Skip to content

Bump the dev-dependencies group across 1 directory with 10 updates#6

Closed
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/cargo/dev-dependencies-6b1bcc007a
Closed

Bump the dev-dependencies group across 1 directory with 10 updates#6
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/cargo/dev-dependencies-6b1bcc007a

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 1, 2025 •
edited
Loading

Bumps the dev-dependencies group with 10 updates in the / directory:

Package From To
clap 4.5.31 4.5.48
anyhow 1.0.97 1.0.100
teloxide 0.13.0 0.17.0
tracing-subscriber 0.3.19 0.3.20
tokio 1.44.0 1.47.1
tokio-util 0.7.13 0.7.16
rand 0.9.0 0.9.2
sea-orm 1.1.7 1.1.10
sea-orm-migration 1.1.7 1.1.10
parking_lot 0.12.3 0.12.4

Updates clap from 4.5.31 to 4.5.48

Release notes

Sourced from clap's releases.

v4.5.48

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry

v4.5.47

[4.5.47] - 2025-09-02

Features

  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible

Fixes

  • (derive) Update runtime error text to match clap

v4.5.46

[4.5.46] - 2025-08-26

Features

  • Expose StyledStr::push_str

v4.5.45

[4.5.45] - 2025-08-12

Fixes

  • (unstable-v5) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

v4.5.44

[4.5.44] - 2025-08-11

Features

  • Add Command::mut_subcommands

v4.5.43

[4.5.43] - 2025-08-06

Fixes

  • (help) In long help, list Possible Values before defaults, rather than after, for a more consistent look

... (truncated)

Changelog

Sourced from clap's changelog.

[4.5.48] - 2025-09-19

Documentation

  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry

[4.5.47] - 2025-09-02

Features

  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible

Fixes

  • (derive) Update runtime error text to match clap

[4.5.46] - 2025-08-26

Features

  • Expose StyledStr::push_str

[4.5.45] - 2025-08-12

Fixes

  • (unstable-v5) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

[4.5.44] - 2025-08-11

Features

  • Add Command::mut_subcommands

[4.5.43] - 2025-08-06

Fixes

  • (help) In long help, list Possible Values before defaults, rather than after, for a more consistent look

[4.5.42] - 2025-07-30

Fixes

  • Include subcommand visible long aliases in --help

... (truncated)

Commits
  • c3a1ddc chore: Release
  • 4460ff4 docs: Update changelog
  • 54947a1 Merge pull request #5981 from mernen/fix-bash-clap-complete-space
  • fd3f6d2 fix(complete): Restore nospace in bash
  • 2f6a108 test(complete): Demonstrate current behavior
  • f88be57 style: Ensure consistent newlines
  • f209bce chore: Release
  • f33ff7f docs: Update changelog
  • bf06e6f Merge pull request #5974 from kryvashek/support-clearing-args-matches
  • 5d357ad feat(parser): Added ArgMatches::try_clear_id()
  • Additional commits viewable in compare view

Updates anyhow from 1.0.97 to 1.0.100

Release notes

Sourced from anyhow's releases.

1.0.100

  • Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#426)

1.0.99

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#420)

1.0.98

Commits
  • 18c2598 Release 1.0.100
  • f271988 Merge pull request #426 from dtolnay/clippyfmt
  • 52f2115 Mark macros with clippy::format_args
  • da5fd9d Raise minimum tested compiler to rust 1.76
  • 211e409 Opt in to generate-macro-expansion when building on docs.rs
  • b48fc02 Enforce trybuild >= 1.0.108
  • d5f59fb Update ui test suite to nightly-2025-09-07
  • 238415d Update ui test suite to nightly-2025-08-24
  • 3bab070 Update actions/checkout@v4 -> v5
  • 4249254 Order cap-lints flag in the same order as thiserror build script
  • Additional commits viewable in compare view

Updates teloxide from 0.13.0 to 0.17.0

Release notes

Sourced from teloxide's releases.

v0.17.0

CHANGELOG

v0.16.0

CHANGELOG

v0.15.0

CHANGELOG

v0.14.1

CHANGELOG

v0.14.0

CHANGELOG

Changelog

Sourced from teloxide's changelog.

0.17.0 - 2025-07-11

Added

  • Support for TBA 8.1 (#1377)

  • Support for TBA 8.3 (#1383)

  • Support for TBA 9.0 (#1385 + #1387)

    • Add filter_paid_message_price_changed, filter_gift_info and filter_unique_gift_info filters

  • Support for TBA 9.1 (#1388)

    • Add filter_checklist, checklist_tasks_done, checklist_tasks_added, and direct_message_price_changed filters to the MessageFilterExt trait

Changed

  • Support for TBA 8.2 (#1381)

    • Removed hide_url field from InlineQueryResultArticle struct [BC]

  • Support for TBA 8.3 (#1383)

    • PaidMedia::Video is now wrapped in a Box [BC]
    • InputPaidMedia::Video is now wrapped in a Box [BC]

  • Support for TBA 9.0 (#1385 + #1387)

    • TransactionPartnerUser was reworked to have a kind field with gift_purchase, invoice_payment, paid_media_payment, premium_purchase getters [BC]
    • can_send_gift field in ChatFullInfo struct was replaced by accepted_gift_types [BC]
    • can_reply field in BusinessConnection struct was replaced by rights [BC]

Fixed

  • Fixed create_forum_topic to not require icon_color and icon_custom_emoji_id (#1382) [BC]
  • Fixed send_gift and send_gift_chat with ParseMode adaptor (#1385)

0.16.0 - 2025-06-19

Added

  • dptree type checking and dead code checking [BC].

  • New id types (#1153) [BC]

    • Add PollId struct
    • Add CallbackQueryId struct
    • Add FileId and FileUniqueId structs
    • Add PreCheckoutQueryId struct
    • Add ShippingQueryId struct
    • Add InlineQueryId struct
    • Add BoostId struct

... (truncated)

Commits

Updates tracing-subscriber from 0.3.19 to 0.3.20

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.20

Security Fix: ANSI Escape Sequence Injection (CVE-TBD)

Impact

Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:

  • Manipulate terminal title bars
  • Clear screens or modify terminal display
  • Potentially mislead users through terminal manipulation

In isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.

Solution

Version 0.3.20 fixes this vulnerability by escaping ANSI control characters in when writing events to destinations that may be printed to the terminal.

Affected Versions

All versions of tracing-subscriber prior to 0.3.20 are affected by this vulnerability.

Recommendations

Immediate Action Required: We recommend upgrading to tracing-subscriber 0.3.20 immediately, especially if your application:

  • Logs user-provided input (form data, HTTP headers, query parameters, etc.)
  • Runs in environments where terminal output is displayed to users

Migration

This is a patch release with no breaking API changes. Simply update your Cargo.toml:

[dependencies]
tracing-subscriber = "0.3.20"

Acknowledgments

We would like to thank zefr0x who responsibly reported the issue at security@tokio.rs.

If you believe you have found a security vulnerability in any tokio-rs project, please email us at security@tokio.rs.

Commits

Updates tokio from 1.44.0 to 1.47.1

Release notes

Sourced from tokio's releases.

Tokio v1.47.1

1.47.1 (August 1st, 2025)

Fixed

  • process: fix panic from spurious pidfd wakeup (#7494)
  • sync: fix broken link of Python asyncio.Event in SetOnce docs (#7485)

#7485: tokio-rs/tokio#7485 #7494: tokio-rs/tokio#7494

Tokio v1.47.0

1.47.0 (July 25th, 2025)

This release adds poll_proceed and cooperative to the coop module for cooperative scheduling, adds SetOnce to the sync module which provides similar functionality to [std::sync::OnceLock], and adds a new method sync::Notify::notified_owned() which returns an OwnedNotified without a lifetime parameter.

Added

  • coop: add cooperative and poll_proceed (#7405)
  • sync: add SetOnce (#7418)
  • sync: add sync::Notify::notified_owned() (#7465)

Changed

  • deps: upgrade windows-sys 0.52 → 0.59 (#7117)
  • deps: update to socket2 v0.6 (#7443)
  • sync: improve AtomicWaker::wake performance (#7450)

Documented

  • metrics: fix listed feature requirements for some metrics (#7449)
  • runtime: improve safety comments of Readiness<'_> (#7415)

#7405: tokio-rs/tokio#7405 #7415: tokio-rs/tokio#7415 #7418: tokio-rs/tokio#7418 #7449: tokio-rs/tokio#7449 #7450: tokio-rs/tokio#7450 #7465: tokio-rs/tokio#7465

Tokio v1.46.1

1.46.1 (July 4th, 2025)

This release fixes incorrect spawn locations in runtime task hooks for tasks spawned using tokio::spawn rather than Runtime::spawn. This issue only effected the spawn location in TaskMeta::spawned_at, and did not effect task locations in Tracing events.

... (truncated)

Commits

Updates tokio-util from 0.7.13 to 0.7.16

Commits

Updates rand from 0.9.0 to 0.9.2

Changelog

Sourced from rand's changelog.

[0.9.2 — 2025-07-20]

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

  • Revise "not a crypto library" policy again (#1565)
  • Remove zerocopy dependency from rand (#1579)

Fixes

  • Fix feature simd_support for recent nightly rust (#1586)

Changes

  • Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

  • Add rand::distr::Alphabetic distribution. (#1587)
  • Re-export rand_core (#1604)
Commits

Updates sea-orm from 1.1.7 to 1.1.10

Release notes

Sourced from sea-orm's releases.

1.1.10

Upgrades

1.1.9

Enhancements

Bug fixes

House keeping

1.1.8

New Features

  • Implement DeriveValueType for enum strings
#[derive(DeriveValueType)]
#[sea_orm(value_type = "String")]
pub enum Tag {
    Hard,
    Soft,
}
// from_str defaults to std::str::FromStr::from_str
impl std::str::FromStr for Tag {
type Err = sea_orm::sea_query::ValueTypeErr;
fn from_str(s: &str) -> Result<Self, Self::Err> { .. }
}
// to_str defaults to std::string::ToString::to_string.
impl std::fmt::Display for Tag {
fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result { .. }
}
// you can override from_str and to_str with custom functions
#[derive(DeriveValueType)]
#[sea_orm(value_type = "String", from_str = "Tag::from_str", to_str = "Tag::to_str")]
pub enum Tag {
Color,
Grey,
</tr></table>

... (truncated)

Changelog

Sourced from sea-orm's changelog.

1.1.10 - 2025-04-14

Upgrades

1.1.9 - 2025-04-14

Enhancements

Bug fixes

House keeping

1.1.8 - 2025-03-30

New Features

  • Implement DeriveValueType for enum strings
#[derive(DeriveValueType)]
#[sea_orm(value_type = "String")]
pub enum Tag {
    Hard,
    Soft,
}
// from_str defaults to std::str::FromStr::from_str
impl std::str::FromStr for Tag {
type Err = sea_orm::sea_query::ValueTypeErr;
fn from_str(s: &str) -> Result<Self, Self::Err> { .. }
}
// to_str defaults to std::string::ToString::to_string.
impl std::fmt::Display for Tag {
fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result { .. }
}
// you can override from_str and to_str with custom functions
#[derive(DeriveValueType)]
#[sea_orm(value_type = "String", from_str = "Tag::from_str", to_str = "Tag::to_str")]
pub enum Tag {
</tr></table>

... (truncated)

Commits

Updates sea-orm-migration from 1.1.7 to 1.1.10

Release notes

Sourced from sea-orm-migration's releases.

1.1.10

Upgrades

1.1.9

Enhancements

Bug fixes

House keeping

1.1.8

New Features

  • Implement DeriveValueType for enum strings
#[derive(DeriveValueType)]
#[sea_orm(value_type = "String")]
pub enum Tag {
    Hard,
    Soft,
}
// from_str defaults to std::str::FromStr::from_str
impl std::str::FromStr for Tag {
type Err = sea_orm::sea_query::ValueTypeErr;
fn from_str(s: &str) -> Result<Self, Self::Err> { .. }
}
// to_str defaults to std::string::ToString::to_string.
impl std::fmt::Display for Tag {
fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result { .. }
}
// you can override from_str and to_str with custom functions
#[derive(DeriveValueType)]
#[sea_orm(value_type = "String", from_str = "Tag::from_str", to_str = "Tag::to_str")]
pub enum Tag {
Color,
Grey,
</tr></table>

... (truncated)

Changelog

Sourced from sea-orm-migration's changelog.

1.1.10 - 2025-04-14

Upgrades

1.1.9 - 2025-04-14

Enhancements

Bug fixes

House keeping

1.1.8 - 2025-03-30

New Features

  • Implement DeriveValueType for enum strings
#[derive(DeriveValueType)]
#[sea_orm(value_type = "String")]
pub enum Tag {
    Hard,
    Soft,
}
// from_str defaults to std::str::FromStr::from_str
impl std::str::FromStr for Tag {
type Err = sea_orm::sea_query::ValueTypeErr;
fn from_str(s: &str) -> Result<Self, Self::Err> { .. }
}
// to_str defaults to std::string::ToString::to_string.
impl std::fmt::Display for Tag {
fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result { .. }
}
// you can override from_str and to_str with custom functions
#[derive(DeriveValueType)]
#[sea_orm(value_type = "String", from_str = "Tag::from_str", to_str = "Tag::to_str")]
pub enum Tag {
</tr></table>

... (truncated)

Commits

Updates parking_lot from 0.12.3 to 0.12.4

Changelog

Sourced from parking_lot's changelog.

parking_lot - 0.12.4 - 2025-05-29

  • Fix parked upgraders potentially not being woken up after a write lock
  • Fix clearing PARKED_WRITER_BIT after a timeout

parking_lot_core - 0.9.11 - 2025-05-29

  • Use Release/Acquire ordering in thread_parker::windows::Backend::create
  • Remove warnings due to new lint on unknown cfgs

lock_api - 0.4.13 - 2025-05-29

  • Remove warnings due to new lint on unknown cfgs
Commits
  • df66e66 Update CHANGELOG.md
  • bc72f02 chore: release
  • 7bd09e2 Merge pull request #469 from Amanieu/release-plz-changelog
  • 965216f Use a single changelog with release-plz
  • 398560e Merge pull request #467 from Amanieu/release-plz
  • a7c490f Add release-plz for automatic releases
  • 4989a4f Merge pull request #466 from Amanieu/issue-465
  • 249cb2a Fix parked upgraders potentially not being woken up after a write lock
  • a0d2de0 Fix clearing PARKED_WRITER_BIT after a timeout
  • 03b0192 Merge pull request #464 from Amanieu/ci-msrv
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dev-dependencies group across 1 directory with 10 updates
ab34c3d 
Bumps the dev-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.31` | `4.5.48` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.97` | `1.0.100` |
| [teloxide](https://github.com/teloxide/teloxide) | `0.13.0` | `0.17.0` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.19` | `0.3.20` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.44.0` | `1.47.1` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.13` | `0.7.16` |
| [rand](https://github.com/rust-random/rand) | `0.9.0` | `0.9.2` |
| [sea-orm](https://github.com/SeaQL/sea-orm) | `1.1.7` | `1.1.10` |
| [sea-orm-migration](https://github.com/SeaQL/sea-orm) | `1.1.7` | `1.1.10` |
| [parking_lot](https://github.com/Amanieu/parking_lot) | `0.12.3` | `0.12.4` |



Updates `clap` from 4.5.31 to 4.5.48
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@v4.5.31...clap_complete-v4.5.48)

Updates `anyhow` from 1.0.97 to 1.0.100
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.97...1.0.100)

Updates `teloxide` from 0.13.0 to 0.17.0
- [Release notes](https://github.com/teloxide/teloxide/releases)
- [Changelog](https://github.com/teloxide/teloxide/blob/master/CHANGELOG.md)
- [Commits](teloxide/teloxide@v0.13.0...v0.17.0)

Updates `tracing-subscriber` from 0.3.19 to 0.3.20
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.19...tracing-subscriber-0.3.20)

Updates `tokio` from 1.44.0 to 1.47.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.44.0...tokio-1.47.1)

Updates `tokio-util` from 0.7.13 to 0.7.16
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.13...tokio-util-0.7.16)

Updates `rand` from 0.9.0 to 0.9.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.9.0...rand_core-0.9.2)

Updates `sea-orm` from 1.1.7 to 1.1.10
- [Release notes](https://github.com/SeaQL/sea-orm/releases)
- [Changelog](https://github.com/SeaQL/sea-orm/blob/master/CHANGELOG.md)
- [Commits](SeaQL/sea-orm@1.1.7...1.1.10)

Updates `sea-orm-migration` from 1.1.7 to 1.1.10
- [Release notes](https://github.com/SeaQL/sea-orm/releases)
- [Changelog](https://github.com/SeaQL/sea-orm/blob/master/CHANGELOG.md)
- [Commits](SeaQL/sea-orm@1.1.7...1.1.10)

Updates `parking_lot` from 0.12.3 to 0.12.4
- [Release notes](https://github.com/Amanieu/parking_lot/releases)
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](Amanieu/parking_lot@0.12.3...parking_lot-v0.12.4)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: anyhow
  dependency-version: 1.0.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: teloxide
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: tracing-subscriber
  dependency-version: 0.3.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tokio
  dependency-version: 1.47.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: tokio-util
  dependency-version: 0.7.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: rand
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: sea-orm
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: sea-orm-migration
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: parking_lot
  dependency-version: 0.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 1, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jan 1, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 1, 2026
@dependabot dependabot bot deleted the dependabot/cargo/dev-dependencies-6b1bcc007a branch January 1, 2026 11:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants