Skip to content

chore(deps): bump the production-dependencies group across 2 directories with 7 updates - #449

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/production-dependencies-9631761050
Open

chore(deps): bump the production-dependencies group across 2 directories with 7 updates#449
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/production-dependencies-9631761050

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 6 updates in the / directory:

Package From To
clap 4.6.6 4.6.7
serde-saphyr 1.1.0 1.3.0
ureq 3.4.0 3.4.2
open 5.4.2 5.4.4
bitflags 2.13.1 2.13.2
encoding_rs 0.8.35 0.8.41
bitflags 2.13.1 2.13.2
encoding_rs 0.8.35 0.8.41

Bumps the production-dependencies group with 1 update in the /acdc-parser/fuzz directory: serde.

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates serde-saphyr from 1.1.0 to 1.3.0

Release notes

Sourced from serde-saphyr's releases.

1.3.0 Maintenance and performance release

  • Integer mapping keys now compare by their parsed numeric value for duplicate detection and merge resolution, including inside composite keys (0xB and 11 compare equal). Deserializing to strings preserves the original spelling; FirstWins and LastWins retain the selected key's spelling and associated value.
  • Composite keys containing null-like strings now preserve both the key and its associated value; for example, {{"null": 1}: 2} now round-trips correctly.
  • Null mapping keys now remain distinct from null-like string keys during duplicate detection and merge resolution, including inside composite keys.
  • Null detection now respects string tags and scalar styles, preserving null-like strings such as !!str null, including when deserializing to Option<String>.
  • Explicit numeric tags (!!int and !!float) now deserialize correctly through deserialize_any, including quoted and block scalars.
  • Floating-point deserialization now rejects incompatible core tags; for example, from_str::<f64>("!!str 1.5") now returns an error.
  • Serialization now escapes U+FFFE and U+FFFF as \uFFFE and \uFFFF.
  • Serialization now preserves newline-only strings in literal block scalars, including LitStr and LitString, by using keep chomping and retaining every empty line.
  • Updated the granit-parser revision to preserve document boundaries after zero-indented root literal and folded block scalars, including empty strings.
  • Preserve string scalars across YAML 1.1 readers (PR #90, thanks @​NiklasRosenstein)
  • The version increased to 1.3 because it uses granit-parser 1.3, and that is because granit-parser added two methods to Input for performance improvements. As serde-saphyr re-exports it, the version number must be increased to 1.3 as well, even if no new features are added to this crate itself.

1.2.0 It's all about !!tags this time

This release focuses on enhanced tag support.

  • Implemented tag capturing (#183). Applications can use custom tags to express units, priorities, accessibility, or other application-specific semantics for a node. This is supported by new Tagged<T> wrapper that is similar to Commented<T>.
  • Unsupported tags can now be rejected rather than ignored (new option reject_unsupported_tags, #180). This aligns the behavior with ruamel.yaml that rejects tags for which it has no constructor (serde-saphyr does not construct this way) that caused discussion on prek.
  • Clearly wrongly placed tags like !!int [1] or !!map [1] are now an error.
  • Documentation was revised to make sure all examples compile (are not fragments).
Changelog

Sourced from serde-saphyr's changelog.

1.3.0 Maintenance and performance release

Fixed

  • Integer mapping keys now compare by their parsed numeric value for duplicate detection and merge resolution, including inside composite keys (0xB and 11 compare equal). Deserializing to strings preserves the original spelling; FirstWins and LastWins retain the selected key's spelling and associated value.
  • Composite keys containing null-like strings now preserve both the key and its associated value; for example, {{"null": 1}: 2} now round-trips correctly.
  • Null mapping keys now remain distinct from null-like string keys during duplicate detection and merge resolution, including inside composite keys.
  • Null detection now respects string tags and scalar styles, preserving null-like strings such as !!str null, including when deserializing to Option<String>.
  • Explicit numeric tags (!!int and !!float) now deserialize correctly through deserialize_any, including quoted and block scalars.
  • Floating-point deserialization now rejects incompatible core tags; for example, from_str::<f64>("!!str 1.5") now returns an error.
  • Serialization now escapes U+FFFE and U+FFFF as \uFFFE and \uFFFF.
  • Serialization now preserves newline-only strings in literal block scalars, including LitStr and LitString, by using keep chomping and retaining every empty line.
  • Updated the granit-parser revision to preserve document boundaries after zero-indented root literal and folded block scalars, including empty strings.
  • Preserve string scalars across YAML 1.1 readers (PR #90, thanks @​NiklasRosenstein)
  • The version increased to 1.3 because it uses granit-parser 1.3, and that is because granit-parser added two methods to Input for performance improvements. As serde-saphyr re-exports it, the version number must be increased to 1.3 as well, even if no new features are added to this crate itself.

1.2.0 Maintenance release

Changed

  • Folded property-interpolation depth and work limits into Budget; property resource-limit failures are now reported through Error::Budget and BudgetBreach.
  • Added the opt-in Options::reject_unsupported_tags strict mode. It rejects explicitly tagged scalar, sequence, and mapping nodes when their tag is unknown to serde-saphyr; the default remains permissive for compatibility with custom tagged enums. YAML 1.1 !!merge and !!value are accepted in this mode only as the exact scalar mapping keys << and =, respectively, while robotics-only !degrees and !radians require both the robotics crate feature and angle_conversions, and !include requires both the include crate feature and a configured resolver.
  • Enforced the scalar, sequence, or mapping node kinds required by recognized tags even when reject_unsupported_tags is disabled.
  • Hardened serializer indentation handling: indent_step is now limited to 1..=64, all serializer entry points validate it, and indentation arithmetic returns an error instead of overflowing. We do not consider this breaking because values outside this range does not look sane.
  • Validated custom anchor-generator names before emission. Names must be 1–256 bytes and cannot contain whitespace, control characters, or YAML flow punctuation; unsupported names now return a serialization error.

... (truncated)

Commits
  • 93e634c Switching to 1.3.0
  • b94505a Miri fix
  • aa4adad We will need to go 1.3
  • 7a1646e Update CHANGELOG.md
  • b17fc43 Extend the quoting check to signed lowercase 0o forms
  • 8aae8fe Preserve string scalars across YAML 1.1 readers (#190)
  • de014b0 Bump rstest from 0.26.1 to 0.27.0 (#191)
  • bbd93a8 Switch to released granit parser.
  • 49ecf1b Next release start automatically on tag push
  • 6bcee83 Fix pirate formatter test
  • Additional commits viewable in compare view

Updates ureq from 3.4.0 to 3.4.2

Changelog

Sourced from ureq's changelog.

3.4.2

  • Bump ureq-proto to 0.6.3 (fixes network-path references in redirects)
  • Bypass pooling for request connection settings incompatible with the Agent #1201
  • Try the next resolved address on unreachable/unavailable connect errors #1195

3.4.1

  • Bump ureq-proto to 0.6.2 (fixes to parsing and headers) #1199
  • Do not pool connections with unconsumed buffered input #1198
  • Fix timeout budgets restarting and applying to later phases #1194
  • Complete TLS handshake during connect so timeout_connect covers it #1193
  • Speed up read_json for responses with a known, small body size #1191
Commits

Updates open from 5.4.2 to 5.4.4

Release notes

Sourced from open's releases.

v5.4.4

Bug Fixes

  • open Windows paths without wildcard expansion

    Opening a child of a bracket-named directory fails because Start-Process resolves parent directories as PowerShell wildcard patterns. The isolated Windows regression test reproduced WildcardPatternException for a copied executable under "【Tiny Asa】 [77P7V-712MB]\child" before this change.

    Use Test-Path and Invoke-Item with LiteralPath for existing items, retaining Start-Process for URLs and application names. These cmdlets also work under PowerShell Constrained Language Mode. Share the embedded script between Windows and WSL, keep targets in environment data, and stop on launch errors to report a nonzero exit status. Preserve the security boundary established in fd29861: cmd /c start remains opt-in through the insecure feature. No previously removed launcher options are restored.

    The integration test launches only a copy of its own test binary, which records its executable path and exits. It checks absolute and relative paths with invalid and valid bracket patterns, Unicode, backticks, quotes, shell metacharacters, and leading dashes in normal and constrained PowerShell sessions, plus failure for a missing executable. It requires neither Explorer nor registered document or URL handlers. Adjust the existing fallback assertion to also allow the opt-in cmd launcher after Explorer with all features enabled.

    Validated locally on Windows with PowerShell 5.1.26100.33438 and rustc 1.97.1: cargo test and cargo test --all-features each passed all 19 tests, including the behavioral regression. git diff --check passed, and cargo package --list includes the embedded script. Test-Path returned false without errors for representative https, mailto, and file URLs. Actual GUI folder, document, URL handling and WSL interop were not exercised locally.

Commit Statistics

  • 2 commits contributed to the release.
  • 8 days passed between releases.
  • 1 commit was understood as conventional.
  • 1 unique issue was worked on: #132

Commit Details

  • #132
    • Open Windows paths without wildcard expansion (ad95c40)
  • Uncategorized

... (truncated)

Changelog

Sourced from open's changelog.

5.4.4 (2026-09-10)

Bug Fixes

  • open Windows paths without wildcard expansion

    Opening a child of a bracket-named directory fails because Start-Process resolves parent directories as PowerShell wildcard patterns. The isolated Windows regression test reproduced WildcardPatternException for a copied executable under "【Tiny Asa】 [77P7V-712MB]\child" before this change.

    Use Test-Path and Invoke-Item with LiteralPath for existing items, retaining Start-Process for URLs and application names. These cmdlets also work under PowerShell Constrained Language Mode. Share the embedded script between Windows and WSL, keep targets in environment data, and stop on launch errors to report a nonzero exit status. Preserve the security boundary established in fd29861: cmd /c start remains opt-in through the insecure feature. No previously removed launcher options are restored.

    The integration test launches only a copy of its own test binary, which records its executable path and exits. It checks absolute and relative paths with invalid and valid bracket patterns, Unicode, backticks, quotes, shell metacharacters, and leading dashes in normal and constrained PowerShell sessions, plus failure for a missing executable. It requires neither Explorer nor registered document or URL handlers. Adjust the existing fallback assertion to also allow the opt-in cmd launcher after Explorer with all features enabled.

    Validated locally on Windows with PowerShell 5.1.26100.33438 and rustc 1.97.1: cargo test and cargo test --all-features each passed all 19 tests, including the behavioral regression. git diff --check passed, and cargo package --list includes the embedded script. Test-Path returned false without errors for representative https, mailto, and file URLs. Actual GUI folder, document, URL handling and WSL interop were not exercised locally.

Commit Statistics

  • 2 commits contributed to the release.
  • 8 days passed between releases.
  • 1 commit was understood as conventional.
  • 1 unique issue was worked on: #132

Commit Details

... (truncated)

Commits

Updates bitflags from 2.13.1 to 2.13.2

Release notes

Sourced from bitflags's releases.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Changelog

Sourced from bitflags's changelog.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Commits
  • 80ce9b5 Merge pull request #497 from bitflags/cargo/2.13.2
  • 5822493 prepare for 2.13.2 release
  • 48f4f1a Merge pull request #496 from bitflags/fix/rustc-ice
  • 2c0b042 re-pull const declarations outside of nested const
  • c3f8d31 Merge pull request #494 from DanielEScherzer/flags-docs-example
  • 0fc3762 Flags: adjust order of elements in manual implementation example
  • See full diff in compare view

Updates encoding_rs from 0.8.35 to 0.8.41

Commits
  • 0860491 Increment version number to 0.8.41
  • 2e9ea61 Document multiversion 0.9.0 and syn version
  • 6667988 build(deps): accept multiversion 0.9.0
  • 662cb42 Allow split_u16_stride_mut as dead code
  • 55f2530 Increment version number to 0.8.40
  • 71ae1c0 Mention defense in depth when writing to &mut str
  • 12790ab Remove remarks about a standard library bug that has been worked around
  • d477c2a Inline asm not stable on powerpc/powerpc64 at MSRV
  • 6c2fb49 Work around slow _mm_packus_epi16 in Rust 1.96 through 1.98, inclusive
  • 9451175 Zero the output slice upon panic in functions that write to &mut str
  • Additional commits viewable in compare view

Updates bitflags from 2.13.1 to 2.13.2

Release notes

Sourced from bitflags's releases.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Changelog

Sourced from bitflags's changelog.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Commits
  • 80ce9b5 Merge pull request #497 from bitflags/cargo/2.13.2
  • 5822493 prepare for 2.13.2 release
  • 48f4f1a Merge pull request #496 from bitflags/fix/rustc-ice
  • 2c0b042 re-pull const declarations outside of nested const
  • c3f8d31 Merge pull request #494 from DanielEScherzer/flags-docs-example
  • 0fc3762 Flags: adjust order of elements in manual implementation example
  • See full diff in compare view

Updates encoding_rs from 0.8.35 to 0.8.41

Commits
  • 0860491 Increment version number to 0.8.41
  • 2e9ea61 Document multiversion 0.9.0 and syn version
  • 6667988 build(deps): accept multiversion 0.9.0
  • 662cb42 Allow split_u16_stride_mut as dead code
  • 55f2530 Increment version number to 0.8.40
  • 71ae1c0 Mention defense in depth when writing to &mut str
  • 12790ab Remove remarks about a standard library bug that has been worked around
  • d477c2a Inline asm not stable on powerpc/powerpc64 at MSRV
  • 6c2fb49 Work around slow _mm_packus_epi16 in Rust 1.96 through 1.98, inclusive
  • 9451175 Zero the output slice upon panic in functions that write to &mut str
  • Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 19, 2026
@dependabot
chore(deps): bump the production-dependencies group across 2 director…
bc703c0 
…ies with 7 updates

Bumps the production-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` |
| [serde-saphyr](https://github.com/bourumir-wyngs/serde-saphyr) | `1.1.0` | `1.3.0` |
| [ureq](https://github.com/algesten/ureq) | `3.4.0` | `3.4.2` |
| [open](https://github.com/Byron/open-rs) | `5.4.2` | `5.4.4` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.13.1` | `2.13.2` |
| [encoding_rs](https://github.com/hsivonen/encoding_rs) | `0.8.35` | `0.8.41` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.13.1` | `2.13.2` |
| [encoding_rs](https://github.com/hsivonen/encoding_rs) | `0.8.35` | `0.8.41` |

Bumps the production-dependencies group with 1 update in the /acdc-parser/fuzz directory: [serde](https://github.com/serde-rs/serde).


Updates `clap` from 4.6.6 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7)

Updates `serde-saphyr` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/bourumir-wyngs/serde-saphyr/releases)
- [Changelog](https://github.com/bourumir-wyngs/serde-saphyr/blob/master/CHANGELOG.md)
- [Commits](bourumir-wyngs/serde-saphyr@1.1.0...1.3.0)

Updates `ureq` from 3.4.0 to 3.4.2
- [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md)
- [Commits](algesten/ureq@3.4.0...3.4.2)

Updates `open` from 5.4.2 to 5.4.4
- [Release notes](https://github.com/Byron/open-rs/releases)
- [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md)
- [Commits](Byron/open-rs@v5.4.2...v5.4.4)

Updates `bitflags` from 2.13.1 to 2.13.2
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.13.1...2.13.2)

Updates `encoding_rs` from 0.8.35 to 0.8.41
- [Commits](hsivonen/encoding_rs@v0.8.35...v0.8.41)

Updates `bitflags` from 2.13.1 to 2.13.2
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.13.1...2.13.2)

Updates `encoding_rs` from 0.8.35 to 0.8.41
- [Commits](hsivonen/encoding_rs@v0.8.35...v0.8.41)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

---
updated-dependencies:
- dependency-name: bitflags
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bitflags
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: encoding_rs
  dependency-version: 0.8.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: encoding_rs
  dependency-version: 0.8.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: open
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: serde-saphyr
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: ureq
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/production-dependencies-9631761050 branch from 2aed02b to bc703c0 Compare September 20, 2026 17:43

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants