Skip to content

chore(deps)(deps): bump the cargo-all group across 1 directory with 15 updates#31

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/cargo/cargo-all-e9112e7553
Open

chore(deps)(deps): bump the cargo-all group across 1 directory with 15 updates#31
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/cargo/cargo-all-e9112e7553

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo-all group with 14 updates in the / directory:

Package From To
anyhow 1.0.97 1.0.102
log 0.4.26 0.4.32
clap 4.5.32 4.5.60
env_logger 0.11.7 0.11.10
mimalloc 0.1.43 0.1.52
num_cpus 1.16.0 1.17.0
reqwest 0.12.14 0.12.28
sha2 0.10.9 0.11.0
toml 0.8.23 0.9.6
serde_json 1.0.149 1.0.150
tar 0.4.45 0.4.46
tempfile 3.19.0 3.27.0
serde_yml 0.0.12 0.0.13
built 0.7.7 0.8.0

Updates anyhow from 1.0.97 to 1.0.102

Release notes

Sourced from anyhow's releases.

1.0.102

1.0.101

1.0.100

  • Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#426)

1.0.99

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#420)

1.0.98

Commits
  • 5c657b3 Release 1.0.102
  • e737fb6 Merge pull request #442 from dtolnay/backtrace
  • 7fe62b5 Further simply backtrace conditional compilation
  • c8cb5ca Merge pull request #441 from dtolnay/backtrace
  • de27df7 Delete CI use of --features=backtrace
  • 9b67e5d Merge pull request #440 from dtolnay/backtrace
  • efdb11a Simplify std_backtrace conditional code
  • b8a9a70 Merge pull request #439 from dtolnay/backtrace
  • a42fc2c Remove feature = "backtrace" conditional code
  • 2a2a3ce Re-word backtrace feature comment
  • Additional commits viewable in compare view

Updates log from 0.4.26 to 0.4.32

Release notes

Sourced from log's releases.

0.4.32

What's Changed

Full Changelog: rust-lang/log@0.4.31...0.4.32

0.4.31

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.30...0.4.31

0.4.30

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

0.4.29

MSRV

This release increases log's MSRV from 1.61.0 to 1.68.0.

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from log's changelog.

[0.4.32] - 2026-06-04

What's Changed

Full Changelog: rust-lang/log@0.4.31...0.4.32

[0.4.31] - 2026-06-02

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.30...0.4.31

[0.4.30] - 2026-05-21

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

[0.4.29] - 2025-12-02

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.28...0.4.29

[0.4.28] - 2025-09-02

What's Changed

... (truncated)

Commits
  • a5b5b21 Merge pull request #730 from rust-lang/cargo/0.4.32
  • c8d3b12 prepare for 0.4.32 release
  • ce6cd9f Merge pull request #729 from tisonkun/kv-std-support
  • 20b3b05 drop cfg-feature=kv as it is already met
  • 7bc1200 kv::std_support may not need value-bag
  • 5808392 Merge pull request #728 from rust-lang/cargo/0.4.31
  • 86d739f prepare for 0.4.31 release
  • c906cfb Merge pull request #727 from tisonkun/leverage-static-str-key-when-possible
  • 756c279 leverage str literal as well
  • 3dd250d rename Key::from_static_str to from_str_static
  • Additional commits viewable in compare view

Updates clap from 4.5.32 to 4.5.60

Release notes

Sourced from clap's releases.

v4.5.60

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

v4.5.59

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

v4.5.58

[4.5.58] - 2026-02-11

v4.5.57

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

v4.5.56

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

v4.5.55

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

v4.5.54

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help

v4.5.53

[4.5.53] - 2025-11-19

Features

... (truncated)

Changelog

Sourced from clap's changelog.

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

[4.5.58] - 2026-02-11

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup

... (truncated)

Commits
  • 33d24d8 chore: Release
  • 9332409 docs: Update changelog
  • b7adce5 Merge pull request #6166 from fabalchemy/fix-dynamic-powershell-completion
  • 009bba4 fix(clap_complete): Improve powershell registration
  • d89d57d chore: Release
  • f18b67e docs: Update changelog
  • 9d218eb Merge pull request #6165 from epage/shirt
  • 126440c fix(help): Correctly calculate padding for short-only args
  • 9e3c05e test(help): Show panic with short, valueless arg
  • c9898d0 test(help): Verify short with value
  • Additional commits viewable in compare view

Updates env_logger from 0.11.7 to 0.11.10

Release notes

Sourced from env_logger's releases.

v0.11.10

[0.11.10] - 2026-03-23

Internal

  • Update dependencies

v0.11.9

[0.11.9] - 2026-02-11

v0.11.8

[0.11.8] - 2025-04-01

Compatibility

  • (kv) Deprecate the unstable-kv feature which may be removed in a future patch release

Features

  • (kv) Stabilize key-value support behind the kv feature
  • Expose ConfigurableFormat to build custom [Builder::format]s that leverage this
Changelog

Sourced from env_logger's changelog.

[0.11.10] - 2026-03-23

Internal

  • Update dependencies

[0.11.9] - 2026-02-11

[0.11.8] - 2025-04-01

Compatibility

  • (kv) Deprecate the unstable-kv feature which may be removed in a future patch release

Features

  • (kv) Stabilize key-value support behind the kv feature
  • Expose ConfigurableFormat to build custom [Builder::format]s that leverage this
Commits
  • 41320bf chore: Release
  • de8c74f docs: Update changelog
  • d550741 docs(gh): Add sponsor link
  • 458b075 chore(deps): Update Rust Stable to v1.94 (#401)
  • 8bc3fc3 Merge pull request #400 from epage/update
  • 143fa64 chore: Upgrade incompatible
  • b687a24 chore: Upgrade compatible
  • 8cf1ba9 Merge pull request #397 from rust-cli/renovate/crate-ci-typos-1.x
  • 094ecf7 Merge pull request #396 from rust-cli/renovate/crate-ci-committed-1.x
  • 34ad626 chore(deps): Update pre-commit hook crate-ci/typos to v1.44.0
  • Additional commits viewable in compare view

Updates mimalloc from 0.1.43 to 0.1.52

Release notes

Sourced from mimalloc's releases.

Version 0.1.52

Changes

  • Expose mi_stats_get_json().
  • Fix ARM compilation.

Version 0.1.51

Changes

  • Mimalloc bumped to v3.3.2 and v2.3.2.
  • Compile with msvc on windows.

Version 0.1.50

Changes

  • Update to mimalloc v2.3.1 and v3.3.1

Version 0.1.49

Changes

  • Update to mimalloc v2.3.0 and v3.3.0
  • Use mimalloc v3 by default.

Version 0.1.48

Changes

Version 0.1.47

Changes

  • Mimalloc v2.2.4

Version 0.1.46

Changes

  • Fixed musl builds.

Version 0.1.45

Changes

  • Mimalloc v2.2.3

Version 0.1.44

Changes

  • Mimalloc v2.2.2
Commits
  • abcd2be v0.1.52
  • 9db5330 Remove explicit arm instruction set
  • d06bd31 Merge pull request #161 from svix-jbrown/feat/stats-json
  • eb4a16d simplify API
  • e1fd9eb fix up some tests
  • 6805298 v0.1.51
  • ba2c9b1 Fix extended v3
  • 84969eb Merge pull request #160 from Havunen/feat/adjust_build_to_match_mimalloc
  • 843b9b2 Updated mimalloc to 3.3.2 and 2.3.2
  • da7a09c feat: expose mi_stats_get_json and a safe wrapper around it
  • Additional commits viewable in compare view

Updates num_cpus from 1.16.0 to 1.17.0

Changelog

Sourced from num_cpus's changelog.

v1.17.0

Fixes

  • update hermit-abi to 0.5.0
  • remove special support for nacl
Commits

Updates regex from 1.11.1 to 1.12.4

Changelog

Sourced from regex's changelog.

1.12.4 (2025-06-09)

This release includes a performance optimization for compilation of regexes with very large character classes.

Improvements:

  • #1308: Avoid re-canonicalizing the entire interval set when pushing new class ranges.

1.12.3 (2025-02-03)

This release excludes some unnecessary things from the archive published to crates.io. Specifically, fuzzing data and various shell scripts are now excluded. If you run into problems, please file an issue.

Improvements:

  • #1319: Switch from a Cargo exclude list to an include list, and exclude some unnecessary stuff.

1.12.2 (2025-10-13)

This release fixes a cargo doc breakage on nightly when --cfg docsrs is enabled. This caused documentation to fail to build on docs.rs.

Bug fixes:

1.12.1 (2025-10-10)

This release makes a bug fix in the new regex::Captures::get_match API introduced in 1.12.0. There was an oversight with the lifetime parameter for the Match returned. This is technically a breaking change, but given that it was caught almost immediately and I've yanked the 1.12.0 release, I think this is fine.

1.12.0 (2025-10-10)

This release contains a smattering of bug fixes, a fix for excessive memory consumption in some cases and a new regex::Captures::get_match API.

Improvements:

... (truncated)

Commits
  • 7b96fdc 1.12.4
  • 7b89cf0 deps: update to regex-syntax 0.8.11
  • 1401679 regex-syntax-0.8.11
  • d709000 changelog: 1.12.4
  • 9825c74 syntax: avoid re-canonicalizing the entire IntervalSet on push (#1308)
  • a7f2ff6 docs: clarify regex-lite word boundaries
  • 2c7b172 docs: clarify unsupported Anchored::Pattern searches
  • 839d16b regex-syntax-0.8.10
  • c4865a0 syntax: fix negation handling in HIR translation
  • d8761c0 cargo: also include benches
  • Additional commits viewable in compare view

Updates reqwest from 0.12.14 to 0.12.28

Release notes

Sourced from reqwest's releases.

v0.12.28

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.27...v0.12.28

v0.12.27

tl;dr

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Pipe.

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.26...v0.12.27

v0.12.26

tl;dr

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.25...v0.12.26

v0.12.25

Highlights

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

What's Changed

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.12.28

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

v0.12.24

  • Refactor cookie handling to an internal middleware.
  • Refactor internal random generator.
  • Refactor base64 encoding to reduce a copy.
  • Documentation updates.

v0.12.23

  • Add ClientBuilder::unix_socket(path) option that will force all requests over that Unix Domain Socket.
  • Add ClientBuilder::retry(policy) and reqwest::retry::Builder to configure automatic retries.
  • Add ClientBuilder::dns_resolver2() with more ergonomic argument bounds, allowing more resolver implementations.
  • Add http3_* options to blocking::ClientBuilder.
  • Fix default TCP timeout values to enabled and faster.
  • Fix SOCKS proxies to default to port 1080
  • (wasm) Add cache methods to RequestBuilder.

v0.12.22

  • Fix socks proxies when resolving IPv6 destinations.

v0.12.21

  • Fix socks proxy to use socks4a:// instead of socks4h://.
  • Fix Error::is_timeout() to check for hyper and IO timeouts too.
  • Fix request Error to again include URLs when possible.
  • Fix socks connect error to include more context.
  • (wasm) implement Default for Body.

v0.12.20

... (truncated)

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates toml from 0.8.23 to 0.9.6

Commits

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Commits
  • a1ae73a Release 1.0.150
  • 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
  • 2037b63 Reject non-string enum object keys
  • 5d30df6 Resolve manual_assert_eq pedantic clippy lint
  • dc8003a Raise required compiler for preserve_order feature to 1.85
  • a42fa98 Unpin CI miri toolchain
  • 684a60e Pin CI miri to nightly-2026-02-11
  • 7c7da33 Raise required compiler to Rust 1.71
  • acf4850 Simplify Number::is_f64
  • 6b8ceab Resolve unnecessary_map_or clippy lint
  • Additional commits viewable in compare view

Updates tar from 0.4.45 to 0.4.46

Release notes

Sourced from tar's releases.

0.4.46

Security

See also GHSA-3cv2-h65g-fgmm

Other changes

New Contributors

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

Commits

Updates tempfile from 3.19.0 to 3.27.0

Changelog

Sourced from tempfile's changelog.

3.27.0

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

  1. TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
  2. The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @​meng-xu-cs for reporting this issue.

3.26.0

3.25.0

  • Allow getrandom 0.4.x while retaining support for getrandom 0.3.x.

3.24.0

  • Actually support WASIp2 without the nightly feature. This library is now feature complete on WASIp2 without any additional feature flags.
  • Exclude CI scripts from the published crate.

3.23.0

  • Remove need for the "nightly" feature to compile with "wasip2".

3.22.0

  • Updated windows-sys requirement to allow version 0.61.x
  • Remove unstable-windows-keep-open-tempfile feature.

3.21.0

  • Updated windows-sys requirement to allow version 0.60.x

3.20.0

This release mostly unifies the behavior/capabilities around "keeping" temporary files:

... (truncated)

Commits

Updates serde_yml from 0.0.12 to 0.0.13

Release notes

Sourced from serde_yml's releases.

v0.0.13 — Final release (deprecation shim, RUSTSEC-2025-0068 fixed)

⚠️ Final release — serde_yml is deprecated

This is the final maintenance release of serde_yml. The crate is no longer under active development. 0.0.13 is a thin compatibility shim that lets existing call sites keep compiling while you migrate to one of the maintained alternatives listed below.

If you are reading this because cargo audit flagged your build, upgrading to 0.0.13 resolves RUSTSEC-2025-0068 structurally — see Security below.

TL;DR

  # Cargo.toml
- serde_yml = "0.0"
+ serde_yml = "0.0.13"

Your existing call sites compile unchanged. The compiler now emits a #[deprecated] warning at every use serde_yml::* import pointing at the migration guide. The C-FFI libyml parser is no longer in your dependency graph.

When you're ready to fully migrate, see the migration guide.

Security: RUSTSEC-2025-0068 fixed

RUSTSEC-2025-0068 (also GHSA-hhw4-xg65-fp2x) flagged every serde_yml ≤ 0.0.12 as unsound — the serde_yml::ser::Serializer.emitter field could cause a segmentation fault via the C-FFI libyaml parser.

0.0.13 removes the vulnerable surface entirely:

  • The C-FFI libyml dependency is gone from the graph.
  • serde_yml::ser::Serializer is now a re-export of a pure-Rust unit struct (pub struct Serializer;) with no emitter field — code that referenced .emitter no longer compiles, which is the desired outcome.
  • The backend (noyalib) enforces #![forbid(unsafe_code)] workspace-wide.

Verification:

cargo update -p serde_yml --precise 0.0.13
cargo tree -p serde_yml | grep libyml   # → no output

The RustSec advisory database PR adding patched = ["^0.0.13"] is pending review at rustsec/advisory-db#2915. Until it merges, cargo audit may still warn against 0.0.13 — the 0.0.13 release itself ships .cargo/audit.toml + deny.toml ignore entries so the self-referential warning doesn't block your own CI.

Maintained alte...

Description has been truncated

@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from nh13 as a code owner June 15, 2026 16:09
@dependabot dependabot Bot force-pushed the dependabot/cargo/cargo-all-e9112e7553 branch from 7078869 to d750ec5 Compare June 16, 2026 16:40
dependabot Bot and others added 2 commits June 18, 2026 22:34
@dependabot @nh13
chore(deps)(deps): bump the cargo-all group across 1 directory with 1…
d25abfa 
…5 updates

Bumps the cargo-all group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.97` | `1.0.102` |
| [log](https://github.com/rust-lang/log) | `0.4.26` | `0.4.32` |
| [clap](https://github.com/clap-rs/clap) | `4.5.32` | `4.5.60` |
| [env_logger](https://github.com/rust-cli/env_logger) | `0.11.7` | `0.11.10` |
| [mimalloc](https://github.com/purpleprotocol/mimalloc_rust) | `0.1.43` | `0.1.52` |
| [num_cpus](https://github.com/seanmonstar/num_cpus) | `1.16.0` | `1.17.0` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.14` | `0.12.28` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [toml](https://github.com/toml-rs/toml) | `0.8.23` | `0.9.6` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` |
| [tar](https://github.com/composefs/tar-rs) | `0.4.45` | `0.4.46` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.19.0` | `3.27.0` |
| [serde_yml](https://github.com/sebastienrousseau/serde_yml) | `0.0.12` | `0.0.13` |
| [built](https://github.com/lukaslueg/built) | `0.7.7` | `0.8.0` |



Updates `anyhow` from 1.0.97 to 1.0.102
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.97...1.0.102)

Updates `log` from 0.4.26 to 0.4.32
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.26...0.4.32)

Updates `clap` from 4.5.32 to 4.5.60
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.32...clap_complete-v4.5.60)

Updates `env_logger` from 0.11.7 to 0.11.10
- [Release notes](https://github.com/rust-cli/env_logger/releases)
- [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md)
- [Commits](rust-cli/env_logger@v0.11.7...v0.11.10)

Updates `mimalloc` from 0.1.43 to 0.1.52
- [Release notes](https://github.com/purpleprotocol/mimalloc_rust/releases)
- [Commits](purpleprotocol/mimalloc_rust@v0.1.43...v0.1.52)

Updates `num_cpus` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/seanmonstar/num_cpus/releases)
- [Changelog](https://github.com/seanmonstar/num_cpus/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/num_cpus@v1.16.0...v1.17.0)

Updates `regex` from 1.11.1 to 1.12.4
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.11.1...1.12.4)

Updates `reqwest` from 0.12.14 to 0.12.28
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.14...v0.12.28)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `toml` from 0.8.23 to 0.9.6
- [Commits](toml-rs/toml@toml-v0.8.23...toml-v0.9.6)

Updates `serde_json` from 1.0.149 to 1.0.150
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.150)

Updates `tar` from 0.4.45 to 0.4.46
- [Release notes](https://github.com/composefs/tar-rs/releases)
- [Commits](composefs/tar-rs@0.4.45...0.4.46)

Updates `tempfile` from 3.19.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.19.0...v3.27.0)

Updates `serde_yml` from 0.0.12 to 0.0.13
- [Release notes](https://github.com/sebastienrousseau/serde_yml/releases)
- [Commits](sebastienrousseau/serde_yml@v0.0.12...v0.0.13)

Updates `built` from 0.7.7 to 0.8.0
- [Changelog](https://github.com/lukaslueg/built/blob/master/CHANGELOG.md)
- [Commits](lukaslueg/built@0.7.7...0.8.0)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-all
- dependency-name: built
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: clap
  dependency-version: 4.5.60
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-all
- dependency-name: env_logger
  dependency-version: 0.11.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-all
- dependency-name: log
  dependency-version: 0.4.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-all
- dependency-name: mimalloc
  dependency-version: 0.1.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-all
- dependency-name: num_cpus
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: regex
  dependency-version: 1.12.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: reqwest
  dependency-version: 0.12.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-all
- dependency-name: serde_json
  dependency-version: 1.0.150
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-all
- dependency-name: serde_yml
  dependency-version: 0.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-all
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: tar
  dependency-version: 0.4.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-all
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
- dependency-name: toml
  dependency-version: 0.9.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@nh13
fix: adapt to sha2 0.11, toml 0.9, and clap 4.5.60 API changes
9f56de5 
The cargo-all dependency bump pulls in three breaking changes:

- sha2 0.11 returns a hybrid_array::Array from finalize() that no longer
  implements LowerHex, so format!("{:x}", ...) fails to compile. Format the
  digest bytes manually and add a unit test covering known SHA-256 vectors.
- toml 0.9 changed Value's FromStr to parse a single value fragment rather
  than a whole document, breaking Cargo.toml / Cargo.lock parsing. Switch to
  toml::from_str (serde document parse).
- clap 4.5.60 reorders --help so possible-values render before [default];
  regenerate the usage block in README.md to match.
@nh13 nh13 force-pushed the dependabot/cargo/cargo-all-e9112e7553 branch from d750ec5 to 9f56de5 Compare June 19, 2026 05:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@nh13 nh13 Awaiting requested review from nh13 nh13 is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nh13