Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 9, 2026

Bumps the rust-dependencies group with 7 updates:

Package From To
uuid 1.19.0 1.20.0
anyhow 1.0.100 1.0.101
git2 0.20.3 0.20.4
zip 7.2.0 7.4.0
wasmi 1.0.7 1.0.8
wasmi_wasi 1.0.7 1.0.8
clap 4.5.54 4.5.57

Updates uuid from 1.19.0 to 1.20.0

Release notes

Sourced from uuid's releases.

v1.20.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.19.0...v1.20.0

Commits
  • c3346dd Merge pull request #857 from uuid-rs/cargo/v1.20.0
  • 66eebc3 prepare for 1.20.0 release
  • 3b66758 Merge pull request #856 from uuid-rs/docs/bytes-le-ordering
  • e2bdd44 don't run UI tests in wasm
  • b6dc7ec note that ordering applies to fields in to/from_bytes_le
  • a0281cd Merge pull request #855 from uuid-rs/feat/serde-fmt
  • db27b67 Merge pull request #854 from mivort/non-nil-uuid-ord
  • efb06f2 implement Deserialize on adapter types
  • 50d44ad Derive Ord and PartialOrd for NonNilUuid
  • See full diff in compare view

Updates anyhow from 1.0.100 to 1.0.101

Release notes

Sourced from anyhow's releases.

1.0.101

Commits
  • 80bfe29 Release 1.0.101
  • dff8c43 Merge pull request #437 from Ibitier/inline-ok-helper
  • 85d9ea9 Add #[inline] to anyhow::Ok helper
  • 54036cc Update ui test suite to nightly-2026-01-21
  • cce0579 Update actions/upload-artifact@v5 -> v6
  • f2c598c Update actions/upload-artifact@v4 -> v5
  • 2c0bda4 Update to 2021 edition
  • 0d82268 Remove rustc version requirement from readme
  • 67df012 Merge pull request #436 from dtolnay/up
  • c898488 Raise required compiler to Rust 1.68
  • Additional commits viewable in compare view

Updates git2 from 0.20.3 to 0.20.4

Changelog

Sourced from git2's changelog.

0.20.4 - 2026-02-02

0.20.3...0.20.4

Fixed

  • Fix undefined behavior when dereferencing empty Buf. #1213
Commits
  • 8852d7d Merge pull request #1214 from weihanglo/backport-from-raw-parts
  • 0b274f7 Bump to 0.20.4
  • 73a5d5d Add test for dereference of an empty Buf
  • ce56683 fix: check ptr nullity before calling from_raw_parts
  • See full diff in compare view

Updates zip from 7.2.0 to 7.4.0

Release notes

Sourced from zip's releases.

v7.4.0

🚀 Features

  • Increase MSRV to 1.88 and update dependencies (#626)

v7.3.0

🚀 Features

  • cleanup the benchs and Cargo.toml (#606)
  • Add support for per-file comments (#543)

🐛 Bug Fixes

  • Document feature unreserved and make the mapping of extra fields public (#616)
  • Return an error if abort_file() fails when exceeding non-large-file limit (#598)

⚙️ Miscellaneous Tasks

  • Bump version to 7.3.0 (semver checks fail if it's still 7.3.0-pre1)

v7.3.0-pre1

🐛 Bug Fixes

  • Reject empty ZipCrypto password when encrypting files (can still be used when decrypting)
  • make zip crate safer and more readable (#536)

⚡ Performance

  • Optimizations for CP437 conversion (#559)

⚙️ Miscellaneous Tasks

  • Trigger release 7.3.0-pre1 to reset cargo-semver-checks baseline
Changelog

Sourced from zip's changelog.

7.4.0 - 2026-02-05

🚀 Features

  • Increase MSRV to 1.88 and update dependencies (#626)

7.3.0 - 2026-02-04

🚀 Features

  • cleanup the benchmarks and Cargo.toml (#606)
  • Add support for per-file comments (#543)

🐛 Bug Fixes

  • Document feature unreserved and make the mapping of extra fields public (#616)
  • Return an error if abort_file() fails when exceeding non-large-file limit (#598)

⚙️ Miscellaneous Tasks

  • Bump version to 7.3.0 (semver checks fail if it's still 7.3.0-pre1)

7.3.0-pre1 - 2026-01-27

🐛 Bug Fixes

  • Reject empty ZipCrypto password when encrypting files (can still be used when decrypting)
  • make zip crate safer and more readable (#536)

⚡ Performance

  • Optimizations for CP437 conversion (#559)

⚙️ Miscellaneous Tasks

  • Trigger release 7.3.0-pre1 to reset cargo-semver-checks baseline
Commits
  • 016d421 chore: release v7.4.0 (#628)
  • 18792c2 feat: Increase MSRV to 1.88 and update dependencies (#626)
  • c9bce39 test: Potential fixes for 5 code quality findings (method-description comment...
  • 5b61c24 test: Potential fixes for 2 code quality findings in tests/end_to_end.rs (#624)
  • 1c59f3c Apply suggested fix to CHANGELOG.md from Copilot Autofix (#623)
  • 41aeb9f Revert "ci: Temporarily override baseline for semver checks (revert after 7.3...
  • ba77189 chore: release v7.3.0 (#580)
  • 57b5ecc fix: Document feature unreserved and make the mapping of extra fields publi...
  • 579b67c Apply suggested fix to tests/zip_crypto.rs from Copilot Autofix (#620)
  • ca432a0 Apply suggested fix to tests/wasm32.rs from Copilot Autofix (#618)
  • Additional commits viewable in compare view

Updates wasmi from 1.0.7 to 1.0.8

Release notes

Sourced from wasmi's releases.

v1.0.8 - 2026/01/29

Fixed

  • Fixed another bug with incorrect translation of wide-arithmetic ops followed by local.set. #1762

#1762: wasmi-labs/wasmi#1762

Changelog

Sourced from wasmi's changelog.

1.0.8 - 2026-01-29

Fixed

  • Fixed another bug with incorrect translation of wide-arithmetic ops followed by local.set. #1762

#1762: wasmi-labs/wasmi#1762

Commits

Updates wasmi_wasi from 1.0.7 to 1.0.8

Release notes

Sourced from wasmi_wasi's releases.

v1.0.8 - 2026/01/29

Fixed

  • Fixed another bug with incorrect translation of wide-arithmetic ops followed by local.set. #1762

#1762: wasmi-labs/wasmi#1762

Changelog

Sourced from wasmi_wasi's changelog.

1.0.8 - 2026-01-29

Fixed

  • Fixed another bug with incorrect translation of wide-arithmetic ops followed by local.set. #1762

#1762: wasmi-labs/wasmi#1762

Commits

Updates clap from 4.5.54 to 4.5.57

Release notes

Sourced from clap's releases.

v4.5.57

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

v4.5.56

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

v4.5.55

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args
Changelog

Sourced from clap's changelog.

[4.5.57] - 2026-02-03

Fixes

  • Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

[4.5.56] - 2026-01-29

Fixes

  • On conflict error, don't show conflicting arguments in the usage

[4.5.55] - 2026-01-27

Fixes

  • Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args
Commits
  • 69c0ddb chore: Release
  • 8206bba docs: Update changelog
  • c109d67 Merge pull request #6104 from epage/hide
  • 9d7f212 fix(complete): Hide dot files on dynamic completer
  • 77b3fdb test(complete): Show dot file behavior
  • f89b9b8 test(derive): Make stable across upgrade
  • 58eb8a9 chore: Release
  • 10a2a75 docs: Update changelog
  • a42eebf Merge pull request #6103 from epage/mut_subcommands
  • 5335f54 feat: Add Command::mut_subcommands
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [uuid](https://github.com/uuid-rs/uuid) | `1.19.0` | `1.20.0` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.101` |
| [git2](https://github.com/rust-lang/git2-rs) | `0.20.3` | `0.20.4` |
| [zip](https://github.com/zip-rs/zip2) | `7.2.0` | `7.4.0` |
| [wasmi](https://github.com/wasmi-labs/wasmi) | `1.0.7` | `1.0.8` |
| [wasmi_wasi](https://github.com/wasmi-labs/wasmi) | `1.0.7` | `1.0.8` |
| [clap](https://github.com/clap-rs/clap) | `4.5.54` | `4.5.57` |


Updates `uuid` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.19.0...v1.20.0)

Updates `anyhow` from 1.0.100 to 1.0.101
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.100...1.0.101)

Updates `git2` from 0.20.3 to 0.20.4
- [Changelog](https://github.com/rust-lang/git2-rs/blob/git2-0.20.4/CHANGELOG.md)
- [Commits](rust-lang/git2-rs@git2-0.20.3...git2-0.20.4)

Updates `zip` from 7.2.0 to 7.4.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v7.2.0...v7.4.0)

Updates `wasmi` from 1.0.7 to 1.0.8
- [Release notes](https://github.com/wasmi-labs/wasmi/releases)
- [Changelog](https://github.com/wasmi-labs/wasmi/blob/main/CHANGELOG.md)
- [Commits](wasmi-labs/wasmi@v1.0.7...v1.0.8)

Updates `wasmi_wasi` from 1.0.7 to 1.0.8
- [Release notes](https://github.com/wasmi-labs/wasmi/releases)
- [Changelog](https://github.com/wasmi-labs/wasmi/blob/main/CHANGELOG.md)
- [Commits](wasmi-labs/wasmi@v1.0.7...v1.0.8)

Updates `clap` from 4.5.54 to 4.5.57
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.54...clap_complete-v4.5.57)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: anyhow
  dependency-version: 1.0.101
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: git2
  dependency-version: 0.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: zip
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: wasmi
  dependency-version: 1.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: wasmi_wasi
  dependency-version: 1.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap
  dependency-version: 4.5.57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Feb 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants