Skip to content

chore(deps): bump the cargo group across 1 directory with 10 updates - #35

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-bdfa029c10
Closed

chore(deps): bump the cargo group across 1 directory with 10 updates#35
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-bdfa029c10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 10 updates in the / directory:

Package From To
monty v0.0.18 v0.0.19
clap 4.6.1 4.6.4
clap_complete 4.6.5 4.6.8
serde 1.0.228 1.0.229
serde_json 1.0.150 1.0.151
anyhow 1.0.102 1.0.104
serde-saphyr 0.0.27 0.0.29
toml 1.1.2+spec-1.1.0 1.1.4+spec-1.1.0
fancy-regex 0.18.0 0.19.0
rustyline 18.0.0 18.0.1

Updates monty from v0.0.18 to v0.0.19

Release notes

Sourced from monty's releases.

v0.0.19 - 2026-07-24

What's Changed

... (truncated)

Commits
  • e347739 Prep for v0.0.19 (#616)
  • 2eb0c6a use same build profile for codspeed as release (#614)
  • 4027af0 Reject action-less open modes, fix mixed-indent traceback dedent (#612)
  • a985ddf Remove max_allocations from resource limits (#611)
  • ab610c9 Remove ResourceError::Exception and fix check_replace_size shrinking bypa...
  • 23b5ffe Cap CollectString/CollectStreams so print loops can't OOM the host (#558)
  • 34c34e8 make dev-py install python dev deps (#606)
  • 344f91d release 0.0.19b6 (#604)
  • e1d31df Fix leaks and panics on MontyObject conversion error paths (#600)
  • 12df4d1 fix npm publish (#603)
  • Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.4

Release notes

Sourced from clap's releases.

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Changelog

Sourced from clap's changelog.

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Commits
  • 87ec1ad chore: Release
  • 78f2529 docs: Update changelog
  • b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
  • 74c6666 fix(complete): Keep zsh candidate order
  • d142d8f Merge pull request #6360 from epage/string
  • ba89563 style: Prefer explicit string operations
  • bea966e Merge pull request #6359 from epage/man
  • b811986 chore(man):Remove unused required-features
  • 0010bf2 Merge pull request #6358 from clap-rs/renovate/crate-ci-typos-1.x
  • bab9b24 chore(deps): Update compatible (dev) (#6357)
  • Additional commits viewable in compare view

Updates clap_complete from 4.6.5 to 4.6.8

Commits
  • d93a00d chore: Release
  • 4709d1a docs(complete): Update changelog
  • 2246e8b Merge pull request #6455 from epage/possible
  • 2550f32 feat(complete): Expose possible value completers
  • 9048857 refactor(complete): Pull out possible values candidate conversion
  • 0607d66 refactor(complete): Remove unused allocation
  • 943de73 refactor(complete): Move related functions next to each other
  • 81b86a9 refactor(complete): Generalize value candidate handling
  • ae09202 refactor(complete): Remove extra allocation
  • 466b2be chore: Release
  • Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)
Commits
  • 1dbe186 Release 1.0.104
  • f6479f8 Update to syn 3
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • See full diff in compare view

Updates serde-saphyr from 0.0.27 to 0.0.29

Release notes

Sourced from serde-saphyr's releases.

0.0.28 Property interpolation extensions and even faster builds

Significant extension of property interpolation ( @​CommanderStorm)

  • Added support for default property interpolation in plain scalars: ${NAME:-default} now resolves to default when NAME is unset or explicitly empty.
  • ${VAR}: Values that must be configured (DB URLs, API keys). An unset var is a misconfiguration, not something to paper over -> a loud error at parse time
  • ${VAR-fallback}: Empty value is meaningful and distinct from "not configured". F.ex. PREFIX="" -> "no prefix".
  • ${VAR:-fallback}: The "regular" default, so f.ex. ${PORT:-8080}
  • ${VAR+text}: F.ex. ${DEBUG+--verbose} emits the flag whenever DEBUG exists in the environment, regardless of value.
  • ${VAR:+text}: Same as above, but differentiating empty <-> null

Also

  • Fix #120 LastWins not honored when deserializing struct. This was implemented and well tested, but only with maps.
  • Reduced owning of comment strings (parsing very heavily commented YAML while discarding comments should be lighter on resources).
  • Fixed indentation enforcement (@​CommanderStorm), making sure it also works for multiline scalars.
  • Fixed tuple serialization (@​CommanderStorm)
  • New SingleQuoted<..> and DoubleQuoted<..> wrappers to emit quoted strings. SingleQuoted may provide additional safety, as control characters will be rejected (with error), rather than written as YAML escape sequences. NullableTilde<T> is like Option and emits tilde ( ~ ) rather than null.

Faster compilation times with serde_core

serde-saphyr now avoids compiling serde_derive by default. The crate core uses serde_core instead that allows building serde-saphyr in parallel with serde_derive. However this also means that we needed to drop the previously built-in (de)serialization support for some serde-saphyr own configuration and reporting types like Options. (De)serialization support for these types can be re-enabled with the new feature serde_derived_types:

serde-saphyr = { version = "...", features = ["serde_derived_types"] }

This does not affect normal use of serde-saphyr for user data, you can still serialize and deserialize your own structs as before.

Commits
  • f23c28c Advance version number
  • fc36c3f Removed benchmarking section from README.md - this needs to be re-benchmarked...
  • 9a727e3 Fix Clippy warning.
  • 3bd9fde Rearrange and reasonably name the test suites
  • 436edfe Two divergent hand-rolled escape tables in the serializer
  • 6a30736 Remove over-engineered Divisible(0) macro handling
  • 87afba3 Dead code removals
  • c656d3f Remove unnecessary #[path ..] constructs
  • 27c3959 Remove unnecessary #[path ..] constructs
  • 6f74db4 Improve code quality of budget.rs
  • Additional commits viewable in compare view

Updates toml from 1.1.2+spec-1.1.0 to 1.1.4+spec-1.1.0

Commits
  • beee9fe chore: Release
  • 16e2ac1 docs: Update changelog
  • 89f5541 fix(toml): preserve datetimes when deserializing Value (#1194)
  • 534039c fix(serde): Deserialize Value datetimes into typed targets
  • 6e45cef test(serde): Reproduce Value datetime deserialization error
  • 4ec099f chore: Release
  • 5a47a51 docs: Update changelog
  • da0911f perf(parser): Reduce over allocation by better tokens/byte ratio (#1193)
  • 26eb157 perf(parser): Reduce over allocation by better tokens/byte ratio
  • ca4c7bf chore(deps): Update Prek to v0.4.11 (#1191)
  • Additional commits viewable in compare view

Updates fancy-regex from 0.18.0 to 0.19.0

Release notes

Sourced from fancy-regex's releases.

0.19.0

Added

  • Add BytesMode and the RegexInput trait so the matching and capture APIs can operate on strings or bytes, and allows to opt out of unicode handling if desired (#248)
    • Also allows searching within a range without slicing (#253)
    • Assertions can be overridden at runtime, if the regex builder allow_input_assertion_overrides option was used (#254)
    • Search can be performed in anchored mode, searching only at the start position specified (#263)
  • Add experimental seek optimization to only invoke the VM at candidate positions where a match could occur (#246)
  • Add RegexBuilder::disallow_empty_match_at_eof_after_newline to reject empty matches at the end of the haystack following a trailing newline, to match Oniguruma behavior (#247)
  • Add RegexSet API for efficiently matching multiple patterns against the same text (#255)

Changed

  • Case-insensitive backreference comparison of non-ASCII text now uses direct Unicode simple case folding instead of building a regex engine per comparison, which makes patterns like (?i)(\w+)\1 orders of magnitude faster on non-ASCII haystacks. The comparison is now strict fold equality over the captured text's byte-length window: a case-folded prefix of the window no longer counts as a match (previously a substring search could accept one and misalign the match end)
  • Compilation performance: delegated regex-automata engines (including the whole pattern in the easy case) are now built from a directly-constructed Hir instead of a re-serialized pattern string, and RegexSet parses each pattern once for both of its set-wide engines instead of three times. This reduces compile time and peak compile memory, especially for RegexSet and small easy patterns
  • Match performance: the backtracking VM's working memory (saves, backtrack stack, delegate slots) is pooled and reused across runs, making is_match/find/find_iter and RegexSet candidate verification allocation-free per call; RegexSet::find_input no longer allocates at failed candidate positions. Short and repeated matches improve substantially (up to ~30% for small patterns, ~10% for find_iter over many matches); single very long backtracking runs, where per-run setup is fully amortized anyway, can be a few percent slower
  • Matches, CaptureMatches, Captures, and SubCaptureMatches are now generic over RegexInput, which is a breaking change for code that named these types explicitly (#248)
  • Patterns no longer force Unicode mode during parsing, and inline (?u) / (?-u) flags are accepted when they agree with the builder configuration

Fixed

  • Fix bug whereby inline flags were not overriding the builder options (#247)
  • Fix bug whereby \G optimizations were applying where they shouldn't, giving wrong results (#256)
  • Support Oniguruma quantifier parsing rules, whereby swapped ordering causes possessiveness, + only causes possessiveness after ?, * or + (#258)

Upgrade guide

If you previously stored i.e. Captures, you would need to change the type to Captures<str> to get the code to compile.

Changelog

Sourced from fancy-regex's changelog.

[0.19.0] - 2026-07-28

Added

  • Add BytesMode and the RegexInput trait so the matching and capture APIs can operate on strings or bytes, and allows to opt out of unicode handling if desired (#248)
    • Also allows searching within a range without slicing (#253)
    • Assertions can be overridden at runtime, if the regex builder allow_input_assertion_overrides option was used (#254)
    • Search can be performed in anchored mode, searching only at the start position specified (#263)
  • Add experimental seek optimization to only invoke the VM at candidate positions where a match could occur (#246)
  • Add RegexBuilder::disallow_empty_match_at_eof_after_newline to reject empty matches at the end of the haystack following a trailing newline, to match Oniguruma behavior (#247)
  • Add RegexSet API for efficiently matching multiple patterns against the same text (#255)

Changed

  • Case-insensitive backreference comparison of non-ASCII text now uses direct Unicode simple case folding instead of building a regex engine per comparison, which makes patterns like (?i)(\w+)\1 orders of magnitude faster on non-ASCII haystacks. The comparison is now strict fold equality over the captured text's byte-length window: a case-folded prefix of the window no longer counts as a match (previously a substring search could accept one and misalign the match end)
  • Compilation performance: delegated regex-automata engines (including the whole pattern in the easy case) are now built from a directly-constructed Hir instead of a re-serialized pattern string, and RegexSet parses each pattern once for both of its set-wide engines instead of three times. This reduces compile time and peak compile memory, especially for RegexSet and small easy patterns
  • Match performance: the backtracking VM's working memory (saves, backtrack stack, delegate slots) is pooled and reused across runs, making is_match/find/find_iter and RegexSet candidate verification allocation-free per call; RegexSet::find_input no longer allocates at failed candidate positions. Short and repeated matches improve substantially (up to ~30% for small patterns, ~10% for find_iter over many matches); single very long backtracking runs, where per-run setup is fully amortized anyway, can be a few percent slower
  • Matches, CaptureMatches, Captures, and SubCaptureMatches are now generic over RegexInput, which is a breaking change for code that named these types explicitly (#248)
  • Patterns no longer force Unicode mode during parsing, and inline (?u) / (?-u) flags are accepted when they agree with the builder configuration

Fixed

  • Fix bug whereby inline flags were not overriding the builder options (#247)
  • Fix bug whereby \G optimizations were applying where they shouldn't, giving wrong results (#256)
  • Support Oniguruma quantifier parsing rules, whereby swapped ordering causes possessiveness, + only causes possessiveness after ?, * or + (#258)

Upgrade guide

If you previously stored i.e. Captures, you would need to change the type to Captures<str> to get the code to compile.

Commits
  • e8d6986 Version 0.19.0
  • af79ee3 Merge pull request #267 from fancy-regex/regex-automata-bump
  • 9d6b2db bump regex-automata to fix some seek bugs
  • 3d04e3a Merge pull request #266 from fancy-regex/optimize_keepout
  • f44e0a5 Merge pull request #265 from fancy-regex/reduce_catastrophic_backtracking
  • e480dc4 Merge pull request #264 from fancy-regex/compilation_performance
  • 35f8efa add note about optimizer
  • 1f7a220 Address code review: fix spelling, add comment about has_descendant
  • 4712936 Add \K (KeepOut) optimization: delegate root-level \K patterns to regex-automata
  • 5496414 fix: correct asymmetric repeat optimization in build_concat_repeat_triplet
  • Additional commits viewable in compare view

Updates rustyline from 18.0.0 to 18.0.1

Release notes

Sourced from rustyline's releases.

18.0.1

What's Changed

Full Changelog: kkawakam/rustyline@v18.0.0...v18.0.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo group across 1 directory with 10 updates
840ff55 
Bumps the cargo group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [monty](https://github.com/pydantic/monty) | `v0.0.18` | `v0.0.19` |
| [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.4` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.6.5` | `4.6.8` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` |
| [serde-saphyr](https://github.com/bourumir-wyngs/serde-saphyr) | `0.0.27` | `0.0.29` |
| [toml](https://github.com/toml-rs/toml) | `1.1.2+spec-1.1.0` | `1.1.4+spec-1.1.0` |
| [fancy-regex](https://github.com/fancy-regex/fancy-regex) | `0.18.0` | `0.19.0` |
| [rustyline](https://github.com/kkawakam/rustyline) | `18.0.0` | `18.0.1` |



Updates `monty` from v0.0.18 to v0.0.19
- [Release notes](https://github.com/pydantic/monty/releases)
- [Commits](pydantic/monty@45a3b2d...e347739)

Updates `clap` from 4.6.1 to 4.6.4
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.4)

Updates `clap_complete` from 4.6.5 to 4.6.8
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.5...clap_complete-v4.6.8)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `anyhow` from 1.0.102 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.102...1.0.104)

Updates `serde-saphyr` from 0.0.27 to 0.0.29
- [Release notes](https://github.com/bourumir-wyngs/serde-saphyr/releases)
- [Commits](bourumir-wyngs/serde-saphyr@0.0.27...0.0.29)

Updates `toml` from 1.1.2+spec-1.1.0 to 1.1.4+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.2...toml-v1.1.4)

Updates `fancy-regex` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/fancy-regex/fancy-regex/releases)
- [Changelog](https://github.com/fancy-regex/fancy-regex/blob/main/CHANGELOG.md)
- [Commits](fancy-regex/fancy-regex@0.18.0...0.19.0)

Updates `rustyline` from 18.0.0 to 18.0.1
- [Release notes](https://github.com/kkawakam/rustyline/releases)
- [Changelog](https://github.com/kkawakam/rustyline/blob/master/History.md)
- [Commits](kkawakam/rustyline@v18.0.0...v18.0.1)

---
updated-dependencies:
- dependency-name: monty
  dependency-version: e347739909877f4fb03877e23dd092286fc7e659
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap_complete
  dependency-version: 4.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde-saphyr
  dependency-version: 0.0.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: toml
  dependency-version: 1.1.4+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: fancy-regex
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rustyline
  dependency-version: 18.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 11, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-bdfa029c10 branch August 11, 2026 22:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants