Skip to content

chore(deps): bump the cargo-minor-patch group with 8 updates - #1117

Merged
mosuka merged 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-6f044bac0f
Sep 14, 2026
Merged

chore(deps): bump the cargo-minor-patch group with 8 updates#1117
mosuka merged 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-6f044bac0f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-patch group with 8 updates:

Package From To
lru 0.18.3 0.18.4
pest 2.9.0 2.9.1
pest_derive 2.9.0 2.9.1
crossbeam-channel 0.5.16 0.5.17
crossbeam-deque 0.8.7 0.8.8
tokenizers 0.23.1 0.23.2
reqwest 0.13.4 0.13.5
rb-sys 0.9.124 0.9.130

Updates lru from 0.18.3 to 0.18.4

Changelog

Sourced from lru's changelog.

v0.18.4 - 2026-09-02

  • Add retain method.
Commits
  • 2504ad0 Merge pull request #245 from jeromefroe/jerome/prepare-0-18-4-release
  • 419b047 Prepare 0.18.4 release
  • 05ba36e Merge pull request #241 from ChrisJr404/add-retain
  • d84bc5e Revert retain to the simpler removal implementation
  • 36a810e Potential fix for pull request finding
  • e0d578c Merge remote-tracking branch 'up/master' into add-retain
  • 6e6ff26 retain: free the node returned by the map to avoid a dangling entry
  • 349676f Add retain method
  • See full diff in compare view

Updates pest from 2.9.0 to 2.9.1

Release notes

Sourced from pest's releases.

v2.9.1

What's Changed

New Contributors

Full Changelog: pest-parser/pest@v2.9.0...v2.9.1

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:

...
pest_derive = { version = "2.9", features = ["grammar-extras"] }
Commits

Updates pest_derive from 2.9.0 to 2.9.1

Release notes

Sourced from pest_derive's releases.

v2.9.1

What's Changed

New Contributors

Full Changelog: pest-parser/pest@v2.9.0...v2.9.1

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:

...
pest_derive = { version = "2.9", features = ["grammar-extras"] }
Commits

Updates crossbeam-channel from 0.5.16 to 0.5.17

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.17

  • Fix UB in bounded channel when SelectedOperation is leaked. (#1295)
  • Fix behavior inconsistency on already received case in at(). (#1296)
  • Handle overflow in bounded channel initialization. (#1301)
  • Use 64-bit index on 32-bit platforms if 64-bit atomic is available. (#1321)
  • Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)
Commits
  • 2920c98 Prepare for the next release
  • 808b75a ci: Update codegen job
  • 46774e0 channel: Document that send_timeout sends an available message even if the ti...
  • 89a3fe4 epoch: Make Shared::null const
  • 383d74a Use *::MAX associated constants
  • a30b825 channel,deque,queue: Use AtomicU64/u64 in head/tail index if available
  • a0e4d29 Replace iterative capacity growth with next_power_of_two (#1216)
  • 94f74d2 Recognize x86_64-unknown-linux-gnutsan in build script
  • 30e5963 epoch: Add missing fence emulation for tsan
  • 708a6bd Handle overflow in bounded channel/queue initialization (#1301)
  • Additional commits viewable in compare view

Updates crossbeam-deque from 0.8.7 to 0.8.8

Release notes

Sourced from crossbeam-deque's releases.

crossbeam-deque 0.8.8

  • Improve compatibility with ThreadSanitizer. (#1308)
  • Use 64-bit index on 32-bit platforms if 64-bit atomic is available. (#1321)
  • Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)
Commits
  • 2920c98 Prepare for the next release
  • 808b75a ci: Update codegen job
  • 46774e0 channel: Document that send_timeout sends an available message even if the ti...
  • 89a3fe4 epoch: Make Shared::null const
  • 383d74a Use *::MAX associated constants
  • a30b825 channel,deque,queue: Use AtomicU64/u64 in head/tail index if available
  • a0e4d29 Replace iterative capacity growth with next_power_of_two (#1216)
  • 94f74d2 Recognize x86_64-unknown-linux-gnutsan in build script
  • 30e5963 epoch: Add missing fence emulation for tsan
  • 708a6bd Handle overflow in bounded channel/queue initialization (#1301)
  • Additional commits viewable in compare view

Updates tokenizers from 0.23.1 to 0.23.2

Release notes

Sourced from tokenizers's releases.

v0.23.2

This is the last v0 release, we are moving to v1!!

More details coming soon 👀

What's Changed

New Contributors

Full Changelog: huggingface/tokenizers@v0.23.1...v0.23.2

Commits
  • 88a4498 add lock
  • e4ea65f real release
  • 7c5964b add lock
  • bc405ad push rc0
  • d582781 Add a ParityBpeTrainer example and list it in the trainers API docs (#2217)
  • 447890f fix(python): pin the ruff rule set so a ruff release can't redden main (#2292)
  • 68b3ab7 chore(node): take node security alerts from 33 to 0 (#2287)
  • 74ef81f ci: pin every action to one SHA, drop stale audit suppressions (#2291)
  • b26727f chore(node): drop 8 unused devDependencies (#2286)
  • 7c7cfd8 chore: remove stale examples (kills 50% of dependabot traffic) (#2285)
  • Additional commits viewable in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.
Commits
  • de55373 v0.13.5
  • 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
  • 9f06fd2 docs: improve description of JSON method (#3082)
  • 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
  • ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
  • 4e9a3c7 chore: add pull request template for human-written content
  • 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
  • 221abe9 chore: Remove unnecessary clones and a cast (#3071)
  • 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
  • fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
  • Additional commits viewable in compare view

Updates rb-sys from 0.9.124 to 0.9.130

Release notes

Sourced from rb-sys's releases.

v0.9.130

What's Changed

New Contributors

Full Changelog: oxidize-rb/rb-sys@v0.9.129...v0.9.130

v0.9.129

What's Changed

Full Changelog: oxidize-rb/rb-sys@v0.9.128...v0.9.129

v0.9.128

What's Changed

New Contributors

Full Changelog: oxidize-rb/rb-sys@v0.9.127...v0.9.128

v0.9.127

What's Changed

... (truncated)

Commits
  • 020a6c2 Bump to v0.9.130
  • c6e9c20 chore: group Dependabot security updates
  • d307b88 chore(deps): consolidate docsite npm security updates
  • 635ac6c chore(deps): bump the github-actions group with 16 updates (#779)
  • 6f6594b chore(deps): bump syn in the cargo-minor-patch group (#778)
  • 6b43028 Update Docusaurus to 3.10.2 (#777)
  • 28ea237 chore(deps): bump the cargo-minor-patch group with 2 updates (#763)
  • 9fa0ba8 Fix Cargo Dependabot group schema (#761)
  • 7200ffd Update mdast-util-to-hast to 13.2.1 (#758)
  • 1c85135 Configure weekly grouped Dependabot updates (#757)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo-minor-patch group with 8 updates
d46c468 
Bumps the cargo-minor-patch group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [lru](https://github.com/jeromefroe/lru-rs) | `0.18.3` | `0.18.4` |
| [pest](https://github.com/pest-parser/pest) | `2.9.0` | `2.9.1` |
| [pest_derive](https://github.com/pest-parser/pest) | `2.9.0` | `2.9.1` |
| [crossbeam-channel](https://github.com/crossbeam-rs/crossbeam) | `0.5.16` | `0.5.17` |
| [crossbeam-deque](https://github.com/crossbeam-rs/crossbeam) | `0.8.7` | `0.8.8` |
| [tokenizers](https://github.com/huggingface/tokenizers) | `0.23.1` | `0.23.2` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` |
| [rb-sys](https://github.com/oxidize-rb/rb-sys) | `0.9.124` | `0.9.130` |


Updates `lru` from 0.18.3 to 0.18.4
- [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md)
- [Commits](jeromefroe/lru-rs@0.18.3...0.18.4)

Updates `pest` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/pest-parser/pest/releases)
- [Commits](pest-parser/pest@v2.9.0...v2.9.1)

Updates `pest_derive` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/pest-parser/pest/releases)
- [Commits](pest-parser/pest@v2.9.0...v2.9.1)

Updates `crossbeam-channel` from 0.5.16 to 0.5.17
- [Release notes](https://github.com/crossbeam-rs/crossbeam/releases)
- [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md)
- [Commits](crossbeam-rs/crossbeam@crossbeam-channel-0.5.16...crossbeam-channel-0.5.17)

Updates `crossbeam-deque` from 0.8.7 to 0.8.8
- [Release notes](https://github.com/crossbeam-rs/crossbeam/releases)
- [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md)
- [Commits](crossbeam-rs/crossbeam@crossbeam-deque-0.8.7...crossbeam-deque-0.8.8)

Updates `tokenizers` from 0.23.1 to 0.23.2
- [Release notes](https://github.com/huggingface/tokenizers/releases)
- [Changelog](https://github.com/huggingface/tokenizers/blob/main/RELEASE.md)
- [Commits](huggingface/tokenizers@v0.23.1...v0.23.2)

Updates `reqwest` from 0.13.4 to 0.13.5
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5)

Updates `rb-sys` from 0.9.124 to 0.9.130
- [Release notes](https://github.com/oxidize-rb/rb-sys/releases)
- [Commits](oxidize-rb/rb-sys@v0.9.124...v0.9.130)

---
updated-dependencies:
- dependency-name: lru
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: pest
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: pest_derive
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: crossbeam-channel
  dependency-version: 0.5.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: crossbeam-deque
  dependency-version: 0.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokenizers
  dependency-version: 0.23.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: reqwest
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: rb-sys
  dependency-version: 0.9.130
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 12, 2026
@mosuka
mosuka merged commit d078ac3 into main Sep 14, 2026
24 checks passed
@mosuka
mosuka deleted the dependabot/cargo/cargo-minor-patch-6f044bac0f branch September 14, 2026 12:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mosuka