build(deps): bump the all group across 1 directory with 20 updates by dependabot[bot] · Pull Request #15 · timorunge/lore

dependabot · 2026-08-10T22:22:57Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the all group with 19 updates in the / directory:

Package	From	To
tokio	`1.52.3`	`1.53.1`
serde	`1.0.228`	`1.0.229`
serde_json	`1.0.150`	`1.0.151`
anyhow	`1.0.102`	`1.0.104`
thiserror	`2.0.18`	`2.0.19`
regex	`1.12.4`	`1.13.1`
blake3	`1.8.5`	`1.8.6`
ignore	`0.4.26`	`0.4.33`
globset	`0.4.18`	`0.4.20`
schemars	`1.2.1`	`1.2.2`
quick-xml	`0.40.1`	`0.41.0`
futures	`0.3.32`	`0.3.33`
kreuzberg	`4.9.9`	`4.10.2`
rmcp	`1.7.0`	`3.1.2`
libc	`0.2.186`	`0.2.189`
clap	`4.6.1`	`4.6.6`
clap_complete	`4.6.5`	`4.6.9`
indicatif	`0.18.4`	`0.18.6`
tokio-util	`0.7.18`	`0.7.19`

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

time: fix alt timer cancellation and insertion race (#8252)

Documented

runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)

metrics: add task schedule latency metric (#7986)

net: add SocketAddr methods to Unix sockets (#8144)

Changed

io: add #[inline] to IO trait impls for in-memory types (#8242)

net: implement UCred::pid on FreeBSD (#8086)

net: support Nuttx target os (#8259)

signal: refactor global variables on Windows (#8231)

sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)

taskdump: support taskdumps on s390x (#8192)

time: add #[track_caller] to timeout_at() (#8077)

time: consolidate mutex locks on spurious poll (#8124)

time: defer waker clone on spurious poll (#8107)

time: move lazy-registration state into Sleep (#8132)

tracing: remove unnecessary span clone (#8126)

Fixed

io: do not treat zero-length reads as EOF in Chain (#8251)

net: use getpeereid for QNX peer credentials (#8270)

runtime: avoid illegal state in FastRand (#8078)

sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)

taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)

time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

75fef53 chore: prepare Tokio v1.53.1 (#8303)
ae9d011 signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)
eb4988d time: fix the loom test of the race between cancellation/insertion (#8302)
91d3b4c time: fix alt timer cancellation and insertion race (#8252)
a463384 runtime: remove dead link definition in Runtime::block_on (#8301)
be689a3 chore: prepare Tokio v1.53.0 (#8294)
50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
efdba5f chore: prepare Tokio v1.52.4 (#8289)
b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

Update to syn 3

Commits

7fc3b4c Release 1.0.229
6d6e9a1 Merge pull request #3085 from dtolnay/syn3
6dec3b7 Update to syn 3
cfe6692 Resolve mut_mut pedantic clippy lint
1023d07 Update actions/upload-artifact@v6 -> v7
dd682c2 Update actions/checkout@v6 -> v7
5f0f18b Update ui test suite to nightly-2026-06-01
63a1498 Regenerate stderr with trybuild normalization fixes
fa7da4a Fix unused_features warning
6b1a178 Unpin CI miri toolchain
Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

Commits

de85007 Release 1.0.151
3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
cf16f75 Add RawValue::from_string_unchecked
827a315 Update actions/upload-artifact@v6 -> v7
cea36a5 Update actions/checkout@v6 -> v7
See full diff in compare view

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

Update syn dev-dependency to version 3

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

1dbe186 Release 1.0.104
f6479f8 Update to syn 3
5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

Update to syn 3

Commits

e13a785 Release 2.0.19
0a0e76c Update to syn 3
ec42ea7 Update actions/upload-artifact@v6 -> v7
4178c4a Update actions/checkout@v6 -> v7
7214e0e Ignore items_after_statements pedantic clippy lint in test
febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
c50e387 chore: improve thiserror maintenance path
d4a2507 Raise minimum tested compiler to rust 1.85
99e8a6c Unpin CI miri toolchain
9ac165c Pin CI miri to nightly-2026-02-11
Additional commits viewable in compare view

Updates regex from 1.12.4 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

#1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:
use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);
Improvements:

#709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

Commits

2b52759 1.13.1, redux
40e9823 1.13.1
75fcb96 changelog: 1.13.1
64ad0b6 automata: fix bug in reverse suffix/inner optimization
fa91c31 automata: fix a bug caught by Codex review
30390ec automata: formatting tweaks
821a8eb automata: refactor reverse suffix/inner search slightly
10afd70 automata: expose the extracted literals for inner literal extraction
8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
5524f02 test: add regression tests for failed reverse suffix/inner optimizations
Additional commits viewable in compare view

Updates blake3 from 1.8.5 to 1.8.6

Release notes

Sourced from blake3's releases.

1.8.6

version 1.8.6

Changes since 1.8.5:

update_mmap and update_mmap_rayon (and by extension b3sum) now use seek rather than metadata to get the length of a file/mapping, and they tolerate mmap failures. That means b3sum will now memory map e.g. Linux block devices, which support mapping despite reporting length 0 in metadata. Hashing NUL files on Windows also works now, where previously it was an error unless you used --no-mmap or <. This change was originally proposed by @nabijaczleweli.

Commits

77b257e version 1.8.6
83b1746 use seek instead of metadata to establish mmap length (#570)
9eac279 use vswhere to find Visual Studio in CI
fc3d0e9 Fix path to Visual Studio toolchain in CI
8aa5145 a few more colons
6bb9773 use cargo:: build script syntax
91f7308 fix Mode docs
f3913d9 typo fixes
f51e822 tweak release instructions
See full diff in compare view

Updates ignore from 0.4.26 to 0.4.33

Commits

3fce3b5 ignore-0.4.33
5055264 globset-0.4.20
020687a ignore,globset: increase pool capacity
5ed408e ignore-0.4.32
435f59f ignore: skip loading unreachable ignore files
f9c05a9 index: remove incorrect README
8372866 index: add some initial indexing scaffolding
d99ac34 core: add index module
2ed0c00 flags: disable many flags when indexing is enabled
59e318f ignore-0.4.31
Additional commits viewable in compare view

Updates globset from 0.4.18 to 0.4.20

Commits

5055264 globset-0.4.20
020687a ignore,globset: increase pool capacity
5ed408e ignore-0.4.32
435f59f ignore: skip loading unreachable ignore files
f9c05a9 index: remove incorrect README
8372866 index: add some initial indexing scaffolding
d99ac34 core: add index module
2ed0c00 flags: disable many flags when indexing is enabled
59e318f ignore-0.4.31
a9dc222 cargo: set rust-version on all crates
Additional commits viewable in compare view

Updates schemars from 1.2.1 to 1.2.2

Release notes

Sourced from schemars's releases.

v1.2.2

Update to syn 3 in schemars_derive

Changelog

Sourced from schemars's changelog.

[1.2.2] - 2026-07-27

Update to syn 3 in schemars_derive

Commits

ed61863 v1.2.2
ae618c3 Update syn to v3 (#528)
c072ea0 docs: add missing attributes to table of contents (#517)
015272f Clippy fix (#512)
944f727 Bump bytes from 1.10.1 to 1.11.1 (#507)
See full diff in compare view

Updates quick-xml from 0.40.1 to 0.41.0

Release notes

Sourced from quick-xml's releases.

v0.41.0 - Secuirity fixes

What's Changed

New Features

#970: Add NsReader::resolver_mut() and NamespaceResolver::{max_declarations_per_element, set_max_declarations_per_element}.

Bug Fixes

#969: Attributes (and anything that iterates BytesStart::attributes() with the default with_checks(true)) no longer takes O(N²) time on a start tag with a large number of attributes. Small tags keep the previous linear scan; larger ones switch to a 64-bit hash pre-filter, so the whole tag is O(N). The exact AttrError::Duplicated(new, prev) positions are unchanged.

#970: NamespaceResolver::push (and hence every NsReader Start/Empty event) now rejects a start tag that declares more than DEFAULT_MAX_DECLARATIONS_PER_ELEMENT (256) xmlns / xmlns:* namespace bindings, returning the new NamespaceError::TooManyDeclarations. Previously push allocated one NamespaceBinding per declaration with no upper bound, before the event was returned to the caller, so an NsReader consumer could not bound its memory exposure on untrusted input. The limit is configurable via NamespaceResolver::set_max_declarations_per_element (use usize::MAX to disable).

#969: tafia/quick-xml#969 #970: tafia/quick-xml#970

New Contributors

@qifan-sailboat made their first contribution in tafia/quick-xml#972

Full Changelog: tafia/quick-xml@v0.40.1...v0.41.0

Changelog

Sourced from quick-xml's changelog.

0.41.0 -- 2026-06-29

New Features

#970: Add NsReader::resolver_mut() and NamespaceResolver::{max_declarations_per_element, set_max_declarations_per_element}.

Bug Fixes

#969: Attributes (and anything that iterates BytesStart::attributes() with the default with_checks(true)) no longer takes O(N²) time on a start tag with a large number of attributes. Small tags keep the previous linear scan; larger ones switch to a 64-bit hash pre-filter, so the whole tag is O(N). The exact AttrError::Duplicated(new, prev) positions are unchanged.

#970: NamespaceResolver::push (and hence every NsReader Start/Empty event) now rejects a start tag that declares more than 256 xmlns / xmlns:* namespace bindings, returning the new NamespaceError::TooManyDeclarations. Previously push allocated one NamespaceBinding per declaration with no upper bound, before the event was returned to the caller, so an NsReader consumer could not bound its memory exposure on untrusted input. The limit is configurable via NamespaceResolver::set_max_declarations_per_element (use usize::MAX to disable).

#969: tafia/quick-xml#969 #970: tafia/quick-xml#970

Commits

4deda08 Release 0.41.0
1b3b73b Remove unused argument to check!
07f3db8 Fix O(N²) duplicate-attribute check in Attributes iterator
7ca2526 Cap namespace declarations per element in NamespaceResolver::push
See full diff in compare view

Updates futures from 0.3.32 to 0.3.33

Release notes

Sourced from futures's releases.

0.3.33

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Changelog

Sourced from futures's changelog.

0.3.33 - 2026-07-18

Fix ReadLine's soundness issue regarding to exception safety. (#3020)

Fix unsound Send impl for IterPinRef and Iter. (#3003)

Fix stacked borrows violation in compat01as03 implementation. (#3012)

Fix memory leak in FuturesUnordered::IntoIter. (#3005)

Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)

Re-export alloc::task::Wake. (#3010)

Update spin to 0.12. (#3014)

Commits

89cc254 Release 0.3.33
cd9f5be ci: Update release workflow
d79a499 Resolve rustdoc::broken_intra_doc_links warning
95bbcf8 Resolve rustdoc ambiguous link error
303c165 Resolve rustdoc::redundant_explicit_links warning
f34e3f5 ci: Cleanup
66591a2 Enable Miri for more tests
ab1072f Simplify target_has_atomic cfg in utility crates
cf5d23b Fix unsound compat01as03 implementation (fixes #2514) (#3012)
8ae794f Add portable-atomic-alloc feature and use it in FuturesUnordered (#3007)
Additional commits viewable in compare view

Updates kreuzberg from 4.9.9 to 4.10.2

Release notes

Sourced from kreuzberg's releases.

v4.10.2

What's Changed

fix(chart): harden defaults and add Artifact Hub README by @Goldziher in kreuzberg-dev/kreuzberg-lts#1

New Contributors

@Goldziher made their first contribution in kreuzberg-dev/kreuzberg-lts#1

Full Changelog: kreuzberg-dev/kreuzberg-lts@v4.10.1...v4.10.2

v4.10.1

Full Changelog: kreuzberg-dev/kreuzberg-lts@v4.10.0...v4.10.1

v4.10.0

Full Changelog: https://github.com/kreuzberg-dev/kreuzberg-lts/commits/v4.10.0

Changelog

Sourced from kreuzberg's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[4.10.0] - 2026-07-11

First release of the standalone Kreuzberg v4 LTS line. This is the long-term-support home for Kreuzberg v4; active development continues as Xberg (v5+). No behavioural changes to extraction — this release is a security, licensing, and packaging refresh.

Security

Upgraded core dependencies to their latest patched releases (hf-hub, rmcp, lopdf, liter-llm, pyo3, comrak, calamine, quick-xml, text-splitter, tower-http, and others).

Changed

License is now MIT (earlier v4 releases shipped under the Elastic License 2.0).

Repository moved to standalone kreuzberg-dev/kreuzberg-lts. New v4 Go releases publish under github.com/kreuzberg-dev/kreuzberg-lts/v4; existing github.com/kreuzberg-dev/kreuzberg pins keep resolving via the Go module proxy cache.

Added

LTS support policy and migration guide at docs.kreuzberg.dev/lts: v4 receives critical bug and security fixes until the end of 2026 on a best-effort basis. The R binding remains exclusive to the v4 LTS line (not part of Xberg v5).

Commits

2fe1cbf fix(deps): pin typescript to 5.x to unblock tsup dts builds
92370c1 chore(release): prepare v4.10.2
f3bb223 docs(readme): rebrand all READMEs with shared Xberg assets
4145732 docs: migrate to Astro Starlight, drop zensical
f18b96d chore: update ai-rulez Poly hooks to v4.9.3
af45bb7 chore: add ai-rulez Poly hooks
d8f9669 Merge pull request #1 from kreuzberg-dev/fix/chart-hardening
6ba6955 docs(chart): add Helm chart README for Artifact Hub
2639a91 fix(chart): single-replica default, pin image tag, writable HF_HOME
85c251b docs(llms): direct LLMs and agents to Xberg as the current version
Additional commits viewable in compare view

Updates rmcp from 1.7.0 to 3.1.2

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.1.2

Fixed

emit cache hints from handler macros (#1120)

Other

upgrade darling and syn (#1138)

rmcp-v3.1.2

Fixed

(auth) map 401/403 challenges on the SSE GET stream (#1152)

(sse) loop instead of recursing when skipping SSE events (#1146)

(auth) preserve issuer trailing slash during discovery (#1145)

rmcp-macros-v3.1.1

Fixed

emit cache hints from handler macros (#1120)

Other

upgrade darling and syn (#1138)

rmcp-v3.1.1

Fixed

emit cache hints from handler macros (#1120)

expose MRTR state to tool handlers (#1104)

disambiguate input-required results (#1103)

Other

make async-trait optional (#1119)

rmcp-macros-v3.1.0

Added

add strict stateless protocol metadata validation (#1091)

Other

document the ping utility with examples (#1106)

complete Tier 1 feature docs and finalize roadmap (#1101)

(conformance) meeting requirements for tier 1 (#1087)

rmcp-v3.1.0

Added

... (truncated)

Commits

02c62ae chore: release v3.1.2 (#1148)
c345078 fix(auth): map 401/403 challenges on the SSE GET stream (#1152)
f8e6382 chore(deps): bump taiki-e/install-action from 2.85.7 to 2.85.8 (#1153)
8fb3e04 chore(deps): bump github/codeql-action from 4.37.4 to 4.37.6 (#1154)
3c8fb2a fix(sse): loop instead of recursing when skipping SSE events (#1146)
e150d4f fix(auth): preserve issuer trailing slash during discovery (#1145)
9a3168a chore(deps): bump taiki-e/install-action from 2.85.6 to 2.85.7 (#1139)
baac607 chore: release v3.1.1 (#1115)
f57d585 chore: upgrade darling and syn (#1138)
07bcda2 fix: emit cache hints from handler macros (#1120)
Additional commits viewable in compare view

Updates mail-parser from 0.11.4 to 0.11.6

Changelog

Sourced from mail-parser's changelog.

mail-parser 0.11.6

Fix: Missing whitespace between a quoted name and a following encoded word (#150)

Fix: panic when a Received header ends with a folded line (#155)

Fix: Received header tokens losing their last character at the end of the input, retaining folding characters, and failing to parse a clause folded before its value (#155)

Fix: Multi-word display names followed by a comment no longer produce a fabricated address (#153)

mail-parser 0.11.5

Fix: Address names containing LF are not parsed correctly (#149)

Fix: Decode the iso-8859-1 label as windows-1252 per the WHATWG Encoding Standard (#131)

Fix: panic with messages containing corrupted eml attachments (#120).

Recognize additional charset labels supported by encoding_rs (#123)

Added Dkim2Signature and MessageInstance to support DKIM2 headers.

Commits

See full diff in compare view

Updates libc from 0.2.186 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)

Linux SPARC: Enable the clone3 syscall (#4980)

Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)

NuttX: Fix wchar_t definition under Arm (#5245)

Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:
RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...
Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:
The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
uClibc now supports a similar configuration option:
RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)

Linux SPARC: Enable the clone3 syscall (#4980)

Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)

NuttX: Fix wchar_t definition under Arm (#5245)

Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:
RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...
Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

uClibc now supports a similar configuration option:

... (truncated)

Commits

ef0906e libc: Release 0.2.189
5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
3e51062 psp: Fix overflowing_literals warnings
e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
63221b3 macros: Require safe in safe_f! invocations
707ab52 macros: Require unsafe in f! invocations
8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
8427909 windows: Add back link names for time-related symbols
b4863fa nuttx: fix wchar_t definition under arm
41c683d nuttx: mirror type definitions
Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

Update to syn v3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Commits

348cff3 chore: Release
d478377 docs: Update changelog
04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
f90a966 fix(complete): Use spaces for indentation in fish
dd4997b fix(complete): Don't glob-expand bash positionals
8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
8141e11 chore(deps): Update compatible (dev) (

Bumps the all group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` | | [regex](https://github.com/rust-lang/regex) | `1.12.4` | `1.13.1` | | [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.5` | `1.8.6` | | [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.26` | `0.4.33` | | [globset](https://github.com/BurntSushi/ripgrep) | `0.4.18` | `0.4.20` | | [schemars](https://github.com/GREsau/schemars) | `1.2.1` | `1.2.2` | | [quick-xml](https://github.com/tafia/quick-xml) | `0.40.1` | `0.41.0` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.33` | | [kreuzberg](https://github.com/kreuzberg-dev/kreuzberg-lts) | `4.9.9` | `4.10.2` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.7.0` | `3.1.2` | | [libc](https://github.com/rust-lang/libc) | `0.2.186` | `0.2.189` | | [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.6` | | [clap_complete](https://github.com/clap-rs/clap) | `4.6.5` | `4.6.9` | | [indicatif](https://github.com/console-rs/indicatif) | `0.18.4` | `0.18.6` | | [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.18` | `0.7.19` | Updates `tokio` from 1.52.3 to 1.53.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.150 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.150...v1.0.151) Updates `anyhow` from 1.0.102 to 1.0.104 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.104) Updates `thiserror` from 2.0.18 to 2.0.19 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.19) Updates `regex` from 1.12.4 to 1.13.1 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.4...1.13.1) Updates `blake3` from 1.8.5 to 1.8.6 - [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases) - [Commits](BLAKE3-team/BLAKE3@1.8.5...1.8.6) Updates `ignore` from 0.4.26 to 0.4.33 - [Release notes](https://github.com/BurntSushi/ripgrep/releases) - [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md) - [Commits](BurntSushi/ripgrep@ignore-0.4.26...ignore-0.4.33) Updates `globset` from 0.4.18 to 0.4.20 - [Release notes](https://github.com/BurntSushi/ripgrep/releases) - [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md) - [Commits](BurntSushi/ripgrep@globset-0.4.18...globset-0.4.20) Updates `schemars` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/GREsau/schemars/releases) - [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md) - [Commits](GREsau/schemars@v1.2.1...v1.2.2) Updates `quick-xml` from 0.40.1 to 0.41.0 - [Release notes](https://github.com/tafia/quick-xml/releases) - [Changelog](https://github.com/tafia/quick-xml/blob/master/Changelog.md) - [Commits](tafia/quick-xml@v0.40.1...v0.41.0) Updates `futures` from 0.3.32 to 0.3.33 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.32...0.3.33) Updates `kreuzberg` from 4.9.9 to 4.10.2 - [Release notes](https://github.com/kreuzberg-dev/kreuzberg-lts/releases) - [Changelog](https://github.com/kreuzberg-dev/kreuzberg-lts/blob/main/CHANGELOG.md) - [Commits](kreuzberg-dev/kreuzberg-lts@v4.9.9...v4.10.2) Updates `rmcp` from 1.7.0 to 3.1.2 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.7.0...rmcp-v3.1.2) Updates `mail-parser` from 0.11.4 to 0.11.6 - [Release notes](https://github.com/stalwartlabs/mail-parser/releases) - [Changelog](https://github.com/stalwartlabs/mail-parser/blob/main/CHANGELOG.md) - [Commits](https://github.com/stalwartlabs/mail-parser/commits) Updates `libc` from 0.2.186 to 0.2.189 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.189/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.186...0.2.189) Updates `clap` from 4.6.1 to 4.6.6 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.6) Updates `clap_complete` from 4.6.5 to 4.6.9 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.5...clap_complete-v4.6.9) Updates `indicatif` from 0.18.4 to 0.18.6 - [Release notes](https://github.com/console-rs/indicatif/releases) - [Commits](console-rs/indicatif@0.18.4...0.18.6) Updates `tokio-util` from 0.7.18 to 0.7.19 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-util-0.7.18...tokio-util-0.7.19) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.53.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: anyhow dependency-version: 1.0.104 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: thiserror dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: regex dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: blake3 dependency-version: 1.8.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: ignore dependency-version: 0.4.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: globset dependency-version: 0.4.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: schemars dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: quick-xml dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: futures dependency-version: 0.3.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: kreuzberg dependency-version: 4.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: rmcp dependency-version: 3.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: mail-parser dependency-version: 0.11.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: libc dependency-version: 0.2.189 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: clap dependency-version: 4.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: clap_complete dependency-version: 4.6.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: indicatif dependency-version: 0.18.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: tokio-util dependency-version: 0.7.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-10T22:22:58Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Lands dependabot #15 plus the follow-up API work. rmcp 1.7 -> 3.1 is a breaking change on three fronts: ResourceContents became non_exhaustive, the Raw*/AnnotateAble split was flattened into Resource and ResourceTemplate, and tools/call and resources/read now return the MRTR CallToolResponse and ReadResourceResponse wrappers. quick-xml 0.40 -> 0.41 and kreuzberg 4.9 -> 4.10.2 clear RUSTSEC-2026-0194 and -0195; cargo deny check now passes, where it failed on main. tree-sitter-language-pack is held at 1.14.3: 1.15.0 adds required fields to ProcessConfig that kreuzberg 4.10.2 does not set, so it fails to compile with the tree-sitter feature.

timorunge · 2026-08-14T23:59:21Z

Landed on main in 6d0dcac, together with the follow-up API work this bump required.

rmcp 1.7 -> 3.1 is a breaking change on three fronts, so the lockfile alone did not build:

ResourceContents became #[non_exhaustive]
the Raw*/AnnotateAble split was flattened into Resource and ResourceTemplate
tools/call and resources/read now return the MRTR CallToolResponse / ReadResourceResponse wrappers

Verified on main: rmcp 3.1.2, quick-xml 0.41.0, kreuzberg 4.10.2, tokio 1.53.1, clap 4.6.6. cargo deny check passes fully (quick-xml RUSTSEC-2026-0194/0195 are cleared; it was failing before this bump), 248 tests pass, and the MCP server was verified live over both stdio and streamable-HTTP.

One deliberate deviation: tree-sitter-language-pack is held at 1.14.3. 1.15.0 adds required ProcessConfig fields that kreuzberg 4.10.2 does not set, so it fails to compile under the tree-sitter feature. Documented in docs/contributing.md (7b7996a).

Closing as applied.

dependabot · 2026-08-14T23:59:28Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

timorunge mentioned this pull request Aug 14, 2026

build(deps): bump actions/cache from 5 to 6 in the all group #9

Closed

timorunge closed this Aug 14, 2026

timorunge deleted the dependabot/cargo/all-022a0c6310 branch August 14, 2026 23:59

Navigation Menu

build(deps): bump the all group across 1 directory with 20 updates - #15

build(deps): bump the all group across 1 directory with 20 updates#15
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-022a0c6310

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

timorunge commented Aug 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

Fixed (unstable)

Documented

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

Changed

Fixed

v1.0.229

v1.0.151

1.0.104

1.0.103

2.0.19

1.13.1 (2026-07-15)

1.13.0 (2026-07-09)

1.8.6

v1.2.2

[1.2.2] - 2026-07-27

v0.41.0 - Secuirity fixes

What's Changed

New Features

Bug Fixes

New Contributors

0.41.0 -- 2026-06-29

New Features

Bug Fixes

0.3.33

0.3.33 - 2026-07-18

v4.10.2

What's Changed

New Contributors

v4.10.1

v4.10.0

Changelog

[4.10.0] - 2026-07-11

Security

Changed

Added

rmcp-macros-v3.1.2

Fixed

Other

rmcp-v3.1.2

Fixed

rmcp-macros-v3.1.1

Fixed

Other

rmcp-v3.1.1

Fixed

Other

rmcp-macros-v3.1.0

Added

Other

rmcp-v3.1.0

Added

mail-parser 0.11.6

mail-parser 0.11.5

0.2.189

Added

Deprecated

Fixed

0.2.188

Changed

0.2.187

0.2.189 - 2026-07-21

Added

Deprecated

Fixed

0.2.188 - 2026-07-21

Changed

0.2.187 - 2026-07-20

v4.6.6

[4.6.6] - 2026-08-06

Features

v4.6.5

[4.6.5] - 2026-07-31

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading