Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the cli group with 10 updates in the / directory:

Package From To
aws-sdk-s3 1.108.0 1.109.0
axum 0.8.6 0.8.8
clap 4.5.49 4.5.53
duckdb 1.4.1 1.4.3
rust-embed 8.7.2 8.9.0
serde_json 1.0.145 1.0.148
tempfile 3.23.0 3.24.0
tower-http 0.6.6 0.6.8
tracing 0.1.41 0.1.44
tracing-subscriber 0.3.20 0.3.22

Updates aws-sdk-s3 from 1.108.0 to 1.109.0

Commits

Updates axum from 0.8.6 to 0.8.8

Release notes

Sourced from axum's releases.

axum v0.8.8

  • Clarify documentation for Router::route_layer (#3567)

#3567: tokio-rs/axum#3567

axum v0.8.7

  • Relax implicit Send / Sync bounds on RouterAsService, RouterIntoService (#3555)
  • Make it easier to visually scan for default features (#3550)
  • Fix some documentation typos

#3550: tokio-rs/axum#3550 #3555: tokio-rs/axum#3555

Commits
  • d07863f Release axum v0.8.8 and axum-extra v0.12.3
  • 287c674 axum-extra: Make typed-routing feature enable routing feature (#3514)
  • f5804aa SecondElementIs: Correct a small inconsistency (#3559)
  • f51f3ba axum-extra: Add trailing newline to pretty JSON response (#3526)
  • 816407a Fix integer underflow in try_range_response for empty files (#3566)
  • 78656eb docs: Clarify route_layer does not apply middleware to the fallback handler...
  • 4404f27 Release axum v0.8.7 and axum-extra v0.12.2
  • 8f1545a Fix typo in extractors guide (#3554)
  • 4fc3faa Relax implicit Send / Sync bounds (#3555)
  • a05920c Make it easier to visually scan for default features (#3550)
  • Additional commits viewable in compare view

Updates clap from 4.5.49 to 4.5.53

Release notes

Sourced from clap's releases.

v4.5.53

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

v4.5.52

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup

v4.5.51

[4.5.51] - 2025-10-29

Fixes

  • (help) Correctly calculate padding for short flags that take a value
  • (help) Don't panic on short flags using ArgAction::Count

v4.5.50

[4.5.50] - 2025-10-20

Features

  • Accept Cow where String and &str are accepted
Changelog

Sourced from clap's changelog.

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup

[4.5.51] - 2025-10-29

Fixes

  • (help) Correctly calculate padding for short flags that take a value
  • (help) Don't panic on short flags using ArgAction::Count

[4.5.50] - 2025-10-20

Features

  • Accept Cow where String and &str are accepted
Commits
  • 3716f9f chore: Release
  • 613b69a docs: Update changelog
  • d117f7a Merge pull request #6028 from epage/arg
  • cb8255d feat(builder): Allow quoted id's for arg macro
  • 1036060 Merge pull request #6025 from AldaronLau/typos-in-faq
  • 2fcafc0 docs: Fix minor grammar issues in FAQ
  • a380b65 Merge pull request #6023 from epage/template
  • 4d7ab14 chore: Update from _rust/main template
  • b8a7ea4 chore(deps): Update Rust Stable to v1.87 (#18)
  • f9842b3 chore: Avoid MSRV problems out of the box
  • Additional commits viewable in compare view

Updates duckdb from 1.4.1 to 1.4.3

Release notes

Sourced from duckdb's releases.

v1.4.3

Highlights

  • Build can auto-download matching prebuilt libduckdb via DUCKDB_DOWNLOAD_LIB=1.
  • Appenders now support column subsets and column switching; defaults/NULLs fill the rest.
  • Table functions can store extra info via the new register_table_function_with_extra_info.
  • Scalar functions can be marked volatile using the volatile trait method.
  • Logical type coverage broadened (new DuckDB IDs, Unsupported fallback).
  • Updated bundled DuckDB to v1.4.3

What's Changed

New Contributors

Full Changelog: duckdb/duckdb-rs@v1.4.2...v1.4.3

v1.4.2

What's Changed

New Contributors

... (truncated)

Commits
  • 65e8496 Update DuckDB to v1.4.3 (#644)
  • d648bf9 Remove broken release changelog/action (#645)
  • 42f711c Remove broken release changelog/action
  • da8e4e9 Update DuckDB to v1.4.3
  • 749cff7 Add column-selective appender API with default support (#642)
  • 60ced61 Propagate CString::new errors
  • 704f422 Add more tests
  • 40f4eab Simplify appender_with_columns
  • 35bccd2 Add column-selective appender API with default support
  • 7976f1a Update broken links in CONTRIBUTING.md (#641)
  • Additional commits viewable in compare view

Updates rust-embed from 8.7.2 to 8.9.0

Updates serde_json from 1.0.145 to 1.0.148

Release notes

Sourced from serde_json's releases.

v1.0.148

  • Update zmij dependency to 1.0

v1.0.147

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Commits

Updates tempfile from 3.23.0 to 3.24.0

Changelog

Sourced from tempfile's changelog.

3.24.0

  • Actually support WASIp2 without the nightly feature. This library is now feature complete on WASIp2 without any additional feature flags.
  • Exclude CI scripts from the published crate.
Commits

Updates tower-http from 0.6.6 to 0.6.8

Release notes

Sourced from tower-http's releases.

tower-http-0.6.8

Fixed

  • Disable multiple_members in Gzip decoder, since HTTP context only uses one member. (#621)

#621: tower-rs/tower-http#621

What's Changed

New Contributors

Full Changelog: tower-rs/tower-http@tower-http-0.6.7...tower-http-0.6.8

tower-http-0.6.7

Added

  • TimeoutLayer::with_status_code(status) to define the status code returned when timeout is reached. (#599)

Deprecated

  • auth::require_authorization is too basic for real-world. (#591)
  • TimeoutLayer::new() should be replaced with TimeoutLayer::with_status_code(). (Previously was StatusCode::REQUEST_TIMEOUT) (#599)

Fixed

  • on_eos is now called even for successful responses. (#580)
  • ServeDir: call fallback when filename is invalid (#586)
  • decompression will not fail when body is empty (#618)

#580: tower-rs/tower-http#580 #586: tower-rs/tower-http#586 #591: tower-rs/tower-http#591 #599: tower-rs/tower-http#599 #618: tower-rs/tower-http#618

New Contributors

... (truncated)

Commits
  • 33166c8 v0.6.8
  • 6680160 Fix deprecated lints (#608)
  • 81b8231 ci: Switch cargo-public-api-crates to cargo-check-external-types (#613)
  • 1fb0144 ci: pin tracing in msrv job (#622)
  • 1fe4c09 fix(decompression): disable multiple_members option for gzip decoder (#621)
  • 3bf1ba7 v0.6.7
  • 723ca9a fix(decompression): Suppress EOF errors caused by decompressing empty body (#...
  • 8ab9f82 chore(ci): use newer cargo-public-api-crates job (#619)
  • 7cfdf76 doc: Replace doc_auto_cfg with doc_cfg (#609)
  • 50beeaf Add support for custom status code in TimeoutLayer (#599)
  • Additional commits viewable in compare view

Updates tracing from 0.1.41 to 0.1.44

Release notes

Sourced from tracing's releases.

tracing 0.1.44

Fixed

  • Fix record_all panic (#3432)

Changed

  • tracing-core: updated to 0.1.36 (#3440)

#3432: tokio-rs/tracing#3432 #3440: tokio-rs/tracing#3440

tracing 0.1.43

Important

The previous release [0.1.42] was yanked because #3382 was a breaking change. See further details in #3424. This release contains all the changes from that version, plus a revert for the problematic part of the breaking PR.

Fixed

  • Revert "make valueset macro sanitary" (#3425)

#3382: tokio-rs/tracing#3382 #3424: tokio-rs/tracing#3424 #3425: tokio-rs/tracing#3425 [0.1.42]: https://github.com/tokio-rs/tracing/releases/tag/tracing-0.1.42

tracing 0.1.42

Important

The [Span::record_all] method has been removed from the documented API. It was always unsuable via the documented API as it requried a ValueSet which has no publically documented constructors. The method remains, but should not be used outside of tracing macros.

Added

  • attributes: Support constant expressions as instrument field names (#3158)
  • Add record_all! macro for recording multiple values in one call (#3227)
  • core: Improve code generation at trace points significantly (#3398)

Changed

  • tracing-core: updated to 0.1.35 (#3414)
  • tracing-attributes: updated to 0.1.31 (#3417)

Fixed

  • Fix "name / parent" variant of event! (#2983)

... (truncated)

Commits

Updates tracing-subscriber from 0.3.20 to 0.3.22

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.22

Important

The previous release [0.3.21] was yanked as it depended explicitly on [tracing-0.1.42], which was yanked due to a breaking change (see #3424 for details). This release contains all the changes from the previous release, plus an update to the newer version of tracing.

Changed

  • tracing: updated to 0.1.43 (#3427)

#3424: tokio-rs/tracing#3424 #3427: tokio-rs/tracing#3427 [0.3.21]: https://github.com/tokio-rs/tracing/releases/tag/tracing-subscriber-0.3.21 [tracing-0.1.42]: https://github.com/tokio-rs/tracing/releases/tag/tracing-0.1.42

tracing-subscriber 0.3.21

Fixed

  • Change registry exit to decrement local span ref only (#3331)
  • Make Layered propagate on_register_dispatch (#3379)

Changed

  • tracing: updated to 0.1.42 (#3418)

Performance

  • Remove clone_span on enter (#3289)

Documented

  • Fix a few small things in the format module (#3339)
  • Fix extra closing brace in layer docs (#3350)
  • Fix link in FmtSpan docs (#3411)

#3289: tokio-rs/tracing#3289 #3331: tokio-rs/tracing#3331 #3339: tokio-rs/tracing#3339 #3350: tokio-rs/tracing#3350 #3379: tokio-rs/tracing#3379 #3411: tokio-rs/tracing#3411 #3418: tokio-rs/tracing#3418

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cli group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [aws-sdk-s3](https://github.com/awslabs/aws-sdk-rust) | `1.108.0` | `1.109.0` |
| [axum](https://github.com/tokio-rs/axum) | `0.8.6` | `0.8.8` |
| [clap](https://github.com/clap-rs/clap) | `4.5.49` | `4.5.53` |
| [duckdb](https://github.com/duckdb/duckdb-rs) | `1.4.1` | `1.4.3` |
| rust-embed | `8.7.2` | `8.9.0` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.148` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.23.0` | `3.24.0` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.6.6` | `0.6.8` |
| [tracing](https://github.com/tokio-rs/tracing) | `0.1.41` | `0.1.44` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.20` | `0.3.22` |



Updates `aws-sdk-s3` from 1.108.0 to 1.109.0
- [Release notes](https://github.com/awslabs/aws-sdk-rust/releases)
- [Commits](https://github.com/awslabs/aws-sdk-rust/commits)

Updates `axum` from 0.8.6 to 0.8.8
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](tokio-rs/axum@axum-v0.8.6...axum-v0.8.8)

Updates `clap` from 4.5.49 to 4.5.53
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.49...clap_complete-v4.5.53)

Updates `duckdb` from 1.4.1 to 1.4.3
- [Release notes](https://github.com/duckdb/duckdb-rs/releases)
- [Commits](duckdb/duckdb-rs@v1.4.1...v1.4.3)

Updates `rust-embed` from 8.7.2 to 8.9.0

Updates `serde_json` from 1.0.145 to 1.0.148
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.148)

Updates `tempfile` from 3.23.0 to 3.24.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.23.0...v3.24.0)

Updates `tower-http` from 0.6.6 to 0.6.8
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.6...tower-http-0.6.8)

Updates `tracing` from 0.1.41 to 0.1.44
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-0.1.41...tracing-0.1.44)

Updates `tracing-subscriber` from 0.3.20 to 0.3.22
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.20...tracing-subscriber-0.3.22)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-version: 1.109.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli
- dependency-name: axum
  dependency-version: 0.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli
- dependency-name: clap
  dependency-version: 4.5.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli
- dependency-name: duckdb
  dependency-version: 1.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli
- dependency-name: rust-embed
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli
- dependency-name: serde_json
  dependency-version: 1.0.148
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli
- dependency-name: tempfile
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli
- dependency-name: tower-http
  dependency-version: 0.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli
- dependency-name: tracing
  dependency-version: 0.1.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli
- dependency-name: tracing-subscriber
  dependency-version: 0.3.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jan 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant