Skip to content

chore(deps): bump the actions group across 1 directory with 17 updates - #20

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/actions-edc8867c41
Closed

chore(deps): bump the actions group across 1 directory with 17 updates#20
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/actions-edc8867c41

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the actions group with 17 updates in the / directory:

Package From To
phoenix-rise 0.3.1 0.3.4
clap 4.6.0 4.6.4
tokio 1.52.3 1.53.1
serde 1.0.228 1.0.229
serde_json 1.0.150 1.0.151
toml 0.8.23 1.1.0+spec-1.1.0
aes-gcm 0.10.3 0.11.0
rand 0.8.5 0.10.1
zeroize 1.8.2 1.9.0
colored 2.2.0 3.1.1
anyhow 1.0.102 1.0.104
thiserror 2.0.18 2.0.19
chrono 0.4.44 0.4.45
semver 1.0.27 1.0.28
rpassword 5.0.1 7.5.4
rmcp 1.3.0 2.2.0
dirs 5.0.1 6.0.0

Updates phoenix-rise from 0.3.1 to 0.3.4

Release notes

Sourced from phoenix-rise's releases.

Rise Rust v0.3.4

  • Rust: phoenix-rise workspace v0.3.4

Rust

v0.3.4 - 2026-07-08

Source Phoenix commit: 6051225fb045fbb5b6a454bd445e7fc2e31e5722

Summary

  • Reworked the per-market liquidation price calculation (math) to search for the actual tick boundary where an account becomes liquidatable, replacing the previous closed-form algebraic approximation. This correctly returns the current mark price when an account is already liquidatable and properly accounts for target-market limit-order maintenance instead of treating it as a fixed outside term.
  • Added a new projected liquidation price API — projected_liquidation_price, ProjectedLiquidation, ProjectedLiquidationFill, ProjectedLiquidationParams, and TraderPortfolioMargin::projected_liquidation_prices — that simulates a trader's own position-side resting orders filling along the adverse price path, for risk/explainer displays distinct from the static Hawkeye-compatible liquidation price.
  • Added initial_margin_for_asset_with_mark_price and calculate_liquidation_price_usd_with_target_limit_order_maintenance as supporting public entry points for callers that need to supply an explicit mark price or an additional target-market limit-order maintenance term.

Breaking Changes

  • None identified in the synced diff.

Consumer Notes

  • calculate_liquidation_price_usd keeps its existing signature and default behavior (it now delegates to the new maintenance-coefficient variant with 0.0), so existing callers are unaffected.
  • Liquidation prices from portfolio margin calculations are now solved as an exact tick boundary rather than a closed-form approximation, so returned values may shift slightly (now quantized to the market's tick size) and should be more accurate, particularly for accounts with resting orders in the target market.
  • Consumers wanting "what if my resting orders fill before liquidation" estimates can adopt TraderPortfolioMargin::projected_liquidation_prices alongside the existing static liquidation price fields; it's an additive risk estimate, not a replacement for the static value.

Rise Rust v0.3.3

  • Rust: phoenix-rise workspace v0.3.3

Rust

v0.3.3 - 2026-07-08

Source Phoenix commit: 25625a376965069d216ba53f8bbf0457f097a927

Summary

  • math: LimitOrderMarginState now tracks best bid/ask prices and reduce-only order size separately, and initial margin calculations reserve additional collateral for the mark-to-market loss a resting order would incur if it filled at its limit price (adverse fill loss), including for reduce-only orders.
  • math: Reduce-only order sizes are now capped to the lots that can actually reduce the trader's existing position before they factor into margin.
  • math: Added a is_zero() helper on the numeric wrapper types generated by the shared basic_num! macro (e.g. BaseLots, SignedBaseLots, QuoteLots).

Breaking Changes

  • LimitOrderMarginState::new(...) has been removed. Construct margin state via the new LimitOrderMarginState::from_orders(orders, position), which takes an iterator of the new LimitOrderSummary type plus the trader's current signed base-lot position.
  • LimitOrderMarginState gained new fields (lowest_ask, highest_bid, total_reduce_only_ask_base_lots, total_reduce_only_bid_base_lots) and can no longer be built with a struct literal (an internal marker field enforces construction through from_orders/empty). Any code building this struct directly will need to switch to the canonical constructors.
  • LimitOrder::aggregate_margin_state(orders) now requires an additional position: SignedBaseLots argument.
  • Margin requirements can increase for accounts with resting limit orders priced away from mark (bids above mark / asks below mark), since margin now reserves the potential adverse-fill loss on those orders — including reduce-only orders, which previously contributed no margin at all.

Consumer Notes

... (truncated)

Commits
  • 09f59aa sync: Rise Rust v0.3.4 from phoenix 6051225fb045 (#71)
  • e68aedf sync: Rise TypeScript v0.4.66 from phoenix 6051225fb045 (#70)
  • d3d34cf sync: Rise Rust v0.3.3 (#69)
  • d22b4a2 sync: Rise TypeScript v0.4.65 from phoenix 25625a376965 (#68)
  • ca32dfd sync: Rise Rust v0.3.2 from phoenix 84c3feb1a2f5 (#67)
  • 7c588e3 sync: Rise TypeScript v0.4.64 from phoenix 84c3feb1a2f5 (#66)
  • 1778fc3 sync: Rise TypeScript v0.4.63 from phoenix 014384041aa1 (#65)
  • a99da52 sync: Rise TypeScript v0.4.62 from phoenix e427d47ea42a (#64)
  • d74267d sync: Rise TypeScript v0.4.61 from phoenix 64e433145ad2 (#63)
  • c9cc43a sync: Rise TypeScript v0.4.60 from phoenix cf8419bc21f9 (#60)
  • See full diff in compare view

Updates clap from 4.6.0 to 4.6.4

Release notes

Sourced from clap's releases.

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one

v4.6.1

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Changelog

Sourced from clap's changelog.

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Commits
  • 87ec1ad chore: Release
  • 78f2529 docs: Update changelog
  • b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
  • 74c6666 fix(complete): Keep zsh candidate order
  • d142d8f Merge pull request #6360 from epage/string
  • ba89563 style: Prefer explicit string operations
  • bea966e Merge pull request #6359 from epage/man
  • b811986 chore(man):Remove unused required-features
  • 0010bf2 Merge pull request #6358 from clap-rs/renovate/crate-ci-typos-1.x
  • bab9b24 chore(deps): Update compatible (dev) (#6357)
  • Additional commits viewable in compare view

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

  • time: fix alt timer cancellation and insertion race (#8252)

Documented

  • runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

  • fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
  • metrics: add task schedule latency metric (#7986)
  • net: add SocketAddr methods to Unix sockets (#8144)

Changed

  • io: add #[inline] to IO trait impls for in-memory types (#8242)
  • net: implement UCred::pid on FreeBSD (#8086)
  • net: support Nuttx target os (#8259)
  • signal: refactor global variables on Windows (#8231)
  • sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
  • taskdump: support taskdumps on s390x (#8192)
  • time: add #[track_caller] to timeout_at() (#8077)
  • time: consolidate mutex locks on spurious poll (#8124)
  • time: defer waker clone on spurious poll (#8107)
  • time: move lazy-registration state into Sleep (#8132)
  • tracing: remove unnecessary span clone (#8126)

Fixed

  • io: do not treat zero-length reads as EOF in Chain (#8251)
  • net: use getpeereid for QNX peer credentials (#8270)
  • runtime: avoid illegal state in FastRand (#8078)
  • sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
  • taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
  • time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates toml from 0.8.23 to 1.1.0+spec-1.1.0

Commits

Updates aes-gcm from 0.10.3 to 0.11.0

Commits

Updates rand from 0.8.5 to 0.10.1

Changelog

Sourced from rand's changelog.

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

#1632: rust-random/rand#1632 #1642: rust-random/rand#1642 #1649: rust-random/rand#1649 #1652: rust-random/rand#1652 #1653: rust-random/rand#1653 #1659: rust-random/rand#1659 #1665: rust-random/rand#1665 #1669: rust-random/rand#1669 #1674: rust-random/rand#1674 #1677: rust-random/rand#1677 #1693: rust-random/rand#1693 #1695: rust-random/rand#1695 #1697: rust-random/rand#1697

... (truncated)

Commits

Updates zeroize from 1.8.2 to 1.9.0

Commits

Updates colored from 2.2.0 to 3.1.1

Release notes

Sourced from colored's releases.

v3.1.1

No release notes provided.

v3.1.0

No release notes provided.

v3.0.0

  • [BREAKING CHANGE]: Upgrade MSRV to 1.80 and remove the then unnecessary lazy_static dependency.
Changelog

Sourced from colored's changelog.

Unreleased

  • Added methods ansi_color and on_ansi_color to Colorize.

3.0.0

  • [BREAKING CHANGE]: Upgrade MSRV to 1.80 and remove the then unnecessary lazy_static dependency.
Commits

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

  • Update syn dev-dependency to version 3

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)
Commits
  • 1dbe186 Release 1.0.104
  • f6479f8 Update to syn 3
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • See full diff in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

  • Update to syn 3
Commits
  • e13a785 Release 2.0.19
  • 0a0e76c Update to syn 3
  • ec42ea7 Update actions/upload-artifact@v6 -> v7
  • 4178c4a Update actions/checkout@v6 -> v7
  • 7214e0e Ignore items_after_statements pedantic clippy lint in test
  • febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
  • c50e387 chore: improve thiserror maintenance path
  • d4a2507 Raise minimum tested compiler to rust 1.85
  • 99e8a6c Unpin CI miri toolchain
  • 9ac165c Pin CI miri to nightly-2026-02-11
  • Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

Commits
  • 1703382 Prepare 0.4.45 release
  • 881f9ab tz_data: fix tzdata locations on Android
  • f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
  • c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
  • 120686c Bump codecov/codecov-action from 5 to 6
  • See full diff in compare view

Updates semver from 1.0.27 to 1.0.28

Release notes

Sourced from semver's releases.

1.0.28

  • Documentation improvements
Commits
  • 7625c7a Release 1.0.28
  • fd404d0 Merge pull request 351 from czy-29/master
  • f75f26e The doc_auto_cfg and doc_cfg features have been merged
  • 9e2bfa2 Enable serde on docs.rs and automatically add serde flag to the docs
  • 8591f23 Unpin CI miri toolchain
  • 66bdd2c Pin CI miri to nightly-2026-02-11
  • 324ffce Switch from cargo bench to criterion
  • 34133a5 Update actions/upload-artifact@v5 -> v6
  • 7f935ff Update actions/upload-artifact@v4 -> v5
  • c07fb91 Switch from test::black_box to std::hint::black_box
  • Additional commits viewable in compare view

Updates rpassword from 5.0.1 to 7.5.4

Release notes

Sourced from rpassword's releases.

v7.5.4

No functional changes.

I've added license checks with Cargo Deny to ensure that the Apache 2.0 license is compatible with dependencies.

This release also updates the description to make it clear this library is cross-platform on crates.io.

v7.5.3

Fixes compile errors with Rust 1.85. Thanks @​nwalfield for reporting in conradkleinespel/rpassword#130.

Backwards compatible. No breaking change.

v7.5.2

Fixes a Unicode parsing bug which could lead to unwarranted panic (conradkleinespel/rpassword@6c19a1e).

Backwards compatible. No breaking change.

v7.5.1

This release fixes a cross-platform compilation issue that appeared in v.7.5.0 (conradkleinespel/rpassword@60ee071).

Thanks @​aharpervc for bringing this to my attention in conradkleinespel/rpassword#126.

Backwards compatible. No breaking change.

v7.5.0

This release comes with lots of stuff. It should be fully backward compatible.

New features

  • Support for masking or partially masking a password as it's being typed. Thank you, @​chipsenkbeil, for your contribution.
  • New API. The documentation has been vastly improved to support this, see https://docs.rs/rpassword/. To sum up, you can now call read_password_with_config(config) and there is a ConfigBuilder that allows you to configure how passwords should be read. This makes the library much more flexible and means new options will be added without breaking existing code.

Fixes

  • Fix for CVE-2025-64170 which affects rpassword on versions v7.4.0 and below. Thank you, @​squell and @​DevLaTron, for reporting this.
  • Better support for multibyte characters and more reliable handling of control characters and terminal escape sequences. Thank you again, @​chipsenkbeil, for your contribution.

Deprecations

  • _from_bufread functions have been deprecated. You are encouraged to migrate to _with_config functions. See UPGRADE.md as well as the documentation which has examples that you can most likely drop into your code without other changes.

Misc

  • Update of the windows-sys dependency.
  • Update Rust edition from 2018 to 2024.
  • Better cross-platform testing, through more unit tests and a CI that runs Linux, Windows and Wasm.

Feedback is very much welcome.

... (truncated)

Upgrade guide

Sourced from rpassword's upgrade guide.

Upgrade Policy for rpassword

Overview

This policy outlines the versioning and upgrade path for rpassword.

Please report any upgrading issues or feedback to the project's issue tracker.

Versioning Rules

Patch Versions (x.y.Z)

  • Definition: Bug fixes, performance improvements, and minor documentation updates.
  • Compatibility: Fully backward-compatible. No breaking changes.
  • User Action: Safe to upgrade without code modifications.

Minor Versions (x.Y.z)

  • Definition: New features, enhancements, and deprecations.
  • Compatibility: Backward-compatible. Deprecated APIs remain functional but emit warnings.
  • User Action:
    1. Upgrade to the latest minor version.
    2. Address deprecation warnings to prepare for the next major version.

Major Versions (X.y.z)

  • Definition: Breaking changes, API redesigns, or significant architectural shifts.
  • Compatibility: Not backward-compatible. Deprecated APIs may be removed.
  • User Action:
    1. Upgrade to the latest minor version of the current major release.
    2. Fix all deprecation warnings.
    3. Upgrade to the next major version.
Commits
  • 1151510 add license checks
  • 3ca2ece bump to 7.5.3
  • ed863bf remove cargo-tarpaulin build incompatible with rust 1.85 from ci
  • 479012d fixes compile errors with rust 1.85
  • 6ee4708 update nix config to use rust 1.85
  • 6d3518d run ci with rust 1.85
  • e176edc bump to 7.5.2
  • 6c19a1e make reading utf8 chars more reliable
  • 1ecf07d bump to 7.5.1
  • 60ee071 remove errno clean up, not cross-platform
  • Additional commits viewable in compare view

Updates rmcp from 1.3.0 to 2.2.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v2.2.0

Added

  • [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

  • fill missing fully qualified syntax in prompt_handler macros (#866)

Other

  • align README examples with v2 model API (#928)

rmcp-v2.2.0

Added

  • reject auth servers lacking S256 PKCE support (#955)

Fixed

  • pass client conformance suite (#960)
  • don't respond to cancelled requests (#957)
  • fail orphaned streamable HTTP responses on reinit (#914)
  • address 2025-11-25 conformance audit findings (#951)

rmcp-macros-v2.1.0

Added

  • [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

  • fill missing fully qualified syntax in prompt_handler macros (#866)

Other

  • align README examples with v2 model API (#928)

rmcp-v2.1.0

Added

  • add SEP-414 trace context meta accessors (#910)
  • add SEP-2575 meta helpers (#942)

Fixed

  • (transport) make AsyncRwTransport::receive cancel-safe (#941) (#947)
  • (auth) preserve refresh_token when refresh response omits it (#949)
  • block redirect header leaks (#936)
  • don't respond to unparsable messages (#940)

... (truncated)

Commits
  • 5195776 chore: release v2.2.0 (#953)
  • 6dd7b85 chore(deps): update p256 requirement from 0.13 to 0.14 (#959)
  • a037935 fix: pass client conformance suite (#960)
  • dbda50c fix: don't respond to cancelled requests (#957)
  • 45f2f72 fix: fail orphaned streamable HTTP responses on reinit (#914)
  • 95490fa feat: reject auth servers lacking S256 PKCE support (#955)
  • bdf0c32 fix: address 2025-11-25 conformance audit findings (

@dependabot
chore(deps): bump the actions group across 1 directory with 17 updates
07b1be1 
Bumps the actions group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [phoenix-rise](https://github.com/Ellipsis-Labs/rise-public) | `0.3.1` | `0.3.4` |
| [clap](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.4` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [toml](https://github.com/toml-rs/toml) | `0.8.23` | `1.1.0+spec-1.1.0` |
| [aes-gcm](https://github.com/RustCrypto/AEADs) | `0.10.3` | `0.11.0` |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.10.1` |
| [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.0` |
| [colored](https://github.com/mackwic/colored) | `2.2.0` | `3.1.1` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` |
| [semver](https://github.com/dtolnay/semver) | `1.0.27` | `1.0.28` |
| [rpassword](https://github.com/conradkleinespel/rpassword) | `5.0.1` | `7.5.4` |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.3.0` | `2.2.0` |
| [dirs](https://github.com/soc/dirs-rs) | `5.0.1` | `6.0.0` |



Updates `phoenix-rise` from 0.3.1 to 0.3.4
- [Release notes](https://github.com/Ellipsis-Labs/rise-public/releases)
- [Commits](Ellipsis-Labs/rise-public@rise-rust-v0.3.1...rise-rust-v0.3.4)

Updates `clap` from 4.6.0 to 4.6.4
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.4)

Updates `tokio` from 1.52.3 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `toml` from 0.8.23 to 1.1.0+spec-1.1.0
- [Commits](toml-rs/toml@toml-v0.8.23...toml-v1.1.0)

Updates `aes-gcm` from 0.10.3 to 0.11.0
- [Commits](RustCrypto/AEADs@aes-gcm-v0.10.3...aes-gcm-v0.11.0)

Updates `rand` from 0.8.5 to 0.10.1
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...0.10.1)

Updates `zeroize` from 1.8.2 to 1.9.0
- [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.0)

Updates `colored` from 2.2.0 to 3.1.1
- [Release notes](https://github.com/mackwic/colored/releases)
- [Changelog](https://github.com/colored-rs/colored/blob/master/CHANGELOG.md)
- [Commits](colored-rs/colored@v2.2.0...v3.1.1)

Updates `anyhow` from 1.0.102 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.102...1.0.104)

Updates `thiserror` from 2.0.18 to 2.0.19
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.19)

Updates `chrono` from 0.4.44 to 0.4.45
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.44...v0.4.45)

Updates `semver` from 1.0.27 to 1.0.28
- [Release notes](https://github.com/dtolnay/semver/releases)
- [Commits](dtolnay/semver@1.0.27...1.0.28)

Updates `rpassword` from 5.0.1 to 7.5.4
- [Release notes](https://github.com/conradkleinespel/rpassword/releases)
- [Upgrade guide](https://github.com/conradkleinespel/rpassword/blob/main/UPGRADE.md)
- [Commits](conradkleinespel/rpassword@v5.0.1...v7.5.4)

Updates `rmcp` from 1.3.0 to 2.2.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.3.0...rmcp-v2.2.0)

Updates `dirs` from 5.0.1 to 6.0.0
- [Commits](https://github.com/soc/dirs-rs/commits)

---
updated-dependencies:
- dependency-name: phoenix-rise
  dependency-version: 0.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: clap
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: toml
  dependency-version: 1.1.0+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: aes-gcm
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: rand
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: zeroize
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: colored
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: thiserror
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: chrono
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: semver
  dependency-version: 1.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: rpassword
  dependency-version: 7.5.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: rmcp
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: dirs
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 30, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/actions-edc8867c41 branch July 30, 2026 19:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants