chore(deps): bump the cargo-minor-patch group in /packages/eql with 13 updates

[dependabot]

Bumps the cargo-minor-patch group in /packages/eql with 13 updates:

Package	From	To
minijinja	2.20.0	2.24.0
serde	1.0.228	1.0.229
serde_json	1.0.145	1.0.151
thiserror	2.0.18	2.0.20
quote	1.0.41	1.0.47
proc-macro2	1.0.102	1.0.107
syn	2.0.108	2.0.119
schemars	1.2.1	1.2.2
tokio	1.48.0	1.50.0
anyhow	1.0.100	1.0.104
jsonschema	0.46.4	0.46.10
chrono	0.4.44	0.4.45
rust_decimal	1.42.0	1.42.1

Updates minijinja from 2.20.0 to 2.24.0

Changelog

Sourced from minijinja's changelog.

2.24.0

• Added the wordwrap filter to the Python bindings. #885
• Fixed conditional expressions in keyword argument values for Jinja2 compatibility in Rust and Go. #921
• Fixed context! sorting keys when the preserve_order feature is enabled. #920
• Limited string repetition to 100 MB in Rust and Go to prevent excessive memory allocations.

2.23.0

• Fixed Unicode identifiers in templates rendered through the Python bindings.

2.22.0

• Changed rendering of none and boolean values to None, True, and False for Jinja2 compatibility in Rust and Go. #913
• Added StringInput for custom Rust filters and functions that transform strings while preserving safety provenance.
• Fixed safety handling in string-transforming and composing filters to preserve safe strings and escape unsafe fragments in Rust and Go.
• Fixed the split filter to return a sequence, enabling negative indexing and slicing in Rust and Go. #909
• Fixed Python-compatible dict methods being shadowed by same-named map keys. #903
• Fixed loop-local assignments leaking into subsequent iterations in Rust and Go. #912

2.21.0

• Fixed a panic when comparing two numbers that have no common lossless representation, such as a float against an integer that cannot be represented exactly as f64 (for example 1.0 < 9007199254740993). #904
• Fixed a stack overflow caused by repeated sequence concatenation. #907
• Improved performance of iteration over map items. #906

Commits

• 0ca749f chore(release): 2.24.0
• 0f2989a feat(python): expose wordwrap filter
• 3eac8fa docs(changelog): document context key ordering fix
• c867352 fix(macros): preserve context key order
• a9e1813 fix(parser): allow conditionals in keyword arguments
• c6fa683 fix(value): limit repeated strings to 100 MB
• 19af7d4 chore(release): 2.23.0
• 7f63616 docs(changelog): document Python Unicode identifiers
• 179652f ref: Remove CLAUDE.md
• 52b1cc6 ref: Move claude stuff
• Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates serde_json from 1.0.145 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

v1.0.150

• Reject non-string enum object keys (#1324, thanks @​puneetdixit200)

v1.0.149

• Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

• Update zmij dependency to 1.0

v1.0.147

• Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

• Set fast_arithmetic=64 for riscv64 (#1305, thanks @​Xeonacid)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• a1ae73a Release 1.0.150
• 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
• 2037b63 Reject non-string enum object keys
• 5d30df6 Resolve manual_assert_eq pedantic clippy lint
• Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

• Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

• Update to syn 3

Commits

• b1d5db5 Release 2.0.20
• c4c3ebd Merge pull request #454 from dtolnay/clippy
• 2266152 Suppress redundant_field_names clippy lint
• 2901cfd Raise minimum tested compiler to rust 1.88
• aa9d91f Update ui tests for version 2.0.19
• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• Additional commits viewable in compare view

Updates quote from 1.0.41 to 1.0.47

Release notes

Sourced from quote's releases.

1.0.47

• Documentation improvements

1.0.46

• Avoid repeated get_span in quote_spanned (#329, thanks @​Noratrieb)

1.0.45

• Add ToTokens impl for Arc<T> (#326)

1.0.44

• Support raw lifetime syntax 'r#async (#323)

1.0.43

• Disambiguate references to stringify! macro inside generated code (#316)

1.0.42

• Tweaks to improve build speed (#305, #306, #307, #308, thanks @​dishmaker)

Commits

• 723dcb4 Release 1.0.47
• 86e2967 Update documentation links to syn 3
• b56db87 Update ui test suite to nightly-2026-07-14
• cba5d96 Update actions/upload-artifact@v6 -> v7
• bc4caf2 Release 1.0.46
• dc0e304 Format with rustfmt
• 712114c Drop arrow from syntax of quote_spanned_with_expanded_span
• f93ab8a Eliminate quote_spanned_with_expanded_span_as_expr macro
• 1ff3951 Eliminate __quote_spanned macro
• 64e913a Unify quote_spanned definitions
• Additional commits viewable in compare view

Updates proc-macro2 from 1.0.102 to 1.0.107

Release notes

Sourced from proc-macro2's releases.

1.0.107

• Documentation improvements

1.0.106

• Optimize Span::byte_range (#530)

1.0.105

• Make std dependencies more easily discoverable in source code (#528)

1.0.104

• Add Rust 1.92.0's TokenStream Extend impls (#527, rust-lang/rust#145722)

1.0.103

• Add semver-exempt Literal methods str_value, cstr_value, byte_str_value (#525)

Commits

• ed8a549 Release 1.0.107
• d2550fb Update documentation links to syn 3
• 0bf387d Resolve redundant_else pedantic clippy lint
• 949d696 Update actions/upload-artifact@v6 -> v7
• 294a2bb Update actions/checkout@v6 -> v7
• cd46c1b Lint clippy::from_iter_instead_of_collect has been removed
• bb38d83 Update afl fuzzer from 0.17 to 0.18
• 0f510db Unpin CI miri toolchain
• b3c5fe3 Pin CI miri to nightly-2026-02-11
• 7e2a990 Raise required compiler to Rust 1.71
• Additional commits viewable in compare view

Updates syn from 2.0.108 to 2.0.119

Release notes

Sourced from syn's releases.

2.0.119

• Preserve attributes on tail-call expressions in statement position (#1994)
• Parse field-representing types builtin in type position (#1996)

2.0.118

• Documentation improvements

2.0.117

• Fix parsing of self:: pattern in first function argument (#1970)

2.0.116

• Optimize parse_fn_arg_or_variadic for less lookahead on erroneous receiver (#1968)

2.0.115

• Enable GenericArgument::Constraint parsing in non-full mode (#1966)

2.0.114

• Make std dependencies more easily discoverable in source code (#1956, thanks @​tamird)

2.0.113

• Allow parsing TypeParam with colon not followed by any type param bounds (#1953, thanks @​wyfo)

2.0.112

• Fix panic in LitByte::new().value() (#1951, thanks @​VictorArcium)

2.0.111

• Allow first argument of braced!, bracketed!, parenthesized! to be an otherwise unused variable (#1946)

2.0.110

• Tweaks to improve build speed (#1939, thanks @​dishmaker)
• Make syn::ext::IdentExt::unraw available without "parsing" feature (#1940)
• Support parsing syn::Meta followed by => (#1944)

2.0.109

• Tweaks to improve build speed (#1927, #1928, #1930, #1932, #1934, thanks @​dishmaker)

Commits

• 3295f9e Release 2.0.119
• 6ae9c18 Merge pull request #1996 from dtolnay/fieldrepresenting
• 8ebd963 Parse field-representing types builtin
• 540ccf8 Drop unneeded lifetime on covariant Cursor in verbatim::between
• aa05887 Merge pull request #1995 from dtolnay/cursor
• b7160d3 Reduce forking for Verbatim construction
• efdc925 Merge pull request #1994 from dtolnay/tailcall
• de6424c Preserve attribute on tail-call expression in statement position
• 050dd73 Stricter const move closure grammar
• c7d514b Merge pull request #1992 from dtolnay/scanconstmove
• Additional commits viewable in compare view

Updates schemars from 1.2.1 to 1.2.2

Release notes

Sourced from schemars's releases.

v1.2.2

• Update to syn 3 in schemars_derive

Changelog

Sourced from schemars's changelog.

[1.2.2] - 2026-07-27

• Update to syn 3 in schemars_derive

Commits

• ed61863 v1.2.2
• ae618c3 Update syn to v3 (#528)
• c072ea0 docs: add missing attributes to table of contents (#517)
• 015272f Clippy fix (#512)
• 944f727 Bump bytes from 1.10.1 to 1.11.1 (#507)
• See full diff in compare view

Updates tokio from 1.48.0 to 1.50.0

Release notes

Sourced from tokio's releases.

Tokio v1.50.0

1.50.0 (Mar 3rd, 2026)

Added

• net: add TcpStream::set_zero_linger (#7837)
• rt: add is_rt_shutdown_err (#7771)

Changed

• io: add optimizer hint that memchr returns in-bounds pointer (#7792)
• io: implement vectored writes for write_buf (#7871)
• runtime: panic when event_interval is set to 0 (#7838)
• runtime: shorten default thread name to fit in Linux limit (#7880)
• signal: remember the result of SetConsoleCtrlHandler (#7833)
• signal: specialize windows Registry (#7885)

Fixed

• io: always cleanup AsyncFd registration list on deregister (#7773)
• macros: remove (most) local use declarations in tokio::select! (#7929)
• net: fix GET_BUF_SIZE constant for target_os = "android" (#7889)
• runtime: avoid redundant unpark in current_thread scheduler (#7834)
• runtime: don't park in current_thread if before_park defers waker (#7835)
• io: fix write readiness on ESP32 on short writes (#7872)
• runtime: wake deferred tasks before entering block_in_place (#7879)
• sync: drop rx waker when oneshot receiver is dropped (#7886)
• runtime: fix double increment of num_idle_threads on shutdown (#7910, #7918, #7922)

Unstable

• fs: check for io-uring opcode support (#7815)
• runtime: avoid lock acquisition after uring init (#7850)

Documented

• docs: update outdated unstable features section (#7839)
• io: clarify the behavior of AsyncWriteExt::shutdown() (#7908)
• io: explain how to flush stdout/stderr (#7904)
• io: fix incorrect and confusing AsyncWrite documentation (#7875)
• rt: clarify the documentation of Runtime::spawn (#7803)
• rt: fix missing quotation in docs (#7925)
• runtime: correct the default thread name in docs (#7896)
• runtime: fix event_interval doc (#7932)
• sync: clarify RwLock fairness documentation (#7919)
• sync: clarify that recv returns None once closed and no more messages (#7920)
• task: clarify when to use spawn_blocking vs dedicated threads (#7923)
• task: doc that task drops before JoinHandle completion (#7825)
• signal: guarantee that listeners never return None (#7869)
• task: fix task module feature flags in docs (#7891)

... (truncated)

Commits

• 0273e45 chore: prepare Tokio v1.50.0 (#7934)
• e3ee4e5 chore: prepare tokio-macros v2.6.1 (#7943)
• 8c980ea io: add write_all_vectored to tokio-util (#7768)
• e35fd6d ci: fix patch during clippy step (#7935)
• 03fe44c runtime: fix event_interval doc (#7932)
• d18e5df io: fix race in Mock::poll_write (#7882)
• f21f269 runtime: fix race condition during the blocking pool shutdown (#7922)
• d81e8f0 macros: remove (most) local use declarations in tokio::select! (#7929)
• 25e7f26 rt: fix missing quotation in docs (#7925)
• e1a91ef util: fix typo in docs (#7926)
• Additional commits viewable in compare view

Updates anyhow from 1.0.100 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

• Update syn dev-dependency to version 3

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

1.0.102

• Remove backtrace dependency (#438, #439, #440, #441, #442)

1.0.101

• Add #[inline] to anyhow::Ok helper (#437, thanks @​Ibitier)

Commits

• 1dbe186 Release 1.0.104
• f6479f8 Update to syn 3
• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• 5c657b3 Release 1.0.102
• Additional commits viewable in compare view

Updates jsonschema from 0.46.4 to 0.46.10

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.46.10

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[Ruby] Release 0.46.10

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[Rust] Release 0.46.10

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[Python] Release 0.46.9

Fixed

• Stack overflow while preparing a registry containing deeply nested schema documents.

[Ruby] Release 0.46.9

Fixed

• Stack overflow while preparing a registry containing deeply nested schema documents.

[Rust] Release 0.46.9

Fixed

• multipleOf incorrectly rounds integer instances above 2^53 to f64 before the divisibility check on builds without the arbitrary-precision feature.
• Stack overflow while preparing a registry containing deeply nested schema documents.

[Python] Release 0.46.8

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[Ruby] Release 0.46.8

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[Rust] Release 0.46.8

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[Python] Release 0.46.7

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.46.10] - 2026-07-05

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[0.46.9] - 2026-07-02

Fixed

• multipleOf incorrectly rounds integer instances above 2^53 to f64 before the divisibility check on builds without the arbitrary-precision feature.
• Stack overflow while preparing a registry containing deeply nested schema documents.

[0.46.8] - 2026-07-01

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[0.46.7] - 2026-06-30

Fixed

• idn-hostname format accepted A-labels that decode to a disallowed code point (e.g. xn--7a).

[0.46.6] - 2026-06-24

Added

• IntoRegistryResource for Arc<Value>. #1129

Fixed

• prefixItems incorrectly recognised as a known keyword in Draft 2019-09 and earlier (it is 2020-12 only).
• pattern validation errors displayed the internally translated regex instead of the original schema pattern. #1149

[0.46.5] - 2026-05-13

Fixed

• Percent-encoded characters in $ref URI fragments (e.g. #/$defs/Request%20class) are now decoded when stored as schema_path.

Commits

• 6b7087e chore(ruby): Release 0.46.10
• a722ef5 chore(python): Release 0.46.10
• ecaecea chore(rust): Release 0.46.10
• 571e22b fix: Incorrect unevaluatedProperties and unevaluatedItems results when a ...
• 99cbafc chore: Unify codecov configs
• 91037c6 fix: Stack overflow with a self-referential $dynamicRef combined with `unev...
• a743a33 chore(ruby): Release 0.46.9
• 099cdd0 chore(python): Release 0.46.9
• b6c58f4 chore(rust): Release 0.46.9
• 1d78785 refactor: Extract jsonschema-regex crate
• Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

• fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @​SAY-5 in chronotope/chrono#1787
• tz_data: fix tzdata locations on Android by @​caruschalalamove in chronotope/chrono#1789

Commits

• 1703382 Prepare 0.4.45 release
• 881f9ab tz_data: fix tzdata locations on Android
• f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
• c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
• 120686c Bump codecov/codecov-action from 5 to 6
• See full diff in compare view

Updates rust_decimal from 1.42.0 to 1.42.1

Release notes

Sourced from rust_decimal's releases.

1.42.1

What's Changed

• fix: subtraction using carry-propogation can generate incorrect results by @​paupino in paupino/rust-decimal#804

Full Changelog: paupino/rust-decimal@1.42.0...1.42.1

Commits

• c7efe16 version 1.42.1 (#805)
• a980a46 fix: subtraction using borrow-propogation can generate incorrect results (#804)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: supply-chain. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 3ae2137

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR