chore(deps): bump the rust-dependencies group with 6 updates - #2288
Merged
Conversation
Bumps the rust-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [jaq-json](https://github.com/01mf02/jaq) | `2.0.1` | `2.0.2` | | [regex](https://github.com/rust-lang/regex) | `1.13.0` | `1.13.1` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.23.0` | `0.23.1` | | [clap](https://github.com/clap-rs/clap) | `4.6.5` | `4.6.6` | | [pyo3](https://github.com/pyo3/pyo3) | `0.29.0` | `0.29.2` | | [gloo-timers](https://github.com/rustwasm/gloo) | `0.3.0` | `0.4.0` | Updates `jaq-json` from 2.0.1 to 2.0.2 - [Release notes](https://github.com/01mf02/jaq/releases) - [Commits](https://github.com/01mf02/jaq/commits) Updates `regex` from 1.13.0 to 1.13.1 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.13.0...1.13.1) Updates `base64` from 0.23.0 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.23.0...v0.23.1) Updates `clap` from 4.6.5 to 4.6.6 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.5...clap_complete-v4.6.6) Updates `pyo3` from 0.29.0 to 0.29.2 - [Release notes](https://github.com/pyo3/pyo3/releases) - [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md) - [Commits](PyO3/pyo3@v0.29.0...v0.29.2) Updates `gloo-timers` from 0.3.0 to 0.4.0 - [Release notes](https://github.com/rustwasm/gloo/releases) - [Changelog](https://github.com/ranile/gloo/blob/master/CHANGELOG.md) - [Commits](ranile/gloo@0.3.0...gloo-timers-v0.4.0) --- updated-dependencies: - dependency-name: jaq-json dependency-version: 2.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: regex dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: clap dependency-version: 4.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: pyo3 dependency-version: 0.29.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: gloo-timers dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
bashkit | a880700 | Commit Preview URL Branch Preview URL |
Aug 10 2026, 09:49 AM |
Dependabot updates Cargo.lock but cannot touch supply-chain/config.toml, so `cargo vet --locked` failed with 11 unvetted dependencies. Repin the exemptions for base64, clap, clap_builder, jaq-json, pyo3 (and its four companion crates) and regex, and add one for gloo-timers 0.4. Exemptions are bumped in place rather than regenerated so the diff stays scoped to this group update.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the rust-dependencies group with 6 updates:
2.0.12.0.21.13.01.13.10.23.00.23.14.6.54.6.60.29.00.29.20.3.00.4.0Updates
jaq-jsonfrom 2.0.1 to 2.0.2Commits
Updates
regexfrom 1.13.0 to 1.13.1Changelog
Sourced from regex's changelog.
Commits
2b527591.13.1, redux40e98231.13.175fcb96changelog: 1.13.164ad0b6automata: fix bug in reverse suffix/inner optimizationfa91c31automata: fix a bug caught by Codex review30390ecautomata: formatting tweaks821a8ebautomata: refactor reverse suffix/inner search slightly10afd70automata: expose the extracted literals for inner literal extraction8c34f41automata: avoid reverse suffix optimization for non-leftmost-first5524f02test: add regression tests for failed reverse suffix/inner optimizationsUpdates
base64from 0.23.0 to 0.23.1Changelog
Sourced from base64's changelog.
Commits
069bf70v0.23.16ab1fb0Merge pull request #310 from musicinmybrain/test-on-non-simd-arches7cffce6Fix testing on architectures without unsafe SIMD supporte34f9a0Merge pull request #308 from atouchet/come9240c9Remove outdated commentUpdates
clapfrom 4.6.5 to 4.6.6Release notes
Sourced from clap's releases.
Changelog
Sourced from clap's changelog.
Commits
348cff3chore: Released478377docs: Update changelog04b9fbbMerge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob7075239Merge pull request #6422 from BaumiCoder/fix-fish-indentationsf90a966fix(complete): Use spaces for indentation in fishdd4997bfix(complete): Don't glob-expand bash positionals8387c81Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x8141e11chore(deps): Update compatible (dev) (#6398)8a6bd4echore(deps): Update pre-commit hook crate-ci/typos to v1.47.071a7213chore(deps): Update Rust Stable to v1.96 (#6396)Updates
pyo3from 0.29.0 to 0.29.2Release notes
Sourced from pyo3's releases.
Changelog
Sourced from pyo3's changelog.
Commits
a70d17frelease: 0.29.2bd00e11fix backports.zoneinfo for uv install7cbd144fix double-decref in PyPy in instance dealloc (#6294)e57fb6ffix missing trailing nul on Python 3.9#[pyclass]docstrings (#6296)d83693cfix refcount leak ininitialize_tp_dict(#6297)48ebbd8fix: skip libpython rpath args on Windows and Cygwin (#6284)bd73377fix: pass class to classmethod magic methods (#6283)af8d149Restore pyo3-introspection license files (#6289)0120c59unblock CI via a uv constraint (#6295)3161efcbuild(deps): bump CodSpeedHQ/action from 4 to 5.0.1 (#6286)Updates
gloo-timersfrom 0.3.0 to 0.4.0Release notes
Sourced from gloo-timers's releases.
Changelog
Sourced from gloo-timers's changelog.
Commits
c8feeb1chore: release gloo-timers 0.4.0d69fcffchore: release gloo-net 0.7.07a57df3chore: release gloo-file 0.4.02685476fix: correct gloo-history category slugsb1d5129fix: correct gloo-storage category slugs8316f33fix: correct gloo-render category slugs0734551chore: release gloo-console 0.4.0, gloo-dialogs 0.3.0, gloo-events 0.3.0, glo...e6280d4chore: release gloo-utils 0.3.0cca8089chore: release gloo-worker-macros 0.2.0 and gloo-worker 0.6.0a8af99cchore: update rust dependencies (#536)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions