Skip to content

chore(deps): bump the prod-dependencies group across 1 directory with 12 updates - #375

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-dependencies-e81a37ce45
Open

chore(deps): bump the prod-dependencies group across 1 directory with 12 updates#375
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-dependencies-e81a37ce45

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-dependencies group with 12 updates in the / directory:

Package From To
async-trait 0.1.91 0.1.92
clap 4.6.4 4.6.7
educe 0.7.4 0.8.1
ignore 0.4.31 0.4.33
jsonwebtoken 10.4.0 11.1.0
minijinja 2.21.0 2.24.0
normpath 1.5.1 1.5.2
octocrab 0.54.1 0.54.2
schemars 1.2.1 1.2.2
thiserror 2.0.19 2.0.20
time 0.3.54 0.3.55
which 8.0.5 8.0.6

Updates async-trait from 0.1.91 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

  • Resolve double_must_use clippy lint in generated code (#303)
Commits

Updates clap from 4.6.4 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates educe from 0.7.4 to 0.8.1

Changelog

Sourced from educe's changelog.

Changelog: 0.7.6 to 0.8.0

This document compares v0.7.6 (8b73bc2) with 0.8.0 and focuses on changes that affect crate users. Several correctness fixes change generated bounds, conversion signatures, or method resolution, so they are released as 0.8.0.

Breaking and Upgrade Notes

  • Empty attribute parameter lists now follow the same validation rules as bare attributes. For example, a field-level #[educe(Clone())] that was previously accepted without effect is now rejected, just like #[educe(Clone)]. Remove such attributes or provide supported parameters; empty lists remain accepted where the bare attribute is allowed. Deref and DerefMut are the exception: they take no parameters at all, so #[educe(Deref())] is rejected even though #[educe(Deref)] is accepted.

  • Associated types that share the source type's name now receive precise field-type bounds instead of being treated as recursive. For example, cloning a field T::Value inside Value<T> requires T::Value: Clone instead of T: Clone. If a custom method relied on the old parameter bound, add it explicitly with bound(...).

  • For structs and enums with any generic parameters, a nonempty custom Copy(bound(...)) disables the whole-value Clone shortcut. clone and clone_from use the field-wise implementation, so Clone stays available even when the custom Copy conditions do not hold. This includes lifetime bounds and const parameters that do not appear in fields. Field clone side effects can become observable even if the custom bound is redundant; the performance difference has not been measured. Other Copy bound modes and union cloning keep their existing behavior.

  • Automatic Eq now requires every ordinary struct or enum field to implement Eq, including concrete fields such as f64 and fields that use const generic parameters. A type that previously compiled with an ordinary non-Eq field can now fail to compile. If an external, manually written PartialEq implementation provides an equivalence relation without requiring every field to implement Eq, use explicit Eq(bound(false)), Eq(bound(*)), or custom predicates. The author remains responsible for reflexive, symmetric, and transitive equality.

  • When Educe derives PartialEq and Eq together, fields marked PartialEq(ignore) or PartialEq(method = ...) are excluded from automatic Eq bounds and field checks. Add explicit bounds if another custom method relied on an automatically added T: Eq. Educe cannot inspect an external PartialEq implementation, so its fields are checked as ordinary fields.

  • Into targets now preserve explicit reference lifetimes, mutability, and reference depth. For example, Into(&'a mut T) keeps &'a mut T instead of becoming &'static T. Adjust target declarations or caller types if they relied on the old normalization. Omitted lifetimes on target references still default to 'static.

  • Self in custom Into method paths now refers to the source type, including its generic arguments, even when the generated implementation is From for the target type. Use an explicit target type path if the method belongs to the target.

  • Self in the source type's original generic bounds and where clause stays tied to the source when those bounds are moved into From. Custom bound(...) predicates remain verbatim: their Self refers to the target in From and to the source in a direct Into implementation. Put intended target constraints in an explicit bound(...).

  • Automatic bounds for HashMap and HashSet with an explicit hasher now use the complete container type. This preserves the container's actual requirements, such as a default hasher for Default, without requiring the hasher to implement Debug for formatting. Add explicit predicates if custom methods relied on former per-parameter bounds such as T: Clone.

  • Fields that use const generic parameters now participate in automatic bound inference. This can make a generated implementation conditional where it was previously unconditional.

  • When Copy and Clone are derived together and a field uses a const generic parameter, cloning now follows the field methods instead of the bitwise-copy shortcut. Field clone and clone_from side effects can become observable; the performance difference has not been measured.

  • Custom method paths now preserve qualified types and avoid capture by generated local variables. Code that depended on a dropped qualifier or accidental name capture can resolve to a different method or fail to compile. Write the intended function as an explicit path.

  • A #[repr(packed)] or #[repr(packed(N))] type now has each field it reads copied into a temporary before being borrowed, so every field the generated code reads must implement Copy. Every packing level is treated the same way, matching the built-in derives, because a field's alignment cannot be worked out from the type syntax.

... (truncated)

Commits
  • 561fe8c bump version
  • ab1ef51 scan string literals for names instead of parsing them (solve #53)
  • 33c8577 drop the changelogs of the releases before 0.8.0
  • e91d6b4 share the repeated diagnostics and name the ambiguous Into field error
  • 8db38f5 correct the union Clone bound and the Default expression descriptions
  • 88f6e56 avoid name clashes with generated identifiers and fix associated type bounds
  • bbea893 cover bound(*) and bound(false) for every trait
  • 4dc0d12 cover the Ord field attributes an enum PartialOrd falls back to
  • a9ebd7a cover the full feature and keep the two documents in step
  • 62170a9 walk a field type once when looking for generic parameters
  • Additional commits viewable in compare view

Updates ignore from 0.4.31 to 0.4.33

Commits
  • 3fce3b5 ignore-0.4.33
  • 5055264 globset-0.4.20
  • 020687a ignore,globset: increase pool capacity
  • 5ed408e ignore-0.4.32
  • 435f59f ignore: skip loading unreachable ignore files
  • f9c05a9 index: remove incorrect README
  • 8372866 index: add some initial indexing scaffolding
  • d99ac34 core: add index module
  • 2ed0c00 flags: disable many flags when indexing is enabled
  • See full diff in compare view

Updates jsonwebtoken from 10.4.0 to 11.1.0

Changelog

Sourced from jsonwebtoken's changelog.

11.1.0 (2026-09-16)

  • Add dangerous::insecure_decode_claims

11.0.0 (2026-07-24)

  • Add conversions between Algorithm and KeyAlgorithm
  • JWKs can now be created from DecodingKeys, creation from EncodingKey and DecodingKey now supports Ed25519 as well
  • JWKs with unknown key types are now deserializable
  • BREAKING: Algorithm, KeyAlgorithm, EllipticCurve and ThumbprintHash are now non_exhaustive
  • BREAKING: Jwk.thumbprint now returns a Result<_>
  • BREAKING: Header.extras is now a struct that allows for deserialization to any T
  • BREAKING: Implicit features resulting from optional crates have been removed
  • BREAKING: Validation.insecure_disable_signature_validation has been removed, use dangerous::insecure_decode instead
  • BREAKING: EncodingKey.inner has been renamed to as_bytes, try_get_hmac_secret has been removed
  • BREAKING: DecodingKey.as_bytes and try_get_hmac_secret have been removed, use try_get_as_bytes instead

Changes for CryptoProviders

  • When constructing HMAC signers, the algorithm family must now be verified on construction
  • JwkUtils has been renamed to KeyUtils
    • compute_digest now returns a Result<_>
    • extract_rsa_public_key_components has been renamed to rsa_pub_components_from_private_key
    • rsa_pub_components_from_public_key has been added
    • extract_ec_public_key_coordinates has been renamed to ec_pub_components_from_private_key
    • ed_pub_components_from_private_key has been added
Commits

Updates minijinja from 2.21.0 to 2.24.0

Changelog

Sourced from minijinja's changelog.

2.24.0

  • Added the wordwrap filter to the Python bindings. #885
  • Fixed conditional expressions in keyword argument values for Jinja2 compatibility in Rust and Go. #921
  • Fixed context! sorting keys when the preserve_order feature is enabled. #920
  • Limited string repetition to 100 MB in Rust and Go to prevent excessive memory allocations.

2.23.0

  • Fixed Unicode identifiers in templates rendered through the Python bindings.

2.22.0

  • Changed rendering of none and boolean values to None, True, and False for Jinja2 compatibility in Rust and Go. #913
  • Added StringInput for custom Rust filters and functions that transform strings while preserving safety provenance.
  • Fixed safety handling in string-transforming and composing filters to preserve safe strings and escape unsafe fragments in Rust and Go.
  • Fixed the split filter to return a sequence, enabling negative indexing and slicing in Rust and Go. #909
  • Fixed Python-compatible dict methods being shadowed by same-named map keys. #903
  • Fixed loop-local assignments leaking into subsequent iterations in Rust and Go. #912
Commits
  • 0ca749f chore(release): 2.24.0
  • 0f2989a feat(python): expose wordwrap filter
  • 3eac8fa docs(changelog): document context key ordering fix
  • c867352 fix(macros): preserve context key order
  • a9e1813 fix(parser): allow conditionals in keyword arguments
  • c6fa683 fix(value): limit repeated strings to 100 MB
  • 19af7d4 chore(release): 2.23.0
  • 7f63616 docs(changelog): document Python Unicode identifiers
  • 179652f ref: Remove CLAUDE.md
  • 52b1cc6 ref: Move claude stuff
  • Additional commits viewable in compare view

Updates normpath from 1.5.1 to 1.5.2

Release notes

Sourced from normpath's releases.

1.5.2

Commits
  • 9b0617a Bump version
  • 011ceeb Merge pull request #27 from backpropper/fix-unsafe-soundness
  • 43a67f7 Adjust based on review
  • efc6908 Fix unsafe soundness issues in winapi_buffered and macOS localize FFI
  • cd19f6f Fix new Clippy warning
  • See full diff in compare view

Updates octocrab from 0.54.1 to 0.54.2

Release notes

Sourced from octocrab's releases.

v0.54.2

Added

  • added missing repos functionality #542 (#950)
  • added reqwest feature to use reqwest client

Changed

  • changed doctests to not create default octocrab instance (#962)

Other

  • added updating gist with multiple files at once #692 (#970)
  • added migrations tag handlers #540 (#969)
  • Added git db api tag handlers #536 (#968)
  • added apps tag handlers #533 (#967)
  • added billing tag handlers #530 (#966)
  • added copilot tag handlers #525 (#965)
  • added dependabot tag handlers #523 (#964)
  • added dependency graph tag handlers #522 (#963)
  • added 'codespaces' tag handlers #528 (#961)
  • added 'actions' tag handlers #531 (#960)
  • added packages tag functionality #544 (#959)
  • added search tag functionality #548 (#958)
  • activity tag handler #532 (#957)
  • issues tag handler for #538 (#956)
  • added reactions tag handlers #547 (#955)
  • added and reorganized 'orgs' handlers for #539 (#954)
  • Bugfix/release plz (#953)
  • Disabled semver_check because cargo-semver-checks enables all features (#952)
  • 'repos' functionality for #542 (#951)
  • added missing code-scanning functionality #526 (#949)
  • added missing and fixed existing secret-scanning functions #549 (#948)
  • added secutiry advisories for #550 (#947)
  • added missing [users] tag functions (#946)
  • list any user gpg keys #552 (#945)
  • added meta info #543 (#943)
  • Feature/org teams #551 (#942)
  • /user/teams for #551 (#941)
  • solves #535 (gist comments) (#940)
Changelog

Sourced from octocrab's changelog.

0.54.2 - 2026-09-14

Added

  • added missing repos functionality #542 (#950)
  • added reqwest feature to use reqwest client

Changed

  • changed doctests to not create default octocrab instance (#962)

Other

  • added updating gist with multiple files at once #692 (#970)
  • added migrations tag handlers #540 (#969)
  • Added git db api tag handlers #536 (#968)
  • added apps tag handlers #533 (#967)
  • added billing tag handlers #530 (#966)
  • added copilot tag handlers #525 (#965)
  • added dependabot tag handlers #523 (#964)
  • added dependency graph tag handlers #522 (#963)
  • added 'codespaces' tag handlers #528 (#961)
  • added 'actions' tag handlers #531 (#960)
  • added packages tag functionality #544 (#959)
  • added search tag functionality #548 (#958)
  • activity tag handler #532 (#957)
  • issues tag handler for #538 (#956)
  • added reactions tag handlers #547 (#955)
  • added and reorganized 'orgs' handlers for #539 (#954)
  • Bugfix/release plz (#953)
  • Disabled semver_check because cargo-semver-checks enables all features (#952)
  • 'repos' functionality for #542 (#951)
  • added missing code-scanning functionality #526 (#949)
  • added missing and fixed existing secret-scanning functions #549 (#948)
  • added secutiry advisories for #550 (#947)
  • added missing [users] tag functions (#946)
  • list any user gpg keys #552 (#945)
  • added meta info #543 (#943)
  • Feature/org teams #551 (#942)
  • /user/teams for #551 (#941)
  • solves #535 (gist comments) (#940)
Commits

Updates schemars from 1.2.1 to 1.2.2

Release notes

Sourced from schemars's releases.

v1.2.2

  • Update to syn 3 in schemars_derive
Changelog

Sourced from schemars's changelog.

[1.2.2] - 2026-07-27

  • Update to syn 3 in schemars_derive
Commits

Updates thiserror from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

  • Suppress redundant_field_names clippy lint in generated code (#454)
Commits

Updates time from 0.3.54 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

  • Avoid underflow in DateIter::nth, ensuring correct behavior.
  • Avoid overflow when deserializing timestamps.
  • Handle out-of-bounds data when deserializing.
  • Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
  • No longer silence errors when deserializing UtcOffset.
  • OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
  • OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
Commits
  • 857d9c4 v0.3.55 release
  • 2b72fcd Precise feature gating for macro
  • c1089eb Run check-targets, miri in parallel
  • f377fad Avoid range-validated ordinal => year in cascade
  • 2eacb0a Report miscellaneous tasks, overall status
  • 29621ac Speed up CI
  • 08de7ba Fix nano-timestamp validation
  • 3c3f046 Fix copy-paste error
  • 3c0c81c Cascade errors when deserializing UtcOffset
  • c21acd5 Handle more deserializations of SignedDuration
  • Additional commits viewable in compare view

Updates which from 8.0.5 to 8.0.6

Release notes

Sourced from which's releases.

8.0.6

What's Changed

New Contributors

Full Changelog: harryfei/which-rs@8.0.5...8.0.6

Changelog

Sourced from which's changelog.

8.0.6

  • Bug fix: #128 Resolve relative PATH entries against the user provided CWD when available, rather than the process CWD. Thanks @​RSS1102 for your contribution to which!
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the prod-dependencies group across 1 directory with…
dc94615 
… 12 updates

Bumps the prod-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.91` | `0.1.92` |
| [clap](https://github.com/clap-rs/clap) | `4.6.4` | `4.6.7` |
| [educe](https://github.com/magiclen/educe) | `0.7.4` | `0.8.1` |
| [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.31` | `0.4.33` |
| [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `10.4.0` | `11.1.0` |
| [minijinja](https://github.com/mitsuhiko/minijinja) | `2.21.0` | `2.24.0` |
| [normpath](https://github.com/dylni/normpath) | `1.5.1` | `1.5.2` |
| [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.54.1` | `0.54.2` |
| [schemars](https://github.com/GREsau/schemars) | `1.2.1` | `1.2.2` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.20` |
| [time](https://github.com/time-rs/time) | `0.3.54` | `0.3.55` |
| [which](https://github.com/harryfei/which-rs) | `8.0.5` | `8.0.6` |



Updates `async-trait` from 0.1.91 to 0.1.92
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.91...0.1.92)

Updates `clap` from 4.6.4 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.4...clap_complete-v4.6.7)

Updates `educe` from 0.7.4 to 0.8.1
- [Changelog](https://github.com/magiclen/educe/blob/master/CHANGELOG-0.7.6-to-0.8.0.md)
- [Commits](magiclen/educe@v0.7.4...v0.8.1)

Updates `ignore` from 0.4.31 to 0.4.33
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@ignore-0.4.31...ignore-0.4.33)

Updates `jsonwebtoken` from 10.4.0 to 11.1.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v10.4.0...v11.1.0)

Updates `minijinja` from 2.21.0 to 2.24.0
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/minijinja@minijinja-go/v2.21.0...minijinja-go/v2.24.0)

Updates `normpath` from 1.5.1 to 1.5.2
- [Release notes](https://github.com/dylni/normpath/releases)
- [Commits](dylni/normpath@1.5.1...1.5.2)

Updates `octocrab` from 0.54.1 to 0.54.2
- [Release notes](https://github.com/XAMPPRocky/octocrab/releases)
- [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md)
- [Commits](XAMPPRocky/octocrab@v0.54.1...v0.54.2)

Updates `schemars` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/GREsau/schemars/releases)
- [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md)
- [Commits](GREsau/schemars@v1.2.1...v1.2.2)

Updates `thiserror` from 2.0.19 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.19...2.0.20)

Updates `time` from 0.3.54 to 0.3.55
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.54...v0.3.55)

Updates `which` from 8.0.5 to 8.0.6
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@8.0.5...8.0.6)

---
updated-dependencies:
- dependency-name: async-trait
  dependency-version: 0.1.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: educe
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: ignore
  dependency-version: 0.4.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: jsonwebtoken
  dependency-version: 11.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: minijinja
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: normpath
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: octocrab
  dependency-version: 0.54.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: schemars
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: time
  dependency-version: 0.3.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: which
  dependency-version: 8.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 26, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants