Skip to content

chore(deps): bump the all-rust-deps group with 43 updates - #800

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-rust-deps-27eaa95064
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/all-rust-deps-27eaa95064

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the all-rust-deps group with 43 updates:

Package From To
smallvec 1.16.2 1.16.4
self-replace 1.5.0 1.5.1
zip 8.6.0 9.1.3
tikv-jemallocator 0.6.1 0.7.0
rand 0.9.5 0.10.3
insta 1.48.0 1.49.0
arboard 3.6.1 3.7.0
schemars 1.2.2 1.2.3
unicode-width 0.2.2 0.2.3
similar 3.2.0 3.2.1
serde_json 1.0.151 1.0.154
tokio 1.53.1 1.54.1
libc 0.2.189 0.2.191
keyring-core 1.0.0 1.0.1
arc-swap 1.9.2 1.9.3
sha2 0.11.0 0.11.1
tokio-util 0.7.19 0.7.20
serde-saphyr 1.3.0 2.0.0
hotpath 0.29.2 0.30.1
uuid 1.26.1 1.29.0
ignore 0.4.33 0.4.34
syn 3.0.6 3.0.9
webbrowser 1.2.4 1.2.5
opentelemetry 0.33.0 0.33.1
rmcp 3.5.0 3.8.0
gpui-kit 0.8.0 0.8.1
pulldown-cmark 0.13.4 0.13.5
parking_lot 0.12.5 0.13.0
notify 8.2.0 8.2.1
json5 1.3.1 1.3.6
tree-sitter 0.27.0 0.27.1
lru 0.18.5 0.19.0
rusqlite 0.40.2 0.41.1
jsonschema 0.58.1 0.60.2
astral-html 0.0.3 0.0.4
notify-rust 4.18.1 4.18.2
xattr 1.6.1 1.7.0
proptest 1.11.0 1.12.0
rustls 0.23.45 0.23.46
webpki-roots 1.0.9 1.0.11
ratatui-textarea 0.9.2 0.9.3
signal-hook 0.4.4 0.4.5
tui-shimmer 0.1.3 0.1.7

Updates smallvec from 1.16.2 to 1.16.4

Release notes

Sourced from smallvec's releases.

v1.16.4

What's Changed

Full Changelog: servo/rust-smallvec@v1.16.3...v1.16.4

v1.16.3

What's Changed

Full Changelog: servo/rust-smallvec@v1.16.2...v1.16.3

Commits

Updates self-replace from 1.5.0 to 1.5.1

Changelog

Sourced from self-replace's changelog.

1.5.1

  • Widened the windows-sys dependency to >=0.52, <0.62 to avoid duplicate versions in dependency graphs. #34
  • Unsupported targets now fail with a clear compile error. #32
Commits

Updates zip from 8.6.0 to 9.1.3

Release notes

Sourced from zip's releases.

v9.1.3

🚀 Features

  • (extra_fields) support 0xd935 Android ZIP alignment extra field (#928) (#1198)

🐛 Bug Fixes

  • (format) record correct 32-bit EOCD offset in ZIP64 archives (#1205)
  • (aes) wipe AES round keys when the cipher is dropped (#1204)
  • (fuzz) treat a comment change in a merged sub-writer as non-streamable (#1188)
  • (aes) zeroize AesCtrZipKeyStream buffer and counter on drop (#1196)
  • (extract) prevent symlink-follow truncation via FILE_FLAG_OPEN_REPARSE_POINT (#1195)
  • (write) drop a stale Unicode Path extra field when copying an entry (#1187)
  • (write) don't leave a stale tail that completes a fake EOCD in the comment (#1186)
  • (write) reject deflate levels below 10 when only zopfli is enabled (#1182)

⚡ Performance

  • (read) accelerate extraction with 64 KiB reusable buffer (#1206)
  • (aes) encrypt AES-CTR counter blocks in batches (#1203)
  • (read) eliminate double allocation by populating IndexMap directly (#1200)
  • (read) preallocate files vector in read_central_header (#1199)

v9.1.1

🐛 Bug Fixes

  • store the raw count instead of a bool (#1174)
  • preserve extra fields in raw_copy_file_touch (#1172)
  • (write) flag a non-ASCII file comment as UTF-8 when writing it (#1160)
  • (write) reject duplicate names in merge_archive, blank stale footers, and add opt-in extra-field validation (#1159)

v9.1.0

🚀 Features

  • (read) enforce header consistency on extract_with_options and expose duplicate name detection (#1109)
  • Add borrowing inner method to reader wrappers (#1050)
  • add with_size_limit to ExtractOptions to limit total declared uncompressed size (#1019)
  • add file_names_raw iterator (#1082)

🐛 Bug Fixes

  • raw_copy_file keeps an entry's name bytes and UTF-8 flag as stored (#1124)
  • (write) prevent seek panic on streaming writer with comment (#1151)
  • Accept bounded central directory digital signature record when enforcing header consistency in ZipStreamReader (#1134)
  • apply unix permissions at creation (#1104)
  • raw_copy_file should work with any extra fields (#1120)
  • (read) avoid full-file forward scans and redundant allocations in central directory (#1142)
  • don't enable typed-path's default std feature (#1112)
  • ZIP64 size fields were being deep-copied incorrectly (via Copilot gpt-6-luna) (#1107)
  • resolve decoded CP437 member names (#1080) (#1085)

... (truncated)

Changelog

Sourced from zip's changelog.

9.1.3 - 2026-10-27

🚀 Features

  • (extra_fields) support 0xd935 Android ZIP alignment extra field (#928) (#1198)

🐛 Bug Fixes

  • (format) record correct 32-bit EOCD offset in ZIP64 archives (#1205)
  • (aes) wipe AES round keys when the cipher is dropped (#1204)
  • (fuzz) treat a comment change in a merged sub-writer as non-streamable (#1188)
  • (aes) zeroize AesCtrZipKeyStream buffer and counter on drop (#1196)
  • (extract) prevent symlink-follow truncation via FILE_FLAG_OPEN_REPARSE_POINT (#1195)
  • (write) drop a stale Unicode Path extra field when copying an entry (#1187)
  • (write) don't leave a stale tail that completes a fake EOCD in the comment (#1186)
  • (write) reject deflate levels below 10 when only zopfli is enabled (#1182)

⚡ Performance

  • (read) accelerate extraction with 64 KiB reusable buffer (#1206)
  • (aes) encrypt AES-CTR counter blocks in batches (#1203)
  • (read) eliminate double allocation by populating IndexMap directly (#1200)
  • (read) preallocate files vector in read_central_header (#1199)

9.1.2 - 2026-10-26

🐛 Bug Fixes

  • preserve the file kind (normal/directory/symlink) in raw_copy_file_touch (#1179)
  • (write) reject a Unicode Path extra field that would rename the entry (#1177)
  • (extract) prevent following symbolic links during file creation (#1116)

9.1.1 - 2026-10-25

🐛 Bug Fixes

  • store the raw count instead of a bool (#1174)
  • preserve extra fields in raw_copy_file_touch (#1172)
  • (write) flag a non-ASCII file comment as UTF-8 when writing it (#1160)
  • (write) reject duplicate names in merge_archive, blank stale footers, and add opt-in extra-field validation (#1159)

9.1.0 - 2026-10-24

🚀 Features

  • (read) enforce header consistency on extract_with_options and expose duplicate name detection (#1109)
  • Add borrowing inner method to reader wrappers (#1050)
  • add with_size_limit to ExtractOptions to limit total declared uncompressed size (#1019)
  • add file_names_raw iterator (#1082)

... (truncated)

Commits
  • af2ed2a chore: release v9.1.3 (#1185)
  • 019776a perf(read): accelerate extraction with 64 KiB reusable buffer (#1206)
  • 5b5c4a0 fix(format): record correct 32-bit EOCD offset in ZIP64 archives (#1205)
  • 20e809a perf(aes): encrypt AES-CTR counter blocks in batches (#1203)
  • 9865299 fix(aes): wipe AES round keys when the cipher is dropped (#1204)
  • e656c5d perf(read): eliminate double allocation by populating IndexMap directly (#1200)
  • 2431276 perf(read): preallocate files vector in read_central_header (#1199)
  • 09d6a8b ci: Manually update version to 9.1.3 (#1202)
  • f2fe6c4 feat(extra_fields): support 0xd935 Android ZIP alignment extra field (#928) (...
  • 5125442 test(fuzz): tolerate reopen failures once the comment holds an EOCD signature...
  • Additional commits viewable in compare view

Updates tikv-jemallocator from 0.6.1 to 0.7.0

Release notes

Sourced from tikv-jemallocator's releases.

0.7.0

  • Reverse order of MAKEFLAGS priority (#152)
  • Define ALIGNOF_MAX_ALIGN_T for riscv32 (#153)
  • Remove build directory once build of jemalloc-sys finishes (#119)
  • Fix cross-compile for tier-3 riscv64a23 target (#141)
  • sys: support *-windows-gnullvm targets (#150)
  • Propagate LDFLAGS, if present (#155)
  • jemalloc-ctl: fix invalid update implementation
  • add new free ffi
  • Update jemalloc to 5.3.1 (#161)
  • Add profiling_libunwind feature (#159)
  • passthrough cc env/args using native cc features (#158)
Changelog

Sourced from tikv-jemallocator's changelog.

0.7.0 - 2026-05-25

  • Reverse order of MAKEFLAGS priority (#152)
  • Define ALIGNOF_MAX_ALIGN_T for riscv32 (#153)
  • Remove build directory once build of jemalloc-sys finishes (#119)
  • Fix cross-compile for tier-3 riscv64a23 target (#141)
  • sys: support *-windows-gnullvm targets (#150)
  • Propagate LDFLAGS, if present (#155)
  • jemalloc-ctl: fix invalid update implementation
  • add new free ffi
  • Update jemalloc to 5.3.1 (#161)
  • Add profiling_libunwind feature (#159)
  • passthrough cc env/args using native cc features (#158)
Commits

Updates rand from 0.9.5 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

  • Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
  • Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
  • Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

  • Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)

... (truncated)

Commits
  • 9e7d328 Prepare rand 0.10.3 (#1840)
  • f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
  • ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
  • c994eb1 docs: fix angle unit in quick start example (#1839)
  • 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
  • 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
  • bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
  • 521fab6 Stop pinning dependencies (#1820)
  • 3f7c433 Stop pinning dependencies
  • cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
  • Additional commits viewable in compare view

Updates insta from 1.48.0 to 1.49.0

Release notes

Sourced from insta's releases.

1.49.0

Release Notes

  • Allow Option<&OsStr> snapshot names, such as Path::file_name(), without explicit string conversion. #929 (@​dislogical)
  • Add prebuilt cargo-insta binaries for ARM64 Linux (aarch64-unknown-linux-gnu). #942 (@​aljohri)
  • Fix JSON serialization of maps keyed by unit enum variants. Keys use the serialized variant name, including serde renames. #934 (@​teddytennant)
  • Remove trailing semicolons from serialization macro bodies to avoid compiler warnings when used in expression position. #940 (@​Tiwalun)
  • Mention INSTA_UPDATE=always in snapshot mismatch hints for file snapshots. #927 (@​hiro-nikaitou)
  • Update the lockfile's tempfile and rustix dependencies to fix builds with newer Rust toolchains. #939
  • Fix cargo insta test --all-targets --test-runner nextest failing with "Can't mix --doc with other target selecting options". Like cargo test --all-targets, it no longer runs doctests. #460

Install cargo-insta 1.49.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.49.0/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.49.0/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.49.0

File Platform Checksum
cargo-insta-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
cargo-insta-x86_64-apple-darwin.tar.xz Intel macOS checksum
cargo-insta-x86_64-pc-windows-msvc.zip x64 Windows checksum
cargo-insta-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

This was written by Codex on behalf of @​max-sixty

Changelog

Sourced from insta's changelog.

1.49.0

  • Allow Option<&OsStr> snapshot names, such as Path::file_name(), without explicit string conversion. #929 (@​dislogical)
  • Add prebuilt cargo-insta binaries for ARM64 Linux (aarch64-unknown-linux-gnu). #942 (@​aljohri)
  • Fix JSON serialization of maps keyed by unit enum variants. Keys use the serialized variant name, including serde renames. #934 (@​teddytennant)
  • Remove trailing semicolons from serialization macro bodies to avoid compiler warnings when used in expression position. #940 (@​Tiwalun)
  • Mention INSTA_UPDATE=always in snapshot mismatch hints for file snapshots. #927 (@​hiro-nikaitou)
  • Update the lockfile's tempfile and rustix dependencies to fix builds with newer Rust toolchains. #939
  • Fix cargo insta test --all-targets --test-runner nextest failing with "Can't mix --doc with other target selecting options". Like cargo test --all-targets, it no longer runs doctests. #460
Commits
  • 5df39ce Release 1.49.0 (#944)
  • 1c28c19 Skip the separate doctest run for nextest with --all-targets (#941)
  • 064742e Build cargo-insta for aarch64-unknown-linux-gnu (#942)
  • 08b67d9 Remove trailing semicolons from macro bodies (#940)
  • 06858e1 fix: regenerate Cargo.lock to avoid broken rustix 0.37.27 (#939)
  • 70be034 Serialize unit enum variants used as JSON map keys (#934)
  • 54d0b96 feat: implement From for SnapshotValue with OsStr (#929)
  • 3d62572 [fix] Mention INSTA_UPDATE variable in snapshot mismatch errors (#927)
  • 1712876 ci: run CI on a pinned toolchain via rust-toolchain.toml; fix format-arg lint...
  • See full diff in compare view

Updates arboard from 3.6.1 to 3.7.0

Release notes

Sourced from arboard's releases.

v3.7.0

What's Changed

New Contributors

Full Changelog: 1Password/arboard@v3.6.1...v3.7.0

Commits
  • 5f5c863 Release 3.7.0
  • ab9663b Add example demonstrating wait_once
  • b9000b1 Add a wait_once to support waiting for just one clipboard request
  • 2ea0ff6 wayland: Factor out option setting into a method
  • b7e47c8 Update lib.rs
  • 2b2050e Bump step-security/setup-rust-toolchain from 1.16.1 to 2.0.0
  • 6b09682 Bump step-security/harden-runner from 2.20.0 to 2.21.1
  • 9f7b05c Bump actions/checkout from 4.3.1 to 7.0.0
  • 890e919 Apply GitHub Actions security best practices
  • d7c6cc9 bump windows-sys lower bound
  • Additional commits viewable in compare view

Updates schemars from 1.2.2 to 1.2.3

Release notes

Sourced from schemars's releases.

v1.2.3

Fixed

Changed

Changelog

Sourced from schemars's changelog.

[1.2.3] - 2026-10-12

Fixed

Changed

Commits
  • 4791bb7 v1.2.3
  • c6a89b7 Put the tag of an internally tagged enum first in properties
  • c5cd8b5 fix: schema creation panics with arbitrary precision JSON numbers
  • 766d70b Resolve unused_qualifications lint in crate and generated code - #541 (#541)
  • d07655e Resolve clippy error
  • See full diff in compare view

Updates unicode-width from 0.2.2 to 0.2.3

Commits
  • f8c8b20 Publish 0.2.3 (#100)
  • 5180748 Fix documentation of Kirat Rai rules (#97)
  • 0b85fb8 Update to Unicode 18 (#96)
  • 832f7ca Fix typo in docs (#90)
  • c7b4d42 Fix halfwidth katakana voiced and semi-voiced sound marks in width calculatio...
  • a3d4ee6 Fix mistake in the specification of Arabic lam-alef ligature (#92)
  • d8654db Split generated file into multiple files, separating static code from generat...
  • ab7a6dc Support char iter width (#83)
  • b10a4d5 Exclude development scripts from published packages (#80)
  • See full diff in compare view

Updates similar from 3.2.0 to 3.2.1

Changelog

Sourced from similar's changelog.

3.2.1

  • Improved real-world diffing performance substantially without changing the produced diffs. On a corpus of real source file revisions, line diffs run about 4x faster with Algorithm::Myers, 5x faster with Algorithm::Histogram, and 2.5x faster with Algorithm::Patience; word diffs run about 2x faster. This comes from a faster line tokenizer, a SipHash-1-3 content hash that consumes whole words (randomly keyed with std), cheaper integer-keyed lookup tables, hashing only the changed middle of Myers line diffs, flat occurrence tables in Histogram, and a gap buffer in the compaction pass that was quadratic on diffs with many ops. Allocation counts and peak memory dropped as well; in particular one sided and heavily unbalanced inputs no longer build index structures proportional to the larger side for Algorithm::Hunt, Algorithm::Histogram, and Algorithm::Patience.
  • Fixed Algorithm::Histogram overflowing the stack on inputs with many scattered changes. Pending ranges are now tracked on the heap, so stack usage no longer grows with the number of anchors. #105
  • Fixed TextMerge::labels writing carriage returns and newlines verbatim into conflict markers, which let a label add lines to the output that looked like merged content. Line terminators in labels are now replaced with spaces. #101
Commits
  • 71d4831 chore(release): prepare 3.2.1
  • b61e6c3 test(histogram): skip small stack tests on WASI
  • a4ee936 fix(histogram): track pending ranges on the heap
  • 96993d9 docs: add runnable example output gallery (#104)
  • 1c64280 docs(changelog): describe diff performance and memory improvements
  • a3da6ec perf(compact): use a gap buffer for large operation lists
  • ce3a403 perf(histogram): reuse indexes and bound unbalanced input allocations
  • 2bcae2f perf(myers): skip unchanged hashing and unused split bookkeeping
  • 5a5aa8d perf(text): accelerate line and word tokenization
  • 80bc240 perf(hash): accelerate content hashing and integer lookups
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

  • time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

  • fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
  • net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
  • runtime: add Builder::max_io_events_per_busy_tick (#8410)
  • runtime: stabilize tokio::runtime::worker_index() (#8431)
  • sync: add SemaphorePermit::semaphore() (#8482)
  • sync: add blocking_acquire methods to Semaphore (#8269)
  • sync: add watch::Receiver::is_closed (#8481)
  • wasm: support JSPI for Emscripten target (#8285, #8627)
  • wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

  • fs: reject zero in File::set_max_buf_size (#8449)
  • io: make copy_buf cooperative (#8459)
  • io: panic when BufReader or BufStream is created with zero capacity (#8494)
  • io: panic when in-memory pipe is created with zero capacity (#8397)
  • io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
  • io: support vectored writes in Sink (#8663)
  • net: start UnixStream::pair and UnixDatagram::pair sockets as w...

    Description has been truncated

Bumps the all-rust-deps group with 43 updates:

| Package | From | To |
| --- | --- | --- |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.16.2` | `1.16.4` |
| [self-replace](https://github.com/mitsuhiko/self-replace) | `1.5.0` | `1.5.1` |
| [zip](https://github.com/zip-rs/zip2) | `8.6.0` | `9.1.3` |
| [tikv-jemallocator](https://github.com/tikv/jemallocator) | `0.6.1` | `0.7.0` |
| [rand](https://github.com/rust-random/rand) | `0.9.5` | `0.10.3` |
| [insta](https://github.com/mitsuhiko/insta) | `1.48.0` | `1.49.0` |
| [arboard](https://github.com/1Password/arboard) | `3.6.1` | `3.7.0` |
| [schemars](https://github.com/GREsau/schemars) | `1.2.2` | `1.2.3` |
| [unicode-width](https://github.com/unicode-rs/unicode-width) | `0.2.2` | `0.2.3` |
| [similar](https://github.com/mitsuhiko/similar) | `3.2.0` | `3.2.1` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.54.1` |
| [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.191` |
| [keyring-core](https://github.com/open-source-cooperative/keyring-core) | `1.0.0` | `1.0.1` |
| [arc-swap](https://github.com/vorner/arc-swap) | `1.9.2` | `1.9.3` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` |
| [serde-saphyr](https://github.com/bourumir-wyngs/serde-saphyr) | `1.3.0` | `2.0.0` |
| [hotpath](https://github.com/hotpath-rs/hotpath) | `0.29.2` | `0.30.1` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.26.1` | `1.29.0` |
| [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.33` | `0.4.34` |
| [syn](https://github.com/dtolnay/syn) | `3.0.6` | `3.0.9` |
| [webbrowser](https://github.com/amodm/webbrowser-rs) | `1.2.4` | `1.2.5` |
| [opentelemetry](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.5.0` | `3.8.0` |
| [gpui-kit](https://github.com/longbridge/gpui-kit) | `0.8.0` | `0.8.1` |
| [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark) | `0.13.4` | `0.13.5` |
| [parking_lot](https://github.com/Amanieu/parking_lot) | `0.12.5` | `0.13.0` |
| [notify](https://github.com/notify-rs/notify) | `8.2.0` | `8.2.1` |
| [json5](https://github.com/callum-oakley/json5-rs) | `1.3.1` | `1.3.6` |
| [tree-sitter](https://github.com/tree-sitter/tree-sitter) | `0.27.0` | `0.27.1` |
| [lru](https://github.com/jeromefroe/lru-rs) | `0.18.5` | `0.19.0` |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.40.2` | `0.41.1` |
| [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.58.1` | `0.60.2` |
| [astral-html](https://github.com/astral-sh/astral-html) | `0.0.3` | `0.0.4` |
| [notify-rust](https://github.com/hoodie/notify-rust) | `4.18.1` | `4.18.2` |
| [xattr](https://github.com/Stebalien/xattr) | `1.6.1` | `1.7.0` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.11.0` | `1.12.0` |
| [rustls](https://github.com/rustls/rustls) | `0.23.45` | `0.23.46` |
| [webpki-roots](https://github.com/rustls/webpki-roots) | `1.0.9` | `1.0.11` |
| [ratatui-textarea](https://github.com/ratatui/ratatui-textarea) | `0.9.2` | `0.9.3` |
| [signal-hook](https://github.com/vorner/signal-hook) | `0.4.4` | `0.4.5` |
| [tui-shimmer](https://github.com/vinhnx/tui-shimmer) | `0.1.3` | `0.1.7` |


Updates `smallvec` from 1.16.2 to 1.16.4
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](servo/rust-smallvec@v1.16.2...v1.16.4)

Updates `self-replace` from 1.5.0 to 1.5.1
- [Changelog](https://github.com/mitsuhiko/self-replace/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/self-replace@1.5.0...1.5.1)

Updates `zip` from 8.6.0 to 9.1.3
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v8.6.0...v9.1.3)

Updates `tikv-jemallocator` from 0.6.1 to 0.7.0
- [Release notes](https://github.com/tikv/jemallocator/releases)
- [Changelog](https://github.com/tikv/jemallocator/blob/main/CHANGELOG.md)
- [Commits](tikv/jemallocator@0.6.1...0.7.0)

Updates `rand` from 0.9.5 to 0.10.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.9.5...0.10.3)

Updates `insta` from 1.48.0 to 1.49.0
- [Release notes](https://github.com/mitsuhiko/insta/releases)
- [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md)
- [Commits](mitsuhiko/insta@1.48.0...1.49.0)

Updates `arboard` from 3.6.1 to 3.7.0
- [Release notes](https://github.com/1Password/arboard/releases)
- [Commits](1Password/arboard@v3.6.1...v3.7.0)

Updates `schemars` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/GREsau/schemars/releases)
- [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md)
- [Commits](GREsau/schemars@v1.2.2...v1.2.3)

Updates `unicode-width` from 0.2.2 to 0.2.3
- [Commits](unicode-rs/unicode-width@v0.2.2...v0.2.3)

Updates `similar` from 3.2.0 to 3.2.1
- [Changelog](https://github.com/mitsuhiko/similar/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/similar@3.2.0...3.2.1)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `tokio` from 1.53.1 to 1.54.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.54.1)

Updates `libc` from 0.2.189 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.189...0.2.191)

Updates `keyring-core` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/open-source-cooperative/keyring-core/releases)
- [Commits](open-source-cooperative/keyring-core@v1.0.0...v1.0.1)

Updates `arc-swap` from 1.9.2 to 1.9.3
- [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vorner/arc-swap/commits/v1.9.3)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `tokio-util` from 0.7.19 to 0.7.20
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20)

Updates `serde-saphyr` from 1.3.0 to 2.0.0
- [Release notes](https://github.com/bourumir-wyngs/serde-saphyr/releases)
- [Changelog](https://github.com/bourumir-wyngs/serde-saphyr/blob/master/CHANGELOG.md)
- [Commits](bourumir-wyngs/serde-saphyr@1.3.0...2.0.0)

Updates `hotpath` from 0.29.2 to 0.30.1
- [Release notes](https://github.com/hotpath-rs/hotpath/releases)
- [Changelog](https://github.com/hotpath-rs/hotpath/blob/main/CHANGELOG.md)
- [Commits](hotpath-rs/hotpath@v0.29.2...v0.30.1)

Updates `uuid` from 1.26.1 to 1.29.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.29.0)

Updates `ignore` from 0.4.33 to 0.4.34
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@ignore-0.4.33...ignore-0.4.34)

Updates `syn` from 3.0.6 to 3.0.9
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.6...3.0.9)

Updates `webbrowser` from 1.2.4 to 1.2.5
- [Release notes](https://github.com/amodm/webbrowser-rs/releases)
- [Changelog](https://github.com/amodm/webbrowser-rs/blob/main/CHANGELOG.md)
- [Commits](amodm/webbrowser-rs@v1.2.4...v1.2.5)

Updates `opentelemetry` from 0.33.0 to 0.33.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-0.33.0...opentelemetry-0.33.1)

Updates `rmcp` from 3.5.0 to 3.8.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.5.0...rmcp-v3.8.0)

Updates `gpui-kit` from 0.8.0 to 0.8.1
- [Release notes](https://github.com/longbridge/gpui-kit/releases)
- [Changelog](https://github.com/longbridge/gpui-kit/blob/main/release-notes.md)
- [Commits](longbridge/gpui-kit@v0.8.0...v0.8.1)

Updates `pulldown-cmark` from 0.13.4 to 0.13.5
- [Release notes](https://github.com/raphlinus/pulldown-cmark/releases)
- [Commits](pulldown-cmark/pulldown-cmark@v0.13.4...v0.13.5)

Updates `parking_lot` from 0.12.5 to 0.13.0
- [Release notes](https://github.com/Amanieu/parking_lot/releases)
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](Amanieu/parking_lot@parking_lot-v0.12.5...parking_lot-v0.13.0)

Updates `notify` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/notify-rs/notify/releases)
- [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.1/CHANGELOG.md)
- [Commits](notify-rs/notify@notify-8.2.0...notify-8.2.1)

Updates `json5` from 1.3.1 to 1.3.6
- [Release notes](https://github.com/callum-oakley/json5-rs/releases)
- [Commits](callum-oakley/json5-rs@1.3.1...1.3.6)

Updates `tree-sitter` from 0.27.0 to 0.27.1
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.27.0...v0.27.1)

Updates `lru` from 0.18.5 to 0.19.0
- [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md)
- [Commits](jeromefroe/lru-rs@0.18.5...0.19.0)

Updates `rusqlite` from 0.40.2 to 0.41.1
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.40.2...v0.41.1)

Updates `jsonschema` from 0.58.1 to 0.60.2
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@cli-v0.58.1...ruby-v0.60.2)

Updates `astral-html` from 0.0.3 to 0.0.4
- [Release notes](https://github.com/astral-sh/astral-html/releases)
- [Changelog](https://github.com/astral-sh/astral-html/blob/main/CHANGELOG.md)
- [Commits](astral-sh/astral-html@v0.0.3...v0.0.4)

Updates `notify-rust` from 4.18.1 to 4.18.2
- [Release notes](https://github.com/hoodie/notify-rust/releases)
- [Changelog](https://github.com/hoodie/notify-rust/blob/main/CHANGELOG.md)
- [Commits](hoodie/notify-rust@v4.18.1...v4.18.2)

Updates `xattr` from 1.6.1 to 1.7.0
- [Release notes](https://github.com/Stebalien/xattr/releases)
- [Commits](Stebalien/xattr@v1.6.1...v1.7.0)

Updates `proptest` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.11.0...v1.12.0)

Updates `rustls` from 0.23.45 to 0.23.46
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.45...v/0.23.46)

Updates `webpki-roots` from 1.0.9 to 1.0.11
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/1.0.9...v/1.0.11)

Updates `ratatui-textarea` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/ratatui/ratatui-textarea/releases)
- [Changelog](https://github.com/ratatui/ratatui-textarea/blob/main/CHANGELOG.md)
- [Commits](ratatui/ratatui-textarea@ratatui-textarea-v0.9.2...ratatui-textarea-v0.9.3)

Updates `signal-hook` from 0.4.4 to 0.4.5
- [Changelog](https://github.com/vorner/signal-hook/blob/master/CHANGELOG.md)
- [Commits](vorner/signal-hook@v0.4.4...v0.4.5)

Updates `tui-shimmer` from 0.1.3 to 0.1.7
- [Release notes](https://github.com/vinhnx/tui-shimmer/releases)
- [Changelog](https://github.com/vinhnx/tui-shimmer/blob/main/CHANGELOG.md)
- [Commits](vinhnx/tui-shimmer@v0.1.3...v0.1.7)

---
updated-dependencies:
- dependency-name: smallvec
  dependency-version: 1.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: self-replace
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: zip
  dependency-version: 9.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-rust-deps
- dependency-name: tikv-jemallocator
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: rand
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: insta
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: arboard
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: schemars
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: unicode-width
  dependency-version: 0.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: similar
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: tokio
  dependency-version: 1.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: libc
  dependency-version: 0.2.191
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: keyring-core
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: arc-swap
  dependency-version: 1.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: tokio-util
  dependency-version: 0.7.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: serde-saphyr
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-rust-deps
- dependency-name: hotpath
  dependency-version: 0.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: uuid
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: ignore
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: syn
  dependency-version: 3.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: webbrowser
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: opentelemetry
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: rmcp
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: gpui-kit
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: pulldown-cmark
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: parking_lot
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: notify
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: json5
  dependency-version: 1.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: tree-sitter
  dependency-version: 0.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: lru
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: rusqlite
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: jsonschema
  dependency-version: 0.60.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: astral-html
  dependency-version: 0.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: notify-rust
  dependency-version: 4.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: xattr
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: proptest
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: rustls
  dependency-version: 0.23.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: webpki-roots
  dependency-version: 1.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: ratatui-textarea
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: signal-hook
  dependency-version: 0.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: tui-shimmer
  dependency-version: 0.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 1, 2026
@coderabbitai

coderabbitai Bot commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b62f58ea-b673-4772-b100-b0a69b135fa4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@socket-security

Copy link
Copy Markdown

@dependabot @github

dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 1, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/all-rust-deps-27eaa95064 branch November 1, 2026 20:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants