Skip to content
This repository was archived by the owner on May 18, 2026. It is now read-only.

chore(deps): bump the all-dependencies-cargo group across 1 directory with 31 updates#588

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-dependencies-cargo-f165cad7a8
Closed

chore(deps): bump the all-dependencies-cargo group across 1 directory with 31 updates#588
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-dependencies-cargo-f165cad7a8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Oct 1, 2025

Bumps the all-dependencies-cargo group with 31 updates in the / directory:

Package From To
anyhow 1.0.98 1.0.100
clap 4.5.38 4.5.48
clap_complete 4.5.50 4.5.58
colored 2.2.0 3.0.0
comfy-table 7.1.4 7.2.1
petgraph 0.6.5 0.8.3
rhai 1.21.0 1.23.4
tracing-subscriber 0.3.19 0.3.20
update-informer 1.2.0 1.3.0
serde 1.0.219 1.0.228
gix 0.68.0 0.70.0
tempfile 3.20.0 3.23.0
schemars 0.8.22 1.0.4
serde_json 1.0.140 1.0.145
age 0.10.1 0.11.1
gethostname 0.5.0 1.0.2
normpath 1.3.0 1.5.0
octocrab 0.41.2 0.46.0
os_info 3.11.0 3.12.0
rand 0.8.5 0.9.1
regex 1.11.1 1.11.3
reqwest 0.12.15 0.12.18
tokio 1.45.0 1.47.1
toml 0.8.22 0.9.7
which 7.0.3 8.0.0
whoami 1.6.0 1.6.1
flate2 1.1.1 1.1.2
gix-protocol 0.46.1 0.48.0
camino 1.1.9 1.1.12
serde_with 3.12.0 3.14.1
parking_lot 0.12.3 0.12.4

Updates anyhow from 1.0.98 to 1.0.100

Release notes

Sourced from anyhow's releases.

1.0.100

  • Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#426)

1.0.99

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#420)
Commits
  • 18c2598 Release 1.0.100
  • f271988 Merge pull request #426 from dtolnay/clippyfmt
  • 52f2115 Mark macros with clippy::format_args
  • da5fd9d Raise minimum tested compiler to rust 1.76
  • 211e409 Opt in to generate-macro-expansion when building on docs.rs
  • b48fc02 Enforce trybuild >= 1.0.108
  • d5f59fb Update ui test suite to nightly-2025-09-07
  • 238415d Update ui test suite to nightly-2025-08-24
  • 3bab070 Update actions/checkout@v4 -> v5
  • 4249254 Order cap-lints flag in the same order as thiserror build script
  • Additional commits viewable in compare view

Updates clap from 4.5.38 to 4.5.48

Release notes

Sourced from clap's releases.

v4.5.48

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry

v4.5.47

[4.5.47] - 2025-09-02

Features

  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible

Fixes

  • (derive) Update runtime error text to match clap

v4.5.46

[4.5.46] - 2025-08-26

Features

  • Expose StyledStr::push_str

v4.5.45

[4.5.45] - 2025-08-12

Fixes

  • (unstable-v5) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

v4.5.44

[4.5.44] - 2025-08-11

Features

  • Add Command::mut_subcommands

v4.5.43

[4.5.43] - 2025-08-06

Fixes

  • (help) In long help, list Possible Values before defaults, rather than after, for a more consistent look

... (truncated)

Changelog

Sourced from clap's changelog.

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry

[4.5.47] - 2025-09-02

Features

  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible

Fixes

  • (derive) Update runtime error text to match clap

[4.5.46] - 2025-08-26

Features

  • Expose StyledStr::push_str

[4.5.45] - 2025-08-12

Fixes

  • (unstable-v5) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

[4.5.44] - 2025-08-11

Features

  • Add Command::mut_subcommands

[4.5.43] - 2025-08-06

Fixes

  • (help) In long help, list Possible Values before defaults, rather than after, for a more consistent look

[4.5.42] - 2025-07-30

Fixes

  • Include subcommand visible long aliases in --help

... (truncated)

Commits
  • c3a1ddc chore: Release
  • 4460ff4 docs: Update changelog
  • 54947a1 Merge pull request #5981 from mernen/fix-bash-clap-complete-space
  • fd3f6d2 fix(complete): Restore nospace in bash
  • 2f6a108 test(complete): Demonstrate current behavior
  • f88be57 style: Ensure consistent newlines
  • f209bce chore: Release
  • f33ff7f docs: Update changelog
  • bf06e6f Merge pull request #5974 from kryvashek/support-clearing-args-matches
  • 5d357ad feat(parser): Added ArgMatches::try_clear_id()
  • Additional commits viewable in compare view

Updates clap_complete from 4.5.50 to 4.5.58

Commits
  • 88f13cb chore: Release
  • fe2d731 docs: Update changelog
  • b256739 Merge pull request #6131 from mernen/do-not-suggest-opts-after-escape
  • 8aaf704 fix(complete): Do not suggest options after "--"
  • 4a86fee test(complete): Illustrate current behavior
  • 281f8ae Merge pull request #6126 from epage/p
  • 3cbce42 docs(cookbook): Make typed-derive easier to maintain
  • 9fd4dc9 docs(cookbook): Provide a custom TypedValueParser
  • 8f8e861 docs(cookbook): Add local enum to typed-derive
  • 926bafe docs(cookbook): Hint at overriding value_name
  • Additional commits viewable in compare view

Updates colored from 2.2.0 to 3.0.0

Release notes

Sourced from colored's releases.

v3.0.0

  • [BREAKING CHANGE]: Upgrade MSRV to 1.80 and remove the then unnecessary lazy_static dependency.
Changelog

Sourced from colored's changelog.

3.0.0

  • [BREAKING CHANGE]: Upgrade MSRV to 1.80 and remove the then unnecessary lazy_static dependency.
Commits

Updates comfy-table from 7.1.4 to 7.2.1

Release notes

Sourced from comfy-table's releases.

v7.2.0

[7.2.0] - 2025-08-25

Chore

  • Switch to Rust 2024 edition. This bumps the MSRV to 1.85 and thereby no longer supports the wasm32-wasi target.

Fix

  • Also update the crossterm dependency to 0.29 for windows !181.
Changelog

Sourced from comfy-table's changelog.

[7.2.1] - 2025-09-11

Misc

  • Adjust a single test case to not fail in 0x0 sized tty-environments. !186

[7.2.0] - 2025-08-25

Chore

  • Switch to Rust 2024 edition. This bumps the MSRV to 1.85 and thereby no longer supports the wasm32-wasi target.

Fix

  • Also update the crossterm dependency to 0.29 for windows !181.
Commits
  • 9a108a2 chore: Release comfy-table version 7.2.1
  • 592b0ee docs: Update Changelog
  • e3dc716 Merge pull request #186 from hzhongmj/constraint-test-fix
  • fffc309 Add a table width so it works in environment without tty
  • fa131ac chore: Fix lint issues
  • 5962fbe chore: Release comfy-table version 7.2.0
  • 3c6c774 docs: Update changelog
  • 1ec7ab2 docs: Update changelog
  • 578f971 Merge pull request #184 from Nukesor/dependabot/cargo/rstest-0.26
  • 2b3dd18 build(deps): update rstest requirement from 0.25 to 0.26
  • Additional commits viewable in compare view

Updates petgraph from 0.6.5 to 0.8.3

Release notes

Sourced from petgraph's releases.

petgraph-v0.8.3

Bug Fixes

  • Infinite subgraph_isomorphisms_iter for empty isomorphisms (#780)
  • Algos don't work on UndirectedAdaptor (#870) (#871)
  • use a queue for SPFA (#893)
  • StableGraph::reverse breaks free lists (#890)

Documentation

  • Fix examples link in README and unify typesetting of one word (#823)
  • Add link to multigraph definition to isomorphism algos (#824)
  • Fix auxiliary space (and time) complexity of bron-kerbosch (#825)
  • Fix Typo in Operator Module Documentation (#831)
  • Sync the crate feature flags in the README and docs (#832)
  • Remove all [Generic] tags from algo docstrings (#835)
  • Fix typos in comments (#836)
  • Revamp CONTRIBUTING.md (#833)
  • Update GraphMap link in README (#857)
  • Add doc comment for Dot::with_attr_getters (#850)
  • Specify iteration order for neighbors and edges and their variants (#790)
  • Collection of Doc fixes (#856)

New Features

  • Add into_nodes_edges_iters to StableGraph (#841)
  • Add methods to reserve & shrink StableGraph capacity (#846)
  • Add Dinic's Maximum Flow Algorithm (#739)
  • make Csr::from_sorted_edges generic over edge type and properly increase edge_count in Csr::from_sorted_edges (#861)
  • Add map_owned and filter_map_owned for Graph and StableGraph (#863)
  • Add dijkstra::with_dynamic_goal (#855)
  • Fix self-loop bug in all_simple_paths and enable multiple targets (#865)
  • mark petgraph::dot::Dot::graph_fmt as public (#866)
  • Add bidirectional Dijkstra algorithm (#782)

Performance

  • Make A* tie break on lower h-values (#882)

Refactor

  • add examples for scc algorithms and reorganize into dedicated module (#830)
  • Remove unnecessary trait bounds from impls/methods (#828)
  • replace uses of 'crate::util::zip' with 'core::iter::zip' (#849)
  • Fix clippy (and other) lints (#851)
  • Cleanup repo (#854)
  • replace crate::util::enumerate with Iterator::enumerate (#881)

Testing

... (truncated)

Changelog

Sourced from petgraph's changelog.

0.8.3 - 2025-09-30

Bug Fixes

  • Infinite subgraph_isomorphisms_iter for empty isomorphisms (#780)
  • Algos don't work on UndirectedAdaptor (#870) (#871)
  • use a queue for SPFA (#893)
  • StableGraph::reverse breaks free lists (#890)

Documentation

  • Fix examples link in README and unify typesetting of one word (#823)
  • Add link to multigraph definition to isomorphism algos (#824)
  • Fix auxiliary space (and time) complexity of bron-kerbosch (#825)
  • Fix Typo in Operator Module Documentation (#831)
  • Sync the crate feature flags in the README and docs (#832)
  • Remove all [Generic] tags from algo docstrings (#835)
  • Fix typos in comments (#836)
  • Revamp CONTRIBUTING.md (#833)
  • Update GraphMap link in README (#857)
  • Add doc comment for Dot::with_attr_getters (#850)
  • Specify iteration order for neighbors and edges and their variants (#790)
  • Collection of Doc fixes (#856)

New Features

  • Add into_nodes_edges_iters to StableGraph (#841)
  • Add methods to reserve & shrink StableGraph capacity (#846)
  • Add Dinic's Maximum Flow Algorithm (#739)
  • make Csr::from_sorted_edges generic over edge type and properly increase edge_count in Csr::from_sorted_edges (#861)
  • Add map_owned and filter_map_owned for Graph and StableGraph (#863)
  • Add dijkstra::with_dynamic_goal (#855)
  • Fix self-loop bug in all_simple_paths and enable multiple targets (#865)
  • mark petgraph::dot::Dot::graph_fmt as public (#866)
  • Add bidirectional Dijkstra algorithm (#782)

Performance

  • Make A* tie break on lower h-values (#882)

Refactor

  • add examples for scc algorithms and reorganize into dedicated module (#830)
  • Remove unnecessary trait bounds from impls/methods (#828)
  • replace uses of 'crate::util::zip' with 'core::iter::zip' (#849)
  • Fix clippy (and other) lints (#851)
  • Cleanup repo (#854)
  • replace crate::util::enumerate with Iterator::enumerate (#881)

Testing

... (truncated)

Commits
  • 1629035 chore: release v0.8.3 (#826)
  • ce23445 ci: Use new cargo resolver when running CI with MSRV (#887)
  • ef5d17d docs: Collection of Doc fixes (#856)
  • b682695 fix: StableGraph::reverse breaks free lists (#890)
  • 29f4c92 fix: use a queue for SPFA (#893)
  • b87dbc5 perf: Make A* tie break on lower h-values (#882)
  • 49d2740 refactor: replace crate::util::enumerate with Iterator::enumerate (#881)
  • 0a0efbe docs: Specify iteration order for neighbors and edges and their variants (#790)
  • 5c7e0fb ci: Fix Hashbrown dependencies (#878)
  • aa53dbe feat: Add bidirectional Dijkstra algorithm (#782)
  • Additional commits viewable in compare view

Updates rhai from 1.21.0 to 1.23.4

Release notes

Sourced from rhai's releases.

Version 1.22.0

Bug fixes

  • (Fuzzing) An integer-overflow bug from an inclusive range in get_bits is fixed (#963).
  • (Fuzzing) Nested functions marked private now properly cause compilation errors (#993).
  • Passing function as a function pointer into a function in an imported module now correctly encapsulates the current environment into the generated function pointer (thanks @dcihlar #976). The same for passing a closure (thanks again, @dcihlar #979).
  • Revised epsilon-based floating-point comparisons (thanks @HactarCE #981).
  • Unneeded optional dependencies are no longer pulled in with features (thanks @HactarCE #987).
  • Engine::collect_fn_metadata now properly includes the namespaces of functions in static modules (thanks @therealprof and @elkowar #992).

Enhancements

  • Improve display of function call errors by displaying the caller function's source together with line number info (thanks @rhizoome and @HactarCE #988).
  • source and position in NativeCallContext are now fn_source and call_position. A new method call_source is added to return the source (if any) of the caller function (thanks @rhizoome and @HactarCE #989).
  • The &&, || and ?? operators are optimized to allow efficient chaining (#994).
Changelog

Sourced from rhai's changelog.

Rhai Release Notes

Version 1.23.0

Bug fixes

  • (Fuzzing) Fixed crash when using ..= in arrays, BLOB's, bit-fields and iterators (#1004).
  • Modules loaded within a ModuleResolversCollection now properly enable access to the scope etc.
  • Registered functions for comparison operators with only one operand being a custom type now works properly (thanks @mkeeter #1003).
  • NativeCallContext::fn_source now correctly returns the source of the function (usually None). The missing NativeCallContext::call_source is added to return the source of caller (thanks @FlashSystems #1013).
  • Engine::collect_fn_metadata now properly includes functions registered into the global namespace (thanks @therealprof and @matthiasbeyer #1017).

Enhancements

  • build.rs no longer writes to the source tree but OUT_DIR instead (thanks @matthiasbeyer #1018)
  • CustomType derive macro now supports generic types (thanks @ProphetOSpam #999). The rhai_codegen crate dependency is bumped to 3.0.0 or later.
  • CustomType derive macro now handles Option fields (thanks @agersant #1011).
  • Engine::eval_fn_call is added to make a generic function call.
  • Engine::eval_binary_op is added to quickly compare two Dynamic values.
  • Better handling for 32-bit architectures and enhanced safety by replacing casts with try_from (thanks @therealprof #1009).
  • The new symbol types $token$, $inner$, and $raw$ can now be used in custom syntax definitions (#1023).
  • Engine::register_custom_syntax_without_look_ahead_raw is added to allow the use of $raw$ in custom syntax, which returns the script text character-by-character without processing, by-passing the tokenizer. This in turn allows for parsing arbitrary syntax. (#1022)
  • CallFnOptions::in_all_namespaces is added to allow calling functions in all namespaces, instead of only scripted Rhai functions in the AST.

Version 1.22.2

This version removes the version restriction on ahash which may break code for no-std builds.

Version 1.22.1

Bug fixes

  • Do not mask out version 0.8.11 for ahash.

Version 1.22.0

Bug fixes

... (truncated)

Commits

Updates tracing-subscriber from 0.3.19 to 0.3.20

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.20

Security Fix: ANSI Escape Sequence Injection (CVE-TBD)

Impact

Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:

  • Manipulate terminal title bars
  • Clear screens or modify terminal display
  • Potentially mislead users through terminal manipulation

In isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.

Solution

Version 0.3.20 fixes this vulnerability by escaping ANSI control characters in when writing events to destinations that may be printed to the terminal.

Affected Versions

All versions of tracing-subscriber prior to 0.3.20 are affected by this vulnerability.

Recommendations

Immediate Action Required: We recommend upgrading to tracing-subscriber 0.3.20 immediately, especially if your application:

  • Logs user-provided input (form data, HTTP headers, query parameters, etc.)
  • Runs in environments where terminal output is displayed to users

Migration

This is a patch release with no breaking API changes. Simply update your Cargo.toml:

[dependencies]
tracing-subscriber = "0.3.20"

Acknowledgments

We would like to thank zefr0x who responsibly reported the issue at security@tokio.rs.

If you believe you have found a security vulnerability in any tokio-rs project, please email us at security@tokio.rs.

Commits

Updates update-informer from 1.2.0 to 1.3.0

Release notes

Sourced from update-informer's releases.

v1.3.0

Fixes

  • Fix a bug with ureq and native-tls feature (#172)

Miscellaneous Tasks

  • Update etcetera requirement from 0.8.0 to 0.10.0 (#167)
  • Add nushell as user in README (#162)
  • Update colored requirement from 2.0 to 3.0 (#160)

Update dependencies

Changelog

Sourced from update-informer's changelog.

v1.3.0 - 2025-07-11

Fixes

  • Fix a bug with ureq and native-tls feature (#172)

Miscellaneous Tasks

  • Update etcetera requirement from 0.8.0 to 0.10.0 (#167)
  • Add nushell as user in README (#162)
  • Update colored requirement from 2.0 to 3.0 (#160)

Update dependencies

  • Bump ureq to 3.0 (#169)
Commits

Updates serde from 1.0.219 to 1.0.228

Release notes

Sourced from serde's releases.

v1.0.228

  • Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

v1.0.227

  • Documentation improvements (#2991)

v1.0.226

  • Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @​Mingun)

v1.0.225

  • Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @​rcrisanti)

v1.0.224

  • Remove private types being suggested in rustc diagnostics (#2979)

v1.0.223

  • Fix serde_core documentation links (#2978)

v1.0.222

  • Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @​aytey)

v1.0.221

  • Documentation improvements (#2973)
  • Deprecate serde_if_integer128! macro (#2975)

v1.0.220

Commits
  • a866b33 Release 1.0.228
  • 5adc9e8 Merge pull request #2995 from dtolnay/rustdocflags
  • ab58178 Workaround for RUSTDOCFLAGS='--cfg=docsrs'
  • 415d9fc Release 1.0.227
  • 7c58427 Merge pull request #2991 from dtolnay/inlinecoredoc
  • 9d3410e Merge pull request #2992 from dtolnay/inplaceseed
  • 2fb6748 Remove InPlaceSeed public re-export
  • f8137c7 Inline serde_core into serde in docsrs mode
  • b7dbf7e Merge pull request #2990 from dtolnay/integer128
  • 7c83691 No longer macro_use integer128 module
  • Additional commits viewable in compare view

Updates gix from 0.68.0 to 0.70.0

Release notes

Sourced from gix's releases.

gix-odb v0.70.0

Bug Fixes

  • improve error message for when there is too many packs. Affects jj-vcs/jj#6906

Commit Statistics

  • 11 commits contributed to the release over the course of 79 calendar days.
  • 79 days passed between releases.
  • 1 commit was understood as conventional.
  • 0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 2 times to make code idiomatic.

Commit Details

  • Uncategorized
    • Update changelogs prior to release (65037b5)
    • Improve error message for when there is too many packs. (a773854)
    • Merge pull request #2041 from cruessler/add-blame-extraction (dd5f0a4)
    • Thanks clippy (554ce13)
    • Merge pull request #2033 from GitoxideLabs/dependabot/cargo/cargo-b72232998d (f8d7c0a)
    • Bump the cargo group with 56 updates (151e3a5)
    • Merge pull request #2009 from GitoxideLabs/release-gix-index (c3f06ae)
    • Release gix-path v0.10.18, gix-date v0.10.2, gix-traverse v0.46.2, gix-index v0.40.1 (d2b4c44)
    • Merge pull request #1975 from GitoxideLabs/improvements (28935a5)
    • Thanks clippy (dbf65c9)
    • Merge pull request #1971 from GitoxideLabs/new-release (8d4c4d1)

gix-odb v0.69.1

Commit Statistics

  • 1 commit contributed to the release.
  • 0 commits were understood as conventional.
  • 0 issues like '(#ID)' were seen in commit messages

Commit Details

... (truncated)

Commits
  • dea106a Release gix-utils v0.1.14, gix-actor v0.33.2, gix-hash v0.16.0, gix-trace v0....
  • 7570daa don't specify version numbers in dev-dependencies
  • 1f6390c update all changelogs prior to release
  • 1e37e95 Merge pull request #1777 from EliahKagan/run-ci/arm
  • d5dc5bf Merge pull request #1776 from EliahKagan/fuzz-next
  • 90e08f1 Merge pull request #1774 from EliahKagan/complex-graph-no-baseline-next
  • c7f5013 Let either test-32bit cancel the other on failure
  • c3d4cff Remove the test-32bit-cross job
  • fbc27b5 Install 64-bit libstdc++ in both 32-bit containers
  • cbe3793 Use the ARM runner for some 32-bit tests
  • Additional commits viewable in compare view

Updates tempfile from 3.20.0 to 3.23.0

Changelog

Sourced from tempfile's changelog.

3.23.0

  • Remove need for the "nightly" feature to compile with "wasip2".

3.22.0

  • Updated windows-sys requirement to allow version 0.61.x
  • Remove unstable-windows-keep-open-tempfile feature.

3.21.0

  • Updated windows-sys requirement to allow version 0.60.x
Commits
  • fe9f4a3 chore: release v3.23.0 (#381)
  • 006c3fd fix: use std::os::fd instead of std::os::wasi (#380)
  • b0e6309 doc: Update COPYRIGHT link (#377)
  • 2d6fc3f Fix formatting in Builder::disable_cleanup documentation (#375)
  • f720dbe chore: release 3.22.0
  • 55d742c chore: remove deprecated unstable feature flag
  • bc41a0b build(deps): update windows-sys requirement from >=0.52, <0.61 to >=0.52, <0....
  • 3c55387 test: make sure we don't drop tempdirs early (#373)
  • 17bf644 doc(builder): clarify permissions (#372)
  • c7423f1 doc(env): document the alternative to setting the tempdir (#371)
  • Additional commits viewable in compare view

Updates schemars from 0.8.22 to 1.0.4

Release notes

Sourced from schemars's releases.

v1.0.4

Fixed

v1.0.3

Fixed

  • Fix compile error when a doc comment is set on both a transparent (or newtype) struct and its field (GREsau/schemars#446)
  • Fix json_schema!() macro compatibility when used from pre-2021 rust editions (GREsau/schemars#447)

v1.0.2

Fixed

v1.0.1

Fixed

  • Deriving JsonSchema with no_std broken due to std::borrow::ToOwned trait not being in scope (GREsau/schemars#441)

v1.0.0

This is a major release with many additions, fixes and changes since 0.8 (but not many since 0.9). While the basic usage (deriving JsonSchema and using schema_for!() or SchemaGenerator) is mostly unchanged, you may wish to consult the migration guide which covers some of the most significant changes.

Changes since 1.0.0-rc.2:

Added

  • #[schemars(bound = ...)] attributes are now used from fields as well as containers
  • The Schema::pointer(...) method now works when given a JSON pointer in URI Fragment representation with a leading # character. In particular, this means that you can now lookup a schema from a $ref value using that method.

Fixed

  • Schema names that contain special characters are now correctly encoded when used inside a $ref value (GREsau/schemars#436)
  • Optimise type param usage in SchemaGenerator::subschema_for, reducing LLVM line count and improving compile times (GREsau/schemars#439)

v1.0.0-rc.2

Added

  • Serde attributes that you want schemars to ignore can now be "unset" by including them in a schemars attribute with a ! prefix, e.g. #[schemars(!from)] (GREsau/schemars#433 / GREsau/schemars#434)

Removed

  • ⚠️ Deprecated items have been removed:
    • SchemaSettings::option_nullable and SchemaSettings::option_add_null_type fields
    • gen module

v1.0.0-rc.1

... (truncated)

Changelog

Sourced from schemars's changelog.

[1.0.4] - 2025-07-06

Fixed

[1.0.3] - 2025-06-28

Fixed

  • Fix compile error when a doc comment is set on both a transparent (or newtype) struct and its field (GREsau/schemars#446)
  • Fix json_schema!() macro compatibility when used from pre-2021 rust editions (GREsau/schemars#447)

[1.0.2] - 2025-06-26

Fixed

[1.0.1] - 2025-06-24

Fixed

  • Deriving JsonSchema with no_std broken due to std::borrow::ToOwned trait not being in scope (GREsau/schemars#441)

[1.0.0] - 2025-06-23

This is a major release with many additions, fixes and changes since 0.8 (but not many since 0.9). While the basic usage (deriving JsonSchema and using schema_for!() or SchemaGenerator) is mostly unchanged, you may wish to consult the migration guide which covers some of the most significant changes.

Changes since 1.0.0-rc.2:

Added

  • #[schemars(bound = ...)] attributes are now used from fields as well as containers
  • The Schema::pointer(...) method now works when given a JSON pointer in URI Fragment representation with a leading # character. In particular, this means that you can now lookup a schema from a $ref value using that method.

Fixed

  • Schema names that contain special characters are now correctly encoded when used inside a $ref value (GREsau/schemars#436)
  • Optimise type param usage in SchemaGenerator::subschema_for, reducing L...

    Description has been truncated

… with 31 updates

Bumps the all-dependencies-cargo group with 31 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.98` | `1.0.100` |
| [clap](https://github.com/clap-rs/clap) | `4.5.38` | `4.5.48` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.5.50` | `4.5.58` |
| [colored](https://github.com/mackwic/colored) | `2.2.0` | `3.0.0` |
| [comfy-table](https://github.com/nukesor/comfy-table) | `7.1.4` | `7.2.1` |
| [petgraph](https://github.com/petgraph/petgraph) | `0.6.5` | `0.8.3` |
| [rhai](https://github.com/rhaiscript/rhai) | `1.21.0` | `1.23.4` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.19` | `0.3.20` |
| [update-informer](https://github.com/mgrachev/update-informer) | `1.2.0` | `1.3.0` |
| [serde](https://github.com/serde-rs/serde) | `1.0.219` | `1.0.228` |
| [gix](https://github.com/GitoxideLabs/gitoxide) | `0.68.0` | `0.70.0` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.20.0` | `3.23.0` |
| [schemars](https://github.com/GREsau/schemars) | `0.8.22` | `1.0.4` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.140` | `1.0.145` |
| [age](https://github.com/str4d/rage) | `0.10.1` | `0.11.1` |
| gethostname | `0.5.0` | `1.0.2` |
| [normpath](https://github.com/dylni/normpath) | `1.3.0` | `1.5.0` |
| [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.41.2` | `0.46.0` |
| [os_info](https://github.com/stanislav-tkach/os_info) | `3.11.0` | `3.12.0` |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.1` |
| [regex](https://github.com/rust-lang/regex) | `1.11.1` | `1.11.3` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.15` | `0.12.18` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.45.0` | `1.47.1` |
| [toml](https://github.com/toml-rs/toml) | `0.8.22` | `0.9.7` |
| [which](https://github.com/harryfei/which-rs) | `7.0.3` | `8.0.0` |
| [whoami](https://github.com/ardaku/whoami) | `1.6.0` | `1.6.1` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.1` | `1.1.2` |
| [gix-protocol](https://github.com/GitoxideLabs/gitoxide) | `0.46.1` | `0.48.0` |
| [camino](https://github.com/camino-rs/camino) | `1.1.9` | `1.1.12` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.12.0` | `3.14.1` |
| [parking_lot](https://github.com/Amanieu/parking_lot) | `0.12.3` | `0.12.4` |



Updates `anyhow` from 1.0.98 to 1.0.100
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.98...1.0.100)

Updates `clap` from 4.5.38 to 4.5.48
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.38...clap_complete-v4.5.48)

Updates `clap_complete` from 4.5.50 to 4.5.58
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.50...clap_complete-v4.5.58)

Updates `colored` from 2.2.0 to 3.0.0
- [Release notes](https://github.com/mackwic/colored/releases)
- [Changelog](https://github.com/colored-rs/colored/blob/master/CHANGELOG.md)
- [Commits](colored-rs/colored@v2.2.0...v3.0.0)

Updates `comfy-table` from 7.1.4 to 7.2.1
- [Release notes](https://github.com/nukesor/comfy-table/releases)
- [Changelog](https://github.com/Nukesor/comfy-table/blob/main/CHANGELOG.md)
- [Commits](Nukesor/comfy-table@v7.1.4...v7.2.1)

Updates `petgraph` from 0.6.5 to 0.8.3
- [Release notes](https://github.com/petgraph/petgraph/releases)
- [Changelog](https://github.com/petgraph/petgraph/blob/master/CHANGELOG.md)
- [Commits](https://github.com/petgraph/petgraph/compare/petgraph@v0.6.5...petgraph@v0.8.3)

Updates `rhai` from 1.21.0 to 1.23.4
- [Release notes](https://github.com/rhaiscript/rhai/releases)
- [Changelog](https://github.com/rhaiscript/rhai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rhaiscript/rhai/commits)

Updates `tracing-subscriber` from 0.3.19 to 0.3.20
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.19...tracing-subscriber-0.3.20)

Updates `update-informer` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/mgrachev/update-informer/releases)
- [Changelog](https://github.com/mgrachev/update-informer/blob/main/CHANGELOG.md)
- [Commits](mgrachev/update-informer@v1.2.0...v1.3.0)

Updates `serde` from 1.0.219 to 1.0.228
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.219...v1.0.228)

Updates `gix` from 0.68.0 to 0.70.0
- [Release notes](https://github.com/GitoxideLabs/gitoxide/releases)
- [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md)
- [Commits](GitoxideLabs/gitoxide@gix-v0.68.0...gix-v0.70.0)

Updates `tempfile` from 3.20.0 to 3.23.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.20.0...v3.23.0)

Updates `schemars` from 0.8.22 to 1.0.4
- [Release notes](https://github.com/GREsau/schemars/releases)
- [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md)
- [Commits](GREsau/schemars@v0.8.22...v1.0.4)

Updates `serde_json` from 1.0.140 to 1.0.145
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.140...v1.0.145)

Updates `age` from 0.10.1 to 0.11.1
- [Release notes](https://github.com/str4d/rage/releases)
- [Commits](str4d/rage@v0.10.1...v0.11.1)

Updates `gethostname` from 0.5.0 to 1.0.2

Updates `normpath` from 1.3.0 to 1.5.0
- [Release notes](https://github.com/dylni/normpath/releases)
- [Commits](dylni/normpath@1.3.0...1.5.0)

Updates `octocrab` from 0.41.2 to 0.46.0
- [Release notes](https://github.com/XAMPPRocky/octocrab/releases)
- [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md)
- [Commits](XAMPPRocky/octocrab@v0.41.2...v0.46.0)

Updates `os_info` from 3.11.0 to 3.12.0
- [Release notes](https://github.com/stanislav-tkach/os_info/releases)
- [Changelog](https://github.com/stanislav-tkach/os_info/blob/master/CHANGELOG.md)
- [Commits](stanislav-tkach/os_info@v3.11.0...v3.12.0)

Updates `rand` from 0.8.5 to 0.9.1
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...rand_core-0.9.1)

Updates `regex` from 1.11.1 to 1.11.3
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.11.1...1.11.3)

Updates `reqwest` from 0.12.15 to 0.12.18
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.15...v0.12.18)

Updates `tokio` from 1.45.0 to 1.47.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.45.0...tokio-1.47.1)

Updates `toml` from 0.8.22 to 0.9.7
- [Commits](toml-rs/toml@toml-v0.8.22...toml-v0.9.7)

Updates `which` from 7.0.3 to 8.0.0
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@7.0.3...8.0.0)

Updates `whoami` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/ardaku/whoami/releases)
- [Commits](https://github.com/ardaku/whoami/commits)

Updates `flate2` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.1...1.1.2)

Updates `gix-protocol` from 0.46.1 to 0.48.0
- [Release notes](https://github.com/GitoxideLabs/gitoxide/releases)
- [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md)
- [Commits](GitoxideLabs/gitoxide@gix-protocol-v0.46.1...gix-protocol-v0.48.0)

Updates `camino` from 1.1.9 to 1.1.12
- [Release notes](https://github.com/camino-rs/camino/releases)
- [Changelog](https://github.com/camino-rs/camino/blob/main/CHANGELOG.md)
- [Commits](camino-rs/camino@camino-1.1.9...camino-1.1.12)

Updates `serde_with` from 3.12.0 to 3.14.1
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.12.0...v3.14.1)

Updates `parking_lot` from 0.12.3 to 0.12.4
- [Release notes](https://github.com/Amanieu/parking_lot/releases)
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](Amanieu/parking_lot@0.12.3...parking_lot-v0.12.4)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
- dependency-name: clap
  dependency-version: 4.5.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
- dependency-name: clap_complete
  dependency-version: 4.5.58
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
- dependency-name: colored
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies-cargo
- dependency-name: comfy-table
  dependency-version: 7.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: petgraph
  dependency-version: 0.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: rhai
  dependency-version: 1.23.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: tracing-subscriber
  dependency-version: 0.3.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
- dependency-name: update-informer
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: serde
  dependency-version: 1.0.228
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
- dependency-name: gix
  dependency-version: 0.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: tempfile
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: schemars
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies-cargo
- dependency-name: serde_json
  dependency-version: 1.0.145
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
- dependency-name: age
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: gethostname
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies-cargo
- dependency-name: normpath
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: octocrab
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: os_info
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: rand
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: regex
  dependency-version: 1.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
- dependency-name: reqwest
  dependency-version: 0.12.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
- dependency-name: tokio
  dependency-version: 1.47.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: toml
  dependency-version: 0.9.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: which
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies-cargo
- dependency-name: whoami
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
- dependency-name: flate2
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
- dependency-name: gix-protocol
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: camino
  dependency-version: 1.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
- dependency-name: serde_with
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies-cargo
- dependency-name: parking_lot
  dependency-version: 0.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies-cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 1, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Nov 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 1, 2025
@dependabot dependabot Bot deleted the dependabot/cargo/all-dependencies-cargo-f165cad7a8 branch November 1, 2025 14:10
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants