Skip to content

build(deps): bump the cargo-minor group across 1 directory with 9 updates - #70

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-5ff6879d8c
Open

build(deps): bump the cargo-minor group across 1 directory with 9 updates#70
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-5ff6879d8c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor group with 9 updates in the / directory:

Package From To
proc-macro2 1.0.106 1.0.107
quote 1.0.45 1.0.47
clap 4.6.1 4.6.7
tokio 1.52.3 1.53.2
assert_cmd 2.2.1 2.2.2
assert_fs 1.1.3 1.1.4
reflink-copy 0.1.29 0.1.30
tokio-stream 0.1.18 0.1.19
uuid 1.23.1 1.28.0

Updates proc-macro2 from 1.0.106 to 1.0.107

Release notes

Sourced from proc-macro2's releases.

1.0.107

  • Documentation improvements
Commits
  • ed8a549 Release 1.0.107
  • d2550fb Update documentation links to syn 3
  • 0bf387d Resolve redundant_else pedantic clippy lint
  • 949d696 Update actions/upload-artifact@v6 -> v7
  • 294a2bb Update actions/checkout@v6 -> v7
  • cd46c1b Lint clippy::from_iter_instead_of_collect has been removed
  • bb38d83 Update afl fuzzer from 0.17 to 0.18
  • 0f510db Unpin CI miri toolchain
  • b3c5fe3 Pin CI miri to nightly-2026-02-11
  • 7e2a990 Raise required compiler to Rust 1.71
  • Additional commits viewable in compare view

Updates quote from 1.0.45 to 1.0.47

Release notes

Sourced from quote's releases.

1.0.47

  • Documentation improvements

1.0.46

Commits
  • 723dcb4 Release 1.0.47
  • 86e2967 Update documentation links to syn 3
  • b56db87 Update ui test suite to nightly-2026-07-14
  • cba5d96 Update actions/upload-artifact@v6 -> v7
  • bc4caf2 Release 1.0.46
  • dc0e304 Format with rustfmt
  • 712114c Drop arrow from syntax of quote_spanned_with_expanded_span
  • f93ab8a Eliminate quote_spanned_with_expanded_span_as_expr macro
  • 1ff3951 Eliminate __quote_spanned macro
  • 64e913a Unify quote_spanned definitions
  • Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates tokio from 1.52.3 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

  • fs: clamp io_uring read length to u32::MAX (#8572)
  • rt: ignore current_thread task dumps from other runtimes (#8544)
  • rt: preserve io_uring context if a completion waker panics (#8566)
  • sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
  • taskdump: restore deferred leaf wakes during capture (#8445)
  • time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

... (truncated)

Commits
  • ff0c406 chore: prepare Tokio v1.53.2 (#8580)
  • a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
  • ec31a9f chore: prepare Tokio v1.51.5 (#8579)
  • 625c851 sync: assign semaphore permits before emitting tracing event (#8542)
  • 832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
  • 826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
  • 9a47992 process: unregister Windows wait before closing child handle (#8564)
  • 2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
  • 85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • 436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • Additional commits viewable in compare view

Updates assert_cmd from 2.2.1 to 2.2.2

Changelog

Sourced from assert_cmd's changelog.

[2.2.2] - 2026-05-11

Fixes

  • Ensure #[track_caller] works for better panic messages
Commits
  • feece89 chore: Release assert_cmd version 2.2.2
  • 367cdf7 docs: Update changelog
  • a98cc85 Merge pull request #289 from marcospb19/track_caller
  • cd2e167 fix: .success() not reporting panic location
  • 45a1c74 chore(deps): Update Prek to v0.3.13 (#293)
  • f1d9b5b chore(deps): Update Prek to v0.3.12 (#292)
  • 1d34bab Merge pull request #291 from epage/template
  • d9a70ad style: Make clippy happy
  • 4f5b5af chore: Update from _rust template
  • 1e1d586 chore(renovate): Fix the tag
  • Additional commits viewable in compare view

Updates assert_fs from 1.1.3 to 1.1.4

Changelog

Sourced from assert_fs's changelog.

[1.1.4] - 2026-05-26

Performance

  • Default to the old tempfile behavior for faster builds
Commits
  • e943103 chore: Release assert_fs version 1.1.4
  • cb3f854 docs: Update changelog
  • 6c1f14a Merge pull request #170 from cschwan/remove-default-features-tempfile
  • ad41375 chore(deps): Update Prek to v0.4.2 (#171)
  • 738e445 Disable default features of tempfile dependency
  • 7a3ec6a chore(deps): Update Prek to v0.4.1 (#168)
  • a6612ad chore(deps): Update Prek to v0.4.0 (#167)
  • 62c5cd7 chore(deps): Update Prek to v0.3.13 (#166)
  • 0e2bc10 chore(deps): Update Prek to v0.3.12 (#165)
  • bf08330 Merge pull request #164 from epage/template
  • Additional commits viewable in compare view

Updates reflink-copy from 0.1.29 to 0.1.30

Changelog

Sourced from reflink-copy's changelog.

0.1.30 - 2026-06-18

Other

  • Fix reflink: copy over permissions (#174)
Commits

Updates tokio-stream from 0.1.18 to 0.1.19

Commits
  • bc0933c chore: prepare tokio-stream v0.1.19 (#8310)
  • e3786d0 readme: remove obsolete TokioConf notices (#8311)
  • f2189d3 chore: prepare tokio-util v0.7.19 (#8309)
  • 52f2745 net: re-enable tcp_stream::try_read_buf test for WASI (#8305)
  • ac6869a rt: remove unstable cfgs leftovers after local runtime stabilization (#8298)
  • 75fef53 chore: prepare Tokio v1.53.1 (#8303)
  • ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
  • eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
  • 91d3b4c time: fix alt timer cancellation and insertion race (#8252)
  • a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
  • Additional commits viewable in compare view

Updates uuid from 1.23.1 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

v1.26.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

v1.26.0

What's Changed

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

... (truncated)

Commits
  • 276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
  • 4b3b9f5 prepare for 1.28.0 release
  • cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
  • 784a022 Inline expected tokens in optional compact serde test
  • a5678c3 Simplify optional serde adapter tests to option tokens
  • 638a518 Refactor optional serde adapter tests and share byte wrapper
  • b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
  • ffd8ec5 prepare for 1.27.0 release
  • 654fa5b Add optional serde format adapters
  • 4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 1, 2026
@socket-security

socket-security Bot commented Oct 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedcargo/​tokio@​1.52.3 ⏵ 1.53.25810093100100
Updatedcargo/​assert_cmd@​2.2.1 ⏵ 2.2.27910093100100
Updatedcargo/​proc-macro2@​1.0.106 ⏵ 1.0.1078010093100100
Updatedcargo/​quote@​1.0.45 ⏵ 1.0.478210093100100
Updatedcargo/​assert_fs@​1.1.3 ⏵ 1.1.410010093 +4100100
Updatedcargo/​clap@​4.6.1 ⏵ 4.6.79910093100100
Updatedcargo/​reflink-copy@​0.1.29 ⏵ 0.1.309910093100100
Updatedcargo/​tokio-stream@​0.1.18 ⏵ 0.1.1910010093100100
Updatedcargo/​uuid@​1.23.1 ⏵ 1.28.0100 +110093100100
Addedcargo/​syn@​3.0.9100100100100100

View full report

@dependabot
build(deps): bump the cargo-minor group across 1 directory with 9 upd…
56a148b 
…ates

Bumps the cargo-minor group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.106` | `1.0.107` |
| [quote](https://github.com/dtolnay/quote) | `1.0.45` | `1.0.47` |
| [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.7` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.2` |
| [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.2.1` | `2.2.2` |
| [assert_fs](https://github.com/assert-rs/assert_fs) | `1.1.3` | `1.1.4` |
| [reflink-copy](https://github.com/cargo-bins/reflink-copy) | `0.1.29` | `0.1.30` |
| [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.18` | `0.1.19` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.23.1` | `1.28.0` |



Updates `proc-macro2` from 1.0.106 to 1.0.107
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.106...1.0.107)

Updates `quote` from 1.0.45 to 1.0.47
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.45...1.0.47)

Updates `clap` from 4.6.1 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.7)

Updates `tokio` from 1.52.3 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.2)

Updates `assert_cmd` from 2.2.1 to 2.2.2
- [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_cmd@v2.2.1...v2.2.2)

Updates `assert_fs` from 1.1.3 to 1.1.4
- [Changelog](https://github.com/assert-rs/assert_fs/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_fs@v1.1.3...v1.1.4)

Updates `reflink-copy` from 0.1.29 to 0.1.30
- [Release notes](https://github.com/cargo-bins/reflink-copy/releases)
- [Changelog](https://github.com/cargo-bins/reflink-copy/blob/main/CHANGELOG.md)
- [Commits](cargo-bins/reflink-copy@v0.1.29...v0.1.30)

Updates `tokio-stream` from 0.1.18 to 0.1.19
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-stream-0.1.18...tokio-stream-0.1.19)

Updates `uuid` from 1.23.1 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.23.1...v1.28.0)

---
updated-dependencies:
- dependency-name: assert_cmd
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: assert_fs
  dependency-version: 1.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: proc-macro2
  dependency-version: 1.0.107
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: quote
  dependency-version: 1.0.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: reflink-copy
  dependency-version: 0.1.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: tokio-stream
  dependency-version: 0.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
- dependency-name: uuid
  dependency-version: 1.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the cargo-minor group with 9 updates build(deps): bump the cargo-minor group across 1 directory with 9 updates Oct 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-minor-5ff6879d8c branch from a172a6d to 56a148b Compare October 13, 2026 18:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants