Skip to content

chore(deps): bump the cargo group across 1 directory with 4 updates - #30

Merged
jonasehrlich merged 2 commits into
mainfrom
dependabot/cargo/cargo-cecabf1d17
Oct 1, 2026
Merged

chore(deps): bump the cargo group across 1 directory with 4 updates#30
jonasehrlich merged 2 commits into
mainfrom
dependabot/cargo/cargo-cecabf1d17

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •
edited by jonasehrlich
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 5 updates in the / directory:

Package From To
bon 3.9.3 3.10.1
clap 4.6.6 4.6.7
octocrab 0.54.1 0.54.2
rustls 0.23.43 0.23.45

Updates bon from 3.9.3 to 3.10.1

Release notes

Sourced from bon's releases.

v3.10.1

Changed

v3.10.0

MSRV Update Notice

This release raises the minimum supported Rust version from 1.59.0 to 1.88.0. If you are on an older compiler, stay on bon@3.9.

The new MSRV also comes with the deprecation of the implied-bounds cargo feature. Implied bounds are now added by default without any feature gate, so be sure to remove that feature from your Cargo.toml if you have it enabled. It's currently a no-op, and it won't be removed until a major release, for which there are no plans yet.

The MSRV bump comes from the darling@0.24 update, which is the first version that uses syn@3.0.

Added

Changed

  • Bump MSRV to 1.88.0, move to the 2024 edition, update to syn@3.0 and darling@0.24 (#399)
  • Deprecate the implied-bounds cargo feature. Implied bounds are now generated by default (#399)

Internal

  • Regular maintenance (#392)
Commits

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates octocrab from 0.54.1 to 0.54.2

Release notes

Sourced from octocrab's releases.

v0.54.2

Added

  • added missing repos functionality #542 (#950)
  • added reqwest feature to use reqwest client

Changed

  • changed doctests to not create default octocrab instance (#962)

Other

  • added updating gist with multiple files at once #692 (#970)
  • added migrations tag handlers #540 (#969)
  • Added git db api tag handlers #536 (#968)
  • added apps tag handlers #533 (#967)
  • added billing tag handlers #530 (#966)
  • added copilot tag handlers #525 (#965)
  • added dependabot tag handlers #523 (#964)
  • added dependency graph tag handlers #522 (#963)
  • added 'codespaces' tag handlers #528 (#961)
  • added 'actions' tag handlers #531 (#960)
  • added packages tag functionality #544 (#959)
  • added search tag functionality #548 (#958)
  • activity tag handler #532 (#957)
  • issues tag handler for #538 (#956)
  • added reactions tag handlers #547 (#955)
  • added and reorganized 'orgs' handlers for #539 (#954)
  • Bugfix/release plz (#953)
  • Disabled semver_check because cargo-semver-checks enables all features (#952)
  • 'repos' functionality for #542 (#951)
  • added missing code-scanning functionality #526 (#949)
  • added missing and fixed existing secret-scanning functions #549 (#948)
  • added secutiry advisories for #550 (#947)
  • added missing [users] tag functions (#946)
  • list any user gpg keys #552 (#945)
  • added meta info #543 (#943)
  • Feature/org teams #551 (#942)
  • /user/teams for #551 (#941)
  • solves #535 (gist comments) (#940)
Changelog

Sourced from octocrab's changelog.

0.54.2 - 2026-09-14

Added

  • added missing repos functionality #542 (#950)
  • added reqwest feature to use reqwest client

Changed

  • changed doctests to not create default octocrab instance (#962)

Other

  • added updating gist with multiple files at once #692 (#970)
  • added migrations tag handlers #540 (#969)
  • Added git db api tag handlers #536 (#968)
  • added apps tag handlers #533 (#967)
  • added billing tag handlers #530 (#966)
  • added copilot tag handlers #525 (#965)
  • added dependabot tag handlers #523 (#964)
  • added dependency graph tag handlers #522 (#963)
  • added 'codespaces' tag handlers #528 (#961)
  • added 'actions' tag handlers #531 (#960)
  • added packages tag functionality #544 (#959)
  • added search tag functionality #548 (#958)
  • activity tag handler #532 (#957)
  • issues tag handler for #538 (#956)
  • added reactions tag handlers #547 (#955)
  • added and reorganized 'orgs' handlers for #539 (#954)
  • Bugfix/release plz (#953)
  • Disabled semver_check because cargo-semver-checks enables all features (#952)
  • 'repos' functionality for #542 (#951)
  • added missing code-scanning functionality #526 (#949)
  • added missing and fixed existing secret-scanning functions #549 (#948)
  • added secutiry advisories for #550 (#947)
  • added missing [users] tag functions (#946)
  • list any user gpg keys #552 (#945)
  • added meta info #543 (#943)
  • Feature/org teams #551 (#942)
  • /user/teams for #551 (#941)
  • solves #535 (gist comments) (#940)
Commits

Updates rustls from 0.23.43 to 0.23.45

Commits
  • 2976d90 Prepare 0.23.45
  • f9d4ee9 Handshake "alignment" check covers previously-received messages
  • c4e92e8 Keep data needed for HRR processing together
  • e553a7a server: TLS1.2 is not available after a HRR
  • 5dff9da Test whether server negotiates TLS1.2 after HRR
  • 185a063 reject a second ClientHello that changes the cipher suite
  • 9fafe6d reject a second ClientHello that drops pre_shared_key
  • 1b42c5f providers: zeroize private key DER
  • 64ad386 Bump version to 0.23.44
  • 1efbf66 bogo: remove PostQuantum setup
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo group across 1 directory with 5 updates
ebdb408 
Bumps the cargo group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bon](https://github.com/elastio/bon) | `3.9.3` | `3.10.1` |
| [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` |
| [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `10.4.0` | `11.1.0` |
| [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.54.1` | `0.54.2` |
| [rustls](https://github.com/rustls/rustls) | `0.23.43` | `0.23.45` |



Updates `bon` from 3.9.3 to 3.10.1
- [Release notes](https://github.com/elastio/bon/releases)
- [Changelog](https://github.com/elastio/bon/blob/master/release-plz.toml)
- [Commits](elastio/bon@v3.9.3...v3.10.1)

Updates `clap` from 4.6.6 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7)

Updates `jsonwebtoken` from 10.4.0 to 11.1.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v10.4.0...v11.1.0)

Updates `octocrab` from 0.54.1 to 0.54.2
- [Release notes](https://github.com/XAMPPRocky/octocrab/releases)
- [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md)
- [Commits](XAMPPRocky/octocrab@v0.54.1...v0.54.2)

Updates `rustls` from 0.23.43 to 0.23.45
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.43...v/0.23.45)

---
updated-dependencies:
- dependency-name: bon
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: jsonwebtoken
  dependency-version: 11.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: octocrab
  dependency-version: 0.54.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rustls
  dependency-version: 0.23.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 1, 2026
@jonasehrlich
build(deps): Use jsonwebtoken 10
407bd93 
[octocrab](https://github.com/XAMPPRocky/octocrab/tree/v0.54.2) uses
jsonwebtoken 10 so we have to as well.
@jonasehrlich jonasehrlich changed the title chore(deps): bump the cargo group across 1 directory with 5 updates chore(deps): bump the cargo group across 1 directory with 4 updates Oct 1, 2026
@jonasehrlich
jonasehrlich merged commit cf7b4e2 into main Oct 1, 2026
10 checks passed
@jonasehrlich
jonasehrlich deleted the dependabot/cargo/cargo-cecabf1d17 branch October 1, 2026 07:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jonasehrlich jonasehrlich jonasehrlich approved these changes

Assignees

@jonasehrlich jonasehrlich

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jonasehrlich