Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 17 updates - #25

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/production-dependencies-24750407f1
Open

chore(deps): bump the production-dependencies group across 1 directory with 17 updates#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/production-dependencies-24750407f1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Copy link
Copy Markdown

Bumps the production-dependencies group with 15 updates in the / directory:

Package From To
chrono 0.4.43 0.4.44
uuid 1.19.0 1.23.1
anyhow 1.0.100 1.0.102
tracing-subscriber 0.3.22 0.3.23
blake3 1.8.3 1.8.4
clap 4.5.54 4.5.60
image 0.25.9 0.25.10
tar 0.4.44 0.4.45
flate2 1.1.8 1.1.9
regex 1.12.2 1.12.3
rayon 1.11.0 1.12.0
tempfile 3.24.0 3.25.0
aws-credential-types 1.2.11 1.2.14
tokio 1.49.0 1.52.1
assert_cmd 2.1.2 2.2.1

Updates chrono from 0.4.43 to 0.4.44

Release notes

Sourced from chrono's releases.

0.4.44

What's Changed

Commits
  • c14b459 Bump version to 0.4.44
  • ea832c5 Add track_caller to non-deprecated functions
  • cfae889 Fix panic message in to_rfc2822
  • f8900b5 docs: match MSRV with Cargo.toml contents
  • See full diff in compare view

Updates uuid from 1.19.0 to 1.23.1

Release notes

Sourced from uuid's releases.

v1.23.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

v1.23.0

What's Changed

New Contributors

Special thanks

@​meng-xu-cs raised a series of bugs against the timestamp logic in uuid using automated tooling. The issues themselves were reasonably and responsibly presented and the end result is a better uuid library for everyone. Thanks!

Deprecations

This release includes the following deprecations:

  • Context: Renamed to ContextV1
  • Timestamp::from_gregorian: Renamed to Timestamp::from_gregorian_time

Change to Version::Max

Version::Max's u8 representation has changed from 0xff to 0x0f to match the value returned by Uuid::get_version_num.

Change to Uuid::get_version for the max UUID

Uuid::get_version will only return Some(Version::Max) if the UUID is actually the max UUID (all bytes are 0xff). Previously it would return Some if only the version field was 0x0f. This change matches the behaviour of the nil UUID, which only returns Some(Version::Nil) if the UUID is the nil UUID (all bytes are 0x00).

Full Changelog: uuid-rs/uuid@v1.22.0...v1.23.0

v1.22.0

What's Changed

... (truncated)

Commits
  • ca0c85f Merge pull request #879 from uuid-rs/cargo/v1.23.1
  • b4db015 prepare for 1.23.1 release
  • 771069d Merge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note
  • 80994a2 fix: Timestamp::from_gregorian deprecation note
  • 90c5be8 Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv
  • 8b8c4f4 Remove deprecated feature from wasm-bindgen dependency
  • 00ab922 Merge pull request #876 from uuid-rs/cargo/v1.23.0
  • 726ba45 prepare for 1.23.0 release
  • 996dade Merge pull request #875 from uuid-rs/fix/context-ordering
  • e140479 simplify a use stmt
  • Additional commits viewable in compare view

Updates anyhow from 1.0.100 to 1.0.102

Release notes

Sourced from anyhow's releases.

1.0.102

1.0.101

Commits
  • 5c657b3 Release 1.0.102
  • e737fb6 Merge pull request #442 from dtolnay/backtrace
  • 7fe62b5 Further simply backtrace conditional compilation
  • c8cb5ca Merge pull request #441 from dtolnay/backtrace
  • de27df7 Delete CI use of --features=backtrace
  • 9b67e5d Merge pull request #440 from dtolnay/backtrace
  • efdb11a Simplify std_backtrace conditional code
  • b8a9a70 Merge pull request #439 from dtolnay/backtrace
  • a42fc2c Remove feature = "backtrace" conditional code
  • 2a2a3ce Re-word backtrace feature comment
  • Additional commits viewable in compare view

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

  • Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

Updates blake3 from 1.8.3 to 1.8.4

Release notes

Sourced from blake3's releases.

1.8.4

version 1.8.4

Changes since 1.8.3:

  • Updated the digest dependency from v0.10 to v0.11. THIS IS A POTENTIALLY BREAKING CHANGE for callers using the traits-preview Cargo feature. But this is not considered a breaking change for the blake3 crate itself; see the docs for traits-preview.
  • Performance for WASM SIMD targets is improved by ~20% when the wasm32_simd feature is enabled. Contributed by @​lamb356.
Commits
  • b97a24f version 1.8.4
  • 0ebe469 update to new rustcrypto trait releases
  • d4b005a wasm32_simd: use i8x16_shuffle for rot8 and rot16
  • 6eebbbd fix a struct size mismatch in tests
  • fb1411e c: use SIZE_MAX instead of -1 for size_t sentinels, add <stdint.h>
  • See full diff in compare view

Updates clap from 4.5.54 to 4.5.60

Release notes

Sourced from clap's releases.

v4.5.60

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

v4.5.59

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

v4.5.58

[4.5.58] - 2026-02-11

v4.5.57

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

v4.5.56

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

v4.5.55

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args
Changelog

Sourced from clap's changelog.

[4.5.60] - 2026-02-19

Fixes

  • (help) Quote empty default values, possible values

[4.5.59] - 2026-02-16

Fixes

  • Command::ignore_errors no longer masks help/version on subcommands

[4.5.58] - 2026-02-11

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args
Commits
  • 33d24d8 chore: Release
  • 9332409 docs: Update changelog
  • b7adce5 Merge pull request #6166 from fabalchemy/fix-dynamic-powershell-completion
  • 009bba4 fix(clap_complete): Improve powershell registration
  • d89d57d chore: Release
  • f18b67e docs: Update changelog
  • 9d218eb Merge pull request #6165 from epage/shirt
  • 126440c fix(help): Correctly calculate padding for short-only args
  • 9e3c05e test(help): Show panic with short, valueless arg
  • c9898d0 test(help): Verify short with value
  • Additional commits viewable in compare view

Updates image from 0.25.9 to 0.25.10

Changelog

Sourced from image's changelog.

Version 0.25.10

Features:

  • Added GenericImage::copy_from_samples that can be implemented for images that can be efficiently filled from a matrix-layout of samples. Its default implementation will not defer to copy_from, consider implementing this if you specialized the latter.
  • Added GenericImageView::to_pixel_view that can be implemented to describe the buffer in terms our FlatSamples matrix layout, if applicable. This allows algorithms over generic images to run a specialized version where they can be more efficient over an raw input slice.
  • Added ImageBuffer::from_raw_bgr{,a} to efficiently byte-swap images into the RGBA layout of the buffer (#2596).
  • Added ExtendedColorType::Rgb5x1 to represent 5-bit colors as from TGA (#2609).
  • Added metadata::LoopCount and AnimationDecoder::loop_count to query if animations should repeat in a uniform manner (gif, webp, avif) (#2719, #2786).
  • load_from_memory now utilizes format detection hooks if any are applicable.

Structural changes:

  • Various changes that reduce the compile time of image on codegen by reducing the number of monomorphizations (#2804, #2800, #2807).
  • GenericImage::copy_from's default implementation tries copy_from_samples first if the source can be successfully cast with to_pixel_view.
  • <ImageBuffer as GenericImage>::copy_from is now must faster for ImageBuffer when the source implements GenericImageView::to_pixel_view.
  • <SubImage<_> as GenericImage>::copy_from inherits the previously mentioned optimizations for pixel sources when the inner type provides them. It also provides to_pixel_view based on the inner type.
  • ImageBuffer::as_flat_samples no longer requires AsRef<[P::Subpixel]> for the underlying container, just Deref (#2777).

Bug fixes:

  • Fixed a panic in TGA where indices have more bits than mapped colors (#2673).

Notable decoder changes:

  • Bump tiff to 0.11, supporting planar layout images (#2743).
  • ICC profiles can now be written for TIFF files (#2746)
  • Update ravif to 0.13, supporting EXIF (#2733).
  • Update jpeg-encoder to 0.7 bringing SIMD acceleration (#2736).
  • The pnm decoder decodes binary data quicker with fewer allocations (#2797).
  • The tga decoder handles 5-bit data and colormaps correctly (#2608, #2609).

Compatibility notes (new section):

  • Bump rust-version to 1.88.
  • Registered hooks now normalize the file extension they are registered against to ascii-lowercase. It is no longer necessary to register all such variants. This may conflate two hooks that previously hooked the same format with different casing.
Commits
  • 76e5718 Merge pull request #2836 from image-rs/version-0.25.10
  • 38b81dc Change notes for 0.25.10
  • 2fb9e61 Merge pull request #2835 from image-rs/ravif-tiff-integration
  • 4263471 Bump ravif/dav1d versions
  • a7781b3 Merge pull request #2833 from image-rs/backport-from-bgra
  • 6ea7369 Adjust bounds on from_raw_rgb
  • dd60a60 Add utility from_raw_bgr{,a} for ImageBuffer
  • 933251a Merge pull request #2832 from image-rs/backport-moxcms
  • 02c039e Update to moxcms 0.8.0 per reviewer feedback
  • 6ac2dd6 Allow moxcms 0.8.x versions
  • Additional commits viewable in compare view

Updates tar from 0.4.44 to 0.4.45

Commits
  • 096e3d1 Bump to 0.4.45 (#443)
  • 17b1fd8 archive: Prevent symlink-directory collision chmod attack (#442)
  • de1a587 archive: Unconditionally honor PAX size (#441)
  • 6071cbe ci: Consolidate workflows (#439)
  • ad1fde9 build-sys: Promote unused_code to an error
  • c8cb250 tests: Squash a warning
  • 638c495 ci: Add xtask infra + reverse dependency testing (#435)
  • 32a9bbb tests: Add RandomReader to exercise partial-read resilience (#436)
  • 9c5df0b Fix GNU long-name extension stream corruption on validation error (#434)
  • 88b1e3b Fix docs typo in header.rs (#431)
  • Additional commits viewable in compare view

Updates flate2 from 1.1.8 to 1.1.9

Commits
  • 19ddb18 Merge pull request #529 from folkertdev/update-zlib-rs-0.6.0
  • c956e12 upgrade zlib-rs to version 0.6.0
  • 21d5eeb Merge pull request #528 from wgyt/wgyt/patch
  • 54f8484 update LICENSE-MIT
  • f4924fe Merge pull request #527 from jongiddy/crc-tests
  • 8b9b7a6 Add tests to check data CRC
  • fd17c74 Merge pull request #526 from folkertdev/zlib-rs-crc32
  • aef26ac check that zlib-rs no longer compiles crc32fast
  • 5ec7647 make crc32fast an optional dependency
  • c584e97 use zlib-rs for crc32 (when available)
  • See full diff in compare view

Updates regex from 1.12.2 to 1.12.3

Changelog

Sourced from regex's changelog.

1.12.3 (2025-02-03)

This release excludes some unnecessary things from the archive published to crates.io. Specifically, fuzzing data and various shell scripts are now excluded. If you run into problems, please file an issue.

Improvements:

  • #1319: Switch from a Cargo exclude list to an include list, and exclude some unnecessary stuff.
Commits
  • b028e4f 1.12.3
  • 5e195de regex-automata-0.4.14
  • a3433f6 regex-syntax-0.8.9
  • 0c07fae regex-lite-0.1.9
  • 6a81006 cargo: exclude development scripts and fuzzing data
  • 4733e28 automata: fix onepass::DFA::try_search_slots panic when too many slots are ...
  • See full diff in compare view

Updates rayon from 1.11.0 to 1.12.0

Changelog

Sourced from rayon's changelog.

Release rayon 1.12.0 (2026-04-13)

  • Fixed a bug in parallel Range<char> when the end is 0xE000, just past the surrogate boundary, which was unsafely producing invalid char values.
  • The new method ParallelSlice::par_array_windows works like par_windows but with a constant length, producing &[T; N] items.
Commits
  • 7449d7d Merge #1093
  • b3d9e3f Release rayon 1.8.0 and rayon-core 1.12.0
  • 3fe51e5 Fix clippy::let_and_return
  • 082f215 Merge #1087
  • ea0c06d core: registry: Factor out "wait till out of work" part of the main loop.
  • 75524e2 Merge #1063
  • 01d2800 Ignore the multi-threaded test on emscripten/wasm
  • 40b59c0 core: Make use_current_thread error rather than panic when already in the pool.
  • f4db4d7 core: tests: Add some basic tests for ThreadPoolBuilder::use_current_thread.
  • 87274ad core: registry: Add some more documentation for ThreadPoolBuilder::use_curren...
  • Additional commits viewable in compare view

Updates tempfile from 3.24.0 to 3.25.0

Changelog

Sourced from tempfile's changelog.

3.25.0

  • Allow getrandom 0.4.x while retaining support for getrandom 0.3.x.
Commits

Updates aws-credential-types from 1.2.11 to 1.2.14

Commits

Updates bytes from 1.11.0 to 1.11.1

Release notes

Sourced from bytes's releases.

Bytes v1.11.1

1.11.1 (February 3rd, 2026)

  • Fix integer overflow in BytesMut::reserve
Changelog

Sourced from bytes's changelog.

1.11.1 (February 3rd, 2026)

  • Fix integer overflow in BytesMut::reserve
Commits

Updates tokio from 1.49.0 to 1.52.1

Release notes

Sourced from tokio's releases.

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

  • runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

  • io: AioSource::register_borrowed for I/O safety support (#7992)
  • net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

  • runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)
  • taskdump: add trace_with() for customized task dumps (#8025)
  • taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)
  • fs: support io_uring in AsyncRead for File (#7907)

Changed

  • runtime: improve spawn_blocking scalability with sharded queue (#7757)
  • runtime: use compare_exchange_weak() in worker queue (#8028)

Fixed

  • runtime: overflow second half of tasks when local queue is filled instead of first half (#8029)

Documented

  • docs: fix typo in oneshot::Sender::send docs (#8026)
  • docs: hide #[tokio::main] attribute in the docs of sync::watch (#8035)
  • net: add docs on ConnectionRefused errors with UDP sockets (#7870)

#7757: tokio-rs/tokio#7757 #7870: tokio-rs/tokio#7870 #7907: tokio-rs/tokio#7907 #7992: tokio-rs/tokio#7992 #8010: tokio-rs/tokio#8010 #8025: tokio-rs/tokio#8025 #8026: tokio-rs/tokio#8026 #8028: tokio-rs/tokio#8028 #8029: tokio-rs/tokio#8029

... (truncated)

Commits
  • 905c146 chore: prepare to release v1.52.1 (#8059)
  • 56aaa43 rt: revert #7757 to fix regression in spawn_blocking (#8057)
  • 57ff47a ci: update trybuild to expect output from rustc 1.95.0 (#8058)
  • 812de3e ci: bump taiki-e/cache-cargo-install-action from 1 to 3 (#8053)
  • ba82e73 ci: use Dependabot to keep github actions up to date (#8052)
  • 2e85f9d ci: replace cirrus-ci with freebsd-vm (#8041)
  • a7e1cd8 ci: update GitHub Actions workflows to use latest tool versions (#8047)
  • 5f7be0a chore: perpare 1.52.0 (#8045)
  • 36d12d2 taskdump: allow impl FnMut() in taskdumps instead of just fn() (#8040)
  • f943312 fs: support io-uring in AsyncRead for File (#7907)
  • Additional commits viewable in compare view

Updates libc from 0.2.180 to 0.2.185

Release notes

Sourced from libc's releases.

0.2.185

Added

  • EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)
  • Hexagon: add missing constants and fix types for linux-musl (#5042)
  • Redox: Add semaphore functions (#5051)
  • Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

  • Hexagon: Decouple time64 types from musl symbol redirects (#5040)
  • Horizon: Change POLL constants from c_short to c_int (#5045)

0.2.184

MSRV

This release increases the MSRV of libc to 1.65. With this update, you can now always use the core::ffi::c_* types with libc definitions, since libc has been changed to reexport from core rather than redefining them. (This usually worked before but had edge cases.) (#4972)

Added

  • BSD: Add IP_MINTTL to bsd (#5026)
  • Cygwin: Add TIOCM_DSR (#5031)
  • FreeBSD: Added xfile structe and file descriptor types (#5002)
  • Linux: Add CAN netlink bindings (#5011)
  • Linux: Add struct ethhdr (#4239)
  • Linux: Add struct ifinfomsg (#5012)
  • Linux: Define max_align_t for riscv64 (#5029)
  • NetBSD: Add missing CLOCK_ constants (#5020)
  • NuttX: Add _SC_HOST_NAME_MAX (#5004)
  • VxWorks: Add flock and F_*LCK constants (#4043)
  • WASI: Add all _SC_* sysconf constants (#5023)

Deprecated

The remaining fixed-width integer aliases, __uint128_t, __uint128, __int128_t, and __int128, have been deprecated. Use i128 and u128 instead. (#4343)

Fixed

  • breaking Redox: Fix signal action constant types (#5009)
  • EspIDF: Correct the value of DT_* constants (#5034)
  • Redox: Fix locale values and add RTLD_NOLOAD, some TCP constants (#5025)
  • Various: Use Padding::new(<zeroed>) rather than Padding::uninit() (#5036)

Changed

  • potentially breaking Linux: Add new fields to struct ptrace_syscall_info (#4966)

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.185 - 2026-04-13

Added

  • EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)
  • Hexagon: add missing constants and fix types for linux-musl (#5042)
  • Redox: Add semaphore functions (#5051)
  • Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

  • Hexagon: Decouple time64 types from musl symbol redirects (#5040)
  • Horizon: Change POLL constants from c_short to c_int (#5045)

0.2.184 - 2026-04-01

MSRV

This release increases the MSRV of libc to 1.65. With this update, you can now always use the core::ffi::c_* types with libc definitions, since libc has been changed to reexport from core rather than redefining them. (This usually worked before but had edge cases.) (#4972)

Added

  • BSD: Add IP_MINTTL to bsd (#5026)
  • Cygwin: Add TIOCM_DSR (#5031)
  • FreeBSD: Added xfile structe and file descriptor types (#5002)
  • Linux: Add CAN netlink bindings (#5011)
  • Linux: Add struct ethhdr (#4239)
  • Linux: Add struct ifinfomsg (#5012)
  • Linux: Define max_align_t for riscv64 (#5029)
  • NetBSD: Add missing CLOCK_ constants (#5020)
  • NuttX: Add _SC_HOST_NAME_MAX (#5004)
  • VxWorks: Add flock and F_*LCK constants (#4043)
  • WASI: Add all _SC_* sysconf constants (#5023)

Deprecated

The remaining fixed-width integer aliases, __uint128_t, __uint128, __int128_t, and __int128, have been deprecated. Use i128 and u128 instead. (#4343)

Fixed

  • breaking Redox: Fix signal action constant types (#5009)
  • EspIDF: Correct the value of DT_* constants (#5034)
  • Redox: Fix locale values and add RTLD_NOLOAD, some TCP constants (#5025)
  • Various: Use Padding::new(<zeroed>) rather than Padding::uninit() (#5036)

... (truncated)

Commits
  • 71d5bfc libc: Release 0.2.185
  • 1027d1c Revert "ci: Pin nightly to 2026-04-01"
  • 0e9c6e5 redox: Add semaphore functions
  • 24ef457 feat: add back support for gnu windows x86 in ci
  • aa75caf horizon: Change POLL constants from c_short to c_int
  • b7eda5a hexagon: add missing constants and fix types for linux-musl
  • d4613f9 newlib/espidf: Add espidf_picolibc cfg for picolibc O_* flag values
  • c89fd76 Fix typo in Padding comments
  • b3264b2 hexagon: decouple time64 types from musl symbol redirects
  • db1ebee ci: Pin nightly to 2026-04-01
  • Additional commits viewable in compare view

Updates assert_cmd from 2.1.2 to 2.2.1

Changelog

Sourced from assert_cmd's changelog.

[2.2.1] - 2026-04-17

Internal

  • Dependency update

[2.2.0] - 2026-03-10

Compatibility

  • Change cargo_bin bad paths to panics

[2.1.3] - 2026-03-10

Fixes

  • Un-deprecate cargo_bin
Commits
  • eea8a1c chore: Release assert_cmd version 2.2.1
  • cd6828c docs: Update changelog
  • c771f78 Merge pull request #286 from assert-rs/renovate/j178-prek-action-2.x
  • 4d63465 chore(deps): Update j178/prek-action action to v2
  • 4728aea Merge pull request #284 from sendittothenewts/anstream-v1
  • d935ff8 chore: Release assert_cmd version 2.2.0
  • 1631cf4 docs: Changelog
  • 3137b55 Merge pull request #283 from epage/panic
  • ebd79f1 fix(cargo): Panic, rather than return bad path
  • 79c9b0d chore: Release assert_cmd version 2.1.3
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 17 updates

Bumps the production-dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [chrono](https://github.com/chronotope/chrono) | `0.4.43` | `0.4.44` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.19.0` | `1.23.1` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.102` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.3` | `1.8.4` |
| [clap](https://github.com/clap-rs/clap) | `4.5.54` | `4.5.60` |
| [image](https://github.com/image-rs/image) | `0.25.9` | `0.25.10` |
| [tar](https://github.com/alexcrichton/tar-rs) | `0.4.44` | `0.4.45` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.8` | `1.1.9` |
| [regex](https://github.com/rust-lang/regex) | `1.12.2` | `1.12.3` |
| [rayon](https://github.com/rayon-rs/rayon) | `1.11.0` | `1.12.0` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.24.0` | `3.25.0` |
| [aws-credential-types](https://github.com/smithy-lang/smithy-rs) | `1.2.11` | `1.2.14` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.52.1` |
| [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.1.2` | `2.2.1` |



Updates `chrono` from 0.4.43 to 0.4.44
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.43...v0.4.44)

Updates `uuid` from 1.19.0 to 1.23.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.19.0...v1.23.1)

Updates `anyhow` from 1.0.100 to 1.0.102
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.100...1.0.102)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `blake3` from 1.8.3 to 1.8.4
- [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases)
- [Commits](BLAKE3-team/BLAKE3@1.8.3...1.8.4)

Updates `clap` from 4.5.54 to 4.5.60
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.54...clap_complete-v4.5.60)

Updates `image` from 0.25.9 to 0.25.10
- [Changelog](https://github.com/image-rs/image/blob/v0.25.10/CHANGES.md)
- [Commits](image-rs/image@v0.25.9...v0.25.10)

Updates `tar` from 0.4.44 to 0.4.45
- [Commits](composefs/tar-rs@0.4.44...0.4.45)

Updates `flate2` from 1.1.8 to 1.1.9
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.8...1.1.9)

Updates `regex` from 1.12.2 to 1.12.3
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.12.2...1.12.3)

Updates `rayon` from 1.11.0 to 1.12.0
- [Changelog](https://github.com/rayon-rs/rayon/blob/main/RELEASES.md)
- [Commits](rayon-rs/rayon@rayon-core-v1.11.0...rayon-core-v1.12.0)

Updates `tempfile` from 3.24.0 to 3.25.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/commits)

Updates `aws-credential-types` from 1.2.11 to 1.2.14
- [Release notes](https://github.com/smithy-lang/smithy-rs/releases)
- [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-rs/commits)

Updates `bytes` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.11.0...v1.11.1)

Updates `tokio` from 1.49.0 to 1.52.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.52.1)

Updates `libc` from 0.2.180 to 0.2.185
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.185/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.180...0.2.185)

Updates `assert_cmd` from 2.1.2 to 2.2.1
- [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_cmd@v2.1.2...v2.2.1)

---
updated-dependencies:
- dependency-name: chrono
  dependency-version: 0.4.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: uuid
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: anyhow
  dependency-version: 1.0.102
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: blake3
  dependency-version: 1.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: clap
  dependency-version: 4.5.60
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: image
  dependency-version: 0.25.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tar
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: flate2
  dependency-version: 1.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: regex
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: rayon
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tempfile
  dependency-version: 3.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: aws-credential-types
  dependency-version: 1.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bytes
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tokio
  dependency-version: 1.52.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: libc
  dependency-version: 0.2.185
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: assert_cmd
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Apr 20, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from aecs4u as a code owner April 20, 2026 17:32
@github-actions github-actions Bot added the cli label Apr 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants