Skip to content

chore(deps): bump the rust-dependencies group across 1 directory with 10 updates - #687

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/cargo/rust-dependencies-119577dbdf
Open

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/cargo/rust-dependencies-119577dbdf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 10 updates in the / directory:

Package From To
crossbeam-channel 0.5.15 0.5.17
clap 3.0.0-beta.1 4.5.60
serde_yaml 0.8.26 0.9.34+deprecated
console 0.15.8 0.15.11
ctrlc 3.4.4 3.5.2
toml 0.5.11 1.1.4+spec-1.1.0
async-trait 0.1.88 0.1.92
rand 0.7.3 0.9.5
thiserror 1.0.63 2.0.19
parking_lot 0.11.2 0.12.3

Updates crossbeam-channel from 0.5.15 to 0.5.17

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.17

  • Fix UB in bounded channel when SelectedOperation is leaked. (#1295)
  • Fix behavior inconsistency on already received case in at(). (#1296)
  • Handle overflow in bounded channel initialization. (#1301)
  • Use 64-bit index on 32-bit platforms if 64-bit atomic is available. (#1321)
  • Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)

crossbeam-channel 0.5.16

  • Improve support for rust-analyzer auto-completion of code inside select!/select_biased! macro. (#1240)
  • Make never const. (#1250)
Commits
  • 2920c98 Prepare for the next release
  • 808b75a ci: Update codegen job
  • 46774e0 channel: Document that send_timeout sends an available message even if the ti...
  • 89a3fe4 epoch: Make Shared::null const
  • 383d74a Use *::MAX associated constants
  • a30b825 channel,deque,queue: Use AtomicU64/u64 in head/tail index if available
  • a0e4d29 Replace iterative capacity growth with next_power_of_two (#1216)
  • 94f74d2 Recognize x86_64-unknown-linux-gnutsan in build script
  • 30e5963 epoch: Add missing fence emulation for tsan
  • 708a6bd Handle overflow in bounded channel/queue initialization (#1301)
  • Additional commits viewable in compare view

Updates clap from 3.0.0-beta.1 to 4.5.60

Release notes

Sourced from clap's releases.

v4.5.60

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

v4.5.59

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

v4.5.58

[4.5.58] - 2026-02-11

v4.5.57

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

v4.5.56

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

v4.5.55

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

v4.5.54

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help

v4.5.53

[4.5.53] - 2025-11-19

Features

... (truncated)

Changelog

Sourced from clap's changelog.

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

[4.5.58] - 2026-02-11

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup

... (truncated)

Commits
  • 33d24d8 chore: Release
  • 9332409 docs: Update changelog
  • b7adce5 Merge pull request #6166 from fabalchemy/fix-dynamic-powershell-completion
  • 009bba4 fix(clap_complete): Improve powershell registration
  • d89d57d chore: Release
  • f18b67e docs: Update changelog
  • 9d218eb Merge pull request #6165 from epage/shirt
  • 126440c fix(help): Correctly calculate padding for short-only args
  • 9e3c05e test(help): Show panic with short, valueless arg
  • c9898d0 test(help): Verify short with value
  • Additional commits viewable in compare view

Updates serde_yaml from 0.8.26 to 0.9.34+deprecated

Release notes

Sourced from serde_yaml's releases.

0.9.34

As of this release, I am not planning to publish further versions of serde_yaml as none of my projects have been using YAML for a long time, so I have archived the GitHub repo and marked the crate deprecated in the version number. An official replacement isn't designated for those who still need to work with YAML, but https://crates.io/search?q=yaml&sort=relevance and https://crates.io/keywords/yaml has a number of reasonable-looking options available.

0.9.33

0.9.32

  • Fix unused_imports warnings when compiled by rustc 1.78

0.9.31

  • Add swap_remove and shift_remove methods on Mapping (#408)

0.9.30

  • Update proc-macro2 to fix caching issue when using a rustc-wrapper such as sccache

0.9.29

  • Turn on deny(unsafe_op_in_unsafe_fn) lint

0.9.28

  • Update unsafe-libyaml dependency to pull in unaligned write fix

0.9.27

  • Always serialize serde_yaml::Number containing NaN as a positive NaN (#394)

0.9.26

  • Guarantee that .nan is deserialized as a positive NaN (#392, #393)

0.9.25

  • Serialize using quoted style around scalar that has digits with leading zero (#347)

0.9.24

  • Implement FromStr for serde_yaml::Number (#381)

0.9.23

  • Documentation improvements

0.9.22

  • Update indexmap dependency to version 2

0.9.21

  • Make Tag::new panic if given empty string, since YAML has no syntax for an empty tag

0.9.20

  • Allow an empty YAML document to deserialize to None or Value::Null, in addition to the previously supported empty vector, empty map, and struct with no required fields

0.9.19

  • Fix message duplication between serde_yaml::Error's Display and source() (#359, #360)

0.9.18

  • Add support for emitting Unicode characters over codepoint U+FFFF (#356)

... (truncated)

Commits
  • 2009506 Release 0.9.34
  • 3ba8462 Add unmaintained note
  • 77236b0 Ignore dead code lint in tests
  • f4c9ed9 Release 0.9.33
  • b4edaee Pull in yaml_parser_fetch_more_tokens fix from libyaml
  • 8a5542c Resolve non_local_definitions warning in test
  • ea57d8c Release 0.9.32
  • a52b7ac Resolve prelude redundant import warnings
  • 9e0b8d3 Replace curly quotes with ascii straight quotes
  • 2a77483 Release 0.9.31
  • Additional commits viewable in compare view

Updates console from 0.15.8 to 0.15.11

Release notes

Sourced from console's releases.

0.15.11

What's Changed

0.15.10

What's Changed

0.15.9

What's Changed

Changelog

Sourced from console's changelog.

Changelog

Newer changelog entries can be found on GitHub.

Commits
  • c7002e3 Refer to GitHub Releases
  • 73033ec Bump version to 0.15.11
  • 4fa21ad Simplify windows read_single_key()
  • 456eb78 Remove unused cruft
  • 8623cd6 Simplify ConsoleModeGuard::set()
  • ca2e0f8 Use match for creation of new console mode
  • 2f7184f Add docstring for Windows set_console_mode()
  • 3c7ba95 Explicitly handle CtrlC on Windows (#235)
  • de16ee6 Run clippy on all major platforms
  • cb6126e Extend application of clippy
  • Additional commits viewable in compare view

Updates ctrlc from 3.4.4 to 3.5.2

Release notes

Sourced from ctrlc's releases.

3.5.1

What's Changed

Full Changelog: Detegr/rust-ctrlc@3.5.0...3.5.1

3.5.0

What's Changed

Apparently we broke compatibility with RedoxOS as well.

New Contributors

Full Changelog: Detegr/rust-ctrlc@3.4.7...3.5.0

3.4.7

What's Changed

New Contributors

Full Changelog: Detegr/rust-ctrlc@3.4.6...3.4.7

3.4.6

What's Changed

New Contributors

Full Changelog: Detegr/rust-ctrlc@3.4.5...3.4.6

Commits

Updates toml from 0.5.11 to 1.1.4+spec-1.1.0

Commits
  • beee9fe chore: Release
  • 16e2ac1 docs: Update changelog
  • 89f5541 fix(toml): preserve datetimes when deserializing Value (#1194)
  • 534039c fix(serde): Deserialize Value datetimes into typed targets
  • 6e45cef test(serde): Reproduce Value datetime deserialization error
  • 4ec099f chore: Release
  • 5a47a51 docs: Update changelog
  • da0911f perf(parser): Reduce over allocation by better tokens/byte ratio (#1193)
  • 26eb157 perf(parser): Reduce over allocation by better tokens/byte ratio
  • ca4c7bf chore(deps): Update Prek to v0.4.11 (#1191)
  • Additional commits viewable in compare view

Updates async-trait from 0.1.88 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

  • Resolve double_must_use clippy lint in generated code (#303)

0.1.91

  • Update to syn 3 (#299)
  • Fix mutability for by-reference receivers (#301)

0.1.90

(yanked)

0.1.89

Commits
  • 82e7e9e Release 0.1.92
  • 9a35cb8 Merge pull request #303 from dtolnay/mustuse
  • 875ceec Resolve double_must_use clippy lint
  • 62993a5 Raise minimum tested compiler to rust 1.88
  • d049ee0 Release 0.1.91
  • 7a0961f Merge pull request #301 from dtolnay/mutability
  • 740f86f Ignore mut_mut pedantic clippy lint in test
  • 4699cd3 Fix mutability for by-reference receivers
  • 6dd3573 Add regression test for issue 300
  • 2371797 Release 0.1.90
  • Additional commits viewable in compare view

Updates rand from 0.7.3 to 0.9.5

Changelog

Sourced from rand's changelog.

[0.9.5] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1803)

#1803: rust-random/rand#1803

[0.9.4] — 2026-04-13

Fixes

#1766: rust-random/rand#1766

[0.9.3] — 2026-04-11

This release back-ports a fix from v0.10. See also #1763.

Changes

  • Deprecate feature log (#1764)
  • Replace usages of doc_auto_cfg (#1764)

#1763: rust-random/rand#1763

[0.9.2] — 2025-07-20

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

  • Revise "not a crypto library" policy again (#1565)
  • Remove zerocopy dependency from rand (#1579)

Fixes

  • Fix feature simd_support for recent nightly rust (#1586)

Changes

  • Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

  • Add rand::distr::Alphabetic distribution. (#1587)
  • Re-export rand_core (#1604)

[0.9.0] - 2025-01-27

Security and unsafe

  • Policy: "rand is not a crypto library" (#1514)
  • Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
  • Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

... (truncated)

Commits

Updates thiserror from 1.0.63 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

  • Update to syn 3

2.0.18

2.0.17

  • Use differently named __private module per patch release (#434)

2.0.16

  • Add to "no-std" crates.io category (#429)

2.0.15

  • Prevent Error::provide API becoming unavailable from a future new compiler lint (#427)

2.0.14

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#426)

2.0.13

  • Documentation improvements

2.0.12

  • Prevent elidable_lifetime_names pedantic clippy lint in generated impl (#413)

2.0.11

2.0.10

  • Support errors containing a generic type parameter's associated type in a field (#408)

2.0.9

  • Work around missing_inline_in_public_items clippy restriction being triggered in macro-generated code (#404)

2.0.8

  • Improve support for macro-generated derive(Error) call sites (#399)

2.0.7

  • Work around conflict with #[deny(clippy::allow_attributes)] (#397, thanks @​zertosh)

2.0.6

  • Suppress deprecation warning on generated From impls (#396)

2.0.5

  • Prevent deprecation warning on generated impl for deprecated type (#394)

2.0.4

  • Eliminate needless_lifetimes clippy lint in generated From impls (#391, thanks @​matt-phylum)

2.0.3

  • Support the same Path field being repeated in both Debug and Display representation in error message (#383)

... (truncated)

Commits
  • e13a785 Release 2.0.19
  • 0a0e76c Update to syn 3
  • ec42ea7 Update actions/upload-artifact@v6 -> v7
  • 4178c4a Update actions/checkout@v6 -> v7
  • 7214e0e Ignore items_after_statements pedantic clippy lint in test
  • febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
  • c50e387 chore: improve thiserror maintenance path
  • d4a2507 Raise minimum tested compiler to rust 1.85
  • 99e8a6c Unpin CI miri toolchain
  • 9ac165c Pin CI miri to nightly-2026-02-11
  • Additional commits viewable in compare view

Updates parking_lot from 0.11.2 to 0.12.3

Changelog

Sourced from parking_lot's changelog.

parking_lot 0.12.3 (2024-05-24)

  • Export types provided by arc_lock feature (#442)

parking_lot 0.12.2, parking_lot_core 0.9.10, lock_api 0.4.12 (2024-04-15)

  • Fixed panic when calling with_upgraded twice on a ArcRwLockUpgradableReadGuard (#431)
  • Fixed RwLockUpgradeableReadGuard::with_upgraded
  • Added lock_api::{Mutex, ReentrantMutex, RwLock}::from_raw methods (#429)
  • Added Apple visionOS support (#433)

parking_lot_core 0.9.9, lock_api 0.4.11 (2023-10-18)

  • Fixed RwLockUpgradeableReadGuard::with_upgraded. (#393)
  • Fixed ReentrantMutex::bump lock count. (#390)
  • Added methods to unsafely create a lock guard out of thin air. (#403)
  • Added support for Apple tvOS. (#405)

parking_lot_core 0.9.8, lock_api 0.4.10 (2023-06-05)

  • Mark guards with #[clippy::has_significant_drop] (#369, #371)
  • Removed windows-sys dependency (#374, #378)
  • Add atomic_usize default feature to support platforms without atomics. (#380)
  • Add with_upgraded API to upgradable read locks (#386)
  • Make RwLock guards Sync again (#370)

parking_lot_core 0.9.7 (2023-02-01)

  • Update windows-sys dependency to 0.45. (#368)

parking_lot_core 0.9.6 (2023-01-11)

  • Add support for watchOS. (#367)

parking_lot_core 0.9.5 (2022-11-29)

  • Update use of libc::timespec to prepare for future libc version (#363)

parking_lot_core 0.9.4 (2022-10-18)

  • Bump windows-sys dependency to 0.42. (#356)

lock_api 0.4.9 (2022-09-20)

  • Fixed ReentrantMutexGuard::try_map signature (#355)

lock_api 0.4.8 (2022-08-28)

  • Fixed unsound Sync/Send impls for ArcMutexGuard. (#349)
  • Added ArcMutexGuard::into_arc. (#350)

... (truncated)

Commits
  • a29dd3d Release parking_lot 0.12.3
  • f7efcae Merge pull request #442 from iwanders/add-arc_lock-feature-top-level-exports
  • c357017 Export types provided by arc_lock feature.
  • 9dace42 Release parking_lot 0.12.2, parking_lot_core 0.9.10, lock_api 0.4.12
  • 4f898be Merge pull request #435 from sorcio/wasm-atomics-feature
  • 9ee3a54 stdarch_wasm_atomic_wait instead of stdsimd
  • 7aeb2f1 Merge pull request #433 from QuentinPerez/master
  • c0a9077 Add Apple visionOS support
  • 7ab94b6 Merge pull request #432 from alex/patch-1
  • 75a97b2 Update redox_syscall dependency version
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 10 updates

Bumps the rust-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [crossbeam-channel](https://github.com/crossbeam-rs/crossbeam) | `0.5.15` | `0.5.17` |
| [clap](https://github.com/clap-rs/clap) | `3.0.0-beta.1` | `4.5.60` |
| [serde_yaml](https://github.com/dtolnay/serde-yaml) | `0.8.26` | `0.9.34+deprecated` |
| [console](https://github.com/console-rs/console) | `0.15.8` | `0.15.11` |
| [ctrlc](https://github.com/Detegr/rust-ctrlc) | `3.4.4` | `3.5.2` |
| [toml](https://github.com/toml-rs/toml) | `0.5.11` | `1.1.4+spec-1.1.0` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.88` | `0.1.92` |
| [rand](https://github.com/rust-random/rand) | `0.7.3` | `0.9.5` |
| [thiserror](https://github.com/dtolnay/thiserror) | `1.0.63` | `2.0.19` |
| [parking_lot](https://github.com/Amanieu/parking_lot) | `0.11.2` | `0.12.3` |



Updates `crossbeam-channel` from 0.5.15 to 0.5.17
- [Release notes](https://github.com/crossbeam-rs/crossbeam/releases)
- [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md)
- [Commits](crossbeam-rs/crossbeam@crossbeam-channel-0.5.15...crossbeam-channel-0.5.17)

Updates `clap` from 3.0.0-beta.1 to 4.5.60
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@v3.0.0-beta.1...clap_complete-v4.5.60)

Updates `serde_yaml` from 0.8.26 to 0.9.34+deprecated
- [Release notes](https://github.com/dtolnay/serde-yaml/releases)
- [Commits](dtolnay/serde-yaml@0.8.26...0.9.34)

Updates `console` from 0.15.8 to 0.15.11
- [Release notes](https://github.com/console-rs/console/releases)
- [Changelog](https://github.com/console-rs/console/blob/main/CHANGELOG.md)
- [Commits](console-rs/console@0.15.8...0.15.11)

Updates `ctrlc` from 3.4.4 to 3.5.2
- [Release notes](https://github.com/Detegr/rust-ctrlc/releases)
- [Commits](Detegr/rust-ctrlc@3.4.4...3.5.2)

Updates `toml` from 0.5.11 to 1.1.4+spec-1.1.0
- [Commits](toml-rs/toml@toml-v0.5.11...toml-v1.1.4)

Updates `async-trait` from 0.1.88 to 0.1.92
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.88...0.1.92)

Updates `rand` from 0.7.3 to 0.9.5
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.9.5/CHANGELOG.md)
- [Commits](rust-random/rand@0.7.3...0.9.5)

Updates `thiserror` from 1.0.63 to 2.0.19
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.63...2.0.19)

Updates `parking_lot` from 0.11.2 to 0.12.3
- [Release notes](https://github.com/Amanieu/parking_lot/releases)
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](Amanieu/parking_lot@0.11.2...0.12.3)

---
updated-dependencies:
- dependency-name: crossbeam-channel
  dependency-version: 0.5.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap
  dependency-version: 4.5.60
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: serde_yaml
  dependency-version: 0.9.34+deprecated
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: console
  dependency-version: 0.15.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: ctrlc
  dependency-version: 3.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: toml
  dependency-version: 1.1.4+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: async-trait
  dependency-version: 0.1.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: rand
  dependency-version: 0.9.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: parking_lot
  dependency-version: 0.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants