Skip to content

chore(deps): bump the rust-dependencies group with 6 updates - #2288

Merged
chaliy merged 2 commits into
mainfrom
dependabot/cargo/rust-dependencies-b186c43f49
Aug 10, 2026
Merged

chore(deps): bump the rust-dependencies group with 6 updates#2288
chaliy merged 2 commits into
mainfrom
dependabot/cargo/rust-dependencies-b186c43f49

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 6 updates:

Package From To
jaq-json 2.0.1 2.0.2
regex 1.13.0 1.13.1
base64 0.23.0 0.23.1
clap 4.6.5 4.6.6
pyo3 0.29.0 0.29.2
gloo-timers 0.3.0 0.4.0

Updates jaq-json from 2.0.1 to 2.0.2

Commits

Updates regex from 1.13.0 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

  • #1354: Fixes previously unsound reverse suffix and inner optimizations.
Commits
  • 2b52759 1.13.1, redux
  • 40e9823 1.13.1
  • 75fcb96 changelog: 1.13.1
  • 64ad0b6 automata: fix bug in reverse suffix/inner optimization
  • fa91c31 automata: fix a bug caught by Codex review
  • 30390ec automata: formatting tweaks
  • 821a8eb automata: refactor reverse suffix/inner search slightly
  • 10afd70 automata: expose the extracted literals for inner literal extraction
  • 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
  • 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
  • Additional commits viewable in compare view

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures
Commits

Updates clap from 4.6.5 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage
Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage
Commits
  • 348cff3 chore: Release
  • d478377 docs: Update changelog
  • 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
  • 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
  • f90a966 fix(complete): Use spaces for indentation in fish
  • dd4997b fix(complete): Don't glob-expand bash positionals
  • 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
  • 8141e11 chore(deps): Update compatible (dev) (#6398)
  • 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
  • See full diff in compare view

Updates pyo3 from 0.29.0 to 0.29.2

Release notes

Sourced from pyo3's releases.

PyO3 0.29.2

This patch fixes a regression in PyO3 0.29.1 which broke PyPy 3.11 compatibility (#[pyclass] types would crash PyPy on instance deletion).

A few further fixes have also landed with similar themes to PyO3 0.29.1: fixes to minor reference counting bugs, rough edges which would cause crashes, issues which would cause failed builds, and fixes to experimental-inspect type stub generation.

For a full list of the exact fixes please consult the CHANGELOG.

Thank you to the following contributors for the improvements:

@​davidhewitt @​dependabot[bot] @​ImFeH2 @​musicinmybrain @​Tpt @​WaterWhisperer

PyO3 0.29.1

This patch is a stack of fixes for PyO3 0.29. Particular themes include:

  • Fixes addressing build failures with newer interpreters such as GraalPy 3.13 and CPython 3.15
  • Fixes resolving potential memory leaks inside #[pyclass] implementation internals
  • Fixes to the new experimental-inspect type stub machinery

For a full list of the fixes in these above themes and more, please consult the CHANGELOG.

Thank you to the following contributors for the improvements:

@​alex @​bschoenmaeckers @​chirizxc @​davidhewitt @​dependabot[bot] @​exg @​ImFeH2 @​IvanIsCoding @​jonasdedden @​MatthieuDartiailh @​msimacek @​ngoldbaum @​Person-93 @​ratazzi @​rewitt94 @​scott-griffiths @​ShiroKSH @​tobni @​Tpt @​WaterWhisperer

Changelog

Sourced from pyo3's changelog.

[0.29.2] - 2026-08-05

Packaging

  • Add PYO3_USE_RAW_DYLIB=0 opt-out of raw-dylib linking for Windows. #6185

Fixed

  • Fix PyO3 0.29 regression with failure to link under Cygwin / MSYS2. #6185
  • Fix stubs generation for field getters (#[pyo3(get)]) when IntoPyObject is only implemented on references of the field type. #6276
  • Fix #[classmethod] magic methods receiving the instance instead of its type when invoked through a type slot. #6283
  • Fix pyo3_build_config::add_libpython_rpath_link_args emitting Unix-style rpath linker arguments on Windows and Cygwin. #6284
  • Fix PyO3 0.29.1 regression on PyPy causing crashes when deallocating #[pyclass] instances. #6294
  • Fix missing trailing nul in Python 3.9 #[pyclass] docstrings. #6296
  • Fix reference count leak of #[classattr] values created from fn items. #6297

[0.29.1] - 2026-08-02

Changed

  • Use the inline definition of Py_TYPE in the unlimited API on 3.14+ #6179

Fixed

  • Fix incorrect pointer arithmetic in FFI definitions PyObject_GET_WEAKREFS_LISTPTR and PyHeapType_GET_MEMBERS. #6145
  • Fix compilation error with nightly feature on PyPy and GraalPy due to !Ungil implementations for FFI types not available on those platforms. #6146
  • Fix append_to_inittab and PyInit_<module> internal module definition corruption on 32-bit and big-endian platforms on Python 3.15+. #6150
  • Fix return value of PyClassGuardMutSuper::as_super being scoped to the full guard lifetime, now the &mut borrow of the as_super() call. #6181
  • Fix builds for free-threaded interpreters older than 3.15 erroring with "cannot set a minimum Python version" when an abi3t-py3* feature is enabled and the configuration comes from PYO3_CONFIG_FILE, sysconfigdata or cross-compilation defaults. #6192
  • Fix a memory leak when deallocating #[pyclass(dict)] instances with a populated __dict__. #6198
  • Fix an abort inside a #[pyclass]'s GC traversal when the traversal is stopped early. #6206
  • Fix reference cycles through the __dict__ of a #[pyclass(dict)] never being collected. #6206
  • Fix building on GraalPy 3.13. #6208
  • Fix reference count leak of references to #[pyclass] type objects held by their instances on instance deallocation. #6224
  • Fix FFI definitions PyByteArray_GET_SIZE, PyList_GET_SIZE, and PySet_GET_SIZE to use an atomic load for free-threaded Python. #6230
  • Fix a memory leak on Python 3.11 and 3.12 where creating an instance of a #[pyclass(dict)] class leaked one empty dict per instance. #6234
  • Fix experimental-inspect type stubs to emit the arguments of many magic methods as positional-only to match runtime behavior, rather than positional-or-keyword. #6239
  • Fix experimental-inspect type stubs to emit the Python name rather than the Rust name for #[pyfunction(name = "...")]. #6254
  • Fix experimental-inspect generating invalid internal JSON when #[pymodule] members are gated by #[cfg]. #6255
  • Fix __inplace_concat__ and __inplace_repeat__ overriding __concat__ and __repeat__ when both were defined. #6260
  • Fix conversion of out-of-range time::Duration values to return OverflowError instead of panicking. #6266
  • Fix experimental-inspect type stubs padding blank lines inside indented docstrings. #6270
Commits
  • a70d17f release: 0.29.2
  • bd00e11 fix backports.zoneinfo for uv install
  • 7cbd144 fix double-decref in PyPy in instance dealloc (#6294)
  • e57fb6f fix missing trailing nul on Python 3.9 #[pyclass] docstrings (#6296)
  • d83693c fix refcount leak in initialize_tp_dict (#6297)
  • 48ebbd8 fix: skip libpython rpath args on Windows and Cygwin (#6284)
  • bd73377 fix: pass class to classmethod magic methods (#6283)
  • af8d149 Restore pyo3-introspection license files (#6289)
  • 0120c59 unblock CI via a uv constraint (#6295)
  • 3161efc build(deps): bump CodSpeedHQ/action from 4 to 5.0.1 (#6286)
  • Additional commits viewable in compare view

Updates gloo-timers from 0.3.0 to 0.4.0

Release notes

Sourced from gloo-timers's releases.

gloo-timers 0.4.0

MSRV updated to 1.82

Changelog

Sourced from gloo-timers's changelog.

Version 0.4.0

Commits
  • c8feeb1 chore: release gloo-timers 0.4.0
  • d69fcff chore: release gloo-net 0.7.0
  • 7a57df3 chore: release gloo-file 0.4.0
  • 2685476 fix: correct gloo-history category slugs
  • b1d5129 fix: correct gloo-storage category slugs
  • 8316f33 fix: correct gloo-render category slugs
  • 0734551 chore: release gloo-console 0.4.0, gloo-dialogs 0.3.0, gloo-events 0.3.0, glo...
  • e6280d4 chore: release gloo-utils 0.3.0
  • cca8089 chore: release gloo-worker-macros 0.2.0 and gloo-worker 0.6.0
  • a8af99c chore: update rust dependencies (#536)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [jaq-json](https://github.com/01mf02/jaq) | `2.0.1` | `2.0.2` |
| [regex](https://github.com/rust-lang/regex) | `1.13.0` | `1.13.1` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.23.0` | `0.23.1` |
| [clap](https://github.com/clap-rs/clap) | `4.6.5` | `4.6.6` |
| [pyo3](https://github.com/pyo3/pyo3) | `0.29.0` | `0.29.2` |
| [gloo-timers](https://github.com/rustwasm/gloo) | `0.3.0` | `0.4.0` |


Updates `jaq-json` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/01mf02/jaq/releases)
- [Commits](https://github.com/01mf02/jaq/commits)

Updates `regex` from 1.13.0 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.13.0...1.13.1)

Updates `base64` from 0.23.0 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.23.0...v0.23.1)

Updates `clap` from 4.6.5 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.5...clap_complete-v4.6.6)

Updates `pyo3` from 0.29.0 to 0.29.2
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](PyO3/pyo3@v0.29.0...v0.29.2)

Updates `gloo-timers` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/rustwasm/gloo/releases)
- [Changelog](https://github.com/ranile/gloo/blob/master/CHANGELOG.md)
- [Commits](ranile/gloo@0.3.0...gloo-timers-v0.4.0)

---
updated-dependencies:
- dependency-name: jaq-json
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: regex
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: pyo3
  dependency-version: 0.29.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: gloo-timers
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 10, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Aug 10, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
bashkit a880700 Commit Preview URL

Branch Preview URL
Aug 10 2026, 09:49 AM

Dependabot updates Cargo.lock but cannot touch supply-chain/config.toml,
so `cargo vet --locked` failed with 11 unvetted dependencies. Repin the
exemptions for base64, clap, clap_builder, jaq-json, pyo3 (and its four
companion crates) and regex, and add one for gloo-timers 0.4.

Exemptions are bumped in place rather than regenerated so the diff stays
scoped to this group update.
@chaliy
chaliy merged commit c21b171 into main Aug 10, 2026
42 checks passed
@chaliy
chaliy deleted the dependabot/cargo/rust-dependencies-b186c43f49 branch August 10, 2026 10:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant