chore(deps): bump the cargo group across 1 directory with 11 updates

[dependabot]

Bumps the cargo group with 11 updates in the / directory:

Package	From	To
anyhow	1.0.102	1.0.103
aws-config	1.8.17	1.8.18
aws-sdk-autoscaling	1.116.0	1.119.0
aws-sdk-ec2	1.227.0	1.231.0
aws-sdk-eks	1.131.0	1.134.0
aws-sdk-servicequotas	1.101.0	1.103.0
handlebars	6.4.1	6.4.2
k8s-openapi	0.27.1	0.28.0
kube	3.1.0	4.0.0
tabled	0.20.0	0.21.0
insta	1.47.2	1.48.0

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates aws-config from 1.8.17 to 1.8.18

Commits

• See full diff in compare view

Updates aws-sdk-autoscaling from 1.116.0 to 1.119.0

Commits

• See full diff in compare view

Updates aws-sdk-ec2 from 1.227.0 to 1.231.0

Commits

• See full diff in compare view

Updates aws-sdk-eks from 1.131.0 to 1.134.0

Commits

• See full diff in compare view

Updates aws-sdk-servicequotas from 1.101.0 to 1.103.0

Commits

• See full diff in compare view

Updates handlebars from 6.4.1 to 6.4.2

Changelog

Sourced from handlebars's changelog.

6.4.2 - 2026-06-24

• [Fixed] Access to local variables like @key, @index, etc. in #with and partial block #758
• [Fixed] Preserve ordering when iterating an array context inside a partial that receives hash parameters #760
• [Changed] Enable serde_json preserve_order feature. JSON objects are now iterated in insertion order (matching Handlebars.js semantics) instead of alphabetical key order. This fixes index-key ordering for array contexts converted into objects by partial hash parameters (e.g. "10" no longer sorts before "2").

Commits

• 7db1746 chore: Release handlebars version 6.4.2
• de9b256 chore: maintain changelog
• d022ea4 chore: update changelog
• 069e965 fix: preseve order for serde_json map (#762)
• 618e71f chore(deps-dev): bump webpack-dev-server in /playground/www (#759)
• 09c2016 fix: inherit @key/@index/@first/@​last into partials and #with (#758)
• ee99e2a chore(deps-dev): bump launch-editor in /playground/www (#757)
• 7aa45d6 chore: update time api
• 18d08e5 chore(deps-dev): bump shell-quote from 1.8.1 to 1.8.4 in /playground/www (#755)
• c795abc chore(deps): bump qs and express in /playground/www (#754)
• Additional commits viewable in compare view

Updates k8s-openapi from 0.27.1 to 0.28.0

Release notes

Sourced from k8s-openapi's releases.

v0.28.0

k8s-openapi

• BREAKING CHANGE: Added support for Kubernetes 1.36 under the v1_36 feature.

• BREAKING CHANGE: Dropped support for Kubernetes 1.31.

• FEATURE: schemars v0.8 support has been restored under the schemars08 feature flag. This can be enabled independently of the existing schemars feature that enables schemars v1 support.

• FEATURE: StatefulSetSpec::volume_claim_templates field now uses a map merge strategy using its .metadata.name as the key.

Corresponding Kubernetes API server versions:

• v1.32.13
• v1.33.13
• v1.34.9
• v1.35.6
• v1.36.2

k8s-openapi-codegen-common

• FEATURE: schemars v0.8 support has been restored via a new parameter to fn run().

k8s-openapi-derive

• FEATURE: schemars v0.8 support has been restored via a new #[custom_resource_definition(generate_schema08)] attr.

Changelog

Sourced from k8s-openapi's changelog.

v0.28.0 (2026-06-14)

k8s-openapi

• BREAKING CHANGE: Added support for Kubernetes 1.36 under the v1_36 feature.

• BREAKING CHANGE: Dropped support for Kubernetes 1.31.

• FEATURE: schemars v0.8 support has been restored under the schemars08 feature flag. This can be enabled independently of the existing schemars feature that enables schemars v1 support.

• FEATURE: StatefulSetSpec::volume_claim_templates field now uses a map merge strategy using its .metadata.name as the key.

Corresponding Kubernetes API server versions:

• v1.32.13
• v1.33.13
• v1.34.9
• v1.35.6
• v1.36.2

k8s-openapi-codegen-common

• FEATURE: schemars v0.8 support has been restored via a new parameter to fn run().

k8s-openapi-derive

• FEATURE: schemars v0.8 support has been restored via a new #[custom_resource_definition(generate_schema08)] attr.

---

Commits

• b2c839b v0.28.0
• ebea539 Update to v1.33.13, v1.34.9, v1.35.6, v1.36.2
• b7acde4 Restore schemars 0.8 support.
• 366b480 Update kind to v0.32.0
• f1b5881 Update to v1.33.12, v1.34.8, v1.35.5, v1.36.1
• 8a891b9 Add v1.36 and drop v1.31
• bcd3499 Fix StatefulSet::volumeClaimTemplates to deep merge by name.
• 654a839 Update to v1.33.11, v1.34.7, v1.35.4
• eda35ab Update to v1.33.10, v1.34.6, v1.35.3
• See full diff in compare view

Updates kube from 3.1.0 to 4.0.0

Release notes

Sourced from kube's releases.

4.0.0

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;

#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules

See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @​doxxx93.

Config

A lot of improvements to config handling;

• better error handling of malformed client certs in kube-rs/kube#1966
• add missing Kubeconfig fields in kube-rs/kube#1965
• Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964
• deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

• default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)
• regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Changelog

Sourced from kube's changelog.

4.0.0 / 2026-06-16

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;

#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules

See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @​doxxx93.

Config

A lot of improvements to config handling;

• better error handling of malformed client certs in kube-rs/kube#1966
• add missing Kubeconfig fields in kube-rs/kube#1965
• Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964
• deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

• default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)
• regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Commits

• b4f0cc4 re-hook cel feature and move dev-dep pin
• 163ade1 unhook dev-dep temporarily
• 2a14dec release 4.0.0
• 2310a06 feat(derive): client-side CEL validation via #[kube(cel)] / #[x_kube(cel)] (#...
• 8d61784 Enable RetryPolicy::server_retry by default for Client (#2007)
• a5b4f3f Box a large runtime error in ReconcilerErr (#1880)
• 3dd76bc bump k8s-openapi to 0.28 (#2009)
• 60ffe61 chore: group cel into the just hack feature-powerset (#2006)
• c261d78 deps: bump kube-cel to 0.6.1 (validation surface flattened) (#2005)
• 6c26657 refactor(runtime): rename Store::state_with/state_filtered per review feedbac...
• Additional commits viewable in compare view

Updates tabled from 0.20.0 to 0.21.0

Changelog

Sourced from tabled's changelog.

[0.21.0] - 2026-06-01

Added

• Added Color::is_empty function (by @​mvanhorn).
• Added Settings::modify function (by @​mvanhorn).
• Added qc test for wrap (by @​mvanhorn).
• Added LineText::limit function (by @​mvanhorn).
• Added ColumnNames::padding.

Changed

• Reworked Charset (by @​mvanhorn).
• Removed TabSize in favor of Charset::tab_size().
• Changed ColumnNames interface - splited it into ColumnNames and RowNames.

Fixed

• Fixed Wrap strings with 0 width (by @​ymcx).
• Improved examples (by @​alexanderkjall).
• Remove broken LICENSE symlink (by @​mvanhorn).
• Fixed CHANGELOG.md (by @​mvanhorn).
• Fixed clippy issue (by @​akiomik).
• Fixed documentation (by @​akiomik).
• Fixed documentation (by @​darko-mesaros).
• Fixed documentation (by @​brownjohnf).
• Fixed documentation (by @​spiritualhost).
• Fixed wrong render of vertical char in case of Span (corner case).
• Fixed BorderCorrection::span when Span::column and Span::row is used for same cell (corner case).

Commits

• See full diff in compare view

Updates insta from 1.47.2 to 1.48.0

Release notes

Sourced from insta's releases.

1.48.0

Release Notes

• Add strip_ansi_escape_codes setting which removes ANSI escape sequences (color codes, cursor movement, etc.) from snapshot content before comparison. Requires the filters feature. #899 (@​pierluigilenoci)
• Add opt-in support for YAML literal blocks for multiline strings in snapshot metadata fields such as description and expression. Set INSTA_YAML_BLOCK_STYLE=1 to enable. #851 (@​ivov)
• Setting CI=true normally makes cargo insta test behave as though --check was passed. Explicit snapshot handling options such as --accept now take precedence over this environment variable, allowing users to override this behavior if they want to. #924
• Fix cargo insta test --profile being forwarded to nextest as the nextest profile instead of the cargo build profile; it now translates to --cargo-profile for the nextest runner. Add --nextest-profile to select the nextest profile. #910
• Fix cargo insta pending-snapshots printing unusable \\?\-prefixed paths on Windows. The --snapshot filter now also accepts partial paths: any trailing path suffix of the snapshot file matches, so a bare --snapshot my_test.snap works. #904
• Accepting a binary snapshot no longer fails with os error 2 when its data file is missing (e.g. gitignored and not committed). #914

Install cargo-insta 1.48.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.48.0

File	Platform	Checksum
cargo-insta-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
cargo-insta-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
cargo-insta-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Changelog

Sourced from insta's changelog.

1.48.0

• Add strip_ansi_escape_codes setting which removes ANSI escape sequences (color codes, cursor movement, etc.) from snapshot content before comparison. Requires the filters feature. #899 (@​pierluigilenoci)
• Add opt-in support for YAML literal blocks for multiline strings in snapshot metadata fields such as description and expression. Set INSTA_YAML_BLOCK_STYLE=1 to enable. #851 (@​ivov)
• Setting CI=true normally makes cargo insta test behave as though --check was passed. Explicit snapshot handling options such as --accept now take precedence over this environment variable, allowing users to override this behavior if they want to. #924
• Fix cargo insta test --profile being forwarded to nextest as the nextest profile instead of the cargo build profile; it now translates to --cargo-profile for the nextest runner. Add --nextest-profile to select the nextest profile. #910
• Fix cargo insta pending-snapshots printing unusable \\?\-prefixed paths on Windows. The --snapshot filter now also accepts partial paths: any trailing path suffix of the snapshot file matches, so a bare --snapshot my_test.snap works. #904
• Accepting a binary snapshot no longer fails with os error 2 when its data file is missing (e.g. gitignored and not committed). #914

Commits

• 7f23d2e Release 1.48.0 (#925)
• ee9cae1 Allow CI=true to be overridden by an explicitly passed --accept CLI flag ...
• 043cf82 fix: translate --profile to --cargo-profile for nextest (#913)
• 9c77f13 test: cover deep-wildcard redaction through arrays (#915)
• 362f432 Fix --snapshot filter on Windows; allow partial paths (#904)
• a436836 fix: tolerate a missing binary snapshot data file (#914)
• bf5fcdf fix: regenerate Cargo.lock and guard it with --locked in CI (#912)
• a761a9c feat: Support YAML literal blocks for multiline strings (#851)
• f9633f3 ci: pin check-minver to nightly-2026-04-25 (#905)
• c7b98b8 feat: add strip_ansi_escape_codes setting (#899)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions