (...
  • 92cd5a0 Bump github/codeql-action in the github-actions group
  • 32be66f Guard with_capacity_and_hasher against untrusted size_hint (DoS) (#971)
  • 33871cd Merge branch 'master' into fix/duplicate-key-impls-capacity-overflow
  • bb1e064 Change function position within impl (#968)
  • 202d3dd Improve the time unit macros to remove unnecessary repetition and make the co...
  • b347efb Move the use_duration_signed_ser/*_de macros utils
  • 6590545 chrono_0_4: Implement the same time unit macro cleanup as jiff_0_2
  • Additional commits viewable in compare view

Updates thiserror-impl from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror-impl's releases.

2.0.20

  • Suppress redundant_field_names clippy lint in generated code (#454)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the cargo group with 15 updates
5e53285 
Bumps the cargo group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [brioche-pack](https://github.com/brioche-dev/brioche) | ``8565b11`` | ``aa0275a`` |
| [eyre](https://github.com/eyre-rs/eyre) | `0.6.12` | `0.6.14` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.20` |
| [clap](https://github.com/clap-rs/clap) | `4.6.5` | `4.6.6` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.21.0` | `3.22.0` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.13.1` | `1.3.2` |
| [bstr](https://github.com/BurntSushi/bstr) | `1.13.0` | `1.13.1` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.4.0` | `1.4.2` |
| [clap_builder](https://github.com/clap-rs/clap) | `4.6.5` | `4.6.6` |
| [find-msvc-tools](https://github.com/rust-lang/cc-rs) | `0.1.9` | `0.1.11` |
| [futures-core](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
| [futures-task](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
| [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
| [serde_with_macros](https://github.com/jonasbb/serde_with) | `3.21.0` | `3.22.0` |
| [thiserror-impl](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.20` |


Updates `brioche-pack` from `8565b11` to `aa0275a`
- [Release notes](https://github.com/brioche-dev/brioche/releases)
- [Commits](brioche-dev/brioche@8565b11...aa0275a)

Updates `eyre` from 0.6.12 to 0.6.14
- [Commits](eyre-rs/eyre@eyre-v0.6.12...v0.6.14)

Updates `thiserror` from 2.0.19 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.19...2.0.20)

Updates `clap` from 4.6.5 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.5...clap_complete-v4.6.6)

Updates `serde_with` from 3.21.0 to 3.22.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.21.0...v3.22.0)

Updates `bitflags` from 2.13.1 to 1.3.2
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.13.1...1.3.2)

Updates `bstr` from 1.13.0 to 1.13.1
- [Commits](BurntSushi/bstr@1.13.0...1.13.1)

Updates `cc` from 1.4.0 to 1.4.2
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.4.0...cc-v1.4.2)

Updates `clap_builder` from 4.6.5 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@v4.6.5...v4.6.6)

Updates `find-msvc-tools` from 0.1.9 to 0.1.11
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@find-msvc-tools-v0.1.9...find-msvc-tools-v0.1.11)

Updates `futures-core` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `futures-task` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `futures-util` from 0.3.33 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.33...0.3.34)

Updates `serde_with_macros` from 3.21.0 to 3.22.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.21.0...v3.22.0)

Updates `thiserror-impl` from 2.0.19 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.19...2.0.20)

---
updated-dependencies:
- dependency-name: brioche-pack
  dependency-version: aa0275a0bda94cc9f827267393aef73093efb423
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: eyre
  dependency-version: 0.6.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: thiserror
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_with
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: bitflags
  dependency-version: 1.3.2
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: bstr
  dependency-version: 1.13.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: cc
  dependency-version: 1.4.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap_builder
  dependency-version: 4.6.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: find-msvc-tools
  dependency-version: 0.1.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: futures-core
  dependency-version: 0.3.34
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: futures-task
  dependency-version: 0.3.34
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: futures-util
  dependency-version: 0.3.34
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_with_macros
  dependency-version: 3.22.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: thiserror-impl
  dependency-version: 2.0.20
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 16, 2026
jaudiger
jaudiger approved these changes Aug 18, 2026
View reviewed changes

@jaudiger jaudiger left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me 🚀

@jaudiger
jaudiger merged commit c973157 into main Aug 18, 2026
10 checks passed
@jaudiger
jaudiger deleted the dependabot/cargo/cargo-c0d1bc2971 branch August 18, 2026 06:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jaudiger jaudiger jaudiger approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jaudiger