Skip to content

Bump the rust-dependencies group across 1 directory with 11 updates - #35

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-711ae57d5c
Open

Bump the rust-dependencies group across 1 directory with 11 updates#35
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-711ae57d5c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 11 updates in the / directory:

Package From To
serde 1.0.228 1.0.229
clap 4.6.4 4.6.6
regorus 0.11.0 0.12.0
thiserror 2.0.19 2.0.20
hyper 1.11.0 1.11.1
http-body-util 0.1.4 0.1.5
futures-util 0.3.32 0.3.34
aho-corasick 1.1.4 1.1.5
uuid 1.24.0 1.26.0
base64 0.22.1 0.23.1
llama-cpp-2 0.1.153 0.1.155

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates clap from 4.6.4 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Commits
  • 348cff3 chore: Release
  • d478377 docs: Update changelog
  • 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
  • 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
  • f90a966 fix(complete): Use spaces for indentation in fish
  • dd4997b fix(complete): Don't glob-expand bash positionals
  • 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
  • 8141e11 chore(deps): Update compatible (dev) (#6398)
  • 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
  • Additional commits viewable in compare view

Updates regorus from 0.11.0 to 0.12.0

Release notes

Sourced from regorus's releases.

regorus-v0.12.0

Added

  • (value) Frozen object storage (boxed-slice) for compact parsed objects (#787)
  • json.patch builtin with Rego set support + partial-rule multi-body fix (picks up #442) (#776)
  • Support Verus verification (#759)

Fixed

  • Prevent panic by Number::modulo (#773)
  • Handle i64::MIN / -1 special case
  • (interpreter,rvm) resolve function calls through import aliases (#769)

Other

  • Add per-execution memory budgets to RVM (#792)
  • Verify Number with Verus (#774)
  • (deps) bump the github-actions group with 3 updates (#793)
  • Fix potential underflow in bigint_to_scientific (#791)
  • (deps) migrate from serde_yaml to yaml_serde (#790)
  • (value) migrate Array storage abstraction (#785)
  • (deps) bump the github-actions group across 1 directory with 4 updates (#783)
  • Pin GitHub Actions to full-length commit SHAs (#777)
  • (value) migrate Value::Set to Set storage abstraction (#778)
  • (deps) bump the rust-dependencies group across 5 directories with 10 updates (#784)
  • (deps) bump the github-actions group with 4 updates (#779)
  • (deps) bump the github-actions group across 1 directory with 11 updates (#763)
  • (deps) bump the rust-dependencies group across 6 directories with 6 updates (#768)
  • Handle i32::MIN in Number::two_pow and Number::ten_pow (#771)

Added

  • (rvm) add opt-in per-execution memory budgets for run-to-completion evaluation, including typed Rust and binding errors (#792)
Changelog

Sourced from regorus's changelog.

0.12.0 - 2026-09-01

Added

  • (value) Frozen object storage (boxed-slice) for compact parsed objects (#787)
  • json.patch builtin with Rego set support + partial-rule multi-body fix (picks up #442) (#776)
  • Support Verus verification (#759)

Fixed

  • Prevent panic by Number::modulo (#773)
  • Handle i64::MIN / -1 special case
  • (interpreter,rvm) resolve function calls through import aliases (#769)

Other

  • Add per-execution memory budgets to RVM (#792)
  • Verify Number with Verus (#774)
  • (deps) bump the github-actions group with 3 updates (#793)
  • Fix potential underflow in bigint_to_scientific (#791)
  • (deps) migrate from serde_yaml to yaml_serde (#790)
  • (value) migrate Array storage abstraction (#785)
  • (deps) bump the github-actions group across 1 directory with 4 updates (#783)
  • Pin GitHub Actions to full-length commit SHAs (#777)
  • (value) migrate Value::Set to Set storage abstraction (#778)
  • (deps) bump the rust-dependencies group across 5 directories with 10 updates (#784)
  • (deps) bump the github-actions group with 4 updates (#779)
  • (deps) bump the github-actions group across 1 directory with 11 updates (#763)
  • (deps) bump the rust-dependencies group across 6 directories with 6 updates (#768)
  • Handle i32::MIN in Number::two_pow and Number::ten_pow (#771)

Added

  • (rvm) add opt-in per-execution memory budgets for run-to-completion evaluation, including typed Rust and binding errors (#792)
Commits
  • c6c679f chore: release (#802)
  • b17ede6 Add per-execution memory budgets to RVM (#792)
  • a9b1eea Verify Number with Verus (#774)
  • 409a36f build(deps): bump rb_sys in /bindings/ruby in the per-dependency group (#794)
  • 39f535e ci(deps): bump the github-actions group with 3 updates (#793)
  • 3496f05 Fix potential underflow in bigint_to_scientific (#791)
  • fc1533b build(deps): migrate from serde_yaml to yaml_serde (#790)
  • a7a1534 feat(value): Frozen object storage (boxed-slice) for compact parsed objects (...
  • 3cff6c5 refactor(value): migrate Array storage abstraction (#785)
  • e60e707 build(deps): bump rubocop (#782)
  • Additional commits viewable in compare view

Updates thiserror from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

  • Suppress redundant_field_names clippy lint in generated code (#454)
Commits

Updates hyper from 1.11.0 to 1.11.1

Release notes

Sourced from hyper's releases.

v1.11.1

Bug Fixes

  • http1:
    • detect TE: trailers caselessly and with other values (#4152) (72fcf545)
    • recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)
    • flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)
    • evict pooled conn on request-side Connection: close (#4110) (da19be08)

What's Changed

New Contributors

Full Changelog: hyperium/hyper@v1.11.0...v1.11.1

Changelog

Sourced from hyper's changelog.

v1.11.1 (2026-08-27)

Bug Fixes

  • http1:
    • detect TE: trailers caselessly and with other values (#4152) (72fcf545)
    • recognize \n\r\n as a head terminator in the partial-read fast path (#4147) (3534d75c, closes #4145)
    • flush bytes buffered by the write re-check before yielding (#4143) (f660f5bf)
    • evict pooled conn on request-side Connection: close (#4110) (da19be08)
Commits
  • 6371cd4 v1.11.1
  • 37c9d0c style(lib): remove lints that have been removed in newer clippy (#4167)
  • 08a2881 docs(contrib): add initial COLLABORATORS guide (#4158)
  • 8b2e533 style(lib): temporarily allow some new clippy lints (#4165)
  • 8fcaf1a docs(lib): expand crate-level cancel safety section with HTTP/1 vs HTTP/2 (#4...
  • d32b294 style(lib): fix needless_continue lint (#4157)
  • fca07bd style(lib): fix missing_errors_doc lint (#4154)
  • 72fcf54 fix(http1): detect TE: trailers caselessly and with other values (#4152)
  • af432e9 docs(body): add streaming read examples (#4148)
  • 3534d75 fix(http1): recognize \n\r\n as a head terminator in the partial-read fast ...
  • Additional commits viewable in compare view

Updates http-body-util from 0.1.4 to 0.1.5

Commits

Updates futures-util from 0.3.32 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Commits

Updates aho-corasick from 1.1.4 to 1.1.5

Commits
  • 5178060 1.1.5
  • b68c8d5 api: check for overflow in Match::offset too
  • c821786 build(deps): bump actions/checkout in the actions group (#171)
  • 8209bb9 Hash-pin all actions, drop persisted credentials (#170)
  • 0f3f5da api: document a couple panicking preconditions
  • e88e1fc benchmarks: bump dependencies
  • 88e4966 ci: use older version of log on pinned build
  • See full diff in compare view

Updates uuid from 1.24.0 to 1.26.0

Release notes

Sourced from uuid's releases.

v1.26.0

What's Changed

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits
  • cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
  • 34e4f49 don't test macros under miri
  • d9e7242 update nightly used for miri
  • ec16819 prepare for 1.26.0 release
  • 162cd20 Merge pull request #904 from ChrisJr404/v7-additional-precision-bits
  • 97eceff Add ContextV7::with_additional_precision_bits for microsecond clocks
  • 302e0bf Merge pull request #903 from uuid-rs/cargo/1.25.0
  • b7ccde8 prepare for 1.25.0 release
  • c62dffb Merge pull request #902 from ChrisJr404/serde-bytes-module
  • 8c198b2 Add a serde::bytes module that encodes as a byte string
  • Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

Updates llama-cpp-2 from 0.1.153 to 0.1.155

Release notes

Sourced from llama-cpp-2's releases.

0.1.155

What's Changed

New Contributors

Full Changelog: utilityai/llama-cpp-rs@0.1.154...0.1.155

0.1.154

What's Changed

New Contributors

Full Changelog: utilityai/llama-cpp-rs@0.1.153...0.1.154

Commits
  • 0ad1788 Merge pull request #1109 from nobodywho-ooo/fix-llguidance
  • b38ebe9 Fix building llguidance with newer llama.cpp
  • f60eb0b Test mtmd and llguidance in CI
  • 3d5f424 Merge pull request #1110 from nobodywho-ooo/fix-ci
  • d1c7d0c Temporarily fix use_mmap configuration
  • 26471f6 Reformat
  • cf98aaf Run CI on merged commit as well as all pull requests
  • a42fa12 Merge pull request #1101 from utilityai/dependabot/cargo/llguidance-1.8.0
  • e16254f Merge pull request #1100 from utilityai/dependabot/cargo/cc-1.4.2
  • 67ba588 Merge pull request #1099 from utilityai/dependabot/cargo/thiserror-2.0.20
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the rust-dependencies group across 1 directory with 11 updates
8445ce6 
Bumps the rust-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [clap](https://github.com/clap-rs/clap) | `4.6.4` | `4.6.6` |
| [regorus](https://github.com/microsoft/regorus) | `0.11.0` | `0.12.0` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.20` |
| [hyper](https://github.com/hyperium/hyper) | `1.11.0` | `1.11.1` |
| [http-body-util](https://github.com/hyperium/http-body) | `0.1.4` | `0.1.5` |
| [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` |
| [aho-corasick](https://github.com/BurntSushi/aho-corasick) | `1.1.4` | `1.1.5` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.26.0` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [llama-cpp-2](https://github.com/utilityai/llama-cpp-rs) | `0.1.153` | `0.1.155` |



Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `clap` from 4.6.4 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.4...clap_complete-v4.6.6)

Updates `regorus` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/microsoft/regorus/releases)
- [Changelog](https://github.com/microsoft/regorus/blob/main/CHANGELOG.md)
- [Commits](microsoft/regorus@regorus-v0.11.0...regorus-v0.12.0)

Updates `thiserror` from 2.0.19 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.19...2.0.20)

Updates `hyper` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.11.0...v1.11.1)

Updates `http-body-util` from 0.1.4 to 0.1.5
- [Release notes](https://github.com/hyperium/http-body/releases)
- [Commits](hyperium/http-body@http-body-util-v0.1.4...http-body-util-v0.1.5)

Updates `futures-util` from 0.3.32 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.32...0.3.34)

Updates `aho-corasick` from 1.1.4 to 1.1.5
- [Commits](BurntSushi/aho-corasick@1.1.4...1.1.5)

Updates `uuid` from 1.24.0 to 1.26.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.24.0...v1.26.0)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `llama-cpp-2` from 0.1.153 to 0.1.155
- [Release notes](https://github.com/utilityai/llama-cpp-rs/releases)
- [Commits](utilityai/llama-cpp-rs@0.1.153...0.1.155)

---
updated-dependencies:
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: regorus
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: hyper
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: http-body-util
  dependency-version: 0.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: futures-util
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: aho-corasick
  dependency-version: 1.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: uuid
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: llama-cpp-2
  dependency-version: 0.1.155
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 9, 2026
@dependabot
dependabot Bot requested a review from qedawkins as a code owner September 9, 2026 05:47
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@qedawkins qedawkins Awaiting requested review from qedawkins qedawkins is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants