Skip to content

chore(deps): bump the all-rust-deps group across 1 directory with 40 updates - #801

Merged
vinhnx merged 1 commit into
mainfrom
dependabot/cargo/all-rust-deps-f58a879180
Nov 2, 2026
Merged

chore(deps): bump the all-rust-deps group across 1 directory with 40 updates#801
vinhnx merged 1 commit into
mainfrom
dependabot/cargo/all-rust-deps-f58a879180

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-rust-deps group with 40 updates in the / directory:

Package From To
smallvec 1.16.2 1.16.4
self-replace 1.5.0 1.5.1
tikv-jemallocator 0.6.1 0.7.0
rand 0.9.5 0.10.3
insta 1.48.0 1.49.0
arboard 3.6.1 3.7.0
schemars 1.2.2 1.2.3
unicode-width 0.2.2 0.2.3
similar 3.2.0 3.2.1
serde_json 1.0.151 1.0.154
libc 0.2.189 0.2.191
keyring-core 1.0.0 1.0.1
arc-swap 1.9.2 1.9.3
sha2 0.11.0 0.11.1
tokio-util 0.7.19 0.7.20
serde-saphyr 1.3.0 2.0.0
hotpath 0.29.2 0.30.1
uuid 1.26.1 1.29.0
ignore 0.4.33 0.4.34
syn 3.0.6 3.0.9
webbrowser 1.2.4 1.2.5
opentelemetry 0.33.0 0.33.1
rmcp 3.5.0 3.8.0
gpui-kit 0.8.0 0.8.1
objc2 0.6.4 0.6.5
plist 1.10.0 1.10.3
parking_lot 0.12.5 0.13.0
notify 8.2.0 8.2.1
json5 1.3.1 1.3.6
tree-sitter 0.27.0 0.27.1
lru 0.18.5 0.19.0
rusqlite 0.40.2 0.41.1
jsonschema 0.58.1 0.60.2
astral-html 0.0.3 0.0.4
notify-rust 4.18.1 4.18.2
xattr 1.6.1 1.7.0
proptest 1.11.0 1.12.0
ratatui-textarea 0.9.2 0.9.3
signal-hook 0.4.4 0.4.5
tui-shimmer 0.1.3 0.1.7

Updates smallvec from 1.16.2 to 1.16.4

Release notes

Sourced from smallvec's releases.

v1.16.4

What's Changed

Full Changelog: servo/rust-smallvec@v1.16.3...v1.16.4

v1.16.3

What's Changed

Full Changelog: servo/rust-smallvec@v1.16.2...v1.16.3

Commits

Updates self-replace from 1.5.0 to 1.5.1

Changelog

Sourced from self-replace's changelog.

1.5.1

  • Widened the windows-sys dependency to >=0.52, <0.62 to avoid duplicate versions in dependency graphs. #34
  • Unsupported targets now fail with a clear compile error. #32
Commits

Updates tikv-jemallocator from 0.6.1 to 0.7.0

Release notes

Sourced from tikv-jemallocator's releases.

0.7.0

  • Reverse order of MAKEFLAGS priority (#152)
  • Define ALIGNOF_MAX_ALIGN_T for riscv32 (#153)
  • Remove build directory once build of jemalloc-sys finishes (#119)
  • Fix cross-compile for tier-3 riscv64a23 target (#141)
  • sys: support *-windows-gnullvm targets (#150)
  • Propagate LDFLAGS, if present (#155)
  • jemalloc-ctl: fix invalid update implementation
  • add new free ffi
  • Update jemalloc to 5.3.1 (#161)
  • Add profiling_libunwind feature (#159)
  • passthrough cc env/args using native cc features (#158)
Changelog

Sourced from tikv-jemallocator's changelog.

0.7.0 - 2026-05-25

  • Reverse order of MAKEFLAGS priority (#152)
  • Define ALIGNOF_MAX_ALIGN_T for riscv32 (#153)
  • Remove build directory once build of jemalloc-sys finishes (#119)
  • Fix cross-compile for tier-3 riscv64a23 target (#141)
  • sys: support *-windows-gnullvm targets (#150)
  • Propagate LDFLAGS, if present (#155)
  • jemalloc-ctl: fix invalid update implementation
  • add new free ffi
  • Update jemalloc to 5.3.1 (#161)
  • Add profiling_libunwind feature (#159)
  • passthrough cc env/args using native cc features (#158)
Commits

Updates rand from 0.9.5 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

  • Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
  • Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
  • Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

  • Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)

... (truncated)

Commits
  • 9e7d328 Prepare rand 0.10.3 (#1840)
  • f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
  • ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
  • c994eb1 docs: fix angle unit in quick start example (#1839)
  • 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
  • 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
  • bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
  • 521fab6 Stop pinning dependencies (#1820)
  • 3f7c433 Stop pinning dependencies
  • cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
  • Additional commits viewable in compare view

Updates insta from 1.48.0 to 1.49.0

Release notes

Sourced from insta's releases.

1.49.0

Release Notes

  • Allow Option<&OsStr> snapshot names, such as Path::file_name(), without explicit string conversion. #929 (@​dislogical)
  • Add prebuilt cargo-insta binaries for ARM64 Linux (aarch64-unknown-linux-gnu). #942 (@​aljohri)
  • Fix JSON serialization of maps keyed by unit enum variants. Keys use the serialized variant name, including serde renames. #934 (@​teddytennant)
  • Remove trailing semicolons from serialization macro bodies to avoid compiler warnings when used in expression position. #940 (@​Tiwalun)
  • Mention INSTA_UPDATE=always in snapshot mismatch hints for file snapshots. #927 (@​hiro-nikaitou)
  • Update the lockfile's tempfile and rustix dependencies to fix builds with newer Rust toolchains. #939
  • Fix cargo insta test --all-targets --test-runner nextest failing with "Can't mix --doc with other target selecting options". Like cargo test --all-targets, it no longer runs doctests. #460

Install cargo-insta 1.49.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.49.0/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.49.0/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.49.0

File Platform Checksum
cargo-insta-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
cargo-insta-x86_64-apple-darwin.tar.xz Intel macOS checksum
cargo-insta-x86_64-pc-windows-msvc.zip x64 Windows checksum
cargo-insta-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

This was written by Codex on behalf of @​max-sixty

Changelog

Sourced from insta's changelog.

1.49.0

  • Allow Option<&OsStr> snapshot names, such as Path::file_name(), without explicit string conversion. #929 (@​dislogical)
  • Add prebuilt cargo-insta binaries for ARM64 Linux (aarch64-unknown-linux-gnu). #942 (@​aljohri)
  • Fix JSON serialization of maps keyed by unit enum variants. Keys use the serialized variant name, including serde renames. #934 (@​teddytennant)
  • Remove trailing semicolons from serialization macro bodies to avoid compiler warnings when used in expression position. #940 (@​Tiwalun)
  • Mention INSTA_UPDATE=always in snapshot mismatch hints for file snapshots. #927 (@​hiro-nikaitou)
  • Update the lockfile's tempfile and rustix dependencies to fix builds with newer Rust toolchains. #939
  • Fix cargo insta test --all-targets --test-runner nextest failing with "Can't mix --doc with other target selecting options". Like cargo test --all-targets, it no longer runs doctests. #460
Commits
  • 5df39ce Release 1.49.0 (#944)
  • 1c28c19 Skip the separate doctest run for nextest with --all-targets (#941)
  • 064742e Build cargo-insta for aarch64-unknown-linux-gnu (#942)
  • 08b67d9 Remove trailing semicolons from macro bodies (#940)
  • 06858e1 fix: regenerate Cargo.lock to avoid broken rustix 0.37.27 (#939)
  • 70be034 Serialize unit enum variants used as JSON map keys (#934)
  • 54d0b96 feat: implement From for SnapshotValue with OsStr (#929)
  • 3d62572 [fix] Mention INSTA_UPDATE variable in snapshot mismatch errors (#927)
  • 1712876 ci: run CI on a pinned toolchain via rust-toolchain.toml; fix format-arg lint...
  • See full diff in compare view

Updates arboard from 3.6.1 to 3.7.0

Release notes

Sourced from arboard's releases.

v3.7.0

What's Changed

New Contributors

Full Changelog: 1Password/arboard@v3.6.1...v3.7.0

Commits
  • 5f5c863 Release 3.7.0
  • ab9663b Add example demonstrating wait_once
  • b9000b1 Add a wait_once to support waiting for just one clipboard request
  • 2ea0ff6 wayland: Factor out option setting into a method
  • b7e47c8 Update lib.rs
  • 2b2050e Bump step-security/setup-rust-toolchain from 1.16.1 to 2.0.0
  • 6b09682 Bump step-security/harden-runner from 2.20.0 to 2.21.1
  • 9f7b05c Bump actions/checkout from 4.3.1 to 7.0.0
  • 890e919 Apply GitHub Actions security best practices
  • d7c6cc9 bump windows-sys lower bound
  • Additional commits viewable in compare view

Updates schemars from 1.2.2 to 1.2.3

Release notes

Sourced from schemars's releases.

v1.2.3

Fixed

Changed

Changelog

Sourced from schemars's changelog.

[1.2.3] - 2026-10-12

Fixed

Changed

Commits
  • 4791bb7 v1.2.3
  • c6a89b7 Put the tag of an internally tagged enum first in properties
  • c5cd8b5 fix: schema creation panics with arbitrary precision JSON numbers
  • 766d70b Resolve unused_qualifications lint in crate and generated code - #541 (#541)
  • d07655e Resolve clippy error
  • See full diff in compare view

Updates unicode-width from 0.2.2 to 0.2.3

Commits
  • f8c8b20 Publish 0.2.3 (#100)
  • 5180748 Fix documentation of Kirat Rai rules (#97)
  • 0b85fb8 Update to Unicode 18 (#96)
  • 832f7ca Fix typo in docs (#90)
  • c7b4d42 Fix halfwidth katakana voiced and semi-voiced sound marks in width calculatio...
  • a3d4ee6 Fix mistake in the specification of Arabic lam-alef ligature (#92)
  • d8654db Split generated file into multiple files, separating static code from generat...
  • ab7a6dc Support char iter width (#83)
  • b10a4d5 Exclude development scripts from published packages (#80)
  • See full diff in compare view

Updates similar from 3.2.0 to 3.2.1

Changelog

Sourced from similar's changelog.

3.2.1

  • Improved real-world diffing performance substantially without changing the produced diffs. On a corpus of real source file revisions, line diffs run about 4x faster with Algorithm::Myers, 5x faster with Algorithm::Histogram, and 2.5x faster with Algorithm::Patience; word diffs run about 2x faster. This comes from a faster line tokenizer, a SipHash-1-3 content hash that consumes whole words (randomly keyed with std), cheaper integer-keyed lookup tables, hashing only the changed middle of Myers line diffs, flat occurrence tables in Histogram, and a gap buffer in the compaction pass that was quadratic on diffs with many ops. Allocation counts and peak memory dropped as well; in particular one sided and heavily unbalanced inputs no longer build index structures proportional to the larger side for Algorithm::Hunt, Algorithm::Histogram, and Algorithm::Patience.
  • Fixed Algorithm::Histogram overflowing the stack on inputs with many scattered changes. Pending ranges are now tracked on the heap, so stack usage no longer grows with the number of anchors. #105
  • Fixed TextMerge::labels writing carriage returns and newlines verbatim into conflict markers, which let a label add lines to the output that looked like merged content. Line terminators in labels are now replaced with spaces. #101
Commits
  • 71d4831 chore(release): prepare 3.2.1
  • b61e6c3 test(histogram): skip small stack tests on WASI
  • a4ee936 fix(histogram): track pending ranges on the heap
  • 96993d9 docs: add runnable example output gallery (#104)
  • 1c64280 docs(changelog): describe diff performance and memory improvements
  • a3da6ec perf(compact): use a gap buffer for large operation lists
  • ce3a403 perf(histogram): reuse indexes and bound unbalanced input allocations
  • 2bcae2f perf(myers): skip unchanged hashing and unused split bookkeeping
  • 5a5aa8d perf(text): accelerate line and word tokenization
  • 80bc240 perf(hash): accelerate content hashing and integer lookups
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates libc from 0.2.189 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

  • 32-bit Linux-GNU
  • 32-bit Linux-uClibc
  • 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
  • 32-bit Windows-GNU
  • ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...

Note that there may still be some changes to features gated by this config option, hence "unstable"

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

  • Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

  • Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
  • Apple: add ifaliasreq and in6_aliasreq (#5557)
  • FreeBSD: Add PT_* constants (#5625)
  • Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
  • Hurd: Add POSIX_SPAWN_* flags (#5578)
  • NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
  • OpenBSD: Add sensordev (#5534)
  • QuRT: Add isatty (#5618)
  • WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

  • FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

  • AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
  • Android: Make prop_info an extern type (#5561)
  • Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
  • FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

  • 32-bit Linux-GNU
  • 32-bit Linux-uClibc
  • 32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.
  • 32-bit Windows-GNU
  • ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:

RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
</tr></table>

... (truncated)

Commits
  • ccc2ff4 libc: Release 0.2.191
  • bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
  • ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
  • b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
  • 9c7f568 apple: add ifaliasreq and in6_aliasreq
  • 018c7e9 wasi: Add pthread_condattr_{get,set}clock
  • 2c77185 openbsd: add sensordev structure
  • e10813c hurd: Add missing POSIX_SPAWN_* flags
  • 2ea4bc1 Fix FreeBSD/aarch64
  • 6d666fd dragonfly: Parse version from headers rather than CLI
  • Additional commits viewable in compare view

Updates keyring-core from 1.0.0 to 1.0.1

Release notes

Sourced from keyring-core's releases.

v1.0.1: Improved testing

This release has no functional changes. The tests have been reworked and improved so that cargo-mutants no longer finds coverage gaps, either in the library API or in the two included credential stores (mock and sample).

What's Changed

New Contributors

Full Changelog: open-source-cooperative/keyring-core@v1.0.0...v1.0.1

Commits
  • 50fe5c4 Add cargo-mutants testing (#25)
  • 97b53d8 Bump version for release.
  • 4004baa Integrate review comments.
  • 6d2f8a5 Integrate review comments.
  • 1aa61ea Clean up .gitignore
  • 14d9c94 Improve tests to cover cargo-mutants misses.
  • 9f71d13 Set up cargo-mutants config.
  • ce48eaf Audit workflows with zizmor (#24)
  • 3649f1f Discard changes to .github/workflows/ci.yaml
  • aa5add8 Merge branch 'main' into upstream/ci-zizmor
  • Additional commits viewable in compare view

Updates arc-swap from 1.9.2 to 1.9.3

Changelog

Sourced from arc-swap's changelog.

1.9.3

  • rwlock-strategy feature: RwLock<()> as an explicit, opt-in strategy (ArcSwapAny<Arc<T>, RwLock<()>>). DefaultStrategy is unchanged (#210, #211).
Commits

Updates sha2 from 0.11.0 to 0.11.1

Commits

@dependabot
chore(deps): bump the all-rust-deps group across 1 directory with 40 …
2f03e83 
…updates

Bumps the all-rust-deps group with 40 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [smallvec](https://github.com/servo/rust-smallvec) | `1.16.2` | `1.16.4` |
| [self-replace](https://github.com/mitsuhiko/self-replace) | `1.5.0` | `1.5.1` |
| [tikv-jemallocator](https://github.com/tikv/jemallocator) | `0.6.1` | `0.7.0` |
| [rand](https://github.com/rust-random/rand) | `0.9.5` | `0.10.3` |
| [insta](https://github.com/mitsuhiko/insta) | `1.48.0` | `1.49.0` |
| [arboard](https://github.com/1Password/arboard) | `3.6.1` | `3.7.0` |
| [schemars](https://github.com/GREsau/schemars) | `1.2.2` | `1.2.3` |
| [unicode-width](https://github.com/unicode-rs/unicode-width) | `0.2.2` | `0.2.3` |
| [similar](https://github.com/mitsuhiko/similar) | `3.2.0` | `3.2.1` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.191` |
| [keyring-core](https://github.com/open-source-cooperative/keyring-core) | `1.0.0` | `1.0.1` |
| [arc-swap](https://github.com/vorner/arc-swap) | `1.9.2` | `1.9.3` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.19` | `0.7.20` |
| [serde-saphyr](https://github.com/bourumir-wyngs/serde-saphyr) | `1.3.0` | `2.0.0` |
| [hotpath](https://github.com/hotpath-rs/hotpath) | `0.29.2` | `0.30.1` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.26.1` | `1.29.0` |
| [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.33` | `0.4.34` |
| [syn](https://github.com/dtolnay/syn) | `3.0.6` | `3.0.9` |
| [webbrowser](https://github.com/amodm/webbrowser-rs) | `1.2.4` | `1.2.5` |
| [opentelemetry](https://github.com/open-telemetry/opentelemetry-rust) | `0.33.0` | `0.33.1` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.5.0` | `3.8.0` |
| [gpui-kit](https://github.com/longbridge/gpui-kit) | `0.8.0` | `0.8.1` |
| [objc2](https://github.com/madsmtm/objc2) | `0.6.4` | `0.6.5` |
| [plist](https://github.com/ebarnard/rust-plist) | `1.10.0` | `1.10.3` |
| [parking_lot](https://github.com/Amanieu/parking_lot) | `0.12.5` | `0.13.0` |
| [notify](https://github.com/notify-rs/notify) | `8.2.0` | `8.2.1` |
| [json5](https://github.com/callum-oakley/json5-rs) | `1.3.1` | `1.3.6` |
| [tree-sitter](https://github.com/tree-sitter/tree-sitter) | `0.27.0` | `0.27.1` |
| [lru](https://github.com/jeromefroe/lru-rs) | `0.18.5` | `0.19.0` |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.40.2` | `0.41.1` |
| [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.58.1` | `0.60.2` |
| [astral-html](https://github.com/astral-sh/astral-html) | `0.0.3` | `0.0.4` |
| [notify-rust](https://github.com/hoodie/notify-rust) | `4.18.1` | `4.18.2` |
| [xattr](https://github.com/Stebalien/xattr) | `1.6.1` | `1.7.0` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.11.0` | `1.12.0` |
| [ratatui-textarea](https://github.com/ratatui/ratatui-textarea) | `0.9.2` | `0.9.3` |
| [signal-hook](https://github.com/vorner/signal-hook) | `0.4.4` | `0.4.5` |
| [tui-shimmer](https://github.com/vinhnx/tui-shimmer) | `0.1.3` | `0.1.7` |



Updates `smallvec` from 1.16.2 to 1.16.4
- [Release notes](https://github.com/servo/rust-smallvec/releases)
- [Commits](servo/rust-smallvec@v1.16.2...v1.16.4)

Updates `self-replace` from 1.5.0 to 1.5.1
- [Changelog](https://github.com/mitsuhiko/self-replace/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/self-replace@1.5.0...1.5.1)

Updates `tikv-jemallocator` from 0.6.1 to 0.7.0
- [Release notes](https://github.com/tikv/jemallocator/releases)
- [Changelog](https://github.com/tikv/jemallocator/blob/main/CHANGELOG.md)
- [Commits](tikv/jemallocator@0.6.1...0.7.0)

Updates `rand` from 0.9.5 to 0.10.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.9.5...0.10.3)

Updates `insta` from 1.48.0 to 1.49.0
- [Release notes](https://github.com/mitsuhiko/insta/releases)
- [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md)
- [Commits](mitsuhiko/insta@1.48.0...1.49.0)

Updates `arboard` from 3.6.1 to 3.7.0
- [Release notes](https://github.com/1Password/arboard/releases)
- [Commits](1Password/arboard@v3.6.1...v3.7.0)

Updates `schemars` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/GREsau/schemars/releases)
- [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md)
- [Commits](GREsau/schemars@v1.2.2...v1.2.3)

Updates `unicode-width` from 0.2.2 to 0.2.3
- [Commits](unicode-rs/unicode-width@v0.2.2...v0.2.3)

Updates `similar` from 3.2.0 to 3.2.1
- [Changelog](https://github.com/mitsuhiko/similar/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/similar@3.2.0...3.2.1)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `libc` from 0.2.189 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.189...0.2.191)

Updates `keyring-core` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/open-source-cooperative/keyring-core/releases)
- [Commits](open-source-cooperative/keyring-core@v1.0.0...v1.0.1)

Updates `arc-swap` from 1.9.2 to 1.9.3
- [Changelog](https://github.com/vorner/arc-swap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vorner/arc-swap/commits/v1.9.3)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `tokio-util` from 0.7.19 to 0.7.20
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.19...tokio-util-0.7.20)

Updates `serde-saphyr` from 1.3.0 to 2.0.0
- [Release notes](https://github.com/bourumir-wyngs/serde-saphyr/releases)
- [Changelog](https://github.com/bourumir-wyngs/serde-saphyr/blob/master/CHANGELOG.md)
- [Commits](bourumir-wyngs/serde-saphyr@1.3.0...2.0.0)

Updates `hotpath` from 0.29.2 to 0.30.1
- [Release notes](https://github.com/hotpath-rs/hotpath/releases)
- [Changelog](https://github.com/hotpath-rs/hotpath/blob/main/CHANGELOG.md)
- [Commits](hotpath-rs/hotpath@v0.29.2...v0.30.1)

Updates `uuid` from 1.26.1 to 1.29.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.29.0)

Updates `ignore` from 0.4.33 to 0.4.34
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@ignore-0.4.33...ignore-0.4.34)

Updates `syn` from 3.0.6 to 3.0.9
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.6...3.0.9)

Updates `webbrowser` from 1.2.4 to 1.2.5
- [Release notes](https://github.com/amodm/webbrowser-rs/releases)
- [Changelog](https://github.com/amodm/webbrowser-rs/blob/main/CHANGELOG.md)
- [Commits](amodm/webbrowser-rs@v1.2.4...v1.2.5)

Updates `opentelemetry` from 0.33.0 to 0.33.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.32.md)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-0.33.0...opentelemetry-0.33.1)

Updates `rmcp` from 3.5.0 to 3.8.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.5.0...rmcp-v3.8.0)

Updates `gpui-kit` from 0.8.0 to 0.8.1
- [Release notes](https://github.com/longbridge/gpui-kit/releases)
- [Changelog](https://github.com/longbridge/gpui-kit/blob/main/release-notes.md)
- [Commits](longbridge/gpui-kit@v0.8.0...v0.8.1)

Updates `objc2` from 0.6.4 to 0.6.5
- [Commits](madsmtm/objc2@objc2-0.6.4...objc2-0.6.5)

Updates `plist` from 1.10.0 to 1.10.3
- [Release notes](https://github.com/ebarnard/rust-plist/releases)
- [Changelog](https://github.com/ebarnard/rust-plist/blob/master/CHANGELOG.md)
- [Commits](ebarnard/rust-plist@v1.10.0...v1.10.3)

Updates `parking_lot` from 0.12.5 to 0.13.0
- [Release notes](https://github.com/Amanieu/parking_lot/releases)
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](Amanieu/parking_lot@parking_lot-v0.12.5...parking_lot-v0.13.0)

Updates `notify` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/notify-rs/notify/releases)
- [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.1/CHANGELOG.md)
- [Commits](notify-rs/notify@notify-8.2.0...notify-8.2.1)

Updates `json5` from 1.3.1 to 1.3.6
- [Release notes](https://github.com/callum-oakley/json5-rs/releases)
- [Commits](callum-oakley/json5-rs@1.3.1...1.3.6)

Updates `tree-sitter` from 0.27.0 to 0.27.1
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.27.0...v0.27.1)

Updates `lru` from 0.18.5 to 0.19.0
- [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md)
- [Commits](jeromefroe/lru-rs@0.18.5...0.19.0)

Updates `rusqlite` from 0.40.2 to 0.41.1
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.40.2...v0.41.1)

Updates `jsonschema` from 0.58.1 to 0.60.2
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@cli-v0.58.1...ruby-v0.60.2)

Updates `astral-html` from 0.0.3 to 0.0.4
- [Release notes](https://github.com/astral-sh/astral-html/releases)
- [Changelog](https://github.com/astral-sh/astral-html/blob/main/CHANGELOG.md)
- [Commits](astral-sh/astral-html@v0.0.3...v0.0.4)

Updates `notify-rust` from 4.18.1 to 4.18.2
- [Release notes](https://github.com/hoodie/notify-rust/releases)
- [Changelog](https://github.com/hoodie/notify-rust/blob/main/CHANGELOG.md)
- [Commits](hoodie/notify-rust@v4.18.1...v4.18.2)

Updates `xattr` from 1.6.1 to 1.7.0
- [Release notes](https://github.com/Stebalien/xattr/releases)
- [Commits](Stebalien/xattr@v1.6.1...v1.7.0)

Updates `proptest` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.11.0...v1.12.0)

Updates `ratatui-textarea` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/ratatui/ratatui-textarea/releases)
- [Changelog](https://github.com/ratatui/ratatui-textarea/blob/main/CHANGELOG.md)
- [Commits](ratatui/ratatui-textarea@ratatui-textarea-v0.9.2...ratatui-textarea-v0.9.3)

Updates `signal-hook` from 0.4.4 to 0.4.5
- [Changelog](https://github.com/vorner/signal-hook/blob/master/CHANGELOG.md)
- [Commits](vorner/signal-hook@v0.4.4...v0.4.5)

Updates `tui-shimmer` from 0.1.3 to 0.1.7
- [Release notes](https://github.com/vinhnx/tui-shimmer/releases)
- [Changelog](https://github.com/vinhnx/tui-shimmer/blob/main/CHANGELOG.md)
- [Commits](vinhnx/tui-shimmer@v0.1.3...v0.1.7)

---
updated-dependencies:
- dependency-name: smallvec
  dependency-version: 1.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: self-replace
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: tikv-jemallocator
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: rand
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: insta
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: arboard
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: schemars
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: unicode-width
  dependency-version: 0.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: similar
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: libc
  dependency-version: 0.2.191
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: keyring-core
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: arc-swap
  dependency-version: 1.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: tokio-util
  dependency-version: 0.7.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: serde-saphyr
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-rust-deps
- dependency-name: hotpath
  dependency-version: 0.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: uuid
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: ignore
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: syn
  dependency-version: 3.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: webbrowser
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: opentelemetry
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: rmcp
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: gpui-kit
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: objc2
  dependency-version: 0.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: plist
  dependency-version: 1.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: parking_lot
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: notify
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: json5
  dependency-version: 1.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: tree-sitter
  dependency-version: 0.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: lru
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: rusqlite
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: jsonschema
  dependency-version: 0.60.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: astral-html
  dependency-version: 0.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: notify-rust
  dependency-version: 4.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: xattr
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: proptest
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-rust-deps
- dependency-name: ratatui-textarea
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: signal-hook
  dependency-version: 0.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
- dependency-name: tui-shimmer
  dependency-version: 0.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-rust-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 1, 2026
@coderabbitai

coderabbitai Bot commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 0de0dc6b-67ba-41a9-bf3c-bfa7ec2d80e5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@socket-security

socket-security Bot commented Nov 1, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedcargo/​tree-sitter@​0.27.0 ⏵ 0.27.1471009310080
Updatedcargo/​hotpath@​0.29.2 ⏵ 0.30.36010093100100
Updatedcargo/​libc@​0.2.189 ⏵ 0.2.19178 -910093 -7100100
Updatedcargo/​objc2@​0.6.4 ⏵ 0.6.57910093100100
Updatedcargo/​unicode-width@​0.2.2 ⏵ 0.2.3100 +210093 -710080
Updatedcargo/​gpui-kit@​0.8.0 ⏵ 0.8.18210093100100
Updatedcargo/​signal-hook@​0.4.4 ⏵ 0.4.58210093100100
Updatedcargo/​serde_json@​1.0.151 ⏵ 1.0.1548210093100100
Updatedcargo/​rustix@​1.1.4 ⏵ 1.1.68310093100100
Updatedcargo/​notify@​8.2.0 ⏵ 8.2.187 -1010093100100
Updatedcargo/​rmcp@​3.5.0 ⏵ 3.8.088100100100100
Updatedcargo/​insta@​1.48.0 ⏵ 1.49.09310093100100
Addedcargo/​lru@​0.19.010010093100100
Addedcargo/​parking_lot@​0.13.010010093100100
Addedcargo/​serde-saphyr@​2.0.09510093100100
Updatedcargo/​arboard@​3.6.1 ⏵ 3.7.09910093100100
Updatedcargo/​arc-swap@​1.9.2 ⏵ 1.9.310010093100100
Updatedcargo/​ignore@​0.4.33 ⏵ 0.4.349810093100100
Updatedcargo/​json5@​1.3.1 ⏵ 1.3.610010093100100
Updatedcargo/​keyring-core@​1.0.0 ⏵ 1.0.110010093100100
Updatedcargo/​notify-rust@​4.18.1 ⏵ 4.18.29810093100100
Updatedcargo/​opentelemetry@​0.33.0 ⏵ 0.33.19810093100100
Updatedcargo/​plist@​1.10.0 ⏵ 1.10.310010093100100
Updatedcargo/​proptest@​1.11.0 ⏵ 1.12.09910093100100
Updatedcargo/​ratatui-textarea@​0.9.2 ⏵ 0.9.310010093100100
Updatedcargo/​rusqlite@​0.40.2 ⏵ 0.41.110010093100100
Updatedcargo/​sha2@​0.11.0 ⏵ 0.11.110010093100100
Updatedcargo/​similar@​3.2.0 ⏵ 3.2.110010093100100
Updatedcargo/​smallvec@​1.16.2 ⏵ 1.16.410010093100100
Updatedcargo/​tokio-util@​0.7.19 ⏵ 0.7.2010010093100100
Updatedcargo/​tui-shimmer@​0.1.3 ⏵ 0.1.79910093100100
Updatedcargo/​uuid@​1.26.1 ⏵ 1.29.010010093100100
See 7 more rows in the dashboard

View full report

@vinhnx
vinhnx merged commit 6767cf2 into main Nov 2, 2026
4 of 5 checks passed
@vinhnx
vinhnx deleted the dependabot/cargo/all-rust-deps-f58a879180 branch November 2, 2026 04:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vinhnx