build(deps): bump the all group across 1 directory with 19 updates by dependabot[bot] · Pull Request #14 · timorunge/lore

dependabot · 2026-07-27T22:22:25Z

Bumps the all group with 18 updates in the / directory:

Package	From	To
tokio	`1.52.3`	`1.53.1`
serde	`1.0.228`	`1.0.229`
serde_json	`1.0.150`	`1.0.151`
anyhow	`1.0.102`	`1.0.104`
thiserror	`2.0.18`	`2.0.19`
regex	`1.12.4`	`1.13.1`
ignore	`0.4.26`	`0.4.31`
globset	`0.4.18`	`0.4.19`
schemars	`1.2.1`	`1.2.2`
quick-xml	`0.40.1`	`0.41.0`
futures	`0.3.32`	`0.3.33`
kreuzberg	`4.9.9`	`4.10.2`
rmcp	`1.7.0`	`2.2.0`
libc	`0.2.186`	`0.2.189`
clap	`4.6.1`	`4.6.4`
clap_complete	`4.6.5`	`4.6.8`
indicatif	`0.18.4`	`0.18.6`
tokio-util	`0.7.18`	`0.7.19`

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

time: fix alt timer cancellation and insertion race (#8252)

Documented

runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)

metrics: add task schedule latency metric (#7986)

net: add SocketAddr methods to Unix sockets (#8144)

Changed

io: add #[inline] to IO trait impls for in-memory types (#8242)

net: implement UCred::pid on FreeBSD (#8086)

net: support Nuttx target os (#8259)

signal: refactor global variables on Windows (#8231)

sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)

taskdump: support taskdumps on s390x (#8192)

time: add #[track_caller] to timeout_at() (#8077)

time: consolidate mutex locks on spurious poll (#8124)

time: defer waker clone on spurious poll (#8107)

time: move lazy-registration state into Sleep (#8132)

tracing: remove unnecessary span clone (#8126)

Fixed

io: do not treat zero-length reads as EOF in Chain (#8251)

net: use getpeereid for QNX peer credentials (#8270)

runtime: avoid illegal state in FastRand (#8078)

sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)

taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)

time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

75fef53 chore: prepare Tokio v1.53.1 (#8303)
ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
91d3b4c time: fix alt timer cancellation and insertion race (#8252)
a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
be689a3 chore: prepare Tokio v1.53.0 (#8294)
50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
efdba5f chore: prepare Tokio v1.52.4 (#8289)
b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

Commits

de85007 Release 1.0.151
3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
cf16f75 Add RawValue::from_string_unchecked
827a315 Update actions/upload-artifact@v6 -> v7
cea36a5 Update actions/checkout@v6 -> v7
See full diff in compare view

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

Update syn dev-dependency to version 3

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

1dbe186 Release 1.0.104
f6479f8 Update to syn 3
5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

Update to syn 3

Commits

e13a785 Release 2.0.19
0a0e76c Update to syn 3
ec42ea7 Update actions/upload-artifact@v6 -> v7
4178c4a Update actions/checkout@v6 -> v7
7214e0e Ignore items_after_statements pedantic clippy lint in test
febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
c50e387 chore: improve thiserror maintenance path
d4a2507 Raise minimum tested compiler to rust 1.85
99e8a6c Unpin CI miri toolchain
9ac165c Pin CI miri to nightly-2026-02-11
Additional commits viewable in compare view

Updates regex from 1.12.4 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

#1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:
use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);
Improvements:

#709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

Commits

2b52759 1.13.1, redux
40e9823 1.13.1
75fcb96 changelog: 1.13.1
64ad0b6 automata: fix bug in reverse suffix/inner optimization
fa91c31 automata: fix a bug caught by Codex review
30390ec automata: formatting tweaks
821a8eb automata: refactor reverse suffix/inner search slightly
10afd70 automata: expose the extracted literals for inner literal extraction
8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
5524f02 test: add regression tests for failed reverse suffix/inner optimizations
Additional commits viewable in compare view

Updates ignore from 0.4.26 to 0.4.31

Commits

59e318f ignore-0.4.31
a9dc222 cargo: set rust-version on all crates
be739c7 index: add grep-index crate
d958105 cargo: add new build-time unstable-index feature
227381d ignore-0.4.30
b621e65 ignore: add incremental checking
c55818f ignore: more pathutil clean-up
6e527e9 ignore: add routine for checking if a path is hidden or not
626b895 ignore: refactor is_hidden
0d7054d ignore: fix deadlock when visitor panics
Additional commits viewable in compare view

Updates globset from 0.4.18 to 0.4.19

Commits

28c687d globset-0.4.19
f03c67e changelog: 15.2.0
324f7ef ignore-0.4.28
241b87b ignore: support GIT_CONFIG_GLOBAL and GIT_CONFIG_SYSTEM for `core.exclude...
b6849da ignore/walk: add WalkBuilder::empty and WalkBuilder::from_iter
8bca2eb doc: fix typo in man page
61a9fd8 doc: fix typo
e7b0f89 lint: use cloned() or copied() when we can
767086d searcher: hint at sequential memory map reading
9548e86 ignore/types: add PKGBUILD type
Additional commits viewable in compare view

Updates schemars from 1.2.1 to 1.2.2

Release notes

Sourced from schemars's releases.

v1.2.2

Update to syn 3 in schemars_derive

Changelog

Sourced from schemars's changelog.

[1.2.2] - 2026-07-27

Update to syn 3 in schemars_derive

Commits

ed61863 v1.2.2
ae618c3 Update syn to v3 (#528)
c072ea0 docs: add missing attributes to table of contents (#517)
015272f Clippy fix (#512)
944f727 Bump bytes from 1.10.1 to 1.11.1 (#507)
See full diff in compare view

Updates quick-xml from 0.40.1 to 0.41.0

Release notes

Sourced from quick-xml's releases.

v0.41.0 - Secuirity fixes

What's Changed

New Features

#970: Add NsReader::resolver_mut() and NamespaceResolver::{max_declarations_per_element, set_max_declarations_per_element}.

Bug Fixes

#969: Attributes (and anything that iterates BytesStart::attributes() with the default with_checks(true)) no longer takes O(N²) time on a start tag with a large number of attributes. Small tags keep the previous linear scan; larger ones switch to a 64-bit hash pre-filter, so the whole tag is O(N). The exact AttrError::Duplicated(new, prev) positions are unchanged.

#970: NamespaceResolver::push (and hence every NsReader Start/Empty event) now rejects a start tag that declares more than DEFAULT_MAX_DECLARATIONS_PER_ELEMENT (256) xmlns / xmlns:* namespace bindings, returning the new NamespaceError::TooManyDeclarations. Previously push allocated one NamespaceBinding per declaration with no upper bound, before the event was returned to the caller, so an NsReader consumer could not bound its memory exposure on untrusted input. The limit is configurable via NamespaceResolver::set_max_declarations_per_element (use usize::MAX to disable).

#969: tafia/quick-xml#969 #970: tafia/quick-xml#970

New Contributors

@qifan-sailboat made their first contribution in tafia/quick-xml#972

Full Changelog: tafia/quick-xml@v0.40.1...v0.41.0

Changelog

Sourced from quick-xml's changelog.

0.41.0 -- 2026-06-29

New Features

#970: Add NsReader::resolver_mut() and NamespaceResolver::{max_declarations_per_element, set_max_declarations_per_element}.

Bug Fixes

#969: Attributes (and anything that iterates BytesStart::attributes() with the default with_checks(true)) no longer takes O(N²) time on a start tag with a large number of attributes. Small tags keep the previous linear scan; larger ones switch to a 64-bit hash pre-filter, so the whole tag is O(N). The exact AttrError::Duplicated(new, prev) positions are unchanged.

#970: NamespaceResolver::push (and hence every NsReader Start/Empty event) now rejects a start tag that declares more than DEFAULT_MAX_DECLARATIONS_PER_ELEMENT (256) xmlns / xmlns:* namespace bindings, returning the new NamespaceError::TooManyDeclarations. Previously push allocated one NamespaceBinding per declaration with no upper bound, before the event was returned to the caller, so an NsReader consumer could not bound its memory exposure on untrusted input. The limit is configurable via NamespaceResolver::set_max_declarations_per_element (use usize::MAX to disable).

#969: tafia/quick-xml#969 #970: tafia/quick-xml#970

Commits

4deda08 Release 0.41.0
1b3b73b Remove unused argument to check!
07f3db8 Fix O(N²) duplicate-attribute check in Attributes iterator
7ca2526 Cap namespace declarations per element in NamespaceResolver::push
See full diff in compare view

Updates futures from 0.3.32 to 0.3.33

Release notes

Sourced from futures's releases.

0.3.33

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Changelog

Sourced from futures's changelog.

0.3.33 - 2026-07-18

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Commits

89cc254 Release 0.3.33
cd9f5be ci: Update release workflow
d79a499 Resolve rustdoc::broken_intra_doc_links warning
95bbcf8 Resolve rustdoc ambiguous link error
303c165 Resolve rustdoc::redundant_explicit_links warning
f34e3f5 ci: Cleanup
66591a2 Enable Miri for more tests
ab1072f Simplify target_has_atomic cfg in utility crates
cf5d23b Fix unsound compat01as03 implementation (fixes #2514) (#3012)
8ae794f Add portable-atomic-alloc feature and use it in FuturesUnordered (#3007)
Additional commits viewable in compare view

Updates kreuzberg from 4.9.9 to 4.10.2

Release notes

Sourced from kreuzberg's releases.

v4.10.2

What's Changed

fix(chart): harden defaults and add Artifact Hub README by @Goldziher in kreuzberg-dev/kreuzberg-lts#1

New Contributors

@Goldziher made their first contribution in kreuzberg-dev/kreuzberg-lts#1

Full Changelog: kreuzberg-dev/kreuzberg-lts@v4.10.1...v4.10.2

v4.10.1

Full Changelog: kreuzberg-dev/kreuzberg-lts@v4.10.0...v4.10.1

v4.10.0

Full Changelog: https://github.com/kreuzberg-dev/kreuzberg-lts/commits/v4.10.0

Changelog

Sourced from kreuzberg's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[4.10.0] - 2026-07-11

First release of the standalone Kreuzberg v4 LTS line. This is the long-term-support home for Kreuzberg v4; active development continues as Xberg (v5+). No behavioural changes to extraction — this release is a security, licensing, and packaging refresh.

Security

Upgraded core dependencies to their latest patched releases (hf-hub, rmcp, lopdf, liter-llm, pyo3, comrak, calamine, quick-xml, text-splitter, tower-http, and others).

Changed

License is now MIT (earlier v4 releases shipped under the Elastic License 2.0).

Repository moved to standalone kreuzberg-dev/kreuzberg-lts. New v4 Go releases publish under github.com/kreuzberg-dev/kreuzberg-lts/v4; existing github.com/kreuzberg-dev/kreuzberg pins keep resolving via the Go module proxy cache.

Added

LTS support policy and migration guide at docs.kreuzberg.dev/lts: v4 receives critical bug and security fixes until the end of 2026 on a best-effort basis. The R binding remains exclusive to the v4 LTS line (not part of Xberg v5).

Commits

2fe1cbf fix(deps): pin typescript to 5.x to unblock tsup dts builds
92370c1 chore(release): prepare v4.10.2
f3bb223 docs(readme): rebrand all READMEs with shared Xberg assets
4145732 docs: migrate to Astro Starlight, drop zensical
f18b96d chore: update ai-rulez Poly hooks to v4.9.3
af45bb7 chore: add ai-rulez Poly hooks
d8f9669 Merge pull request #1 from kreuzberg-dev/fix/chart-hardening
6ba6955 docs(chart): add Helm chart README for Artifact Hub
2639a91 fix(chart): single-replica default, pin image tag, writable HF_HOME
85c251b docs(llms): direct LLMs and agents to Xberg as the current version
Additional commits viewable in compare view

Updates rmcp from 1.7.0 to 2.2.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v2.2.0

Added

[breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

fill missing fully qualified syntax in prompt_handler macros (#866)

Other

align README examples with v2 model API (#928)

rmcp-v2.2.0

Added

reject auth servers lacking S256 PKCE support (#955)

Fixed

pass client conformance suite (#960)

don't respond to cancelled requests (#957)

fail orphaned streamable HTTP responses on reinit (#914)

address 2025-11-25 conformance audit findings (#951)

rmcp-macros-v2.1.0

Added

[breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

fill missing fully qualified syntax in prompt_handler macros (#866)

Other

align README examples with v2 model API (#928)

rmcp-v2.1.0

Added

add SEP-414 trace context meta accessors (#910)

add SEP-2575 meta helpers (#942)

Fixed

(transport) make AsyncRwTransport::receive cancel-safe (#941) (#947)

(auth) preserve refresh_token when refresh response omits it (#949)

block redirect header leaks (#936)

don't respond to unparsable messages (#940)

... (truncated)

Commits

5195776 chore: release v2.2.0 (#953)
6dd7b85 chore(deps): update p256 requirement from 0.13 to 0.14 (#959)
a037935 fix: pass client conformance suite (#960)
dbda50c fix: don't respond to cancelled requests (#957)
45f2f72 fix: fail orphaned streamable HTTP responses on reinit (#914)
95490fa feat: reject auth servers lacking S256 PKCE support (#955)
bdf0c32 fix: address 2025-11-25 conformance audit findings (#951)
8e44af4 chore: release v2.1.0 (#950)
4833ec7 fix(transport): make AsyncRwTransport::receive cancel-safe (#941) (#947)
5837e22 fix(auth): preserve refresh_token when refresh response omits it (#949)
Additional commits viewable in compare view

Updates mail-parser from 0.11.4 to 0.11.5

Changelog

Sourced from mail-parser's changelog.

mail-parser 0.11.5

Fix: Address names containing LF are not parsed correctly (#149)

Fix: Decode the iso-8859-1 label as windows-1252 per the WHATWG Encoding Standard (#131)

Fix: panic with messages containing corrupted eml attachments (#120).

Recognize additional charset labels supported by encoding_rs (#123)

Added Dkim2Signature and MessageInstance to support DKIM2 headers.

Commits

See full diff in compare view

Updates libc from 0.2.186 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)

Linux SPARC: Enable the clone3 syscall (#4980)

Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)

NuttX: Fix wchar_t definition under Arm (#5245)

Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:
RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...
Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:
The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
uClibc now supports a similar configuration option:
RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)

Linux SPARC: Enable the clone3 syscall (#4980)

Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)

NuttX: Fix wchar_t definition under Arm (#5245)

Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:
RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...
Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

uClibc now supports a similar configuration option:

... (truncated)

Commits

ef0906e libc: Release 0.2.189
5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
3e51062 psp: Fix overflowing_literals warnings
e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
63221b3 macros: Require safe in safe_f! invocations
707ab52 macros: Require unsafe in f! invocations
8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
8427909 windows: Add back link names for time-related symbols
b4863fa nuttx: fix wchar_t definition under arm
41c683d nuttx: mirror type definitions
Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.4

Release notes

Sourced from clap's releases.

v4.6.4

[4.6.4] - 2026-07-21

Internal

Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.4] - 2026-07-21

Internal

Update to syn v3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Commits

87ec1ad chore: Release
78f2529 docs: Update changelog
b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
74c6666 fix(complete): Keep zsh candidate order
d142d8f Merge pull request #6360 from epage/string
ba89563 style: Prefer explicit string operations
bea966e Merge pull request #6359 from epage/man
b811986 chore(man):Remove unused required-features
0010bf2 Merge pull request #6358 from clap-rs/renovate/crate-ci-typos-1.x
bab9b24 chore(deps): Update compatible (dev) (#6357)
Additional commits viewable in compare view

Updates clap_complete from 4.6.5 to 4.6.8

Commits

d93a00d chore: Release
4709d1a docs(complete): Update changelog
2246e8b Merge pull request #6455 from epage/possible
2550f32 feat(complete): Expose possible value completers
9048857 refactor(complete): Pull out possible values candidate conversion
0607d66 refactor(complete): Remove unused allocation
943de73 refactor(complete): Move related functions next to each other
81b86a9 refactor(complete): Generalize value candidate handling
ae09202 refactor(complete): Remove extra allocation
466b2be chore: Release
Additional commits viewable in compare view

Updates indicatif from 0.18.4 to 0.18.6

Release notes

Sourced from indicatif's releases.

0.18.6

What's Changed

fix: correctly detect dumb terminal on Windows by @ugur-eren in console-rs/indicatif#818

0.18.5

What's Changed

Upgrade to rand 0.10 by @djc in console-rs/indicatif#768

multi: document common MultiProgress bugs + behavior (#595) by @chris-laplante in

Bumps the all group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` | | [regex](https://github.com/rust-lang/regex) | `1.12.4` | `1.13.1` | | [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.26` | `0.4.31` | | [globset](https://github.com/BurntSushi/ripgrep) | `0.4.18` | `0.4.19` | | [schemars](https://github.com/GREsau/schemars) | `1.2.1` | `1.2.2` | | [quick-xml](https://github.com/tafia/quick-xml) | `0.40.1` | `0.41.0` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.33` | | [kreuzberg](https://github.com/kreuzberg-dev/kreuzberg-lts) | `4.9.9` | `4.10.2` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.7.0` | `2.2.0` | | [libc](https://github.com/rust-lang/libc) | `0.2.186` | `0.2.189` | | [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.4` | | [clap_complete](https://github.com/clap-rs/clap) | `4.6.5` | `4.6.8` | | [indicatif](https://github.com/console-rs/indicatif) | `0.18.4` | `0.18.6` | | [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.18` | `0.7.19` | Updates `tokio` from 1.52.3 to 1.53.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.150 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.150...v1.0.151) Updates `anyhow` from 1.0.102 to 1.0.104 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.104) Updates `thiserror` from 2.0.18 to 2.0.19 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.19) Updates `regex` from 1.12.4 to 1.13.1 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.4...1.13.1) Updates `ignore` from 0.4.26 to 0.4.31 - [Release notes](https://github.com/BurntSushi/ripgrep/releases) - [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md) - [Commits](BurntSushi/ripgrep@ignore-0.4.26...ignore-0.4.31) Updates `globset` from 0.4.18 to 0.4.19 - [Release notes](https://github.com/BurntSushi/ripgrep/releases) - [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md) - [Commits](BurntSushi/ripgrep@globset-0.4.18...globset-0.4.19) Updates `schemars` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/GREsau/schemars/releases) - [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md) - [Commits](GREsau/schemars@v1.2.1...v1.2.2) Updates `quick-xml` from 0.40.1 to 0.41.0 - [Release notes](https://github.com/tafia/quick-xml/releases) - [Changelog](https://github.com/tafia/quick-xml/blob/master/Changelog.md) - [Commits](tafia/quick-xml@v0.40.1...v0.41.0) Updates `futures` from 0.3.32 to 0.3.33 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.32...0.3.33) Updates `kreuzberg` from 4.9.9 to 4.10.2 - [Release notes](https://github.com/kreuzberg-dev/kreuzberg-lts/releases) - [Changelog](https://github.com/kreuzberg-dev/kreuzberg-lts/blob/main/CHANGELOG.md) - [Commits](kreuzberg-dev/kreuzberg-lts@v4.9.9...v4.10.2) Updates `rmcp` from 1.7.0 to 2.2.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.7.0...rmcp-v2.2.0) Updates `mail-parser` from 0.11.4 to 0.11.5 - [Release notes](https://github.com/stalwartlabs/mail-parser/releases) - [Changelog](https://github.com/stalwartlabs/mail-parser/blob/main/CHANGELOG.md) - [Commits](https://github.com/stalwartlabs/mail-parser/commits) Updates `libc` from 0.2.186 to 0.2.189 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.189/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.186...0.2.189) Updates `clap` from 4.6.1 to 4.6.4 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.4) Updates `clap_complete` from 4.6.5 to 4.6.8 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.5...clap_complete-v4.6.8) Updates `indicatif` from 0.18.4 to 0.18.6 - [Release notes](https://github.com/console-rs/indicatif/releases) - [Commits](console-rs/indicatif@0.18.4...0.18.6) Updates `tokio-util` from 0.7.18 to 0.7.19 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-util-0.7.18...tokio-util-0.7.19) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.53.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: anyhow dependency-version: 1.0.104 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: thiserror dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: regex dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: ignore dependency-version: 0.4.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: globset dependency-version: 0.4.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: schemars dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: quick-xml dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: futures dependency-version: 0.3.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: kreuzberg dependency-version: 4.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: rmcp dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: mail-parser dependency-version: 0.11.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: libc dependency-version: 0.2.189 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: clap dependency-version: 4.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: clap_complete dependency-version: 4.6.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: indicatif dependency-version: 0.18.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: tokio-util dependency-version: 0.7.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-27T22:22:25Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-08-10T22:22:18Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot closed this Aug 10, 2026

dependabot Bot deleted the dependabot/cargo/all-935561a08e branch August 10, 2026 22:22

Navigation Menu

build(deps): bump the all group across 1 directory with 19 updates - #14

build(deps): bump the all group across 1 directory with 19 updates#14
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-935561a08e

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

Fixed (unstable)

Documented

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

Changed

Fixed

v1.0.229

v1.0.151

1.0.104

1.0.103

2.0.19

1.13.1 (2026-07-15)

1.13.0 (2026-07-09)

v1.2.2

[1.2.2] - 2026-07-27

v0.41.0 - Secuirity fixes

What's Changed

New Features

Bug Fixes

New Contributors

0.41.0 -- 2026-06-29

New Features

Bug Fixes

0.3.33

0.3.33 - 2026-07-18

v4.10.2

What's Changed

New Contributors

v4.10.1

v4.10.0

Changelog

[4.10.0] - 2026-07-11

Security

Changed

Added

rmcp-macros-v2.2.0

Added

Fixed

Other

rmcp-v2.2.0

Added

Fixed

rmcp-macros-v2.1.0

Added

Fixed

Other

rmcp-v2.1.0

Added

Fixed

mail-parser 0.11.5

0.2.189

Added

Deprecated

Fixed

0.2.188

Changed

0.2.187

0.2.189 - 2026-07-21

Added

Deprecated

Fixed

0.2.188 - 2026-07-21

Changed

0.2.187 - 2026-07-20

v4.6.4

[4.6.4] - 2026-07-21

Internal

v4.6.3

[4.6.3] - 2026-07-20

Fixes

v4.6.2

[4.6.2] - 2026-07-15

Fixes

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading