Skip to content

deps: Bump the rust-minor-patch group across 1 directory with 21 updates#774

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rust-minor-patch-9edf74a7c1
Open

deps: Bump the rust-minor-patch group across 1 directory with 21 updates#774
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rust-minor-patch-9edf74a7c1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps the rust-minor-patch group with 21 updates in the / directory:

Package From To
clap 4.5.54 4.5.60
clap_complete 4.5.65 4.6.0
tokio 1.49.0 1.50.0
config 0.15.19 0.15.21
anyhow 1.0.100 1.0.102
thiserror 2.0.17 2.0.18
tracing-subscriber 0.3.22 0.3.23
which 8.0.0 8.0.2
chrono 0.4.43 0.4.44
regex 1.12.2 1.12.3
once_cell 1.21.3 1.21.4
uuid 1.19.0 1.22.0
futures 0.3.31 0.3.32
cxx 1.0.192 1.0.194
candle-core 0.9.1 0.9.2
candle-transformers 0.9.1 0.9.2
assert_cmd 2.1.2 2.2.0
tempfile 3.24.0 3.27.0
serial_test 3.3.1 3.4.0
proptest 1.9.0 1.10.0
env_logger 0.11.8 0.11.9

Updates clap from 4.5.54 to 4.5.60

Release notes

Sourced from clap's releases.

v4.5.60

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

v4.5.59

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

v4.5.58

[4.5.58] - 2026-02-11

v4.5.57

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

v4.5.56

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

v4.5.55

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args
Changelog

Sourced from clap's changelog.

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

[4.5.58] - 2026-02-11

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args
Commits
  • 33d24d8 chore: Release
  • 9332409 docs: Update changelog
  • b7adce5 Merge pull request #6166 from fabalchemy/fix-dynamic-powershell-completion
  • 009bba4 fix(clap_complete): Improve powershell registration
  • d89d57d chore: Release
  • f18b67e docs: Update changelog
  • 9d218eb Merge pull request #6165 from epage/shirt
  • 126440c fix(help): Correctly calculate padding for short-only args
  • 9e3c05e test(help): Show panic with short, valueless arg
  • c9898d0 test(help): Verify short with value
  • Additional commits viewable in compare view

Updates clap_complete from 4.5.65 to 4.6.0

Changelog

Sourced from clap_complete's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

[4.5.58] - 2026-02-11

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help

... (truncated)

Commits

Updates tokio from 1.49.0 to 1.50.0

Release notes

Sourced from tokio's releases.

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

  • net: add TcpStream::set_zero_linger (#7837)
  • rt: add is_rt_shutdown_err (#7771)

Changed

  • io: add optimizer hint that memchr returns in-bounds pointer (#7792)
  • io: implement vectored writes for write_buf (#7871)
  • runtime: panic when event_interval is set to 0 (#7838)
  • runtime: shorten default thread name to fit in Linux limit (#7880)
  • signal: remember the result of SetConsoleCtrlHandler (#7833)
  • signal: specialize windows Registry (#7885)

Fixed

  • io: always cleanup AsyncFd registration list on deregister (#7773)
  • macros: remove (most) local use declarations in tokio::select! (#7929)
  • net: fix GET_BUF_SIZE constant for target_os = "android" (#7889)
  • runtime: avoid redundant unpark in current_thread scheduler (#7834)
  • runtime: don't park in current_thread if before_park defers waker (#7835)
  • io: fix write readiness on ESP32 on short writes (#7872)
  • runtime: wake deferred tasks before entering block_in_place (#7879)
  • sync: drop rx waker when oneshot receiver is dropped (#7886)
  • runtime: fix double increment of num_idle_threads on shutdown (#7910, #7918, #7922)

Unstable

  • fs: check for io-uring opcode support (#7815)
  • runtime: avoid lock acquisition after uring init (#7850)

Documented

  • docs: update outdated unstable features section (#7839)
  • io: clarify the behavior of AsyncWriteExt::shutdown() (#7908)
  • io: explain how to flush stdout/stderr (#7904)
  • io: fix incorrect and confusing AsyncWrite documentation (#7875)
  • rt: clarify the documentation of Runtime::spawn (#7803)
  • rt: fix missing quotation in docs (#7925)
  • runtime: correct the default thread name in docs (#7896)
  • runtime: fix event_interval doc (#7932)
  • sync: clarify RwLock fairness documentation (#7919)
  • sync: clarify that recv returns None once closed and no more messages (#7920)
  • task: clarify when to use spawn_blocking vs dedicated threads (#7923)
  • task: doc that task drops before JoinHandle completion (#7825)
  • signal: guarantee that listeners never return None (#7869)
  • task: fix task module feature flags in docs (#7891)

... (truncated)

Commits

Updates config from 0.15.19 to 0.15.21

Changelog

Sourced from config's changelog.

[0.15.21] - 2026-03-12

Compatibility

  • Bump MSRV to 1.85

[0.15.20] - 2026-03-12

Fixes

  • Serialize the full u64 range

Internal

  • (toml) Update to 1.0
Commits

Updates anyhow from 1.0.100 to 1.0.102

Release notes

Sourced from anyhow's releases.

1.0.102

1.0.101

Commits
  • 5c657b3 Release 1.0.102
  • e737fb6 Merge pull request #442 from dtolnay/backtrace
  • 7fe62b5 Further simply backtrace conditional compilation
  • c8cb5ca Merge pull request #441 from dtolnay/backtrace
  • de27df7 Delete CI use of --features=backtrace
  • 9b67e5d Merge pull request #440 from dtolnay/backtrace
  • efdb11a Simplify std_backtrace conditional code
  • b8a9a70 Merge pull request #439 from dtolnay/backtrace
  • a42fc2c Remove feature = "backtrace" conditional code
  • 2a2a3ce Re-word backtrace feature comment
  • Additional commits viewable in compare view

Updates thiserror from 2.0.17 to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

Commits
  • dc0f6a2 Release 2.0.18
  • 0275292 Touch up PR 443
  • 3c33bc6 Merge pull request #443 from LucaCappelletti94/master
  • 995939c Reproduce issue 442
  • 21653d1 Made clippy lifetime allows conditional
  • 45e5388 Update actions/upload-artifact@v5 -> v6
  • 386aac1 Update actions/upload-artifact@v4 -> v5
  • ec50561 Update actions/checkout@v5 -> v6
  • 247eab5 Update name of empty_enum clippy lint
  • 91b181f Raise required compiler to Rust 1.68
  • Additional commits viewable in compare view

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

  • Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

Updates which from 8.0.0 to 8.0.2

Release notes

Sourced from which's releases.

8.0.2

What's Changed

New Contributors

Full Changelog: harryfei/which-rs@8.0.1...8.0.2

8.0.1

What's Changed

New Contributors

Full Changelog: harryfei/which-rs@8.0.0...8.0.1

Changelog

Sourced from which's changelog.

8.0.2

  • Dependency on home_env removed, the implementation found in rust 1.85.0 for a home directory has been fixed. Thanks, [@​madsmtm],(https://github.com/madsmtm) for this contribution to which!
  • Dependency on winsafe removed, code for Windows API is now handwritten.
  • Dependency on rustix removed, we now depend on libc directly to reduce compile times.

8.0.1

Commits

Updates chrono from 0.4.43 to 0.4.44

Release notes

Sourced from chrono's releases.

0.4.44

What's Changed

Commits
  • c14b459 Bump version to 0.4.44
  • ea832c5 Add track_caller to non-deprecated functions
  • cfae889 Fix panic message in to_rfc2822
  • f8900b5 docs: match MSRV with Cargo.toml contents
  • See full diff in compare view

Updates regex from 1.12.2 to 1.12.3

Changelog

Sourced from regex's changelog.

1.12.3 (2025-02-03)

This release excludes some unnecessary things from the archive published to crates.io. Specifically, fuzzing data and various shell scripts are now excluded. If you run into problems, please file an issue.

Improvements:

  • #1319: Switch from a Cargo exclude list to an include list, and exclude some unnecessary stuff.
Commits
  • b028e4f 1.12.3
  • 5e195de regex-automata-0.4.14
  • a3433f6 regex-syntax-0.8.9
  • 0c07fae regex-lite-0.1.9
  • 6a81006 cargo: exclude development scripts and fuzzing data
  • 4733e28 automata: fix onepass::DFA::try_search_slots panic when too many slots are ...
  • See full diff in compare view

Updates once_cell from 1.21.3 to 1.21.4

Changelog

Sourced from once_cell's changelog.

1.21.4

  • Fix unsoundness in OnceCell::wait under --features=parking_lot, #295.

    If thread A calls wait, while thread B calls get_or_try_init(f), and, furthermore, f panics, the wait incorrectly returns and thread A observes uninitialized memory.

    Kudos to @​meng-xu-cs for a nice find!

Commits
  • 80fe900 Merge pull request #296 from matklad/matklad/plfix
  • a5e09c9 release 1.21.4
  • 2426d45 Merge pull request #295 from matklad/matklad/plfix
  • a144121 Merge pull request #290 from alexanderkjall/run-tests-with-no-default-features
  • 232a1a4 Merge pull request #292 from phil-opp/doc-fix
  • d31767b fix OnceCell::wait with features=parking_lot
  • 28d29ae Fix: sync::OnceCell::try_insert docs should import sync variant
  • 0f78fb0 make the command 'cargo test --no-default-features' work
  • fda60a6 Merge pull request #287 from AbeZbm/add-tests
  • b5b98c0 Add tests for OnceRef
  • See full diff in compare view

Updates uuid from 1.19.0 to 1.22.0

Release notes

Sourced from uuid's releases.

v1.22.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.21.0...v1.22.0

v1.21.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.20.0...v1.21.0

v1.20.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.19.0...v1.20.0

Commits
  • da15792 Merge pull request #864 from uuid-rs/cargo/v1.22.0
  • 7ec48c9 prepare for 1.22.0 release
  • c4e983f Merge pull request #863 from haxtibal/tdmg/rand_0_9_and_0_10
  • f3f677e update workspace root to rand 0.10
  • a38fa19 Merge pull request #859 from uuid-rs/cargo/v1.21.0
  • e45b10f prepare for 1.21.0 release
  • f6f5d48 Merge pull request #852 from XAMPPRocky/main
  • 9bee4bd Merge branch 'main' into main
  • cb8f156 Merge pull request #858 from uuid-rs/chore/getrandom-04
  • a59c061 bump msrv to 1.85.0 for getrandom
  • Additional commits viewable in compare view

Updates futures from 0.3.31 to 0.3.32

Release notes

Sourced from futures's releases.

0.3.32

  • Bump MSRV of utility crates to 1.71. (#2989)
  • Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#2925)
  • Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#2929)
  • Add FuturesOrdered::clear (#2927)
  • Add mpsc::*Receiver::recv (#2947)
  • Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#2944)
  • Implement FusedStream for sink::With (#2948)
  • Add no_std support for shared (#2868)
  • Make Mutex::new() const (#2956)
  • Add #[clippy::has_significant_drop] to guards (#2967)
  • Remove dependency to pin-utils (#2929)
  • Remove dependency on num_cpus (#2946)
  • Performance improvements (#2983)
  • Documentation improvements (#2925, #2926, #2940, #2971)
Changelog

Sourced from futures's changelog.

0.3.32 - 2026-02-15

  • Bump MSRV of utility crates to 1.71. (#2989)
  • Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#2925)
  • Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#2929)
  • Add FuturesOrdered::clear (#2927)
  • Add mpsc::*Receiver::recv (#2947)
  • Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#2944)
  • Implement FusedStream for sink::With (#2948)
  • Add no_std support for shared (#2868)
  • Make Mutex::new() const (#2956)
  • Add #[clippy::has_significant_drop] to guards (#2967)
  • Remove dependency to pin-utils (#2929)
  • Remove dependency on num_cpus (#2946)
  • Performance improvements (#2983)
  • Documentation improvements (#2925, #2926, #2940, #2971)
Commits
  • d9bba94 Release 0.3.32
  • 151e0b9 Add comments on rust-version field in Cargo.toml
  • 4aaf00c Bump MSRV of utility crates to 1.71
  • a4cce12 perf: improve AtomicWaker::wake performance (#2983)
  • ba9d102 Add #[clippy::has_significant_drop] to guards (#2967)
  • 20396a8 Fix rustdoc::broken_intra_doc_links warning
  • 815f6eb Fix documentation of BiLock::lock (#2971)
  • 0f0db04 futures-util: make Mutex::new() const (#2956)
  • 5d6fc5e ci: Test big-endian target (s390x Linux)
  • 9f739fe Ignore dead_code lint on Fn1 trait
  • Additional commits viewable in compare view

Updates cxx from 1.0.192 to 1.0.194

Release notes

Sourced from cxx's releases.

1.0.194

1.0.193

Commits

Updates candle-core from 0.9.1 to 0.9.2

Commits

Updates candle-transformers from 0.9.1 to 0.9.2

Commits

Updates assert_cmd from 2.1.2 to 2.2.0

Changelog

Sourced from assert_cmd's changelog.

[2.2.0] - 2026-03-10

Compatibility

  • Change cargo_bin bad paths to panics

[2.1.3] - 2026-03-10

Fixes

  • Un-deprecate cargo_bin
Commits
  • d935ff8 chore: Release assert_cmd version 2.2.0
  • 1631cf4 docs: Changelog
  • 3137b55 Merge pull request #283 from epage/panic
  • ebd79f1 fix(cargo): Panic, rather than return bad path
  • 79c9b0d chore: Release assert_cmd version 2.1.3
  • 90cb0dd docs: Update changelog
  • 7af59b9 Merge pull request #282 from epage/deprecated
  • 80fe94c docs(cargo): Specify support for different versions
  • 0246aa6 test: Close markdown quotes
  • cb3b590 Revert "fix: Deprecate cargo_bin (runtime version)"
  • Additional commits viewable in compare view

Updates tempfile from 3.24.0 to 3.27.0

Changelog

Sourced from tempfile's changelog.

3.27.0

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

  1. TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
  2. The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @​meng-xu-cs for reporting this issue.

3.26.0

3.25.0

  • Allow getrandom 0.4.x while retaining support for getrandom 0.3.x.
Commits

Updates serial_test from 3.3.1 to 3.4.0

Release notes

Sourced from serial_test's releases.

v3.4.0

What's Changed

New Contributors

Full Changelog: palfrey/serial_test@v3.3.1...v3.3.2

Commits
  • 9a307f2 3.4.0
  • f5e47fd Merge pull request #153 from palfrey/non-yanked-packages
  • 93fc70c Update scc and futures-util to non-yanked
  • bda53c7 Run cargo audit
  • 27f36aa Merge pull request #152 from xtqqczze/rust-version
  • 8633f7d specify rust-version for workspace
  • 656280f Merge pull request #151 from palfrey/flag-doctests
  • 71d9590 Flag #[test] in docs as non-running to sa...

    Description has been truncated


    Summary by cubic

    Update 21 Rust dependencies to pick up bug fixes, stability, and small performance wins across the workspace. Highlights include tokio 1.50, clap 4.5.60, clap_complete 4.6.0, uuid 1.22, and regex 1.12.3.

    • Dependencies

      • Runtime and CLI: tokio 1.50.0, clap 4.5.60, clap_complete 4.6.0
      • Config and logging: config 0.15.21, tracing-subscriber 0.3.23, env_logger 0.11.9
      • Utilities: regex 1.12.3, once_cell 1.21.4, chrono 0.4.44, which 8.0.2, uuid 1.22.0, futures 0.3.32, cxx 1.0.194
      • Testing/dev: assert_cmd 2.2.0, serial_test 3.4.0, proptest 1.10.0, tempfile 3.27.0
      • ML stack: candle-core 0.9.2, candle-transformers 0.9.2
    • Migration

      • MSRV is now 1.85+ (via clap_complete 4.6.0, config 0.15.21, uuid’s getrandom 0.4).
      • Tests: assert_cmd::cargo_bin now panics on bad paths; fix any callers that relied on a returned bad path.
      • If constructing temp paths manually, prefer tempfile::TempPath::try_from_path (safer for relative paths).

    Written for commit ce10cfb. Summary will update on new commits.

Bumps the rust-minor-patch group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.54` | `4.5.60` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.5.65` | `4.6.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` |
| [config](https://github.com/rust-cli/config-rs) | `0.15.19` | `0.15.21` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.102` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.17` | `2.0.18` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [which](https://github.com/harryfei/which-rs) | `8.0.0` | `8.0.2` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.43` | `0.4.44` |
| [regex](https://github.com/rust-lang/regex) | `1.12.2` | `1.12.3` |
| [once_cell](https://github.com/matklad/once_cell) | `1.21.3` | `1.21.4` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.19.0` | `1.22.0` |
| [futures](https://github.com/rust-lang/futures-rs) | `0.3.31` | `0.3.32` |
| [cxx](https://github.com/dtolnay/cxx) | `1.0.192` | `1.0.194` |
| [candle-core](https://github.com/huggingface/candle) | `0.9.1` | `0.9.2` |
| [candle-transformers](https://github.com/huggingface/candle) | `0.9.1` | `0.9.2` |
| [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.1.2` | `2.2.0` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.24.0` | `3.27.0` |
| [serial_test](https://github.com/palfrey/serial_test) | `3.3.1` | `3.4.0` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.9.0` | `1.10.0` |
| [env_logger](https://github.com/rust-cli/env_logger) | `0.11.8` | `0.11.9` |



Updates `clap` from 4.5.54 to 4.5.60
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.54...clap_complete-v4.5.60)

Updates `clap_complete` from 4.5.65 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.65...clap_complete-v4.6.0)

Updates `tokio` from 1.49.0 to 1.50.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0)

Updates `config` from 0.15.19 to 0.15.21
- [Changelog](https://github.com/rust-cli/config-rs/blob/main/CHANGELOG.md)
- [Commits](rust-cli/config-rs@v0.15.19...v0.15.21)

Updates `anyhow` from 1.0.100 to 1.0.102
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.100...1.0.102)

Updates `thiserror` from 2.0.17 to 2.0.18
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.17...2.0.18)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `which` from 8.0.0 to 8.0.2
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@8.0.0...8.0.2)

Updates `chrono` from 0.4.43 to 0.4.44
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.43...v0.4.44)

Updates `regex` from 1.12.2 to 1.12.3
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.12.2...1.12.3)

Updates `once_cell` from 1.21.3 to 1.21.4
- [Changelog](https://github.com/matklad/once_cell/blob/master/CHANGELOG.md)
- [Commits](matklad/once_cell@v1.21.3...v1.21.4)

Updates `uuid` from 1.19.0 to 1.22.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.19.0...v1.22.0)

Updates `futures` from 0.3.31 to 0.3.32
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.31...0.3.32)

Updates `cxx` from 1.0.192 to 1.0.194
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.192...1.0.194)

Updates `candle-core` from 0.9.1 to 0.9.2
- [Changelog](https://github.com/huggingface/candle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/huggingface/candle/commits)

Updates `candle-transformers` from 0.9.1 to 0.9.2
- [Changelog](https://github.com/huggingface/candle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/huggingface/candle/commits)

Updates `assert_cmd` from 2.1.2 to 2.2.0
- [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_cmd@v2.1.2...v2.2.0)

Updates `tempfile` from 3.24.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.24.0...v3.27.0)

Updates `serial_test` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/palfrey/serial_test/releases)
- [Commits](palfrey/serial_test@v3.3.1...v3.4.0)

Updates `proptest` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.9.0...v1.10.0)

Updates `env_logger` from 0.11.8 to 0.11.9
- [Release notes](https://github.com/rust-cli/env_logger/releases)
- [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md)
- [Commits](rust-cli/env_logger@v0.11.8...v0.11.9)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.60
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: clap_complete
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-patch
- dependency-name: tokio
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-patch
- dependency-name: config
  dependency-version: 0.15.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: anyhow
  dependency-version: 1.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: thiserror
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: which
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: chrono
  dependency-version: 0.4.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: regex
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: once_cell
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: uuid
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-patch
- dependency-name: futures
  dependency-version: 0.3.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: cxx
  dependency-version: 1.0.194
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: candle-core
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: candle-transformers
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: assert_cmd
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-patch
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-patch
- dependency-name: serial_test
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-patch
- dependency-name: proptest
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-patch
- dependency-name: env_logger
  dependency-version: 0.11.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Dependency updates rust Rust source code changes labels Mar 16, 2026
@dependabot dependabot bot requested a review from wildcard as a code owner March 16, 2026 04:21
@dependabot dependabot bot added rust Rust source code changes dependencies Dependency updates labels Mar 16, 2026
@vercel
Copy link

vercel bot commented Mar 16, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
caro-docs Ready Ready Preview, Comment Mar 16, 2026 4:22am
caro-foss-website Error Error Mar 16, 2026 4:22am
caro-slides Ready Ready Preview, Comment Mar 16, 2026 4:22am
caro-storybook Ready Ready Preview, Comment Mar 16, 2026 4:22am
cmdai Error Error Mar 16, 2026 4:22am
cmdai-saas Ready Ready Preview, Comment Mar 16, 2026 4:22am

Request Review

@github-actions github-actions bot added module:cli size/XS Extra small PR (< 10 lines) and removed rust Rust source code changes labels Mar 16, 2026
@github-actions
Copy link
Contributor

Dependency Review

The following issues were found:

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
  • ⚠️ 1 packages with OpenSSF Scorecard issues.

View full job summary

Copy link

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 2 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="Cargo.toml">

<violation number="1" location="Cargo.toml:37">
P1: `clap_complete` 4.6 raises MSRV to Rust 1.85, which breaks this crate's declared `rust-version = "1.83"`. Either keep the 4.5 line here or bump the package MSRV in the same PR.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

# Core CLI and async runtime
clap = { version = "4.5", features = ["derive", "env", "color"] }
clap_complete = "4.5"
clap_complete = "4.6"
Copy link

@cubic-dev-ai cubic-dev-ai bot Mar 16, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1: clap_complete 4.6 raises MSRV to Rust 1.85, which breaks this crate's declared rust-version = "1.83". Either keep the 4.5 line here or bump the package MSRV in the same PR.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At Cargo.toml, line 37:

<comment>`clap_complete` 4.6 raises MSRV to Rust 1.85, which breaks this crate's declared `rust-version = "1.83"`. Either keep the 4.5 line here or bump the package MSRV in the same PR.</comment>

<file context>
@@ -34,7 +34,7 @@ path = "src/bin/generate-schema.rs"
 # Core CLI and async runtime
 clap = { version = "4.5", features = ["derive", "env", "color"] }
-clap_complete = "4.5"
+clap_complete = "4.6"
 tokio = { version = "1", features = ["rt-multi-thread", "macros", "time", "sync", "fs"] }
 
</file context>
Suggested change
clap_complete = "4.6"
clap_complete = "4.5"
Fix with Cubic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates module:cli size/XS Extra small PR (< 10 lines)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants