Bump the rust-dependencies group across 1 directory with 6 updates by dependabot[bot] · Pull Request #103 · amartani/covers

dependabot · 2026-06-06T09:22:45Z

Bumps the rust-dependencies group with 6 updates in the / directory:

Package	From	To
chrono	`0.4.44`	`0.4.45`
clap	`4.6.0`	`4.6.1`
quick-xml	`0.39.2`	`0.40.1`
serde_json	`1.0.149`	`1.0.150`
tabled	`0.20.0`	`0.21.0`
tree-sitter	`0.26.8`	`0.26.9`

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in chronotope/chrono#1787

tz_data: fix tzdata locations on Android by @caruschalalamove in chronotope/chrono#1789

Commits

1703382 Prepare 0.4.45 release
881f9ab tz_data: fix tzdata locations on Android
f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
120686c Bump codecov/codecov-action from 5 to 6
See full diff in compare view

Updates clap from 4.6.0 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

(derive) Ensure rebuilds happen when an read env variable is changed

Commits

1420275 chore: Release
d2c817d docs: Update changelog
f88c94e Merge pull request #6341 from epage/sep
acbb822 fix(complete): Reduce risk of conflict with actual subcommands
a49fadb refactor(complete): Pull out subcommand separator
ddc008b Merge pull request #6332 from epage/update
497dc50 chore: Update compatible dependencies
dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
54bdaa3 chore(deps): Update j178/prek-action action to v2
f0d30d9 chore: Release
Additional commits viewable in compare view

Updates quick-xml from 0.39.2 to 0.40.1

Release notes

Sourced from quick-xml's releases.

v0.40.1 - Fix rarely possible serde deserialization panic

What's Changed

#964: Fix unreachable!() panic in the serde deserializer when a DOCTYPE declaration appears between two text runs inside an element (e.g. <a>x<!DOCTYPE y>z</a>). The DOCTYPE used to break drain_text's consecutive-text merge, so two DeEvent::Text events reached read_text and tripped its "Cannot be two consequent Text events" invariant. DOCTYPE is now treated as transparent during text drain — it still goes through the entity resolver, but the surrounding text is merged into one run. Discovered via libFuzzer on a real-world SAML deserializer harness.

#964: tafia/quick-xml#964

New Contributors

@williamareynolds made their first contribution in tafia/quick-xml#964

Full Changelog: tafia/quick-xml@v0.40.0...v0.40.1

v0.40.0 - UTF-16 and ISO-2022-JP encodings supported

What's Changed

MSRV bumped to 1.79.

Now quick-xml supports the UTF-16 and ISO-2022-JP encoded documents. See the new DecodingReader type.

New Features

#956: Add DecodingReader, a BufRead adapter that auto-detects encoding from BOM or XML declaration and transcodes to UTF-8. Enabled by the encoding feature.

#938: Add new enumeration XmlVersion and typified getter BytesDecl::xml_version().

#938: Add new error variant IllFormedError::UnknownVersion.

#371: Add new error variant EscapeError::TooManyNestedEntities.

#371: Improved compliance with the XML attribute value normalization process by adding

Attribute::normalized_value()

Attribute::normalized_value_with()

Attribute::decoded_and_normalized_value()

Attribute::decoded_and_normalized_value_with()

which ought to be used in place of deprecated

Attribute::unescape_value()

Attribute::unescape_value_with()

Attribute::decode_and_unescape_value()

Attribute::decode_and_unescape_value_with()

Deprecated functions now behaves the same as newly added.

Bug Fixes

#938: Use correct rules for EOL normalization in Deserializer when parse XML 1.0 documents. Previously XML 1.1. rules was applied.

Misc Changes

#914: Remove deprecated .prefixes(), .resolve(), .resolve_attribute(), and .resolve_element() of NsReader. Use .resolver().<...> methods instead.

#938: Now BytesText::xml_content, BytesCData::xml_content and BytesRef::xml_content accepts XmlVersion parameter to apply correct EOL normalization rules.

#944: read_text() now returns BytesText which allows you to get the content with properly normalized EOLs. To get the previous behavior use .read_text().decode()?.

#956: Bumped MSRV from 1.59 (Feb 2022) to 1.79 (June 2024)

... (truncated)

Changelog

Sourced from quick-xml's changelog.

0.40.1 -- 2026-05-15

Bug Fixes

#964: Fix unreachable!() panic in the serde deserializer when a DOCTYPE declaration appears between two text runs inside an element (e.g. <a>x<!DOCTYPE y>z</a>). The DOCTYPE used to break drain_text's consecutive-text merge, so two DeEvent::Text events reached read_text and tripped its "Cannot be two consequent Text events" invariant. DOCTYPE is now treated as transparent during text drain — it still goes through the entity resolver, but the surrounding text is merged into one run. Discovered via libFuzzer on a real-world SAML deserializer harness.

#964: tafia/quick-xml#964

Misc Changes

0.40.0 -- 2026-05-11

MSRV bumped to 1.79.

Now quick-xml supports the UTF-16 encoded documents. See the new DecodingReader type.

New Features

#956: Add DecodingReader, a BufRead adapter that auto-detects encoding from BOM or XML declaration and transcodes to UTF-8. Enabled by the encoding feature.

#938: Add new enumeration XmlVersion and typified getter BytesDecl::xml_version().

#938: Add new error variant IllFormedError::UnknownVersion.

#371: Add new error variant EscapeError::TooManyNestedEntities.

#371: Improved compliance with the XML attribute value normalization process by adding

Attribute::normalized_value()

Attribute::normalized_value_with()

Attribute::decoded_and_normalized_value()

Attribute::decoded_and_normalized_value_with()

which ought to be used in place of deprecated

Attribute::unescape_value()

Attribute::unescape_value_with()

Attribute::decode_and_unescape_value()

Attribute::decode_and_unescape_value_with()

Deprecated functions now behaves the same as newly added.

Bug Fixes

#938: Use correct rules for EOL normalization in Deserializer when parse XML 1.0 documents. Previously XML 1.1. rules was applied.

... (truncated)

Commits

9aaea92 Release 0.40.1
ce488bc Merge pull request #964 from williamareynolds/fix/de-doctype-in-text-unreachable
e00ae5c Fix unreachable!() panic when DOCTYPE appears between text runs in element co...
2778564 Release 0.40.0
393db03 Merge pull request #962 from Mingun/prepare-0.40
a27709a Fix misprint in code example
0c0c914 Make some functions const and enable clippy::missing_const_for_fn lint
bf4ffe5 Fix clippy warning: use .first() instead of .get(0)
d69baad Fix clippy warning: remove unnecessary after 241f01e20ff679e9248f2ae424c9ba82...
8e0ae4f Fix clippy warning: use strip_prefix instead of manual stripping
Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates tabled from 0.20.0 to 0.21.0

Changelog

Sourced from tabled's changelog.

[0.21.0] - 2026-06-01

Added

Added Color::is_empty function (by @mvanhorn).

Added Settings::modify function (by @mvanhorn).

Added qc test for wrap (by @mvanhorn).

Added LineText::limit function (by @mvanhorn).

Added ColumnNames::padding.

Changed

Reworked Charset (by @mvanhorn).

Removed TabSize in favor of Charset::tab_size().

Changed ColumnNames interface - splited it into ColumnNames and RowNames.

Fixed

Fixed Wrap strings with 0 width (by @ymcx).

Improved examples (by @alexanderkjall).

Remove broken LICENSE symlink (by @mvanhorn).

Fixed CHANGELOG.md (by @mvanhorn).

Fixed clippy issue (by @akiomik).

Fixed documentation (by @akiomik).

Fixed documentation (by @darko-mesaros).

Fixed documentation (by @brownjohnf).

Fixed documentation (by @spiritualhost).

Fixed wrong render of vertical char in case of Span (corner case).

Fixed BorderCorrection::span when Span::column and Span::row is used for same cell (corner case).

Commits

See full diff in compare view

Updates tree-sitter from 0.26.8 to 0.26.9

Release notes

Sourced from tree-sitter's releases.

v0.26.9

What's Changed

ci(actions): bump actions/cache to v5 by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5482

build(deps): bump wasmtime-c-api to v36.0.7 by @WillLillis in tree-sitter/tree-sitter#5514

fix(loader): allow filenames with dots by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5538

fix(rust): fix new clippy lints by @WillLillis in tree-sitter/tree-sitter#5539

test: bump c test fixture to v0.24.2 by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5542

fix(generate): pass default optimization level in generate_parser_for_grammar by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5543

feat(dist): enable install via cargo binstall (#5533) by @clason in tree-sitter/tree-sitter#5544

Prevent a buffer over-read when parsing 4-byte UTF-16 characters. by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5549

fix(query): overflow in capture pool ids + some perf by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5555

docs: note zero point unbounded behavior in query functions by @WillLillis in tree-sitter/tree-sitter#5563

build(deps): bump wasmtime-c-api to v36.0.8 by @clason in tree-sitter/tree-sitter#5574

fix(cli): account for process versions > 5 in the parse command's pretty debug output. by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5577

fix(generate): improve error message for nonterminals used in immediate token rule by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5583

fix(generate): rewrite parse_grammar with forward DFS by @WillLillis in tree-sitter/tree-sitter#5584

fix(wasm): load supertype tables for ABI 15 grammars by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5606

build(deps): bump wasmtime-c-api to v36.0.9 by @clason in tree-sitter/tree-sitter#5611

Validate Wasm language memory reads by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5613

release v0.26.9 by @clason in tree-sitter/tree-sitter#5612

Full Changelog: tree-sitter/tree-sitter@v0.26.8...v0.26.9

Commits

7f53486 release v0.26.9
77b96de fix(wasm): validate memory reads (#5569) (#5613)
a082228 build(deps): bump wasmtime-c-api to v36.0.9
7aea015 fix(wasm): load supertype tables for ABI 15 grammars (#5605) (#5606)
2cad8b8 fix(generate): consider reserved words when removing unused rules
ddbe469 fix(generate): rewrite parse_grammar with forward DFS
17f9796 fix(generate): improve error message for nonterminals used in immediate token...
17e4bf9 fix(cli): account for process versions > 5 in the parse command's pretty
ec120d0 build(deps): bump wasmtime-c-api to v36.0.8
7c3d842 docs: note zero point unbounded behavior in query functions
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` | | [clap](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.1` | | [quick-xml](https://github.com/tafia/quick-xml) | `0.39.2` | `0.40.1` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [tabled](https://github.com/zhiburt/tabled) | `0.20.0` | `0.21.0` | | [tree-sitter](https://github.com/tree-sitter/tree-sitter) | `0.26.8` | `0.26.9` | Updates `chrono` from 0.4.44 to 0.4.45 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.44...v0.4.45) Updates `clap` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.1) Updates `quick-xml` from 0.39.2 to 0.40.1 - [Release notes](https://github.com/tafia/quick-xml/releases) - [Changelog](https://github.com/tafia/quick-xml/blob/master/Changelog.md) - [Commits](tafia/quick-xml@v0.39.2...v0.40.1) Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `tabled` from 0.20.0 to 0.21.0 - [Changelog](https://github.com/zhiburt/tabled/blob/master/CHANGELOG.md) - [Commits](https://github.com/zhiburt/tabled/commits) Updates `tree-sitter` from 0.26.8 to 0.26.9 - [Release notes](https://github.com/tree-sitter/tree-sitter/releases) - [Commits](tree-sitter/tree-sitter@v0.26.8...v0.26.9) --- updated-dependencies: - dependency-name: chrono dependency-version: 0.4.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: clap dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: quick-xml dependency-version: 0.40.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tabled dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: tree-sitter dependency-version: 0.26.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-13T09:22:45Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 6, 2026

dependabot Bot closed this Jun 13, 2026

dependabot Bot deleted the dependabot/cargo/rust-dependencies-d1653fed1c branch June 13, 2026 09:22

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the rust-dependencies group across 1 directory with 6 updates#103

Bump the rust-dependencies group across 1 directory with 6 updates#103
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-d1653fed1c

dependabot Bot commented on behalf of github Jun 6, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.4.45

What's Changed

v4.6.1

[4.6.1] - 2026-04-15

Fixes

[4.6.1] - 2026-04-15

Fixes

v0.40.1 - Fix rarely possible serde deserialization panic

What's Changed

New Contributors

v0.40.0 - UTF-16 and ISO-2022-JP encodings supported

What's Changed

New Features

Bug Fixes

Misc Changes

0.40.1 -- 2026-05-15

Bug Fixes

Misc Changes

0.40.0 -- 2026-05-11

New Features

Bug Fixes

v1.0.150

[0.21.0] - 2026-06-01

Added

Changed

Fixed

v0.26.9

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Jun 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 6, 2026 •

edited

Loading