Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 6, 2026

Bumps the nonbreaking group with 9 updates in the / directory:

Package From To
clap 4.5.53 4.5.54
tempfile 3.23.0 3.24.0
tokio 1.48.0 1.49.0
serde_json 1.0.145 1.0.149
insta 1.44.3 1.46.0
rmp-serde 1.3.0 1.3.1
proc-macro2 1.0.103 1.0.105
quote 1.0.42 1.0.43
syn 2.0.111 2.0.113

Updates clap from 4.5.53 to 4.5.54

Release notes

Sourced from clap's releases.

v4.5.54

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help
Changelog

Sourced from clap's changelog.

[4.5.54] - 2026-01-02

Fixes

  • (help) Move [default] to its own paragraph when PossibleValue::help is present in --help
Commits

Updates tempfile from 3.23.0 to 3.24.0

Changelog

Sourced from tempfile's changelog.

3.24.0

  • Actually support WASIp2 without the nightly feature. This library is now feature complete on WASIp2 without any additional feature flags.
  • Exclude CI scripts from the published crate.
Commits

Updates tokio from 1.48.0 to 1.49.0

Release notes

Sourced from tokio's releases.

Tokio v1.49.0

1.49.0 (January 3rd, 2026)

Added

  • net: add support for TCLASS option on IPv6 (#7781)
  • runtime: stabilize runtime::id::Id (#7125)
  • task: implement Extend for JoinSet (#7195)
  • task: stabilize the LocalSet::id() (#7776)

Changed

  • net: deprecate {TcpStream,TcpSocket}::set_linger (#7752)

Fixed

  • macros: fix the hygiene issue of join! and try_join! (#7766)
  • runtime: revert "replace manual vtable definitions with Wake" (#7699)
  • sync: return TryRecvError::Disconnected from Receiver::try_recv after Receiver::close (#7686)
  • task: remove unnecessary trait bounds on the Debug implementation (#7720)

Unstable

  • fs: handle EINTR in fs::write for io-uring (#7786)
  • fs: support io-uring with tokio::fs::read (#7696)
  • runtime: disable io-uring on EPERM (#7724)
  • time: add alternative timer for better multicore scalability (#7467)

Documented

  • docs: fix a typos in bounded.rs and park.rs (#7817)
  • io: add SyncIoBridge cross-references to copy and copy_buf (#7798)
  • io: doc that AsyncWrite does not inherit from std::io::Write (#7705)
  • metrics: clarify that num_alive_tasks is not strongly consistent (#7614)
  • net: clarify the cancellation safety of the TcpStream::peek (#7305)
  • net: clarify the drop behavior of unix::OwnedWriteHalf (#7742)
  • net: clarify the platform-dependent backlog in TcpSocket docs (#7738)
  • runtime: mention LocalRuntime in new_current_thread docs (#7820)
  • sync: add missing period to mpsc::Sender::try_send docs (#7721)
  • sync: clarify the cancellation safety of oneshot::Receiver (#7780)
  • sync: improve the docs for the errors of mpsc (#7722)
  • task: add example for spawn_local usage on local runtime (#7689)

#7125: tokio-rs/tokio#7125 #7195: tokio-rs/tokio#7195 #7305: tokio-rs/tokio#7305 #7467: tokio-rs/tokio#7467 #7614: tokio-rs/tokio#7614 #7686: tokio-rs/tokio#7686 #7689: tokio-rs/tokio#7689

... (truncated)

Commits

Updates serde_json from 1.0.145 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

  • Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

  • Update zmij dependency to 1.0

v1.0.147

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Commits

Updates insta from 1.44.3 to 1.46.0

Release notes

Sourced from insta's releases.

1.46.0

Release Notes

  • Add INSTA_PENDING_DIR environment variable for Bazel and other hermetic build systems. When set, pending snapshots are written to a separate directory while keeping the source tree read-only. We are very open to feedback on this feature. #852
  • Fix documentation for test.runner_fallback config key. #853

Install cargo-insta 1.46.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.46.0/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.46.0/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.46.0

File Platform Checksum
cargo-insta-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
cargo-insta-x86_64-apple-darwin.tar.xz Intel macOS checksum
cargo-insta-x86_64-pc-windows-msvc.zip x64 Windows checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

1.45.1

Release Notes

  • Fix backward compatibility with TOML format produced by insta < 1.45.0. #849 (@​chitoku-k)

Install cargo-insta 1.45.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.45.1/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.45.1/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.45.1

... (truncated)

Changelog

Sourced from insta's changelog.

1.46.0

  • Add INSTA_PENDING_DIR environment variable for Bazel and other hermetic build systems. When set, pending snapshots are written to a separate directory while keeping the source tree read-only. We are very open to feedback on this feature. #852
  • Fix documentation for test.runner_fallback config key. #853

1.45.1

  • Fix backward compatibility with TOML format produced by insta < 1.45.0. #849 (@​chitoku-k)

1.45.0

  • Add external diff tool support via INSTA_DIFF_TOOL environment variable. When set, insta uses the specified tool (e.g., delta, difftastic) to display snapshot diffs instead of the built-in diff. The tool is invoked as <tool> <old_file> <new_file>. #844
  • Add test.disable_nextest_doctest config option to insta.yaml, allowing users to silence the nextest doctest warning via config instead of passing --dnd every time. #842
  • Skip non-insta snapshot files in unreferenced detection. Projects using both insta and other snapshot tools (like vitest or jest) can now use --unreferenced=reject without false positives on .snap files from other tools. #846
  • Collect warnings from tests for display after run. Ensures deprecation warnings are visible even when nextest suppresses stdout/stderr from passing tests. #840
  • Update TOML serialization to be up-to-date and backwards-compatible. #834 (@​spoutn1k)
  • Support clippy::needless_raw_strings lint by only using raw strings when content contains backslashes or quotes. #828
Commits
  • 7d27e3a Release 1.46.0 (#855)
  • 3aa59d6 Add INSTA_PENDING_DIR environment variable for hermetic builds (#852)
  • fd40cf7 Fix docs for test.runner_fallback config key (#853)
  • ac191ba Add test for multiline snapshots without special characters (#848)
  • 55f6999 Release 1.45.1 (#850)
  • 00b1cd4 Fix backward compatibility with TOML format produced by insta < 1.45.0 (#849)
  • 681a026 Release 1.45.0 (#847)
  • ad233cd Skip non-insta snapshot files in unreferenced detection (#846)
  • d8e8dfe Collect warnings from tests for display after run (#840)
  • 521812c Support clippy::needless_raw_strings lint (#828)
  • Additional commits viewable in compare view

Updates rmp-serde from 1.3.0 to 1.3.1

Commits

Updates proc-macro2 from 1.0.103 to 1.0.105

Release notes

Sourced from proc-macro2's releases.

1.0.105

  • Make std dependencies more easily discoverable in source code (#528)

1.0.104

Commits
  • 8c4135f Release 1.0.105
  • 2825fb1 Make same crates available during probe as in crate root
  • cc5819c Merge pull request #528 from dtolnay/nostd
  • e78151e Disable std prelude
  • 2fbddd4 Delete html_root_url comment
  • aa54fc3 Patch rustc-literal-escaper std dependencies
  • 876f800 CStr is available in core since Rust 1.64
  • 4321369 Release 1.0.104
  • 9561144 Merge pull request #527 from dtolnay/extend
  • 57fed01 Update actions/upload-artifact@v5 -> v6
  • Additional commits viewable in compare view

Updates quote from 1.0.42 to 1.0.43

Release notes

Sourced from quote's releases.

1.0.43

  • Disambiguate references to stringify! macro inside generated code (#316)
Commits
  • 635ee67 Release 1.0.43
  • 5f605a6 Reorder module-level attributes in crate root
  • 9c63cee Delete html_root_url comment
  • 009af09 Disallow direct use of quote v1 as a no-std crate
  • 546c7c2 Merge pull request 320 from tamird/no-std
  • fc59136 Merge pull request #319 from tamird/fix-tests
  • b3faa37 Make the crate no_std
  • 8e70480 Merge pull request #318 from tamird/more-core
  • 3b9996b tests: fix compilation with --no-default-features
  • 4d1e4fe Change std imports to core/alloc
  • Additional commits viewable in compare view

Updates syn from 2.0.111 to 2.0.113

Release notes

Sourced from syn's releases.

2.0.113

  • Allow parsing TypeParam with colon not followed by any type param bounds (#1953, thanks @​wyfo)

2.0.112

Commits
  • 8cfa32a Release 2.0.113
  • d5e19ff Do PR 1953 also for LifetimeParam
  • 3fe4dc6 Merge pull request #1953 from wyfo/fix/type-param-colon-no-bounds
  • 31508f3 Fix TypeParam expecting identifier after colon
  • 1534d3a Update reqwest dev-dependency to 0.13
  • f8f2a42 Release 2.0.112
  • ca22ce0 Merge pull request #1951 from VictorArcium/vt/fix-lit-byte
  • 0c4bea1 Fix LitByte::new().
  • 7e38d5d Disable test_parse_buffer.test_unwind_safe under Miri
  • f987b14 Update actions/upload-artifact@v5 -> v6
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the nonbreaking group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.53` | `4.5.54` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.23.0` | `3.24.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.49.0` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.149` |
| [insta](https://github.com/mitsuhiko/insta) | `1.44.3` | `1.46.0` |
| [rmp-serde](https://github.com/3Hren/msgpack-rust) | `1.3.0` | `1.3.1` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.103` | `1.0.105` |
| [quote](https://github.com/dtolnay/quote) | `1.0.42` | `1.0.43` |
| [syn](https://github.com/dtolnay/syn) | `2.0.111` | `2.0.113` |



Updates `clap` from 4.5.53 to 4.5.54
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.53...clap_complete-v4.5.54)

Updates `tempfile` from 3.23.0 to 3.24.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.23.0...v3.24.0)

Updates `tokio` from 1.48.0 to 1.49.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.49.0)

Updates `serde_json` from 1.0.145 to 1.0.149
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.149)

Updates `insta` from 1.44.3 to 1.46.0
- [Release notes](https://github.com/mitsuhiko/insta/releases)
- [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md)
- [Commits](mitsuhiko/insta@1.44.3...1.46.0)

Updates `rmp-serde` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/3Hren/msgpack-rust/releases)
- [Commits](https://github.com/3Hren/msgpack-rust/commits)

Updates `proc-macro2` from 1.0.103 to 1.0.105
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.103...1.0.105)

Updates `quote` from 1.0.42 to 1.0.43
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.42...1.0.43)

Updates `syn` from 2.0.111 to 2.0.113
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.111...2.0.113)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nonbreaking
- dependency-name: tempfile
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nonbreaking
- dependency-name: tokio
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nonbreaking
- dependency-name: serde_json
  dependency-version: 1.0.149
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nonbreaking
- dependency-name: insta
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nonbreaking
- dependency-name: rmp-serde
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nonbreaking
- dependency-name: proc-macro2
  dependency-version: 1.0.105
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nonbreaking
- dependency-name: quote
  dependency-version: 1.0.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nonbreaking
- dependency-name: syn
  dependency-version: 2.0.113
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nonbreaking
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 6, 2026
@jeffcharles jeffcharles enabled auto-merge (squash) January 6, 2026 21:57
@jeffcharles jeffcharles merged commit 6bee7c4 into main Jan 6, 2026
5 checks passed
@jeffcharles jeffcharles deleted the dependabot/cargo/nonbreaking-f9fbed611c branch January 6, 2026 22:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants