chore(deps): bump the cargo-version-updates group across 1 directory with 8 updates

[dependabot]

Bumps the cargo-version-updates group with 6 updates in the / directory:

Package	From	To
anyhow	1.0.100	1.0.102
serde_json	1.0.145	1.0.149
bumpalo	3.19.1	3.20.2
mago-formatter	1.0.0	1.13.3
stylua	2.3.1	2.4.0
rumdl	fbfba54	9ff781f

Updates anyhow from 1.0.100 to 1.0.102

Release notes

Sourced from anyhow's releases.

1.0.102

• Remove backtrace dependency (#438, #439, #440, #441, #442)

1.0.101

• Add #[inline] to anyhow::Ok helper (#437, thanks @​Ibitier)

Commits

• 5c657b3 Release 1.0.102
• e737fb6 Merge pull request #442 from dtolnay/backtrace
• 7fe62b5 Further simply backtrace conditional compilation
• c8cb5ca Merge pull request #441 from dtolnay/backtrace
• de27df7 Delete CI use of --features=backtrace
• 9b67e5d Merge pull request #440 from dtolnay/backtrace
• efdb11a Simplify std_backtrace conditional code
• b8a9a70 Merge pull request #439 from dtolnay/backtrace
• a42fc2c Remove feature = "backtrace" conditional code
• 2a2a3ce Re-word backtrace feature comment
• Additional commits viewable in compare view

Updates serde_json from 1.0.145 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

• Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

• Update zmij dependency to 1.0

v1.0.147

• Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

• Set fast_arithmetic=64 for riscv64 (#1305, thanks @​Xeonacid)

Commits

• 4f6dbfa Release 1.0.149
• f3df680 Touch up PR 1306
• e16730f Merge pull request #1306 from b41sh/fix-float-number-display
• eeb2bcd Align arbitrary_precision number strings with zmij’s formatting
• 8b291c4 Release 1.0.148
• 1aefe15 Update to zmij 1.0
• 62d6e8d Release 1.0.147
• fd829a6 Merge pull request #1304 from dtolnay/zmij
• e757a3d Switch from ryu -> zmij for float formatting
• 75ad7e6 Release 1.0.146
• Additional commits viewable in compare view

Updates bumpalo from 3.19.1 to 3.20.2

Changelog

Sourced from bumpalo's changelog.

3.20.2

Released 2026-02-19.

Fixed

• Restored Send and Sync implementations for Box<T> for T: ?Sized types as well.

---

3.20.1

Released 2026-02-18.

Fixed

• Restored Send and Sync implementations for Box<T> when T: Send and T: Sync respectively.

---

3.20.0

Released 2026-02-18.

Added

• Added the bumpalo::collections::Vec::pop_if method.

Fixed

• Fixed a bug in the bumpalo::collections::String::retain method in the face of panics.
• Made bumpalo::collections::Box<T> covariant with T (just like std::boxed::Box<T>).

---

Commits

• 1aad072 Bump to version 3.20.2 (#312)
• 2fb1d6a Add more tests for send and sync behavior, support unsized types (#311)
• 7c8d1f3 Bump to 3.20.1 (#310)
• e06b36b Restore Send and Sync for Box (#309)
• cb7f033 Bump to 3.20.0 (#307)
• d97d31c Make box covariant (#304)
• f9256f7 Pin quickcheck (#306)
• a006efb Fix String::retain panic safety yielding invalid UTF-8 (#302)
• 96ba386 Add pop_if() to Vec (#301)
• See full diff in compare view

Updates mago-formatter from 1.0.0 to 1.13.3

Release notes

Sourced from mago-formatter's releases.

Mago 1.13.3

This is a patch release packed with bug fixes across the analyzer, codex, and formatter. The analyzer fixes address several false positives involving generics, union types, type inference, and unreachable code detection. The codex fixes resolve issues with type combination and @inheritDoc inheritance. The formatter fixes resolve issues with concatenation chain formatting and preserve-break propagation.

🐛 Bug Fixes

Analyzer

• Deduplicated signature compatibility checks in diamond inheritance: Fixed duplicate diagnostics (e.g., incompatible-parameter-name reported multiple times) when a class implements multiple interfaces sharing a common ancestor (#1245)
• Fixed potentially undefined array element in union types: Fixed incorrect inference when accessing array elements that may be undefined within union types (#1263)
• Fixed empty array inference for bare generic parameter templates: Fixed a bug where generic type information was lost when passing an empty array to a function with a bare generic parameter template (#1264)
• Fixed static type resolution in method parameters for final classes: Fixed a false positive less-specific-argument when using generics that reference static in method parameters. static is now resolved using the method context and treated as exact for final classes (#1265)
• Fixed false positive unreachable code for declarations: Fixed a false positive where class, function, and other declarations following an unconditional return or throw were incorrectly reported as unreachable. Declarations are now excluded from unreachable code diagnostics and dead-code filtering (#1259)

Codex

• Fixed literal floats dropped from union types during type combination: Fixed a bug where the type combiner's fast path incorrectly dropped literal float types from unions. For example, a T|null parameter where T was inferred as a float would collapse to just null (#1262)
• Fixed @inheritDoc overwriting narrower child return types: Fixed a bug where @inheritDoc on a child method would replace the child's more specific native return type with the parent's broader docblock type. The inherited type is now narrowed against the child's native return type when the child is more specific (#1266)

Formatter

• Fixed preserve breaks affecting parent groups: Fixed an idempotency issue where preserve_breaking_* settings caused structural break propagation to parent groups, leading to different output on subsequent formatting passes. Preserve-sourced breaks are now isolated from structural breaks (#1260)
• Fixed concatenation chains staying hugged in argument lists: Fixed a bug where long string concatenation chains (3+ operands) inside constructor or function arguments were incorrectly "hugged" within the parentheses, causing the concatenation operators to break at the statement's indentation level instead of properly expanding the argument list (#1255)

🏗️ Internal

• Applied fixes from nightly Clippy (#1274)

🙏 Thank You

Contributors

A huge thank you to everyone who contributed code to this release:

• @​Bleksak — #1267
• @​kzmshx — #1245, #1260

Issue Reporters

Thank you to everyone who reported issues that shaped this release:

• @​Bleksak — #1263

---

Full Changelog: carthage-software/mago@1.13.2...1.13.3

Mago 1.13.2

This is a patch release with several bug fixes across the analyzer, formatter, and prelude, along with a batch of performance improvements.

... (truncated)

Commits

• 565646d release: 1.13.3 (#1276)
• b674bf1 fix(formatter): don't hug concatenation chains as they can be long (#1275)
• 0211cf7 chore(internal): apply fixes from nightly clippy (#1274)
• bb49bd7 fix(analyzer): skip unreachable code diagnostics and dead-code filtering for ...
• e3700e8 fix(codex): preserve child narrowed return type during @​inheritDoc inheritanc...
• bda47e6 fix(codex): include literal floats in type combination simplicity check (#1270)
• 38c6fd8 fix(analyzer): resolve static type in method parameters using method context ...
• 580cf92 fix(analyzer): allow empty array inference for bare generic parameter templat...
• 6732449 fix(analyzer): fix potentially undefined array element in union types (#1267)
• 28964f0 fix(formatter): prevent preserve breaks from affecting parent groups (#1260)
• Additional commits viewable in compare view

Updates mago-database from a470d00 to 565646d

Commits

• 565646d release: 1.13.3 (#1276)
• b674bf1 fix(formatter): don't hug concatenation chains as they can be long (#1275)
• 0211cf7 chore(internal): apply fixes from nightly clippy (#1274)
• bb49bd7 fix(analyzer): skip unreachable code diagnostics and dead-code filtering for ...
• e3700e8 fix(codex): preserve child narrowed return type during @​inheritDoc inheritanc...
• bda47e6 fix(codex): include literal floats in type combination simplicity check (#1270)
• 38c6fd8 fix(analyzer): resolve static type in method parameters using method context ...
• 580cf92 fix(analyzer): allow empty array inference for bare generic parameter templat...
• 6732449 fix(analyzer): fix potentially undefined array element in union types (#1267)
• 28964f0 fix(formatter): prevent preserve breaks from affecting parent groups (#1260)
• Additional commits viewable in compare view

Updates mago-php-version from a470d00 to 565646d

Commits

• 565646d release: 1.13.3 (#1276)
• b674bf1 fix(formatter): don't hug concatenation chains as they can be long (#1275)
• 0211cf7 chore(internal): apply fixes from nightly clippy (#1274)
• bb49bd7 fix(analyzer): skip unreachable code diagnostics and dead-code filtering for ...
• e3700e8 fix(codex): preserve child narrowed return type during @​inheritDoc inheritanc...
• bda47e6 fix(codex): include literal floats in type combination simplicity check (#1270)
• 38c6fd8 fix(analyzer): resolve static type in method parameters using method context ...
• 580cf92 fix(analyzer): allow empty array inference for bare generic parameter templat...
• 6732449 fix(analyzer): fix potentially undefined array element in union types (#1267)
• 28964f0 fix(formatter): prevent preserve breaks from affecting parent groups (#1260)
• Additional commits viewable in compare view

Updates stylua from 2.3.1 to 2.4.0

Release notes

Sourced from stylua's releases.

v2.4.0

[2.4.0] - 2026-03-07

Added

• Added flag --no-ignore-vcs to continue formatting files listed in a .gitignore file, instead of skipping over them (#895)
• Support call_parentheses = Input in editorconfig (#1057)
• Luau: Support formatting explicit type instantiations (f<<T>>(), obj:method<<T>>())
• Support stylua_syntax and stylua_block_newline_gaps properties in editorconfig (#1054)

Fixed

• Fixed syntax error in output when a single-line comment appears between an index suffix and a table call argument, e.g. foo.bar -- comment { } (#873)
• Fixed malformed formatting when a binary expression inside of a function call with comments around the operators is incorrectly collapsed onto one line (#996)
• Fixed repeated unary minus on long lines being collapsed into a comment, e.g. - - - - -5 becoming -----5 (#1075)
• Fixed --preserve-block-newline-gaps CLI flag not being applied as a config override
• Fixed LSP not respecting .stylua.toml on Windows due to incorrect file URI to path conversion (#1051)

---

External Contributions

• Remove WASM build workaround by @​magic-akari in JohnnyMorganz/StyLua#1060
• Fix call_parentheses = Input don't work in editorconfig by @​phanen in JohnnyMorganz/StyLua#1057
• Fix path conversion on Windows by @​8LWXpg in JohnnyMorganz/StyLua#1068

New Contributors

• @​8LWXpg made their first contribution in JohnnyMorganz/StyLua#1068

Full Changelog: JohnnyMorganz/StyLua@v2.3.1...v2.4.0

Changelog

Sourced from stylua's changelog.

[2.4.0] - 2026-03-07

Added

• Added flag --no-ignore-vcs to continue formatting files listed in a .gitignore file, instead of skipping over them (#895)
• Support call_parentheses = Input in editorconfig (#1057)
• Luau: Support formatting explicit type instantiations (f<<T>>(), obj:method<<T>>())
• Support stylua_syntax and stylua_block_newline_gaps properties in editorconfig (#1054)

Fixed

• Fixed syntax error in output when a single-line comment appears between an index suffix and a table call argument, e.g. foo.bar -- comment { } (#873)
• Fixed malformed formatting when a binary expression inside of a function call with comments around the operators is incorrectly collapsed onto one line (#996)
• Fixed repeated unary minus on long lines being collapsed into a comment, e.g. - - - - -5 becoming -----5 (#1075)
• Fixed --preserve-block-newline-gaps CLI flag not being applied as a config override
• Fixed LSP not respecting .stylua.toml on Windows due to incorrect file URI to path conversion (#1051)

Commits

• 28e1d7b v2.4.0
• 93d4422 Cleanup double headers in changelog
• f54fc55 Fix path conversion on Windows (#1068)
• e33575e Support stylua_syntax and stylua_block_newline_gaps in editorconfig (#1081)
• a9a36d6 Add CLI tests for editorconfig search rules (#1080)
• beb72c9 Bump minimatch from 3.1.2 to 3.1.5 in /stylua-npm-bin (#1072)
• ed425fb Bump minimatch from 3.1.2 to 3.1.5 in /stylua-vscode (#1077)
• 352dc2f Bump @​tootallnate/once and @​vscode/test-electron in /stylua-vscode (#1074)
• 13defcd Fix repeated unary minus on long lines collapsing into a comment (#1076)
• 86acad4 Bump axios from 1.12.0 to 1.13.5 in /stylua-npm-bin (#1065)
• Additional commits viewable in compare view

Updates rumdl from fbfba54 to 9ff781f

Commits

• 9ff781f fix(lint): remove default() calls on unit structs in tests
• 9d624be fix(lint): resolve clippy warnings in md053 and skip_context
• 0cc7f9f docs(rules): document MD070 as opt-in rule
• f664b69 fix(test): correct MD037 assertion for emphasis inside HTML block elements
• 61df69f chore(release): prepare v0.1.43
• 890cbee fix(rules): make MD070 opt-in to prevent unexpected file corruption
• 4526979 fix(rules): use byte-level search for inline HTML code detection
• 27fa741 fix(rules): skip inline HTML code elements in MD037 emphasis detection
• 10e2c2a fix(rules): skip HTML blocks in MD037 to prevent false positives
• 0ec1501 fix(rules): skip frontmatter lines in MD042 to prevent false positives
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions