Skip to content

build(deps): bump the cargo-minor group across 1 directory with 19 updates - #656

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-acf958f3a0
Open

build(deps): bump the cargo-minor group across 1 directory with 19 updates#656
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-acf958f3a0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor group with 19 updates in the / directory:

Package From To
clap 4.6.1 4.6.7
flate2 1.1.9 1.1.10
tar 0.4.45 0.4.46
async-trait 0.1.89 0.1.92
serde 1.0.228 1.0.229
serde_json 1.0.150 1.0.154
tokio 1.52.3 1.54.1
tokio-stream 0.1.18 0.1.19
ignore 0.4.32 0.4.34
notify 8.2.0 8.2.1
regex 1.12.3 1.13.1
indexmap 2.14.0 2.14.2
webbrowser 1.2.1 1.2.5
assert_cmd 2.2.1 2.2.2
assert_fs 1.1.3 1.1.4
uuid 1.23.1 1.29.0
proc-macro2 1.0.106 1.0.107
quote 1.0.45 1.0.47
reflink-copy 0.1.29 0.1.30

Updates clap from 4.6.1 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits
  • ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
  • fb5228d Merge pull request #559 from bushrat011899/no_std
  • 6ed3ba3 Add executable no_std example
  • faed8a0 Expand CI to test no_std compatibility and correctness
  • 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
  • 3fe1126 Centralize usage of std for error and io
  • 98e313a Add GzHeader::mtime_as_duration
  • 0642965 Switch to core implicit prelude and only use std where required
  • 454a63c Remove left-over dbg! statement
  • 2a490b7 Add runtime_detection feature
  • Additional commits viewable in compare view

Updates tar from 0.4.45 to 0.4.46

Release notes

Sourced from tar's releases.

0.4.46

Security

See also GHSA-3cv2-h65g-fgmm

Other changes

New Contributors

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

Commits

Updates async-trait from 0.1.89 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

  • Resolve double_must_use clippy lint in generated code (#303)

0.1.91

  • Update to syn 3 (#299)
  • Fix mutability for by-reference receivers (#301)

0.1.90

(yanked)

Commits
  • 82e7e9e Release 0.1.92
  • 9a35cb8 Merge pull request #303 from dtolnay/mustuse
  • 875ceec Resolve double_must_use clippy lint
  • 62993a5 Raise minimum tested compiler to rust 1.88
  • d049ee0 Release 0.1.91
  • 7a0961f Merge pull request #301 from dtolnay/mutability
  • 740f86f Ignore mut_mut pedantic clippy lint in test
  • 4699cd3 Fix mutability for by-reference receivers
  • 6dd3573 Add regression test for issue 300
  • 2371797 Release 0.1.90
  • Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

v1.0.151

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates tokio from 1.52.3 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

  • time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

  • fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
  • net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
  • runtime: add Builder::max_io_events_per_busy_tick (#8410)
  • runtime: stabilize tokio::runtime::worker_index() (#8431)
  • sync: add SemaphorePermit::semaphore() (#8482)
  • sync: add blocking_acquire methods to Semaphore (#8269)
  • sync: add watch::Receiver::is_closed (#8481)
  • wasm: support JSPI for Emscripten target (#8285, #8627)
  • wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

  • fs: reject zero in File::set_max_buf_size (#8449)
  • io: make copy_buf cooperative (#8459)
  • io: panic when BufReader or BufStream is created with zero capacity (#8494)
  • io: panic when in-memory pipe is created with zero capacity (#8397)
  • io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
  • io: support vectored writes in Sink (#8663)
  • net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
  • net: start accepted sockets as readable and writable (#8435)
  • net: support UCred on Fuchsia (#8257)
  • process: use mio::unix::pipe for Unix child stdio (#8603)
  • runtime: cache-pad the shared injection queue and idle state (#8622)
  • runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
  • runtime: make enable_io available whenever rt is enabled (#8387)
  • runtime: move block_in_place setup into a non-generic function (#8315)
  • runtime: move the multi-thread inject queue to its own mutex (#8382)
  • runtime: panic when max_io_events_per_tick is zero (#8476)
  • runtime: suggest .await in nested block_on panic message (#8501)
  • sync: avoid atomic reader count in broadcast slots (#8357)
  • sync: use acquire/release orderings in Notify (#8325)
  • time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

Updates tokio-stream from 0.1.18 to 0.1.19

Commits
  • bc0933c chore: prepare tokio-stream v0.1.19 (#8310)
  • e3786d0 readme: remove obsolete TokioConf notices (#8311)
  • f2189d3 chore: prepare tokio-util v0.7.19 (#8309)
  • 52f2745 net: re-enable tcp_stream::try_read_buf test for WASI (#8305)
  • ac6869a rt: remove unstable cfgs leftovers after local runtime stabilization (#8298)
  • 75fef53 chore: prepare Tokio v1.53.1 (#8303)
  • ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
  • eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
  • 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
  • a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
  • Additional commits viewable in compare view

Updates ignore from 0.4.32 to 0.4.34

Commits
  • 91f5d22 ignore-0.4.34
  • 55f2f69 globset-0.4.21
  • 65e072f ignore: respect linked worktree excludes without requiring Git
  • d19650f globset: match filename-only regexes against basenames
  • 9d07a92 ignore: reuse incremental matchers for directories without rules
  • 6892bc2 ignore: use byte keys for incremental parent lookups
  • 1752fb7 globset: reject impossible literal lengths before hashing
  • 2d4fa85 ignore: skip empty absolute parent matchers (#3557)
  • b5611fc ignore: reuse parent repository detection
  • c5e744c ignore: avoid scratch pools for empty matchers
  • Additional commits viewable in compare view

Updates notify from 8.2.0 to 8.2.1

Release notes

Sourced from notify's releases.

notify v8.2.1

notify 8.2.1 (2026-10-25)

  • CHANGE: raise MSRV from 1.77 to 1.85 #719 #723 breaking
  • CHANGE: replace fsevent-sys with objc2-core-foundation and objc2-core-services on macOS, preserving the fsevent-sys feature for compatibility #726
  • CHANGE: update windows-sys to 0.61 #1045
  • FIX: prevent FsEventWatcher from crashing when unwatching an empty path #718
  • FIX: clean up deleted paths in INotifyWatcher even when the kernel has already removed their watch descriptors #720
  • FIX: propagate FSEvents stream startup errors from watch, unwatch, and PathsMut::commit #733
  • MISC: expand watcher backend tests and fix flaky polling tests #728 #732 #734

#718: notify-rs/notify#718 #719: notify-rs/notify#719 #720: notify-rs/notify#720 #723: notify-rs/notify#723 #726: notify-rs/notify#726 #728: notify-rs/notify#728 #732: notify-rs/notify#732 #733: notify-rs/notify#733 #734: notify-rs/notify#734 #1045: notify-rs/notify#1045

Changelog

Sourced from notify's changelog.

notify 8.2.1 (2026-10-25)

  • CHANGE: raise MSRV from 1.77 to 1.85 #719 #723 breaking
  • CHANGE: replace fsevent-sys with objc2-core-foundation and objc2-core-services on macOS, preserving the fsevent-sys feature for compatibility #726
  • CHANGE: update windows-sys to 0.61 #1045
  • FIX: prevent FsEventWatcher from crashing when unwatching an empty path #718
  • FIX: clean up deleted paths in INotifyWatcher even when the kernel has already removed their watch descriptors #720
  • FIX: propagate FSEvents stream startup errors from watch, unwatch, and PathsMut::commit #733
  • MISC: expand watcher backend tests and fix flaky polling tests #728 #732 #734

#718: notify-rs/notify#718 #719: notify-rs/notify#719 #720: notify-rs/notify#720 #723: notify-rs/notify#723 #726: notify-rs/notify#726 #728: notify-rs/notify#728 #732: notify-rs/notify#732 #733: notify-rs/notify#733 #734: notify-rs/notify#734 #1045: notify-rs/notify#1045

Commits

Updates regex from 1.12.3 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

  • #1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

  • #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

1.12.4 (2026-06-09)

This release includes a performance optimization for compilation of regexes

... (truncated)

Commits
  • 2b52759 1.13.1, redux
  • 40e9823 1.13.1
  • 75fcb96 changelog: 1.13.1
  • 64ad0b6 automata: fix bug in reverse suffix/inner optimization
  • fa91c31 automata: fix a bug caught by Codex review
  • 30390ec automata: formatting tweaks
  • 821a8eb automata: refactor reverse suffix/inner search slightly
  • 10afd70 automata: expose the extracted literals for inner literal extraction
  • 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
  • 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
  • Additional commits viewable in compare view

Updates indexmap from 2.14.0 to 2.14.2

Changelog

Sourced from indexmap's changelog.

2.14.2 (2026-09-04)

  • Fix item hygiene in map and set macros. Previously, an internal const CAP could shadow the same name in the caller's namespace.
  • Allow const initialization of empty indexmap_with_default! and indexset_with_default!. The hasher may also be omitted if it's inferrable.

2.14.1 (2026-08-28)

  • Simplify comparisons where Equivalent isn't needed (Q = K).
  • Unify index assertions for bounds checks.
  • Fix (or expect) clippy lints.
Commits
  • 41a8708 Merge pull request #450 from cuviper/macros
  • 0fb7b5c Release 2.14.2
  • 55e6b28 Improve the empty macro cases
  • c067355 Fix item hygiene in user macros
  • fdf7e17 Merge pull request #449 from cuviper/release-2.14.1
  • ada540e Release 2.14.1
  • af93b43 expect clippy::redundant_slicing in tests
  • c95da18 fix clippy::derivable_impls
  • 2196365 fix clippy::useless_vec (and more) in tests
  • 1c2be7b use inherent usize::MAX
  • Additional commits viewable in compare view

Updates webbrowser from 1.2.1 to 1.2.5

Release notes

Sourced from webbrowser's releases.

v1.2.5

Fixed

  • Windows: use raw-dylib for shlwapi to fix GNU/LLD linking. See #123

v1.2.4

Fixed

  • Unix: Avoid redundant url addition to BROWSER env based command. See #120
  • Unix: Fix the sequence in which BROWSER fields are substituted. See #121

v1.2.3

Fixed

  • Windows: Fix UNC paths where host names are involved. See #116

v1.2.2

Fixed

  • Unix: Fix the way BROWSER env var is handled. See #119.
  • macOS: Move to objc2. See #117.
Changelog

Sourced from webbrowser's changelog.

[1.2.5] - 2026-10-22

Fixed

  • Windows: use raw-dylib for shlwapi to fix GNU/LLD linking. See #123

[1.2.4] - 2026-08-04

Fixed

  • Unix: Avoid redundant url addition to BROWSER env based command. See #120
  • Unix: Fix the sequence in which BROWSER fields are substituted. See #121

[1.2.3] - 2026-08-03

Fixed

  • Windows: Fix UNC paths where host names are involved. See #116

[1.2.2] - 2026-07-29

Fixed

  • Unix: Fix the way BROWSER env var is handled. See #119
  • macOS: Move to objc2. See #117.
Commits

Updates assert_cmd from 2.2.1 to 2.2.2

Changelog

Sourced from assert_cmd's changelog.

[2.2.2] - 2026-05-11

Fixes

  • Ensure #[track_caller] works for better panic messages
Commits
  • feece89 chore: Release assert_cmd version 2.2.2
  • 367cdf7 docs: Update changelog
  • a98cc85 Merge pull request #289 from marcospb19/track_caller
  • cd2e167 fix: .success() not reporting panic location
  • 45a1c74 chore(deps): Update Prek to v0.3.13 (#293)
  • f1d9b5b chore(deps): Update Prek to v0.3.12 (#292)
  • 1d34bab Merge pull request #291 from epage/template
  • d9a70ad style: Make clippy happy
  • 4f5b5af chore: Update from _rust template
  • 1e1d586 chore(renovate): Fix the tag
  • Additional commits viewable in compare view

Updates assert_fs from 1.1.3 to 1.1.4

Changelog

Sourced from assert_fs's changelog.

[1.1.4] - 2026-05-26

Performance

  • Default to the old tempfile behavior for faster builds
Commits
  • e943103 chore: Release assert_fs version 1.1.4
  • cb3f854 docs: Update changelog
  • 6c1f14a Merge pull request #170 from cschwan/remove-default-features-tempfile
  • ad41375 chore(deps): Update Prek to v0.4.2 (#171)
  • 738e445 Disable default features of tempfile dependency
  • 7a3ec6a chore(deps): Update Prek to v0.4.1 (#168)
  • a6612ad chore(deps): Update Prek to v0.4.0 (#167)
  • 62c5cd7 chore(deps): Update Prek to v0.3.13 (

@dependabot
build(deps): bump the cargo-minor group across 1 directory with 19 up…
58a159e 
…dates

Bumps the cargo-minor group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.7` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` |
| [tar](https://github.com/composefs/tar-rs) | `0.4.45` | `0.4.46` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.89` | `0.1.92` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.154` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.54.1` |
| [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.18` | `0.1.19` |
| [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.32` | `0.4.34` |
| [notify](https://github.com/notify-rs/notify) | `8.2.0` | `8.2.1` |
| [regex](https://github.com/rust-lang/regex) | `1.12.3` | `1.13.1` |
| [indexmap](https://github.com/indexmap-rs/indexmap) | `2.14.0` | `2.14.2` |
| [webbrowser](https://github.com/amodm/webbrowser-rs) | `1.2.1` | `1.2.5` |
| [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.2.1` | `2.2.2` |
| [assert_fs](https://github.com/assert-rs/assert_fs) | `1.1.3` | `1.1.4` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.23.1` | `1.29.0` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.106` | `1.0.107` |
| [quote](https://github.com/dtolnay/quote) | `1.0.45` | `1.0.47` |
| [reflink-copy](https://github.com/cargo-bins/reflink-copy) | `0.1.29` | `0.1.30` |



Updates `clap` from 4.6.1 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.7)

Updates `flate2` from 1.1.9 to 1.1.10
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.9...1.1.10)

Updates `tar` from 0.4.45 to 0.4.46
- [Release notes](https://github.com/composefs/tar-rs/releases)
- [Commits](composefs/tar-rs@0.4.45...0.4.46)

Updates `async-trait` from 0.1.89 to 0.1.92
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.89...0.1.92)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.150 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.154)

Updates `tokio` from 1.52.3 to 1.54.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.54.1)

Updates `tokio-stream` from 0.1.18 to 0.1.19
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-stream-0.1.18...tokio-stream-0.1.19)

Updates `ignore` from 0.4.32 to 0.4.34
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@ignore-0.4.32...ignore-0.4.34)

Updates `notify` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/notify-rs/notify/releases)
- [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.1/CHANGELOG.md)
- [Commits](notify-rs/notify@notify-8.2.0...notify-8.2.1)

Updates `regex` from 1.12.3 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.12.3...1.13.1)

Updates `indexmap` from 2.14.0 to 2.14.2
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md)
- [Commits](indexmap-rs/indexmap@2.14.0...2.14.2)

Updates `webbrowser` from 1.2.1 to 1.2.5
- [Release notes](https://github.com/amodm/webbrowser-rs/releases)
- [Changelog](https://github.com/amodm/webbrowser-rs/blob/main/CHANGELOG.md)
- [Commits](amodm/webbrowser-rs@v1.2.1...v1.2.5)

Updates `assert_cmd` from 2.2.1 to 2.2.2
- [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_cmd@v2.2.1...v2.2.2)

Updates `assert_fs` from 1.1.3 to 1.1.4
- [Changelog](https://github.com/assert-rs/assert_fs/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_fs@v1.1.3...v1.1.4)

Updates `uuid` from 1.23.1 to 1.29.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.23.1...v1.29.0)

Updates `proc-macro2` from 1.0.106 to 1.0.107
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.106...1.0.107)

Updates `quote` from 1.0.45 to 1.0.47
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.45...1.0.47)

Updates `reflink-copy` from 0.1.29 to 0.1.30
- [Release notes](https://github.com/cargo-bins/reflink-copy/releases)
- [Changelog](https://github.com/cargo-bins/reflink-copy/blob/main/CHANGELOG.md)
- [Commits](cargo-bins/reflink-copy@v0.1.29...v0.1.30)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: flate2
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tar
  dependency-version: 0.4.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: async-trait
  dependency-version: 0.1.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tokio
  dependency-version: 1.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: tokio-stream
  dependency-version: 0.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: ignore
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: notify
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: regex
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: indexmap
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: webbrowser
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: assert_cmd
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: assert_fs
  dependency-version: 1.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: uuid
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: proc-macro2
  dependency-version: 1.0.107
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: quote
  dependency-version: 1.0.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: reflink-copy
  dependency-version: 0.1.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 30, 2026
@socket-security

socket-security Bot commented Oct 30, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedcargo/​tokio@​1.52.3 ⏵ 1.54.155 -210093100100
Updatedcargo/​assert_cmd@​2.2.1 ⏵ 2.2.27910093100100
Updatedcargo/​proc-macro2@​1.0.106 ⏵ 1.0.1078010093100100
Addedcargo/​serde@​1.0.2298110093100100
Updatedcargo/​quote@​1.0.45 ⏵ 1.0.478210093100100
Updatedcargo/​serde_json@​1.0.150 ⏵ 1.0.1548210093100100
Updatedcargo/​notify@​8.2.0 ⏵ 8.2.187 -1010093100100
Updatedcargo/​indexmap@​2.14.0 ⏵ 2.14.210010093100100
Updatedcargo/​assert_fs@​1.1.3 ⏵ 1.1.410010093 +4100100
Updatedcargo/​async-trait@​0.1.89 ⏵ 0.1.9210010093100100
Updatedcargo/​clap@​4.6.1 ⏵ 4.6.79910093100100
Updatedcargo/​flate2@​1.1.9 ⏵ 1.1.1010010093100100
Updatedcargo/​ignore@​0.4.32 ⏵ 0.4.349810093100100
Updatedcargo/​reflink-copy@​0.1.29 ⏵ 0.1.309910093100100
Updatedcargo/​regex@​1.12.3 ⏵ 1.13.110010093100100
Updatedcargo/​tar@​0.4.45 ⏵ 0.4.46100100 +293100100
Updatedcargo/​tokio-stream@​0.1.18 ⏵ 0.1.1910010093100100
Updatedcargo/​uuid@​1.23.1 ⏵ 1.29.0100 +110093100100
Updatedcargo/​webbrowser@​1.2.1 ⏵ 1.2.595100100100100

View full report

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants