Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the prod-dependencies group with 49 updates in the / directory:

Package From To
clap 4.5.41 4.5.53
human-panic 2.0.2 2.0.4
tokio 1.46.1 1.48.0
colored 2.1.0 3.0.0
which 6.0.3 8.0.0
regex 1.11.1 1.12.2
inquire 0.6.2 0.9.1
tracing-subscriber 0.3.18 0.3.20
tracing-appender 0.2.3 0.2.4
chrono 0.4.38 0.4.42
time 0.3.41 0.3.44
minijinja 2.3.1 2.13.0
itertools 0.13.0 0.14.0
async-trait 0.1.83 0.1.89
mockall 0.12.1 0.14.0
pathdiff 0.2.2 0.2.3
glob 0.3.1 0.3.3
educe 0.5.11 0.6.0
petgraph 0.6.5 0.8.3
sha256 1.5.0 1.6.0
anyhow 1.0.98 1.0.100
thiserror 1.0.69 2.0.12
serde_json 1.0.141 1.0.145
schemars 0.8.21 1.1.0
derive_builder 0.20.1 0.20.2
strum 0.26.3 0.27.2
jsonschema 0.30.0 0.37.4
tracing 0.1.41 0.1.43
ignore 0.4.23 0.4.25
tracing-indicatif 0.3.9 0.3.13
indicatif 0.17.9 0.18.0
strip-ansi-escapes 0.2.0 0.2.1
octocrab 0.38.0 0.40.0
jsonwebtoken 9.3.0 10.2.0
secrecy 0.8.0 0.10.3
opentelemetry 0.27.1 0.31.0
opentelemetry-otlp 0.27.0 0.31.0
tracing-opentelemetry 0.28.0 0.32.0
opentelemetry_sdk 0.27.1 0.31.0
tonic 0.12.3 0.14.2
gethostname 0.4.3 1.1.0
normpath 1.3.0 1.5.0
fake 2.10.0 4.4.0
shellexpand 3.1.0 3.1.1
assert_cmd 2.0.16 2.1.1
assert_fs 1.1.2 1.1.3
escargot 0.5.12 0.5.15
predicates 3.1.2 3.1.3
tempfile 3.20.0 3.23.0

Updates clap from 4.5.41 to 4.5.53

Release notes

Sourced from clap's releases.

v4.5.53

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

v4.5.52

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup

v4.5.51

[4.5.51] - 2025-10-29

Fixes

  • (help) Correctly calculate padding for short flags that take a value
  • (help) Don't panic on short flags using ArgAction::Count

v4.5.50

[4.5.50] - 2025-10-20

Features

  • Accept Cow where String and &str are accepted

v4.5.48

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry

v4.5.47

[4.5.47] - 2025-09-02

Features

  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible

Fixes

... (truncated)

Changelog

Sourced from clap's changelog.

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup

[4.5.51] - 2025-10-29

Fixes

  • (help) Correctly calculate padding for short flags that take a value
  • (help) Don't panic on short flags using ArgAction::Count

[4.5.50] - 2025-10-20

Features

  • Accept Cow where String and &str are accepted

[4.5.49] - 2025-10-13

Fixes

  • (help) Correctly wrap when ANSI escape codes are present

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry

[4.5.47] - 2025-09-02

Features

  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible

Fixes

... (truncated)

Commits
  • 3716f9f chore: Release
  • 613b69a docs: Update changelog
  • d117f7a Merge pull request #6028 from epage/arg
  • cb8255d feat(builder): Allow quoted id's for arg macro
  • 1036060 Merge pull request #6025 from AldaronLau/typos-in-faq
  • 2fcafc0 docs: Fix minor grammar issues in FAQ
  • a380b65 Merge pull request #6023 from epage/template
  • 4d7ab14 chore: Update from _rust/main template
  • b8a7ea4 chore(deps): Update Rust Stable to v1.87 (#18)
  • f9842b3 chore: Avoid MSRV problems out of the box
  • Additional commits viewable in compare view

Updates human-panic from 2.0.2 to 2.0.4

Changelog

Sourced from human-panic's changelog.

[2.0.4] - 2025-10-28

[2.0.3] - 2025-07-08

Internal

  • Update toml
Commits
  • b8915ed chore: Release
  • 1fdc7e3 Merge pull request #183 from epage/docs
  • 7c81b00 fix: Remove stale nightly implementation
  • 55acb2b docs: Don't enable nightly feature for docs.rs
  • e9ec8a0 Merge pull request #181 from rust-cli/renovate/actions-setup-python-6.x
  • 6bd12af chore(deps): Update actions/setup-python action to v6
  • 0b35c87 Merge pull request #180 from rust-cli/renovate/actions-checkout-5.x
  • ae2aeaa style: Fix spelling
  • 6bed154 chore(deps): Update actions/checkout action to v5
  • c6e394a Merge pull request #179 from epage/template
  • Additional commits viewable in compare view

Updates tokio from 1.46.1 to 1.48.0

Release notes

Sourced from tokio's releases.

Tokio v1.48.0

1.48.0 (October 14th, 2025)

The MSRV is increased to 1.71.

Added

  • fs: add File::max_buf_size (#7594)
  • io: export Chain of AsyncReadExt::chain (#7599)
  • net: add SocketAddr::as_abstract_name (#7491)
  • net: add TcpStream::quickack and TcpStream::set_quickack (#7490)
  • net: implement AsRef<Self> for TcpStream and UnixStream (#7573)
  • task: add LocalKey::try_get (#7666)
  • task: implement Ord for task::Id (#7530)

Changed

  • deps: bump windows-sys to version 0.61 (#7645)
  • fs: preserve max_buf_size when cloning a File (#7593)
  • macros: suppress clippy::unwrap_in_result in #[tokio::main] (#7651)
  • net: remove PollEvented noise from Debug formats (#7675)
  • process: upgrade Command::spawn_with to use FnOnce (#7511)
  • sync: remove inner mutex in SetOnce (#7554)
  • sync: use UnsafeCell::get_mut in Mutex::get_mut and RwLock::get_mut (#7569)
  • time: reduce the generated code size of Timeout<T>::poll (#7535)

Fixed

  • macros: fix hygiene issue in join! and try_join! (#7638)
  • net: fix copy/paste errors in udp peek methods (#7604)
  • process: fix error when runtime is shut down on nightly-2025-10-12 (#7672)
  • runtime: use release ordering in wake_by_ref() even if already woken (#7622)
  • sync: close the broadcast::Sender in broadcast::Sender::new() (#7629)
  • sync: fix implementation of unused RwLock::try_* methods (#7587)

Unstable

  • tokio: use cargo features instead of --cfg flags for taskdump and io_uring (#7655, #7621)
  • fs: support io_uring in fs::write (#7567)
  • fs: support io_uring with File::open() (#7617)
  • fs: support io_uring with OpenOptions (#7321)
  • macros: add local runtime flavor (#7375, #7597)

Documented

  • io: clarify the zero capacity case of AsyncRead::poll_read (#7580)
  • io: fix typos in the docs of AsyncFd readiness guards (#7583)
  • net: clarify socket gets closed on drop (#7526)
  • net: clarify the behavior of UCred::pid() on Cygwin (#7611)
  • net: clarify the supported platform of set_reuseport() and reuseport() (#7628)

... (truncated)

Commits
  • 556820f chore: prepare Tokio v1.48.0 (#7677)
  • fd1659a chore: prepare tokio-macros v2.6.0 (#7676)
  • 53e8aca ci: update nightly version to 2025-10-12 (#7670)
  • 9e5527d process: fix error when runtime is shut down on nightly-2025-10-12 (#7672)
  • 25a24de net: remove PollEvented noise from Debug formats (#7675)
  • c1fa25f task: clarify the behavior of several spawn_local methods (#7669)
  • e7e02fc fs: use FileOptions inside fs::File to support uring (#7617)
  • f7a7f62 ci: remove cargo-deny Unicode-DFS-2016 license exception config (#7619)
  • d1f1499 tokio: use cargo feature for taskdump support instead of cfg (#7655)
  • ad6f618 runtime: clarify the behavior of Handle::block_on (#7665)
  • Additional commits viewable in compare view

Updates colored from 2.1.0 to 3.0.0

Release notes

Sourced from colored's releases.

v3.0.0

  • [BREAKING CHANGE]: Upgrade MSRV to 1.80 and remove the then unnecessary lazy_static dependency.

v2.2.0

No release notes provided.

Changelog

Sourced from colored's changelog.

3.0.0

  • [BREAKING CHANGE]: Upgrade MSRV to 1.80 and remove the then unnecessary lazy_static dependency.

2.2.0

  • Updated top-level docs to include a note about ColoredString's role in the Colorize pipeline as well as link to it to suggest learning more about how to manipulate existing ColoredString's.
  • Changes to ColoredString:
    • Expose fields.
    • [DEPRECATION]: Deprecated methods fgcolor, bgcolor, and style due to their obsolescence in the face of the exposing of their represented fields.
    • Add methods for clearing specific elements of fgcolor, bgcolor, and style.
    • Change Default implementation to be via derive as Style now implements Default (see changes to Style below).
    • Add implementation of DerefMut.
    • Updated docs to reflect the above changes as well as generally greatly expand them.
  • Changes to Style:
    • Implemented Default for Style (returns CLEAR). This exposes a method by which users can create plain Style's from scratch.
    • Implemented From<Styles> for Style. This lets users easily create Style's from specific styles.
    • Exposed previously private method add.
    • Created method remove which essentially does the opposite.
    • Added builder-style methods in the vein of Colorize to add stylings (e.g. bold, underline, italic, strikethrough).
    • Implemented bitwise operators BitAnd, BitOr, BitXor, and Not as well as their representative assignment operators. You can also use a Styles as an operand for these.
    • Implemented FromIterator<Styles> for Style.
  • Changes to Styles:
    • Implemented bitwise operators BitAnd, BitOr, BitXor, and Not which all combine Styles's and output Style's. These can also take a Style as an operand.
  • Added additional testing for all of the above changes.
  • Added methods with_style and with_color_and_style to Colorize.
Commits

Updates which from 6.0.3 to 8.0.0

Release notes

Sourced from which's releases.

8.0.0

What's Changed

  • Add new Sys trait to allow abstracting over the underlying filesystem. Particularly useful for wasm32-unknown-unknown targets. Thanks @​dsherret for this contribution to which!
  • Add more debug level tracing for otherwise silent I/O errors.
  • Call the NonFatalHandler in more places to catch previously ignored I/O errors.
  • Remove use of the either dependency.

New Contributors

7.0.3

  • Update rustix to version 1.0. Congrats to rustix on this milestone, and thanks @​mhils for this contribution to which!

7.0.2

  • Don't return paths containing the single dot . reference to the current directory, even if the original request was given in terms of the current directory. Thanks @​jakobhellermann for this contribution!

7.0.1

What's Changed

New Contributors

Full Changelog: harryfei/which-rs@7.0.0...7.0.1

7.0.0

  • Add support to WhichConfig for a user provided closure that will be called whenever a nonfatal error occurs. This technically breaks a few APIs due to the need to add more generics and lifetimes. Most code will compile without changes.
Changelog

Sourced from which's changelog.

8.0.0

  • Add new Sys trait to allow abstracting over the underlying filesystem. Particularly useful for wasm32-unknown-unknown targets. Thanks @​dsherret for this contribution to which!
  • Add more debug level tracing for otherwise silent I/O errors.
  • Call the NonFatalHandler in more places to catch previously ignored I/O errors.
  • Remove use of the either dependency.

7.0.3

  • Update rustix to version 1.0. Congrats to rustix on this milestone, and thanks @​mhils for this contribution to which!

7.0.2

  • Don't return paths containing the single dot . reference to the current directory, even if the original request was given in terms of the current directory. Thanks @​jakobhellermann for this contribution!

7.0.1

  • Get user home directory from env_home instead of home. Thanks @​micolous for this contribution!
  • If home directory is unavailable, do not expand the tilde to an empty string. Leave it as is.

7.0.0

  • Add support to WhichConfig for a user provided closure that will be called whenever a nonfatal error occurs. This technically breaks a few APIs due to the need to add more generics and lifetimes. Most code will compile without changes.
Commits
  • adac2cd bump version, update changelog
  • 84e152e reduce sys::Sys requirements, add some tracing for otherwise silent errors (#...
  • a0a6daf feat: add Sys trait for swapping out system (#109)
  • eef1998 Add actively maintained badge
  • 1d145de release version 7.0.3
  • f5e5292 fix unrelated lint error
  • 4dcefa6 bump rustix
  • bd86881 bump version, add to changelog
  • cf37760 don't run relative dot test on macos
  • f2c4bd6 update target to new name for wasm32-wasip1
  • Additional commits viewable in compare view

Updates regex from 1.11.1 to 1.12.2

Changelog

Sourced from regex's changelog.

1.12.2 (2025-10-13)

This release fixes a cargo doc breakage on nightly when --cfg docsrs is enabled. This caused documentation to fail to build on docs.rs.

Bug fixes:

1.12.1 (2025-10-10)

This release makes a bug fix in the new regex::Captures::get_match API introduced in 1.12.0. There was an oversight with the lifetime parameter for the Match returned. This is technically a breaking change, but given that it was caught almost immediately and I've yanked the 1.12.0 release, I think this is fine.

1.12.0 (2025-10-10)

This release contains a smattering of bug fixes, a fix for excessive memory consumption in some cases and a new regex::Captures::get_match API.

Improvements:

Bug fixes:

1.11.3 (2025-09-25)

This is a small patch release with an improvement in memory usage in some cases.

... (truncated)

Commits

Updates inquire from 0.6.2 to 0.9.1

Release notes

Sourced from inquire's releases.

v0.9.1

v0.9

v0.9.0

Features

Adds Selectable derive macro for enums! You can now easily create enum-based prompts (e.g. menus) by using the Selectable derive macro on your enums.

See the example for more details. Thank you @​TheBearodactyl for the contribution!

Dependencies

  • Updated unicode-width to 0.2.
  • Updated crossterm to 0.29.
  • Updated termion to 4.0.
  • Updated console to 0.16.

v0.9.1

  • Fix panicking when terminal backend reports size with 0 width. Thanks @​sebhoss for reporting!

v0.9.0

Features

Adds Selectable derive macro for enums! You can now easily create enum-based prompts (e.g. menus) by using the Selectable derive macro on your enums.

See the example for more details. Thank you @​TheBearodactyl for the contribution!

Dependencies

  • Updated unicode-width to 0.2.
  • Updated crossterm to 0.29.
  • Updated termion to 4.0.
  • Updated console to 0.16.

v0.8.1

v0.8

v0.8.0

Features

  • Improve end user experience when prompting for input without a message.
  • Implement raw_prompt_skippable for Select.

Fixes

  • Fix bug where inputs spanning 3+ lines would break text rendering.
  • Fix bug where Select and MultiSelect prompts would render the first option incorrectly when filtering is disabled.

... (truncated)

Changelog

Sourced from inquire's changelog.

[0.9.1] - 2025-09-16

Fixes

  • Fix panicking when terminal backend reports size with 0 width.

[0.9.0] - 2025-09-16

Features

Adds Selectable derive macro for enums! You can now easily create enum-based prompts (e.g. menus) by using the Selectable derive macro on your enums.

See the example for more details. Thank you @​TheBearodactyl for the contribution!

Dependencies

  • Updated unicode-width to 0.2.
  • Updated crossterm to 0.29.
  • Updated termion to 4.0.
  • Updated console to 0.16.

[0.8.0] - 2025-09-14

Features

  • Improve end user experience when prompting for input without a message.
  • Implement raw_prompt_skippable for Select.

Fixes

  • Fix bug where inputs spanning 3+ lines would break text rendering.
  • Fix bug where Select and MultiSelect prompts would render the first option incorrectly when filtering is disabled.
  • Fix autocomplete suggestions not being updated after a suggestion is accepted.
  • Fix incorrect cursor placement when inputting CJK characters.

API Changes

  • Don't require static lifetime for autocompleter and validator.

Dependencies

  • Upgraded crossterm to 0.28.1.
  • Raised minimum supported Rust version to 1.80.0.
  • Migrate from once_cell to stdlib.
  • Migrate from fxhash to stdlib.
  • Removed unused dependency (newline-converter).
  • Fix GitHub Action outdated dependencies.

Acknowledgments

... (truncated)

Commits
  • 61d72bf chore: release v0.9.1
  • d0921a1 Enhance terminal size handling and fix panicking when terminal size is report...
  • 3402724 docs: update README and CRATE_README to include derive macro usage for enums
  • 023624b chore: update Cargo.toml for inquire-derive
  • 857e233 chore: release v0.9.0
  • 4e17ca7 Remove outdated pre-release replacements in release.toml for CRATE_README.md
  • 9044325 Add release.toml to examples crate
  • 3f6e3f8 Update CHANGELOG
  • cc4d67f Update crossterm requirement from 0.28.1 to 0.29.0 (#310)
  • 25f1ee6 Update termion requirement from 2.0 to 4.0 (#311)
  • Additional commits viewable in compare view

Updates tracing-subscriber from 0.3.18 to 0.3.20

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.20

Security Fix: ANSI Escape Sequence Injection (CVE-TBD)

Impact

Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:

  • Manipulate terminal title bars
  • Clear screens or modify terminal display
  • Potentially mislead users through terminal manipulation

In isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.

Solution

Version 0.3.20 fixes this vulnerability by escaping ANSI control characters in when writing events to destinations that may be printed to the terminal.

Affected Versions

All versions of tracing-subscriber prior to 0.3.20 are affected by this vulnerability.

Recommendations

Immediate Action Required: We recommend upgrading to tracing-subscriber 0.3.20 immediately, especially if your application:

  • Logs user-provided input (form data, HTTP headers, query parameters, etc.)
  • Runs in environments where terminal output is displayed to users

Migration

This is a patch release with no breaking API changes. Simply update your Cargo.toml:

[dependencies]
tracing-subscriber = "0.3.20"

Acknowledgments

We would like to thank zefr0x who responsibly reported the issue at security@tokio.rs.

If you believe you have found a security vulnerability in any tokio-rs project, please email us at security@tokio.rs.

tracing-subscriber 0.3.19

[ [crates.io][crate-0.3.19] ] | [ [docs.rs][docs-0.3.19] ]

This release updates the tracing dependency to [v0.1.41][tracing-0.1.41] and the tracing-serde dependency to [v0.2.0][tracing-serde-0.2.0].

Added

... (truncated)

Commits

Updates tracing-appender from 0.2.3 to 0.2.4

Release notes

Sourced from tracing-appender's releases.

tracing-appender 0.2.4

Added

  • Prune old files at startup (#2966)
  • Add fallback to file creation date (#3000)
  • Introduce weekly rotation (#3218)

Fixed

  • Fix max_files integer underflow when set to zero (#3348)

Documented

  • Update tracing-appender docs link to correct docs.rs URL (#3325)

#2966: tokio-rs/tracing#2966 #3000: tokio-rs/tracing#3000 #3218: tokio-rs/tracing#3218 #3325: tokio-rs/tracing#3325 #3348: tokio-rs/tracing#3348

Commits

Updates chrono from 0.4.38 to 0.4.42

Release notes

Sourced from chrono's releases.

0.4.42

What's Changed

v0.4.41

What's Changed

0.4.40

What's Changed

0.4.39

What's Changed

... (truncated)

Commits
  • f3fd15f Bump version to 0.4.42
  • 5cf5603 strftime: add regression test case
  • a623170 strftime: simplify error handling
  • 36fbfb1 strftime: move specifier handling out of match to reduce rightward drift
  • 7f413c3 strftime: yield None early
  • 9d5dfe1 strftime: outline constants
  • e5f6be7 strftime: move error() method below caller
  • d516c27 strftime: merge impl blocks
  • 0ee2172 strftime: re-order items to keep impls together
  • 757a8b0 Upgrade to windows-bindgen 0.63
  • Additional commits viewable in compare view

Updates time from 0.3.41 to 0.3.44

Release notes

Sourced from time's releases.

v0.3.44

See the changelog for details.

v0.3.43

See the changelog for details.

v0.3.42

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.44 [2025-09-19]

Fixed

  • Comparisons of PrimitiveDateTime, UtcDateTime, and OffsetDateTime with differing signs (i.e. one negative and one positive year) would return the inverse result of what was expected. This was introduced in v0.3.42 and has been fixed.
  • Type inference would fail due to feature unification when wasm-bindgen enabled serde_json. This has been fixed by explicitly specifying the type in the relevant locations.

0.3.43 [2025-09-02]

Added

  • Support for rand 0.9

Fixed

  • In the convert module, any use of per with types that were not the same (such as Nanosecond::per(Second)) would not compile due to a bug. This has been fixed.

...

Description has been truncated

@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Dec 1, 2025
@dependabot dependabot bot force-pushed the dependabot/cargo/prod-dependencies-5b821da9dc branch 3 times, most recently from a8e68f5 to 75062cb Compare December 18, 2025 18:42
Bumps the prod-dependencies group with 49 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.41` | `4.5.53` |
| [human-panic](https://github.com/rust-cli/human-panic) | `2.0.2` | `2.0.4` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.46.1` | `1.48.0` |
| [colored](https://github.com/mackwic/colored) | `2.1.0` | `3.0.0` |
| [which](https://github.com/harryfei/which-rs) | `6.0.3` | `8.0.0` |
| [regex](https://github.com/rust-lang/regex) | `1.11.1` | `1.12.2` |
| [inquire](https://github.com/mikaelmello/inquire) | `0.6.2` | `0.9.1` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.18` | `0.3.20` |
| [tracing-appender](https://github.com/tokio-rs/tracing) | `0.2.3` | `0.2.4` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.38` | `0.4.42` |
| [time](https://github.com/time-rs/time) | `0.3.41` | `0.3.44` |
| [minijinja](https://github.com/mitsuhiko/minijinja) | `2.3.1` | `2.13.0` |
| [itertools](https://github.com/rust-itertools/itertools) | `0.13.0` | `0.14.0` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.83` | `0.1.89` |
| [mockall](https://github.com/asomers/mockall) | `0.12.1` | `0.14.0` |
| [pathdiff](https://github.com/Manishearth/pathdiff) | `0.2.2` | `0.2.3` |
| [glob](https://github.com/rust-lang/glob) | `0.3.1` | `0.3.3` |
| [educe](https://github.com/magiclen/educe) | `0.5.11` | `0.6.0` |
| [petgraph](https://github.com/petgraph/petgraph) | `0.6.5` | `0.8.3` |
| [sha256](https://github.com/baoyachi/sha256-rs) | `1.5.0` | `1.6.0` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.98` | `1.0.100` |
| [thiserror](https://github.com/dtolnay/thiserror) | `1.0.69` | `2.0.12` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.141` | `1.0.145` |
| [schemars](https://github.com/GREsau/schemars) | `0.8.21` | `1.1.0` |
| [derive_builder](https://github.com/colin-kiegel/rust-derive-builder) | `0.20.1` | `0.20.2` |
| [strum](https://github.com/Peternator7/strum) | `0.26.3` | `0.27.2` |
| [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.30.0` | `0.37.4` |
| [tracing](https://github.com/tokio-rs/tracing) | `0.1.41` | `0.1.43` |
| [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.23` | `0.4.25` |
| [tracing-indicatif](https://github.com/emersonford/tracing-indicatif) | `0.3.9` | `0.3.13` |
| [indicatif](https://github.com/console-rs/indicatif) | `0.17.9` | `0.18.0` |
| [strip-ansi-escapes](https://github.com/luser/strip-ansi-escapes) | `0.2.0` | `0.2.1` |
| [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.38.0` | `0.40.0` |
| [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `9.3.0` | `10.2.0` |
| [secrecy](https://github.com/iqlusioninc/crates) | `0.8.0` | `0.10.3` |
| [opentelemetry](https://github.com/open-telemetry/opentelemetry-rust) | `0.27.1` | `0.31.0` |
| [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) | `0.27.0` | `0.31.0` |
| [tracing-opentelemetry](https://github.com/tokio-rs/tracing-opentelemetry) | `0.28.0` | `0.32.0` |
| [opentelemetry_sdk](https://github.com/open-telemetry/opentelemetry-rust) | `0.27.1` | `0.31.0` |
| [tonic](https://github.com/hyperium/tonic) | `0.12.3` | `0.14.2` |
| gethostname | `0.4.3` | `1.1.0` |
| [normpath](https://github.com/dylni/normpath) | `1.3.0` | `1.5.0` |
| [fake](https://github.com/cksac/fake-rs) | `2.10.0` | `4.4.0` |
| [shellexpand](https://gitlab.com/ijackson/rust-shellexpand) | `3.1.0` | `3.1.1` |
| [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.0.16` | `2.1.1` |
| [assert_fs](https://github.com/assert-rs/assert_fs) | `1.1.2` | `1.1.3` |
| [escargot](https://github.com/crate-ci/escargot) | `0.5.12` | `0.5.15` |
| [predicates](https://github.com/assert-rs/predicates-rs) | `3.1.2` | `3.1.3` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.20.0` | `3.23.0` |



Updates `clap` from 4.5.41 to 4.5.53
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.41...clap_complete-v4.5.53)

Updates `human-panic` from 2.0.2 to 2.0.4
- [Changelog](https://github.com/rust-cli/human-panic/blob/master/CHANGELOG.md)
- [Commits](rust-cli/human-panic@v2.0.2...v2.0.4)

Updates `tokio` from 1.46.1 to 1.48.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.46.1...tokio-1.48.0)

Updates `colored` from 2.1.0 to 3.0.0
- [Release notes](https://github.com/mackwic/colored/releases)
- [Changelog](https://github.com/colored-rs/colored/blob/master/CHANGELOG.md)
- [Commits](colored-rs/colored@v2.1.0...v3.0.0)

Updates `which` from 6.0.3 to 8.0.0
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@6.0.3...8.0.0)

Updates `regex` from 1.11.1 to 1.12.2
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.11.1...1.12.2)

Updates `inquire` from 0.6.2 to 0.9.1
- [Release notes](https://github.com/mikaelmello/inquire/releases)
- [Changelog](https://github.com/mikaelmello/inquire/blob/main/CHANGELOG.md)
- [Commits](mikaelmello/inquire@v0.6.2...v0.9.1)

Updates `tracing-subscriber` from 0.3.18 to 0.3.20
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.18...tracing-subscriber-0.3.20)

Updates `tracing-appender` from 0.2.3 to 0.2.4
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-appender-0.2.3...tracing-appender-0.2.4)

Updates `chrono` from 0.4.38 to 0.4.42
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.38...v0.4.42)

Updates `time` from 0.3.41 to 0.3.44
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.41...v0.3.44)

Updates `minijinja` from 2.3.1 to 2.13.0
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/minijinja@2.3.1...2.13.0)

Updates `itertools` from 0.13.0 to 0.14.0
- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)
- [Commits](rust-itertools/itertools@v0.13.0...v0.14.0)

Updates `async-trait` from 0.1.83 to 0.1.89
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.83...0.1.89)

Updates `mockall` from 0.12.1 to 0.14.0
- [Changelog](https://github.com/asomers/mockall/blob/master/CHANGELOG.md)
- [Commits](asomers/mockall@v0.12.1...v0.14.0)

Updates `pathdiff` from 0.2.2 to 0.2.3
- [Commits](https://github.com/Manishearth/pathdiff/commits/v0.2.3)

Updates `glob` from 0.3.1 to 0.3.3
- [Release notes](https://github.com/rust-lang/glob/releases)
- [Changelog](https://github.com/rust-lang/glob/blob/master/CHANGELOG.md)
- [Commits](rust-lang/glob@0.3.1...v0.3.3)

Updates `educe` from 0.5.11 to 0.6.0
- [Commits](magiclen/educe@v0.5.11...v0.6.0)

Updates `petgraph` from 0.6.5 to 0.8.3
- [Release notes](https://github.com/petgraph/petgraph/releases)
- [Changelog](https://github.com/petgraph/petgraph/blob/master/CHANGELOG.md)
- [Commits](https://github.com/petgraph/petgraph/compare/petgraph@v0.6.5...petgraph@v0.8.3)

Updates `sha256` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/baoyachi/sha256-rs/releases)
- [Commits](baoyachi/sha256-rs@1.5.0...1.6.0)

Updates `anyhow` from 1.0.98 to 1.0.100
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.98...1.0.100)

Updates `thiserror` from 1.0.69 to 2.0.12
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.69...2.0.12)

Updates `serde` from 1.0.219 to 1.0.228
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.219...v1.0.228)

Updates `serde_json` from 1.0.141 to 1.0.145
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.141...v1.0.145)

Updates `schemars` from 0.8.21 to 1.1.0
- [Release notes](https://github.com/GREsau/schemars/releases)
- [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md)
- [Commits](GREsau/schemars@v0.8.21...v1.1.0)

Updates `derive_builder` from 0.20.1 to 0.20.2
- [Release notes](https://github.com/colin-kiegel/rust-derive-builder/releases)
- [Commits](colin-kiegel/rust-derive-builder@v0.20.1...v0.20.2)

Updates `strum` from 0.26.3 to 0.27.2
- [Release notes](https://github.com/Peternator7/strum/releases)
- [Changelog](https://github.com/Peternator7/strum/blob/master/CHANGELOG.md)
- [Commits](Peternator7/strum@v0.26.3...v0.27.2)

Updates `jsonschema` from 0.30.0 to 0.37.4
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@rust-v0.30.0...rust-v0.37.4)

Updates `tracing` from 0.1.41 to 0.1.43
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-0.1.41...tracing-0.1.43)

Updates `ignore` from 0.4.23 to 0.4.25
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@ignore-0.4.23...ignore-0.4.25)

Updates `tracing-indicatif` from 0.3.9 to 0.3.13
- [Release notes](https://github.com/emersonford/tracing-indicatif/releases)
- [Changelog](https://github.com/emersonford/tracing-indicatif/blob/main/CHANGELOG.md)
- [Commits](emersonford/tracing-indicatif@0.3.9...0.3.13)

Updates `indicatif` from 0.17.9 to 0.18.0
- [Release notes](https://github.com/console-rs/indicatif/releases)
- [Commits](console-rs/indicatif@0.17.9...0.18.0)

Updates `strip-ansi-escapes` from 0.2.0 to 0.2.1
- [Commits](https://github.com/luser/strip-ansi-escapes/commits)

Updates `octocrab` from 0.38.0 to 0.40.0
- [Release notes](https://github.com/XAMPPRocky/octocrab/releases)
- [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md)
- [Commits](XAMPPRocky/octocrab@v0.38.0...v0.40.0)

Updates `jsonwebtoken` from 9.3.0 to 10.2.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v9.3.0...v10.2.0)

Updates `secrecy` from 0.8.0 to 0.10.3
- [Commits](https://github.com/iqlusioninc/crates/commits)

Updates `opentelemetry` from 0.27.1 to 0.31.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-0.27.1...v0.31.0)

Updates `opentelemetry-otlp` from 0.27.0 to 0.31.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-otlp-0.27.0...v0.31.0)

Updates `tracing-opentelemetry` from 0.28.0 to 0.32.0
- [Release notes](https://github.com/tokio-rs/tracing-opentelemetry/releases)
- [Changelog](https://github.com/tokio-rs/tracing-opentelemetry/blob/v0.1.x/CHANGELOG.md)
- [Commits](tokio-rs/tracing-opentelemetry@v0.28.0...v0.32.0)

Updates `opentelemetry_sdk` from 0.27.1 to 0.31.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry_sdk-0.27.1...v0.31.0)

Updates `tonic` from 0.12.3 to 0.14.2
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](hyperium/tonic@v0.12.3...v0.14.2)

Updates `gethostname` from 0.4.3 to 1.1.0

Updates `normpath` from 1.3.0 to 1.5.0
- [Release notes](https://github.com/dylni/normpath/releases)
- [Commits](dylni/normpath@1.3.0...1.5.0)

Updates `fake` from 2.10.0 to 4.4.0
- [Release notes](https://github.com/cksac/fake-rs/releases)
- [Commits](https://github.com/cksac/fake-rs/commits/v4.4.0)

Updates `shellexpand` from 3.1.0 to 3.1.1
- [Commits](https://gitlab.com/ijackson/rust-shellexpand/compare/shellexpand-3.1.0...shellexpand-3.1.1)

Updates `assert_cmd` from 2.0.16 to 2.1.1
- [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_cmd@v2.0.16...v2.1.1)

Updates `assert_fs` from 1.1.2 to 1.1.3
- [Changelog](https://github.com/assert-rs/assert_fs/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_fs@v1.1.2...v1.1.3)

Updates `escargot` from 0.5.12 to 0.5.15
- [Changelog](https://github.com/crate-ci/escargot/blob/master/CHANGELOG.md)
- [Commits](crate-ci/escargot@v0.5.12...v0.5.15)

Updates `predicates` from 3.1.2 to 3.1.3
- [Changelog](https://github.com/assert-rs/predicates-rs/blob/master/CHANGELOG.md)
- [Commits](assert-rs/predicates-rs@v3.1.2...v3.1.3)

Updates `tempfile` from 3.20.0 to 3.23.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.20.0...v3.23.0)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: human-panic
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: tokio
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: colored
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: which
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: regex
  dependency-version: 1.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: inquire
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: tracing-subscriber
  dependency-version: 0.3.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: tracing-appender
  dependency-version: 0.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: chrono
  dependency-version: 0.4.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: time
  dependency-version: 0.3.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: minijinja
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: itertools
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: async-trait
  dependency-version: 0.1.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: mockall
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: pathdiff
  dependency-version: 0.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: glob
  dependency-version: 0.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: educe
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: petgraph
  dependency-version: 0.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: sha256
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: anyhow
  dependency-version: 1.0.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: serde
  dependency-version: 1.0.228
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: serde_json
  dependency-version: 1.0.145
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: schemars
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: derive_builder
  dependency-version: 0.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: strum
  dependency-version: 0.27.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: jsonschema
  dependency-version: 0.37.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: tracing
  dependency-version: 0.1.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: ignore
  dependency-version: 0.4.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: tracing-indicatif
  dependency-version: 0.3.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: indicatif
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: strip-ansi-escapes
  dependency-version: 0.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: octocrab
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: jsonwebtoken
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: secrecy
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-otlp
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: tracing-opentelemetry
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry_sdk
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: tonic
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: gethostname
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: normpath
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: fake
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: shellexpand
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: assert_cmd
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: assert_fs
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: escargot
  dependency-version: 0.5.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: predicates
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: tempfile
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/prod-dependencies-5b821da9dc branch from 75062cb to 61b9115 Compare December 18, 2025 18:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant