Skip to content

chore(deps): bump the cargo group across 1 directory with 7 updates - #155

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-a4df52499d
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-a4df52499d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 7 updates in the / directory:

Package From To
smallvec 1.16.2 1.16.4
serde_json 1.0.151 1.0.154
minijinja 2.24.0 3.0.5
pyo3 0.29.3 0.30.1
base64 0.22.1 0.23.1
wasm-bindgen 0.2.129 0.2.130
toml 1.1.6+spec-1.1.0 1.2.0+spec-1.1.0

Updates smallvec from 1.16.2 to 1.16.4

Release notes

Sourced from smallvec's releases.

v1.16.4

What's Changed

Full Changelog: smallvec/smallvec@v1.16.3...v1.16.4

v1.16.3

What's Changed

Full Changelog: smallvec/smallvec@v1.16.2...v1.16.3

Commits

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates minijinja from 2.24.0 to 3.0.5

Changelog

Sourced from minijinja's changelog.

3.0.5

  • Fixed a panic or abort in Rust when buffering an iterator that reports a huge size hint, or when passing a huge count to the batch or slice filters. Filters like list, sort, reverse, map, slice and batch as well as slicing and concatenating sequences now cap how much they preallocate, so [1, 2]|batch(4611686018427387904) is [[1, 2]] instead of failing with "capacity overflow". #483
  • Fixed floats in Go switching to exponent notation from one million up, so 1234567.5 printed as 1.2345675e+06. Like in Rust, a float now prints as its shortest exact decimal without an exponent, so 1234567.5 is 1234567.5 and 1e20 is 100000000000000000000.0. Inside lists and maps, exponent notation is only used below 1e-4 and from 1e16 up, written like 1e20 and 1e-5. NaN now prints as NaN, and infinity inside a list as inf instead of +Inf. #984
  • Fixed %s in the format filter formatting floats with %g rules, so "%s"|format(1234567.5) was 1.23457e+06. Like in Python, floats are now formatted like str() does: 1234567.5, 1e+16, 1e-05 or nan. The 0, + and space flags are ignored for floats and strings with %s, like in Python. This applies to both Rust and Go. #984
  • Fixed the tojson filter in Go writing floats like integers. Like in Rust, a float stays a float in the output, so 1.0|tojson is 1.0 instead of 1, large and small magnitudes use exponent notation (1.5e+16, 2.5e-7) and infinity becomes null instead of an error. The same applies to values rendered with JSON auto-escaping. #983
  • Fixed the upper, lower, capitalize, title and replace filters in Go ignoring values that are not strings. Like in Rust, the value and the replace arguments are converted to strings first, so 1.5|replace(".", ",") is 1,5 and true|upper is TRUE, and a number passed to replace is no longer treated as an empty string. #985
  • Fixed slicing and the in operator on iterables such as range() in Go. Like in Rust, range(5)[:2] is now [0, 1] instead of failing with "cannot slice iterator", and 3 in range(5) is true instead of false. Slicing none or undefined gives an empty list like in Rust. Iterables now also print, compare, serialize with tojson and pprint like lists, so range(2) == [0, 1] is true and [range(2)] prints as [[0, 1]] instead of [<iterator>]. The in operator now also works on custom sequence, iterable and map objects. #986
  • Fixed none in Go not being treated as an empty sequence by the sort, unique, select, reject, map, groupby, join and urlencode filters and the iterable test. Like in Rust, none|sort is now [] and none|join is an empty string instead of None. #987
  • Fixed the odd, even and divisibleby tests in Go ignoring booleans, and divisibleby ignoring a float divisor. Like in Rust, booleans count as 0 and 1, so true is odd is true, and 6.5 is divisibleby(0.5) is true. #988
  • Fixed str.format in pycompat cutting floats to six significant digits when no precision is given. Like in Python, such floats are now formatted like str() does, so '{}'.format(3.14159265) is 3.14159265, '{}'.format(1234567.0) is 1234567.0 instead of 1.23457e+06 and '{}'.format(0.0) is 0.0 instead of 0. #991
  • Fixed the trim filter in Go ignoring values that are not strings and only stripping ASCII spaces, tabs and newlines by default. Like in Rust, 5|trim|length is now 1, and Unicode whitespace such as a non-breaking space is stripped. #989
  • Fixed undefined values not being treated as empty sequences by the sort, unique, select, reject, selectattr, rejectattr, map, batch and groupby filters in Go, and none by batch, selectattr and rejectattr. Like in Rust, undefined|sort is now [] with lenient undefined behavior, while strict and semi-strict undefined behavior still fail except for join and groupby. #990
  • Fixed a panic in compile_expression when the expression contains }} followed by more input, such as }} x. This is now a syntax error, like the same text inside a template. #992

3.0.4

  • Fixed str.count in pycompat looping forever when counting an empty string. Like in Python, 'abc'.count('') is now 4.
  • Fixed str.islower and str.isupper in pycompat returning false for strings with spaces, digits or other uncased characters, and the str.is* predicates returning true for an empty string. They now follow Python, so 'foo bar'.islower() is true and ''.isdigit() is false.
  • Fixed str.find and str.rfind in pycompat returning byte offsets. Like in Python they now return character offsets, so 'über'.find('e') is 2.
  • Fixed integer addition, subtraction and multiplication in Go losing precision above 2**53 and clamping results that overflow 64 bits, because they were computed with floats. They are now exact, and like in Rust a result that doesn't fit 64 bits becomes a big integer, so 9007199254740993 + 0 is 9007199254740993 and 9223372036854775807 + 1 is 9223372036854775808. #981
  • Fixed booleans not being usable as integers in -, *, /, // and % and for repeating strings and sequences in Go. Like in Rust and Jinja2, true - 1 is 0 and "ab" * true is ab.
  • Fixed ** failing with a negative integer exponent in Rust. Like in Jinja2, 2 ** -1 is now 0.5. Zero to a negative power now always fails in Rust and Go like a division by zero, instead of producing inf for floats in Rust and for all numbers in Go. #982
  • Fixed ** on integers in Go being computed with floats. Like in Rust the result is now exact up to 128 bits and fails beyond that, a float base stays a float so 2.0 ** 3 is 8.0, and booleans count as integers.
  • Fixed the sort filter ignoring a comma-separated list of attributes in Go. Like in Rust, sort(attribute="name, state") now sorts by name and then by state instead of leaving the items in their original order. #979
  • Fixed the sort filter comparing strings case-sensitively when sorting by several attributes in Rust and Go. Like in Jinja2, each part of the key is now compared case-insensitively unless case_sensitive is set. An attribute list with whitespace-only entries such as "name, " also no longer sorts by an empty attribute in Rust.
  • Added the attribute and start arguments to the sum filter and the attribute argument to the join filter for Jinja2 compatibility in Rust and Go. Like in Jinja2 the arguments can be passed positionally or by keyword, and the separator of join can also be passed as d. In Go the first positional argument of sum is now the attribute rather than the start value, so sum(100) needs to be written as sum(start=100). Go previously ignored unknown keyword arguments to sum and join and now fails like Rust. Like in Jinja2, sum in Rust can now also concatenate lists when given a list as start. #980
  • Fixed the handling of none arguments to the int, float and round filters in Go. Like in Rust they now count as not given, so 2.5|round(none) is 2.0 instead of an error.
  • Fixed the join filter dropping a separator that is not a string in Go. Like in Rust it is converted to a string, so [1, 2]|join(3) is 132.

3.0.3

  • Re-release of 3.0.2 without code changes. The Python package for 3.0.2 could not be published to PyPI because the 32-bit Linux wheel failed to build on the new Ubuntu 26.04 GitHub Actions runners, so 3.0.3 is the first release with the 3.0.2 changes on PyPI. All other packages are identical to 3.0.2.

3.0.2

  • Macros and variables starting with an underscore are now private and are no longer exported from imported templates in Rust and Go, matching Jinja2. They are not visible as attributes of a module imported with {% import %}, and {% from ... import %} of such a name is a syntax error. State::exports / State.Exports no longer return them either, but they can still be retrieved with lookup. #970
  • Fixed modules imported with {% import %} not being iterable in Go.
  • Fixed the indent filter indenting blank lines of CRLF text when blank is false, in Rust and Go. A blank line ended up as " \r" instead of "\r", leaving trailing whitespace. #972
  • Fixed the wordwrap filter ignoring break_long_words when break_on_hyphens is false. The two arguments are independent in Jinja2, so a word longer than width is still broken unless break_long_words is false. #940
  • Fixed chained integer lookups like foo.1.0 failing with a syntax error in Rust and Go. Like in Jinja2, a number right after a dot is now always read as an item index, so foo.1.0 is foo[1][0] instead of foo followed by the float 1.0. #974
  • Fixed \x and octal string escapes above \x7f producing invalid UTF-8 in Go. Like in Rust they now produce the code point, so '\xe9' is é. Go now also understands the \b and \f escapes and surrogate pairs written as two \u escapes, and rejects a lone surrogate like Rust does. #975
  • Added the method argument to the round filter for Jinja2 compatibility in Rust and Go. It takes common (the default), ceil or floor, and both precision and method can now be passed as keyword arguments. Integers are now rounded to a negative precision like in Jinja2, so 15|round(-1) is 20 rather than 15. #968
  • Fixed Python exceptions leaking into later renders in the Python bindings. An exception that MiniJinja did not report, for instance one raised by an iterator after a {% break %}, was raised in place of the next unrelated error. Exceptions are now attached to the error that carries them. Exceptions raised by a loader are also no longer treated as missing templates, so they are no longer ignored by ignore missing or skipped by an include with a list of templates. #967
  • The Python package is now also published as free-threaded wheels for Linux, macOS and Windows: a version-specific wheel for CPython 3.14t and an abi3t (PEP 803) wheel for CPython 3.15+. #969
  • The Python package metadata includes the readme again, so the PyPI page shows a project description.

3.0.1

  • The Python package is now also published as Pyodide wheels (PEP 783 pyemscripten platform tag) for Pyodide 0.29 and 314 so it can be installed with micropip.

... (truncated)

Commits
  • 68ab5b6 chore(release): 3.0.5
  • fc636f0 fix: report a syntax error instead of panicking on }} in expressions
  • f6f9857 fix(go): iterate undefined as an empty sequence in filters like Rust (#990)
  • 0d0df9d fix(go): make the trim filter convert values and strip Unicode whitespace lik...
  • ce30dad fix(contrib): format floats like str() in str.format when no precision is giv...
  • 0b2e87d test: make huge batch count test portable to 32bit targets
  • feb2f93 fix(go): coerce booleans and floats in the odd, even and divisibleby tests li...
  • e05f317 fix: do not trust size hints when preallocating
  • 9c6fe27 fix(go): treat none as an empty iterable in filters like Rust (#987)
  • 50470a2 fix(go): support slicing and in on iterables like Rust (#986)
  • Additional commits viewable in compare view

Updates pyo3 from 0.29.3 to 0.30.1

Release notes

Sourced from pyo3's releases.

PyO3 0.30.1 is a re-release of PyO3 0.30.0 after investments in CI security unfortunately led to a failed crates.io publish. Rather than delete the failed tag, this new tag comes after the CI issues have (hopefully) been corrected.

Thanks to @​davidhewitt @​Tpt and @​viicos for the investigation and fixes.

PyO3 0.30.0

This release brings confirmed testing against Python 3.15.0 final. Support for Python 3.8 has been dropped. The minimum supported Rust version has also been increased to 1.85.

The largest sets of improvements come to PyO3 0.29.0's experimental-inspect feature, which has received substantial feedback since 0.29.0 and subsequently has seen many refinements to improve the quality and coverage to the generated stubs. Thank you to everyone who has helped to continue to drive this feature towards completion.

New safe wrappers for PyFrozenDict (3.15+) and PyContext have been added.

PyO3 now contains meson build files, which should make it possible for projects using meson-python to more straightforwardly use Rust and PyO3 for additional components.

Additionally, a number of small optimizations have landed, including:

  • simplifications to core implementations of PyAnyMethods,
  • reduced overhead from PyO3's internal "reference pool" used to dispose of Py<T> values dropped when not attached to the interpreter,
  • optimizations to num-bigint conversions, and
  • better generated code from IntoPyObject and IntoPyObjectRef derives.

There are also many other incremental improvements, bug fixes and smaller features; full detail can be found in the CHANGELOG.

Please consult the migration guide for help upgrading.

Thank you to everyone who contributed code, documentation, design ideas, bug reports, and feedback. The following contributors' commits are included in this release:

@​adamgerhant-ai @​alex @​bschoenmaeckers @​charliermarsh @​chirizxc @​clin1234 @​davidhewitt @​dependabot[bot] @​dylanpulver @​elbaro @​exg @​florentinl @​FranciscoTGouveia @​Icxolu @​imfeh2 @​IvanIsCoding @​JMak-Security @​jonasdedden @​jorenham @​konstin @​latent-9 @​MatthieuDartiailh @​mattip @​mejrs @​msimacek

... (truncated)

Changelog

Sourced from pyo3's changelog.

[0.30.1] - 2026-10-14

Packaging

  • Support PyPy 3.12. #6448

[0.30.0] - 2026-10-13

NB PyO3 0.30.0 failed to push to crates.io due to a CI issue, so 0.30.1 was prepared and pushed with minimal other changes other than confirming support for PyPy 3.12.

Packaging

  • Drop support for Python 3.8. #6128
  • Bump MSRV to 1.85. #6459
  • Support meson-python as a build backend. #6483
  • Bump minimum supported GraalPy version to 25.4. #6491
  • Support Python 3.15.0 final. #6517

Added

  • Add support for PyFrozenDict on 3.15+ #6174
  • Add PyContext type. #6227
  • experimental-inspect: classes which extend their base's instance layout are now decorated with disjoint_base in the generated stubs, as per PEP 800. #6362
  • Add methods PyBuffer::as_slice_ptr and PyBuffer::as_fortran_slice_ptr. #6382
  • Implement Copy for PyVisit. #6412
  • Add non-poisoning variant of PyMutex #6437
  • Add PyStringMethods::code_point_len. #6455
  • FFI Definitions:
    • Add FFI definition PyThread_get_thread_ident. #6056
    • Add FFI definitions for PEP 731 (PyInitConfig). #6152
    • Add FFI definitions PyContext_AddWatcher and PyContext_ClearWatcher on Python 3.14+. #6204
    • Add FFI definitions for PEP 539 ("Thread-Specific Storage" API). #6262
    • Enable FFI definitions PyObject_GC_Track and PyObject_GC_UnTrack on PyPy. #6299
    • Add FFI definitions PyUnicode_DecodeMBCS, PyUnicode_DecodeMBCSStateful, PyUnicode_DecodeCodePagetateful, PyUnicode_AsMBCSString, PyUnicode_EncodeCodePage, and PyUnicode_Equal. #6349
    • Add FFI definitions PyFloat_Pack{2,4,8} and PyFloat_Unpack{2,4,8}. #6350
    • Add FFI definitions PyFunction_GET_CODE, PyFunction_GET_GLOBALS, PyFunction_GET_MODULE, PyFunction_GET_DEFAULTS, PyFunction_GET_KW_DEFAULTS, PyFunction_GET_CLOSURE, PyFunction_GET_ANNOTATIONS, PyClassMethod_Type, PyStaticMethod_Type, PyClassMethod_New, and PyStaticMethod_New. #6351

Changed

  • Optimized num-bigint conversions on Python 3.14 and newer. #6144
  • Change #[pyclass] to not emit FromPyObject implementation by default (this was previously deprecated). #6188
  • Deprecate #[pyclass(skip_from_py_object)] option (as it is now the default). #6188
  • Deprecate pyo3_build_config::PythonAbi::from_build_env in favor of pyo3_build_config::PythonAbi::from_stable_abi. #6192
  • Change pyo3_build_config::InterpreterConfig::from_sysconfigdata to no longer select a target ABI based on the content of abi3 or abi3t cargo features (it will now always select a version-specific ABI). #6192
  • Optimize PyO3's internal reference pool used for disposal of Py<T> values dropped when not attached to the Python interpreter. #6200
  • experimental-inspect: Emit __all__ for complete modules in the type stubs. #6242
  • Change PyBytes::new_with_writer to take &mut PyBytesWriter instead of &mut dyn Write. #6251
  • Change #[pymodule_init] to allow functions which do not take a module argument (for experimental-inspect, such modules are not marked Incomplete). #6271
  • Change #[pymodule_init] to optionally allow functions to take a Python<'_> marker. #6271

... (truncated)

Commits

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

Updates wasm-bindgen from 0.2.129 to 0.2.130

Release notes

Sourced from wasm-bindgen's releases.

0.2.130

Added

  • A borrowed number, bool, char or borrowed string crosses by copy, so &f64, &Option<T>, &Nullable<T>, Option<&f64> and Option<&Nullable<T>> are argument types, and an experimental_generic_mono import taking &T accepts T = f64, Option<f64> or Nullable<String>, as std's contains(&T) does. #5436

  • Added a rejection type parameter to js_sys::Promise<T, E = JsValue>, mirrored on JsFuture<T, E>, PromiseState<T, E> and PromiseWithResolvers<T, E>. Awaiting a Promise<T, E> yields Result<T, E>, converting the rejection reason as an E the same unchecked way the fulfilled value is converted as a T. Both parameters are covariant under Upcast; catch, then_with_reject and the withResolvers reject function receive an E; all_tuple / all_settled_tuple carry a shared E through; and under js_sys_unstable_apis, Promise::new, Promise::reject and Promise::any are typed on the rejection too, any as AggregateError. The default keeps existing Promise<T> code unchanged. PromiseWithResolvers<T, E> is invariant in both, since its resolve and reject functions take them, and JsFuture<T, E> is UnwindSafe whenever T and E are. #5426

  • Added the --js-string-builtins CLI flag, importing static_string constants as JS String Builtins string constants from wasm:js/string-constants instead of defining them in the JS glue. With reference types, static_string constants now occupy fixed externref table slots filled in when the module is instantiated, so cloning and dropping them is free and never calls into JS. #5401

  • Added Nullable<T>, re-exported as js_sys::Nullable, for a T | null value at the JS boundary, as Option<T> is for T | undefined, with Option<Nullable<T>> for T | null | undefined. Both are accepted wherever Option<T> is, for every T and in every position: JS null is Nullable::Null and is sent back as null, while undefined into a plain Nullable<T> goes to T's own conversion. A plain Option<T> still reads both undefined and null as None and writes None as undefined; the Option layer of Option<Nullable<T>> treats only undefined as None, since null has to reach the Nullable layer. Option<T> converts from and into Nullable<T>, and JsNullable<T> converts from both and into Option<Nullable<T>> for T: JsGeneric. The API follows Option's, including ok_or, and_then, filter, as_deref, take, replace and IntoIterator, and --cfg wasm_bindgen_unstable_try_trait enables ? on nightly. NullableIntoWasmAbi / NullableFromWasmAbi carry Nullable<T>'s null for every T, and are supertraits of JsStringLike and the js-sys

... (truncated)

Changelog

Sourced from wasm-bindgen's changelog.

0.2.130

Added

  • A borrowed number, bool, char or borrowed string crosses by copy, so &f64, &Option<T>, &Nullable<T>, Option<&f64> and Option<&Nullable<T>> are argument types, and an experimental_generic_mono import taking &T accepts T = f64, Option<f64> or Nullable<String>, as std's contains(&T) does. #5436

  • Added a rejection type parameter to js_sys::Promise<T, E = JsValue>, mirrored on JsFuture<T, E>, PromiseState<T, E> and PromiseWithResolvers<T, E>. Awaiting a Promise<T, E> yields Result<T, E>, converting the rejection reason as an E the same unchecked way the fulfilled value is converted as a T. Both parameters are covariant under Upcast; catch, then_with_reject and the withResolvers reject function receive an E; all_tuple / all_settled_tuple carry a shared E through; and under js_sys_unstable_apis, Promise::new, Promise::reject and Promise::any are typed on the rejection too, any as AggregateError. The default keeps existing Promise<T> code unchanged. PromiseWithResolvers<T, E> is invariant in both, since its resolve and reject functions take them, and JsFuture<T, E> is UnwindSafe whenever T and E are. #5426

  • Added the --js-string-builtins CLI flag, importing static_string constants as JS String Builtins string constants from wasm:js/string-constants instead of defining them in the JS glue. With reference types, static_string constants now occupy fixed externref table slots filled in when the module is instantiated, so cloning and dropping them is free and never calls into JS. #5401

  • Added Nullable<T>, re-exported as js_sys::Nullable, for a T | null value at the JS boundary, as Option<T> is for T | undefined, with Option<Nullable<T>> for T | null | undefined. Both are accepted wherever Option<T> is, for every T and in every position: JS null is Nullable::Null and is sent back as null, while undefined into a plain Nullable<T> goes to T's own conversion. A plain Option<T> still reads both undefined and null as None and writes None as undefined; the Option layer of Option<Nullable<T>> treats only undefined as None, since null has to reach the Nullable layer. Option<T> converts from and into Nullable<T>, and JsNullable<T> converts from both and into Option<Nullable<T>> for T: JsGeneric. The API follows Option's, including ok_or, and_then, filter, as_deref, take, replace and IntoIterator, and --cfg wasm_bindgen_unstable_try_trait enables ? on nightly. NullableIntoWasmAbi / NullableFromWasmAbi carry Nullable<T>'s null

... (truncated)

Commits
  • c93b8ae Release 0.2.130 (#5418)
  • f4f4d33 Rework the js-sys Temporal bindings against the final specification (#5402)
  • 7e9536a Fill in the upcasts between Rust carriers, optional carriers and JS values (#...
  • 50dd6a0 Fix UpcastFrom soundness via lifetime-faithful ErasableGeneric repr (#5178)
  • 5a9fbdf Borrowed scalars and optionals cross by copy, so a mono &T import takes any e...
  • 4bc5371 Check wasm-bindgen-bot auto-merge when do not land is removed (#5430)
  • edc57f8 Loosen the JsGeneric bounds on js-sys Function slots and type-level positions...
  • b2e142f Share one in-flight initialization across concurrent __wbg_init calls (#5429)
  • 1859ca8 Add a rejection type parameter to js_sys::Promise<T, E> (#5426)
  • bc6df41 Remove the strict Option cfg so Option<T> reads null as None again (#5428)
  • Additional commits viewable in compare view

Updates toml from 1.1.6+spec-1.1.0 to 1.2.0+spec-1.1.0

Commits
  • 8ffe3c5 chore: Release
  • fa51878 docs: Update changelog
  • f8ad91e perf(serde): Reuse key allocations (#1261)
  • fe51467 perf(serde): Reuse key allocations
  • 7024319 perf(writer): Expand coverage of the fast path (#1259)
  • be196a8 perf(writer): Expand coverage of the fast path
  • 932704c perf(serde): Pre-allocate serialization buffers (#1258)
  • 52b563d perf(serde): Pre-allocate serialization buffers
  • e346a79 perff(writer): Add key and string fast paths (#1257)
  • ab695e6 perf(writer): Add a fast path for writing string types
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 4, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-a4df52499d branch from 0efcac3 to f112fa3 Compare November 9, 2026 00:02
Bumps the cargo group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.16.2` | `1.16.4` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [minijinja](https://github.com/mitsuhiko/minijinja) | `2.24.0` | `3.0.5` |
| [pyo3](https://github.com/pyo3/pyo3) | `0.29.3` | `0.30.1` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [wasm-bindgen](https://github.com/wasm-bindgen/wasm-bindgen) | `0.2.129` | `0.2.130` |
| [toml](https://github.com/toml-rs/toml) | `1.1.6+spec-1.1.0` | `1.2.0+spec-1.1.0` |



Updates `smallvec` from 1.16.2 to 1.16.4
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](smallvec/smallvec@v1.16.2...v1.16.4)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `minijinja` from 2.24.0 to 3.0.5
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/minijinja@minijinja-go/v2.24.0...minijinja-go/v3.0.5)

Updates `pyo3` from 0.29.3 to 0.30.1
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/v0.30.1/CHANGELOG.md)
- [Commits](PyO3/pyo3@v0.29.3...v0.30.1)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `wasm-bindgen` from 0.2.129 to 0.2.130
- [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases)
- [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md)
- [Commits](wasm-bindgen/wasm-bindgen@0.2.129...0.2.130)

Updates `toml` from 1.1.6+spec-1.1.0 to 1.2.0+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.6...toml-v1.2.0)

---
updated-dependencies:
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: minijinja
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: pyo3
  dependency-version: 0.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: smallvec
  dependency-version: 1.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: toml
  dependency-version: 1.1.8+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: wasm-bindgen
  dependency-version: 0.2.130
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-a4df52499d branch from f112fa3 to 52674a4 Compare November 9, 2026 00:43

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants