deps(deps): bump the cargo-deps group across 1 directory with 18 updates by dependabot[bot] · Pull Request #67 · project-oxi/oxicode

dependabot · 2026-10-12T00:41:11Z

Bumps the cargo-deps group with 18 updates in the / directory:

Package	From	To
thiserror	`2.0.19`	`2.0.21`
tui-scrollbar	`0.2.7`	`0.2.8`
flate2	`1.1.9`	`1.1.10`
tokio	`1.53.1`	`1.53.2`
futures	`0.3.33`	`0.3.34`
uuid	`1.24.0`	`1.27.0`
protoc-bin-vendored	`3.2.0`	`3.3.0`
ignore	`0.4.32`	`0.4.33`
globset	`0.4.19`	`0.4.20`
async-trait	`0.1.91`	`0.1.92`
libc	`0.2.189`	`0.2.190`
clap	`4.6.5`	`4.6.7`
clap_complete	`4.6.8`	`4.6.11`
open	`5.4.1`	`5.4.4`
blake3	`1.8.5`	`1.8.7`
xxhash-rust	`0.8.18`	`0.8.19`
lru	`0.18.2`	`0.18.5`
similar	`3.1.1`	`3.2.0`

Updates thiserror from 2.0.19 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

Fix parsing of generic unit variants in display expressions (#459)

2.0.20

Suppress redundant_field_names clippy lint in generated code (#454)

Commits

b1827ee Release 2.0.21
58037b5 Merge pull request #459 from dtolnay/turbofish
f82a0cf Keep track of nested turbofish depth
72ea492 Raise required compiler to Rust 1.77
72eea0d Resolve io_other_error clippy lint in tests
07f09a2 Raise required compiler to Rust 1.74
2715388 Update ui test suite to nightly-2026-09-22
5a306c7 Update ui test suite to nightly-2026-09-05
ef9383b Update ui test suite to nightly-2026-08-22
8336b84 Update ui tests for version 2.0.20
Additional commits viewable in compare view

Updates tui-scrollbar from 0.2.7 to 0.2.8

Release notes

Sourced from tui-scrollbar's releases.

tui-scrollbar-v0.2.8

Maintenance updates.

Commits

c26a687 chore: release (#372)
f79a82d chore: simplify changelogs and release metadata (#374)
f0dbfdc feat(scrollview): expose state dimensions (#373)
a161c5d build(deps): bump Swatinem/rust-cache from e18b497796c12c097a38f9edb9d0641fb9...
872a7f0 build(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#365)
ba08dc5 build(deps): bump rstest from 0.26.1 to 0.27.0 (#366)
cec81cb build(deps): bump release-plz/action from 0.5.133 to 0.5.139 (#369)
a3a8fa7 build(deps): bump taiki-e/install-action from 2.87.7 to 2.87.17 (#371)
78b4122 build(deps): bump clap from 4.6.6 to 4.6.7 (#370)
ef36b7c build(deps): bump release-plz/action from 0.5.131 to 0.5.133 (#361)
Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

feat: reuse zlib's decoder buffer by @Vaiz in rust-lang/flate2-rs#532

feat: add reset method for read::GzDecoder and buffered::GzDecoder by @Vaiz in rust-lang/flate2-rs#534

Drop cloudflare-zlib by @kornelski in rust-lang/flate2-rs#539

Add a wrapper for the Crc struct by @MikkelPaulson in rust-lang/flate2-rs#540

Bump miniz_oxide to 0.9 by @oscargus in rust-lang/flate2-rs#543

Upgrade miniz_oxide and add unit tests of the different flush kinds by @fintelia in rust-lang/flate2-rs#498

Fix infinite loop in writing gzip header/footer by @Shnatsel in rust-lang/flate2-rs#547

test: generate corrupt gzip fixture at runtime by @nanookclaw in rust-lang/flate2-rs#550

Reject oversized gzip extra fields by @Byron in rust-lang/flate2-rs#553

Reject incomplete deflate streams at EOF by @Guflly in rust-lang/flate2-rs#556

Include README.md in a private module by @bushrat011899 in rust-lang/flate2-rs#562

Add no_std support using nightly alloc_io by @bushrat011899 in rust-lang/flate2-rs#559

Update get_mut() documentation to make clear how 'inner` can be used by @Byron in rust-lang/flate2-rs#558

New Contributors

@Vaiz made their first contribution in rust-lang/flate2-rs#532

@MikkelPaulson made their first contribution in rust-lang/flate2-rs#540

@oscargus made their first contribution in rust-lang/flate2-rs#543

@nanookclaw made their first contribution in rust-lang/flate2-rs#550

@Guflly made their first contribution in rust-lang/flate2-rs#556

@bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
fb5228d Merge pull request #559 from bushrat011899/no_std
6ed3ba3 Add executable no_std example
faed8a0 Expand CI to test no_std compatibility and correctness
2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
3fe1126 Centralize usage of std for error and io
98e313a Add GzHeader::mtime_as_duration
0642965 Switch to core implicit prelude and only use std where required
454a63c Remove left-over dbg! statement
2a490b7 Add runtime_detection feature
Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

fs: handle integer overflow in buffered relative seek (#8574)

io: revert "always cleanup AsyncFd registration list on deregister" (#8540)

process: unregister Windows wait before closing child handle (#8564)

rt: drop blocking pool mutex before shutting down rejected task (#8562)

sync: fix mpsc index wraparound in block reclamation (#8546)

sync: forget mpsc Permit before sending value (#8560)

sync: validate MAX_PERMITS in Semaphore::acquire (#8548)

sync: wake broadcast Sender::closed outside mutex (#8558)

task: drop replaced waker outside lock in JoinSet (#8554)

time: drop timer lock before dropping waker in clear_entry (#8552)

time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

fs: clamp io_uring read length to u32::MAX (#8572)

rt: ignore current_thread task dumps from other runtimes (#8544)

rt: preserve io_uring context if a completion waker panics (#8566)

sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)

taskdump: restore deferred leaf wakes during capture (#8445)

time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits

ff0c406 chore: prepare Tokio v1.53.2 (#8580)
a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
ec31a9f chore: prepare Tokio v1.51.5 (#8579)
625c851 sync: assign semaphore permits before emitting tracing event (#8542)
832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
9a47992 process: unregister Windows wait before closing child handle (#8564)
2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
Additional commits viewable in compare view

Updates futures from 0.3.33 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

Commits

705e6b5 Release 0.3.34
616dac7 compat: Inline RawWaker clone function
4176369 Inline remaining RawWaker clone functions
f17a895 Fix cloned FuturesUnordered waker identity
51d62ad macro: bump syn to v3 (#3028)
9e26177 ci: Reduce timeout-minutes
b2d0983 tsan: Enable Adaptive Delay
f733d0e Miri: Ignore compat tests
e5def2f Rename default branch to main
See full diff in compare view

Updates uuid from 1.24.0 to 1.27.0

Release notes

Sourced from uuid's releases.

v1.27.0

What's Changed

Accept case-insensitive urn:uuid: prefixes when parsing by @jaideeppyne in uuid-rs/uuid#912

Fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos by @KodrAus in uuid-rs/uuid#915

Prepare for 1.27.0 release by @KodrAus in uuid-rs/uuid#917

New Contributors

@jaideeppyne made their first contribution in uuid-rs/uuid#912

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

v1.26.1

What's Changed

Seat the v7 counter below the version nibble by @lenamonj in uuid-rs/uuid#907

Don't panic in overflowing Timestamp to SystemTime conversion by @KodrAus in uuid-rs/uuid#909

Prepare for 1.26.1 release by @KodrAus in uuid-rs/uuid#910

New Contributors

@lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

v1.26.0

What's Changed

Add ContextV7::with_additional_precision_bits by @ChrisJr404 in uuid-rs/uuid#904

Prepare for 1.26.0 release by @KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

Add a serde::bytes module that encodes a Uuid as a byte string by @ChrisJr404 in uuid-rs/uuid#902

Prepare for 1.25.0 release by @KodrAus in uuid-rs/uuid#903

New Contributors

@ChrisJr404 made their first contribution in uuid-rs/uuid#902

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

Fix non-ASCII character handling in parse diagnostics by @questfever in uuid-rs/uuid#899

Prepare for 1.24.1 release by @KodrAus in uuid-rs/uuid#900

New Contributors

@questfever made their first contribution in uuid-rs/uuid#899

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits

b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
ffd8ec5 prepare for 1.27.0 release
4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
a1aa126 Merge pull request #912 from jaideeppyne/fix/urn-prefix-case-insensitive
4639d67 fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos
2723703 bump MSRV to 1.89.0
a3e64fa refactor: simplify URN prefix parsing
5055fd4 refactor: inline case-insensitive URN prefix checks
cb8b1d5 refactor: simplify case-insensitive URN parsing
285967d Accept case-insensitive urn:uuid: prefixes when parsing
Additional commits viewable in compare view

Updates protoc-bin-vendored from 3.2.0 to 3.3.0

Changelog

Sourced from protoc-bin-vendored's changelog.

[3.3.0] - 2026-10-05

Bump protoc to 36.2

Commits

See full diff in compare view

Updates ignore from 0.4.32 to 0.4.33

Commits

3fce3b5 ignore-0.4.33
5055264 globset-0.4.20
020687a ignore,globset: increase pool capacity
See full diff in compare view

Updates globset from 0.4.19 to 0.4.20

Commits

5055264 globset-0.4.20
020687a ignore,globset: increase pool capacity
5ed408e ignore-0.4.32
435f59f ignore: skip loading unreachable ignore files
f9c05a9 index: remove incorrect README
8372866 index: add some initial indexing scaffolding
d99ac34 core: add index module
2ed0c00 flags: disable many flags when indexing is enabled
59e318f ignore-0.4.31
a9dc222 cargo: set rust-version on all crates
Additional commits viewable in compare view

Updates async-trait from 0.1.91 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

Resolve double_must_use clippy lint in generated code (#303)

Commits

82e7e9e Release 0.1.92
9a35cb8 Merge pull request #303 from dtolnay/mustuse
875ceec Resolve double_must_use clippy lint
62993a5 Raise minimum tested compiler to rust 1.88
See full diff in compare view

Updates libc from 0.2.189 to 0.2.190

Release notes

Sourced from libc's releases.

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)

Linux, NetBSD: Give statvfs a Default impl (#5583)

Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

Expose the libc_unstable_time64 cfg (#5411)

Android, Glibc: Add pthread_gettid_np (#5359)

Android: Add RTLD_NEXT (#5323)

Android: Add reuseport BPF socket options (#5366)

Apple: Add TCP header flags, options and SACK limits (#5358)

Apple: Add NET_RT_DUMP2 (#5442)

Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)

BSD: Add BPF_WORDALIGN (#5320)

BSD: Add lchmod and lchflags where supported (#5400)

BSD: Add minherit and related constants (#4849)

Docs: Add more links to public headers and manual pages (#5407), (#5485)

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable" in its name. In the near future we will rename it to just libc_time64. Until then, please test it out and report any bugs you find!

Support

Add initial support for HelenOS (#4355)

Added

We are slowly filling out the Default implementations, to reduce the need for mem::zeroed() in user code:

Unix: Implement Default for a number of structs, especially on Apple platforms (#5576)

Linux, NetBSD: Give statvfs a Default impl (#5583)

Linux: Add Default to a linux/can.rs structs (#5257)

Other additions:

Expose the libc_unstable_time64 cfg (#5411)

Android, Glibc: Add pthread_gettid_np (#5359)

Android: Add RTLD_NEXT (#5323)

Android: Add reuseport BPF socket options (#5366)

Apple: Add TCP header flags, options and SACK limits (#5358)

Apple: Add NET_RT_DUMP2 (#5442)

Apple: Add posix_spawn_file_actions_add(f)chdir(_np) (#5558)

BSD: Add BPF_WORDALIGN (#5320)

BSD: Add lchmod and lchflags where supported (#5400)

BSD: Add minherit and related constants (#4849)

... (truncated)

Commits

7b0ab55 ci: Rename publish_0.2.yml to release.yaml
ac85dde ci: Sync release permissions with main
8f8cd20 libc: Release 0.2.190
052c6e6 changelog: Fix an incorrect commit link
ea19fd7 test: Remove explicit libc version
6dbf3a2 dragonfly: Move INHERIT_ZERO to the freebsd module
8a64766 apple: add posix_spawn_file_actions_add(f)chdir(_np)
28de514 linux, netbsd: Give statvfs a Default impl
a58a95f cygwin: Change POSIX_SPAWN_* flags to c_short
d175264 apple: timeval32 is exhaustive
Additional commits viewable in compare view

Updates clap from 4.6.5 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

Commits

d3e59a9 chore: Release
d997f87 docs: Update changelog
fb6058c Merge pull request #6409 from heaths/pwsh-support
2310870 test(complete): Add tests for completer_for_path
5967c17 refactor(complete): Move shell detection to Shells
594602b fix(complete): Detect pwsh for PowerShell
3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
c968b13 chore(deps): Update Rust crate shlex to v2
8f247cb chore(deps): Update actions/checkout action to v7
Additional commits viewable in compare view

Updates clap_complete from 4.6.8 to 4.6.11

Commits

2cb76fd chore: Release
0b00b8d docs: Update changelog
3443000 Merge pull request #6526 from bonnefoa/fix-completion-escape
a1b6be7 fix(clap_complete): Fix value escape in zsh completion
face9e8 test(complete): Add completion test without arg's help
88053ab test(complete): Re-enable complete tests
e6adcc2 chore(release): Simplify replacements
13f2db5 chore: Release
3304fea docs: Update changelog
7b2ad34 Merge pull request #6521 from r-near/feat/derive-deferred-initialization
Additional commits viewable in compare view

Updates open from 5.4.1 to 5.4.4

Release notes

Sourced from open's releases.

v5.4.4

Bug Fixes

open Windows paths without wildcard expansion

Opening a child of a bracket-named directory fails because Start-Process resolves parent directories as PowerShell wildcard patterns. The isolated Windows regression test reproduced WildcardPatternException for a copied executable under "【Tiny Asa】 [77P7V-712MB]\child" before this change.

Use Test-Path and Invoke-Item with LiteralPath for existing items, retaining Start-Process for URLs and application names. These cmdlets also work under PowerShell Constrained Language Mode. Share the embedded script between Windows and WSL, keep targets in environment data, and stop on launch errors to report a nonzero exit status. Preserve the security boundary established in fd29861: cmd /c start remains opt-in through the insecure feature. No previously removed launcher options are restored.

The integration test launches only a copy of its own test binary, which records its executable path and exits. It checks absolute and relative paths with invalid and valid bracket patterns, Unicode, backticks, quotes, shell metacharacters, and leading dashes in normal and constrained PowerShell sessions, plus failure for a missing executable. It requires neither Explorer nor registered document or URL handlers. Adjust the existing fallback assertion to also allow the opt-in cmd launcher after Explorer with all features enabled.

Validated locally on Windows with PowerShell 5.1.26100.33438 and rustc 1.97.1: cargo test and cargo test --all-features each passed all 19 tests, including the behavioral regression. git diff --check passed, and cargo package --list includes the embedded script. Test-Path returned false without errors for representative https, mailto, and file URLs. Actual GUI folder, document, URL handling and WSL interop were not exercised locally.

Commit Statistics

2 commits contributed to the release.

8 days passed between releases.

1 commit was understood as conventional.

1 unique issue was worked on: #132

Commit Details

#132

Open Windows paths without wildcard expansion (ad95c40)

Uncategorized

... (truncated)

Changelog

Sourced from open's changelog.

5.4.4 (2026-09-10)

Bug Fixes

open Windows paths without wildcard expansion

Opening a child of a bracket-named directory fails because Start-Process resolves parent directories as PowerShell wildcard patterns. The isolated Windows regression test reproduced WildcardPatternException for a copied executable under "【Tiny Asa】 [77P7V-712MB]\child" before this change.

Use Test-Path and Invoke-Item with LiteralPath for existing items, retaining Start-Process for URLs and application names. These cmdlets also work under PowerShell Constrained Language Mode. Share the embedded script between Windows and WSL, keep targets in environment data, and stop on launch errors to report a nonzero exit status. Preserve the security boundary established in fd29861: cmd /c start remains opt-in through the insecure feature. No previously removed launcher options are restored.

The integration test launches only a copy of its own test binary, which records its executable path and exits. It checks absolute and relative paths with invalid and valid bracket patterns, Unicode, backticks, quotes, shell metacharacters, and leading dashes in normal and constrained PowerShell sessions, plus failure for a missing executable. It requires neither Explorer nor registered document or URL handlers. Adjust the existing fallback assertion to also allow the opt-in cmd launcher after Explorer with all features enabled.

Validated locally on Windows with PowerShell 5.1.26100.33438 and rustc 1.97.1: cargo test and cargo test --all-features each passed all 19 tests, including the behavioral regression. git diff --check passed, and cargo package --list includes the embedded script. Test-Path returned false without errors for representative https, mailto, and file URLs. Actual GUI folder, document, URL handling and WSL interop were not exercised locally.

Commit Statistics

2 commits contributed to the release.

8 days passed between releases.

1 commit was understood as conventional.

1 unique issue was worked on: #132

Commit Details

... (truncated)

Commits

ba35e00 Release open v5.4.4
45317f8 Merge pull request #133 from Byron/fix-open-on-windows
ad95c40 fix: open Windows paths without wildcard expansion (#132)
9551952 Release open v5.4.3
136d4d0 Merge pull request #131 from ncfavier/reap
43e601d review
a78c0ca fix: wait for intermediate child to terminate when double-forking
1a3ef5d Release open v5.4.2
7468760 Merge pull request #130 from s00d/fix/macos-that-detached-zombies
351bb54 review
Additional commits viewable in compare view

Updates blake3 from 1.8.5 to 1.8.7

Release notes

Sourced from blake3's releases.

1.8.7

version 1.8.7

Changes since 1.8.6:

Remove the arrayref dependency. Unfortunately the crates.io owner was compromised.

1.8.6

version 1.8.6

Changes since 1.8.5:

update_mmap and update_mmap_rayon (and by extension b3sum) now use seek rather than metadata to get the length of a file/mapping, and they tolerate mmap failures. That means b3sum will now memory map e.g. Linux block devices, which support mapping despite reporting length 0 in metadata. Hashing NUL files on Windows also works now, where previously it was an error unless you used --no-mmap or <. This change was originally proposed by @nabijaczleweli.

Commits

f3149ec version 1.8.7
b65bcb7 add #[allow(deprecated)] annotations to fix nightly/beta warnings
483a220 fix warnings related to not using MAX constants
ba02549 Codex: remove arrayref
77b257e version 1.8.6
83b1746 use seek instead of metadata to establish mmap length (#570)
9eac279 use vswhere to find Visual Studio in CI
fc3d0e9 Fix path to Visual Studio toolchain in CI
8aa5145 a few more colons
6bb9773 use cargo:: build script syntax
Additional commits viewable in compare view

Updates xxhash-rust from 0.8.18 to 0.8.19

Commits

See full diff in compare view

Updates lru from 0.18.2 to 0.18.5

Changelog

Sourced from lru's changelog.

v0.18.5 - 2026-09-22

Specify desired hashbrown features to reduce dependencies.

v0.18.4 - 2026-09-02

Add retain method.

v0.18.3 - 2026-08-27

Add sparse constructor.

Commits

f1e9721 Merge pull request #248 from jeromefroe/jerome/prepare-0-18-5-release
4592b1c Prepare 0.18.5 release
c5efdfd Merge pull request #247 from brunowonka/hashbrown-deps
02bd23f Specify desired hashbrown features
2504ad0 Merge pull request #245 from jeromefroe/jerome/prepare-0-18-4-release
419b047 Prepare 0.18.4 release
05ba36e Merge pull request #241 from ChrisJr404/add-retain
d84bc5e Revert retain to the simpler removal implementation
36a810e Potential fix for pull request finding
e0d578c Merge remote-tracking branch 'up/master' into add-retain
Additional commits viewable in compare view

Updates similar from 3.1.1 to 3.2.0

Changelog

Sourced from similar's changelog.

3.2.0

Added structured, line-oriented three-way merging through TextMerge, with merge and diff3 conflict output, configurable labels and marker sizes, owned and borrowed inputs, byte output, and whitespace-insensitive comparison.

Added WhitespaceMode and TextDiffConfig::whitespace_mode for Git-style line comparisons that ignore...
Description has been truncated

Bumps the cargo-deps group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.21` | | [tui-scrollbar](https://github.com/ratatui/tui-widgets) | `0.2.7` | `0.2.8` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.2` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` | | [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.27.0` | | [protoc-bin-vendored](https://github.com/stepancheg/rust-protoc-bin-vendored) | `3.2.0` | `3.3.0` | | [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.32` | `0.4.33` | | [globset](https://github.com/BurntSushi/ripgrep) | `0.4.19` | `0.4.20` | | [async-trait](https://github.com/dtolnay/async-trait) | `0.1.91` | `0.1.92` | | [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.190` | | [clap](https://github.com/clap-rs/clap) | `4.6.5` | `4.6.7` | | [clap_complete](https://github.com/clap-rs/clap) | `4.6.8` | `4.6.11` | | [open](https://github.com/Byron/open-rs) | `5.4.1` | `5.4.4` | | [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.5` | `1.8.7` | | [xxhash-rust](https://github.com/DoumanAsh/xxhash-rust) | `0.8.18` | `0.8.19` | | [lru](https://github.com/jeromefroe/lru-rs) | `0.18.2` | `0.18.5` | | [similar](https://github.com/mitsuhiko/similar) | `3.1.1` | `3.2.0` | Updates `thiserror` from 2.0.19 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.19...2.0.21) Updates `tui-scrollbar` from 0.2.7 to 0.2.8 - [Release notes](https://github.com/ratatui/tui-widgets/releases) - [Changelog](https://github.com/ratatui/tui-widgets/blob/main/CHANGELOG.md) - [Commits](ratatui/tui-widgets@tui-scrollbar-v0.2.7...tui-scrollbar-v0.2.8) Updates `flate2` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.9...1.1.10) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2) Updates `futures` from 0.3.33 to 0.3.34 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.33...0.3.34) Updates `uuid` from 1.24.0 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.24.0...v1.27.0) Updates `protoc-bin-vendored` from 3.2.0 to 3.3.0 - [Changelog](https://github.com/stepancheg/rust-protoc-bin-vendored/blob/master/CHANGELOG.md) - [Commits](https://github.com/stepancheg/rust-protoc-bin-vendored/commits/v3.3.0) Updates `ignore` from 0.4.32 to 0.4.33 - [Release notes](https://github.com/BurntSushi/ripgrep/releases) - [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md) - [Commits](BurntSushi/ripgrep@ignore-0.4.32...ignore-0.4.33) Updates `globset` from 0.4.19 to 0.4.20 - [Release notes](https://github.com/BurntSushi/ripgrep/releases) - [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md) - [Commits](BurntSushi/ripgrep@globset-0.4.19...globset-0.4.20) Updates `async-trait` from 0.1.91 to 0.1.92 - [Release notes](https://github.com/dtolnay/async-trait/releases) - [Commits](dtolnay/async-trait@0.1.91...0.1.92) Updates `libc` from 0.2.189 to 0.2.190 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.190/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.189...0.2.190) Updates `clap` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.5...clap_complete-v4.6.7) Updates `clap_complete` from 4.6.8 to 4.6.11 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.8...clap_complete-v4.6.11) Updates `open` from 5.4.1 to 5.4.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.4.1...v5.4.4) Updates `blake3` from 1.8.5 to 1.8.7 - [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases) - [Commits](BLAKE3-team/BLAKE3@1.8.5...1.8.7) Updates `xxhash-rust` from 0.8.18 to 0.8.19 - [Commits](https://github.com/DoumanAsh/xxhash-rust/commits) Updates `lru` from 0.18.2 to 0.18.5 - [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md) - [Commits](jeromefroe/lru-rs@0.18.2...0.18.5) Updates `similar` from 3.1.1 to 3.2.0 - [Changelog](https://github.com/mitsuhiko/similar/blob/main/CHANGELOG.md) - [Commits](mitsuhiko/similar@3.1.1...3.2.0) --- updated-dependencies: - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: tui-scrollbar dependency-version: 0.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: flate2 dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: futures dependency-version: 0.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: protoc-bin-vendored dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps - dependency-name: ignore dependency-version: 0.4.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: globset dependency-version: 0.4.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: async-trait dependency-version: 0.1.92 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: libc dependency-version: 0.2.190 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: clap_complete dependency-version: 4.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: open dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: blake3 dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: xxhash-rust dependency-version: 0.8.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: lru dependency-version: 0.18.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-deps - dependency-name: similar dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from a7garden as a code owner October 12, 2026 00:41

dependabot Bot added area: ci GitHub Actions, workflows, dependabot, supply chain. dependencies Pull request updates a dependency file. labels Oct 12, 2026

Navigation Menu

Repository navigation

deps(deps): bump the cargo-deps group across 1 directory with 18 updates - #67

deps(deps): bump the cargo-deps group across 1 directory with 18 updates#67
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-deps-90ae5272c7

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026

2.0.21

2.0.20

tui-scrollbar-v0.2.8

1.1.10

What's Changed

New Contributors

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

Fixed (unstable)

0.3.34

0.3.34 - 2026-08-11

v1.27.0

What's Changed

New Contributors

v1.26.1

What's Changed

New Contributors

v1.26.0

What's Changed

1.25.0

What's Changed

New Contributors

v1.24.1

What's Changed

New Contributors

[3.3.0] - 2026-10-05

0.1.92

0.2.190

Support

Added

0.2.190 - 2026-10-02

Support

Added

v4.6.7

[4.6.7] - 2026-09-14

Features

v4.6.6

[4.6.6] - 2026-08-06

Features

[4.6.7] - 2026-09-14

Features

[4.6.6] - 2026-08-06

Features

v5.4.4

Bug Fixes

Commit Statistics

Commit Details

5.4.4 (2026-09-10)

Bug Fixes

Commit Statistics

Commit Details

1.8.7

1.8.6

v0.18.5 - 2026-09-22

v0.18.4 - 2026-09-02

v0.18.3 - 2026-08-27

3.2.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants