Bump the minor group across 1 directory with 9 updates by dependabot[bot] · Pull Request #1370 · KittyCAD/cli

dependabot · 2025-10-22T21:51:48Z

Bumps the minor group with 9 updates in the / directory:

Package	From	To
clap	`4.5.48`	`4.5.50`
clap_complete	`4.5.58`	`4.5.59`
nu-ansi-term	`0.50.1`	`0.50.3`
reqwest	`0.12.23`	`0.12.24`
slog	`2.7.0`	`2.8.2`
tokio	`1.44.2`	`1.48.0`
expectorate	`1.1.0`	`1.2.0`
openapiv3	`2.0.0`	`2.2.0`
syn	`2.0.106`	`2.0.107`

Updates clap from 4.5.48 to 4.5.50

Release notes

Sourced from clap's releases.

v4.5.50

[4.5.50] - 2025-10-20

Features

Accept Cow where String and &str are accepted

Changelog

Sourced from clap's changelog.

[4.5.50] - 2025-10-20

Features

Accept Cow where String and &str are accepted

[4.5.49] - 2025-10-13

Fixes

(help) Correctly wrap when ANSI escape codes are present

Commits

d8acd47 chore: Release
7c2b8d9 docs: Update changelog
e69a2ea Merge pull request #5987 from mernen/fix-bash-comp-words-loop
e03cc2e Merge pull request #5988 from cordx56/fix-builder-custom-version-docs
5ab2579 fix: Minor fix for builder docs about version
2f66432 fix(complete): Only parse arguments before current
4d9d210 test(complete): Illustrate current behavior in Bash
6abe2f8 chore: Release
d5c7454 docs: Update changelog
5b2e960 Merge pull request #5985 from mernen/bash-cur
Additional commits viewable in compare view

Updates clap_complete from 4.5.58 to 4.5.59

Commits

0bb3ad7 chore: Release
5cb5ce3 docs: Update changelog
245c8ba Merge pull request #6149 from epage/wrap
dd17a41 fix(help): Correctly calculate wrap points with ANSI escape codes
2cc4e35 test(ui): Avoid override term width
93e3559 refactor(help): Clarify that we're carrying over indentation
b1c46e6 refactor(help): Clarify var name
03b9b38 test(help): Show styled wrapping behavior
c9a39a5 Merge pull request #6146 from clap-rs/renovate/actions-checkout-5.x
58599fb chore(deps): Update actions/checkout action to v5
Additional commits viewable in compare view

Updates nu-ansi-term from 0.50.1 to 0.50.3

Commits

See full diff in compare view

Updates reqwest from 0.12.23 to 0.12.24

Release notes

Sourced from reqwest's releases.

v0.12.24

Highlights

Refactor cookie handling to an internal middleware.

Refactor internal random generator.

Refactor base64 encoding to reduce a copy.

Documentation updates.

What's Changed

build(deps): silence unused deps in WASM build by @0x676e67 in seanmonstar/reqwest#2799

perf(util): avoid extra copy when base64 encoding by @0x676e67 in seanmonstar/reqwest#2805

docs: fix method name in changelog entry by @johannespfrang in seanmonstar/reqwest#2807

chore: Align the name usage of TotalTimeout by @Xuanwo in seanmonstar/reqwest#2657

refactor(cookie): add CookieService by @linyihai in seanmonstar/reqwest#2787

Fixes typo in retry max_retries_per_request doc comment re 2813 by @dmackinn in seanmonstar/reqwest#2824

test(multipart): fix build failure with no-default-features by @0x676e67 in seanmonstar/reqwest#2801

refactor(cookie): avoid duplicate cookie insertion by @0x676e67 in seanmonstar/reqwest#2834

New Contributors

@johannespfrang made their first contribution in seanmonstar/reqwest#2807

@dmackinn made their first contribution in seanmonstar/reqwest#2824

Full Changelog: seanmonstar/reqwest@v0.12.23...v0.12.24

Changelog

Sourced from reqwest's changelog.

v0.12.24

Refactor cookie handling to an internal middleware.

Refactor internal random generator.

Refactor base64 encoding to reduce a copy.

Documentation updates.

Commits

b126ca4 v0.12.24
4023493 refactor: change fast_random from xorshift to siphash a counter
fd61bc9 refactor(cookie): avoid duplicate cookie insertion (#2834)
0bfa526 test(multipart): fix build failure with no-default-features (#2801)
994b8a0 docs: typo in retry max_retries_per_request (#2824)
da0702b refactor(cookie): de-duplicate cookie support as CookieService middleware (...
7ebddea chore: align internal name usage of TotalTimeout (#2657)
b540a4e chore(readme): use correct CI status badge
e4550c4 docs: fix method name in changelog entry (#2807)
f4694a2 perf(util): avoid extra copy when base64 encoding (#2805)
Additional commits viewable in compare view

Updates slog from 2.7.0 to 2.8.2

Release notes

Sourced from slog's releases.

Fix private field breaking # operator in macros

Fixes issue #364

Release Notes

Fixed

Fix use of # operator in macros due to private field (issue #364)

Thanks to @Manishearth for identifying this.

ci: Check the tests pass with -Zminimal-versions

Move back to erased_serde v0.3

The upgrade from erased_serde v0.3 to v0.4 in v2.8.0 was a breaking change, as it affected the public API. In the future, we may find a way to upgrade in a backwards-compatible manner. This should not affect normal users of the API but could break drains supporting nested-values.

I (@Techcable) apologize for this breakage and have yanked the 2.8.0 release due to this issue. I will try to setup cargo-semver-checks in the CI to avoid this in the future.

Fixed

Restore compatibility with erased-serde version 0.3.

Compatibility with erased-serde version 0.4 may be provided again in a future version, but will be done so in a backwards compatible way.

Thanks to @demurgos for recognizing and fixing this in PR #359

Ensure compatibility with -Zminimal-versions flag by specifying minimal dependency versions (fixes #357)

Enable nested-values feature by default

This is the biggest slog release since v2.0! It contains many smaller fixes and improvements to slog that have been accumulated across 5 years and 127 commits.

The nested-values feature was already present in slog, and allows logging serde::Serialize types in addition to primitives. Previously, the nested-values feature had to be enabled not just in slog but also in each drain crate (slog_json, slog_term, slog_async, etc). Enabling this feature by default makes the crate easier to use and avoids several papercts. It should have no runtime overhead if not used and low compile-time overhead thanks to the new serde_core crate.

Another major feature is Logger::flush, which explicitly flushes buffered log messages. The next major release of slog_json, slog_async, etc., will also include support for this feature, in addition to enabling nested-values by default.

Changelog

The following has been copied from CHANGELOG.md

Highlights

Enables the nested-values feature by default. The next major release of slog_json, slog_term, etc should also enable this feature by default.

Added Logger::flush and Drain::flush methods.

Improved support for logging errors

Have # log specifier transparently support & references to error

Implement slog::Value for Box<dyn std::error::Error> and anyhow::Error

Define a prelude module for common imports

Upgraded to Rust 2018 and require Rust 1.61

Deprecate the old slog_log! macros in favor of slog::log!

Many internal improvements & bug fixes

Changed

Enables the nested-values feature by default.

Updated to Rust 2018

NOTE: Old 2015 crates will still work because of excellent 2015/2018 compatibility

... (truncated)

Changelog

Sourced from slog's changelog.

2.8.2 - 2025-10-11

Fixed

Fix use of # operator in macros due to private field (issue #364)

Thanks to @Manishearth for identifying this.

ci: Check the tests pass with -Zminimal-versions

2.8.1 - 2025-10-05

This fixes an accidental breaking change in the v2.8.0 release, where the public API was changed from erased_serde v0.4 to erased_serde v0.3. This should not affect normal users of the API but could break drains supporting nested-values.

I (@Techcable) apologize for this breakage and have yanked the 2.8.0 release due to this issue. I will try to setup cargo-semver-checks in the CI to avoid this in the future.

Fixed

Restore compatibility with erased-serde version 0.3.

Compatibility with erased-serde version 0.4 may be provided again in a future version, but will be done so in a backwards compatible way.

Thanks to @demurgos for recognizing and fixing this in PR #359

Ensure compatibility with -Zminimal-versions flag by specifying minimal dependency versions (fixes #357)

[2.8.0] - 2025-10-05

This is the biggest slog release since 2.0. It fully preserves compatibility with prior releases.

Highlights

Enables the nested-values feature by default. The next major release of slog_json, slog_term, etc should also enable this feature by default.

Added Logger::flush and Drain::flush methods.

Improved support for logging errors

Have # log specifier transparently support & references to error

Implement slog::Value for Box<dyn std::error::Error> and anyhow::Error

Define a prelude module for common imports

Upgraded to Rust 2018 and require Rust 1.61

Deprecate the old slog_log! macros in favor of slog::log!

Many internal improvements & bug fixes

Changed

Enables the nested-values feature by default.

Updated to Rust 2018

NOTE: Old 2015 crates will still work because of excellent 2015/2018 compatibility

Bump MSRV to 1.61

This is already required for erased-serde, syn, serde_core, and many other important crates in the rust ecosystem.

Update erased-serde from v0.3 to v0.4

Depend on [serde_core] rather than serde to reduce compile times.

Added

Added a Logger::flush and Drain::flush methods

Since this is a new method, not all drains implement it.

... (truncated)

Commits

e694b83 Bump version to 2.8.2
693fc37 Fix issue #364 - Broken # operator in macros
66f082b ci: Add test job for -Zminimal-versions
a26eb6e Bump version to v2.8.1
2107d2e Fix compilation issues with -Zminimum-versions
9814a8b regression fix: restore compatibility with erased-serde version 0.3
ec46dcc Bump version to v2.8.0
a447574 Use serde_core instead of serde
60add84 ci: Run rustdoc in CI, forbidding warnings
640c150 Fix outstanding rustdoc warnings
Additional commits viewable in compare view

Updates tokio from 1.44.2 to 1.48.0

Release notes

Sourced from tokio's releases.

Tokio v1.48.0

1.48.0 (October 14th, 2025)

The MSRV is increased to 1.71.

Added

fs: add File::max_buf_size (#7594)

io: export Chain of AsyncReadExt::chain (#7599)

net: add SocketAddr::as_abstract_name (#7491)

net: add TcpStream::quickack and TcpStream::set_quickack (#7490)

net: implement AsRef<Self> for TcpStream and UnixStream (#7573)

task: add LocalKey::try_get (#7666)

task: implement Ord for task::Id (#7530)

Changed

deps: bump windows-sys to version 0.61 (#7645)

fs: preserve max_buf_size when cloning a File (#7593)

macros: suppress clippy::unwrap_in_result in #[tokio::main] (#7651)

net: remove PollEvented noise from Debug formats (#7675)

process: upgrade Command::spawn_with to use FnOnce (#7511)

sync: remove inner mutex in SetOnce (#7554)

sync: use UnsafeCell::get_mut in Mutex::get_mut and RwLock::get_mut (#7569)

time: reduce the generated code size of Timeout<T>::poll (#7535)

Fixed

macros: fix hygiene issue in join! and try_join! (#7638)

net: fix copy/paste errors in udp peek methods (#7604)

process: fix error when runtime is shut down on nightly-2025-10-12 (#7672)

runtime: use release ordering in wake_by_ref() even if already woken (#7622)

sync: close the broadcast::Sender in broadcast::Sender::new() (#7629)

sync: fix implementation of unused RwLock::try_* methods (#7587)

Unstable

tokio: use cargo features instead of --cfg flags for taskdump and io_uring (#7655, #7621)

fs: support io_uring in fs::write (#7567)

fs: support io_uring with File::open() (#7617)

fs: support io_uring with OpenOptions (#7321)

macros: add local runtime flavor (#7375, #7597)

Documented

io: clarify the zero capacity case of AsyncRead::poll_read (#7580)

io: fix typos in the docs of AsyncFd readiness guards (#7583)

net: clarify socket gets closed on drop (#7526)

net: clarify the behavior of UCred::pid() on Cygwin (#7611)

net: clarify the supported platform of set_reuseport() and reuseport() (#7628)

... (truncated)

Commits

556820f chore: prepare Tokio v1.48.0 (#7677)
fd1659a chore: prepare tokio-macros v2.6.0 (#7676)
53e8aca ci: update nightly version to 2025-10-12 (#7670)
9e5527d process: fix error when runtime is shut down on nightly-2025-10-12 (#7672)
25a24de net: remove PollEvented noise from Debug formats (#7675)
c1fa25f task: clarify the behavior of several spawn_local methods (#7669)
e7e02fc fs: use FileOptions inside fs::File to support uring (#7617)
f7a7f62 ci: remove cargo-deny Unicode-DFS-2016 license exception config (#7619)
d1f1499 tokio: use cargo feature for taskdump support instead of cfg (#7655)
ad6f618 runtime: clarify the behavior of Handle::block_on (#7665)
Additional commits viewable in compare view

Updates expectorate from 1.1.0 to 1.2.0

Commits

20fe36c release 1.2.0
ee42a84 use atomicwrites, avoid overwriting if file is the same (#23)
See full diff in compare view

Updates openapiv3 from 2.0.0 to 2.2.0

Changelog

Sourced from openapiv3's changelog.

2.2.0 (2025-06-02)

Fix regression in ReferenceOr parsing to preserve order and priority

2.1.0 (2025-05-22) (yanked)

Improve deserialization error messages from ReferenceOr

Fix OAuth structure field visibility

Commits

85f84e1 release 2.2.0
080f850 fix regression in #88 where ReferenceOr<T> lost property order (#92)
6cab411 release 2.1.0
0551e38 Make parse failures from ReferenceOr<T> more comprehensible (#88)
4cc717f update CI runners (#89)
7f81aaa fix(oauth2flow): mark missing fields pub (#86)
See full diff in compare view

Updates syn from 2.0.106 to 2.0.107

Release notes

Sourced from syn's releases.

2.0.107

Improve panic message when constructing a LitInt, LitFloat, or Lit from invalid syntax (#1917)

Improve panic message on Punctuated index out of bounds (#1922)

Commits

e4a8957 Release 2.0.107
1792e83 Merge pull request #1922 from dtolnay/outofbounds
532e4af Improve panic message on Punctuated index out of bounds
909c222 Add test of Punctuated indexing
9c3101a Relocate map_unwrap_or clippy suppression for no_opaque_drop test
d257968 Rename test_iterators -> test_punctuated
d429733 Relocate no_opaque_drop test from Punctuated-related to Generics-related
310cb92 Resolve replace_box clippy lint
0731b55 Raise compiler required for syn-codegen to 1.82
7acdd39 Simplify conversion of u8 -> char
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.5.48` | `4.5.50` | | [clap_complete](https://github.com/clap-rs/clap) | `4.5.58` | `4.5.59` | | [nu-ansi-term](https://github.com/nushell/nu-ansi-term) | `0.50.1` | `0.50.3` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.23` | `0.12.24` | | [slog](https://github.com/slog-rs/slog) | `2.7.0` | `2.8.2` | | [tokio](https://github.com/tokio-rs/tokio) | `1.44.2` | `1.48.0` | | [expectorate](https://github.com/oxidecomputer/expectorate) | `1.1.0` | `1.2.0` | | [openapiv3](https://github.com/glademiller/openapiv3) | `2.0.0` | `2.2.0` | | [syn](https://github.com/dtolnay/syn) | `2.0.106` | `2.0.107` | Updates `clap` from 4.5.48 to 4.5.50 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.48...clap_complete-v4.5.50) Updates `clap_complete` from 4.5.58 to 4.5.59 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.58...clap_complete-v4.5.59) Updates `nu-ansi-term` from 0.50.1 to 0.50.3 - [Release notes](https://github.com/nushell/nu-ansi-term/releases) - [Changelog](https://github.com/nushell/nu-ansi-term/blob/main/CHANGELOG.md) - [Commits](https://github.com/nushell/nu-ansi-term/commits) Updates `reqwest` from 0.12.23 to 0.12.24 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.12.23...v0.12.24) Updates `slog` from 2.7.0 to 2.8.2 - [Release notes](https://github.com/slog-rs/slog/releases) - [Changelog](https://github.com/slog-rs/slog/blob/master/CHANGELOG.md) - [Commits](slog-rs/slog@v2.7.0...v2.8.2) Updates `tokio` from 1.44.2 to 1.48.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.44.2...tokio-1.48.0) Updates `expectorate` from 1.1.0 to 1.2.0 - [Release notes](https://github.com/oxidecomputer/expectorate/releases) - [Commits](oxidecomputer/expectorate@v1.1.0...v1.2.0) Updates `openapiv3` from 2.0.0 to 2.2.0 - [Changelog](https://github.com/glademiller/openapiv3/blob/master/CHANGELOG.md) - [Commits](glademiller/openapiv3@v2.0.0...v2.2.0) Updates `syn` from 2.0.106 to 2.0.107 - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](dtolnay/syn@2.0.106...2.0.107) --- updated-dependencies: - dependency-name: clap dependency-version: 4.5.50 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: clap_complete dependency-version: 4.5.59 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: nu-ansi-term dependency-version: 0.50.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: reqwest dependency-version: 0.12.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: slog dependency-version: 2.8.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: tokio dependency-version: 1.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: expectorate dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: openapiv3 dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: syn dependency-version: 2.0.107 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com>

codecov · 2025-10-22T22:02:34Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.67%. Comparing base (29bc7df) to head (4c0b88d).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1370   +/-   ##
=======================================
  Coverage   70.67%   70.67%           
=======================================
  Files          41       41           
  Lines        6612     6612           
=======================================
  Hits         4673     4673           
  Misses       1939     1939

Flag	Coverage Δ
unittests	`70.67% <ø> (ø)`

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

dependabot · 2025-10-27T10:28:49Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 22, 2025

dependabot Bot requested review from adamchalmers and jessfraz as code owners October 22, 2025 21:51

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 22, 2025

dependabot Bot mentioned this pull request Oct 22, 2025

Bump the patch group with 5 updates #1365

Closed

dependabot Bot closed this Oct 27, 2025

dependabot Bot deleted the dependabot/cargo/minor-93fd4f5a2f branch October 27, 2025 10:28

JordanNoone mentioned this pull request Sep 7, 2026

Parse KCL measurement units consistently #1844

Open

Navigation Menu

Uh oh!

Bump the minor group across 1 directory with 9 updates - #1370

Bump the minor group across 1 directory with 9 updates#1370
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/minor-93fd4f5a2f

dependabot Bot commented on behalf of github Oct 22, 2025 •

edited

Loading

Uh oh!

codecov Bot commented Oct 22, 2025 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Oct 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.5.50

[4.5.50] - 2025-10-20

Features

[4.5.50] - 2025-10-20

Features

[4.5.49] - 2025-10-13

Fixes

v0.12.24

Highlights

What's Changed

New Contributors

v0.12.24

Fix private field breaking # operator in macros

Release Notes

Fixed

Move back to erased_serde v0.3

Fixed

Enable nested-values feature by default

Changelog

Highlights

Changed

2.8.2 - 2025-10-11

Fixed

2.8.1 - 2025-10-05

Fixed

[2.8.0] - 2025-10-05

Highlights

Changed

Added

Tokio v1.48.0

1.48.0 (October 14th, 2025)

Added

Changed

Fixed

Unstable

Documented

2.2.0 (2025-06-02)

2.1.0 (2025-05-22) (yanked)

2.0.107

Uh oh!

codecov Bot commented Oct 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

dependabot Bot commented on behalf of github Oct 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 22, 2025 •

edited

Loading

Fix private field breaking `#` operator in macros

codecov Bot commented Oct 22, 2025 •

edited

Loading