chore(deps): update winnow requirement from 0.7.0 to 1.0.0

[dependabot]

Updates the requirements on winnow to permit the latest version.

Changelog

Sourced from winnow's changelog.

[1.0.0] - 2026-03-17

Note: going to v1 is more a reflection of the rate of churn in Winnow's API than the quality of previous releases or any statement against future breaking changes.

Migration Guide

1. Update to latest v0.7 release
2. Resolve deprecations
3. Upgrade to v1
4. Add ascii, binary, or parser features as needed
5. Break tuples into tuples-of-tuples as needed

Compatibility

• Added parser, ascii, and binary feature gates to improve build times
• Reduce 'impl ContainsToken for Tuple' to 10 elements to improve build times
• Reduce 'impl Alt for Tuple' to 10 elements to improve build times
• Reduce 'impl Parser for Tuple' to 10 elements to improve build times
• Replaced (I, usize) with binary::bits::Bits to clarify intent
• Moved BitOffsets from stream to binary::bits to consolidate the API
• Make iterator impure like parsers
• Replace Stream::raw with Stream::trace
• Remove deprecated APIs

Performance

Build time

• Reduce macro-generated code
• Split off parser, ascii, and binary features

Runtime

• Optimize hex_uint

Features

• Add Parser::parse_iter

Fixes

• Export Needed in stream
• Correct trace for oct_digit1
• Allow escaped into a Cow
• Accept a parser for escaped, take_escaped control character for not-quite unicode parsing

[0.7.15] - 2026-03-05

Compatibility

• Deprecate combinator::permutation in favor of combinator::unordered_seq!

... (truncated)

Commits

• 9072a31 chore: Release
• 43727aa docs: Update changelog
• 7900619 Merge pull request #898 from epage/escaped
• c255e13 fix(ascii): Allow non-unicode control characters
• 80b9e35 test(ascii): Verify escaped bad behavior
• 2da9f01 fix(ascii): Be consistent in escaped parameter order
• 2b1478d Merge pull request #897 from epage/iter
• 4953b6f feat(parser): Add Parser::parse_iter
• dd0ab86 Merge pull request #896 from epage/iter
• 912a150 fix(comb)!: Make iterator impure like parsers
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[kilo-code-bot]

Code Review Summary

Status: 1 Issue Found | Recommendation: Address before merge

Overview

Severity	Count
CRITICAL	1
WARNING	0
SUGGESTION	0

Issue Details (click to expand)

CRITICAL

File	Line	Issue
Cargo.toml	23	Missing required feature flags for winnow 1.0.0

Other Observations (not in diff)

The winnow 1.0.0 changelog indicates that feature gates were added for parser, ascii, and binary modules. The code in src/tokenizer.rs uses APIs from both the ascii and parser modules, but these features are not enabled in the dependency declaration.

Required fix: Update line 23 in Cargo.toml to include the required features:

winnow = { version = "1.0.0", features = ["simd", "ascii", "parser"] }

Files Reviewed (1 file)

• Cargo.toml - 1 issue

Fix these issues in Kilo Cloud

[dependabot]

Superseded by #125.