Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025

Bumps the all group with 6 updates:

Package From To
bumpalo 3.19.0 3.19.1
clap_complete 4.5.61 4.5.62
reqwest 0.12.25 0.12.26
tracing 0.1.43 0.1.44
zip 6.0.0 7.0.0
toml 0.9.8 0.9.10+spec-1.1.0

Updates bumpalo from 3.19.0 to 3.19.1

Changelog

Sourced from bumpalo's changelog.

3.19.1

Released 2025-12-16.

Changed

  • Annotated bumpalo::collections::String::from_str_in as #[inline].

Fixed

  • Fixed compilation failures with the latest nightly Rust when enabling the unstable allocator_api feature.

Commits

Updates clap_complete from 4.5.61 to 4.5.62

Commits
  • ca0aeba chore: Release
  • 44cdcc1 docs: Update changelog
  • 2dc500c Merge pull request #6198 from devjgm/greg/fix-clap-completer-issue-with-fish
  • 2280d48 fix: fix path quoting with dynamic env completer
  • ac1006c Merge pull request #6197 from devjgm/greg/fix-clap-completer-issue-with-fish
  • d495145 clap_complete: add unit test for fish env completer
  • 1a6c0de chore(deps): Update Rust Stable to v1.92 (#6194)
  • 53a6921 Merge pull request #6189 from clap-rs/renovate/actions-checkout-6.x
  • 7cbec58 chore(deps): Update actions/checkout action to v6
  • See full diff in compare view

Updates reqwest from 0.12.25 to 0.12.26

Release notes

Sourced from reqwest's releases.

v0.12.26

tl;dr

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.25...v0.12.26

Changelog

Sourced from reqwest's changelog.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.
Commits

Updates tracing from 0.1.43 to 0.1.44

Release notes

Sourced from tracing's releases.

tracing 0.1.44

Fixed

  • Fix record_all panic (#3432)

Changed

  • tracing-core: updated to 0.1.36 (#3440)

#3432: tokio-rs/tracing#3432 #3440: tokio-rs/tracing#3440

Commits

Updates zip from 6.0.0 to 7.0.0

Release notes

Sourced from zip's releases.

v7.0.0

⚠️ Breaking Changes

  • Removed the following features: getrandom, hmac, pbkdf2, sha1, zeroize.
  • Removed lzma-static and xz-static feature flags, which were deprecated synonyms of lzma and xz. (#405, #425)

🚀 Features

  • (SimpleFileOptions) const DEFAULT implementation (#474)
  • ZipWriter set_auto_large_file() method to enable large-file data descriptor when necessary (#468)

🐛 Bug Fixes

  • print previous error when failing to search another cde (#460)
  • cargo doc warnings (#472)
  • Write ZIP64 data descriptors when large_file option is true (#467)
  • Pin generic-array to an old version to work around RustCrypto/traits#2036 until next RustCrypto & aes-crypto releases (#458)

⚙️ Miscellaneous Tasks

  • Revert version bump so that release-plz will trigger
  • expose more flate2 feature flags (#476)
  • Next release will be 7.0.0
  • release v6.0.0 (#442)

Deps

  • Bump lzma-rust2 to v0.15 (#465)*] Remove lzma-static and xz-static feature flags, which are deprecated synonyms of lzma and xz. (#405, #425)
Changelog

Sourced from zip's changelog.

7.0.0 - 2025-12-05

⚠️ Breaking Changes

  • Removed the following features: getrandom, hmac, pbkdf2, sha1, zeroize.
  • Removed lzma-static and xz-static feature flags, which were deprecated synonyms of lzma and xz. (#405, #425)

🚀 Features

  • (SimpleFileOptions) const DEFAULT implementation (#474)
  • ZipWriter set_auto_large_file() method to enable large-file data descriptor when necessary (#468)

🐛 Bug Fixes

  • print previous error when failing to search another cde (#460)
  • cargo doc warnings (#472)
  • Write ZIP64 data descriptors when large_file option is true (#467)
  • Pin generic-array to an old version to work around RustCrypto/traits#2036 until next RustCrypto & aes-crypto releases (#458)

⚙️ Miscellaneous Tasks

  • Revert version bump so that release-plz will trigger
  • expose more flate2 feature flags (#476)
  • Next release will be 7.0.0
  • release v6.0.0 (#442)

Deps

  • Bump lzma-rust2 to v0.15 (#465)*] Remove lzma-static and xz-static feature flags, which are deprecated synonyms of lzma and xz. (#405, #425)
Commits
  • c864a14 chore: release v7.0.0 (#482)
  • 8085fe5 fix: print previous error when failing to search another cde (#460)
  • aa8f933 chore: Revert version bump so that release-plz will trigger
  • 13005c5 ci: Fix? run apt-get update at start of miri job
  • f99a32f chore: expose more flate2 feature flags (#476)
  • 9b5dd0b feat(SimpleFileOptions): const DEFAULT implementation (#474)
  • a8a4729 ci: Fix: Miri now requires g++, not just gcc (#477)
  • 57d26a7 fix: cargo doc warnings (#472)
  • 69533f1 feat: ZipWriter set_auto_large_file() method to enable large-file data desc...
  • fadbd48 chore(deps): update lzma-rust2 requirement from 0.13 to 0.14 (#450)
  • Additional commits viewable in compare view

Updates toml from 0.9.8 to 0.9.10+spec-1.1.0

Commits
  • e32c7a2 chore: Release
  • df1c328 docs: Update changelog
  • b826cf4 feat(edit)!: Allow set_position(None) (#1080)
  • 8043f20 feat(edit)!: Allow set_position(None)
  • a02c0db feat: Support TOML 1.1 (#1079)
  • 5cfb838 feat(edit): Support TOML 1.1
  • 1eb4d60 feat(toml): Support TOML 1.1
  • 695d788 feat(edit)!: Multi-line inline tables with trailing commas
  • cc4f7ac feat(toml): Multi-line inline tables with trailing commas
  • 539f8c1 feat(datetime): Make seconds optional
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [bumpalo](https://github.com/fitzgen/bumpalo) | `3.19.0` | `3.19.1` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.5.61` | `4.5.62` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.25` | `0.12.26` |
| [tracing](https://github.com/tokio-rs/tracing) | `0.1.43` | `0.1.44` |
| [zip](https://github.com/zip-rs/zip2) | `6.0.0` | `7.0.0` |
| [toml](https://github.com/toml-rs/toml) | `0.9.8` | `0.9.10+spec-1.1.0` |


Updates `bumpalo` from 3.19.0 to 3.19.1
- [Changelog](https://github.com/fitzgen/bumpalo/blob/main/CHANGELOG.md)
- [Commits](fitzgen/bumpalo@v3.19.0...v3.19.1)

Updates `clap_complete` from 4.5.61 to 4.5.62
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.61...clap_complete-v4.5.62)

Updates `reqwest` from 0.12.25 to 0.12.26
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.25...v0.12.26)

Updates `tracing` from 0.1.43 to 0.1.44
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-0.1.43...tracing-0.1.44)

Updates `zip` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v6.0.0...v7.0.0)

Updates `toml` from 0.9.8 to 0.9.10+spec-1.1.0
- [Commits](toml-rs/toml@toml-v0.9.8...toml-v0.9.10)

---
updated-dependencies:
- dependency-name: bumpalo
  dependency-version: 3.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: clap_complete
  dependency-version: 4.5.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: reqwest
  dependency-version: 0.12.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: tracing
  dependency-version: 0.1.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: zip
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: toml
  dependency-version: 0.9.10+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Dec 22, 2025
@dnbln dnbln merged commit 420556d into trunk Dec 22, 2025
1 check passed
@dependabot dependabot bot deleted the dependabot/cargo/all-7e1264d84e branch December 22, 2025 09:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants