Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the dependencies group with 16 updates in the / directory:

Package From To
base16ct 0.3.0 1.0.0
cargo_metadata 0.21.0 0.23.1
chrono 0.4.42 0.4.43
clap 4.5.52 4.5.54
colored 3.0.0 3.1.1
flate2 1.1.5 1.1.8
git2 0.20.2 0.20.3
goblin 0.10.3 0.10.4
log 0.4.28 0.4.29
oci-spec 0.8.3 0.8.4
serde_json 1.0.145 1.0.149
tempfile 3.23.0 3.24.0
toml 0.9.8 0.9.11+spec-1.1.0
ureq 2.12.1 3.1.4
url 2.5.7 2.5.8
uuid 1.18.1 1.19.0

Updates base16ct from 0.3.0 to 1.0.0

Commits

Updates cargo_metadata from 0.21.0 to 0.23.1

Changelog

Sourced from cargo_metadata's changelog.

[0.23.1] - 2025-11-11

Changed

  • Stabilized build_directory

[0.23.0] - 2025-09-27

Added

  • Added FeatureName and PackageName newtype wrappers.

[0.22.0] - 2025-08-18

Added

  • Added pub fn env_remove<K: Into<OsString>>(&mut self, key: K) -> &mut MetadataCommand to MetadataCommand.
  • Added export of cargo_platform at crate's root module.

Changed

  • Updated dependencies:
    • camino from 1.0.7 to 1.1.10
    • cargo_platform from 0.2.0 to 0.3.0
    • derive_builder from 0.12 to 0.20
    • semver from 1.0.7 to 1.0.26
    • serde_json from 1.0.118 to 1.0.142
    • serde from 1.0.136 to 1.0.219
    • thiserror from 2.0.3 to 2.0.12
  • Made Dependency's source member the same type as Package's source member: Option<Source>.

[0.19.0] - 2024-11-20

Added

  • Re-exported semver crate directly.
  • Added implementation of std::ops::Index<&PackageId> for Resolve.
  • Added pub fn is_kind(&self, name: TargetKind) -> bool to Target.
  • Added derived implementations of PartialEq, Eq and Hash for Metadata and its members' types.
  • Added default fields to PackageBuilder.
  • Added pub fn new(name:version:id:path:) -> Self to PackageBuilder for providing all required fields upfront.

Changed

  • Bumped MSRV from 1.42.0 to 1.56.0.
  • Made parse_stream more versatile by accepting anything that implements Read.
  • Converted TargetKind and CrateType to an enum representation.

Removed

... (truncated)

Commits
  • c08e66c Merge pull request #317 from Muscraft/stabilize-build-dir
  • 083ca69 chore: Bump version to 0.23.1
  • 84d613b chore: Stabilize build_directory
  • 9d81809 chore: Address new clippy warnings
  • 4d66bd3 Merge pull request #309 from BD103/fix-doc-auto-config
  • d1a6aa2 fix: cargo_metadata not building on docs.rs
  • 2af44df Merge pull request #307 from smoelius/bump-version
  • 33cf6da Try to get CI to pass
  • 790de54 Bump version
  • 8af4dc4 Merge pull request #304 from smoelius/newtype-wrapper
  • Additional commits viewable in compare view

Updates chrono from 0.4.42 to 0.4.43

Release notes

Sourced from chrono's releases.

0.4.43

What's Changed

Commits
  • 45caaa9 Update copyright year to 2026 in LICENSE.txt
  • 1c0b8f0 Bump version to 0.4.43
  • a03e43b Upgrade windows-bindgen to 0.66
  • 4fedaba Ignore bincode advisory
  • f4b7bbd Bump actions/checkout from 5 to 6
  • db12973 Added doctest for the NaiveDate years_since function (#1755)
  • 34b5f49 chore: minor improvement for docs
  • 8c82711 Bump actions/setup-node from 5 to 6
  • ea1f11b Drop deny lints, eager Debug impls are a mixed blessing
  • 35f9f2d Add feature gated defmt support.
  • Additional commits viewable in compare view

Updates clap from 4.5.52 to 4.5.54

Release notes

Sourced from clap's releases.

v4.5.54

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help

v4.5.53

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs
Changelog

Sourced from clap's changelog.

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs
Commits
  • 194c676 chore: Release
  • 44838f6 docs: Update changelog
  • 0f59d55 Merge pull request #6027 from Alpha1337k/master
  • 3716f9f chore: Release
  • 613b69a docs: Update changelog
  • d117f7a Merge pull request #6028 from epage/arg
  • cb8255d feat(builder): Allow quoted id's for arg macro
  • e2aa2f0 Feat: Add catch-all on external subcommands for zsh
  • b9c0aee Feat: Add external subcommands test to suite
  • 1036060 Merge pull request #6025 from AldaronLau/typos-in-faq
  • Additional commits viewable in compare view

Updates colored from 3.0.0 to 3.1.1

Changelog

Sourced from colored's changelog.

Unreleased

  • Added methods ansi_color and on_ansi_color to Colorize.
Commits

Updates flate2 from 1.1.5 to 1.1.8

Release notes

Sourced from flate2's releases.

1.1.8

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.7...1.1.8

1.1.7 - depend on zlib-rs directly and remove libz-rs-sys

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.5...1.1.6

1.1.6 - YANKED

It caused rust-lang/flate2-rs#515.

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.5...1.1.6

Commits
  • 8b66c27 Merge pull request #525 from Byron/test-zlib-API
  • 5e752c9 Address PR review
  • 3196dd0 refactor internal feature toggles to better represent the status quo
  • 106cbcc Bump patch level in preparation for release
  • af7a0b3 Add capabilties test for functions reserved to zlib-implementations.
  • 22c77ee Describe unreachable!("...") branch in Deflate::set_level() of zlib-rs
  • b9e2979 Remove C-binding specific restriction from CI for zlib-rs test.
  • 71eb5c5 Merge pull request #524 from Byron/complete-zlib-rs
  • fec67eb zlib-rs: support set_dictionary and set_level
  • ecfdc2d update zlib-rs to 0.5.5
  • Additional commits viewable in compare view

Updates git2 from 0.20.2 to 0.20.3

Changelog

Sourced from git2's changelog.

0.20.3 - 2025-12-06

0.20.2...0.20.3

Changed

  • Bumped requirement to libgit2-sys 0.18.3, which updates libgit2 from 1.9.0 to 1.9.2. #1197
Commits

Updates goblin from 0.10.3 to 0.10.4

Changelog

Sourced from goblin's changelog.

[0.10.4] - 2025-11-30

Added

elf.reloc: add some missing PowerPC 32-bit relocation type constants, thanks @​ivlzme: m4b/goblin#495

Fixed

pe: Fix potential out-of-bounds read in unwind/POGO info parser, thanks @​kkent030315: m4b/goblin#498 pe: Reject cyclic resource trees, thanks @​Mrmaxmeier: m4b/goblin#499 pe: Handle unpadded resource values in .NET assemblies compiled with Mono, thanks @​BinFlip: m4b/goblin#501

Commits

Updates log from 0.4.28 to 0.4.29

Release notes

Sourced from log's releases.

0.4.29

MSRV

This release increases log's MSRV from 1.61.0 to 1.68.0.

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.28...0.4.29

Changelog

Sourced from log's changelog.

[0.4.29] - 2025-12-02

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.28...0.4.29

Commits
  • b1e2df7 Merge pull request #719 from rust-lang/cargo/0.4.29
  • 3fe1a54 prepare for 0.4.29 release
  • 7a432d9 Merge pull request #718 from rust-lang/ci/msrv
  • 0689d56 rebump msrv to 1.68.0
  • 46b448e try drop msrv back to 1.61.0
  • 929ab38 fix up doc test feature gate
  • 957cece bump serde-dependent crates
  • bea40c8 bump msrv to 1.68.0
  • c540184 Merge pull request #716 from rust-lang/ci-smaller-matrix2
  • c971e63 Merge branch 'master' into ci-smaller-matrix2
  • Additional commits viewable in compare view

Updates oci-spec from 0.8.3 to 0.8.4

Release notes

Sourced from oci-spec's releases.

v0.8.4

What's Changed

Other Changes

New Contributors

Full Changelog: youki-dev/oci-spec-rs@v0.8.3...v0.8.4

Commits
  • 3b56a02 Bump to 0.8.4
  • 9686335 feat(zos): add support for z/OS based containers
  • f65cac0 docs(state): enhance documentation for SECCOMP_FD_NAME constant and update OC...
  • a745110 feat(tests): add unit test for loading and saving State
  • 3f0233b chore(dependencies): update tempfile to version 3.23.0 and improve state impl...
  • 97d9996 feat(state): introduce State and ContainerState structures
  • a217db0 Merge pull request #300 from toksdotdev/toks/expose-reference-new
  • 3028cac chore(clippy): fix lint failure
  • f42632b chore(docs): improve doc comments for Reference::with_tag_and_digest
  • 8a41755 feat(reference): expose generic function for building references
  • Additional commits viewable in compare view

Updates serde_json from 1.0.145 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

  • Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

  • Update zmij dependency to 1.0

v1.0.147

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Commits

Updates tempfile from 3.23.0 to 3.24.0

Changelog

Sourced from tempfile's changelog.

3.24.0

  • Actually support WASIp2 without the nightly feature. This library is now feature complete on WASIp2 without any additional feature flags.
  • Exclude CI scripts from the published crate.
Commits

Updates toml from 0.9.8 to 0.9.11+spec-1.1.0

Commits

Updates ureq from 2.12.1 to 3.1.4

Changelog

Sourced from ureq's changelog.

3.1.4

  • Set content-type with new Multipart form #1133

3.1.3

  • Fix short read with multi-byte charset #1131
  • Replace rustls-pemfile usage with rustls-pki-types #1122
  • Support for env NO_PROXY and proxy config #1118
  • Experimental multi-part form support #1102

3.1.2

  • Fix bug when query is after host "example.com?query" #1115

3.1.1

  • Fix regression in MSRV (hold back native-tls) #1113
  • Fix edge case regression when setting request header Content-Length: 0 #1109

3.1.0

DECISION: webpki-roots and webpki-root-certs goes from pre-release (0.26) to stable release (1.0.0). This is potentially a big change for ureq users. We release this as semver minor.

  • Bump all deps to latest #1104
  • Fixes to CONNECT to follow spec #1103
  • Send Content-Length for File #1100
  • native-tls transport capture and surface underlying errors #1093
  • Bump webpki-roots/webpki-root-certs to 1.0.0 #1089
  • Bump rustls-platform-verifier to 0.6.0 #1089
  • Allow the license CDLA-Permissive-2.0 #1089

3.0.12

  • Chunked transfer handle abrupt close after 0\r\n #1074
  • Fix incorrect DNS resolving when using proxies #1081
  • Use + instead of %20 for url encoded form bodies #1071
  • Fix problem with double-quotes in cookie values #1068
  • Reduce Body size #1065
  • Fix featue flag public_suffix for CookieStore #1063
  • Improve doc for 10MB limit #1061

3.0.11

  • Fix CONNECT proxy bug #1057
  • Fix bug setting cookies in redirects #1055
  • Annotated example for making a Transport #1054
  • Feature for adding unencoded query parameters #1039

... (truncated)

Commits

Updates url from 2.5.7 to 2.5.8

Commits

Updates uuid from 1.18.1 to 1.19.0

Release notes

Sourced from uuid's releases.

v1.19.0

What's Changed

Full Changelog: uuid-rs/uuid@v1.18.1...v1.19.0

Commits
  • 7527cef Merge pull request #849 from uuid-rs/cargo/v1.19.0
  • d0422fa prepare for 1.19.0 release
  • f9a36e2 Merge pull request #848 from paolobarbolini/maintenance
  • 029a57e Fix most clippy warnings
  • e73bb27 Upgrade to 2021 edition
  • c597622 Merge pull request #843 from paolobarbolini/serde_core-migration
  • 9835bd6 Switch serde dependency to serde_core
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [base16ct](https://github.com/RustCrypto/formats) | `0.3.0` | `1.0.0` |
| [cargo_metadata](https://github.com/oli-obk/cargo_metadata) | `0.21.0` | `0.23.1` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.42` | `0.4.43` |
| [clap](https://github.com/clap-rs/clap) | `4.5.52` | `4.5.54` |
| [colored](https://github.com/mackwic/colored) | `3.0.0` | `3.1.1` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.5` | `1.1.8` |
| [git2](https://github.com/rust-lang/git2-rs) | `0.20.2` | `0.20.3` |
| [goblin](https://github.com/m4b/goblin) | `0.10.3` | `0.10.4` |
| [log](https://github.com/rust-lang/log) | `0.4.28` | `0.4.29` |
| [oci-spec](https://github.com/youki-dev/oci-spec-rs) | `0.8.3` | `0.8.4` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.149` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.23.0` | `3.24.0` |
| [toml](https://github.com/toml-rs/toml) | `0.9.8` | `0.9.11+spec-1.1.0` |
| [ureq](https://github.com/algesten/ureq) | `2.12.1` | `3.1.4` |
| [url](https://github.com/servo/rust-url) | `2.5.7` | `2.5.8` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.18.1` | `1.19.0` |



Updates `base16ct` from 0.3.0 to 1.0.0
- [Commits](RustCrypto/formats@base16ct/v0.3.0...base16ct/v1.0.0)

Updates `cargo_metadata` from 0.21.0 to 0.23.1
- [Release notes](https://github.com/oli-obk/cargo_metadata/releases)
- [Changelog](https://github.com/oli-obk/cargo_metadata/blob/main/CHANGELOG.md)
- [Commits](oli-obk/cargo_metadata@0.21.0...0.23.1)

Updates `chrono` from 0.4.42 to 0.4.43
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.42...v0.4.43)

Updates `clap` from 4.5.52 to 4.5.54
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.52...clap_complete-v4.5.54)

Updates `colored` from 3.0.0 to 3.1.1
- [Release notes](https://github.com/mackwic/colored/releases)
- [Changelog](https://github.com/colored-rs/colored/blob/master/CHANGELOG.md)
- [Commits](colored-rs/colored@v3.0.0...v3.1.1)

Updates `flate2` from 1.1.5 to 1.1.8
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.5...1.1.8)

Updates `git2` from 0.20.2 to 0.20.3
- [Changelog](https://github.com/rust-lang/git2-rs/blob/git2-0.20.3/CHANGELOG.md)
- [Commits](rust-lang/git2-rs@git2-0.20.2...git2-0.20.3)

Updates `goblin` from 0.10.3 to 0.10.4
- [Changelog](https://github.com/m4b/goblin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/m4b/goblin/commits)

Updates `log` from 0.4.28 to 0.4.29
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.28...0.4.29)

Updates `oci-spec` from 0.8.3 to 0.8.4
- [Release notes](https://github.com/youki-dev/oci-spec-rs/releases)
- [Changelog](https://github.com/youki-dev/oci-spec-rs/blob/main/release.md)
- [Commits](youki-dev/oci-spec-rs@v0.8.3...v0.8.4)

Updates `serde_json` from 1.0.145 to 1.0.149
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.149)

Updates `tempfile` from 3.23.0 to 3.24.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.23.0...v3.24.0)

Updates `toml` from 0.9.8 to 0.9.11+spec-1.1.0
- [Commits](toml-rs/toml@toml-v0.9.8...toml-v0.9.11)

Updates `ureq` from 2.12.1 to 3.1.4
- [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md)
- [Commits](algesten/ureq@2.12.1...3.1.4)

Updates `url` from 2.5.7 to 2.5.8
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](servo/rust-url@v2.5.7...v2.5.8)

Updates `uuid` from 1.18.1 to 1.19.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.18.1...v1.19.0)

---
updated-dependencies:
- dependency-name: base16ct
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: cargo_metadata
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: chrono
  dependency-version: 0.4.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: clap
  dependency-version: 4.5.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: colored
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: flate2
  dependency-version: 1.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: git2
  dependency-version: 0.20.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: goblin
  dependency-version: 0.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: log
  dependency-version: 0.4.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: oci-spec
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: serde_json
  dependency-version: 1.0.149
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: tempfile
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: toml
  dependency-version: 0.9.11+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ureq
  dependency-version: 3.1.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: url
  dependency-version: 2.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: uuid
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants