Skip to content

Bump the rust-dependencies group across 1 directory with 10 updates - #20

Merged
qedawkins merged 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-055777fb7a
Aug 3, 2026
Merged

Bump the rust-dependencies group across 1 directory with 10 updates#20
qedawkins merged 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-055777fb7a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 10 updates in the / directory:

Package From To
serde_json 1.0.150 1.0.151
tokio 1.52.3 1.53.1
clap 4.6.1 4.6.4
regorus 0.10.1 0.11.0
anyhow 1.0.103 1.0.104
thiserror 2.0.18 2.0.19
hyper 1.10.1 1.11.0
http-body-util 0.1.3 0.1.4
libc 0.2.186 0.2.189
llama-cpp-2 0.1.151 0.1.152

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

  • time: fix alt timer cancellation and insertion race (#8252)

Documented

  • runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

  • fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
  • metrics: add task schedule latency metric (#7986)
  • net: add SocketAddr methods to Unix sockets (#8144)

Changed

  • io: add #[inline] to IO trait impls for in-memory types (#8242)
  • net: implement UCred::pid on FreeBSD (#8086)
  • net: support Nuttx target os (#8259)
  • signal: refactor global variables on Windows (#8231)
  • sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
  • taskdump: support taskdumps on s390x (#8192)
  • time: add #[track_caller] to timeout_at() (#8077)
  • time: consolidate mutex locks on spurious poll (#8124)
  • time: defer waker clone on spurious poll (#8107)
  • time: move lazy-registration state into Sleep (#8132)
  • tracing: remove unnecessary span clone (#8126)

Fixed

  • io: do not treat zero-length reads as EOF in Chain (#8251)
  • net: use getpeereid for QNX peer credentials (#8270)
  • runtime: avoid illegal state in FastRand (#8078)
  • sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
  • taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
  • time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

Updates clap from 4.6.1 to 4.6.4

Release notes

Sourced from clap's releases.

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Changelog

Sourced from clap's changelog.

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Commits
  • 87ec1ad chore: Release
  • 78f2529 docs: Update changelog
  • b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
  • 74c6666 fix(complete): Keep zsh candidate order
  • d142d8f Merge pull request #6360 from epage/string
  • ba89563 style: Prefer explicit string operations
  • bea966e Merge pull request #6359 from epage/man
  • b811986 chore(man):Remove unused required-features
  • 0010bf2 Merge pull request #6358 from clap-rs/renovate/crate-ci-typos-1.x
  • bab9b24 chore(deps): Update compatible (dev) (#6357)
  • Additional commits viewable in compare view

Updates regorus from 0.10.1 to 0.11.0

Release notes

Sourced from regorus's releases.

regorus-v0.11.0

Added

  • (compiler) support registered host-await builtins for natural function call syntax (#667)
  • (value) introduce Set storage abstraction (#740)

Fixed

  • (rvm) assert every-quantifier results so failing cases don't pass (#765)
  • Engine::add_data now deep-merges nested data documents instead of only merging top-level keys. Adding { "a": { "x": 1 } } followed by { "a": { "y": 2 } } now yields { "a": { "x": 1, "y": 2 } } (matching OPA's data-document merge). Nested sets under a shared key are unioned. Only genuine leaf conflicts (the same path holding two different values) are reported as errors. (#760)
  • A zero-arg function producing two different complete values (e.g. f() := { "a": 1 } and f() := { "b": 2 }) is now reported as a conflict, matching OPA's complete-rule semantics, instead of silently combining the outputs.

Security

  • Engine::add_data now rejects data nested beyond 128 levels instead of risking a stack overflow on adversarially deep input.

Other

  • (deps) bump the rust-dependencies group across 5 directories with 11 updates (#764)
  • Expand keyword-in-ref coverage for complex parser edge cases (interpreter + RVM) (#744)
  • (deps) bump the rust-dependencies group across 5 directories with 4 updates (#754)
  • (deps) bump the rust-dependencies group across 5 directories with 6 updates (#750)
  • (value) migrate Value::Object to Object storage abstraction (#736)
  • normalize path separators in folder filter on Windows (#742)
  • Introduce Object storage abstraction (#735)
  • (rvm) add debug-mode invariant assertions (#737)
  • (deps) bump the rust-dependencies group across 5 directories with 5 updates (#734)
Changelog

Sourced from regorus's changelog.

0.11.0 - 2026-07-21

Added

  • (compiler) support registered host-await builtins for natural function call syntax (#667)
  • (value) introduce Set storage abstraction (#740)

Fixed

  • (rvm) assert every-quantifier results so failing cases don't pass (#765)
  • Engine::add_data now deep-merges nested data documents instead of only merging top-level keys. Adding { "a": { "x": 1 } } followed by { "a": { "y": 2 } } now yields { "a": { "x": 1, "y": 2 } } (matching OPA's data-document merge). Nested sets under a shared key are unioned. Only genuine leaf conflicts (the same path holding two different values) are reported as errors. (#760)
  • A zero-arg function producing two different complete values (e.g. f() := { "a": 1 } and f() := { "b": 2 }) is now reported as a conflict, matching OPA's complete-rule semantics, instead of silently combining the outputs.

Security

  • Engine::add_data now rejects data nested beyond 128 levels instead of risking a stack overflow on adversarially deep input.

Other

  • (deps) bump the rust-dependencies group across 5 directories with 11 updates (#764)
  • Expand keyword-in-ref coverage for complex parser edge cases (interpreter + RVM) (#744)
  • (deps) bump the rust-dependencies group across 5 directories with 4 updates (#754)
  • (deps) bump the rust-dependencies group across 5 directories with 6 updates (#750)
  • (value) migrate Value::Object to Object storage abstraction (#736)
  • normalize path separators in folder filter on Windows (#742)
  • Introduce Object storage abstraction (#735)
  • (rvm) add debug-mode invariant assertions (#737)
  • (deps) bump the rust-dependencies group across 5 directories with 5 updates (#734)
Commits
  • f98865f chore(release): release regorus v0.11.0 (#766)
  • 6ef5e74 fix(rvm): assert every-quantifier results so failing cases don't pass (#765)
  • 9a486c7 fix: Deep-merge nested data documents in Engine::add_data (#760)
  • 9838b25 build(deps): bump the rust-dependencies group across 5 directories with 11 up...
  • f0acc64 feat(compiler): support registered host-await builtins for natural function c...
  • 166ea72 build(deps): bump the per-dependency group across 1 directory with 3 updates ...
  • 4c45ebf build(deps): update maturin requirement (#683)
  • 41e1303 feat(value): introduce Set storage abstraction (#740)
  • 9b42239 Expand keyword-in-ref coverage for complex parser edge cases (interpreter + R...
  • 9b6ad0b build(deps): bump org.apache.maven.plugins:maven-surefire-plugin (#732)
  • Additional commits viewable in compare view

Updates anyhow from 1.0.103 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3
Commits

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

  • Update to syn 3
Commits
  • e13a785 Release 2.0.19
  • 0a0e76c Update to syn 3
  • ec42ea7 Update actions/upload-artifact@v6 -> v7
  • 4178c4a Update actions/checkout@v6 -> v7
  • 7214e0e Ignore items_after_statements pedantic clippy lint in test
  • febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
  • c50e387 chore: improve thiserror maintenance path
  • d4a2507 Raise minimum tested compiler to rust 1.85
  • 99e8a6c Unpin CI miri toolchain
  • 9ac165c Pin CI miri to nightly-2026-02-11
  • Additional commits viewable in compare view

Updates hyper from 1.10.1 to 1.11.0

Release notes

Sourced from hyper's releases.

v1.11.0

Features

  • rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)

Bug Fixes

All PRs

New Contributors

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.11.0 (2026-07-20)

Bug Fixes

Features

  • rt: add ReadBufCursor::initialized_unfilled() method (#4115) (ccc1e850)
Commits
  • 67ace64 v1.11.0
  • 540fff9 fix(http1): discard content-length header when received before transfer-encod...
  • ccc1e85 feat(rt): add ReadBufCursor::initialized_unfilled() method (#4115)
  • 0ea8bc2 docs(maintainers): move some collaborators to emeriti (#4125)
  • 2fc06fc docs(governance): define Advisor role (#4098)
  • e0d14d1 style(proto): explicitly allow decimal_literal_representation lint (#4117)
  • de1483d fix(http1): use append for repeat trailer values in encoder (#4118)
  • 08c3416 style(headers): small refactor to remove question_mark lint (#4116)
  • aecf5ab fix(http2): avoid buffering Upgraded writes without send capacity (#4102)
  • f584091 fix(http1): allow up to max_headers trailers (#4108)
  • Additional commits viewable in compare view

Updates http-body-util from 0.1.3 to 0.1.4

Release notes

Sourced from http-body-util's releases.

http-body-util-v0.1.4

What's Changed

  • Add Fused body combinator that always returns None once completed.
  • Add BodyExt::into_stream() to convert a body into a Stream.
  • Add Full::into_inner() to get the full Buf.
  • Add InspectFrame and InspectErr combinators.
Commits

Updates libc from 0.2.186 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

  • Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
  • Linux SPARC: Enable the clone3 syscall (#4980)
  • Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

  • Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

  • Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
  • NuttX: Fix wchar_t definition under Arm (#5245)
  • Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

  • The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

  • uClibc now supports a similar configuration option:

    RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

  • Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
  • Linux SPARC: Enable the clone3 syscall (#4980)
  • Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

  • Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

  • Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
  • NuttX: Fix wchar_t definition under Arm (#5245)
  • Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

  • The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
  • uClibc now supports a similar configuration option:

... (truncated)

Commits
  • ef0906e libc: Release 0.2.189
  • 5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
  • 3e51062 psp: Fix overflowing_literals warnings
  • e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
  • 63221b3 macros: Require safe in safe_f! invocations
  • 707ab52 macros: Require unsafe in f! invocations
  • 8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
  • 8427909 windows: Add back link names for time-related symbols
  • b4863fa nuttx: fix wchar_t definition under arm
  • 41c683d nuttx: mirror type definitions
  • Additional commits viewable in compare view

Updates llama-cpp-2 from 0.1.151 to 0.1.152

Release notes

Sourced from llama-cpp-2's releases.

0.1.152

What's Changed

New Contributors

Full Changelog: utilityai/llama-cpp-rs@0.1.151...0.1.152

Commits
  • 58b2d04 Merge pull request #1072 from jona605a/feat/llguidance-tok-env-and-matcher
  • 34f1474 Merge pull request #1077 from bbales/main
  • 56ea15e Link static and dynamic CRT libraries based on the debug profile (LLAMA_LIB_P...
  • 10a8212 Merge branch 'main' into feat/llguidance-tok-env-and-matcher
  • 6a0216f revert LlgContext
  • 8f3b814 Merge pull request #1068 from nobodywho-ooo/feat/state-seq-checkpoint
  • 3c1cbc1 Merge branch 'main' into feat/state-seq-checkpoint
  • 98d85ef Merge branch 'main' into feat/llguidance-tok-env-and-matcher
  • 7f56060 comment warning about cost of build_tok_env
  • 2f9967d fmt
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the rust-dependencies group across 1 directory with 10 updates
b9a369c 
Bumps the rust-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` |
| [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.4` |
| [regorus](https://github.com/microsoft/regorus) | `0.10.1` | `0.11.0` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.103` | `1.0.104` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` |
| [hyper](https://github.com/hyperium/hyper) | `1.10.1` | `1.11.0` |
| [http-body-util](https://github.com/hyperium/http-body) | `0.1.3` | `0.1.4` |
| [libc](https://github.com/rust-lang/libc) | `0.2.186` | `0.2.189` |
| [llama-cpp-2](https://github.com/utilityai/llama-cpp-rs) | `0.1.151` | `0.1.152` |



Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `tokio` from 1.52.3 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1)

Updates `clap` from 4.6.1 to 4.6.4
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.4)

Updates `regorus` from 0.10.1 to 0.11.0
- [Release notes](https://github.com/microsoft/regorus/releases)
- [Changelog](https://github.com/microsoft/regorus/blob/main/CHANGELOG.md)
- [Commits](microsoft/regorus@regorus-v0.10.1...regorus-v0.11.0)

Updates `anyhow` from 1.0.103 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.103...1.0.104)

Updates `thiserror` from 2.0.18 to 2.0.19
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.19)

Updates `hyper` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.10.1...v1.11.0)

Updates `http-body-util` from 0.1.3 to 0.1.4
- [Release notes](https://github.com/hyperium/http-body/releases)
- [Commits](hyperium/http-body@http-body-util-v0.1.3...http-body-util-v0.1.4)

Updates `libc` from 0.2.186 to 0.2.189
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.189/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.186...0.2.189)

Updates `llama-cpp-2` from 0.1.151 to 0.1.152
- [Release notes](https://github.com/utilityai/llama-cpp-rs/releases)
- [Commits](utilityai/llama-cpp-rs@0.1.151...0.1.152)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: clap
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: regorus
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: hyper
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: http-body-util
  dependency-version: 0.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: libc
  dependency-version: 0.2.189
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: llama-cpp-2
  dependency-version: 0.1.152
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 29, 2026
@dependabot
dependabot Bot requested a review from qedawkins as a code owner July 29, 2026 05:47
@qedawkins
qedawkins merged commit fe981ef into main Aug 3, 2026
24 checks passed
@qedawkins
qedawkins deleted the dependabot/cargo/rust-dependencies-055777fb7a branch August 3, 2026 16:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@qedawkins qedawkins qedawkins approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@qedawkins