Skip to content

Bump the rust group across 1 directory with 22 updates - #1357

Merged
AlexWaygood merged 2 commits into
mainfrom
dependabot/cargo/rust-0546a23180
Oct 21, 2026
Merged

Bump the rust group across 1 directory with 22 updates#1357
AlexWaygood merged 2 commits into
mainfrom
dependabot/cargo/rust-0546a23180

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •
edited by AlexWaygood
Loading

Copy link
Copy Markdown
Contributor

object and sha2 require code changes to compile after upgrading, so they are being updated separately in #1381 and #1382, respectively.

Bumps the rust group with 22 updates in the / directory:

Package From To
anyhow 1.0.100 1.0.104
bytes 1.11.0 1.12.1
clap 4.5.52 4.6.7
flate2 1.1.5 1.1.10
futures 0.3.31 0.3.34
goblin 0.10.3 0.10.7
normalize-path 0.2.1 0.2.2
octocrab 0.49.6 0.54.2
once_cell 1.21.3 1.21.4
rayon 1.11.0 1.12.0
reqwest 0.13.2 0.13.5
reqwest-middleware 0.5.1 0.5.2
semver 1.0.27 1.0.28
serde 1.0.228 1.0.229
serde_json 1.0.145 1.0.151
tar 0.4.45 0.4.46
tempfile 3.23.0 3.27.0
tokio 1.48.0 1.50.0
tokio-util 0.7.17 0.7.19
url 2.5.7 2.5.8
zip 8.4.0 8.6.0
zstd 0.13.3 0.14.0

Updates anyhow from 1.0.100 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

1.0.102

1.0.101

Commits
  • 1dbe186 Release 1.0.104
  • f6479f8 Update to syn 3
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • 5c657b3 Release 1.0.102
  • Additional commits viewable in compare view

Updates bytes from 1.11.0 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Bytes v1.11.1

1.11.1 (February 3rd, 2026)

  • Fix integer overflow in BytesMut::reserve
Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

1.11.1 (February 3rd, 2026)

  • Fix integer overflow in BytesMut::reserve
Commits

Updates clap from 4.5.52 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one

v4.6.1

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed

v4.5.60

... (truncated)

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

... (truncated)

Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates flate2 from 1.1.5 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

1.1.9 - upgrade zlib-rs to version 0.6.0

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.8...1.1.9

1.1.8

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.7...1.1.8

1.1.7 - depend on zlib-rs directly and remove libz-rs-sys

... (truncated)

Commits
  • ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
  • fb5228d Merge pull request #559 from bushrat011899/no_std
  • 6ed3ba3 Add executable no_std example
  • faed8a0 Expand CI to test no_std compatibility and correctness
  • 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
  • 3fe1126 Centralize usage of std for error and io
  • 98e313a Add GzHeader::mtime_as_duration
  • 0642965 Switch to core implicit prelude and only use std where required
  • 454a63c Remove left-over dbg! statement
  • 2a490b7 Add runtime_detection feature
  • Additional commits viewable in compare view

Updates futures from 0.3.31 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)

0.3.32

  • Bump MSRV of utility crates to 1.71. (#2989)
  • Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#2925)
  • Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#2929)
  • Add FuturesOrdered::clear (#2927)
  • Add mpsc::*Receiver::recv (#2947)
  • Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#2944)
  • Implement FusedStream for sink::With (#2948)
  • Add no_std support for shared (#2868)
  • Make Mutex::new() const (#2956)
  • Add #[clippy::has_significant_drop] to guards (#2967)
  • Remove dependency to pin-utils (#2929)
  • Remove dependency on num_cpus (#2946)
  • Performance improvements (#2983)
  • Documentation improvements (#2925, #2926, #2940, #2971)
Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)

0.3.32 - 2026-02-15

  • Bump MSRV of utility crates to 1.71. (#2989)
  • Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#2925)
  • Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#2929)
  • Add FuturesOrdered::clear (#2927)
  • Add mpsc::*Receiver::recv (#2947)
  • Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#2944)
  • Implement FusedStream for sink::With (#2948)
  • Add no_std support for shared (#2868)
  • Make Mutex::new() const (#2956)
  • Add #[clippy::has_significant_drop] to guards (#2967)
  • Remove dependency to pin-utils (#2929)
  • Remove dependency on num_cpus (#2946)
  • Performance improvements (#2983)
  • Documentation improvements (#2925, #2926, #2940, #2971)
Commits

Updates goblin from 0.10.3 to 0.10.7

Changelog

Sourced from goblin's changelog.

Changelog

All notable changes to this project will be documented in this file.

Before 1.0, this project does not adhere to Semantic Versioning.

Goblin is now 0.10, which means we will try our best to ease breaking changes. Tracking issue is here: m4b/goblin#97

[0.10.6] - 2026-5-25

Added

pe: wrap ResourceData parse in or_permissive_and_default (follow-up to #508), thanks @​CalebFenton: m4b/goblin#526 pe: Add support for ARM64 unwind info (#517), thanks @​kkent030315: m4b/goblin#517 pe.options: added parse_resources option (#521), thanks @​prettyroseslover: m4b/goblin#521 pe.options: add parse_imports option to ParseOptions, thanks @​supervacuus: m4b/goblin#522

Fixed

elf: fix MIPS64 little-endian relocation parsing, thanks @​messense: m4b/goblin#519 elf: fix inconsistent naming conventions, thanks @​crzysdrs: m4b/goblin#520 elf: terminate NoteDataIterator after parse error to prevent infinite loop, thanks @​SAY-5: m4b/goblin#529 pe: fix arm64 packed pdata field bit shifts (#528), thanks @​kkent030315: m4b/goblin#528 pe: only map file-backed sections to offsets, thanks @​supervacuus: m4b/goblin#527

[0.10.5] - 2026-2-11

Added

elf.reloc: Add even more missing powerpc relocations, thanks @​ivlzme: m4b/goblin#505 elf.reloc: Add more RISCV relocs, thanks @​Jvlegod: m4b/goblin#507 pe: Add support for permissive parsing in resource parser, thanks @​kkent030315: m4b/goblin#508 macho: Add MH_GPU filetype, thanks @​ReturnRei: m4b/goblin#513 elf: Add elf constants for zstandard compression, thanks @​koutheir: m4b/goblin#516

Fixed

strtab: Fix regression parsing empty strtabs, thanks @​glslang: m4b/goblin#503

[0.10.4] - 2025-11-30

Added

elf.reloc: add some missing PowerPC 32-bit relocation type constants, thanks @​ivlzme: m4b/goblin#495

Fixed

pe: Fix potential out-of-bounds read in unwind/POGO info parser, thanks @​kkent030315: m4b/goblin#498 pe: Reject cyclic resource trees, thanks @​Mrmaxmeier: m4b/goblin#499 pe: Handle unpadded resource values in .NET assemblies compiled with Mono, thanks @​BinFlip: m4b/goblin#501

Commits

Updates normalize-path from 0.2.1 to 0.2.2

Release notes

Sourced from normalize-path's releases.

normalize-path-v0.2.2

Other

  • Fix zip extraction to prevent absolute path (#2685)
Commits
  • d17d20f chore: release (#2684)
  • 391d1b8 build(deps): bump minisign-verify from 0.2.5 to 0.3.0 in the deps group (#2690)
  • 218b600 dep: Upgrade transitive dependencies (#2689)
  • d5ebb4e Fix zip extraction to prevent absolute path (#2685)
  • f8162f4 feat(cli): add --list and --prune to inspect and reconcile manifests (#2677)
  • 2e63c34 fix: 📌 vergen dep requires MSRV 1.96.0 (#2683)
  • ad9eafc docs: add crate author guide for supporting binstall (#2682)
  • 1b4ce02 build(deps): bump mathieudutour/github-tag-action from 6.2 to 7 (#2678)
  • 6e2f8ea build(deps): bump taiki-e/install-action from 2.85.3 to 2.87.20 (#2679)
  • 422f309 release: cargo-binstall v1.24.0 (#2676)
  • Additional commits viewable in compare view

Updates octocrab from 0.49.6 to 0.54.2

Release notes

Sourced from octocrab's releases.

v0.54.2

Added

  • added missing repos functionality #542 (#950)
  • added reqwest feature to use reqwest client

Changed

  • changed doctests to not create default octocrab instance (#962)

Other

  • added updating gist with multiple files at once #692 (#970)
  • added migrations tag handlers #540 (#969)
  • Added git db api tag handlers #536 (#968)
  • added apps tag handlers #533 (#967)
  • added billing tag handlers #530 (#966)
  • added copilot tag handlers #525 (#965)
  • added dependabot tag handlers #523 (#964)
  • added dependency graph tag handlers #522 (#963)
  • added 'codespaces' tag handlers #528 (#961)
  • added 'actions' tag handlers #531 (#960)
  • added packages tag functionality #544 (#959)
  • added search tag functionality #548 (#958)
  • activity tag handler #532 (#957)
  • issues tag handler for #538 (#956)
  • added reactions tag handlers #547 (#955)
  • added and reorganized 'orgs' handlers for #539 (#954)
  • Bugfix/release plz (#953)
  • Disabled semver_check because cargo-semver-checks enables all features (#952)
  • 'repos' functionality for #542 (#951)
  • added missing code-scanning functionality #526 (#949)
  • added missing and fixed existing secret-scanning functions #549 (#948)
  • added secutiry advisories for #550 (#947)
  • added missing [users] tag functions (#946)
  • list any user gpg keys #552 (#945)
  • added meta info #543 (#943)
  • Feature/org teams #551 (#942)
  • /user/teams for #551 (#941)
  • solves #535 (gist comments) (#940)

v0.54.1

Added

  • Add override of default crypto provider (#931)

v0.54.0

Fixed

  • [breaking] make mandatory PR fields mandatory (#924)

... (truncated)

Changelog

Sourced from octocrab's changelog.

0.54.2 - 2026-09-14

Added

  • added missing repos functionality #542 (#950)
  • added reqwest feature to use reqwest client

Changed

  • changed doctests to not create default octocrab instance (#962)

Other

  • added updating gist with multiple files at once #692 (#970)
  • added migrations tag handlers #540 (#969)
  • Added git db api tag handlers #536 (#968)
  • added apps tag handlers #533 (#967)
  • added billing tag handlers #530 (#966)
  • added copilot tag handlers #525 (#965)
  • added dependabot tag handlers #523 (#964)
  • added dependency graph tag handlers #522 (#963)
  • added 'codespaces' tag handlers #528 (#961)
  • added 'actions' tag handlers #531 (#960)
  • added packages tag functionality #544 (#959)
  • added search tag functionality #548 (#958)
  • activity tag handler #532 (#957)
  • issues tag handler for #538 (#956)
  • added reactions tag handlers #547 (#955)
  • added and reorganized 'orgs' handlers for #539 (#954)
  • Bugfix/release plz (#953)
  • Disabled semver_check because cargo-semver-checks enables all features (#952)
  • 'repos' functionality for #542 (#951)
  • added missing code-scanning functionality #526 (#949)
  • added missing and fixed existing secret-scanning functions #549 (#948)
  • added secutiry advisories for #550 (#947)
  • added missing [users] tag functions (#946)
  • list any user gpg keys #552 (#945)
  • added meta info #543 (#943)
  • Feature/org teams #551 (#942)
  • /user/teams for #551 (#941)
  • solves #535 (gist comments) (#940)

0.54.1 - 2026-07-20

Added

  • Add override of default crypto provider (#931)

0.54.0 - 2026-06-22

... (truncated)

Commits

Updates once_cell from 1.21.3 to 1.21.4

Changelog

Sourced from once_cell's changelog.

1.21.4

  • Fix unsoundness in OnceCell::wait under --features=parking_lot, #295.

    If thread A ca...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 21, 2026
@dependabot
Bump the rust group across 1 directory with 24 updates
5d8d650 
Bumps the rust group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.104` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.11.0` | `1.12.1` |
| [clap](https://github.com/clap-rs/clap) | `4.5.52` | `4.6.7` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.5` | `1.1.10` |
| [futures](https://github.com/rust-lang/futures-rs) | `0.3.31` | `0.3.34` |
| [goblin](https://github.com/m4b/goblin) | `0.10.3` | `0.10.7` |
| [normalize-path](https://github.com/cargo-bins/cargo-binstall) | `0.2.1` | `0.2.2` |
| [object](https://github.com/gimli-rs/object) | `0.38.1` | `0.40.0` |
| [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.49.6` | `0.54.2` |
| [once_cell](https://github.com/matklad/once_cell) | `1.21.3` | `1.21.4` |
| [rayon](https://github.com/rayon-rs/rayon) | `1.11.0` | `1.12.0` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.2` | `0.13.5` |
| [reqwest-middleware](https://github.com/TrueLayer/reqwest-middleware) | `0.5.1` | `0.5.2` |
| [semver](https://github.com/dtolnay/semver) | `1.0.27` | `1.0.28` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.151` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [tar](https://github.com/composefs/tar-rs) | `0.4.45` | `0.4.46` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.23.0` | `3.27.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.50.0` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.17` | `0.7.19` |
| [url](https://github.com/servo/rust-url) | `2.5.7` | `2.5.8` |
| [zip](https://github.com/zip-rs/zip2) | `8.4.0` | `8.6.0` |
| [zstd](https://github.com/gyscos/zstd-rs) | `0.13.3` | `0.14.0` |



Updates `anyhow` from 1.0.100 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.100...1.0.104)

Updates `bytes` from 1.11.0 to 1.12.1
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.11.0...v1.12.1)

Updates `clap` from 4.5.52 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.52...clap_complete-v4.6.7)

Updates `flate2` from 1.1.5 to 1.1.10
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.5...1.1.10)

Updates `futures` from 0.3.31 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.31...0.3.34)

Updates `goblin` from 0.10.3 to 0.10.7
- [Changelog](https://github.com/m4b/goblin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/m4b/goblin/commits)

Updates `normalize-path` from 0.2.1 to 0.2.2
- [Release notes](https://github.com/cargo-bins/cargo-binstall/releases)
- [Changelog](https://github.com/cargo-bins/cargo-binstall/blob/main/release-plz.toml)
- [Commits](cargo-bins/cargo-binstall@normalize-path-v0.2.1...normalize-path-v0.2.2)

Updates `object` from 0.38.1 to 0.40.0
- [Changelog](https://github.com/gimli-rs/object/blob/main/CHANGELOG.md)
- [Commits](gimli-rs/object@0.38.1...v0.40.0)

Updates `octocrab` from 0.49.6 to 0.54.2
- [Release notes](https://github.com/XAMPPRocky/octocrab/releases)
- [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md)
- [Commits](XAMPPRocky/octocrab@v0.49.6...v0.54.2)

Updates `once_cell` from 1.21.3 to 1.21.4
- [Changelog](https://github.com/matklad/once_cell/blob/master/CHANGELOG.md)
- [Commits](matklad/once_cell@v1.21.3...v1.21.4)

Updates `rayon` from 1.11.0 to 1.12.0
- [Changelog](https://github.com/rayon-rs/rayon/blob/main/RELEASES.md)
- [Commits](rayon-rs/rayon@rayon-core-v1.11.0...rayon-core-v1.12.0)

Updates `reqwest` from 0.13.2 to 0.13.5
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.13.2...v0.13.5)

Updates `reqwest-middleware` from 0.5.1 to 0.5.2
- [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases)
- [Commits](TrueLayer/reqwest-middleware@reqwest-middleware-v0.5.1...reqwest-middleware-v0.5.2)

Updates `semver` from 1.0.27 to 1.0.28
- [Release notes](https://github.com/dtolnay/semver/releases)
- [Commits](dtolnay/semver@1.0.27...1.0.28)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.145 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.151)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `tar` from 0.4.45 to 0.4.46
- [Release notes](https://github.com/composefs/tar-rs/releases)
- [Commits](composefs/tar-rs@0.4.45...0.4.46)

Updates `tempfile` from 3.23.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.23.0...v3.27.0)

Updates `tokio` from 1.48.0 to 1.50.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.50.0)

Updates `tokio-util` from 0.7.17 to 0.7.19
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.17...tokio-util-0.7.19)

Updates `url` from 2.5.7 to 2.5.8
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](servo/rust-url@v2.5.7...v2.5.8)

Updates `zip` from 8.4.0 to 8.6.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v8.4.0...v8.6.0)

Updates `zstd` from 0.13.3 to 0.14.0
- [Release notes](https://github.com/gyscos/zstd-rs/releases)
- [Commits](gyscos/zstd-rs@v0.13.3...v0.14.0)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: bytes
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: flate2
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: futures
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: goblin
  dependency-version: 0.10.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: normalize-path
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: object
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: octocrab
  dependency-version: 0.54.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: once_cell
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: rayon
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: reqwest
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: reqwest-middleware
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: semver
  dependency-version: 1.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: tar
  dependency-version: 0.4.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: tokio
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: tokio-util
  dependency-version: 0.7.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: url
  dependency-version: 2.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust
- dependency-name: zip
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
- dependency-name: zstd
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rust-0546a23180 branch from 1612ea0 to 5d8d650 Compare October 21, 2026 19:24
@AlexWaygood AlexWaygood changed the title Bump the rust group across 1 directory with 24 updates Bump the rust group across 1 directory with 22 updates Oct 21, 2026
@AlexWaygood
AlexWaygood merged commit 51cf916 into main Oct 21, 2026
23 checks passed
@AlexWaygood
AlexWaygood deleted the dependabot/cargo/rust-0546a23180 branch October 21, 2026 20:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@AlexWaygood