build(deps): bump the cargo group across 1 directory with 6 updates by dependabot[bot] · Pull Request #334 · sunerpy/codegraph-rust

dependabot · 2026-10-22T15:44:38Z

Bumps the cargo group with 6 updates in the / directory:

Package	From	To
tree-sitter	`0.27.0`	`0.27.1`
tree-sitter-cfml	`0.26.42`	`0.26.43`
tree-sitter-erlang	`0.20.0`	`0.21.0`
tree-sitter-php	`0.24.2`	`0.25.1`
tree-sitter-scala	`0.26.2`	`0.26.3`
tree-sitter-swift	`0.7.3`	`0.7.4`

Updates tree-sitter from 0.27.0 to 0.27.1

Release notes

Sourced from tree-sitter's releases.

v0.27.1

What's Changed

fix: decode UTF-16 surrogate pairs with input endianness by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5913

fix(cli)!: fix query test capture range matching across lines by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5918

fix(rust): address new nightly lints by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5921

fix(generate): resolve token names in debug output by @WillLillis in tree-sitter/tree-sitter#5941

fix(generate): keep GCC jump tables enabled for large lexers by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5985

fix(generate): exclude external word tokens from keyword extraction by @WillLillis in tree-sitter/tree-sitter#5989

fix(lib): check shifted stack versions during error recovery by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5998

fix(generate): detect indirect recursion in flattened productions by @WillLillis in tree-sitter/tree-sitter#6003

fix: preserve column dependency when balancing repeat nodes by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6006

perf(lib): acquire capture lists from a free stack instead of scanning by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6012

fix(build): don't compile the Wasm stdlib into Emscripten builds by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6015

fix: various query issues by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6017

fix(rust): ban std::fs::canonicalize by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6018

fix(bindings): load Node bindings under Bun again by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6021

release v0.27.1 by @clason in tree-sitter/tree-sitter#6024

Full Changelog: tree-sitter/tree-sitter@v0.27.0...v0.27.1

Commits

10eb5ac release v0.27.1
1bf93c4 fix(bindings): embed queries in Bun standalone executables
2173ca8 fix(bindings): await the load check in the Node binding test
a89d5b8 fix(bindings): load Node bindings under Bun again
17d6c94 fix(bindings): load node-types.json on Windows
825b3e4 fix(rust): ban std::fs::canonicalize
4eb3973 fix(web): pass the progress callback to the cursor in Query.captures
60cdb55 fix(test): give the query timeout tests room to time out
bdf4e7e fix(lib): charge query cursor work for the states it visits
dc21d38 fix(lib): halt the query cursor when the progress callback asks to stop
Additional commits viewable in compare view

Updates tree-sitter-cfml from 0.26.42 to 0.26.43

Release notes

Sourced from tree-sitter-cfml's releases.

v0.26.43

cfml & cfquery

An HTML tag name can contain a dot (#169). <system.webServer>…</system.webServer>, the IIS web.config section often built in a <cfsavecontent>, read as the tag <system with an attribute .webServer. Its end tag then matched nothing, and the ERROR ran on to the end of the file, taking every <cffunction> after it with it. scan_tag_name now accepts . after the first character of a non-CF tag name, as XML does. CF tag names are unchanged.

Scanner-only, so STATE_COUNT is unchanged. The corpus scan goes from 414 error lines in 81 files to 412 in 80: Mura's core/templates/web.config.template.cfm parses. docs/FAILING-PATTERNS.md had put that file down to generator placeholders. treediff shows no tree-shape change in any file that already parsed, and npm run fuzz passes. The issue's second case, SET #process the pairs# outside <cfoutput>, already parses cleanly on 0.26.42. Both cases are now probes.

Changelog

Sourced from tree-sitter-cfml's changelog.

[0.26.43]

cfml & cfquery

An HTML tag name can contain a dot (#169). <system.webServer>…</system.webServer>, the IIS web.config section often built in a <cfsavecontent>, read as the tag <system with an attribute .webServer. Its end tag then matched nothing, and the ERROR ran on to the end of the file, taking every <cffunction> after it with it. scan_tag_name now accepts . after the first character of a non-CF tag name, as XML does. CF tag names are unchanged.

Scanner-only, so STATE_COUNT is unchanged. The corpus scan goes from 414 error lines in 81 files to 412 in 80: Mura's core/templates/web.config.template.cfm parses. docs/FAILING-PATTERNS.md had put that file down to generator placeholders. treediff shows no tree-shape change in any file that already parsed, and npm run fuzz passes. The issue's second case, SET #process the pairs# outside <cfoutput>, already parses cleanly on 0.26.42. Both cases are now probes.

Commits

ffdd4d7 v0.26.43
2cffcea Merge pull request #170 from cfmleditor/fix/169-dotted-html-tag-names
b04d450 Accept . in HTML tag names (#169) [ai]
See full diff in compare view

Updates tree-sitter-erlang from 0.20.0 to 0.21.0

Release notes

Sourced from tree-sitter-erlang's releases.

0.21.0

Generate the parser with tree-sitter-cli 0.26.11 and ABI 15

Accept F/A in -deprecated attributes

Changelog

Sourced from tree-sitter-erlang's changelog.

0.21.0 (2026-10-07)

Generate the parser with tree-sitter-cli 0.26.11 and ABI 15

Accept F/A in -deprecated attributes

Commits

0386a11 Prepare version 0.21.0
3966a88 Accept F/A in -deprecated attributes
6ba4c76 switch to tree-sitter-cli 0.26.11 / ABI 15
See full diff in compare view

Updates tree-sitter-php from 0.24.2 to 0.25.1

Release notes

Sourced from tree-sitter-php's releases.

v0.25.1

NOTE: Download tree-sitter-php.tar.gz for the complete source code.

What's Changed

feat: support clone with arguments by @janwaleed09 in tree-sitter/tree-sitter-php#306

New Contributors

@janwaleed09 made their first contribution in tree-sitter/tree-sitter-php#306

Full Changelog: tree-sitter/tree-sitter-php@v0.25.0...v0.25.1

v0.25.0

NOTE: Download tree-sitter-php.tar.gz for the complete source code.

What's Changed

build(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in tree-sitter/tree-sitter-php#286

build(deps): bump tree-sitter/parser-test-action from 2 to 3 by @dependabot[bot] in tree-sitter/tree-sitter-php#288

build(deps): bump actions/setup-node from 5 to 6 by @dependabot[bot] in tree-sitter/tree-sitter-php#289

build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in tree-sitter/tree-sitter-php#290

fix(scanner): correct UB in scan's heredoc delete logic by @WillLillis in tree-sitter/tree-sitter-php#293

feat: support PHP 8.6 partial function application by @calebdw in tree-sitter/tree-sitter-php#291

feat: support asymmetric visibility in constructor promotion by @hbtweb in tree-sitter/tree-sitter-php#297

build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in tree-sitter/tree-sitter-php#299

build(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in tree-sitter/tree-sitter-php#300

fix(scanner): clear heredoc stack in deserialize by @NathanEvryg in tree-sitter/tree-sitter-php#304

New Contributors

@WillLillis made their first contribution in tree-sitter/tree-sitter-php#293

@hbtweb made their first contribution in tree-sitter/tree-sitter-php#297

@NathanEvryg made their first contribution in tree-sitter/tree-sitter-php#304

Full Changelog: tree-sitter/tree-sitter-php@v0.24.2...v0.25.0

Commits

58d5643 chore: bump version to 0.25.1
e2ee12f ci: drop removed attestations input from publish workflow
1f8bc04 chore: generate
46fc12d fix: allow cast-type keywords as argument constants
7caebd3 feat: support clone with arguments
92b5271 chore: bump version to 0.25.0
3c7e657 chore: generate
a8c3d99 ci: update invalid example files
3027631 fix(scanner): treat any non-name char as heredoc closer
7eb55b7 fix(grammar): allow leading backslash on group use
Additional commits viewable in compare view

Updates tree-sitter-scala from 0.26.2 to 0.26.3

Release notes

Sourced from tree-sitter-scala's releases.

v0.26.3

bug fixes

fix: Take an nameless erased parameter by @exoego in tree-sitter/tree-sitter-scala#649

fix: Take the reach capability in a capture set by @exoego in tree-sitter/tree-sitter-scala#650

fix: Close seven indentation and Scala 2 gaps by @exoego in tree-sitter/tree-sitter-scala#656

fix: Close two polymorphic type gaps by @exoego in tree-sitter/tree-sitter-scala#660

fix: Read a constructor annotation the way Dotty does by @exoego in tree-sitter/tree-sitter-scala#662

fix: Take implicit in front of a parenthesized lambda parameter list by @exoego in tree-sitter/tree-sitter-scala#664

fix: Read a self type and a chained body in a given by @exoego in tree-sitter/tree-sitter-scala#666

fix: Read a lone asterisk as a type operator by @exoego in tree-sitter/tree-sitter-scala#668

fix: Read a binder in a splice pattern by @exoego in tree-sitter/tree-sitter-scala#669

fix: Do not read a symbolic keyword as a leading infix operator by @exoego in tree-sitter/tree-sitter-scala#671

fix: End the line before a symbolic keyword after a leading operator by @exoego in tree-sitter/tree-sitter-scala#672

fix: End the line before a binary operator after a leading operator by @exoego in tree-sitter/tree-sitter-scala#673

fix: Read a prefix operator with no operand as a name by @exoego in tree-sitter/tree-sitter-scala#674

fix: Continue the line before a name that ends in an operator by @exoego in tree-sitter/tree-sitter-scala#676

fix: Read a postfix operator as an assignment target by @exoego in tree-sitter/tree-sitter-scala#677

fix: Read a kind-projector placeholder with a variance by @exoego in tree-sitter/tree-sitter-scala#679

fix: Read a type parameter list on the next line by @exoego in tree-sitter/tree-sitter-scala#680

fix: Read a dedented enumerator as continuing a braced for comprehension by @requaos in tree-sitter/tree-sitter-scala#684

fix: Read export as an identifier and a package segment in Scala 2 code by @requaos in tree-sitter/tree-sitter-scala#683

behind the scenes

chore: Fix the two lock files by @exoego in tree-sitter/tree-sitter-scala#647

ci: Bump the smoke test to the latest releases of Scala 2 and Scala 3 by @exoego in tree-sitter/tree-sitter-scala#648

chore: Reserve two external tokens to finish the remaining indentation issues by @exoego in tree-sitter/tree-sitter-scala#652

ci: Update binding release to latest by @eed3si9n in tree-sitter/tree-sitter-scala#655

chore: Reserve the wildcard bound external token by @exoego in tree-sitter/tree-sitter-scala#658

new contributors

@requaos made their first contribution in tree-sitter/tree-sitter-scala#684

Full Changelog: tree-sitter/tree-sitter-scala@v0.26.2...v0.26.3

Commits

851032f Merge pull request #687 from eed3si9n/wip/bump-version
a941de4 Bump to 0.26.3
b924e51 Merge pull request #686 from tree-sitter/generation
65d08af chore: generate and sync from 8b7250aa3e1edc25a84cdd87dfea849b668a2372
8b7250a Merge pull request #683 from requaos/scala2-export-identifier
ec65f61 Merge branch 'master' into scala2-export-identifier
8ba1d41 Merge pull request #685 from tree-sitter/generation
25655cb chore: generate and sync from 37d5424b587e29ca95f5f6b09f448b1baf206c69
37d5424 Merge pull request #684 from requaos/braced-for-dedent-enumerator
05985b7 fix: read export as an identifier and a package segment in Scala 2 code
Additional commits viewable in compare view

Updates tree-sitter-swift from 0.7.3 to 0.7.4

Commits

171fa3b 0.7.4 release
b42acc4 Updating top repository version
5f435e2 Parse Swift 6 syntax: sending, isolated, copy, value generics, inline arrays,...
35245fb fix: multi_agent.cwe-476 security vulnerability
187fd4d Add strict memory safety syntax -- SE-0458
4a0e502 Updating top repository version
00bbb0a Fix npm publish never triggering after tag pushes
048688b Include prebuilt .wasm in the npm package
f02fc0a Updating top repository version
90b7a70 Fix attributes with an empty argument list
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tree-sitter](https://github.com/tree-sitter/tree-sitter) | `0.27.0` | `0.27.1` | | [tree-sitter-cfml](https://github.com/cfmleditor/tree-sitter-cfml) | `0.26.42` | `0.26.43` | | [tree-sitter-erlang](https://github.com/WhatsApp/tree-sitter-erlang) | `0.20.0` | `0.21.0` | | [tree-sitter-php](https://github.com/tree-sitter/tree-sitter-php) | `0.24.2` | `0.25.1` | | [tree-sitter-scala](https://github.com/tree-sitter/tree-sitter-scala) | `0.26.2` | `0.26.3` | | [tree-sitter-swift](https://github.com/alex-pinkus/tree-sitter-swift) | `0.7.3` | `0.7.4` | Updates `tree-sitter` from 0.27.0 to 0.27.1 - [Release notes](https://github.com/tree-sitter/tree-sitter/releases) - [Commits](tree-sitter/tree-sitter@v0.27.0...v0.27.1) Updates `tree-sitter-cfml` from 0.26.42 to 0.26.43 - [Release notes](https://github.com/cfmleditor/tree-sitter-cfml/releases) - [Changelog](https://github.com/cfmleditor/tree-sitter-cfml/blob/master/CHANGELOG.md) - [Commits](cfmleditor/tree-sitter-cfml@v0.26.42...v0.26.43) Updates `tree-sitter-erlang` from 0.20.0 to 0.21.0 - [Release notes](https://github.com/WhatsApp/tree-sitter-erlang/releases) - [Changelog](https://github.com/WhatsApp/tree-sitter-erlang/blob/main/CHANGELOG.md) - [Commits](WhatsApp/tree-sitter-erlang@0.20...0.21.0) Updates `tree-sitter-php` from 0.24.2 to 0.25.1 - [Release notes](https://github.com/tree-sitter/tree-sitter-php/releases) - [Commits](tree-sitter/tree-sitter-php@v0.24.2...v0.25.1) Updates `tree-sitter-scala` from 0.26.2 to 0.26.3 - [Release notes](https://github.com/tree-sitter/tree-sitter-scala/releases) - [Commits](tree-sitter/tree-sitter-scala@v0.26.2...v0.26.3) Updates `tree-sitter-swift` from 0.7.3 to 0.7.4 - [Commits](alex-pinkus/tree-sitter-swift@0.7.3...0.7.4) --- updated-dependencies: - dependency-name: tree-sitter dependency-version: 0.27.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tree-sitter-cfml dependency-version: 0.26.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tree-sitter-erlang dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tree-sitter-php dependency-version: 0.25.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tree-sitter-scala dependency-version: 0.26.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tree-sitter-swift dependency-version: 0.7.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from sunerpy as a code owner October 22, 2026 15:44

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 22, 2026

sunerpy mentioned this pull request Oct 23, 2026

feat: framework resolvers, synthesis, VB.NET and codegraph context #338

Draft

Navigation Menu

Repository navigation

build(deps): bump the cargo group across 1 directory with 6 updates - #334

build(deps): bump the cargo group across 1 directory with 6 updates#334
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-c6ec59f33c

dependabot Bot commented on behalf of github Oct 22, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 22, 2026

v0.27.1

What's Changed

v0.26.43

cfml & cfquery

[0.26.43]

cfml & cfquery

0.21.0

v0.25.1

What's Changed

New Contributors

v0.25.0

What's Changed

New Contributors

v0.26.3

bug fixes

behind the scenes

new contributors

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants