Bump the dependencies group across 1 directory with 12 updates #216

dependabot · 2026-01-05T22:14:44Z

Bumps the dependencies group with 12 updates in the / directory:

Package	From	To
base16ct	`0.3.0`	`1.0.0`
cargo_metadata	`0.21.0`	`0.23.1`
clap	`4.5.52`	`4.5.54`
git2	`0.20.2`	`0.20.3`
goblin	`0.10.3`	`0.10.4`
log	`0.4.28`	`0.4.29`
oci-spec	`0.8.3`	`0.8.4`
serde_json	`1.0.145`	`1.0.148`
tempfile	`3.23.0`	`3.24.0`
toml	`0.9.8`	`0.9.10+spec-1.1.0`
ureq	`2.12.1`	`3.1.4`
uuid	`1.18.1`	`1.19.0`

Updates base16ct from 0.3.0 to 1.0.0

Commits

071bfe6 base16ct v1.0.0 (#2145)
9946628 Use getrandom v0.4.0-rc.0 crate release (#2142)
dfa8651 phc v0.6.0-rc.1 (#2141)
5da2675 phc: bump getrandom to v0.4.0-rc.0 (#2139)
f1b052c Bump rand_core to v0.10.0-rc-3 (#2138)
02eb077 der: bound Decode(Value)::Error on core::error::Error (#2137)
23b3622 base64ct: deprecate Base64Crypt (#2135)
e2a2a4b mcf: replace Base64::Crypt with Base64::ShaCrypt (#2134)
d1e1e64 mcf: avoid intermediate allocations in push_displayable (#2132)
838590c mcf: expand Error into a proper enum (#2119)
Additional commits viewable in compare view

Updates cargo_metadata from 0.21.0 to 0.23.1

Changelog

Sourced from cargo_metadata's changelog.

[0.23.1] - 2025-11-11

Changed

Stabilized build_directory

[0.23.0] - 2025-09-27

Added

Added FeatureName and PackageName newtype wrappers.

[0.22.0] - 2025-08-18

Added

Added pub fn env_remove<K: Into<OsString>>(&mut self, key: K) -> &mut MetadataCommand to MetadataCommand.

Added export of cargo_platform at crate's root module.

Changed

Updated dependencies:

camino from 1.0.7 to 1.1.10

cargo_platform from 0.2.0 to 0.3.0

derive_builder from 0.12 to 0.20

semver from 1.0.7 to 1.0.26

serde_json from 1.0.118 to 1.0.142

serde from 1.0.136 to 1.0.219

thiserror from 2.0.3 to 2.0.12

Made Dependency's source member the same type as Package's source member: Option<Source>.

[0.19.0] - 2024-11-20

Added

Re-exported semver crate directly.

Added implementation of std::ops::Index<&PackageId> for Resolve.

Added pub fn is_kind(&self, name: TargetKind) -> bool to Target.

Added derived implementations of PartialEq, Eq and Hash for Metadata and its members' types.

Added default fields to PackageBuilder.

Added pub fn new(name:version:id:path:) -> Self to PackageBuilder for providing all required fields upfront.

Changed

Bumped MSRV from 1.42.0 to 1.56.0.

Made parse_stream more versatile by accepting anything that implements Read.

Converted TargetKind and CrateType to an enum representation.

Removed

... (truncated)

Commits

c08e66c Merge pull request #317 from Muscraft/stabilize-build-dir
083ca69 chore: Bump version to 0.23.1
84d613b chore: Stabilize build_directory
9d81809 chore: Address new clippy warnings
4d66bd3 Merge pull request #309 from BD103/fix-doc-auto-config
d1a6aa2 fix: cargo_metadata not building on docs.rs
2af44df Merge pull request #307 from smoelius/bump-version
33cf6da Try to get CI to pass
790de54 Bump version
8af4dc4 Merge pull request #304 from smoelius/newtype-wrapper
Additional commits viewable in compare view

Updates clap from 4.5.52 to 4.5.54

Release notes

Sourced from clap's releases.

v4.5.54

[4.5.54] - 2026-01-02

Fixes

(help) Move [default] to its own paragraph when PossibleValue::help is present in --help

v4.5.53

[4.5.53] - 2025-11-19

Features

Add default_values_if, default_values_ifs

Changelog

Sourced from clap's changelog.

[4.5.54] - 2026-01-02

Fixes

(help) Move [default] to its own paragraph when PossibleValue::help is present in --help

[4.5.53] - 2025-11-19

Features

Add default_values_if, default_values_ifs

Commits

194c676 chore: Release
44838f6 docs: Update changelog
0f59d55 Merge pull request #6027 from Alpha1337k/master
3716f9f chore: Release
613b69a docs: Update changelog
d117f7a Merge pull request #6028 from epage/arg
cb8255d feat(builder): Allow quoted id's for arg macro
e2aa2f0 Feat: Add catch-all on external subcommands for zsh
b9c0aee Feat: Add external subcommands test to suite
1036060 Merge pull request #6025 from AldaronLau/typos-in-faq
Additional commits viewable in compare view

Updates git2 from 0.20.2 to 0.20.3

Changelog

Sourced from git2's changelog.

0.20.3 - 2025-12-06

0.20.2...0.20.3

Changed

Bumped requirement to libgit2-sys 0.18.3, which updates libgit2 from 1.9.0 to 1.9.2. #1197

Commits

7cf345c Merge pull request #1197 from ehuss/git2-0.20-br
dd41077 Bump git2 to 0.20.3
a6a58e2 Merge pull request #1195 from ehuss/update-libgit2
See full diff in compare view

Updates goblin from 0.10.3 to 0.10.4

Changelog

Sourced from goblin's changelog.

[0.10.4] - 2025-11-30

Added

elf.reloc: add some missing PowerPC 32-bit relocation type constants, thanks @ivlzme: m4b/goblin#495

Fixed

pe: Fix potential out-of-bounds read in unwind/POGO info parser, thanks @kkent030315: m4b/goblin#498 pe: Reject cyclic resource trees, thanks @Mrmaxmeier: m4b/goblin#499 pe: Handle unpadded resource values in .NET assemblies compiled with Mono, thanks @BinFlip: m4b/goblin#501

Commits

See full diff in compare view

Updates log from 0.4.28 to 0.4.29

Release notes

Sourced from log's releases.

0.4.29

MSRV

This release increases log's MSRV from 1.61.0 to 1.68.0.

What's Changed

docs: Add missing impls from README.md by @AldaronLau in rust-lang/log#703

Point to new URLs for favicon and logo by @AldaronLau in rust-lang/log#704

perf: reduce llvm-lines of FromStr for Level and LevelFilter by @dishmaker in rust-lang/log#709

Replace serde with serde_core by @Thomasdezeeuw in rust-lang/log#712

Fix clippy lints by @Thomasdezeeuw in rust-lang/log#713

Use GitHub Actions to install Rust and cargo-hack by @Thomasdezeeuw in rust-lang/log#715

Exclude old unstable_kv features from testing matrix by @Thomasdezeeuw in rust-lang/log#716

Fix up CI by @KodrAus in rust-lang/log#718

Prepare for 0.4.29 release by @KodrAus in rust-lang/log#719

New Contributors

@AldaronLau made their first contribution in rust-lang/log#703

@dishmaker made their first contribution in rust-lang/log#709

Full Changelog: rust-lang/log@0.4.28...0.4.29

Changelog

Sourced from log's changelog.

[0.4.29] - 2025-12-02

What's Changed

perf: reduce llvm-lines of FromStr for Level and LevelFilter by @dishmaker in rust-lang/log#709

Replace serde with serde_core by @Thomasdezeeuw in rust-lang/log#712

New Contributors

@AldaronLau made their first contribution in rust-lang/log#703

@dishmaker made their first contribution in rust-lang/log#709

Full Changelog: rust-lang/log@0.4.28...0.4.29

Commits

b1e2df7 Merge pull request #719 from rust-lang/cargo/0.4.29
3fe1a54 prepare for 0.4.29 release
7a432d9 Merge pull request #718 from rust-lang/ci/msrv
0689d56 rebump msrv to 1.68.0
46b448e try drop msrv back to 1.61.0
929ab38 fix up doc test feature gate
957cece bump serde-dependent crates
bea40c8 bump msrv to 1.68.0
c540184 Merge pull request #716 from rust-lang/ci-smaller-matrix2
c971e63 Merge branch 'master' into ci-smaller-matrix2
Additional commits viewable in compare view

Updates oci-spec from 0.8.3 to 0.8.4

Release notes

Sourced from oci-spec's releases.

v0.8.4

What's Changed

Other Changes

Release 0.8.3 by @utam0k in youki-dev/oci-spec-rs#294

Avoid extra allocation in Reference::to_string by @stepancheg in youki-dev/oci-spec-rs#297

capability: Add support for flexible capability name formats by @Apokleos in youki-dev/oci-spec-rs#299

Expose function to build reference from a tag and digest by @toksdotdev in youki-dev/oci-spec-rs#300

feat(state): introduce State and ContainerState structures by @nayuta723 in youki-dev/oci-spec-rs#302

feat(zos): add support for z/OS based containers by @nayuta723 in youki-dev/oci-spec-rs#303

New Contributors

@toksdotdev made their first contribution in youki-dev/oci-spec-rs#300

Full Changelog: youki-dev/oci-spec-rs@v0.8.3...v0.8.4

Commits

3b56a02 Bump to 0.8.4
9686335 feat(zos): add support for z/OS based containers
f65cac0 docs(state): enhance documentation for SECCOMP_FD_NAME constant and update OC...
a745110 feat(tests): add unit test for loading and saving State
3f0233b chore(dependencies): update tempfile to version 3.23.0 and improve state impl...
97d9996 feat(state): introduce State and ContainerState structures
a217db0 Merge pull request #300 from toksdotdev/toks/expose-reference-new
3028cac chore(clippy): fix lint failure
f42632b chore(docs): improve doc comments for Reference::with_tag_and_digest
8a41755 feat(reference): expose generic function for building references
Additional commits viewable in compare view

Updates serde_json from 1.0.145 to 1.0.148

Release notes

Sourced from serde_json's releases.

v1.0.148

Update zmij dependency to 1.0

v1.0.147

Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Set fast_arithmetic=64 for riscv64 (#1305, thanks @Xeonacid)

Commits

8b291c4 Release 1.0.148
1aefe15 Update to zmij 1.0
62d6e8d Release 1.0.147
fd829a6 Merge pull request #1304 from dtolnay/zmij
e757a3d Switch from ryu -> zmij for float formatting
75ad7e6 Release 1.0.146
bc6c827 Merge pull request #1305 from Xeonacid/patch-1
a09210a Set fast_arithmetic=64 for riscv64
01182e5 Update actions/upload-artifact@v5 -> v6
383b13a Update actions/upload-artifact@v4 -> v5
Additional commits viewable in compare view

Updates tempfile from 3.23.0 to 3.24.0

Changelog

Sourced from tempfile's changelog.

3.24.0

Actually support WASIp2 without the nightly feature. This library is now feature complete on WASIp2 without any additional feature flags.

Exclude CI scripts from the published crate.

Commits

1712764 chore: release v3.24.0
a8dc864 feat: completely support WASIP2 on stable rust (#382)
5a03572 Exclude CI scripts from published package (#384)
da894f1 build(deps): bump actions/checkout from 5 to 6 (#383)
See full diff in compare view

Updates toml from 0.9.8 to 0.9.10+spec-1.1.0

Commits

e32c7a2 chore: Release
df1c328 docs: Update changelog
b826cf4 feat(edit)!: Allow set_position(None) (#1080)
8043f20 feat(edit)!: Allow set_position(None)
a02c0db feat: Support TOML 1.1 (#1079)
5cfb838 feat(edit): Support TOML 1.1
1eb4d60 feat(toml): Support TOML 1.1
695d788 feat(edit)!: Multi-line inline tables with trailing commas
cc4f7ac feat(toml): Multi-line inline tables with trailing commas
539f8c1 feat(datetime): Make seconds optional
Additional commits viewable in compare view

Updates ureq from 2.12.1 to 3.1.4

Changelog

Sourced from ureq's changelog.

3.1.4

Set content-type with new Multipart form #1133

3.1.3

Fix short read with multi-byte charset #1131

Replace rustls-pemfile usage with rustls-pki-types #1122

Support for env NO_PROXY and proxy config #1118

Experimental multi-part form support #1102

3.1.2

Fix bug when query is after host "example.com?query" #1115

3.1.1

Fix regression in MSRV (hold back native-tls) #1113

Fix edge case regression when setting request header Content-Length: 0 #1109

3.1.0

DECISION: webpki-roots and webpki-root-certs goes from pre-release (0.26) to stable release (1.0.0). This is potentially a big change for ureq users. We release this as semver minor.

Bump all deps to latest #1104

Fixes to CONNECT to follow spec #1103

Send Content-Length for File #1100

native-tls transport capture and surface underlying errors #1093

Bump webpki-roots/webpki-root-certs to 1.0.0 #1089

Bump rustls-platform-verifier to 0.6.0 #1089

Allow the license CDLA-Permissive-2.0 #1089

3.0.12

Chunked transfer handle abrupt close after 0\r\n #1074

Fix incorrect DNS resolving when using proxies #1081

Use + instead of %20 for url encoded form bodies #1071

Fix problem with double-quotes in cookie values #1068

Reduce Body size #1065

Fix featue flag public_suffix for CookieStore #1063

Improve doc for 10MB limit #1061

3.0.11

Fix CONNECT proxy bug #1057

Fix bug setting cookies in redirects #1055

Annotated example for making a Transport #1054

Feature for adding unencoded query parameters #1039

... (truncated)

Commits

428bba8 3.1.4
f38ebd5 Multipart form set content-type
69dfbc9 3.1.3
99bceb8 Update changelog
199a117 Prove CharCodec dont end up on char boundary
0a4b032 Fix CharCodec problem reading short
561e814 Fix links in lib.rs
7e93254 Update changelog
6d3028f Move multipart to unversioned
c4fd455 Fix clippy
Additional commits viewable in compare view

Updates uuid from 1.18.1 to 1.19.0

Release notes

Sourced from uuid's releases.

v1.19.0

What's Changed

Switch serde dependency to serde_core by @paolobarbolini in uuid-rs/uuid#843

Upgrade to 2021 edition and fix most clippy warnings by @paolobarbolini in uuid-rs/uuid#848

Prepare for 1.19.0 release by @KodrAus in uuid-rs/uuid#849

Full Changelog: uuid-rs/uuid@v1.18.1...v1.19.0

Commits

7527cef Merge pull request #849 from uuid-rs/cargo/v1.19.0
d0422fa prepare for 1.19.0 release
f9a36e2 Merge pull request #848 from paolobarbolini/maintenance
029a57e Fix most clippy warnings
e73bb27 Upgrade to 2021 edition
c597622 Merge pull request #843 from paolobarbolini/serde_core-migration
9835bd6 Switch serde dependency to serde_core
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [base16ct](https://github.com/RustCrypto/formats) | `0.3.0` | `1.0.0` | | [cargo_metadata](https://github.com/oli-obk/cargo_metadata) | `0.21.0` | `0.23.1` | | [clap](https://github.com/clap-rs/clap) | `4.5.52` | `4.5.54` | | [git2](https://github.com/rust-lang/git2-rs) | `0.20.2` | `0.20.3` | | [goblin](https://github.com/m4b/goblin) | `0.10.3` | `0.10.4` | | [log](https://github.com/rust-lang/log) | `0.4.28` | `0.4.29` | | [oci-spec](https://github.com/youki-dev/oci-spec-rs) | `0.8.3` | `0.8.4` | | [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.148` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.23.0` | `3.24.0` | | [toml](https://github.com/toml-rs/toml) | `0.9.8` | `0.9.10+spec-1.1.0` | | [ureq](https://github.com/algesten/ureq) | `2.12.1` | `3.1.4` | | [uuid](https://github.com/uuid-rs/uuid) | `1.18.1` | `1.19.0` | Updates `base16ct` from 0.3.0 to 1.0.0 - [Commits](RustCrypto/formats@base16ct/v0.3.0...base16ct/v1.0.0) Updates `cargo_metadata` from 0.21.0 to 0.23.1 - [Release notes](https://github.com/oli-obk/cargo_metadata/releases) - [Changelog](https://github.com/oli-obk/cargo_metadata/blob/main/CHANGELOG.md) - [Commits](oli-obk/cargo_metadata@0.21.0...0.23.1) Updates `clap` from 4.5.52 to 4.5.54 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.52...clap_complete-v4.5.54) Updates `git2` from 0.20.2 to 0.20.3 - [Changelog](https://github.com/rust-lang/git2-rs/blob/git2-0.20.3/CHANGELOG.md) - [Commits](rust-lang/git2-rs@git2-0.20.2...git2-0.20.3) Updates `goblin` from 0.10.3 to 0.10.4 - [Changelog](https://github.com/m4b/goblin/blob/master/CHANGELOG.md) - [Commits](https://github.com/m4b/goblin/commits) Updates `log` from 0.4.28 to 0.4.29 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.28...0.4.29) Updates `oci-spec` from 0.8.3 to 0.8.4 - [Release notes](https://github.com/youki-dev/oci-spec-rs/releases) - [Changelog](https://github.com/youki-dev/oci-spec-rs/blob/main/release.md) - [Commits](youki-dev/oci-spec-rs@v0.8.3...v0.8.4) Updates `serde_json` from 1.0.145 to 1.0.148 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.145...v1.0.148) Updates `tempfile` from 3.23.0 to 3.24.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.23.0...v3.24.0) Updates `toml` from 0.9.8 to 0.9.10+spec-1.1.0 - [Commits](toml-rs/toml@toml-v0.9.8...toml-v0.9.10) Updates `ureq` from 2.12.1 to 3.1.4 - [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md) - [Commits](algesten/ureq@2.12.1...3.1.4) Updates `uuid` from 1.18.1 to 1.19.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.18.1...v1.19.0) --- updated-dependencies: - dependency-name: base16ct dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: cargo_metadata dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: clap dependency-version: 4.5.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: git2 dependency-version: 0.20.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: goblin dependency-version: 0.10.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: log dependency-version: 0.4.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: oci-spec dependency-version: 0.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: serde_json dependency-version: 1.0.148 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tempfile dependency-version: 3.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: toml dependency-version: 0.9.10+spec-1.1.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: ureq dependency-version: 3.1.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: uuid dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 5, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the dependencies group across 1 directory with 12 updates #216

Bump the dependencies group across 1 directory with 12 updates #216

Uh oh!

dependabot bot commented on behalf of github Jan 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Bump the dependencies group across 1 directory with 12 updates #216

Are you sure you want to change the base?

Bump the dependencies group across 1 directory with 12 updates #216

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 5, 2026

[0.23.1] - 2025-11-11

Changed

[0.23.0] - 2025-09-27

Added

[0.22.0] - 2025-08-18

Added

Changed

[0.19.0] - 2024-11-20

Added

Changed

Removed

v4.5.54

[4.5.54] - 2026-01-02

Fixes

v4.5.53

[4.5.53] - 2025-11-19

Features

[4.5.54] - 2026-01-02

Fixes

[4.5.53] - 2025-11-19

Features

0.20.3 - 2025-12-06

Changed

[0.10.4] - 2025-11-30

Added

Fixed

0.4.29

MSRV

What's Changed

New Contributors

[0.4.29] - 2025-12-02

What's Changed

New Contributors

v0.8.4

What's Changed

Other Changes

New Contributors

v1.0.148

v1.0.147

v1.0.146

3.24.0

3.1.4

3.1.3

3.1.2

3.1.1

3.1.0

3.0.12

3.0.11

v1.19.0

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants