chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v4.2.2 -> v4.3.0
actions/upload-artifact	action	patch	v4.6.0 -> v4.6.2
anyhow	dependencies	patch	1.0.95 -> 1.0.100
assert_cmd	dev-dependencies	minor	2.0.16 -> 2.1.1
clap	dependencies	patch	4.5.28 -> 4.5.51
git2	dependencies	patch	0.20.0 -> 0.20.2
guppy	dependencies	patch	0.17.13 -> 0.17.23
insta (source)	dev-dependencies	minor	1.42.1 -> 1.43.2
python	uses-with	minor	3.12 -> 3.14
rayon	dependencies	minor	1.10.0 -> 1.11.0
reqwest	dependencies	patch	0.12.12 -> 0.12.24
tempfile (source)	dev-dependencies	minor	3.16.0 -> 3.23.0

---

Release Notes

actions/checkout (actions/checkout)

v4.3.0

Compare Source

What's Changed

• docs: update README.md by @​motss in #​1971
• Add internal repos for checking out multiple repositories by @​mouismail in #​1977
• Documentation update - add recommended permissions to Readme by @​benwells in #​2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in #​2044
• Update README.md by @​nebuk89 in #​2194
• Update CODEOWNERS for actions by @​TingluoHuang in #​2224
• Update package dependencies by @​salmanmkc in #​2236
• Prepare release v4.3.0 by @​salmanmkc in #​2237

New Contributors

• @​motss made their first contribution in #​1971
• @​mouismail made their first contribution in #​1977
• @​benwells made their first contribution in #​2043
• @​nebuk89 made their first contribution in #​2194
• @​salmanmkc made their first contribution in #​2236

Full Changelog: actions/checkout@v4...v4.3.0

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed

• Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in #​685

New Contributors

• @​salmanmkc made their first contribution in #​685

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

Compare Source

What's Changed

• Update to use artifact 2.2.2 package by @​yacaovsnc in #​673

Full Changelog: actions/upload-artifact@v4...v4.6.1

dtolnay/anyhow (anyhow)

v1.0.100

Compare Source

• Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#​426)

v1.0.99

Compare Source

• Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#​420)

v1.0.98

Compare Source

• Add self.into_boxed_dyn_error() and self.reallocate_into_boxed_dyn_error_without_backtrace() methods for anyhow::Error (#​415)

v1.0.97

Compare Source

• Documentation improvements

v1.0.96

Compare Source

• Documentation improvements

assert-rs/assert_cmd (assert_cmd)

v2.1.1

Compare Source

v2.1.0

Compare Source

Compatibility

• Deprecated crate_name!() in favor of pkg_name!()
• Deprecated Command::cargo_bin, CommandCargoExt::cargo_bin, cargo_bin in favor of cargo_bin!, cargo_bin_cmd!

Features

• Provide cargo_bin_cmd!()
• Use pkg_name!() as a default parameter to cargo_bin!()

v2.0.17

Compare Source

Features

• Add cargo::cargo_bin! which will work with Cargo's build-dir

clap-rs/clap (clap)

v4.5.51

Compare Source

Fixes

• (help) Correctly calculate padding for short flags that take a value
• (help) Don't panic on short flags using ArgAction::Count

v4.5.50

Compare Source

Features

• Accept Cow where String and &str are accepted

v4.5.49

Compare Source

Fixes

• (help) Correctly wrap when ANSI escape codes are present

v4.5.48

Compare Source

Documentation

• Add a new CLI Concepts document as another way of framing clap
• Expand the typed_derive cookbook entry

v4.5.47

Compare Source

Features

• Added impl FromArgMatches for ()
• Added impl Args for ()
• Added impl Subcommand for ()
• Added impl FromArgMatches for Infallible
• Added impl Subcommand for Infallible

Fixes

• (derive) Update runtime error text to match clap

v4.5.46

Compare Source

Features

• Expose StyledStr::push_str

v4.5.45

Compare Source

Fixes

• (unstable-v5) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

v4.5.44

Compare Source

Features

• Add Command::mut_subcommands

v4.5.43

Compare Source

Fixes

• (help) In long help, list Possible Values before defaults, rather than after, for a more consistent look

v4.5.42

Compare Source

Fixes

• Include subcommand visible long aliases in --help

v4.5.41

Compare Source

Features

• Add Styles::context and Styles::context_value to customize the styling of [default: value] like notes in the --help

v4.5.40

Compare Source

Features

• Support quoted ids in arg!() macro (e.g. arg!("check-config": ...))

v4.5.39

Compare Source

Fixes

• (help) Show short flag aliases before long
• (help) Merge the short and long flag alias lists

v4.5.38

Compare Source

Fixes

• (help) When showing aliases, include leading -- or -

v4.5.37

Compare Source

Features

• Added ArgMatches::try_clear_id()

v4.5.36

Compare Source

Fixes

• (help) Revert 4.5.35's "Don't leave space for shorts if there are none" for now

v4.5.35

Compare Source

Fixes

• (help) Align positionals and flags when put in the same help_heading
• (help) Don't leave space for shorts if there are none

v4.5.34

Compare Source

Fixes

• (help) Don't add extra blank lines with flatten_help(true) and subcommands without arguments

v4.5.33

Compare Source

Fixes

• (error) When showing the usage of a suggestion for an unknown argument, don't show the group

v4.5.32

Compare Source

Features

• Add Error::remove

Documentation

• (cookbook) Switch from humantime to jiff
• (tutorial) Better cover required vs optional

Internal

• Update pulldown-cmark

v4.5.31

Compare Source

Features

• Add ValueParserFactory for Saturating<T>

v4.5.30

Compare Source

Fixes

• (assert) Allow num_args(0..=1) to be used with SetTrue
• (assert) Clean up rendering of takes_values assertions

v4.5.29

Compare Source

Fixes

• Change ArgMatches::args_present so not-present flags are considered not-present (matching the documentation)

rust-lang/git2-rs (git2)

v0.20.2

Compare Source

0.20.1...0.20.2

Added

• Added Status::WT_UNREADABLE.
  #​1151

Fixed

• Added missing codes for GIT_EDIRECTORY, GIT_EMERGECONFLICT, GIT_EUNCHANGED, GIT_ENOTSUPPORTED, and GIT_EREADONLY to Error::raw_code.
  #​1153
• Fixed missing initialization in Indexer::new.
  #​1160

v0.20.1

Compare Source

0.20.1...0.20.2

Added

• Added Status::WT_UNREADABLE.
  #​1151

Fixed

• Added missing codes for GIT_EDIRECTORY, GIT_EMERGECONFLICT, GIT_EUNCHANGED, GIT_ENOTSUPPORTED, and GIT_EREADONLY to Error::raw_code.
  #​1153
• Fixed missing initialization in Indexer::new.
  #​1160

guppy-rs/guppy (guppy)

v0.17.23: guppy 0.17.23

Compare Source

Changed

• Internal dependency update: cargo_metadata updated to 0.23.0.

v0.17.22: guppy 0.17.22

Compare Source

Fixed

Replaced obsolete doc_auto_cfg with doc_cfg, to fix Rust nightly builds with the doc_cfg flag enabled.

v0.17.21: guppy 0.17.21

Compare Source

Changed

• Internal dependency update: cargo_metadata updated to 0.22.0.

v0.17.20: guppy 0.17.20

Compare Source

Changed

• Internal dependency update: cargo_metadata updated to 0.21.0.
  • As part of this update, restored compatibility with the unstable bindeps feature -- see this commit.
• MSRV updated to Rust 1.86, as required by dependencies.

v0.17.19: guppy 0.17.19

Compare Source

Changed

• Internal dependency update: cargo_metadata updated to 0.20.0.
• Some older versions of Cargo, when the unstable bindeps feature is enabled, generate JSON output that is no longer supported by cargo_metadata. If you run into an error, please update your nightly toolchain. Nightly versions from at least 2024-07 do not appear to produce invalid metadata.
• MSRV updated to Rust 1.82.

v0.17.18: guppy 0.17.18

Compare Source

Added

• CargoSet::with_package_resolver supports passing in a PackageResolver for additional dynamic filtering of dependency edges.
• CargoSet::target_links and host_links return the set of PackageLink instances followed on the target and host platforms, respectively.

Thanks to anforowicz for these contributions!

v0.17.17: guppy 0.17.17

Compare Source

Added

• Add PlatformEval::target_specs to obtain the list of TargetSpec instances backing a platform evaluator. Thanks to anforowicz for the contribution!

v0.17.16: guppy 0.17.16

Compare Source

Added

• BuildTarget::test_by_default returns true if tests are run for a build target by default.
• BuildTarget::doc_by_default returns true if documentation is enabled for a build target, respectively.

Changed

• BuildTarget::doc_tests is now BuildTarget::doctest_by_default. The old name has been deprecated, but is kept around for compatibility.

v0.17.15: guppy 0.17.15

Compare Source

Added

• BuildTarget::tests_enabled and BuildTarget::docs_enabled return true if tests and documentation is enabled for a build target, respectively.

Changed

• BuildTarget::doc_tests is now BuildTarget::doc_tests_enabled. The old name has been deprecated, but is kept around for compatibility.

v0.17.14: guppy 0.17.14

Compare Source

Added

• MetadataCommand::env adds environment variables to the cargo metadata command.

  Thanks to anforowicz for your first contribution!

mitsuhiko/insta (insta)

v1.43.2

Compare Source

• Fix panics when cargo metadata fails to execute or parse (e.g., when cargo is not in PATH or returns invalid output). Now falls back to using the manifest directory as the workspace root. #​798 (@​adriangb)
• Fix clippy uninlined_format_args lint warnings. #​801
• Changed diff line numbers to 1-based indexing. #​799
• Preserve snapshot names with INSTA_GLOB_FILTER. #​786
• Bumped libc crate to 0.2.174, fixing building on musl targets, and increasing the MSRV of
  insta to 1.64.0 (released Sept 2022). #​784
• Fix clippy 1.88 errors. #​783
• Fix source path in snapshots for non-child workspaces. #​778
• Add lifetime to Selector in redaction iterator. #​779

v1.43.1

Compare Source

This release in identical in rust code to 1.43.0, but reruns the GitHub Actions
workflows, which failed to create a release within GitHub for 1.43.0.

v1.43.0

Compare Source

• Add uppercase keyboard shortcuts for bulk operations in cargo insta review:
  A to accept all, R to reject all, and S to skip all remaining snapshots.
  #​745
• --unreferenced=auto (or other relevant values) no longer cleans up pending
  snapshots. A bug where cargo insta test --unreferenced=auto would
  incorrectly pass on new pending snapshots has been fixed.
• Support specifying cargo-nextest bin with INSTA_CARGO_NEXTEST_BIN. #​721 (Louis Fruleux)
• Allow setting INSTA_WORKSPACE_ROOT at compile time. This is useful for reproducible binaries
  so they don't contain references to CARGO_MANIFEST_DIR. #​726 (Pascal Bach)
• Qualify all references in macros to avoid name clashes. #​729 (Austin Schey)
• Remove linked-hash-map and pin-project dependencies. #​742, #​741, #​738
• cargo insta review fails with a helpful error message when run in a non-TTY environment.

v1.42.2

Compare Source

• Support other indention characters than spaces in inline snapshots. #​679
• Fix an issue where multiple targets with the same root would cause too many pending snapshots to be reported. #​730
• Hide unseen option in CLI, as it's pending deprecation. #​732
• Stop \t and \x1b (ANSI color escape) from causing snapshots to be escaped. #​715
• Improved handling of inline snapshots within allow_duplicates! { .. }. #​712

actions/python-versions (python)

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

v3.13.9: 3.13.9

Compare Source

Python 3.13.9

v3.13.8: 3.13.8

Compare Source

Python 3.13.8

v3.13.7: 3.13.7

Compare Source

Python 3.13.7

v3.13.6: 3.13.6

Compare Source

Python 3.13.6

v3.13.5: 3.13.5

Compare Source

Python 3.13.5

v3.13.4: 3.13.4

Compare Source

Python 3.13.4

v3.13.3: 3.13.3

Compare Source

Python 3.13.3

v3.13.2: 3.13.2

Compare Source

Python 3.13.2

v3.13.1: 3.13.1

Compare Source

Python 3.13.1

v3.13.0: 3.13.0

Compare Source

Python 3.13.0

rayon-rs/rayon (rayon)

v1.11.0

Compare Source

• The minimum supported rustc is now 1.80.
• iter::repeatn has been renamed to iter::repeat_n to match the name
  stabilized in the standard library. The old name still exists as a deprecated
  function for compatibility.
• Fixed a bug in in_place_scope when the default global registry uses the
  current thread, like on WebAssembly without threading support.
• binary_heap::Iter no longer requires a temporary allocation.
• Relaxed trait bounds on many of the public structs.
• Implemented IntoParallelIterator for Box<[T]> and its references.
• Implemented FromParallelIterator<_> for Box<str> via String.

seanmonstar/reqwest (reqwest)

v0.12.24

Compare Source

• Refactor cookie handling to an internal middleware.
• Refactor internal random generator.
• Refactor base64 encoding to reduce a copy.
• Documentation updates.

v0.12.23

Compare Source

• Add ClientBuilder::unix_socket(path) option that will force all requests over that Unix Domain Socket.
• Add ClientBuilder::retry(policy) and reqwest::retry::Builder to configure automatic retries.
• Add ClientBuilder::dns_resolver2() with more ergonomic argument bounds, allowing more resolver implementations.
• Add http3_* options to blocking::ClientBuilder.
• Fix default TCP timeout values to enabled and faster.
• Fix SOCKS proxies to default to port 1080
• (wasm) Add cache methods to RequestBuilder.

v0.12.22

Compare Source

• Fix socks proxies when resolving IPv6 destinations.

v0.12.21

Compare Source

• Fix socks proxy to use socks4a:// instead of socks4h://.
• Fix Error::is_timeout() to check for hyper and IO timeouts too.
• Fix request Error to again include URLs when possible.
• Fix socks connect error to include more context.
• (wasm) implement Default for Body.

v0.12.20

Compare Source

• Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
• Fix proxy headers only using the first matched proxy.
• (wasm) Fix re-adding Error::is_status().

v0.12.19

Compare Source

• Fix redirect that changes the method to GET should remove payload headers.
• Fix redirect to only check the next scheme if the policy action is to follow.
• (wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

Compare Source

• Fix compilation when socks enabled without TLS.

v0.12.17

Compare Source

• Fix compilation on macOS.

v0.12.16

Compare Source

• Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
• Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
• Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
• Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
• Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
• Add Proxy::headers() to add extra headers that should be sent to a proxy.
• Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
• Fix HTTP/3 to support streaming request bodies.
• (wasm) Fix null bodies when calling Response::bytes_stream().

v0.12.15

Compare Source

• Fix Windows to support both ProxyOverride and NO_PROXY.
• Fix http3 to support streaming response bodies.
• Fix http3 dependency from public API misuse.

v0.12.14

Compare Source

• Fix missing fetch_mode_no_cors(), marking as deprecated when not on WASM.

v0.12.13

Compare Source

• Add Form::into_reader() for blocking multipart forms.
• Add Form::into_stream() for async multipart forms.
• Add support for SOCKS4a proxies.
• Fix decoding responses with multiple zstd frames.
• Fix RequestBuilder::form() from overwriting a previously set Content-Type header, like the other builder methods.
• Fix cloning of request timeout in blocking::Request.
• Fix http3 synchronization of connection creation, reducing unneccesary extra connections.
• Fix Windows system proxy to use ProxyOverride as a NO_PROXY value.
• Fix blocking read to correctly reserve and zero read buffer.
• (wasm) Add support for request timeouts.
• (wasm) Fix Error::is_timeout() to return true when from a request timeout.

Stebalien/tempfile (tempfile)

v3.23.0

Compare Source

• Remove need for the "nightly" feature to compile with "wasip2".

v3.22.0

Compare Source

• Updated windows-sys requirement to allow version 0.61.x
• Remove unstable-windows-keep-open-tempfile feature.

v3.21.0

Compare Source

• Updated windows-sys requirement to allow version 0.60.x

v3.20.0

Compare Source

This release mostly unifies the behavior/capabilities around "keeping" temporary files:

• Rename Builder::keep(bool) (via deprecation) to Builder::disable_cleanup(bool) to make it clear that behaves differently from NamedTempFile::keep(). The former disables automatic cleanup while the latter consumes the NamedTempFile object entirely and unsets the "temporary file" attribute (on Windows).
• Rename TempDir::into_path (via deprecation) to TempDir::keep to mirror NamedTempFile::keep.
• Add TempDir::disable_cleanup, NamedTempFile::disable_cleanup, and TempPath::disable_cleanup making it possible to disable automatic cleanup in-place after creating a temporary file/directory (equivalent to calling Builder::disable_cleanup before creating the file/directory).

Additionally, it adds a few spooled temporary file features:

• Add SpooledTempFile::into_file for turning a SpooledTempFile into a regular unnamed temporary file, writing it to the backing storage ("rolling" it) if it was still stored in-memory.
• Add spooled_tempfile_in and SpooledTempFile::new_in methods for creating spooled temporary files in a specific directory. This makes it possible to choose the backing device for your spooled temporary file which is rather important on Linux where the default temporary directory is likely backed by memory (defeating the entire point of having a spooled temporary file).

Finally, this release improves documentation, especially the top-level documentation explaining which temporary file type to use.

BREAKING for those with deny(warnings):

• Builder::keep deprecated in favor of Builder::disable_cleanup.
• TempDir::into_path is deprecated in favor of TempDir::keep.

v3.19.1

Compare Source

• Don't unlink temporary files immediately on Windows (fixes #​339). Unfortunately, this seemed to corrupt the file object (possibly a Windows kernel bug) in rare cases and isn't strictly speaking necessary.

v3.19.0

Compare Source

• Remove direct dependency on cfg-if. It's still in the tree, but we didn't really need to use it in this crate.
• Add an unstable feature (unstable-windows-keep-open-tempfile) to test a potential fix to #​339.

v3.18.0

Compare Source

• Update rustix to 1.0.0.
• Make NamedTempFile::persist_noclobber atomic on Apple operating systems. It's now atomic on MacOS, Windows, and Linux (depending on the OS version and filesystem used).

v3.17.1

Compare Source

• Fix build with windows-sys 0.52. Unfortunately, we have no CI for older windows-sys versions at the moment...

v3.17.0

Compare Source

• Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in Builder::make_in (when creating temporary files of arbitrary types).
• Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test.
• When reseeding with getrandom, use platform (e.g., CPU) specific randomness sources where possible.
• Clarify some documentation.
• Unlink unnamed temporary files on windows immediately when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.