[dependabot]

Bumps the patch-updates group with 14 updates in the / directory:

Package	From	To
pest	2.9.3	2.9.4
pest_derive	2.9.3	2.9.4
serde_json	1.0.151	1.0.154
arc-swap	1.9.2	1.9.3
jaq-core	3.1.1	3.1.2
jaq-std	3.0.3	3.0.4
jsonpath-rust	1.0.11	1.0.12
sha2	0.11.0	0.11.1
opentelemetry-proto	0.33.0	0.33.1
schemars	1.2.2	1.2.3
rustls-native-certs	0.8.4	0.8.5
unicode-normalization	0.1.25	0.1.26
webpki-roots	1.0.9	1.0.10
rustls-webpki	0.103.15	0.103.16

Updates pest from 2.9.3 to 2.9.4

Release notes

Sourced from pest's releases.

v2.9.4

What's Changed

• add Cargo.lock for reproducible builds (fixes #1161) by @​tomtau in pest-parser/pest#1230
• validator: reject repetitions that loop because of the stack by @​yuxi-liu-wired in pest-parser/pest#1227
• Fix typos in three-string fast path of skip_until by @​shivampwm2020 in pest-parser/pest#1231

New Contributors

• @​yuxi-liu-wired made their first contribution in pest-parser/pest#1227
• @​shivampwm2020 made their first contribution in pest-parser/pest#1231

Full Changelog: pest-parser/pest@v2.9.3...v2.9.4

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:

...
pest_derive = { version = "2.9", features = ["grammar-extras"] }

Commits

• 66a059c Fix typos in the three-string fast path of skip_until (#1231)
• b4882ad validator: reject repetitions that loop because of the stack (#1227) (fixes 1...
• 7e779b7 add Cargo.lock for reproducible builds (fixes #1161) (#1230)
• See full diff in compare view

Updates pest_derive from 2.9.3 to 2.9.4

Release notes

Sourced from pest_derive's releases.

v2.9.4

What's Changed

• add Cargo.lock for reproducible builds (fixes #1161) by @​tomtau in pest-parser/pest#1230
• validator: reject repetitions that loop because of the stack by @​yuxi-liu-wired in pest-parser/pest#1227
• Fix typos in three-string fast path of skip_until by @​shivampwm2020 in pest-parser/pest#1231

New Contributors

• @​yuxi-liu-wired made their first contribution in pest-parser/pest#1227
• @​shivampwm2020 made their first contribution in pest-parser/pest#1231

Full Changelog: pest-parser/pest@v2.9.3...v2.9.4

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:

...
pest_derive = { version = "2.9", features = ["grammar-extras"] }

Commits

• 66a059c Fix typos in the three-string fast path of skip_until (#1231)
• b4882ad validator: reject repetitions that loop because of the stack (#1227) (fixes 1...
• 7e779b7 add Cargo.lock for reproducible builds (fixes #1161) (#1230)
• See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates arc-swap from 1.9.2 to 1.9.3

Changelog

Sourced from arc-swap's changelog.

1.9.3

• rwlock-strategy feature: RwLock<()> as an explicit, opt-in strategy (ArcSwapAny<Arc<T>, RwLock<()>>). DefaultStrategy is unchanged (#210, #211).

Commits

• See full diff in compare view

Updates jaq-core from 3.1.1 to 3.1.2

Release notes

Sourced from jaq-core's releases.

3.1.2

This release corrects bugs, increases compatibility with jq, and polishes the HTML manual.

Corrected bugs:

• The REPL works again, and as bonus, now exposes inputs and input_filename 01mf02/jaq#473
• Comments not followed by a newline do not crash jaq anymore 01mf02/jaq#479
• jaq can now actually be used on no_std systems, thanks to @​flyingmutant 01mf02/jaq#464

Compatibility:

• The scan filter now automatically applies the g flag and specially treats regexes with capture groups, like jq 01mf02/jaq#474

HTML manual:

• Syntax highlighting for jq and JSON snippets 01mf02/jaq#468
• Printing the manual now hides the TOC 01mf02/jaq#483

New Contributors

• @​flyingmutant made their first contribution in 01mf02/jaq#464

Full Changelog: 01mf02/jaq@v3.1.1...v3.1.2

Commits

• f7fea92 Bump versions.
• 8c294f9 Merge pull request #483 from 01mf02/manual-print-notoc
• f2ffd64 Merge pull request #482 from 01mf02/concat-noclone-test
• 4a82f98 Omit TOC when printing HTML manual.
• 782da79 New test for checking cloning behaviour of concatenation.
• 4acfc07 Merge pull request #481 from 01mf02/output-stack-overflow
• ba0695f Add output stack overflow example.
• d29c687 Merge pull request #473 from 01mf02/repl-input-filename
• 9ec8ea4 Make it smaller.
• 6d1a5eb Merge pull request #474 from 01mf02/scan-compat
• Additional commits viewable in compare view

Updates jaq-std from 3.0.3 to 3.0.4

Commits

• See full diff in compare view

Updates jsonpath-rust from 1.0.11 to 1.0.12

Changelog

Sourced from jsonpath-rust's changelog.

• 0.1.0

  • Initial implementation

• 0.1.1

  • Technical improvements

• 0.1.2

  • added a trait to obtain the result from value
  • added a method to get the cloned as Value
  • change the name of the general method*

• 0.1.4

  • add an ability to use references instead of values
  • fix some clippy issues

• 0.1.5

  • correct grammar for $.[..]

• 0.1.6

  • add logical OR and logical And to filters
  • fix bugs with objects in filters
  • add internal macros to generate path objects

• 0.2.0

  • add json path value as a result for the library
  • add functions (size)
  • change a logical operator size into function size()

• 0.2.1

  • changed the contract for length() function.

• 0.2.2

  • add ..*

• 0.2.5

  • build for tags

• 0.2.6

  • make parser mod public

• 0.3.0

  • introduce the different behaviour for empty results and non-existing result

• 0.3.2

  • make jsonpath inst cloneable.

• 0.3.3

  • fix a bug with the logical operators

• 0.3.4

  • add a result as a path

• 0.3.5

  • add ! negation operation in filters
  • allow using () in filters

• 0.5

  • add config for jsonpath
  • add an option to add a regex cache for boosting performance

• 0.5.1

  • add double quotes for the expressions (before it was only possible to use single quotes)
  • add Debug on the JsonPathFinder

• 0.6

  • allow to reuse regex, that improves performance without needing an internal cache

• 0.6.1

... (truncated)

Commits

• 183211b upd v
• 4674eec bump v
• 5223ef2 Translate I-Regexp dot and anchor match() patterns as a whole (#118)
• See full diff in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

• 138dc5a Release sha2 v0.11.1 (#927)
• cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
• 7c59cad Update Cargo.lock (#921)
• f57b947 streebog: tweak internal implementation (#925)
• 336611f Fix cargo::manual_readme lint (#924)
• 1df8877 md2: fix clippy::needless_range_loop lint (#923)
• 6075989 sha2: fix loading of round constants on AArch64 backends (#922)
• eadfd90 Update Cargo.lock (#913)
• fa30840 blake2 v0.11.0 (#911)
• f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
• Additional commits viewable in compare view

Updates opentelemetry-proto from 0.33.0 to 0.33.1

Commits

• 372ebbc chore: prepare 0.33.1 release and stabilize OTLP logs and metrics (#3782)
• 5582e71 docs(logs): polish design doc and fill perf numbers (#3566)
• 7ce1269 fix(sdk): log when the periodic metrics reader panics (#3777)
• b547036 fix(prometheus): keep resource labels when scope info is disabled (#3751)
• e8480db chore(deps): bump rust-toolchain from 1.98.0 to 1.99.0 (#3770)
• 0fdfc48 feat(proto): Add support for protobuffer descriptor output (#3675)
• 87929d7 ci: install markdown-link-check from npm (#3661)
• ff2ab2d docs(trace): explain async context propagation (#3759)
• 2595432 fix(proto): accept omitted default fields in OTLP/JSON exponential histogram,...
• 952bdee fix: accept optional whitespace in TraceState (#3761)
• Additional commits viewable in compare view

Updates schemars from 1.2.2 to 1.2.3

Release notes

Sourced from schemars's releases.

v1.2.3

Fixed

• schema creation panics with arbitrary precision JSON numbers (GREsau/schemars#527)
• Resolve unused_qualifications lint violation in generated code (GREsau/schemars#539 / GREsau/schemars#541)

Changed

• Put the tag of internally-tagged enums first in the schema's properties array (GREsau/schemars#537 / GREsau/schemars#538)

Changelog

Sourced from schemars's changelog.

[1.2.3] - 2026-10-12

Fixed

• schema creation panics with arbitrary precision JSON numbers (GREsau/schemars#527)
• Resolve unused_qualifications lint violation in generated code (GREsau/schemars#539 / GREsau/schemars#541)

Changed

• Put the tag of internally-tagged enums first in the schema's properties array (GREsau/schemars#537 / GREsau/schemars#538)

Commits

• 4791bb7 v1.2.3
• c6a89b7 Put the tag of an internally tagged enum first in properties
• c5cd8b5 fix: schema creation panics with arbitrary precision JSON numbers
• 766d70b Resolve unused_qualifications lint in crate and generated code - #541 (#541)
• d07655e Resolve clippy error
• See full diff in compare view

Updates rustls-native-certs from 0.8.4 to 0.8.5

Release notes

Sourced from rustls-native-certs's releases.

0.8.5

Avoid unnecessary work by keeping track of duplicate files on Unix systems.

What's Changed

• Read each file in cert directories only once by @​PeterUlb in rustls/rustls-native-certs#256
• Prepare 0.8.5 by @​djc in rustls/rustls-native-certs#257

Commits

• 4bcc4bb Bump version to 0.8.5
• 2d13547 Take semver-compatible dependency updates
• c231965 Read each file in cert directories only once
• da7d23d build(deps): bump rustls from 0.23.44 to 0.23.45 in the crates-io group
• 3f866a2 build(deps): bump rustls from 0.23.43 to 0.23.44 in the crates-io group
• e7d065e build(deps): bump rustls-webpki in the crates-io group
• 1196259 build(deps): bump rustls-webpki in the crates-io group
• 589e968 build(deps): bump rustls from 0.23.42 to 0.23.43 in the crates-io group
• 1d93e38 build(deps): bump serial_test from 3.5.0 to 4.0.1 in the crates-io group
• a54aba3 build(deps): bump the crates-io group with 2 updates
• Additional commits viewable in compare view

Updates unicode-normalization from 0.1.25 to 0.1.26

Commits

• See full diff in compare view

Updates webpki-roots from 1.0.9 to 1.0.10

Release notes

Sourced from webpki-roots's releases.

1.0.10

Changes:

• Removed "emSign ECC Root CA - G3"

What's Changed

• webpki-roots|webpki-root-certs: Prepare 1.0.10, remove emSign roots by @​cpu in rustls/webpki-roots#133

Commits

• 7076047 webpki-roots|webpki-root-certs: 1.0.9 -> 1.0.10
• c644e3e webpki-roots|webpki-root-certs: remove emSign roots
• b7815ff ccadb: bump version to 0.2.2
• 86423a8 ccadb: replace chrono with jiff
• 3d8edab Upgrade num-bigint to 0.5
• aa88673 ccadb: add crl_hosts() API
• bb89979 ccadb: extract specific root PEM from build_client()
• 782238f ccadb: extract build_client() helper function
• 24886ba webpki-ccadb: only trust the CCADB root CA
• 77edb21 Take semver-compatible dependency updates
• Additional commits viewable in compare view

Updates rustls-webpki from 0.103.15 to 0.103.16

Release notes

Sourced from rustls-webpki's releases.

0.103.16

Distrust a small set of intermediate certificate subject public keys due to specific security concerns around their operation.

What's Changed

• Cargo: avoid all-features in docs.rs by @​cpu in rustls/webpki#530
• 0.103.16: reject cert paths containing distrusted SPKIs by @​cpu in rustls/webpki#546

Full Changelog: rustls/webpki@v/0.103.14...v/0.103.16

Commits

• 8ecdcc7 ci: fix no-std toolchain target expansion
• 9b4d10d Cargo: 0.103.15 -> 0.103.16
• bb7dcc8 reject cert paths containing distrusted SPKIs
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml