Skip to content

build(deps): bump the cargo-updates group across 1 directory with 18 updates#1040

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-updates-5f3b4ab2ef
Open

build(deps): bump the cargo-updates group across 1 directory with 18 updates#1040
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-updates-5f3b4ab2ef

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo-updates group with 17 updates in the / directory:

Package From To
arrow 59.0.0 59.1.0
candle-core 0.10.2 0.11.0
candle-flash-attn 0.10.2 0.11.0
candle-nn 0.10.2 0.11.0
candle-transformers 0.10.2 0.11.0
indicatif 0.18.5 0.18.6
rand 0.10.1 0.10.2
rustc-hash 2.1.2 2.1.3
serde 1.0.228 1.0.229
serde_json 1.0.150 1.0.151
thiserror 2.0.18 2.0.19
dlpack-rs 0.3.3 0.3.4
cu29 0.15.0 1.0.0
bytes 1.12.0 1.12.1
hiroz cb66390 4f4b625
tokio 1.52.3 1.53.0
cxx 1.0.194 1.0.198

Updates arrow from 59.0.0 to 59.1.0

Release notes

Sourced from arrow's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from arrow's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

Performance improvements:

Closed issues:

  • Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
  • ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits
  • b1de629 Prepare for 59.1.0 release (#10274)
  • c36e926 feat: Add support for MapArray in arrow_row (#9486)
  • d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
  • ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
  • d969025 fix main: parquet test compilation failure (#10266)
  • c7dc6b8 Add validated row decode benchmark (#10259)
  • 7307740 fix: write error for dbg output of out of range timestamps (#10130)
  • af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
  • 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
  • 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
  • Additional commits viewable in compare view

Updates candle-core from 0.10.2 to 0.11.0

Commits
  • 31f35b1 Bump candle version to 0.11.0 (#3658)
  • 9bcfd98 Add paged flash-attn kernels (#3655)
  • c63cb20 [CPU] Quantized perf improvements (#3643)
  • 5152ef6 Support embedding forward pass for ggml quants (#3644)
  • f53ed3b Parameter cache for CUDA kernel launch (#3598)
  • a9667ca Support cuda 13.3 (#3642)
  • 29a15c2 Remove flash attn specific rayon threadpool. Use device.with_context around e...
  • 0190c65 refactor: converge CPU flash attn kernels on shared primitives (#3513)
  • c4b0faf [CPU] Persistent barrier based threadpool and improved qgemm (#3627)
  • 7625889 [CPU] Add neon optimized path to BlockQ8K::from_float (#3629)
  • Additional commits viewable in compare view

Updates candle-flash-attn from 0.10.2 to 0.11.0

Commits
  • 31f35b1 Bump candle version to 0.11.0 (#3658)
  • 9bcfd98 Add paged flash-attn kernels (#3655)
  • c63cb20 [CPU] Quantized perf improvements (#3643)
  • 5152ef6 Support embedding forward pass for ggml quants (#3644)
  • f53ed3b Parameter cache for CUDA kernel launch (#3598)
  • a9667ca Support cuda 13.3 (#3642)
  • 29a15c2 Remove flash attn specific rayon threadpool. Use device.with_context around e...
  • 0190c65 refactor: converge CPU flash attn kernels on shared primitives (#3513)
  • c4b0faf [CPU] Persistent barrier based threadpool and improved qgemm (#3627)
  • 7625889 [CPU] Add neon optimized path to BlockQ8K::from_float (#3629)
  • Additional commits viewable in compare view

Updates candle-nn from 0.10.2 to 0.11.0

Commits
  • 31f35b1 Bump candle version to 0.11.0 (#3658)
  • 9bcfd98 Add paged flash-attn kernels (#3655)
  • c63cb20 [CPU] Quantized perf improvements (#3643)
  • 5152ef6 Support embedding forward pass for ggml quants (#3644)
  • f53ed3b Parameter cache for CUDA kernel launch (#3598)
  • a9667ca Support cuda 13.3 (#3642)
  • 29a15c2 Remove flash attn specific rayon threadpool. Use device.with_context around e...
  • 0190c65 refactor: converge CPU flash attn kernels on shared primitives (#3513)
  • c4b0faf [CPU] Persistent barrier based threadpool and improved qgemm (#3627)
  • 7625889 [CPU] Add neon optimized path to BlockQ8K::from_float (#3629)
  • Additional commits viewable in compare view

Updates candle-transformers from 0.10.2 to 0.11.0

Commits
  • 31f35b1 Bump candle version to 0.11.0 (#3658)
  • 9bcfd98 Add paged flash-attn kernels (#3655)
  • c63cb20 [CPU] Quantized perf improvements (#3643)
  • 5152ef6 Support embedding forward pass for ggml quants (#3644)
  • f53ed3b Parameter cache for CUDA kernel launch (#3598)
  • a9667ca Support cuda 13.3 (#3642)
  • 29a15c2 Remove flash attn specific rayon threadpool. Use device.with_context around e...
  • 0190c65 refactor: converge CPU flash attn kernels on shared primitives (#3513)
  • c4b0faf [CPU] Persistent barrier based threadpool and improved qgemm (#3627)
  • 7625889 [CPU] Add neon optimized path to BlockQ8K::from_float (#3629)
  • Additional commits viewable in compare view

Updates indicatif from 0.18.5 to 0.18.6

Release notes

Sourced from indicatif's releases.

0.18.6

What's Changed

Commits

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

Updates rustc-hash from 2.1.2 to 2.1.3

Changelog

Sourced from rustc-hash's changelog.

2.1.3

Commits

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

  • Update to syn 3
Commits
  • e13a785 Release 2.0.19
  • 0a0e76c Update to syn 3
  • ec42ea7 Update actions/upload-artifact@v6 -> v7
  • 4178c4a Update actions/checkout@v6 -> v7
  • 7214e0e Ignore items_after_statements pedantic clippy lint in test
  • febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
  • c50e387 chore: improve thiserror maintenance path
  • d4a2507 Raise minimum tested compiler to rust 1.85
  • 99e8a6c Unpin CI miri toolchain
  • 9ac165c Pin CI miri to nightly-2026-02-11
  • Additional commits viewable in compare view

Updates dlpack-rs from 0.3.3 to 0.3.4

Commits

Updates cu29 from 0.15.0 to 1.0.0

Commits
  • 6ff92e9 copy cu29.png to all the demo crates
  • 059472d Adds the documentations entry for all the crates.
  • 4a52e6a cu29_value was missing categories.
  • fa8dabe Update badge to canonical spot
  • 05ddda1 Bump the revision to v1.0.0
  • b621ded uniformizes version to v1.0.0-rc2 for new crates
  • 405e931 Merge branch 'master' into v1.0
  • d095fd9 Fix: encoding on ROS2 plus full end2end non-regression (#1176)
  • 5aa5aad chore(deps): update circular-buffer requirement from 1.1.0 to 2.0.0 (#1165)
  • 0a7ad22 Merge pull request #1174 from Scofield626/chore/bump-candle-0.11
  • Additional commits viewable in compare view

Updates bytes from 1.12.0 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)
Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)
Commits

Updates hiroz from cb66390 to 4f4b625

Commits
  • 4f4b625 fix: structured timeout detection in hiroz-py subscriber recv (#224) (#225)
  • 6d80aa8 fix(error): structured Timeout error variant for core, FFI, and Python bindin...
  • 3f289c9 docs: remove floating SVG animations (#219)
  • 5fd3208 feat(msgs): vendor 11 standard ROS 2 packages for Jazzy coverage (#215)
  • bbc1252 fix(codegen): use BTreeMap for deterministic Python stub ordering (#218)
  • See full diff in compare view

Updates tokio from 1.52.3 to 1.53.0

Release notes

Sourced from tokio's releases.

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

  • fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
  • metrics: add task schedule latency metric (#7986)
  • net: add SocketAddr methods to Unix sockets (#8144)

Changed

  • io: add #[inline] to IO trait impls for in-memory types (#8242)
  • net: implement UCred::pid on FreeBSD (#8086)
  • net: support Nuttx target os (#8259)
  • signal: refactor global variables on Windows (#8231)
  • sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
  • taskdump: support taskdumps on s390x (#8192)
  • time: add #[track_caller] to timeout_at() (#8077)
  • time: consolidate mutex locks on spurious poll (#8124)
  • time: defer waker clone on spurious poll (#8107)
  • time: move lazy-registration state into Sleep (#8132)
  • tracing: remove unnecessary span clone (#8126)

Fixed

  • io: do not treat zero-length reads as EOF in Chain (#8251)
  • net: use getpeereid for QNX peer credentials (#8270)
  • runtime: avoid illegal state in FastRand (#8078)
  • sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
  • taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
  • time: avoid stack overflow in runtime constructor (#8093)
  • time (alt timer): ensure timers stay in the same runtime after .reset() (#8169)

IO uring (unstable)

  • fs: use io-uring for fs::try_exists (#8080)
  • fs: use io-uring for renaming files (#7800)
  • rt: flush io-uring CQE in case of CQE overflow (#8277)

Documented

  • docs: clarify cancel safety wording (#8181)
  • fs: clarify create_dir_all succeeds if path exists (#8149)
  • io: add warning about stdout reordering with multiple handles (#8276)
  • net: document pipe try_read*/try_write* readiness behavior (#8032)
  • runtime: document interaction with fork() (#8202)
  • sync: clarify broadcast lagging semantics (#8239)
  • sync: document memory ordering guarantees for Semaphore (#8119)
  • task: explain why yield_now defers its waker (#8254)
  • time: add panic docs to timeout_at() (#8077)

... (truncated)

Commits

Updates cxx from 1.0.194 to 1.0.198

Release notes

Sourced from cxx's releases.

1.0.198

  • Update to syn 3

1.0.197

  • Restore RefUnwindSafe for let_cxx_string in async (#1738)
  • Use link_deps in Cargo bazel metadata (#1741)

1.0.196

1.0.195

  • Fix use of uninitialized value in let_cxx_string! on panic inside initialization expression (#1729, #1731)
Commits

Updates cxx-build from 1.0.194 to 1.0.198

Release notes

Sourced from cxx-build's releases.

1.0.198

  • Update to syn 3

1.0.197

  • Restore RefUnwindSafe for let_cxx_string in async (#1738)
  • Use link_deps in Cargo bazel metadata (#1741)

1.0.196

1.0.195

  • Fix use of uninitialized value in let_cxx_string! on panic inside initialization expression (#1729, #1731)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the cargo-updates group across 1 directory with 18 …
cdbfc75 
…updates

Bumps the cargo-updates group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [arrow](https://github.com/apache/arrow-rs) | `59.0.0` | `59.1.0` |
| [candle-core](https://github.com/huggingface/candle) | `0.10.2` | `0.11.0` |
| [candle-flash-attn](https://github.com/huggingface/candle) | `0.10.2` | `0.11.0` |
| [candle-nn](https://github.com/huggingface/candle) | `0.10.2` | `0.11.0` |
| [candle-transformers](https://github.com/huggingface/candle) | `0.10.2` | `0.11.0` |
| [indicatif](https://github.com/console-rs/indicatif) | `0.18.5` | `0.18.6` |
| [rand](https://github.com/rust-random/rand) | `0.10.1` | `0.10.2` |
| [rustc-hash](https://github.com/rust-lang/rustc-hash) | `2.1.2` | `2.1.3` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` |
| [dlpack-rs](https://github.com/kornia/dlpack-rs) | `0.3.3` | `0.3.4` |
| [cu29](https://github.com/copper-project/copper-rs) | `0.15.0` | `1.0.0` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.12.0` | `1.12.1` |
| [hiroz](https://github.com/ZettaScaleLabs/hiroz) | ``cb66390`` | ``4f4b625`` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.0` |
| [cxx](https://github.com/dtolnay/cxx) | `1.0.194` | `1.0.198` |



Updates `arrow` from 59.0.0 to 59.1.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@59.0.0...59.1.0)

Updates `candle-core` from 0.10.2 to 0.11.0
- [Changelog](https://github.com/huggingface/candle/blob/main/CHANGELOG.md)
- [Commits](huggingface/candle@0.10.2...0.11.0)

Updates `candle-flash-attn` from 0.10.2 to 0.11.0
- [Changelog](https://github.com/huggingface/candle/blob/main/CHANGELOG.md)
- [Commits](huggingface/candle@0.10.2...0.11.0)

Updates `candle-nn` from 0.10.2 to 0.11.0
- [Changelog](https://github.com/huggingface/candle/blob/main/CHANGELOG.md)
- [Commits](huggingface/candle@0.10.2...0.11.0)

Updates `candle-transformers` from 0.10.2 to 0.11.0
- [Changelog](https://github.com/huggingface/candle/blob/main/CHANGELOG.md)
- [Commits](huggingface/candle@0.10.2...0.11.0)

Updates `indicatif` from 0.18.5 to 0.18.6
- [Release notes](https://github.com/console-rs/indicatif/releases)
- [Commits](console-rs/indicatif@0.18.5...0.18.6)

Updates `rand` from 0.10.1 to 0.10.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.1...0.10.2)

Updates `rustc-hash` from 2.1.2 to 2.1.3
- [Changelog](https://github.com/rust-lang/rustc-hash/blob/main/CHANGELOG.md)
- [Commits](rust-lang/rustc-hash@v2.1.2...v2.1.3)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `thiserror` from 2.0.18 to 2.0.19
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.19)

Updates `dlpack-rs` from 0.3.3 to 0.3.4
- [Commits](https://github.com/kornia/dlpack-rs/commits)

Updates `cu29` from 0.15.0 to 1.0.0
- [Commits](copper-project/copper-rs@v0.15.0...v1.0.0)

Updates `bytes` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.12.0...v1.12.1)

Updates `hiroz` from `cb66390` to `4f4b625`
- [Release notes](https://github.com/ZettaScaleLabs/hiroz/releases)
- [Commits](ZettaScaleLabs/hiroz@cb66390...4f4b625)

Updates `tokio` from 1.52.3 to 1.53.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.0)

Updates `cxx` from 1.0.194 to 1.0.198
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.194...1.0.198)

Updates `cxx-build` from 1.0.194 to 1.0.198
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.194...1.0.198)

---
updated-dependencies:
- dependency-name: arrow
  dependency-version: 59.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-updates
- dependency-name: candle-core
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-updates
- dependency-name: candle-flash-attn
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-updates
- dependency-name: candle-nn
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-updates
- dependency-name: candle-transformers
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-updates
- dependency-name: indicatif
  dependency-version: 0.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-updates
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-updates
- dependency-name: rustc-hash
  dependency-version: 2.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-updates
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-updates
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-updates
- dependency-name: thiserror
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-updates
- dependency-name: dlpack-rs
  dependency-version: 0.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-updates
- dependency-name: cu29
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-updates
- dependency-name: bytes
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-updates
- dependency-name: hiroz
  dependency-version: 4f4b625dc41e74f487776bd6378e774ffa729234
  dependency-type: direct:production
  dependency-group: cargo-updates
- dependency-name: tokio
  dependency-version: 1.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-updates
- dependency-name: cxx
  dependency-version: 1.0.198
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-updates
- dependency-name: cxx-build
  dependency-version: 1.0.198
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 20, 2026
@github-actions

github-actions Bot commented Jul 20, 2026

Copy link
Copy Markdown

⚠️ PR Validation Warnings

❌ No linked issue found: This PR does not reference any issue. Please link to an issue using "Fixes #123" or "Closes #123" in the PR description.

Note: This PR can remain open, but please address these issues to ensure a smooth review process. For more information, see our Contributing Guide.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants