Skip to content

cargo: bump the cargo-dependencies group across 1 directory with 9 updates#8135

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/cargo-dependencies-33ad7f8327
Closed

cargo: bump the cargo-dependencies group across 1 directory with 9 updates#8135
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/cargo-dependencies-33ad7f8327

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Nov 25, 2025

Bumps the cargo-dependencies group with 9 updates in the / directory:

Package From To
clap 4.5.51 4.5.53
clap_complete 4.5.60 4.5.61
gix 0.74.1 0.75.0
hashbrown 0.16.0 0.16.1
indexmap 2.12.0 2.12.1
insta 1.43.2 1.44.1
pest 2.8.3 2.8.4
pest_derive 2.8.3 2.8.4
syn 2.0.110 2.0.111

Updates clap from 4.5.51 to 4.5.53

Release notes

Sourced from clap's releases.

v4.5.53

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

v4.5.52

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup
Changelog

Sourced from clap's changelog.

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup
Commits
  • 3716f9f chore: Release
  • 613b69a docs: Update changelog
  • d117f7a Merge pull request #6028 from epage/arg
  • cb8255d feat(builder): Allow quoted id's for arg macro
  • 1036060 Merge pull request #6025 from AldaronLau/typos-in-faq
  • 2fcafc0 docs: Fix minor grammar issues in FAQ
  • a380b65 Merge pull request #6023 from epage/template
  • 4d7ab14 chore: Update from _rust/main template
  • b8a7ea4 chore(deps): Update Rust Stable to v1.87 (#18)
  • f9842b3 chore: Avoid MSRV problems out of the box
  • Additional commits viewable in compare view

Updates clap_complete from 4.5.60 to 4.5.61

Commits
  • 8d87e70 chore: Release
  • fe99e5a docs: Update changelog
  • 596e98c Merge pull request #6129 from cooronx/feat_default_values_if_and_default_valu...
  • c2ced1a feat: Add default_values_if and default_values_ifs to match default_values
  • e82e1ed chore: Release
  • 558e374 docs: Update changelog
  • dd7cafe Merge pull request #6184 from epage/conflict
  • 1823cef fix(parser): Don't panic when subcommands conflict with groups
  • dcc2846 test(parser): Show panic
  • bb0b2f1 Merge pull request #6181 from jgreitemann/jg/kqvvzuzuzywv
  • Additional commits viewable in compare view

Updates gix from 0.74.1 to 0.75.0

Release notes

Sourced from gix's releases.

gix v0.75.0

New Features

  • add Repository::worktree_proxy_by_id(id). That way it's more straightforward to obtain information about worktrees which are known by ID.
  • add Handshake::ref_map() to produce a ref-map from a V1 or V2 handshake.
  • add Repository::set_workdir(). Force this repository instance to use the given worktree directory.

Bug Fixes

  • refspec for shallow clones uses a single-branch When doing shallow clones (depth != NoChange), it now uses a single-branch refspec instead of fetching all branches. This matches Git's behavior and significantly reduces the repository size for shallow clones.

    For shallow clones:

    • If ref_name is specified: uses that branch
    • Otherwise: attempts to detect from Protocol V1 handshake or falls back to init.defaultBranch config or "main"

    This addresses issue #2227 where gix clone --depth 1 was creating repositories ~130MB vs Git's ~70MB due to fetching all branches.

Bug Fixes (BREAKING)

  • respect diff.algorithm in Repository::blame_file
  • make gix-transport I/O mode features additive

Refactor (BREAKING)

  • simplify gix-protocol handshake API by avoiding duplicates that remove the server parameter.
  • hoist handshake ref handling out of transport code
  • store all_refspecs in Options
  • store fetch refspecs in Options
  • flatten RefMap::new() arguments

Commit Statistics

  • 35 commits contributed to the release.
  • 11 commits were understood as conventional.
  • 1 unique issue was worked on: #2227

Commit Details

... (truncated)

Commits
  • 82ff92f Release gix-date v0.11.0, gix-actor v0.36.0, gix-path v0.10.22, gix-object v0...
  • e93e84e Merge pull request #2262 from GitoxideLabs/copilot/fix-non-blocking-piped-data
  • 1aaa6fa refactor
  • a457393 Implement on-demand thread for non-blocking piped data processing
  • 896cb4d Merge pull request #2261 from GitoxideLabs/copilot/replace-url-dependency
  • a9a4d4d Adapt to changes in gix-url
  • 402bcc7 feat: Add Scheme::default_port()
  • f679c13 refactor
  • b34d1d2 feat: Replace url dependency with minimal custom implementation
  • dc2794a Merge pull request #2263 from GitoxideLabs/report
  • Additional commits viewable in compare view

Updates hashbrown from 0.16.0 to 0.16.1

Release notes

Sourced from hashbrown's releases.

v0.16.1

Added

  • Added HashTable methods related to the raw bucket index (#657)
  • Added VacantEntryRef::insert_with_key (#579)

Changed

  • Removed specialization for Copy types (#662)
  • The get_many_mut family of methods have been renamed to get_disjoint_mut to match the standard library. The old names are still present for now, but deprecated. (#648)
  • Recognize and use over-sized allocations when using custom allocators. (#523)
  • Depend on serde_core instead of serde. (#649)
  • Optimized collect on rayon parallel iterators. (#652)
Changelog

Sourced from hashbrown's changelog.

0.16.1 - 2025-11-20

Added

  • Added HashTable methods related to the raw bucket index (#657)
  • Added VacantEntryRef::insert_with_key (#579)

Changed

  • Removed specialization for Copy types (#662)
  • The get_many_mut family of methods have been renamed to get_disjoint_mut to match the standard library. The old names are still present for now, but deprecated. (#648)
  • Recognize and use over-sized allocations when using custom allocators. (#523)
  • Depend on serde_core instead of serde. (#649)
  • Optimized collect on rayon parallel iterators. (#652)
Commits
  • 1876e4f Add PR link for get_disjoint_mut rename
  • 2e363b6 Update CHANGELOG for version 0.16.1
  • 88d54a5 chore: release v0.16.1
  • 21be06c Merge pull request #657 from cuviper/table-bucket
  • af971f3 Add T to bucket iterators and inline their methods
  • 7ccb6d6 Add HashTable::iter_buckets and iter_hash_buckets
  • aeb7996 Add HashTable::get_bucket_entry_unchecked
  • e885a4e get_bucket_entry -> Result\<OccupiedEntry, AbsentEntry>
  • dabfbef Add get_bucket_unchecked and get_bucket_unchecked_mut
  • 42d9377 Make HashTable entries use Tag instead of a full hash
  • Additional commits viewable in compare view

Updates indexmap from 2.12.0 to 2.12.1

Changelog

Sourced from indexmap's changelog.

2.12.1 (2025-11-20)

  • Simplified a lot of internals using hashbrown's new bucket API.
Commits

Updates insta from 1.43.2 to 1.44.1

Release notes

Sourced from insta's releases.

1.44.1

Release Notes

  • Add --dnd alias for --disable-nextest-doctest flag to make it easier to silence the deprecation warning. #822
  • Update cargo-dist to 0.30.2 and fix Windows runner to use windows-2022. #821

Install cargo-insta 1.44.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.44.1/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.44.1/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.44.1

File Platform Checksum
cargo-insta-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
cargo-insta-x86_64-apple-darwin.tar.xz Intel macOS checksum
cargo-insta-x86_64-pc-windows-msvc.zip x64 Windows checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

1.44.0

Release Notes

Changes in 1.44.0

  • Added non-interactive snapshot review and reject modes for use in non-TTY environments (LLMs, CI pipelines, scripts) #815
  • Add `--disable-nextest-doctest` flag with deprecation warning #803
  • Add ergonomic `--test-runner-fallback` / `--no-test-runner-fallback` flags #811
  • Apply redactions to snapshot metadata #813
  • Remove confusing 'previously unseen snapshot' message #812
  • Speed up JSON float rendering #806 (@​nyurik)
  • Allow globset version up to 0.4.16 #810 (@​g0hl1n)
  • Improve documentation #814 (@​tshepang)
  • Enforce starting newlines in assertions #563

Install

... (truncated)

Changelog

Sourced from insta's changelog.

1.44.1

  • Add --dnd alias for --disable-nextest-doctest flag to make it easier to silence the deprecation warning. #822
  • Update cargo-dist to 0.30.2 and fix Windows runner to use windows-2022. #821

1.44.0

  • Added non-interactive snapshot review and reject modes for use in non-TTY environments (LLMs, CI pipelines, scripts). cargo insta review --snapshot <path> and cargo insta reject --snapshot <path> now work without a terminal. Enhanced pending-snapshots output with usage instructions and workspace-relative paths. #815
  • Add --disable-nextest-doctest flag to cargo insta test to disable running doctests with nextest. Shows a deprecation warning when nextest is used with doctests without this flag, to prepare cargo insta to no longer run a separate doctest process when using nextest in the future. #803
  • Add ergonomic --test-runner-fallback / --no-test-runner-fallback flags to cargo insta test. #811
  • Apply redactions to snapshot metadata. #813
  • Remove confusing 'previously unseen snapshot' message. #812
  • Speed up JSON float rendering. #806 (@​nyurik)
  • Allow globset version up to 0.4.16. #810 (@​g0hl1n)
  • Improve documentation. #814 (@​tshepang)
  • We no longer trim starting newlines during assertions, which allows asserting the number of leading newlines match. Existing assertions with different leading newlines will pass and print a warning suggesting running with --force-update-snapshots. They may fail in the future. (Note that we still currently allow differing trailing newlines, though may adjust this in the future). #563
Commits
  • ba9ea51 Prepare release 1.44.1 (#823)
  • 92342f9 Add --dnd alias for --disable-nextest-doctest flag (#822)
  • c1ca488 Update cargo-dist to 0.30.2 and fix Windows runner (#821)
  • 5da894d Prepare release 1.44.0 (#820)
  • d8deb2f Add LLM-friendly non-interactive snapshot management (#815)
  • 783ebc2 feat(vscode-ext): support source opening (#817)
  • dd34e41 chore: update ron to 0.12 (#819)
  • af48633 Support -r shorthand for --release, for compatibility with cargo test (...
  • 7de4930 Apply redactions to snapshot metadata (#813)
  • 90f6ad8 Fix backward compatibility for --test-runner-fallback true syntax (#816)
  • Additional commits viewable in compare view

Updates pest from 2.8.3 to 2.8.4

Release notes

Sourced from pest's releases.

v2.8.4

What's Changed

New Contributors

Full Changelog: pest-parser/pest@v2.8.3...v2.8.4

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:

...
pest_derive = { version = "2.8", features = ["grammar-extras"] }
Commits

Updates pest_derive from 2.8.3 to 2.8.4

Release notes

Sourced from pest_derive's releases.

v2.8.4

What's Changed

New Contributors

Full Changelog: pest-parser/pest@v2.8.3...v2.8.4

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:

...
pest_derive = { version = "2.8", features = ["grammar-extras"] }
Commits

Updates syn from 2.0.110 to 2.0.111

Release notes

Sourced from syn's releases.

2.0.111

  • Allow first argument of braced!, bracketed!, parenthesized! to be an otherwise unused variable (#1946)
Commits
  • 4e50867 Release 2.0.111
  • c57334b Merge pull request #1946 from dtolnay/unusedgroup
  • 6a43384 Suppress unused variable warning on variables used in group macro
  • 7ff6c86 Update actions/checkout@v5 -> v6
  • 59ce6bb Update test suite to nightly-2025-11-20
  • 3d91b8c Update test suite to nightly-2025-11-11
  • 2d87fca Delete version requirement from readme
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 25, 2025
@dependabot dependabot Bot requested a review from a team as a code owner November 25, 2025 18:26
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 25, 2025
@github-actions github-actions Bot enabled auto-merge November 25, 2025 18:26
@thoughtpolice
Copy link
Copy Markdown
Member

I think this is the reason our insta snapshots changed: mitsuhiko/insta#563 -- not a big deal, in case anyone wants to fix it. Otherwise I'll do it later today at the end of work.

@ilyagr
Copy link
Copy Markdown
Contributor

ilyagr commented Nov 25, 2025

The insta change should be covered by #8119 or #8122.

@ilyagr
Copy link
Copy Markdown
Contributor

ilyagr commented Nov 25, 2025

@dependabot unignore jsonschema

(I think I may have told dependabot to ignore some minor versions of it before, this is no longer useful and never really worked)

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Nov 25, 2025

OK, I will stop ignoring the jsonschema dependency.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Nov 25, 2025

No dependency name (jsonschema) or ignore conditions found to unignore.

@dependabot dependabot Bot force-pushed the dependabot/cargo/cargo-dependencies-33ad7f8327 branch from a8ed4e3 to 836e001 Compare November 25, 2025 22:52
…dates

Bumps the cargo-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.51` | `4.5.53` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.5.60` | `4.5.61` |
| [gix](https://github.com/GitoxideLabs/gitoxide) | `0.74.1` | `0.75.0` |
| [hashbrown](https://github.com/rust-lang/hashbrown) | `0.16.0` | `0.16.1` |
| [indexmap](https://github.com/indexmap-rs/indexmap) | `2.12.0` | `2.12.1` |
| [insta](https://github.com/mitsuhiko/insta) | `1.43.2` | `1.44.1` |
| [pest](https://github.com/pest-parser/pest) | `2.8.3` | `2.8.4` |
| [pest_derive](https://github.com/pest-parser/pest) | `2.8.3` | `2.8.4` |
| [syn](https://github.com/dtolnay/syn) | `2.0.110` | `2.0.111` |



Updates `clap` from 4.5.51 to 4.5.53
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.51...clap_complete-v4.5.53)

Updates `clap_complete` from 4.5.60 to 4.5.61
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.5.61)

Updates `gix` from 0.74.1 to 0.75.0
- [Release notes](https://github.com/GitoxideLabs/gitoxide/releases)
- [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md)
- [Commits](GitoxideLabs/gitoxide@gix-v0.74.1...gix-v0.75.0)

Updates `hashbrown` from 0.16.0 to 0.16.1
- [Release notes](https://github.com/rust-lang/hashbrown/releases)
- [Changelog](https://github.com/rust-lang/hashbrown/blob/master/CHANGELOG.md)
- [Commits](rust-lang/hashbrown@v0.16.0...v0.16.1)

Updates `indexmap` from 2.12.0 to 2.12.1
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md)
- [Commits](indexmap-rs/indexmap@2.12.0...2.12.1)

Updates `insta` from 1.43.2 to 1.44.1
- [Release notes](https://github.com/mitsuhiko/insta/releases)
- [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md)
- [Commits](mitsuhiko/insta@1.43.2...1.44.1)

Updates `pest` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/pest-parser/pest/releases)
- [Commits](pest-parser/pest@v2.8.3...v2.8.4)

Updates `pest_derive` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/pest-parser/pest/releases)
- [Commits](pest-parser/pest@v2.8.3...v2.8.4)

Updates `syn` from 2.0.110 to 2.0.111
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.110...2.0.111)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: clap_complete
  dependency-version: 4.5.61
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: gix
  dependency-version: 0.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: hashbrown
  dependency-version: 0.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: indexmap
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: insta
  dependency-version: 1.44.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: pest
  dependency-version: 2.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: pest_derive
  dependency-version: 2.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: syn
  dependency-version: 2.0.111
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/cargo-dependencies-33ad7f8327 branch from 836e001 to de2b8de Compare November 26, 2025 00:58
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Nov 26, 2025

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 26, 2025
auto-merge was automatically disabled November 26, 2025 01:36

Pull request was closed

@dependabot dependabot Bot deleted the dependabot/cargo/cargo-dependencies-33ad7f8327 branch November 26, 2025 01:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants