Skip to content

build(deps): bump the all group across 1 directory with 8 updates - #147

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-1dc4387ba6
Open

build(deps): bump the all group across 1 directory with 8 updates#147
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-1dc4387ba6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all group with 8 updates in the / directory:

Package From To
anyhow 1.0.103 1.0.104
base64 0.22.1 0.23.0
clap 4.6.1 4.6.4
noyalib 0.0.15 0.0.17
regex 1.13.0 1.13.1
serde 1.0.228 1.0.229
serde_json 1.0.150 1.0.151
toml 1.1.2+spec-1.1.0 1.1.3+spec-1.1.0

Updates anyhow from 1.0.103 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3
Commits

Updates base64 from 0.22.1 to 0.23.0

Changelog

Sourced from base64's changelog.

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • 9d21a59 Merge pull request #304 from marshallpierce/mp/custom-padding-rebase
  • f70bad2 Support custom padding symbols
  • 684d79c Merge pull request #301 from marshallpierce/mp/simd-gardening
  • 5bf66f2 Merge pull request #284 from AbeZbm/add-tests
  • d3831cf Followups to SIMD work
  • Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.4

Release notes

Sourced from clap's releases.

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Changelog

Sourced from clap's changelog.

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Commits
  • 87ec1ad chore: Release
  • 78f2529 docs: Update changelog
  • b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
  • 74c6666 fix(complete): Keep zsh candidate order
  • d142d8f Merge pull request #6360 from epage/string
  • ba89563 style: Prefer explicit string operations
  • bea966e Merge pull request #6359 from epage/man
  • b811986 chore(man):Remove unused required-features
  • 0010bf2 Merge pull request #6358 from clap-rs/renovate/crate-ci-typos-1.x
  • bab9b24 chore(deps): Update compatible (dev) (#6357)
  • Additional commits viewable in compare view

Updates noyalib from 0.0.15 to 0.0.17

Release notes

Sourced from noyalib's releases.

noyalib v0.0.17

What's Changed

  • release: v0.0.17 — lockstep republish (no core change) (#212) (c98a945)

Checksums

179fb3ecf8e64246b67049033e61c739c467c7bb1d79b2c1a65c1ac13f87512a  noyalib-0.0.17.crate

noyalib v0.0.16

What's Changed

  • release: v0.0.16 — build fix, MSRV 1.86, dependency refresh (#209) (00ee7b9)
  • test(ci): run every example + smoke-run every bench; fix 3 budget-broken benches (#192) (346a9b0)
  • docs: correct accuracy and consistency across README, rustdoc, examples, benches, and doc/ (#191) (1954ffc)

Checksums

c11d7b3d5d0b3d22eecbf678f9830b25444e90e773510ac3092d406082164d69  noyalib-0.0.16.crate
Changelog

Sourced from noyalib's changelog.

[v0.0.17] - 2026-07-25

A lockstep-only cut. The core crate has no code or behaviour change since v0.0.16 — main was byte-identical to the v0.0.16 tag. It is republished at 0.0.17 solely so the satellite crates, which carry real fixes, can pin =0.0.17 under the ADR-0005 strict-lockstep contract.

Satellite fixes shipping in this lockstep

  • noyalib-lsp — textDocument/formatting is no longer a silent no-op. It used a byte-faithful CST round-trip and always returned an empty edit list; it now calls cst::format. (The v0.0.16 changelog claimed this was fixed; it was not — this is the actual fix.)
  • noyalib-lsp / noya-cli — crossbeam-epoch bumped to 0.9.20 (RUSTSEC-2026-0204, invalid-pointer-dereference), which was present in their v0.0.16 lockfiles via a transitive dependency.

Repository hardening (all crates, CI/docs only)

  • Coverage, MSRV, CodeQL, and OpenSSF Scorecard gates brought to parity across the four satellites; noyalib-wasm gained a CI wasm-test job (wasm-pack test --node) gating its wasm-bindgen surface.
  • Upstream cargo-vet audit imports added to the satellites; branch- protection tightened so commit signing is unskippable.

[v0.0.16] - 2026-07-22

A build-fix + dependency-refresh cut. main was left unbuildable under --all-targets by a feature-gated import, and the dependency set had drifted. No public API change (cargo-semver-checks green); two deserialiser error-message strings change wording — see Fixed.

Full narrative: https://github.com/sebastienrousseau/noyalib/blob/main/RELEASE-NOTES-v0.0.16.md.

Lockstep versioning: noyalib bumps 0.0.15 → 0.0.16. Satellites publish =0.0.16 from their own repos:

Satellite note — noyalib-lsp carries a user-facing fix in this cut. textDocument/formatting was a silent no-op: the server derived its output from a byte-faithful CST round-trip, so it always returned an empty TextEdit[] and no editor ever saw a formatting change. Fixed by calling cst::format. See that repo's CHANGELOG.md. Nothing in the core crate changed as a result — the bug was in the LSP wrapper.

Fixed

... (truncated)

Commits
  • c98a945 release: v0.0.17 — lockstep republish (no core change) (#212)
  • 00ee7b9 release: v0.0.16 — build fix, MSRV 1.86, dependency refresh (#209)
  • 346a9b0 test(ci): run every example + smoke-run every bench; fix 3 budget-broken benc...
  • 1954ffc docs: correct accuracy and consistency across README, rustdoc, examples, benc...
  • See full diff in compare view

Updates regex from 1.13.0 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

  • #1354: Fixes previously unsound reverse suffix and inner optimizations.
Commits
  • 2b52759 1.13.1, redux
  • 40e9823 1.13.1
  • 75fcb96 changelog: 1.13.1
  • 64ad0b6 automata: fix bug in reverse suffix/inner optimization
  • fa91c31 automata: fix a bug caught by Codex review
  • 30390ec automata: formatting tweaks
  • 821a8eb automata: refactor reverse suffix/inner search slightly
  • 10afd70 automata: expose the extracted literals for inner literal extraction
  • 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
  • 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
  • Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates toml from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the all group across 1 directory with 8 updates
5dd9963 
Bumps the all group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.103` | `1.0.104` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.0` |
| [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.4` |
| [noyalib](https://github.com/sebastienrousseau/noyalib) | `0.0.15` | `0.0.17` |
| [regex](https://github.com/rust-lang/regex) | `1.13.0` | `1.13.1` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [toml](https://github.com/toml-rs/toml) | `1.1.2+spec-1.1.0` | `1.1.3+spec-1.1.0` |



Updates `anyhow` from 1.0.103 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.103...1.0.104)

Updates `base64` from 0.22.1 to 0.23.0
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.0)

Updates `clap` from 4.6.1 to 4.6.4
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.4)

Updates `noyalib` from 0.0.15 to 0.0.17
- [Release notes](https://github.com/sebastienrousseau/noyalib/releases)
- [Changelog](https://github.com/sebastienrousseau/noyalib/blob/main/CHANGELOG.md)
- [Commits](sebastienrousseau/noyalib@v0.0.15...v0.0.17)

Updates `regex` from 1.13.0 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.13.0...1.13.1)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `toml` from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.2...toml-v1.1.3)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: base64
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: clap
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: noyalib
  dependency-version: 0.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: regex
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: toml
  dependency-version: 1.1.3+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants