Skip to content

build(deps): bump the cargo group across 1 directory with 29 updates - #280

Merged
sunerpy merged 8 commits into
mainfrom
dependabot/cargo/cargo-a40c51c11c
Oct 2, 2026
Merged

build(deps): bump the cargo group across 1 directory with 29 updates#280
sunerpy merged 8 commits into
mainfrom
dependabot/cargo/cargo-a40c51c11c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 29 updates in the / directory:

Package From To
serde 1.0.228 1.0.229
serde_json 1.0.150 1.0.151
toml 0.8.23 1.1.3+spec-1.1.0
anyhow 1.0.103 1.0.104
thiserror 1.0.69 2.0.18
sha2 0.10.9 0.11.0
globset 0.4.18 0.4.20
ignore 0.4.27 0.4.33
time 0.3.53 0.3.55
rusqlite 0.31.0 0.40.2
tree-sitter 0.26.10 0.27.0
notify 6.1.1 8.2.0
interprocess 2.4.2 2.4.4
rustix 0.38.44 1.1.4
clap 4.6.1 4.6.7
clap_complete 4.6.7 4.6.11
jsonc-parser 0.26.3 0.34.0
criterion 0.7.0 0.8.2
rstest 0.23.0 0.27.0
regex 1.12.4 1.13.1
tree-sitter-arkts 0.2.0 0.3.0
tree-sitter-cfml 0.26.30 0.26.42
tree-sitter-erlang 0.19.0 0.20.0
rmcp 3.0.1 3.5.0
tokio 1.52.3 1.53.1
tokio-util 0.7.18 0.7.19
reqwest 0.12.28 0.13.4
windows-sys 0.52.0 0.61.2
libc 0.2.186 0.2.189

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates toml from 0.8.23 to 1.1.3+spec-1.1.0

Commits

Updates anyhow from 1.0.103 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3
Commits

Updates thiserror from 1.0.69 to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

2.0.17

  • Use differently named __private module per patch release (#434)

2.0.16

  • Add to "no-std" crates.io category (#429)

2.0.15

  • Prevent Error::provide API becoming unavailable from a future new compiler lint (#427)

2.0.14

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#426)

2.0.13

  • Documentation improvements

2.0.12

  • Prevent elidable_lifetime_names pedantic clippy lint in generated impl (#413)

2.0.11

2.0.10

  • Support errors containing a generic type parameter's associated type in a field (#408)

2.0.9

  • Work around missing_inline_in_public_items clippy restriction being triggered in macro-generated code (#404)

2.0.8

  • Improve support for macro-generated derive(Error) call sites (#399)

2.0.7

  • Work around conflict with #[deny(clippy::allow_attributes)] (#397, thanks @​zertosh)

2.0.6

  • Suppress deprecation warning on generated From impls (#396)

2.0.5

  • Prevent deprecation warning on generated impl for deprecated type (#394)

2.0.4

  • Eliminate needless_lifetimes clippy lint in generated From impls (#391, thanks @​matt-phylum)

2.0.3

  • Support the same Path field being repeated in both Debug and Display representation in error message (#383)
  • Improve error message when a format trait used in error message is not implemented by some field (#384)

2.0.2

... (truncated)

Commits
  • dc0f6a2 Release 2.0.18
  • 0275292 Touch up PR 443
  • 3c33bc6 Merge pull request #443 from LucaCappelletti94/master
  • 995939c Reproduce issue 442
  • 21653d1 Made clippy lifetime allows conditional
  • 45e5388 Update actions/upload-artifact@v5 -> v6
  • 386aac1 Update actions/upload-artifact@v4 -> v5
  • ec50561 Update actions/checkout@v5 -> v6
  • 247eab5 Update name of empty_enum clippy lint
  • 91b181f Raise required compiler to Rust 1.68
  • Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates globset from 0.4.18 to 0.4.20

Commits
  • 5055264 globset-0.4.20
  • 020687a ignore,globset: increase pool capacity
  • 5ed408e ignore-0.4.32
  • 435f59f ignore: skip loading unreachable ignore files
  • f9c05a9 index: remove incorrect README
  • 8372866 index: add some initial indexing scaffolding
  • d99ac34 core: add index module
  • 2ed0c00 flags: disable many flags when indexing is enabled
  • 59e318f ignore-0.4.31
  • a9dc222 cargo: set rust-version on all crates
  • Additional commits viewable in compare view

Updates ignore from 0.4.27 to 0.4.33

Commits
  • 3fce3b5 ignore-0.4.33
  • 5055264 globset-0.4.20
  • 020687a ignore,globset: increase pool capacity
  • 5ed408e ignore-0.4.32
  • 435f59f ignore: skip loading unreachable ignore files
  • f9c05a9 index: remove incorrect README
  • 8372866 index: add some initial indexing scaffolding
  • d99ac34 core: add index module
  • 2ed0c00 flags: disable many flags when indexing is enabled
  • 59e318f ignore-0.4.31
  • Additional commits viewable in compare view

Updates time from 0.3.53 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

v0.3.54

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

  • Avoid underflow in DateIter::nth, ensuring correct behavior.
  • Avoid overflow when deserializing timestamps.
  • Handle out-of-bounds data when deserializing.
  • Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
  • No longer silence errors when deserializing UtcOffset.
  • OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
  • OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

0.3.54 [2026-07-20]

Added

  • PrimitiveDateTime has been renamed to PlainDateTime.
  • Duration has been renamed to SignedDuration.
  • Iteration is now possible over Date, Month, and Weekday. Relevant iterator methods have been overridden to ensure maximum performance.

For both PlainDateTime and SignedDuration, a non-deprecated type alias has been added for backwards compatibility. The new names should be preferred.

Changed

  • The associated metadata type (for powerfmt implementations) for various types has been changed to () and made public. This guarantees that no additional metadata will be present.

Performance

  • More gains when parsing RFC 2822.
Commits
  • 857d9c4 v0.3.55 release
  • 2b72fcd Precise feature gating for macro
  • c1089eb Run check-targets, miri in parallel
  • f377fad Avoid range-validated ordinal => year in cascade
  • 2eacb0a Report miscellaneous tasks, overall status
  • 29621ac Speed up CI
  • 08de7ba Fix nano-timestamp validation
  • 3c3f046 Fix copy-paste error
  • 3c0c81c Cascade errors when deserializing UtcOffset
  • c21acd5 Handle more deserializations of SignedDuration
  • Additional commits viewable in compare view

Updates rusqlite from 0.31.0 to 0.40.2

Release notes

Sourced from rusqlite's releases.

0.40.2

What's Changed

  • Lower MSRV to 1.88.0

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.40.2

0.40.1

What's Changed

  • Fix clippy warnings #1852
  • Bump bundled SQLite version to 3.53.2 #1853
  • Bump hashlink version #1855
  • Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

0.40.0

What's Changed

  • Breaking changes: Replace VTab macros by constructors #1823
  • Breaking changes: Fix VTab::best_index #1824
  • Asserts on VTab::connect aux and args #1825
  • Breaking changes: Fix VTab::connect / create #1826
  • Breaking changes: Allow opting out of using sqlite-wasm-rs on wasm32-unknown-unknown #1828, #1829
  • Derive Default for SeriesTabCursor/ArrayTabCursor #1830
  • Update link to pre-update hook #1831
  • Breaking changes: Fix VTab::connect #1832
  • impl From for FromSqlError #1833
  • Breaking changes: Fix vtab::dequote #1835
  • Bump bundled SQLCipher to version 4.14.0 #1837
  • sqlite3_set_errmsg #1752
  • Bump sqlite3-parser version #1838
  • Fix UB in ToSqlOutput::from_rc #1839
  • Ensure miri doesn't complain #1840
  • Bump to actions/checkout@v6 #1842
  • Add support to UtcDateTime #1843, #1844
  • Bump bundled SQLite version to 3.53.1 #1848
  • Replace some cfg(not by cfg_select #1850

Full Changelog: rusqlite/rusqlite@v0.39.0...v0.40.0

0.39.0

What's Changed

  • Fix constraints on VTab Aux data #1778, #1771
  • Fix docs.rs generation #1779
  • Fix a small typo in rollback_hook docstring #1780
  • Fix some warnings from Intellij #1781
  • Minimal doc for features #1783
  • Clear hooks only for owning connections #1785, #1784
  • Fix link to SQLite C Interface, Prepare Flags #1787
  • Comment functions which are not usable from a loadable extension #1789
  • Factorize code #1792

... (truncated)

Commits

Updates tree-sitter from 0.26.10 to 0.27.0

Release notes

Sourced from tree-sitter's releases.

v0.27.0

What's Changed

... (truncated)

Commits
  • 6070dbf fix(nix): remove Dockerfile reference from flake (#5892)
  • f52e78c build(deps): cargo update
  • 49dbf70 fix(rust): ensure C returned pointers are non-null in
  • 9540ea3 fix(lib): reject an old_tree from a different language
  • 3e7be91 fix(rust): reject out-of-range node kind ids
  • f471709 fix(lib): bounds-check symbol and state ids in language lookups
  • 5ddf71b fix(rust)!: expose QueryMatch::captures as a method
  • efa0dd9 fix(cli): correct zero-based positions for --edits
  • 16d5e9d ci(checks): add lint-toml step using taplo
  • 3ac04a6 docs: add taplo instructions
  • Additional commits viewable in compare view

Updates notify from 6.1.1 to 8.2.0

Release notes

Sourced from notify's releases.

notify-8.2.0

notify 8.2.0 (2025-08-03)

  • FEATURE: notify user if inotify's max_user_watches has been reached #698
  • FIX: INotifyWatcher ignore events with unknown watch descriptors (instead of EventMask::Q_OVERFLOW) #700

#698: notify-rs/notify#698 #700: notify-rs/notify#700

debouncer-full 0.6.0 (2025-08-03)

  • FEATURE: allow FileIdCache trait implementations to choose ownership of the returned file-ids #664
  • FEATURE: added support for the flume crate #680
  • FIX: skip all Modify events right after a Create event, unless it's a rename event #701

#664: notify-rs/notify#664 #680: notify-rs/notify#680 #701: notify-rs/notify#701

debouncer-mini 0.7.0 (2025-08-03)

  • FEATURE: added support for the flume crate #680

file-id 0.2.3 (2025-08-03)

  • CHANGE: implement AsRef<FileId> for FileId #664

Full Changelog: notify-rs/notify@notify-8.1.0...notify-8.2.0

notify v8.1.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from notify's changelog.

notify 8.2.0 (2025-08-03)

  • FEATURE: notify user if inotify's max_user_watches has been reached #698
  • FIX: INotifyWatcher ignore events with unknown watch descriptors (instead of EventMask::Q_OVERFLOW) #700

#698: notify-rs/notify#698 #700: notify-rs/notify#700

debouncer-full 0.6.0 (2025-08-03)

  • FEATURE: allow FileIdCache trait implementations to choose ownership of the returned file-ids #664
  • FEATURE: added support for the flume crate #680
  • FIX: skip all Modify events right after a Create event, unless it's a rename event #701

#664: notify-rs/notify#664 #680: notify-rs/notify#680 #701: notify-rs/notify#701

debouncer-mini 0.7.0 (2025-08-03)

  • FEATURE: added support for the flume crate #680

file-id 0.2.3 (2025-08-03)

  • CHANGE: implement AsRef<FileId> for FileId #664

notify 8.1.0 (2025-07-03)

  • FEATURE: added support for the flume crate
  • FIX: kqueue-backend: do not double unwatch top-level directory when recursively unwatching #683
  • FIX: Return the crate error PathNotFound instead bubbling up the std::io error #685
  • FIX: fix server hangs when trashing folders on Windows #674

notify 8.0.0 (2025-01-10)

  • CHANGE: update notify-types to version 2.0.0
  • CHANGE: raise MSRV to 1.77 breaking
  • FEATURE: add config option to disable following symbolic links #635
  • FIX: unaligned access to FILE_NOTIFY_INFORMATION #647 breaking

#635: notify-rs/notify#635 #647: notify-rs/notify#647

notify-types 2.0.0 (2025-01-10)

  • CHANGE: replace instant crate with web-time #652 breaking
  • CHANGE: the web-time dependency is now behind the web-time feature breaking

#652: notify-rs/notify#652

debouncer-mini 0.6.0 (2025-01-10)

  • CHANGE: update notify to version 8.0.0

debouncer-full 0.5.0 (2025-01-10)

... (truncated)

Commits
  • a1d7c2d Prepare release (#706)
  • c685ea7 Skip all Modify events right after a Create event, unless it's a rename e...
  • e36d54e fix: INotifyWatcher may raise events with no paths (#700)
  • 394ef18 feat(inotify): notify a user if the max_user_watches has been reached impli...
  • 04473de chore: Prepare 8.1.0 release (#697)
  • 12a026d fix: make PathsMut::commit consuming (#695)
  • d824023 feat: introduce Watcher::paths_mut for adding/removing paths in batch (#692)
  • b984134 Do not clone paths while walking dirs (#693)
  • 416ba82 chore: Use MSRV for Clippy and rustfmt (#694)
  • 10ce3ef Update windows-sys to v0.60 (#691)
  • Additional commits viewable in compare view

Updates interprocess from 2.4.2 to 2.4.4

Release notes

Sourced from interprocess's releases.

2.4.4

  • Fixed a dead link in the readme and a typo in the docs.
  • checks-and-tests.py is no longer packaged by Cargo to avoid tricking distro package managers into thinking Interprocess requires Python (#98).

2.4.3

Commits

Updates rustix from 0.38.44 to 1.1.4

Release notes

Sourced from rustix's releases.

1.0.0

This release introduces the Buffer trait, which is used in read, pread, recv, recvfrom, getrandom, readlinkat_raw, epoll::wait, kevent, port::getn, getxattr, lgetxattr...

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 1, 2026
@dependabot
dependabot Bot requested a review from sunerpy as a code owner October 1, 2026 03:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-a40c51c11c branch 4 times, most recently from eae576e to 067de2f Compare October 1, 2026 11:24
@dependabot dependabot Bot changed the title chore(deps): bump the cargo group across 1 directory with 29 updates build(deps): bump the cargo group across 1 directory with 29 updates Oct 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-a40c51c11c branch 2 times, most recently from 0288d7e to a25972b Compare October 1, 2026 14:54
@dependabot
build(deps): bump the cargo group across 1 directory with 29 updates
324a179 
Bumps the cargo group with 29 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [toml](https://github.com/toml-rs/toml) | `0.8.23` | `1.1.3+spec-1.1.0` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.103` | `1.0.104` |
| [thiserror](https://github.com/dtolnay/thiserror) | `1.0.69` | `2.0.18` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [globset](https://github.com/BurntSushi/ripgrep) | `0.4.18` | `0.4.20` |
| [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.27` | `0.4.33` |
| [time](https://github.com/time-rs/time) | `0.3.53` | `0.3.55` |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.31.0` | `0.40.2` |
| [tree-sitter](https://github.com/tree-sitter/tree-sitter) | `0.26.10` | `0.27.0` |
| [notify](https://github.com/notify-rs/notify) | `6.1.1` | `8.2.0` |
| [interprocess](https://github.com/kotauskas/interprocess) | `2.4.2` | `2.4.4` |
| [rustix](https://github.com/bytecodealliance/rustix) | `0.38.44` | `1.1.4` |
| [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.7` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.6.7` | `4.6.11` |
| [jsonc-parser](https://github.com/dprint/jsonc-parser) | `0.26.3` | `0.34.0` |
| [criterion](https://github.com/criterion-rs/criterion.rs) | `0.7.0` | `0.8.2` |
| [rstest](https://github.com/la10736/rstest) | `0.23.0` | `0.27.0` |
| [regex](https://github.com/rust-lang/regex) | `1.12.4` | `1.13.1` |
| [tree-sitter-arkts](https://github.com/harmony-contrib/tree-sitter-arkts) | `0.2.0` | `0.3.0` |
| [tree-sitter-cfml](https://github.com/cfmleditor/tree-sitter-cfml) | `0.26.30` | `0.26.42` |
| [tree-sitter-erlang](https://github.com/WhatsApp/tree-sitter-erlang) | `0.19.0` | `0.20.0` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.0.1` | `3.5.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.18` | `0.7.19` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.28` | `0.13.4` |
| [windows-sys](https://github.com/microsoft/windows-rs) | `0.52.0` | `0.61.2` |
| [libc](https://github.com/rust-lang/libc) | `0.2.186` | `0.2.189` |



Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `toml` from 0.8.23 to 1.1.3+spec-1.1.0
- [Commits](toml-rs/toml@toml-v0.8.23...toml-v1.1.3)

Updates `anyhow` from 1.0.103 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.103...1.0.104)

Updates `thiserror` from 1.0.69 to 2.0.18
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.69...2.0.18)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `globset` from 0.4.18 to 0.4.20
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@globset-0.4.18...globset-0.4.20)

Updates `ignore` from 0.4.27 to 0.4.33
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@ignore-0.4.27...ignore-0.4.33)

Updates `time` from 0.3.53 to 0.3.55
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.53...v0.3.55)

Updates `rusqlite` from 0.31.0 to 0.40.2
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.31.0...v0.40.2)

Updates `tree-sitter` from 0.26.10 to 0.27.0
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.26.10...v0.27.0)

Updates `notify` from 6.1.1 to 8.2.0
- [Release notes](https://github.com/notify-rs/notify/releases)
- [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.0/CHANGELOG.md)
- [Commits](notify-rs/notify@notify-6.1.1...notify-8.2.0)

Updates `interprocess` from 2.4.2 to 2.4.4
- [Release notes](https://github.com/kotauskas/interprocess/releases)
- [Commits](kotauskas/interprocess@2.4.2...2.4.4)

Updates `rustix` from 0.38.44 to 1.1.4
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v0.38.44...v1.1.4)

Updates `clap` from 4.6.1 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.7)

Updates `clap_complete` from 4.6.7 to 4.6.11
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.7...clap_complete-v4.6.11)

Updates `jsonc-parser` from 0.26.3 to 0.34.0
- [Commits](dprint/jsonc-parser@0.26.3...0.34.0)

Updates `criterion` from 0.7.0 to 0.8.2
- [Release notes](https://github.com/criterion-rs/criterion.rs/releases)
- [Changelog](https://github.com/criterion-rs/criterion.rs/blob/master/CHANGELOG.md)
- [Commits](criterion-rs/criterion.rs@criterion-plot-v0.7.0...criterion-v0.8.2)

Updates `rstest` from 0.23.0 to 0.27.0
- [Release notes](https://github.com/la10736/rstest/releases)
- [Changelog](https://github.com/la10736/rstest/blob/master/CHANGELOG.md)
- [Commits](la10736/rstest@v0.23.0...v0.27.0)

Updates `regex` from 1.12.4 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.12.4...1.13.1)

Updates `tree-sitter-arkts` from 0.2.0 to 0.3.0
- [Commits](https://github.com/harmony-contrib/tree-sitter-arkts/commits/v0.3.0)

Updates `tree-sitter-cfml` from 0.26.30 to 0.26.42
- [Release notes](https://github.com/cfmleditor/tree-sitter-cfml/releases)
- [Changelog](https://github.com/cfmleditor/tree-sitter-cfml/blob/master/CHANGELOG.md)
- [Commits](cfmleditor/tree-sitter-cfml@v0.26.30...v0.26.42)

Updates `tree-sitter-erlang` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/WhatsApp/tree-sitter-erlang/releases)
- [Changelog](https://github.com/WhatsApp/tree-sitter-erlang/blob/main/CHANGELOG.md)
- [Commits](WhatsApp/tree-sitter-erlang@0.19...0.20)

Updates `rmcp` from 3.0.1 to 3.5.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.0.1...rmcp-v3.5.0)

Updates `tokio` from 1.52.3 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1)

Updates `tokio-util` from 0.7.18 to 0.7.19
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.18...tokio-util-0.7.19)

Updates `reqwest` from 0.12.28 to 0.13.4
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.28...v0.13.4)

Updates `windows-sys` from 0.52.0 to 0.61.2
- [Release notes](https://github.com/microsoft/windows-rs/releases)
- [Commits](https://github.com/microsoft/windows-rs/commits)

Updates `libc` from 0.2.186 to 0.2.189
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.189/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.186...0.2.189)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap_complete
  dependency-version: 4.6.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: criterion
  dependency-version: 0.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: globset
  dependency-version: 0.4.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: ignore
  dependency-version: 0.4.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: interprocess
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: jsonc-parser
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: libc
  dependency-version: 0.2.189
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: notify
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: regex
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: reqwest
  dependency-version: 0.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rmcp
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rstest
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rusqlite
  dependency-version: 0.40.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rustix
  dependency-version: 1.1.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: thiserror
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: time
  dependency-version: 0.3.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tokio-util
  dependency-version: 0.7.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: toml
  dependency-version: 1.1.3+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: tree-sitter
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tree-sitter-arkts
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tree-sitter-cfml
  dependency-version: 0.26.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: tree-sitter-erlang
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: windows-sys
  dependency-version: 0.61.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-a40c51c11c branch from a25972b to 324a179 Compare October 1, 2026 23:48
CodeGraph Test added 7 commits October 2, 2026 12:13
CodeGraph Test
build(deps): adapt to the API changes in the cargo update
ffbf42a 
- tree-sitter 0.27 makes QueryMatch.captures private: the Vue extractor
  uses captures().
- Node::child_count() now returns u32, so 27 `as u32` casts go.
- rusqlite 0.40 has no ToSql for u64: journal_size_limit passes an i64,
  in range by construction.
- rustix 1.x: Signal::TERM and Shutdown::Both.
- rmcp 3.5 renames ServerInfo and ClientInfo to ServerConfig and
  ClientConfig; they are the same types.
- windows-sys 0.59+ makes HANDLE a pointer: a failed OpenProcess is
  is_null().
CodeGraph Test
fix(watch): ignore the open events notify 8 reports
ff55751 
notify 8's inotify backend watches IN_OPEN, so every open of a watched
file or directory arrives as an access event. The loop counted every
event as a change. Its own directory scans and the sync's reads then fed
back forever, the debounce never settled, and new directories, symlink
retargets and fresh files never synced. Only a close after writing,
which notify 6 already delivered, still counts as a change among access
events.
CodeGraph Test
fix(cli): let jsonc-parser escape installer strings
4eebf0f 
jsonc-parser 0.34's CstStringLit::new_escaped escapes backslashes and
control characters itself. The workaround for 0.26, which escaped only
quotes, now escaped them twice, so a Windows `--path C:\Users` was
written to agent configs as `C:\\Users`. Strings now go in raw.
CodeGraph Test
test(mcp): reach 2026-07-28 statelessly under rmcp 3.5
8bd5161 
rmcp 3.5 gives 2026-07-28 no initialize handshake: a 2026-07-28 client
sends every request with its protocol version and client capabilities in
the request's _meta. An initialize asking for 2026-07-28 now falls back
to 2024-11-05.

The tests that negotiated 2026-07-28 through initialize now check that
fallback. The 2026 resultType and the missing Mcp-Session-Id are checked
on stateless tools/list and tools/call requests over HTTP.
docs/mcp.md and the handler comments describe rmcp 3.5.0.
CodeGraph Test
fix(store): bump the extraction version to 20
99d006b 
The grammar updates change extraction output (ArkTS for certain), so an index built at version 19 is reported outdated and rebuilt.
CodeGraph Test
Merge remote-tracking branch 'origin/main' into deps/cargo-280
467beab
CodeGraph Test
test(golden): regenerate the ArkTS golden for tree-sitter-arkts 0.3
7cde321 
tree-sitter-arkts 0.3 parses the call inside the `@Component struct`'s
build() method that 0.2 missed, so the fixture's `MyView::build ->
helper` call is now an edge. It is the only change in all 20 corpora.
The golden is regenerated with the recipe in docs/equivalence.md: only
edges.json and colby.db change. The ArkTS fixture section and the ArkTS
rows in languages.md and grammar-manifest.md record the new edge.
@codecov

codecov Bot commented Oct 2, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 95.45455% with 3 lines in your changes missing coverage. Please review.

Files with missing lines Patch % Lines
crates/codegraph-extract/src/lang/dart.rs 0.00% 2 Missing ⚠️
crates/codegraph-extract/src/lang/arkts.rs 66.66% 1 Missing ⚠️

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #280   +/-   ##
=======================================
  Coverage   95.31%   95.32%           
=======================================
  Files         161      161           
  Lines       99752    99751    -1     
=======================================
+ Hits        95083    95089    +6     
+ Misses       4669     4662    -7
Files with missing lines Coverage Δ
crates/codegraph-cli/src/installer/shared.rs 95.26% <100.00%> (+0.25%) ⬆️
crates/codegraph-daemon/src/process.rs 100.00% <100.00%> (ø)
crates/codegraph-daemon/src/session.rs 97.92% <100.00%> (ø)
crates/codegraph-extract/src/embedded/vue.rs 99.31% <100.00%> (ø)
crates/codegraph-extract/src/lang/javascript.rs 90.00% <100.00%> (-0.23%) ⬇️
crates/codegraph-extract/src/lang/kotlin.rs 97.68% <100.00%> (ø)
crates/codegraph-extract/src/lang/objc.rs 98.52% <100.00%> (ø)
crates/codegraph-extract/src/lang/pascal.rs 96.42% <100.00%> (ø)
crates/codegraph-extract/src/lang/rust.rs 98.61% <100.00%> (-0.02%) ⬇️
crates/codegraph-extract/src/lang/scala.rs 90.78% <100.00%> (ø)
... and 9 more

... and 1 file with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

sunerpy
sunerpy approved these changes Oct 2, 2026
View reviewed changes

@sunerpy sunerpy left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

29-crate update with a full migration (plan gate PASS round 3; diff review PASS): compile adaptations, notify 8 open-event filter, jsonc-parser 0.34 escaping, rmcp 3.5 stateless 2026-07-28, intentional ArkTS golden (+1 edge), extraction version 20. CI green on 7cde321.

@sunerpy
sunerpy merged commit 5b9e39b into main Oct 2, 2026
10 checks passed
@sunerpy
sunerpy deleted the dependabot/cargo/cargo-a40c51c11c branch October 2, 2026 04:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sunerpy sunerpy sunerpy approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@sunerpy