Bump the cargo group across 1 directory with 9 updates by dependabot[bot] · Pull Request #96 · bountyhub-org/runner

dependabot · 2026-01-05T23:36:43Z

Bumps the cargo group with 9 updates in the / directory:

Package	From	To
clap	`4.5.53`	`4.5.54`
clap_complete	`4.5.61`	`4.5.64`
tracing	`0.1.42`	`0.1.44`
tracing-subscriber	`0.3.21`	`0.3.22`
uuid	`1.18.1`	`1.19.0`
serde_json	`1.0.145`	`1.0.148`
url	`2.5.7`	`2.5.8`
hostname	`0.4.1`	`0.4.2`
zip	`6.0.0`	`7.0.0`

Updates clap from 4.5.53 to 4.5.54

Release notes

Sourced from clap's releases.

v4.5.54

[4.5.54] - 2026-01-02

Fixes

(help) Move [default] to its own paragraph when PossibleValue::help is present in --help

Changelog

Sourced from clap's changelog.

[4.5.54] - 2026-01-02

Fixes

(help) Move [default] to its own paragraph when PossibleValue::help is present in --help

Commits

194c676 chore: Release
44838f6 docs: Update changelog
0f59d55 Merge pull request #6027 from Alpha1337k/master
e2aa2f0 Feat: Add catch-all on external subcommands for zsh
b9c0aee Feat: Add external subcommands test to suite
See full diff in compare view

Updates clap_complete from 4.5.61 to 4.5.64

Commits

e115243 chore: Release
d4c34fa docs: Update changelog
ab4f438 Merge pull request #6203 from jpgrayson/fix/zsh-space-after-dir-completions
5571b83 fix(complete): Trailing space after zsh directory completions
06a2311 chore: Release
bed131f docs: Update changelog
a61c53e Merge pull request #6202 from iepathos/6201-symlink-path-completions
c3b4405 fix(complete): Follow symlinks in path completion
a794395 test(complete): Add symlink path completion tests
ca0aeba chore: Release
Additional commits viewable in compare view

Updates tracing from 0.1.42 to 0.1.44

Release notes

Sourced from tracing's releases.

tracing 0.1.44

Fixed

Fix record_all panic (#3432)

Changed

tracing-core: updated to 0.1.36 (#3440)

#3432: tokio-rs/tracing#3432 #3440: tokio-rs/tracing#3440

tracing 0.1.43

Important

The previous release [0.1.42] was yanked because #3382 was a breaking change. See further details in #3424. This release contains all the changes from that version, plus a revert for the problematic part of the breaking PR.

Fixed

Revert "make valueset macro sanitary" (#3425)

#3382: tokio-rs/tracing#3382 #3424: tokio-rs/tracing#3424 #3425: tokio-rs/tracing#3425 [0.1.42]: https://github.com/tokio-rs/tracing/releases/tag/tracing-0.1.42

Commits

2d55f6f chore: prepare tracing 0.1.44 (#3439)
10a9e83 chore: prepare tracing-core 0.1.36 (#3440)
ee82cf9 tracing: fix record_all panic (#3432)
9978c36 chore: prepare tracing-mock 0.1.0-beta.3 (#3429)
cc44064 chore: prepare tracing-subscriber 0.3.22 (#3428)
64e1c8d chore: prepare tracing 0.1.43 (#3427)
7c44f7b tracing: revert "make valueset macro sanitary" (#3425)
cdaf661 chore: prepare tracing-mock 0.1.0-beta.2 (#3422)
a164fd3 chore: prepare tracing-journald 0.3.2 (#3421)
405397b chore: prepare tracing-appender 0.2.4 (#3420)
Additional commits viewable in compare view

Updates tracing-subscriber from 0.3.21 to 0.3.22

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.22

Important

The previous release [0.3.21] was yanked as it depended explicitly on [tracing-0.1.42], which was yanked due to a breaking change (see #3424 for details). This release contains all the changes from the previous release, plus an update to the newer version of tracing.

Changed

tracing: updated to 0.1.43 (#3427)

#3424: tokio-rs/tracing#3424 #3427: tokio-rs/tracing#3427 [0.3.21]: https://github.com/tokio-rs/tracing/releases/tag/tracing-subscriber-0.3.21 [tracing-0.1.42]: https://github.com/tokio-rs/tracing/releases/tag/tracing-0.1.42

Commits

cc44064 chore: prepare tracing-subscriber 0.3.22 (#3428)
64e1c8d chore: prepare tracing 0.1.43 (#3427)
7c44f7b tracing: revert "make valueset macro sanitary" (#3425)
cdaf661 chore: prepare tracing-mock 0.1.0-beta.2 (#3422)
a164fd3 chore: prepare tracing-journald 0.3.2 (#3421)
405397b chore: prepare tracing-appender 0.2.4 (#3420)
See full diff in compare view

Updates uuid from 1.18.1 to 1.19.0

Release notes

Sourced from uuid's releases.

v1.19.0

What's Changed

Switch serde dependency to serde_core by @paolobarbolini in uuid-rs/uuid#843

Upgrade to 2021 edition and fix most clippy warnings by @paolobarbolini in uuid-rs/uuid#848

Prepare for 1.19.0 release by @KodrAus in uuid-rs/uuid#849

Full Changelog: uuid-rs/uuid@v1.18.1...v1.19.0

Commits

7527cef Merge pull request #849 from uuid-rs/cargo/v1.19.0
d0422fa prepare for 1.19.0 release
f9a36e2 Merge pull request #848 from paolobarbolini/maintenance
029a57e Fix most clippy warnings
e73bb27 Upgrade to 2021 edition
c597622 Merge pull request #843 from paolobarbolini/serde_core-migration
9835bd6 Switch serde dependency to serde_core
See full diff in compare view

Updates serde_json from 1.0.145 to 1.0.148

Release notes

Sourced from serde_json's releases.

v1.0.148

Update zmij dependency to 1.0

v1.0.147

Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Set fast_arithmetic=64 for riscv64 (#1305, thanks @Xeonacid)

Commits

8b291c4 Release 1.0.148
1aefe15 Update to zmij 1.0
62d6e8d Release 1.0.147
fd829a6 Merge pull request #1304 from dtolnay/zmij
e757a3d Switch from ryu -> zmij for float formatting
75ad7e6 Release 1.0.146
bc6c827 Merge pull request #1305 from Xeonacid/patch-1
a09210a Set fast_arithmetic=64 for riscv64
01182e5 Update actions/upload-artifact@v5 -> v6
383b13a Update actions/upload-artifact@v4 -> v5
Additional commits viewable in compare view

Updates url from 2.5.7 to 2.5.8

Commits

d6ea13c Bump to 2.5.8
8269ac3 ci: update cargo-deny config, bump cargo-deny-action to v2 (#1092)
6dfdf17 chore: fix some typos in comments (#1090)
b06048d Attempt to fix 1.82 CI (#1085)
9771ab5 Fix roundtripping issue (#1079)
22b925f Improve Compile Times with serde_derive (#1075)
0afccc9 fix outdated docs for ParseError (#1074)
See full diff in compare view

Updates hostname from 0.4.1 to 0.4.2

Release notes

Sourced from hostname's releases.

0.4.2

What's Changed

Update URLs by @atouchet in djc/hostname#32

Bump windows-link dependency 0.2 by @MarijnS95 in djc/hostname#33

Release 0.4.2 by @MarijnS95 in djc/hostname#34

Prepare 0.4.2 by @djc in djc/hostname#35

Commits

c697709 Drop unsupported mips targets
fedf49b Add Dependabot config
78bd371 Use separate job for MSRV checks
ed1ace4 Upgrade to windows-bindgen 0.65
5682e0c Enable codegen tests on non-Windows platforms
fc4492a Drop explicit html_root_url
e3687ed Remove CHANGELOG.md in favor of GitHub Releases
ad7ef34 Update version in Cargo.lock
ef9e3c4 Release 0.4.2
673020f Bump windows-link dependency 0.2
Additional commits viewable in compare view

Updates zip from 6.0.0 to 7.0.0

Release notes

Sourced from zip's releases.

v7.0.0

⚠️ Breaking Changes

Removed the following features: getrandom, hmac, pbkdf2, sha1, zeroize.

Removed lzma-static and xz-static feature flags, which were deprecated synonyms of lzma and xz. (#405, #425)

🚀 Features

(SimpleFileOptions) const DEFAULT implementation (#474)

ZipWriter set_auto_large_file() method to enable large-file data descriptor when necessary (#468)

🐛 Bug Fixes

print previous error when failing to search another cde (#460)

cargo doc warnings (#472)

Write ZIP64 data descriptors when large_file option is true (#467)

Pin generic-array to an old version to work around RustCrypto/traits#2036 until next RustCrypto & aes-crypto releases (#458)

⚙️ Miscellaneous Tasks

Revert version bump so that release-plz will trigger

expose more flate2 feature flags (#476)

Next release will be 7.0.0

release v6.0.0 (#442)

Deps

Bump lzma-rust2 to v0.15 (#465)*] Remove lzma-static and xz-static feature flags, which are deprecated synonyms of lzma and xz. (#405, #425)

Changelog

Sourced from zip's changelog.

7.0.0 - 2025-12-05

⚠️ Breaking Changes

Removed the following features: getrandom, hmac, pbkdf2, sha1, zeroize.

Removed lzma-static and xz-static feature flags, which were deprecated synonyms of lzma and xz. (#405, #425)

🚀 Features

(SimpleFileOptions) const DEFAULT implementation (#474)

ZipWriter set_auto_large_file() method to enable large-file data descriptor when necessary (#468)

🐛 Bug Fixes

print previous error when failing to search another cde (#460)

cargo doc warnings (#472)

Write ZIP64 data descriptors when large_file option is true (#467)

Pin generic-array to an old version to work around RustCrypto/traits#2036 until next RustCrypto & aes-crypto releases (#458)

⚙️ Miscellaneous Tasks

Revert version bump so that release-plz will trigger

expose more flate2 feature flags (#476)

Next release will be 7.0.0

release v6.0.0 (#442)

Deps

Bump lzma-rust2 to v0.15 (#465)*] Remove lzma-static and xz-static feature flags, which are deprecated synonyms of lzma and xz. (#405, #425)

Commits

c864a14 chore: release v7.0.0 (#482)
8085fe5 fix: print previous error when failing to search another cde (#460)
aa8f933 chore: Revert version bump so that release-plz will trigger
13005c5 ci: Fix? run apt-get update at start of miri job
f99a32f chore: expose more flate2 feature flags (#476)
9b5dd0b feat(SimpleFileOptions): const DEFAULT implementation (#474)
a8a4729 ci: Fix: Miri now requires g++, not just gcc (#477)
57d26a7 fix: cargo doc warnings (#472)
69533f1 feat: ZipWriter set_auto_large_file() method to enable large-file data desc...
fadbd48 chore(deps): update lzma-rust2 requirement from 0.13 to 0.14 (#450)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.5.53` | `4.5.54` | | [clap_complete](https://github.com/clap-rs/clap) | `4.5.61` | `4.5.64` | | [tracing](https://github.com/tokio-rs/tracing) | `0.1.42` | `0.1.44` | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.21` | `0.3.22` | | [uuid](https://github.com/uuid-rs/uuid) | `1.18.1` | `1.19.0` | | [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.148` | | [url](https://github.com/servo/rust-url) | `2.5.7` | `2.5.8` | | [hostname](https://github.com/djc/hostname) | `0.4.1` | `0.4.2` | | [zip](https://github.com/zip-rs/zip2) | `6.0.0` | `7.0.0` | Updates `clap` from 4.5.53 to 4.5.54 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.53...clap_complete-v4.5.54) Updates `clap_complete` from 4.5.61 to 4.5.64 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.61...clap_complete-v4.5.64) Updates `tracing` from 0.1.42 to 0.1.44 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-0.1.42...tracing-0.1.44) Updates `tracing-subscriber` from 0.3.21 to 0.3.22 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.21...tracing-subscriber-0.3.22) Updates `uuid` from 1.18.1 to 1.19.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.18.1...v1.19.0) Updates `serde_json` from 1.0.145 to 1.0.148 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.145...v1.0.148) Updates `url` from 2.5.7 to 2.5.8 - [Release notes](https://github.com/servo/rust-url/releases) - [Commits](servo/rust-url@v2.5.7...v2.5.8) Updates `hostname` from 0.4.1 to 0.4.2 - [Release notes](https://github.com/djc/hostname/releases) - [Commits](djc/hostname@v0.4.1...v0.4.2) Updates `zip` from 6.0.0 to 7.0.0 - [Release notes](https://github.com/zip-rs/zip2/releases) - [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md) - [Commits](zip-rs/zip2@v6.0.0...v7.0.0) --- updated-dependencies: - dependency-name: clap dependency-version: 4.5.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: clap_complete dependency-version: 4.5.64 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tracing dependency-version: 0.1.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tracing-subscriber dependency-version: 0.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: uuid dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: serde_json dependency-version: 1.0.148 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: url dependency-version: 2.5.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: hostname dependency-version: 0.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: zip dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-01-20T00:05:24Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jan 5, 2026

dependabot bot closed this Jan 20, 2026

dependabot bot deleted the dependabot/cargo/cargo-55c9329299 branch January 20, 2026 00:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Bump the cargo group across 1 directory with 9 updates#96

Bump the cargo group across 1 directory with 9 updates#96
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/cargo-55c9329299

dependabot bot commented on behalf of github Jan 5, 2026 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Jan 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Jan 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.5.54

[4.5.54] - 2026-01-02

Fixes

[4.5.54] - 2026-01-02

Fixes

tracing 0.1.44

Fixed

Changed

tracing 0.1.43

Important

Fixed

tracing-subscriber 0.3.22

Important

Changed

v1.19.0

What's Changed

v1.0.148

v1.0.147

v1.0.146

0.4.2

What's Changed

v7.0.0

⚠️ Breaking Changes

🚀 Features

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

Deps

7.0.0 - 2025-12-05

⚠️ Breaking Changes

🚀 Features

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

Deps

Uh oh!

dependabot bot commented on behalf of github Jan 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Jan 5, 2026 •

edited

Loading