Skip to content

deps(rust): bump the rust-dependencies group across 1 directory with 21 updates #8

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
Lenvanderhof merged 1 commit into from
Jan 10, 2026
Merged

deps(rust): bump the rust-dependencies group across 1 directory with 21 updates #8

Lenvanderhof merged 1 commit into from
Jan 10, 2026

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 9, 2026

Updates the requirements on pyo3, lopdf, pulldown-cmark, scraper, reqwest, thiserror, rusqlite, config, jsonschema, notify, indicatif, directories, dirs, tokenizers, ndarray, wasmtime, sysinfo, petgraph, md5, axum and criterion to permit the latest version.
Updates pyo3 to 0.27.2

Release notes

Sourced from pyo3's releases.

PyO3 0.27.2

This patch contains very minor fixes for the PyO3 0.27 series:

  • Workaround a rustc 1.92+ crash compiling PyO3 with both debug assertions and optimizations enabled.
  • Fix runtime crash when subclassing dicts on PyPy and GraalPy.

There are also a number of documentation improvements applied across the codebase.

Thank you to the following contributors for the improvements:

@​davidhewitt @​dependabot[bot] @​MusicalNinjaDad @​pkalivas @​tpoliaw @​Tpt

Changelog

Sourced from pyo3's changelog.

[0.27.2] - 2025-11-30

Changed

  • Disable subclassing PyDict on GraalPy (unsupported for now, may crash at runtime). #5653

Fixed

  • Fix crash when compiling on Rust 1.92+ with both debug assertions and optimizations enabled. #5638
  • Fix FFI definition of PyDictObject on PyPy. #5653

[0.27.1] - 2025-10-21

Fixed

  • Fix clippy:declare_interior_mutable_const warning from #[pyfunction]. #5538
  • Expose pyo3::types::PySendResult in public API. #5539

[0.27.0] - 2025-10-19

Packaging

  • Extend range of supported versions of hashbrown optional dependency to include version 0.16. #5428
  • Bump optional num-bigint dependency minimum version to 0.4.4. #5471
  • Test against Python 3.14 final release. #5499
  • Drop support for PyPy 3.9 and 3.10. #5516
  • Provide a better error message when building an outdated PyO3 for a too-new Python version. #5519

Added

  • Add FromPyObjectOwned as convenient trait bound for FromPyObject when the data is not borrowed from Python. #4390
  • Add Borrowed::extract, same as PyAnyMethods::extract, but does not restrict the lifetime by deref. #4390
  • experimental-inspect: basic support for #[derive(IntoPyObject)] (no struct fields support yet). #5365
  • experimental-inspect: support #[pyo3(get, set)] and #[pyclass(get_all, set_all)]. #5370
  • Add PyTypeCheck::classinfo_object that returns an object that can be used as parameter in isinstance or issubclass. #5387
  • Implement PyTypeInfo on datetime.* types even when the limited API is enabled. #5388
  • Implement PyTypeInfo on PyIterator, PyMapping and PySequence. #5402
  • Implement PyTypeInfo on PyCode when using the stable ABI. #5403
  • Implement PyTypeInfo on PyWeakrefReference when using the stable ABI. #5404
  • Add pyo3::sync::RwLockExt trait, analogous to pyo3::sync::MutexExt for readwrite locks. #5435
  • Add PyString::from_bytes. #5437
  • Implement AsRef<[u8]> for PyBytes. #5445
  • Add CastError and CastIntoError. #5468
  • Add PyCapsuleMethods::pointer_checked and PyCapsuleMethods::is_valid_checked. #5474
  • Add Borrowed::cast, Borrowed::cast_exact and Borrowed::cast_unchecked. #5475
  • Add conversions for jiff::civil::ISOWeekDate. #5478
  • Add conversions for &Cstr, Cstring and Cow<Cstr>. #5482
  • add #[pyclass(skip_from_py_object)] option, to opt-out of the FromPyObject: PyClass + Clone blanket impl. #5488
  • Add PyErr::add_note. #5489
  • Add FromPyObject impl for Cow<Path> & Cow<OsStr>. #5497

... (truncated)

Commits
  • 117102d release: 0.27.2
  • 2b1d6c5 fix FFI definition of PyDictObject on PyPy (#5653)
  • 032d4d3 ci: add lychee cache (#5616)
  • b4f78c0 fix rumdl formatting
  • 0497d48 ci: remove old netlify build files (#5631)
  • f3d6e05 Avoid introducing generic parameter with implied bounds from an associated ty...
  • c8e6597 ci: pin mdbook to 0.4 for now, properly install mdbook-tabs (#5632)
  • 30cca7e build(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#5629)
  • bb7bb94 Update PyIterator::send docs to match behaviour (#5593)
  • 1acadc5 Add radiate to README examples section (#5561)
  • Additional commits viewable in compare view

Updates lopdf to 0.38.0

Changelog

Sourced from lopdf's changelog.

v0.38.0 (2025-08-26)

Add

  • Add enhanced PDF decryption support for encrypted documents with empty passwords
  • Add automatic decryption during document loading for better pdftk compatibility
  • Add raw object extraction before parsing to handle encrypted content
  • Add support for decrypting PDFs with compressed object streams
  • Add comprehensive test suite for PDF decryption functionality
  • Add assets/encrypted.pdf test file for decryption testing
  • Add examples demonstrating decryption capabilities (test_decryption.rs, verify_decryption.rs)

Enhance

  • Enhance Reader::read() to detect and handle encrypted PDFs automatically
  • Enhance document loading to attempt empty password authentication by default
  • Enhance object processing to decrypt objects after parsing
  • Enhance support for encrypted PDFs containing object streams

Fix

  • Fix encrypted object parsing by extracting raw bytes before decryption
  • Fix object stream handling in encrypted documents
  • Fix decryption workflow to match pdftk's approach

Implementation Details

  • Modified src/reader.rs to add load_encrypted_document() method
  • Added extract_raw_object() method for raw byte extraction
  • Added parse_raw_object() method for parsing extracted bytes
  • Store raw object bytes in Reader::raw_objects field for deferred decryption
  • Process compressed objects from object streams after decryption

v0.37.0 (2025-08-08)

Add

  • Add complete PDF object streams write support enabling 11-61% file size reduction (#XXX)
  • Add save_modern() method for easy object streams and cross-reference streams usage
  • Add SaveOptions struct with builder pattern for configuring compression settings
  • Add ObjectStreamBuilder for creating object streams programmatically
  • Add cross-reference stream support for PDF 1.5+ compliance
  • Add replace_partial_text() function for partial text replacement in PDFs
  • Add comprehensive test suite with 50+ tests for object streams functionality
  • Add object streams write capability (previously read-only)
  • Add implementation documentation in OBJECT_STREAMS_IMPLEMENTATION.md

Fix

... (truncated)

Commits

Updates pulldown-cmark to 0.13.0

Release notes

Sourced from pulldown-cmark's releases.

v0.13.0

Breaking Changes

New Features

Bug Fixes and Code Enhancements

Docs

New Contributors

Full Changelog: pulldown-cmark/pulldown-cmark@v0.12.2...v0.13.0

Commits
  • f17d98a chore: bump version to 0.13.0
  • 47f60de chore: cargo update and bump version to 0.12.3
  • e42259f Merge pull request #1018 from notriddle/deflist-lazy
  • 052c635 Merge pull request #1017 from notriddle/master
  • 0ede612 Prevent definition list defs from interrupting non-paragraphs
  • 2c16b4e Fix tasklist parsing bugs
  • c59ff54 Merge pull request #1015 from notriddle/tight-paragraph
  • 4409722 Use an explicit node for tight paragraphs
  • 4564d43 Merge pull request #1010 from ModProg/document-events
  • 62cae02 fix metadatablock doc comment
  • Additional commits viewable in compare view

Updates scraper to 0.25.0

Release notes

Sourced from scraper's releases.

v0.25.0

What's Changed

New Contributors

Full Changelog: rust-scraper/scraper@v0.24.0...v0.25.0

Commits
  • 4cb7107 Version 0.25.0
  • 382c092 Add cargo deny to test github action (#287)
  • 29b3d8f Update repo URL (#286)
  • 943ee24 Bump indexmap from 2.12.0 to 2.12.1
  • 4848e3c Avoid panic for missing or invalid selectors
  • 75b88da Avoid panic for unknown flags
  • 85e6967 Add version flag in executable
  • 381a4bd chore(Cargo.toml): bump servo to 0.36.0
  • 3fca4f1 Merge pull request #278 from rust-scraper/dependabot/cargo/indexmap-2.12.0
  • 8e56e7e Bump indexmap from 2.11.4 to 2.12.0
  • Additional commits viewable in compare view

Updates reqwest to 0.13.1

Release notes

Sourced from reqwest's releases.

v0.13.1

What's Changed

Full Changelog: seanmonstar/reqwest@v0.13.0...v0.13.1

Changelog

Sourced from reqwest's changelog.

v0.13.1

  • Fixes compiling with rustls on Android targets.

v0.13.0

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

v0.12.24

  • Refactor cookie handling to an internal middleware.
  • Refactor internal random generator.
  • Refactor base64 encoding to reduce a copy.
  • Documentation updates.

v0.12.23

  • Add ClientBuilder::unix_socket(path) option that will force all requests over that Unix Domain Socket.
  • Add ClientBuilder::retry(policy) and reqwest::retry::Builder to configure automatic retries.
  • Add ClientBuilder::dns_resolver2() with more ergonomic argument bounds, allowing more resolver implementations.

... (truncated)

Commits

Updates thiserror to 2.0.17

Release notes

Sourced from thiserror's releases.

2.0.17

  • Use differently named __private module per patch release (#434)
Commits
  • 72ae716 Release 2.0.17
  • 599fdce Merge pull request #434 from dtolnay/private
  • 9ec05f6 Use differently named __private module per patch release
  • d2c492b Raise minimum tested compiler to rust 1.76
  • fc3ab95 Opt in to generate-macro-expansion when building on docs.rs
  • 819fe29 Update ui test suite to nightly-2025-09-12
  • 259f48c Enforce trybuild >= 1.0.108
  • 470e6a6 Update ui test suite to nightly-2025-08-24
  • 544e191 Update actions/checkout@v4 -> v5
  • cbc1eba Delete duplicate cap-lints flag from build script
  • Additional commits viewable in compare view

Updates rusqlite to 0.38.0

Release notes

Sourced from rusqlite's releases.

0.38.0

What's Changed

  • bump sqlcipher to 4.10.0 (sqlite 3.50.4) #1725
  • Use CARGO_CFG_TARGET_FEATURE for crt-static check #1737
  • Disable u64, usize ToSql/FromSql impl by default #1732, ##1722 (breaking change)
  • Make statement cache optional #1682, #1173 (breaking change)
  • Remove shell scripts from the published package #1744
  • Use new interfaces with 64-bit length parameters #1749
  • sqlite3_vtab_rhs_value #1753
  • Handle VTab IN values #1754
  • Give access to Connection from VTabCursor::column #1755
  • Bump minimal SQLite version to 3.34.1 #1733, #1731 (breaking change)
  • Bump bundled SQLite version to 3.51.1 #1758
  • Add support for transaction to the vtab module #1761
  • Check Connection is owned when registering Closure as hook #1764 (breaking change)
  • Turn libsqlite3-sys in a !#[no_std] crate #1767
  • Add wasm32-unknown-unknown support #1769, #488, #827
  • Remove useless Send/Sync on Module #1774

Full Changelog: rusqlite/rusqlite@v0.37.0...v0.38.0

Changelog

Sourced from rusqlite's changelog.

For version 0.15.0 and above, see Releases page.

Version 0.14.0 (2018-08-17)

  • BREAKING CHANGE: ToSql implementation for time::Timespec uses RFC 3339 (%Y-%m-%dT%H:%M:%S.%fZ). Previous format was %Y-%m-%d %H:%M:%S:%f %Z.
  • BREAKING CHANGE: Remove potentially conflicting impl of ToSqlOutput (#313).
  • BREAKING CHANGE: Replace column index/count type (i32) with usize.
  • BREAKING CHANGE: Replace parameter index/count type (i32) with usize.
  • BREAKING CHANGE: Replace row changes/count type (i32) with usize.
  • BREAKING CHANGE: Scalar functions must be Sendable and 'static.
  • Bugfix: Commit failure unhandled, database left in unusable state (#366).
  • Bugfix: free_boxed_hook does not work for fn.
  • Update the bundled SQLite version to 3.24.0 (#326).
  • Add DropBehavior::Panic to enforce intentional commit or rollback.
  • Implement sqlite3_update_hook (#260, #328), sqlite3_commit_hook and sqlite3_rollback_hook.
  • Add support to unlock notification behind unlock_notify feature (#294, #331).
  • Make Statement::column_index case-insensitive (#330).
  • Add comment to justify &mut Connection in Transaction.
  • Fix tyvar_behind_raw_pointer warnings.
  • Fix handful of clippy warnings.
  • Fix Connection::open documentation (#332)
  • Add binding to sqlite3_get_autocommit and sqlite3_stmt_busy.
  • Add binding to sqlite3_busy_timeout and sqlite3_busy_handler.
  • Add binding to sqlite3_expanded_sql.
  • Use rerun-if-env-changed in libsqlite3-sys (#329).
  • Return an InvalidQuery error when SQL is not read only.

Version 0.13.0 (2017-11-13)

  • Added ToSqlConversionFailure case to Error enum.
  • Now depends on chrono 0.4, bitflags 1.0, and (optionally) cc 1.0 / bindgen 0.31.
  • The ToSql/FromSql implementations for time::Timespec now include and expect fractional seconds and timezone in the serialized string.
  • The RowIndex type used in Row::get is now publicly exported.
  • New sqlcipher feature allows linking against SQLCipher instead of SQLite.
  • Doc link in README now point to docs.rs.

Version 0.12.0 (2017-05-29)

  • Defines HAVE_USLEEP when building with a bundled SQLite (#263).
  • Updates dependencies to their latest versions, particularly serde to 1.0.
  • Adds support for vcpkg on Windows.
  • Adds ToSql impls for str and [u8].

Version 0.11.0 (2017-04-06)

  • Avoid publicly exporting SQLite constants multiple times from libsqlite3-sys.
  • Adds FromSql and ToSql impls for isize. Documents why usize and u64 are not included.

... (truncated)

Commits

Updates config to 0.15.19

Changelog

Sourced from config's changelog.

[0.15.19] - 2025-11-12

Internal

  • (ron) Update to 0.12

[0.15.18] - 2025-09-30

Fixes

  • Improve consistency between missing field error messages

[0.15.17] - 2025-09-24

Features

  • corn file format support

[0.15.16] - 2025-09-15

Performance

  • Allow more build parallelism by depending on serde_core

[0.15.15] - 2025-08-29

Fixes

  • (json5) Correctly deserialize null (regressed in 0.15.14)

[0.15.14] - 2025-08-12

Performance

  • (json5) Reduce overhead when loading json5 files

[0.15.13] - 2025-07-09

Fixes

  • Skip UTF-8 BOMs when reading files

[0.15.12] - 2025-07-08

Performance

  • Upgrade to toml v0.9

[0.15.11] - 2025-03-12

... (truncated)

Commits

Updates jsonschema to 0.38.1

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.38.1

Fixed

  • multipleOf validation for integer values between 2^53 and i64::MAX.
Changelog

Sourced from jsonschema's changelog.

[0.38.1] - 2025-12-25

Fixed

  • multipleOf validation for integer values between 2^53 and i64::MAX with arbitrary-precision feature.

[0.38.0] - 2025-12-24

Added

  • EmailOptions for configuring email format validation. #903

Fixed

  • Use-after-free in async $ref resolution when multiple refs target the same external URL with different fragments. #906
  • multipleOf validation for large u64 values beyond i64::MAX with arbitrary-precision feature.
  • Validator not being Send + Sync on WASM targets. #915

[0.37.4] - 2025-11-30

Fixed

  • Stack overflow during validation of schemas with circular $ref chains (e.g., a -> b -> a).
  • Local $ref resolution within fragment-extracted external resources. #892

Removed

  • Deprecated PrimitiveType & PrimitiveTypesBitMap.

[0.37.3] - 2025-11-28

Fixed

  • External resources not discovered within subresources of local $ref targets. #892

[0.37.2] - 2025-11-27

Added

  • JsonTypeSet::len() and JsonTypeSet::remove() helpers for managing type sets.

Fixed

  • External resources not discovered through chained local $ref references. #892

[0.37.1] - 2025-11-19

Fixed

  • Stack overflow on empty $ref value. #886

... (truncated)

Commits
  • 4a61579 chore(rust): Release 0.38.1
  • 597551e fix: multipleOf validation for integer values between 2^53 and i64::MAX...
  • f99610b fix: multipleOf validation for integer values between 2^53 and i64::MAX...
  • c07b399 chore(python): Release 0.38.0
  • b95a9f2 docs: Document panics for blocking code in async context
  • 6f532dc chore(rust): Release 0.38.0
  • a55f18c fix: Use-after-free in async $ref resolution when multiple refs target the ...
  • f4bdaa0 chore(python): Remove mask parameter from type stubs of evaluate method
  • e28b4e8 fix: Validator not being Send + Sync on WASM targets
  • 1227a0f chore(python): Remove with_meta_schemas parameter from type stubs
  • Additional commits viewable in compare view

Updates notify to 8.2.0

Release notes

Sourced from notify's releases.

notify-8.2.0

notify 8.2.0 (2025-08-03)

  • FEATURE: notify user if inotify's max_user_watches has been reached #698
  • FIX: INotifyWatcher ignore events with unknown watch descriptors (instead of EventMask::Q_OVERFLOW) #700

#698: notify-rs/notify#698 #700: notify-rs/notify#700

debouncer-full 0.6.0 (2025-08-03)

  • FEATURE: allow FileIdCache trait implementations to choose ownership of the returned file-ids #664
  • FEATURE: added support for the flume crate #680
  • FIX: skip all Modify events right after a Create event, unless it's a rename event #701

#664: notify-rs/notify#664 #680: notify-rs/notify#680 #701: notify-rs/notify#701

debouncer-mini 0.7.0 (2025-08-03)

  • FEATURE: added support for the flume crate #680

file-id 0.2.3 (2025-08-03)

  • CHANGE: implement AsRef<FileId> for FileId #664

Full Changelog: notify-rs/notify@notify-8.1.0...notify-8.2.0

Changelog

Sourced from notify's changelog.

notify 8.2.0 (2025-08-03)

  • FEATURE: notify user if inotify's max_user_watches has been reached #698
  • FIX: INotifyWatcher ignore events with unknown watch descriptors (instead of EventMask::Q_OVERFLOW) #700

#698: notify-rs/notify#698 #700: notify-rs/notify#700

debouncer-full 0.6.0 (2025-08-03)

  • FEATURE: allow FileIdCache trait implementations to choose ownership of the returned file-ids #664
  • FEATURE: added support for the flume crate #680
  • FIX: skip all Modify events right after a Create event, unless it's a rename event #701

#664: notify-rs/notify#664 #680: notify-rs/notify#680 #701: notify-rs/notify#701

debouncer-mini 0.7.0 (2025-08-03)

  • FEATURE: added support for the flume crate #680

file-id 0.2.3 (2025-08-03)

  • CHANGE: implement AsRef<FileId> for FileId #664

notify 8.1.0 (2025-07-03)

  • FEATURE: added support for the flume crate
  • FIX: kqueue-backend: do not double unwatch top-level directory when recursively unwatching #683
  • FIX: Return the crate error PathNotFound instead bubbling up the std::io error #685
  • FIX: fix server hangs when trashing folders on Windows #674

notify 8.0.0 (2025-01-10)

  • CHANGE: update notify-types to version 2.0.0
  • CHANGE: raise MSRV to 1.77 breaking
  • FEATURE: add config option to disable following symbolic links #635
  • FIX: unaligned access to FILE_NOTIFY_INFORMATION #647 breaking

#635: notify-rs/notify#635 #647: notify-rs/notify#647

notify-types 2.0.0 (2025-01-10)

  • CHANGE: replace instant crate with web-time #652 breaking
  • CHANGE: the web-time dependency is now behind the web-time feature breaking

#652: notify-rs/notify#652

debouncer-mini 0.6.0 (2025-01-10)

  • CHANGE: update notify to version 8.0.0

debouncer-full 0.5.0 (2025-01-10)

... (truncated)

Commits
  • a1d7c2d Prepare release (#706)
  • c685ea7 Skip all Modify events right after a Create event, unless it's a rename e...
  • e36d54e fix: INotifyWatcher may raise events with no paths (#700)
  • 394ef18 feat(inotify): notify a user if the max_user_watches has been reached impli...
  • 04473de chore: Prepare 8.1.0 release (#697)
  • 12a026d fix: make PathsMut::commit consuming (#695)
  • d824023 feat: introduce Watcher::paths_mut for adding/removing paths in batch (#692)
  • b984134 Do not clone paths while walking dirs (#693)
  • 416ba82 chore: Use MSRV for Clippy and rustfmt (#694)
  • 10ce3ef Update windows-sys to v0.60 (#691)
  • Additional commits viewable in compare view

Updates indicatif to 0.18.3

Release notes

Sourced from indicatif's releases.

0.18.3

What's Changed

Commits
  • 23100f5 Bump version to 0.18.3
  • 45e5af9 Apply suggestions from clippy 1.91

@dependabot
deps(rust): bump the rust-dependencies group across 1 directory with …
1c943f4 
…21 updates

Updates the requirements on [pyo3](https://github.com/pyo3/pyo3), [lopdf](https://github.com/J-F-Liu/lopdf), [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark), [scraper](https://github.com/rust-scraper/scraper), [reqwest](https://github.com/seanmonstar/reqwest), [thiserror](https://github.com/dtolnay/thiserror), [rusqlite](https://github.com/rusqlite/rusqlite), [config](https://github.com/rust-cli/config-rs), [jsonschema](https://github.com/Stranger6667/jsonschema), [notify](https://github.com/notify-rs/notify), [indicatif](https://github.com/console-rs/indicatif), [directories](https://github.com/soc/directories-rs), [dirs](https://github.com/soc/dirs-rs), [tokenizers](https://github.com/huggingface/tokenizers), [ndarray](https://github.com/rust-ndarray/ndarray), [wasmtime](https://github.com/bytecodealliance/wasmtime), [sysinfo](https://github.com/GuillaumeGomez/sysinfo), [petgraph](https://github.com/petgraph/petgraph), [md5](https://github.com/stainless-steel/md5), [axum](https://github.com/tokio-rs/axum) and [criterion](https://github.com/criterion-rs/criterion.rs) to permit the latest version.

Updates `pyo3` to 0.27.2
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](PyO3/pyo3@v0.24.1...v0.27.2)

Updates `lopdf` to 0.38.0
- [Release notes](https://github.com/J-F-Liu/lopdf/releases)
- [Changelog](https://github.com/J-F-Liu/lopdf/blob/main/CHANGELOG.md)
- [Commits](https://github.com/J-F-Liu/lopdf/commits)

Updates `pulldown-cmark` to 0.13.0
- [Release notes](https://github.com/raphlinus/pulldown-cmark/releases)
- [Commits](pulldown-cmark/pulldown-cmark@v0.10.0...v0.13.0)

Updates `scraper` to 0.25.0
- [Release notes](https://github.com/rust-scraper/scraper/releases)
- [Commits](rust-scraper/scraper@v0.18.0...v0.25.0)

Updates `reqwest` to 0.13.1
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.0...v0.13.1)

Updates `thiserror` to 2.0.17
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.0...2.0.17)

Updates `rusqlite` to 0.38.0
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.32.0...v0.38.0)

Updates `config` to 0.15.19
- [Changelog](https://github.com/rust-cli/config-rs/blob/main/CHANGELOG.md)
- [Commits](rust-cli/config-rs@0.14.0...v0.15.19)

Updates `jsonschema` to 0.38.1
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@rust-v0.18.0...rust-v0.38.1)

Updates `notify` to 8.2.0
- [Release notes](https://github.com/notify-rs/notify/releases)
- [Changelog](https://github.com/notify-rs/notify/blob/main/CHANGELOG.md)
- [Commits](notify-rs/notify@notify-6.1.0...notify-8.2.0)

Updates `indicatif` to 0.18.3
- [Release notes](https://github.com/console-rs/indicatif/releases)
- [Commits](console-rs/indicatif@0.17.0...0.18.3)

Updates `directories` to 6.0.0
- [Commits](https://github.com/soc/directories-rs/commits)

Updates `dirs` to 6.0.0
- [Commits](https://github.com/soc/dirs-rs/commits)

Updates `tokenizers` to 0.22.2
- [Release notes](https://github.com/huggingface/tokenizers/releases)
- [Changelog](https://github.com/huggingface/tokenizers/blob/main/RELEASE.md)
- [Commits](huggingface/tokenizers@v0.19.0...v0.22.2)

Updates `ndarray` to 0.17.1
- [Release notes](https://github.com/rust-ndarray/ndarray/releases)
- [Changelog](https://github.com/rust-ndarray/ndarray/blob/master/RELEASES.md)
- [Commits](rust-ndarray/ndarray@ndarray-rand-0.15.0...0.17.1)

Updates `wasmtime` to 40.0.1
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v40.0.1/RELEASES.md)
- [Commits](bytecodealliance/wasmtime@v24.0.5...v40.0.1)

Updates `sysinfo` to 0.37.2
- [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/main/CHANGELOG.md)
- [Commits](GuillaumeGomez/sysinfo@v0.30.0...v0.37.2)

Updates `petgraph` to 0.8.3
- [Release notes](https://github.com/petgraph/petgraph/releases)
- [Changelog](https://github.com/petgraph/petgraph/blob/master/CHANGELOG.md)
- [Commits](https://github.com/petgraph/petgraph/compare/[email protected]@v0.8.3)

Updates `md5` to 0.8.0
- [Commits](https://github.com/stainless-steel/md5/commits)

Updates `axum` to 0.8.8
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](tokio-rs/axum@axum-v0.7.0...axum-v0.8.8)

Updates `criterion` to 0.8.1
- [Release notes](https://github.com/criterion-rs/criterion.rs/releases)
- [Changelog](https://github.com/criterion-rs/criterion.rs/blob/master/CHANGELOG.md)
- [Commits](criterion-rs/criterion.rs@0.5.0...criterion-v0.8.1)

---
updated-dependencies:
- dependency-name: pyo3
  dependency-version: 0.27.2
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: lopdf
  dependency-version: 0.38.0
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: pulldown-cmark
  dependency-version: 0.13.0
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: scraper
  dependency-version: 0.25.0
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: reqwest
  dependency-version: 0.13.1
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.17
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: rusqlite
  dependency-version: 0.38.0
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: config
  dependency-version: 0.15.19
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: jsonschema
  dependency-version: 0.38.1
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: notify
  dependency-version: 8.2.0
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: indicatif
  dependency-version: 0.18.3
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: directories
  dependency-version: 6.0.0
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: dirs
  dependency-version: 6.0.0
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: tokenizers
  dependency-version: 0.22.2
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: ndarray
  dependency-version: 0.17.1
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: wasmtime
  dependency-version: 40.0.1
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: sysinfo
  dependency-version: 0.37.2
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: petgraph
  dependency-version: 0.8.3
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: md5
  dependency-version: 0.8.0
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: axum
  dependency-version: 0.8.8
  dependency-type: direct:production
  dependency-group: rust-dependencies
- dependency-name: criterion
  dependency-version: 0.8.1
  dependency-type: direct:production
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 9, 2026

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot requested a review from Lenvanderhof as a code owner January 9, 2026 07:44
@Lenvanderhof
Copy link
Contributor

Lenvanderhof commented Jan 10, 2026

Dependabot PR Review - TW-1049

CI Status: FAILING

The CI is failing because Cargo.lock was not updated alongside Cargo.toml. The --locked flag in CI prevents automatic lockfile updates.

Dependency Analysis

This PR includes 21 major version bumps which may introduce breaking API changes:

Dependency From To Impact
pyo3 0.24.1 0.27.2 Python bindings - HIGH
axum 0.7 0.8 Web framework - HIGH
reqwest 0.12 0.13 HTTP client - HIGH
thiserror 1.0 2.0 Error handling - HIGH
rusqlite 0.32 0.38 SQLite - MEDIUM
wasmtime 24.0.5 40.0.1 WASM runtime - MEDIUM
lopdf 0.33 0.38 PDF processing
pulldown-cmark 0.10 0.13 Markdown
scraper 0.18 0.25 HTML parsing
config 0.14 0.15 Configuration
jsonschema 0.18 0.38 JSON validation
notify 6.1 8.2 File watching
indicatif 0.17 0.18 Progress bars
directories 5 6 Directory paths
dirs 5 6 Directory paths
tokenizers 0.19 0.22 HuggingFace
ndarray 0.15 0.17 Tensor ops
sysinfo 0.30 0.37 System info
petgraph 0.6 0.8 Graph structures
md5 0.7 0.8 Hashing
criterion 0.5 0.8 Benchmarks (dev)

Required Actions

  1. Regenerate Cargo.lock - Run cargo update and commit the updated lockfile
  2. Review breaking changes - Especially for axum 0.8, thiserror 2.0, pyo3 0.27, and reqwest 0.13
  3. Fix any compilation errors - Major version bumps often require code changes
  4. Verify tests pass - Run full test suite after dependency updates

Recommendation

DO NOT MERGE until:

  • Cargo.lock is updated and committed
  • CI passes all quality gates
  • Breaking API changes are addressed

This PR should be handled manually with careful review of the changelogs for each major version bump.

Reviewed by rust-pro agent | Task: TW-1049

@Lenvanderhof Lenvanderhof merged commit 65feae0 into main Jan 10, 2026
19 of 48 checks passed
@Lenvanderhof Lenvanderhof deleted the dependabot/cargo/rust-dependencies-d3ac0eef2c branch January 10, 2026 21:36
@Lenvanderhof Lenvanderhof mentioned this pull request Jan 10, 2026
Closed
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Lenvanderhof Lenvanderhof Awaiting requested review from Lenvanderhof Lenvanderhof is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Lenvanderhof