Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps the cargo group with 65 updates:

Package From To
anyhow 1.0.99 1.0.100
clap 4.5.46 4.5.48
clap_complete 4.5.57 4.5.58
tracing-forest 0.1.6 0.2.0
serde_derive 1.0.219 1.0.228
thiserror 2.0.16 2.0.17
serde 1.0.219 1.0.228
memchr 2.7.5 2.7.6
bitflags 2.9.3 2.9.4
libc 0.2.175 0.2.176
tempfile 3.21.0 3.23.0
bytesize 2.0.1 2.1.0
rustix 1.0.8 1.1.2
quote 1.0.40 1.0.41
trybuild 1.0.110 1.0.111
expectrl 0.7.1 0.8.0
windows-sys 0.60.2 0.61.1
windows 0.61.3 0.62.1
regex 1.11.2 1.11.3
insta 1.43.1 1.43.2
async-io 2.5.0 2.6.0
fs-err 3.1.1 3.1.2
sysinfo 0.37.0 0.37.1
serde_json 1.0.143 1.0.145
zip 4.6.0 5.1.1
anstyle 1.0.11 1.0.13
aws-lc-rs 1.13.3 1.14.1
aws-lc-sys 0.30.0 0.32.2
backtrace 0.3.75 0.3.76
bindgen 0.69.5 0.72.1
cc 1.2.35 1.2.39
clap_builder 4.5.46 4.5.48
clap_derive 4.5.45 4.5.47
errno 0.3.13 0.3.14
find-msvc-tools 0.1.0 0.1.2
gimli 0.31.1 0.32.3
hyper-util 0.1.16 0.1.17
indexmap 2.11.0 2.11.4
libredox 0.1.9 0.1.10
linux-raw-sys 0.4.15 0.11.0
log 0.4.27 0.4.28
object 0.36.7 0.37.3
polling 3.10.0 3.11.0
ptyprocess 0.4.1 0.5.0
regex-automata 0.4.10 0.4.11
rustc-hash 1.1.0 2.1.1
rustls 0.23.31 0.23.32
rustls-webpki 0.103.4 0.103.6
schannel 0.1.27 0.1.28
security-framework-sys 2.14.0 2.15.0
serde_spanned 1.0.0 1.0.2
tokio-rustls 0.26.2 0.26.4
toml 0.9.5 0.9.7
toml_datetime 0.7.0 0.7.2
toml_parser 1.0.2 1.0.3
toml_writer 1.0.2 1.0.3
unicode-ident 1.0.18 1.0.19
winapi-util 0.1.10 0.1.11
windows-implement 0.60.0 0.60.1
windows-interface 0.59.1 0.59.2
wit-bindgen 0.45.0 0.45.1
xattr 1.5.1 1.6.1
zerocopy 0.8.26 0.8.27
zerocopy-derive 0.8.26 0.8.27
zeroize 1.8.1 1.8.2

Updates anyhow from 1.0.99 to 1.0.100

Release notes

Sourced from anyhow's releases.

1.0.100

  • Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#426)
Commits
  • 18c2598 Release 1.0.100
  • f271988 Merge pull request #426 from dtolnay/clippyfmt
  • 52f2115 Mark macros with clippy::format_args
  • da5fd9d Raise minimum tested compiler to rust 1.76
  • 211e409 Opt in to generate-macro-expansion when building on docs.rs
  • b48fc02 Enforce trybuild >= 1.0.108
  • d5f59fb Update ui test suite to nightly-2025-09-07
  • 238415d Update ui test suite to nightly-2025-08-24
  • 3bab070 Update actions/checkout@v4 -> v5
  • 4249254 Order cap-lints flag in the same order as thiserror build script
  • See full diff in compare view

Updates clap from 4.5.46 to 4.5.48

Release notes

Sourced from clap's releases.

v4.5.48

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry

v4.5.47

[4.5.47] - 2025-09-02

Features

  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible

Fixes

  • (derive) Update runtime error text to match clap
Changelog

Sourced from clap's changelog.

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry

[4.5.47] - 2025-09-02

Features

  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible

Fixes

  • (derive) Update runtime error text to match clap
Commits
  • c3a1ddc chore: Release
  • 4460ff4 docs: Update changelog
  • 54947a1 Merge pull request #5981 from mernen/fix-bash-clap-complete-space
  • fd3f6d2 fix(complete): Restore nospace in bash
  • 2f6a108 test(complete): Demonstrate current behavior
  • f88be57 style: Ensure consistent newlines
  • f209bce chore: Release
  • f33ff7f docs: Update changelog
  • bf06e6f Merge pull request #5974 from kryvashek/support-clearing-args-matches
  • 5d357ad feat(parser): Added ArgMatches::try_clear_id()
  • Additional commits viewable in compare view

Updates clap_complete from 4.5.57 to 4.5.58

Commits
  • 88f13cb chore: Release
  • fe2d731 docs: Update changelog
  • b256739 Merge pull request #6131 from mernen/do-not-suggest-opts-after-escape
  • 8aaf704 fix(complete): Do not suggest options after "--"
  • 4a86fee test(complete): Illustrate current behavior
  • 281f8ae Merge pull request #6126 from epage/p
  • 3cbce42 docs(cookbook): Make typed-derive easier to maintain
  • 9fd4dc9 docs(cookbook): Provide a custom TypedValueParser
  • 8f8e861 docs(cookbook): Add local enum to typed-derive
  • 926bafe docs(cookbook): Hint at overriding value_name
  • Additional commits viewable in compare view

Updates tracing-forest from 0.1.6 to 0.2.0

Commits

Updates serde_derive from 1.0.219 to 1.0.228

Release notes

Sourced from serde_derive's releases.

v1.0.228

  • Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

v1.0.227

  • Documentation improvements (#2991)

v1.0.226

  • Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @​Mingun)

v1.0.225

  • Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @​rcrisanti)

v1.0.224

  • Remove private types being suggested in rustc diagnostics (#2979)

v1.0.223

  • Fix serde_core documentation links (#2978)

v1.0.222

  • Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @​aytey)

v1.0.221

  • Documentation improvements (#2973)
  • Deprecate serde_if_integer128! macro (#2975)

v1.0.220

Commits
  • a866b33 Release 1.0.228
  • 5adc9e8 Merge pull request #2995 from dtolnay/rustdocflags
  • ab58178 Workaround for RUSTDOCFLAGS='--cfg=docsrs'
  • 415d9fc Release 1.0.227
  • 7c58427 Merge pull request #2991 from dtolnay/inlinecoredoc
  • 9d3410e Merge pull request #2992 from dtolnay/inplaceseed
  • 2fb6748 Remove InPlaceSeed public re-export
  • f8137c7 Inline serde_core into serde in docsrs mode
  • b7dbf7e Merge pull request #2990 from dtolnay/integer128
  • 7c83691 No longer macro_use integer128 module
  • Additional commits viewable in compare view

Updates thiserror from 2.0.16 to 2.0.17

Release notes

Sourced from thiserror's releases.

2.0.17

  • Use differently named __private module per patch release (#434)
Commits
  • 72ae716 Release 2.0.17
  • 599fdce Merge pull request #434 from dtolnay/private
  • 9ec05f6 Use differently named __private module per patch release
  • d2c492b Raise minimum tested compiler to rust 1.76
  • fc3ab95 Opt in to generate-macro-expansion when building on docs.rs
  • 819fe29 Update ui test suite to nightly-2025-09-12
  • 259f48c Enforce trybuild >= 1.0.108
  • 470e6a6 Update ui test suite to nightly-2025-08-24
  • 544e191 Update actions/checkout@v4 -> v5
  • cbc1eba Delete duplicate cap-lints flag from build script
  • See full diff in compare view

Updates serde from 1.0.219 to 1.0.228

Release notes

Sourced from serde's releases.

v1.0.228

  • Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

v1.0.227

  • Documentation improvements (#2991)

v1.0.226

  • Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @​Mingun)

v1.0.225

  • Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @​rcrisanti)

v1.0.224

  • Remove private types being suggested in rustc diagnostics (#2979)

v1.0.223

  • Fix serde_core documentation links (#2978)

v1.0.222

  • Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @​aytey)

v1.0.221

  • Documentation improvements (#2973)
  • Deprecate serde_if_integer128! macro (#2975)

v1.0.220

Commits
  • a866b33 Release 1.0.228
  • 5adc9e8 Merge pull request #2995 from dtolnay/rustdocflags
  • ab58178 Workaround for RUSTDOCFLAGS='--cfg=docsrs'
  • 415d9fc Release 1.0.227
  • 7c58427 Merge pull request #2991 from dtolnay/inlinecoredoc
  • 9d3410e Merge pull request #2992 from dtolnay/inplaceseed
  • 2fb6748 Remove InPlaceSeed public re-export
  • f8137c7 Inline serde_core into serde in docsrs mode
  • b7dbf7e Merge pull request #2990 from dtolnay/integer128
  • 7c83691 No longer macro_use integer128 module
  • Additional commits viewable in compare view

Updates memchr from 2.7.5 to 2.7.6

Commits

Updates bitflags from 2.9.3 to 2.9.4

Release notes

Sourced from bitflags's releases.

2.9.4

What's Changed

Full Changelog: bitflags/bitflags@2.9.3...2.9.4

Changelog

Sourced from bitflags's changelog.

2.9.4

What's Changed

Full Changelog: bitflags/bitflags@2.9.3...2.9.4

Commits

Updates libc from 0.2.175 to 0.2.176

Release notes

Sourced from libc's releases.

0.2.176

Support

  • The default FreeBSD version has been raised from 11 to 12. This matches rustc since 1.78. (#2406)
  • Debug is now always implemented, rather than being gated behind the extra_traits feature. (#4624)

Added

  • AIX: Restore some non-POSIX functions guarded by the _KERNEL macro. (#4607)
  • FreeBSD 14: Add st_fileref to struct stat (#4642)
  • Haiku: Add the accept4 POSIX call (#4586)
  • Introduce a wrapper for representing padding (#4632)
  • Linux: Add EM_RISCV (#4659)
  • Linux: Add MS_NOSYMFOLLOW (#4389)
  • Linux: Add backtrace_symbols(_fd) (#4668)
  • Linux: Add missing SOL_PACKET optnames (#4669)
  • Musl s390x: Add SYS_mseal (#4549)
  • NuttX: Add __errno (#4687)
  • Redox: Add dirfd, VDISABLE, and resource consts (#4660)
  • Redox: Add more resource.h, fcntl.h constants (#4666)
  • Redox: Enable strftime and mkostemp[s] (#4629)
  • Unix, Windows: Add qsort_r (Unix), and qsort(_s) (Windows) (#4677)
  • Unix: Add dlvsym for Linux-gnu, FreeBSD, and NetBSD (#4671)
  • Unix: Add sigqueue (#4620)

Changed

  • FreeBSD 15: Mark kinfo_proc as non-exhaustive (#4553)
  • FreeBSD: Set the ELF symbol version for readdir_r (#4694)
  • Linux: Correct the config for whether or not epoll_event is packed (#4639)
  • Tests: Replace the old ctest with the much more reliable new implementation (#4655 and many related PRs)

Fixed

  • AIX: Fix the type of the 4th arguement of getgrnam_r ([#4656](rust-lang/libc#4656
  • FreeBSD: Limit P_IDLEPROC to FreeBSD 15 (#4640)
  • FreeBSD: Limit mcontext_t::mc_tlsbase to FreeBSD 15 (#4640)
  • FreeBSD: Update gating of mcontext_t.mc_tlsbase (#4703)
  • Musl s390x: Correct the definition of statfs[64] (#4549)
  • Musl s390x: Make fpreg_t a union (#4549)
  • Redox: Fix the types of gid_t and uid_t (#4689)
  • Redox: Fix the value of MAP_FIXED (#4684)

Deprecated

  • Apple: Correct the deprecated attribute for iconv (a97a0b53)
  • FreeBSD: Deprecate TIOCMGDTRWAIT and TIOCMSDTRWAIT (#4685)

Removed

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.176 - 2025-09-23

Support

  • The default FreeBSD version has been raised from 11 to 12. This matches rustc since 1.78. (#2406)
  • Debug is now always implemented, rather than being gated behind the extra_traits feature. (#4624)

Added

  • AIX: Restore some non-POSIX functions guarded by the _KERNEL macro. (#4607)
  • FreeBSD 14: Add st_fileref to struct stat (#4642)
  • Haiku: Add the accept4 POSIX call (#4586)
  • Introduce a wrapper for representing padding (#4632)
  • Linux: Add EM_RISCV (#4659)
  • Linux: Add MS_NOSYMFOLLOW (#4389)
  • Linux: Add backtrace_symbols(_fd) (#4668)
  • Linux: Add missing SOL_PACKET optnames (#4669)
  • Musl s390x: Add SYS_mseal (#4549)
  • NuttX: Add __errno (#4687)
  • Redox: Add dirfd, VDISABLE, and resource consts (#4660)
  • Redox: Add more resource.h, fcntl.h constants (#4666)
  • Redox: Enable strftime and mkostemp[s] (#4629)
  • Unix, Windows: Add qsort_r (Unix), and qsort(_s) (Windows) (#4677)
  • Unix: Add dlvsym for Linux-gnu, FreeBSD, and NetBSD (#4671)
  • Unix: Add sigqueue (#4620)

Changed

  • FreeBSD 15: Mark kinfo_proc as non-exhaustive (#4553)
  • FreeBSD: Set the ELF symbol version for readdir_r (#4694)
  • Linux: Correct the config for whether or not epoll_event is packed (#4639)
  • Tests: Replace the old ctest with the much more reliable new implementation (#4655 and many related PRs)

Fixed

  • AIX: Fix the type of the 4th arguement of getgrnam_r ([#4656](rust-lang/libc#4656
  • FreeBSD: Limit P_IDLEPROC to FreeBSD 15 (#4640)
  • FreeBSD: Limit mcontext_t::mc_tlsbase to FreeBSD 15 (#4640)
  • FreeBSD: Update gating of mcontext_t.mc_tlsbase (#4703)
  • Musl s390x: Correct the definition of statfs[64] (#4549)
  • Musl s390x: Make fpreg_t a union (#4549)
  • Redox: Fix the types of gid_t and uid_t (#4689)
  • Redox: Fix the value of MAP_FIXED (#4684)

Deprecated

  • Apple: Correct the deprecated attribute for iconv (a97a0b53)
  • FreeBSD: Deprecate TIOCMGDTRWAIT and TIOCMSDTRWAIT (#4685)

Removed

... (truncated)

Commits
  • 15e1389 chore: Release libc 0.2.176
  • 6ca5571 Warn on missing debug implementations
  • e653c54 cleanup: Remove the const_fn! macro
  • e447441 cleanup: Simplify the syntax of f! and similar macros
  • 776a614 cleanup: Use target_vendor = "apple"
  • d32f60d doc: Remove an unneeded link to the old ctest repo
  • 8c8584b Resolve a ctest FIXME regarding use of size_of in array lengths
  • 09c8436 Remove the libc_ctest feature
  • fd3ffe4 Remove libc_const_extern_fn
  • 9b77a49 Add a note about why Padding requires T: Copy
  • Additional commits viewable in compare view

Updates tempfile from 3.21.0 to 3.23.0

Changelog

Sourced from tempfile's changelog.

3.23.0

  • Remove need for the "nightly" feature to compile with "wasip2".

3.22.0

  • Updated windows-sys requirement to allow version 0.61.x
  • Remove unstable-windows-keep-open-tempfile feature.
Commits
  • fe9f4a3 chore: release v3.23.0 (#381)
  • 006c3fd fix: use std::os::fd instead of std::os::wasi (#380)
  • b0e6309 doc: Update COPYRIGHT link (#377)
  • 2d6fc3f Fix formatting in Builder::disable_cleanup documentation (#375)
  • f720dbe chore: release 3.22.0
  • 55d742c chore: remove deprecated unstable feature flag
  • bc41a0b build(deps): update windows-sys requirement from >=0.52, <0.61 to >=0.52, <0....
  • 3c55387 test: make sure we don't drop tempdirs early (#373)
  • 17bf644 doc(builder): clarify permissions (#372)
  • c7423f1 doc(env): document the alternative to setting the tempdir (#371)
  • Additional commits viewable in compare view

Updates bytesize from 2.0.1 to 2.1.0

Release notes

Sourced from bytesize's releases.

bytesize: v2.1.0

  • Support parsing and formatting exabytes (EB) & exbibytes (EiB).
  • Migrate serde dependency to serde_core.
Changelog

Sourced from bytesize's changelog.

2.1.0

  • Support parsing and formatting exabytes (EB) & exbibytes (EiB).
  • Migrate serde dependency to serde_core.
Commits
  • ac756bb chore(bytesize): prepare release 2.1.0
  • 3a0de52 chore: migrate to serde_core
  • e816797 feat: add exabyte and exbibyte support (#101)
  • 3b89d01 chore(deps): bump actions/checkout from 4 to 5 (#105)
  • 62e38cb chore(deps): bump actions-rust-lang/setup-rust-toolchain (#104)
  • 4beb271 chore(deps): bump codecov/codecov-action from 5.4.3 to 5.5.0 (#106)
  • 731c44c chore(deps): bump taiki-e/install-action from 2.57.8 to 2.58.29 (#107)
  • 6613704 chore(deps): bump arbitrary from 1.4.1 to 1.4.2 (#108)
  • 1463664 chore(deps): bump serde_json from 1.0.142 to 1.0.143 (#109)
  • 8476c8a fix(ci): use variables directly in formatting for clippy (#103)
  • Additional commits viewable in compare view

Updates rustix from 1.0.8 to 1.1.2

Commits

Updates quote from 1.0.40 to 1.0.41

Release notes

Sourced from quote's releases.

1.0.41

  • Improve compile error when repetition contains no interpolated value that is an iterator (#302)
Commits
  • 594c865 Release 1.0.41
  • 68956e6 Merge pull request #302 from dtolnay/hasiter
  • 6a69784 Make diagnostic attribute conditional on compiler version
  • 5f1924b Tweak CheckHasIterator error message
  • c0adb26 Add diagnostic::on_unimplemented for no iterator in repetition
  • a1ddcab Combine HasIterator and ThereIsNoIteratorInRepetition to one type
  • bf48c85 Switch to trait for checking iterator in repetition
  • d3b4777 Update ui test suite to nightly-2025-09-27
  • 3e6b04d Raise minimum tested compiler to rust 1.76
  • 07deaaf Opt in to generate-macro-expansion when building on docs.rs
  • Additional commits viewable in compare view

Updates trybuild from 1.0.110 to 1.0.111

Release notes

Sourced from trybuild's releases.

1.0.111

  • Normalize dependency crate's version in filepaths (#316)
Commits

Updates expectrl from 0.7.1 to 0.8.0

Commits

Updates windows-sys from 0.60.2 to 0.61.1

Release notes

Sourced from windows-sys's releases.

61

Major crate updates:

  • windows 0.59.0
  • windows-core 0.59.0
    • windows-implement 0.59.0
    • windows-interface 0.59.0
  • windows-targets 0.53.0
    • windows_i686_msvc 0.53.0
    • windows_x86_64_msvc 0.53.0
    • windows_aarch64_msvc 0.53.0
    • windows_i686_gnu 0.53.0
    • windows_x86_64_gnu 0.53.0
    • windows_i686_gnullvm 0.53.0
    • windows_x86_64_gnullvm 0.53.0
    • windows_aarch64_gnullvm 0.53.0
  • windows-bindgen 0.59.0
  • windows-registry 0.4.0
  • windows-result 0.3.0
  • windows-strings 0.3.0
  • cppwinrt 0.2.0

Minor crate updates:

  • windows-version 0.1.2

Excluded:

  • windows-sys 0.59.0

Things to keep in mind:

  • The tag/release names no longer map directly to the crate versions, so to find samples for a particular release requires looking at the releases page and finding the release that most recently updated a particular crate.

  • The windows-bindgen crate includes the major code generation overhaul that brings many improvements - be sure to check out the PR description for more information. The resulting code gen depends on the new version of windows-core and its dependencies, unless you include the --sys option. #3359

  • The cppwinrt crate constitutes a major update due to streamlining the error handling. #3415

  • The windows-registry, windows-strings, and windows-result crates are also major version updates since they include small breaking changes.

  • The windows-targets crate finally receives a major version update, the first in over a year. This is due to #3359 and #3342 potentially introducing breaking changes. Although unlikely, these updates introduced sufficient changes that make it hard to ensure that the windows-targets libs don't break existing code. As we're updating windows-targets anyway, I took the liberty to bump the MSRV to 1.60 - to match the latest version of windows-sys - and remove the old but unused doc macro feature. Both remained for compatibility with very old dependents of the windows-targets crate.

  • The windows-version crate receives a minor update to update its dependency on the windows-targets crate.

  • Beyond these specifics, this update is the culmination of around 6 months worth of work on the windows-rs project. The biggest improvements comes from the new code generation engine, but many other improvements are now also available for production. This includes support for many new lints, warnings, and suggestions provided by the Rust toolchain; much smaller code gen thanks to deriving many more traits; more efficient code gen; major improvements to WinRT type system and implementation support; more robust and consistent error handling; stock collection and async support; improved support for class hierarchies; and much more!

In addition to "what's changed" below, check out what's changed for notes for 0.60.0 and 0.59.0 for additional changes that roll up to the crates published as part of this release.

What's Changed

... (truncated)

Commits

Updates windows from 0.61.3 to 0.62.1

Commits

Updates regex from 1.11.2 to 1.11.3

Changelog

Sourced from regex's changelog.

1.11.3 (2025-09-25)

This is a small patch release with an improvement in memory usage in some cases.

Improvements:

Commits

Updates insta from 1.43.1 to 1.43.2

Release notes

Sourced from insta's releases.

1.43.2

Release Notes

  • Fix panics when cargo metadata fails to execute or parse (e.g., when cargo is not in PATH or returns invalid output). Now falls back to using the manifest directory as the workspace root. #798 (@​adriangb)
  • Fix clippy uninlined_format_args lint warnings. #801
  • Changed diff line numbers to 1-based indexing. #799
  • Preserve snapshot names with INSTA_GLOB_FILTER. #786
  • Bumped libc crate to 0.2.174, fixing building on musl targets, and increasing the MSRV of insta to 1.64.0 (released Sept 2022). #784
  • Fix clippy 1.88 errors. #783
  • Fix source path in snapshots for non-child workspaces. #778
  • Add lifetime to Selector in redaction iterator. #779

Install cargo-insta 1.43.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.43.2

File Platform Checksum
cargo-insta-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
cargo-insta-x86_64-apple-darwin.tar.xz Intel macOS checksum
cargo-insta-x86_64-pc-windows-msvc.zip x64 Windows checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum
Changelog

Sourced from insta's changelog.

1.43.2

  • Fix panics when cargo metadata fails to execute or parse (e.g., when cargo is not in PATH or returns invalid output). Now falls back to using the manifest directory as the workspace root. #798 (@​adriangb)
  • Fix clippy uninlined_format_args lint warnings. #801
  • C...

    Description has been truncated

Bumps the cargo group with 65 updates:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.99` | `1.0.100` |
| [clap](https://github.com/clap-rs/clap) | `4.5.46` | `4.5.48` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.5.57` | `4.5.58` |
| [tracing-forest](https://github.com/QnnOkabayashi/tracing-forest) | `0.1.6` | `0.2.0` |
| [serde_derive](https://github.com/serde-rs/serde) | `1.0.219` | `1.0.228` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.16` | `2.0.17` |
| [serde](https://github.com/serde-rs/serde) | `1.0.219` | `1.0.228` |
| [memchr](https://github.com/BurntSushi/memchr) | `2.7.5` | `2.7.6` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.9.3` | `2.9.4` |
| [libc](https://github.com/rust-lang/libc) | `0.2.175` | `0.2.176` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.21.0` | `3.23.0` |
| [bytesize](https://github.com/bytesize-rs/bytesize) | `2.0.1` | `2.1.0` |
| [rustix](https://github.com/bytecodealliance/rustix) | `1.0.8` | `1.1.2` |
| [quote](https://github.com/dtolnay/quote) | `1.0.40` | `1.0.41` |
| [trybuild](https://github.com/dtolnay/trybuild) | `1.0.110` | `1.0.111` |
| [expectrl](https://github.com/zhiburt/expectrl) | `0.7.1` | `0.8.0` |
| [windows-sys](https://github.com/microsoft/windows-rs) | `0.60.2` | `0.61.1` |
| [windows](https://github.com/microsoft/windows-rs) | `0.61.3` | `0.62.1` |
| [regex](https://github.com/rust-lang/regex) | `1.11.2` | `1.11.3` |
| [insta](https://github.com/mitsuhiko/insta) | `1.43.1` | `1.43.2` |
| [async-io](https://github.com/smol-rs/async-io) | `2.5.0` | `2.6.0` |
| [fs-err](https://github.com/andrewhickman/fs-err) | `3.1.1` | `3.1.2` |
| [sysinfo](https://github.com/GuillaumeGomez/sysinfo) | `0.37.0` | `0.37.1` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.143` | `1.0.145` |
| [zip](https://github.com/zip-rs/zip2) | `4.6.0` | `5.1.1` |
| [anstyle](https://github.com/rust-cli/anstyle) | `1.0.11` | `1.0.13` |
| [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.13.3` | `1.14.1` |
| [aws-lc-sys](https://github.com/aws/aws-lc-rs) | `0.30.0` | `0.32.2` |
| [backtrace](https://github.com/rust-lang/backtrace-rs) | `0.3.75` | `0.3.76` |
| [bindgen](https://github.com/rust-lang/rust-bindgen) | `0.69.5` | `0.72.1` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.35` | `1.2.39` |
| [clap_builder](https://github.com/clap-rs/clap) | `4.5.46` | `4.5.48` |
| [clap_derive](https://github.com/clap-rs/clap) | `4.5.45` | `4.5.47` |
| [errno](https://github.com/lambda-fairy/rust-errno) | `0.3.13` | `0.3.14` |
| [find-msvc-tools](https://github.com/rust-lang/cc-rs) | `0.1.0` | `0.1.2` |
| [gimli](https://github.com/gimli-rs/gimli) | `0.31.1` | `0.32.3` |
| [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.16` | `0.1.17` |
| [indexmap](https://github.com/indexmap-rs/indexmap) | `2.11.0` | `2.11.4` |
| libredox | `0.1.9` | `0.1.10` |
| [linux-raw-sys](https://github.com/sunfishcode/linux-raw-sys) | `0.4.15` | `0.11.0` |
| [log](https://github.com/rust-lang/log) | `0.4.27` | `0.4.28` |
| [object](https://github.com/gimli-rs/object) | `0.36.7` | `0.37.3` |
| [polling](https://github.com/smol-rs/polling) | `3.10.0` | `3.11.0` |
| [ptyprocess](https://github.com/zhiburt/ptyprocess) | `0.4.1` | `0.5.0` |
| [regex-automata](https://github.com/rust-lang/regex) | `0.4.10` | `0.4.11` |
| [rustc-hash](https://github.com/rust-lang/rustc-hash) | `1.1.0` | `2.1.1` |
| [rustls](https://github.com/rustls/rustls) | `0.23.31` | `0.23.32` |
| [rustls-webpki](https://github.com/rustls/webpki) | `0.103.4` | `0.103.6` |
| [schannel](https://github.com/steffengy/schannel-rs) | `0.1.27` | `0.1.28` |
| [security-framework-sys](https://github.com/kornelski/rust-security-framework) | `2.14.0` | `2.15.0` |
| [serde_spanned](https://github.com/toml-rs/toml) | `1.0.0` | `1.0.2` |
| [tokio-rustls](https://github.com/rustls/tokio-rustls) | `0.26.2` | `0.26.4` |
| [toml](https://github.com/toml-rs/toml) | `0.9.5` | `0.9.7` |
| [toml_datetime](https://github.com/toml-rs/toml) | `0.7.0` | `0.7.2` |
| [toml_parser](https://github.com/toml-rs/toml) | `1.0.2` | `1.0.3` |
| [toml_writer](https://github.com/toml-rs/toml) | `1.0.2` | `1.0.3` |
| [unicode-ident](https://github.com/dtolnay/unicode-ident) | `1.0.18` | `1.0.19` |
| [winapi-util](https://github.com/BurntSushi/winapi-util) | `0.1.10` | `0.1.11` |
| [windows-implement](https://github.com/microsoft/windows-rs) | `0.60.0` | `0.60.1` |
| [windows-interface](https://github.com/microsoft/windows-rs) | `0.59.1` | `0.59.2` |
| [wit-bindgen](https://github.com/bytecodealliance/wit-bindgen) | `0.45.0` | `0.45.1` |
| [xattr](https://github.com/Stebalien/xattr) | `1.5.1` | `1.6.1` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.26` | `0.8.27` |
| [zerocopy-derive](https://github.com/google/zerocopy) | `0.8.26` | `0.8.27` |
| [zeroize](https://github.com/RustCrypto/utils) | `1.8.1` | `1.8.2` |


Updates `anyhow` from 1.0.99 to 1.0.100
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.99...1.0.100)

Updates `clap` from 4.5.46 to 4.5.48
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.46...clap_complete-v4.5.48)

Updates `clap_complete` from 4.5.57 to 4.5.58
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.57...clap_complete-v4.5.58)

Updates `tracing-forest` from 0.1.6 to 0.2.0
- [Commits](https://github.com/QnnOkabayashi/tracing-forest/commits)

Updates `serde_derive` from 1.0.219 to 1.0.228
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.219...v1.0.228)

Updates `thiserror` from 2.0.16 to 2.0.17
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.16...2.0.17)

Updates `serde` from 1.0.219 to 1.0.228
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.219...v1.0.228)

Updates `memchr` from 2.7.5 to 2.7.6
- [Commits](BurntSushi/memchr@2.7.5...2.7.6)

Updates `bitflags` from 2.9.3 to 2.9.4
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.9.3...2.9.4)

Updates `libc` from 0.2.175 to 0.2.176
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.176/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.175...0.2.176)

Updates `tempfile` from 3.21.0 to 3.23.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.21.0...v3.23.0)

Updates `bytesize` from 2.0.1 to 2.1.0
- [Release notes](https://github.com/bytesize-rs/bytesize/releases)
- [Changelog](https://github.com/bytesize-rs/bytesize/blob/master/CHANGELOG.md)
- [Commits](bytesize-rs/bytesize@bytesize-v2.0.1...bytesize-v2.1.0)

Updates `rustix` from 1.0.8 to 1.1.2
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v1.0.8...v1.1.2)

Updates `quote` from 1.0.40 to 1.0.41
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.40...1.0.41)

Updates `trybuild` from 1.0.110 to 1.0.111
- [Release notes](https://github.com/dtolnay/trybuild/releases)
- [Commits](dtolnay/trybuild@1.0.110...1.0.111)

Updates `expectrl` from 0.7.1 to 0.8.0
- [Commits](https://github.com/zhiburt/expectrl/commits)

Updates `windows-sys` from 0.60.2 to 0.61.1
- [Release notes](https://github.com/microsoft/windows-rs/releases)
- [Commits](https://github.com/microsoft/windows-rs/commits)

Updates `windows` from 0.61.3 to 0.62.1
- [Release notes](https://github.com/microsoft/windows-rs/releases)
- [Commits](https://github.com/microsoft/windows-rs/commits)

Updates `regex` from 1.11.2 to 1.11.3
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.11.2...1.11.3)

Updates `insta` from 1.43.1 to 1.43.2
- [Release notes](https://github.com/mitsuhiko/insta/releases)
- [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md)
- [Commits](mitsuhiko/insta@1.43.1...1.43.2)

Updates `async-io` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/smol-rs/async-io/releases)
- [Changelog](https://github.com/smol-rs/async-io/blob/master/CHANGELOG.md)
- [Commits](smol-rs/async-io@v2.5.0...v2.6.0)

Updates `fs-err` from 3.1.1 to 3.1.2
- [Changelog](https://github.com/andrewhickman/fs-err/blob/main/CHANGELOG.md)
- [Commits](https://github.com/andrewhickman/fs-err/commits/3.1.2)

Updates `sysinfo` from 0.37.0 to 0.37.1
- [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/master/CHANGELOG.md)
- [Commits](GuillaumeGomez/sysinfo@v0.37.0...v0.37.1)

Updates `serde_json` from 1.0.143 to 1.0.145
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.143...v1.0.145)

Updates `zip` from 4.6.0 to 5.1.1
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v4.6.0...v5.1.1)

Updates `anstyle` from 1.0.11 to 1.0.13
- [Commits](rust-cli/anstyle@v1.0.11...v1.0.13)

Updates `aws-lc-rs` from 1.13.3 to 1.14.1
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@v1.13.3...v1.14.1)

Updates `aws-lc-sys` from 0.30.0 to 0.32.2
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@aws-lc-sys/v0.30.0...aws-lc-sys/v0.32.2)

Updates `backtrace` from 0.3.75 to 0.3.76
- [Release notes](https://github.com/rust-lang/backtrace-rs/releases)
- [Changelog](https://github.com/rust-lang/backtrace-rs/blob/master/CHANGELOG.md)
- [Commits](rust-lang/backtrace-rs@0.3.75...backtrace-v0.3.76)

Updates `bindgen` from 0.69.5 to 0.72.1
- [Release notes](https://github.com/rust-lang/rust-bindgen/releases)
- [Changelog](https://github.com/rust-lang/rust-bindgen/blob/v0.72.1/CHANGELOG.md)
- [Commits](rust-lang/rust-bindgen@v0.69.5...v0.72.1)

Updates `cc` from 1.2.35 to 1.2.39
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.35...cc-v1.2.39)

Updates `clap_builder` from 4.5.46 to 4.5.48
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@v4.5.46...v4.5.48)

Updates `clap_derive` from 4.5.45 to 4.5.47
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@v4.5.45...v4.5.47)

Updates `errno` from 0.3.13 to 0.3.14
- [Release notes](https://github.com/lambda-fairy/rust-errno/releases)
- [Changelog](https://github.com/lambda-fairy/rust-errno/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lambda-fairy/rust-errno/commits)

Updates `find-msvc-tools` from 0.1.0 to 0.1.2
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@0.1.0...find-msvc-tools-v0.1.2)

Updates `gimli` from 0.31.1 to 0.32.3
- [Changelog](https://github.com/gimli-rs/gimli/blob/master/CHANGELOG.md)
- [Commits](gimli-rs/gimli@0.31.1...0.32.3)

Updates `hyper-util` from 0.1.16 to 0.1.17
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper-util@v0.1.16...v0.1.17)

Updates `indexmap` from 2.11.0 to 2.11.4
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md)
- [Commits](indexmap-rs/indexmap@2.11.0...2.11.4)

Updates `libredox` from 0.1.9 to 0.1.10

Updates `linux-raw-sys` from 0.4.15 to 0.11.0
- [Commits](sunfishcode/linux-raw-sys@v0.4.15...v0.11.0)

Updates `log` from 0.4.27 to 0.4.28
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.27...0.4.28)

Updates `object` from 0.36.7 to 0.37.3
- [Changelog](https://github.com/gimli-rs/object/blob/master/CHANGELOG.md)
- [Commits](gimli-rs/object@0.36.7...0.37.3)

Updates `polling` from 3.10.0 to 3.11.0
- [Release notes](https://github.com/smol-rs/polling/releases)
- [Changelog](https://github.com/smol-rs/polling/blob/master/CHANGELOG.md)
- [Commits](smol-rs/polling@v3.10.0...v3.11.0)

Updates `ptyprocess` from 0.4.1 to 0.5.0
- [Commits](https://github.com/zhiburt/ptyprocess/commits)

Updates `regex-automata` from 0.4.10 to 0.4.11
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/commits)

Updates `rustc-hash` from 1.1.0 to 2.1.1
- [Changelog](https://github.com/rust-lang/rustc-hash/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/rustc-hash/commits/v2.1.1)

Updates `rustls` from 0.23.31 to 0.23.32
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.31...v/0.23.32)

Updates `rustls-webpki` from 0.103.4 to 0.103.6
- [Release notes](https://github.com/rustls/webpki/releases)
- [Commits](rustls/webpki@v/0.103.4...v/0.103.6)

Updates `schannel` from 0.1.27 to 0.1.28
- [Release notes](https://github.com/steffengy/schannel-rs/releases)
- [Commits](steffengy/schannel-rs@v0.1.27...v0.1.28)

Updates `security-framework-sys` from 2.14.0 to 2.15.0
- [Commits](https://github.com/kornelski/rust-security-framework/commits)

Updates `serde_spanned` from 1.0.0 to 1.0.2
- [Commits](toml-rs/toml@serde_spanned-v1.0.0...serde_spanned-v1.0.2)

Updates `tokio-rustls` from 0.26.2 to 0.26.4
- [Release notes](https://github.com/rustls/tokio-rustls/releases)
- [Commits](rustls/tokio-rustls@v/0.26.2...v/0.26.4)

Updates `toml` from 0.9.5 to 0.9.7
- [Commits](toml-rs/toml@toml-v0.9.5...toml-v0.9.7)

Updates `toml_datetime` from 0.7.0 to 0.7.2
- [Commits](toml-rs/toml@toml_datetime-v0.7.0...toml_datetime-v0.7.2)

Updates `toml_parser` from 1.0.2 to 1.0.3
- [Commits](toml-rs/toml@toml_parser-v1.0.2...toml_parser-v1.0.3)

Updates `toml_writer` from 1.0.2 to 1.0.3
- [Commits](toml-rs/toml@toml_writer-v1.0.2...toml_writer-v1.0.3)

Updates `unicode-ident` from 1.0.18 to 1.0.19
- [Release notes](https://github.com/dtolnay/unicode-ident/releases)
- [Commits](dtolnay/unicode-ident@1.0.18...1.0.19)

Updates `winapi-util` from 0.1.10 to 0.1.11
- [Commits](BurntSushi/winapi-util@0.1.10...0.1.11)

Updates `windows-implement` from 0.60.0 to 0.60.1
- [Release notes](https://github.com/microsoft/windows-rs/releases)
- [Commits](https://github.com/microsoft/windows-rs/commits)

Updates `windows-interface` from 0.59.1 to 0.59.2
- [Release notes](https://github.com/microsoft/windows-rs/releases)
- [Commits](https://github.com/microsoft/windows-rs/commits)

Updates `wit-bindgen` from 0.45.0 to 0.45.1
- [Release notes](https://github.com/bytecodealliance/wit-bindgen/releases)
- [Commits](bytecodealliance/wit-bindgen@v0.45.0...v0.45.1)

Updates `xattr` from 1.5.1 to 1.6.1
- [Release notes](https://github.com/Stebalien/xattr/releases)
- [Commits](Stebalien/xattr@v1.5.1...v1.6.1)

Updates `zerocopy` from 0.8.26 to 0.8.27
- [Release notes](https://github.com/google/zerocopy/releases)
- [Changelog](https://github.com/google/zerocopy/blob/main/CHANGELOG.md)
- [Commits](google/zerocopy@v0.8.26...v0.8.27)

Updates `zerocopy-derive` from 0.8.26 to 0.8.27
- [Release notes](https://github.com/google/zerocopy/releases)
- [Changelog](https://github.com/google/zerocopy/blob/main/CHANGELOG.md)
- [Commits](google/zerocopy@v0.8.26...v0.8.27)

Updates `zeroize` from 1.8.1 to 1.8.2
- [Commits](RustCrypto/utils@zeroize-v1.8.1...zeroize-v1.8.2)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.5.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap_complete
  dependency-version: 4.5.58
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tracing-forest
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: serde_derive
  dependency-version: 1.0.228
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: thiserror
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde
  dependency-version: 1.0.228
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: memchr
  dependency-version: 2.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: bitflags
  dependency-version: 2.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: libc
  dependency-version: 0.2.176
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tempfile
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: bytesize
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rustix
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: quote
  dependency-version: 1.0.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: trybuild
  dependency-version: 1.0.111
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: expectrl
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: windows-sys
  dependency-version: 0.61.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: windows
  dependency-version: 0.62.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: regex
  dependency-version: 1.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: insta
  dependency-version: 1.43.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: async-io
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: fs-err
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: sysinfo
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.145
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: zip
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: anstyle
  dependency-version: 1.0.13
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: aws-lc-rs
  dependency-version: 1.14.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: aws-lc-sys
  dependency-version: 0.32.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: backtrace
  dependency-version: 0.3.76
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: bindgen
  dependency-version: 0.72.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: cc
  dependency-version: 1.2.39
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap_builder
  dependency-version: 4.5.48
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap_derive
  dependency-version: 4.5.47
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: errno
  dependency-version: 0.3.14
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: find-msvc-tools
  dependency-version: 0.1.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: gimli
  dependency-version: 0.32.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: hyper-util
  dependency-version: 0.1.17
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: indexmap
  dependency-version: 2.11.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: libredox
  dependency-version: 0.1.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: linux-raw-sys
  dependency-version: 0.11.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: log
  dependency-version: 0.4.28
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: object
  dependency-version: 0.37.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: polling
  dependency-version: 3.11.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: ptyprocess
  dependency-version: 0.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: regex-automata
  dependency-version: 0.4.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rustc-hash
  dependency-version: 2.1.1
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: rustls
  dependency-version: 0.23.32
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: rustls-webpki
  dependency-version: 0.103.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: schannel
  dependency-version: 0.1.28
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: security-framework-sys
  dependency-version: 2.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: serde_spanned
  dependency-version: 1.0.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio-rustls
  dependency-version: 0.26.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: toml
  dependency-version: 0.9.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: toml_datetime
  dependency-version: 0.7.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: toml_parser
  dependency-version: 1.0.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: toml_writer
  dependency-version: 1.0.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: unicode-ident
  dependency-version: 1.0.19
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: winapi-util
  dependency-version: 0.1.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: windows-implement
  dependency-version: 0.60.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: windows-interface
  dependency-version: 0.59.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: wit-bindgen
  dependency-version: 0.45.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: xattr
  dependency-version: 1.6.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: zerocopy
  dependency-version: 0.8.27
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: zerocopy-derive
  dependency-version: 0.8.27
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: zeroize
  dependency-version: 1.8.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 1, 2025
Copy link
Member

@EliahKagan EliahKagan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The test failures seem to be due to a breaking change in expectrl. This is to be expected, in that the version bump is SemVer-breaking, but I don't see any changelog or release notes. There is documentation, and at least the readme file has changed, so maybe a diff would reveal what should be done. It might be enough to use an additional trait, as the error message suggests, but I'd prefer to understand the changes in full, or at least any that might apply to our use. I have not yet checked if other SemVer-breaking changes would cause subsequent build failures or otherwise break anything.

@Byron
Copy link
Member

Byron commented Oct 2, 2025

I think expectrl isn't important enough to update. After all, it fills a specific niche in tests only, and these have been stable for while.

Can we merge this by keeping it at the most recent, non-breaking version?
That way, we can safe the time and fix it only when cargo audit forces it.

@EliahKagan
Copy link
Member

EliahKagan commented Oct 2, 2025

TL;DR: Probably yes.

I think expectrl isn't important enough to update. After all, it fills a specific niche in tests only, and these have been stable for while.

We probably have a number of things like this. It seems to me that what sets expectrl apart from many, though not all, others, at this time, is that there's no clear changelog or other comparative documentation or guide to adapting to changes. (Alternatively, maybe there is and I didn't notice it.)

I would be interested in upgrading expectrl in the future even without any security vulnerabilities or yanked crate versions, once it's clearer how to do so, or if we can discern if the new features are useful to us, or even just whenever I get time to look into it (though that could be a while in the abence of anything to prioritize it).

For tests where we use expectrl, I think we don't currently run them on as many platforms as we would like, due to past or current limitations of expectrl. So I think that's a likely reason we may eventually want to upgrade our expectrl dev dependency, even in the absence of anything related to security.

But I haven't noticed anything about the gap between the version we use and the version we would be able to ugprade to if we adapted to it here, that would help us with that at this time.

Can we merge this by keeping it at the most recent, non-breaking version?

I'll try to do that shortly. Whether it will be sufficient to allow this to be merged, I'll find out when I attempt it.

There are two crates here that are direct production dependencies with a SemVer break: windows-sys (which gix-sec depends on), and zip (which gix-archive depends on). The windows and windows-sys crates often get SemVer-breaking upgrades and the way we are using them rarely breaks. For the zip crate, I'm very unclear on why the change is SemVer breaking. The major version bump's changelog entry lists only zip-rs/zip2#382.

I'm regenerating the PR in my fork to experiment on it to see if there are other breaking changes. Some time has passed since it was generated, so there are likely other crates that are available to update now, which would appear here in the upstream repository when Dependabot supersedes this PR with a new one, which will happen due to a change in the Dependabot configuration to keep expectrl back at 0.7.*. Testing this first enables me to know if there are other problems that I can't fix in the time I have available right now; so long as there aren't, I'll make the change here.

Incidentally, doing a Dependabot version updates scan takes a long time and, at least in my fork, sometimes fails. The warnings discussed in #2092 and #2093 either contribute to this or made it more challenging to figure out what does. Ideally I would better think through the simple solution you proposed in the #2093 comment discussion and maybe do that, but if the delays get in the way of what I'm doing for updating this, then I may hold getrandom back to a SemVer-compatible version as well when editing dependabot.yml. But that might not be necessary.

Edit: I think I'll do that but for a different related reason: Dependabot version updates complete but they are missing updating some things they should. See #2093 (comment).

That way, we can safe the time and fix it only when cargo audit forces it.

Yes, keeping it back this way should be fine due to the way we scan for reported vulnerabilities.

I don't think we're running cargo audit automatically, and I don't regularly run it, so unless you're running it, that's not probably how we'd find out. But if there is a security vulnerability and it is recognized as such (or even only recognized as a soundness bug), then either there should be a RUSTSEC advisory and our automatically running cargo-deny job should inform us, or there should be a GHSA advisory and Dependabot alerts should inform us (and generate a security update PR if it can), or (most often) both.

EliahKagan added a commit to EliahKagan/gitoxide that referenced this pull request Oct 2, 2025
EliahKagan added a commit to EliahKagan/gitoxide that referenced this pull request Oct 2, 2025
This allows them to have patch version updates but not major and
minor version updates. Becuase they are not yet at 1.0.0, this has
the effect of allowing SemVer-compatible but not SemVer-breaking
updates to them via Dependabot version update PRs.

This may be temporary and, in the case of `getrandom`, is intended
to be temporary. For details, see comments in `dependabot.yml`, and:

- GitoxideLabs#2200 (comment)
- GitoxideLabs#2093 (comment)

This also expands the comment for holding back `imara-diff` (all
referenced PRs in the file now have full URLs, not just numbers).

The effect of keeping back `expectrl` was tested and verified to be
the only new hold needed to allow version updates to work, in:
#111
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 2, 2025

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.

@dependabot dependabot bot closed this Oct 2, 2025
@dependabot dependabot bot deleted the dependabot/cargo/cargo-5954363e89 branch October 2, 2025 15:45
@EliahKagan
Copy link
Member

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.

This message is misleading because most of them are still being updated by Dependabot. A new Dependabot PR will be created automatically (unless some error keeps that from happening).

@EliahKagan
Copy link
Member

EliahKagan commented Oct 2, 2025

I made the Dependabot configuration changes in #2201 (tested in EliahKagan#111, see also #2093 (comment)), leading to the creation of Dependabot PR #2202, which I've added some adjustments to. Dependabot will merge #2202 once all CI checks pass there.

@Byron
Copy link
Member

Byron commented Oct 3, 2025

Thanks - it looks like not updating expectrl will be fine for a while.

I also mixed up cargo audit with cargo-deny, which we are running, so we should stay in formed about issues related to expectrl automatically.
All good, thanks again!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants