Skip to content

chore(deps): bump the all group across 1 directory with 10 updates#226

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-e9fb448fc2
Closed

chore(deps): bump the all group across 1 directory with 10 updates#226
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-e9fb448fc2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all group with 10 updates in the / directory:

Package From To
clap 4.6.0 4.6.1
gitlab 0.1810.0 0.1811.0
octocrab 0.49.7 0.49.9
open 5.3.3 5.3.4
pbkdf2 0.12.2 0.13.0
reqwest 0.13.2 0.13.3
rpassword 7.4.0 7.5.2
rustls 0.23.38 0.23.40
sha2 0.10.9 0.11.0
tokio 1.51.1 1.52.1

Updates clap from 4.6.0 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Commits
  • 1420275 chore: Release
  • d2c817d docs: Update changelog
  • f88c94e Merge pull request #6341 from epage/sep
  • acbb822 fix(complete): Reduce risk of conflict with actual subcommands
  • a49fadb refactor(complete): Pull out subcommand separator
  • ddc008b Merge pull request #6332 from epage/update
  • 497dc50 chore: Update compatible dependencies
  • dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
  • 54bdaa3 chore(deps): Update j178/prek-action action to v2
  • f0d30d9 chore: Release
  • Additional commits viewable in compare view

Updates gitlab from 0.1810.0 to 0.1811.0

Updates octocrab from 0.49.7 to 0.49.9

Release notes

Sourced from octocrab's releases.

v0.49.9

Other

  • Add 'tokio' dependency to retry configuration (#875)

v0.49.8

Added

  • add structured GraphQL response and error (#874)

Fixed

  • Expose OctoBody (#870)
Changelog

Sourced from octocrab's changelog.

0.49.9 - 2026-04-26

Other

  • Add 'tokio' dependency to retry configuration (#875)

0.49.8 - 2026-04-24

Added

  • add structured GraphQL response and error (#874)

Fixed

  • Expose OctoBody (#870)
Commits

Updates open from 5.3.3 to 5.3.4

Release notes

Sourced from open's releases.

v5.3.4

Bug Fixes

  • align with_detached() implementation with with() On macOS, /usr/bin/open is natively detached. This commit changes with_detached to use the same logic as with() .avoid double detachment to prevent silent failure

Commit Statistics

  • 6 commits contributed to the release.
  • 1 commit was understood as conventional.
  • 0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 1 time to make code idiomatic.

Commit Details

  • Uncategorized
    • Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure (7db5738)
    • Align with_detached() implementation with with() (8e122d4)
    • Merge pull request #117 from ChrisDenton/absolute (20ea175)
    • Thanks clippy (on Windows) (7faae87)
    • Enable clippy deny on CI, with all features, but allow incompatible MRSV there (1ab9c47)
    • Use absolute instead of canonicalize (5604cee)
Changelog

Sourced from open's changelog.

5.3.4 (2026-04-19)

Bug Fixes

  • align with_detached() implementation with with() On macOS, /usr/bin/open is natively detached. This commit changes with_detached to use the same logic as with() .avoid double detachment to prevent silent failure

Commit Statistics

  • 6 commits contributed to the release.
  • 1 commit was understood as conventional.
  • 0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 1 time to make code idiomatic.

Commit Details

  • Uncategorized
    • Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure (7db5738)
    • Align with_detached() implementation with with() (8e122d4)
    • Merge pull request #117 from ChrisDenton/absolute (20ea175)
    • Thanks clippy (on Windows) (7faae87)
    • Enable clippy deny on CI, with all features, but allow incompatible MRSV there (1ab9c47)
    • Use absolute instead of canonicalize (5604cee)
Commits
  • 7bd519c Release open v5.3.4
  • 7db5738 Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure
  • 8e122d4 fix(macos): align with_detached() implementation with with()
  • 20ea175 Merge pull request #117 from ChrisDenton/absolute
  • 7faae87 Thanks clippy (on Windows)
  • 1ab9c47 Enable clippy deny on CI, with all features, but allow incompatible MRSV there
  • 5604cee Use absolute instead of canonicalize
  • See full diff in compare view

Updates pbkdf2 from 0.12.2 to 0.13.0

Commits

Updates reqwest from 0.13.2 to 0.13.3

Release notes

Sourced from reqwest's releases.

v0.13.3

tl;dr

  • Fix CertificateRevocationList parsing of PEM values.
  • Fix logging in resolver to only show host, not full URL.
  • Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
  • Fix HTTP/3 to handle STOP_SENDING as not an error.
  • Fix HTTP/3 pool to remove timed out QUIC connections.
  • Fix HTTP/3 connection establishment picking IPv4 and IPv6.
  • Upgrade rustls-platform-verifier.
  • (wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.2...v0.13.3

Changelog

Sourced from reqwest's changelog.

v0.13.3

  • Fix CertificateRevocationList parsing of PEM values.
  • Fix logging in resolver to only show host, not full URL.
  • Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
  • Fix HTTP/3 to handle STOP_SENDING as not an error.
  • Fix HTTP/3 pool to remove timed out QUIC connections.
  • Fix HTTP/3 connection establishment picking IPv4 and IPv6.
  • Upgrade rustls-platform-verifier.
  • (wasm) Only use wasm-bindgen on unknown-* targets.
Commits

Updates rpassword from 7.4.0 to 7.5.2

Release notes

Sourced from rpassword's releases.

v7.5.2

Fixes a Unicode parsing bug which could lead to unwarranted panic (conradkleinespel/rpassword@6c19a1e).

Backwards compatible. No breaking change.

v7.5.1

This release fixes a cross-platform compilation issue that appeared in v.7.5.0 (conradkleinespel/rpassword@60ee071).

Thanks @​aharpervc for bringing this to my attention in conradkleinespel/rpassword#126.

Backwards compatible. No breaking change.

v7.5.0

This release comes with lots of stuff. It should be fully backward compatible.

New features

  • Support for masking or partially masking a password as it's being typed. Thank you, @​chipsenkbeil, for your contribution.
  • New API. The documentation has been vastly improved to support this, see https://docs.rs/rpassword/. To sum up, you can now call read_password_with_config(config) and there is a ConfigBuilder that allows you to configure how passwords should be read. This makes the library much more flexible and means new options will be added without breaking existing code.

Fixes

  • Fix for CVE-2025-64170 which affects rpassword on versions v7.4.0 and below. Thank you, @​squell and @​DevLaTron, for reporting this.
  • Better support for multibyte characters and more reliable handling of control characters and terminal escape sequences. Thank you again, @​chipsenkbeil, for your contribution.

Deprecations

  • _from_bufread functions have been deprecated. You are encouraged to migrate to _with_config functions. See UPGRADE.md as well as the documentation which has examples that you can most likely drop into your code without other changes.

Misc

  • Update of the windows-sys dependency.
  • Update Rust edition from 2018 to 2024.
  • Better cross-platform testing, through more unit tests and a CI that runs Linux, Windows and Wasm.

Feedback is very much welcome.

Commits
  • e176edc bump to 7.5.2
  • 6c19a1e make reading utf8 chars more reliable
  • 1ecf07d bump to 7.5.1
  • 60ee071 remove errno clean up, not cross-platform
  • 2d9873e release v7.5.0
  • e67e3b4 removes commented out code
  • fdde958 remove .idea from .gitignore
  • d531c59 allow reading from any Read and writing to any Write
  • 205dfb2 differentiate Input and Output targets
  • 6aa333a make PasswordFeedback internal though ConfigBuilder
  • Additional commits viewable in compare view

Updates rustls from 0.23.38 to 0.23.40

Commits
  • b44c09f Prepare 0.23.40
  • e7a555f Prefer Ord::max to core::cmp
  • c0005be ech: base inner name padding on actual extension
  • 4e49529 ech: test inner name padding
  • 3e06ef1 ech: add both name and "gross" padding
  • c574ffd ech: avoid short-lived allocation for padding
  • 8bf935c ech: pop comment from match arm
  • 9088004 ech: expand maximum_name_length to usize ASAP
  • a612901 Default require_ems based on CryptoProvider FIPS status
  • 0541605 Cargo: version 0.23.38 -> 0.23.39
  • Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates tokio from 1.51.1 to 1.52.1

Release notes

Sourced from tokio's releases.

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

  • runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

  • io: AioSource::register_borrowed for I/O safety support (#7992)
  • net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

  • runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)
  • taskdump: add trace_with() for customized task dumps (#8025)
  • taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)
  • fs: support io_uring in AsyncRead for File (#7907)

Changed

  • runtime: improve spawn_blocking scalability with sharded queue (#7757)
  • runtime: use compare_exchange_weak() in worker queue (#8028)

Fixed

  • runtime: overflow second half of tasks when local queue is filled instead of first half (#8029)

Documented

  • docs: fix typo in oneshot::Sender::send docs (#8026)
  • docs: hide #[tokio::main] attribute in the docs of sync::watch (#8035)
  • net: add docs on ConnectionRefused errors with UDP sockets (#7870)

#7757: tokio-rs/tokio#7757 #7870: tokio-rs/tokio#7870 #7907: tokio-rs/tokio#7907 #7992: tokio-rs/tokio#7992 #8010: tokio-rs/tokio#8010 #8025: tokio-rs/tokio#8025 #8026: tokio-rs/tokio#8026 #8028: tokio-rs/tokio#8028 #8029: tokio-rs/tokio#8029

... (truncated)

Commits
  • 905c146 chore: prepare to release v1.52.1 (#8059)
  • 56aaa43 rt: revert #7757 to fix regression in spawn_blocking (#8057)
  • 57ff47a ci: update trybuild to expect output from rustc 1.95.0 (#8058)
  • 812de3e ci: bump taiki-e/cache-cargo-install-action from 1 to 3 (#8053)
  • ba82e73 ci: use Dependabot to keep github actions up to date (#8052)
  • 2e85f9d ci: replace cirrus-ci with freebsd-vm (#8041)
  • a7e1cd8 ci: update GitHub Actions workflows to use latest tool versions (#8047)
  • 5f7be0a chore: perpare 1.52.0 (#8045)
  • 36d12d2 taskdump: allow impl FnMut() in taskdumps instead of just fn() (#8040)
  • f943312 fs: support io-uring in AsyncRead for File (#7907)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the all group across 1 directory with 10 updates
3e1a79f 
Bumps the all group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.1` |
| gitlab | `0.1810.0` | `0.1811.0` |
| [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.49.7` | `0.49.9` |
| [open](https://github.com/Byron/open-rs) | `5.3.3` | `5.3.4` |
| [pbkdf2](https://github.com/RustCrypto/password-hashes) | `0.12.2` | `0.13.0` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.2` | `0.13.3` |
| [rpassword](https://github.com/conradkleinespel/rpassword) | `7.4.0` | `7.5.2` |
| [rustls](https://github.com/rustls/rustls) | `0.23.38` | `0.23.40` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.51.1` | `1.52.1` |



Updates `clap` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.1)

Updates `gitlab` from 0.1810.0 to 0.1811.0

Updates `octocrab` from 0.49.7 to 0.49.9
- [Release notes](https://github.com/XAMPPRocky/octocrab/releases)
- [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md)
- [Commits](XAMPPRocky/octocrab@v0.49.7...v0.49.9)

Updates `open` from 5.3.3 to 5.3.4
- [Release notes](https://github.com/Byron/open-rs/releases)
- [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md)
- [Commits](Byron/open-rs@v5.3.3...v5.3.4)

Updates `pbkdf2` from 0.12.2 to 0.13.0
- [Commits](RustCrypto/password-hashes@pbkdf2-v0.12.2...pbkdf2-v0.13.0)

Updates `reqwest` from 0.13.2 to 0.13.3
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.13.2...v0.13.3)

Updates `rpassword` from 7.4.0 to 7.5.2
- [Release notes](https://github.com/conradkleinespel/rpassword/releases)
- [Commits](conradkleinespel/rpassword@v7.4.0...v7.5.2)

Updates `rustls` from 0.23.38 to 0.23.40
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.38...v/0.23.40)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `tokio` from 1.51.1 to 1.52.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.51.1...tokio-1.52.1)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: gitlab
  dependency-version: 0.1811.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: octocrab
  dependency-version: 0.49.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: open
  dependency-version: 5.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: pbkdf2
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: reqwest
  dependency-version: 0.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rpassword
  dependency-version: 7.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: rustls
  dependency-version: 0.23.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: tokio
  dependency-version: 1.52.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels May 4, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 25, 2026
@dependabot dependabot Bot deleted the dependabot/cargo/all-e9fb448fc2 branch May 25, 2026 01:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants