Skip to content

build(deps): bump the cargo group across 1 directory with 10 updates#296

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/cargo-1b8abb7277
Open

build(deps): bump the cargo group across 1 directory with 10 updates#296
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/cargo-1b8abb7277

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 12, 2026

Bumps the cargo group with 9 updates in the / directory:

Package From To
clap 4.5.60 4.6.0
fast-glob 1.0.0 1.0.1
semver 1.0.27 1.0.28
tokio 1.49.0 1.51.0
which 8.0.0 8.0.2
tempfile 3.26.0 3.27.0
pyo3 0.28.2 0.28.3
napi 3.8.3 3.8.4
napi-derive 3.5.2 3.5.3

Updates clap from 4.5.60 to 4.6.0

Changelog

Sourced from clap's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits

Updates fast-glob from 1.0.0 to 1.0.1

Release notes

Sourced from fast-glob's releases.

v1.0.1

Fixed

  • treat malformed brace patterns as invalid (#100)
  • avoid panic on deep brace nesting (#99)
  • map \a escape sequence to BEL character (\x07) (#98)

Other

  • update crate docs repository link (#101)
  • keep \a escaped as literal a
  • (deps) lock file maintenance (#60)
  • (deps) lock file maintenance (#51)
Changelog

Sourced from fast-glob's changelog.

1.0.1 - 2026-03-03

Fixed

  • treat malformed brace patterns as invalid (#100)
  • avoid panic on deep brace nesting (#99)
  • map \a escape sequence to BEL character (\x07) (#98)

Other

  • update crate docs repository link (#101)
  • keep \a escaped as literal a
  • (deps) lock file maintenance (#60)
  • (deps) lock file maintenance (#51)
Commits
  • 96fc276 chore: release v1.0.1 (#52)
  • 901e474 fix: treat malformed brace patterns as invalid (#100)
  • 2df6d5e docs: update crate docs repository link (#101)
  • a1f136e fix: avoid panic on deep brace nesting (#99)
  • 87a10c5 revert: keep \a escaped as literal a
  • 622325f fix: map \a escape sequence to BEL character (\x07) (#98)
  • 7a6b559 chore(deps): update github-actions (#96)
  • 4342c72 chore(deps): update crate-ci/typos action to v1.44.0 (#95)
  • 160f733 chore(deps): update crate-ci/typos action to v1.43.5 (#94)
  • 2a8fa56 chore(deps): update codspeedhq/action action to v4.10.6 (#93)
  • Additional commits viewable in compare view

Updates semver from 1.0.27 to 1.0.28

Release notes

Sourced from semver's releases.

1.0.28

  • Documentation improvements
Commits
  • 7625c7a Release 1.0.28
  • fd404d0 Merge pull request 351 from czy-29/master
  • f75f26e The doc_auto_cfg and doc_cfg features have been merged
  • 9e2bfa2 Enable serde on docs.rs and automatically add serde flag to the docs
  • 8591f23 Unpin CI miri toolchain
  • 66bdd2c Pin CI miri to nightly-2026-02-11
  • 324ffce Switch from cargo bench to criterion
  • 34133a5 Update actions/upload-artifact@v5 -> v6
  • 7f935ff Update actions/upload-artifact@v4 -> v5
  • c07fb91 Switch from test::black_box to std::hint::black_box
  • Additional commits viewable in compare view

Updates tokio from 1.49.0 to 1.51.0

Release notes

Sourced from tokio's releases.

Tokio v1.51.0

1.51.0 (April 3rd, 2026)

Added

  • net: implement get_peer_cred on Hurd (#7989)
  • runtime: add tokio::runtime::worker_index() (#7921)
  • runtime: add runtime name (#7924)
  • runtime: stabilize LocalRuntime (#7557)
  • wasm: add wasm32-wasip2 networking support (#7933)

Changed

  • runtime: steal tasks from the LIFO slot (#7431)

Fixed

  • docs: do not show "Available on non-loom only." doc label (#7977)
  • macros: improve overall macro hygiene (#7997)
  • sync: fix notify_waiters priority in Notify (#7996)
  • sync: fix panic in Chan::recv_many when called with non-empty vector on closed channel (#7991)

#7431: tokio-rs/tokio#7431 #7557: tokio-rs/tokio#7557 #7921: tokio-rs/tokio#7921 #7924: tokio-rs/tokio#7924 #7933: tokio-rs/tokio#7933 #7977: tokio-rs/tokio#7977 #7989: tokio-rs/tokio#7989 #7991: tokio-rs/tokio#7991 #7996: tokio-rs/tokio#7996 #7997: tokio-rs/tokio#7997

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

  • net: add TcpStream::set_zero_linger (#7837)
  • rt: add is_rt_shutdown_err (#7771)

Changed

  • io: add optimizer hint that memchr returns in-bounds pointer (#7792)
  • io: implement vectored writes for write_buf (#7871)
  • runtime: panic when event_interval is set to 0 (#7838)
  • runtime: shorten default thread name to fit in Linux limit (#7880)
  • signal: remember the result of SetConsoleCtrlHandler (#7833)
  • signal: specialize windows Registry (#7885)

... (truncated)

Commits

Updates tokio-macros from 2.6.0 to 2.7.0

Commits

Updates which from 8.0.0 to 8.0.2

Release notes

Sourced from which's releases.

8.0.2

What's Changed

New Contributors

Full Changelog: harryfei/which-rs@8.0.1...8.0.2

8.0.1

What's Changed

New Contributors

Full Changelog: harryfei/which-rs@8.0.0...8.0.1

Changelog

Sourced from which's changelog.

8.0.2

  • Dependency on home_env removed, the implementation found in rust 1.85.0 for a home directory has been fixed. Thanks, [@​madsmtm],(https://github.com/madsmtm) for this contribution to which!
  • Dependency on winsafe removed, code for Windows API is now handwritten.
  • Dependency on rustix removed, we now depend on libc directly to reduce compile times.

8.0.1

Commits

Updates tempfile from 3.26.0 to 3.27.0

Changelog

Sourced from tempfile's changelog.

3.27.0

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

  1. TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
  2. The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @​meng-xu-cs for reporting this issue.

Commits
  • 5c8fa12 chore: release 3.27.0
  • e34e574 test: disable uds conflict test on redox
  • 772c795 test: add CWD guards
  • 2632fb9 fix: resolve relative paths when constructing TempPath
  • See full diff in compare view

Updates pyo3 from 0.28.2 to 0.28.3

Release notes

Sourced from pyo3's releases.

PyO3 0.28.3

This patch contains several fixes for stability of the PyO3 0.28.x series:

  • Python::attach and Python::try_attach will no longer return before the thread initializing the interpreter has finished runnning site.py when using the auto-initialize feature.
  • Fix unsoundness in PyBytesWriter::write_vectored when targeting the Python 3.15 prerelease interpreter.
  • Fix possible deadlock in .into_pyobject() implementation for C-like #[pyclass] enums.

A couple of edge cases causing compile failures were also fixed.

Thank you to the following contributors for the improvements:

@​alex @​bschoenmaeckers @​chirizxc @​davidhewitt @​Embers-of-the-Fire @​Icxolu @​maurosilber @​ngoldbaum

Changelog

Sourced from pyo3's changelog.

[0.28.3] - 2026-04-02

Fixed

  • Fix compile error with #[pyclass(get_all)] on a type named Probe. #5837
  • Fix compile error in debug builds related to _Py_NegativeRefcount with Python < 3.12. #5847
  • Fix a race condition where Python::attach or try_attach could return before site.py had finished running. #5903
  • Fix unsoundness in PyBytesWriter::write_vectored with Python 3.15 prerelease versions. #5907
  • Fix deadlock in .into_pyobject() implementation for C-like #[pyclass] enums. #5928
Commits

Updates napi from 3.8.3 to 3.8.4

Release notes

Sourced from napi's releases.

napi-v3.8.4

Fixed

  • (deps) update rust crate ctor to v0.8.0 (#3170)
  • (deps) update rust crate ctor to v0.7.0 (#3169)
  • (napi) check for null error_message in ExtendedErrorInfo::try_from (#3158)
  • (napi) skip nullish error causes when converting from Unknown (#3143)
Commits

Updates napi-derive from 3.5.2 to 3.5.3

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.5.3

Fixed

  • (deps) update rust crate ctor to v0.8.0 (#3170)
  • (deps) update rust crate ctor to v0.7.0 (#3169)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the cargo group across 1 directory with 10 updates
4ed3ad0 
Bumps the cargo group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.0` |
| [fast-glob](https://github.com/oxc-project/fast-glob) | `1.0.0` | `1.0.1` |
| [semver](https://github.com/dtolnay/semver) | `1.0.27` | `1.0.28` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.51.0` |
| [which](https://github.com/harryfei/which-rs) | `8.0.0` | `8.0.2` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.26.0` | `3.27.0` |
| [pyo3](https://github.com/pyo3/pyo3) | `0.28.2` | `0.28.3` |
| [napi](https://github.com/napi-rs/napi-rs) | `3.8.3` | `3.8.4` |
| [napi-derive](https://github.com/napi-rs/napi-rs) | `3.5.2` | `3.5.3` |



Updates `clap` from 4.5.60 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.0)

Updates `fast-glob` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/oxc-project/fast-glob/releases)
- [Changelog](https://github.com/oxc-project/fast-glob/blob/main/CHANGELOG.md)
- [Commits](oxc-project/fast-glob@v1.0.0...v1.0.1)

Updates `semver` from 1.0.27 to 1.0.28
- [Release notes](https://github.com/dtolnay/semver/releases)
- [Commits](dtolnay/semver@1.0.27...1.0.28)

Updates `tokio` from 1.49.0 to 1.51.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.51.0)

Updates `tokio-macros` from 2.6.0 to 2.7.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-macros-2.6.0...tokio-macros-2.7.0)

Updates `which` from 8.0.0 to 8.0.2
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@8.0.0...8.0.2)

Updates `tempfile` from 3.26.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.26.0...v3.27.0)

Updates `pyo3` from 0.28.2 to 0.28.3
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](PyO3/pyo3@v0.28.2...v0.28.3)

Updates `napi` from 3.8.3 to 3.8.4
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](napi-rs/napi-rs@napi-v3.8.3...napi-v3.8.4)

Updates `napi-derive` from 3.5.2 to 3.5.3
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](napi-rs/napi-rs@napi-derive-v3.5.2...napi-derive-v3.5.3)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: fast-glob
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: semver
  dependency-version: 1.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tokio-macros
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: which
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: pyo3
  dependency-version: 0.28.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: napi
  dependency-version: 3.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: napi-derive
  dependency-version: 3.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 12, 2026
@codecov
Copy link
Copy Markdown

codecov bot commented Apr 12, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.90%. Comparing base (a7f94cb) to head (4ed3ad0).
⚠️ Report is 5 commits behind head on main.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #296   +/-   ##
=======================================
  Coverage   96.90%   96.90%           
=======================================
  Files          14       14           
  Lines        3167     3167           
=======================================
  Hits         3069     3069           
  Misses         98       98

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants