Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the all group with 7 updates in the / directory:

Package From To
bzip2 0.6.0 0.6.1
clap 4.5.49 4.5.53
flate2 1.1.4 1.1.5
indicatif 0.18.0 0.18.3
reqwest 0.12.24 0.12.28
tempfile 3.23.0 3.24.0
zip 6.0.0 7.0.0

Updates bzip2 from 0.6.0 to 0.6.1

Commits
  • eebf6e4 release version 0.6.1
  • 1ed41c4 Add MaybeUninit\<u8> (de)compress API
  • a165219 chore: remove redundant word in comment
  • 422ae6d fix(bzip2-sys): license expression to be a valid spdx expression
  • 21db697 ran cargo clippy --fix -- -A clippy::all -W clippy::use_self
  • See full diff in compare view

Updates clap from 4.5.49 to 4.5.53

Release notes

Sourced from clap's releases.

v4.5.53

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

v4.5.52

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup

v4.5.51

[4.5.51] - 2025-10-29

Fixes

  • (help) Correctly calculate padding for short flags that take a value
  • (help) Don't panic on short flags using ArgAction::Count

v4.5.50

[4.5.50] - 2025-10-20

Features

  • Accept Cow where String and &str are accepted
Changelog

Sourced from clap's changelog.

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup

[4.5.51] - 2025-10-29

Fixes

  • (help) Correctly calculate padding for short flags that take a value
  • (help) Don't panic on short flags using ArgAction::Count

[4.5.50] - 2025-10-20

Features

  • Accept Cow where String and &str are accepted
Commits
  • 3716f9f chore: Release
  • 613b69a docs: Update changelog
  • d117f7a Merge pull request #6028 from epage/arg
  • cb8255d feat(builder): Allow quoted id's for arg macro
  • 1036060 Merge pull request #6025 from AldaronLau/typos-in-faq
  • 2fcafc0 docs: Fix minor grammar issues in FAQ
  • a380b65 Merge pull request #6023 from epage/template
  • 4d7ab14 chore: Update from _rust/main template
  • b8a7ea4 chore(deps): Update Rust Stable to v1.87 (#18)
  • f9842b3 chore: Avoid MSRV problems out of the box
  • Additional commits viewable in compare view

Updates flate2 from 1.1.4 to 1.1.5

Release notes

Sourced from flate2's releases.

1.1.5

This bugfix release fixes #508, as flush didn't always work anymore in conjunction with miniz_oxide.

What's Changed

Full Changelog: rust-lang/flate2-rs@1.1.4...1.1.5

Commits
  • 2661fbb Merge pull request #509 from fintelia/revert-flush-change
  • bc36cf4 Bump patch version
  • 4341fe2 Revert "Use partial flushes with miniz_oxide backend"
  • See full diff in compare view

Updates indicatif from 0.18.0 to 0.18.3

Release notes

Sourced from indicatif's releases.

0.18.3

What's Changed

0.18.2

What's Changed

0.18.1

What's Changed

Commits
  • 23100f5 Bump version to 0.18.3
  • 45e5af9 Apply suggestions from clippy 1.91
  • b31a0be Add ProgressBar::set_elapsed
  • 368de49 Bump version to 0.18.2
  • 6d4e7d3 style: tweak write_ansi_range() style
  • 01957a7 Fix wide_msg truncation with a colored message
  • e836112 Bump version to 0.18.1
  • e69d621 Fix wide_bar width computation with multiline a message
  • 985f053 Bump MSRV to 1.71 (for console 0.16.1)
  • 5436ffc Start versioning Cargo.lock
  • Additional commits viewable in compare view

Updates reqwest from 0.12.24 to 0.12.28

Release notes

Sourced from reqwest's releases.

v0.12.28

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.27...v0.12.28

v0.12.27

tl;dr

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Pipe.

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.26...v0.12.27

v0.12.26

tl;dr

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.25...v0.12.26

v0.12.25

Highlights

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

What's Changed

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.12.28

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.
Commits

Updates tempfile from 3.23.0 to 3.24.0

Changelog

Sourced from tempfile's changelog.

3.24.0

  • Actually support WASIp2 without the nightly feature. This library is now feature complete on WASIp2 without any additional feature flags.
  • Exclude CI scripts from the published crate.
Commits

Updates zip from 6.0.0 to 7.0.0

Release notes

Sourced from zip's releases.

v7.0.0

⚠️ Breaking Changes

  • Removed the following features: getrandom, hmac, pbkdf2, sha1, zeroize.
  • Removed lzma-static and xz-static feature flags, which were deprecated synonyms of lzma and xz. (#405, #425)

🚀 Features

  • (SimpleFileOptions) const DEFAULT implementation (#474)
  • ZipWriter set_auto_large_file() method to enable large-file data descriptor when necessary (#468)

🐛 Bug Fixes

  • print previous error when failing to search another cde (#460)
  • cargo doc warnings (#472)
  • Write ZIP64 data descriptors when large_file option is true (#467)
  • Pin generic-array to an old version to work around RustCrypto/traits#2036 until next RustCrypto & aes-crypto releases (#458)

⚙️ Miscellaneous Tasks

  • Revert version bump so that release-plz will trigger
  • expose more flate2 feature flags (#476)
  • Next release will be 7.0.0
  • release v6.0.0 (#442)

Deps

  • Bump lzma-rust2 to v0.15 (#465)*] Remove lzma-static and xz-static feature flags, which are deprecated synonyms of lzma and xz. (#405, #425)
Changelog

Sourced from zip's changelog.

7.0.0 - 2025-12-05

⚠️ Breaking Changes

  • Removed the following features: getrandom, hmac, pbkdf2, sha1, zeroize.
  • Removed lzma-static and xz-static feature flags, which were deprecated synonyms of lzma and xz. (#405, #425)

🚀 Features

  • (SimpleFileOptions) const DEFAULT implementation (#474)
  • ZipWriter set_auto_large_file() method to enable large-file data descriptor when necessary (#468)

🐛 Bug Fixes

  • print previous error when failing to search another cde (#460)
  • cargo doc warnings (#472)
  • Write ZIP64 data descriptors when large_file option is true (#467)
  • Pin generic-array to an old version to work around RustCrypto/traits#2036 until next RustCrypto & aes-crypto releases (#458)

⚙️ Miscellaneous Tasks

  • Revert version bump so that release-plz will trigger
  • expose more flate2 feature flags (#476)
  • Next release will be 7.0.0
  • release v6.0.0 (#442)

Deps

  • Bump lzma-rust2 to v0.15 (#465)*] Remove lzma-static and xz-static feature flags, which are deprecated synonyms of lzma and xz. (#405, #425)
Commits
  • c864a14 chore: release v7.0.0 (#482)
  • 8085fe5 fix: print previous error when failing to search another cde (#460)
  • aa8f933 chore: Revert version bump so that release-plz will trigger
  • 13005c5 ci: Fix? run apt-get update at start of miri job
  • f99a32f chore: expose more flate2 feature flags (#476)
  • 9b5dd0b feat(SimpleFileOptions): const DEFAULT implementation (#474)
  • a8a4729 ci: Fix: Miri now requires g++, not just gcc (#477)
  • 57d26a7 fix: cargo doc warnings (#472)
  • 69533f1 feat: ZipWriter set_auto_large_file() method to enable large-file data desc...
  • fadbd48 chore(deps): update lzma-rust2 requirement from 0.13 to 0.14 (#450)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bzip2](https://github.com/trifectatechfoundation/bzip2-rs) | `0.6.0` | `0.6.1` |
| [clap](https://github.com/clap-rs/clap) | `4.5.49` | `4.5.53` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.4` | `1.1.5` |
| [indicatif](https://github.com/console-rs/indicatif) | `0.18.0` | `0.18.3` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.24` | `0.12.28` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.23.0` | `3.24.0` |
| [zip](https://github.com/zip-rs/zip2) | `6.0.0` | `7.0.0` |



Updates `bzip2` from 0.6.0 to 0.6.1
- [Release notes](https://github.com/trifectatechfoundation/bzip2-rs/releases)
- [Commits](trifectatechfoundation/bzip2-rs@v0.6.0...v0.6.1)

Updates `clap` from 4.5.49 to 4.5.53
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.49...clap_complete-v4.5.53)

Updates `flate2` from 1.1.4 to 1.1.5
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.4...1.1.5)

Updates `indicatif` from 0.18.0 to 0.18.3
- [Release notes](https://github.com/console-rs/indicatif/releases)
- [Commits](console-rs/indicatif@0.18.0...0.18.3)

Updates `reqwest` from 0.12.24 to 0.12.28
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.24...v0.12.28)

Updates `tempfile` from 3.23.0 to 3.24.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.23.0...v3.24.0)

Updates `zip` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v6.0.0...v7.0.0)

---
updated-dependencies:
- dependency-name: bzip2
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: clap
  dependency-version: 4.5.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: flate2
  dependency-version: 1.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: indicatif
  dependency-version: 0.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: reqwest
  dependency-version: 0.12.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: tempfile
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: zip
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants