chore(deps): bump the patch-and-minor group across 1 directory with 10 updates by dependabot[bot] · Pull Request #317 · aram-devdocs/plumb

dependabot · 2026-07-20T16:11:10Z

Bumps the patch-and-minor group with 10 updates in the / directory:

Package	From	To
tokio	`1.52.2`	`1.53.0`
clap	`4.6.1`	`4.6.3`
serde_json	`1.0.149`	`1.0.151`
toml	`1.1.2+spec-1.1.0`	`1.1.3+spec-1.1.0`
thiserror	`2.0.18`	`2.0.19`
anyhow	`1.0.102`	`1.0.104`
which	`8.0.2`	`8.0.5`
insta	`1.47.2`	`1.48.0`
assert_cmd	`2.2.1`	`2.2.2`
serial_test	`3.4.0`	`3.5.0`

Updates tokio from 1.52.2 to 1.53.0

Release notes

Sourced from tokio's releases.

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)

metrics: add task schedule latency metric (#7986)

net: add SocketAddr methods to Unix sockets (#8144)

Changed

io: add #[inline] to IO trait impls for in-memory types (#8242)

net: implement UCred::pid on FreeBSD (#8086)

net: support Nuttx target os (#8259)

signal: refactor global variables on Windows (#8231)

sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)

taskdump: support taskdumps on s390x (#8192)

time: add #[track_caller] to timeout_at() (#8077)

time: consolidate mutex locks on spurious poll (#8124)

time: defer waker clone on spurious poll (#8107)

time: move lazy-registration state into Sleep (#8132)

tracing: remove unnecessary span clone (#8126)

Fixed

io: do not treat zero-length reads as EOF in Chain (#8251)

net: use getpeereid for QNX peer credentials (#8270)

runtime: avoid illegal state in FastRand (#8078)

sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)

taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)

time: avoid stack overflow in runtime constructor (#8093)

time (alt timer): ensure timers stay in the same runtime after .reset() (#8169)

IO uring (unstable)

fs: use io-uring for fs::try_exists (#8080)

fs: use io-uring for renaming files (#7800)

rt: flush io-uring CQE in case of CQE overflow (#8277)

Documented

docs: clarify cancel safety wording (#8181)

fs: clarify create_dir_all succeeds if path exists (#8149)

io: add warning about stdout reordering with multiple handles (#8276)

net: document pipe try_read*/try_write* readiness behavior (#8032)

runtime: document interaction with fork() (#8202)

sync: clarify broadcast lagging semantics (#8239)

sync: document memory ordering guarantees for Semaphore (#8119)

task: explain why yield_now defers its waker (#8254)

time: add panic docs to timeout_at() (#8077)

... (truncated)

Commits

be689a3 chore: prepare Tokio v1.53.0 (#8294)
50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
efdba5f chore: prepare Tokio v1.52.4 (#8289)
b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
7bcd2d3 taskdump: remove crate disambiguators from output (#8288)
f84b209 chore: prepare Tokio v1.51.4 (#8286)
eacb98e runtime: don't skip the driver when before_park schedules work (#8222)
5e16ee0 task: avoid replacing the JoinQueue waker in try_join_next (#8279)
88212ab sync: document memory ordering guarantees for Semaphore (#8119)
Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.3

Release notes

Sourced from clap's releases.

v4.6.3

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.3] - 2026-07-20

Fixes

(derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Commits

7e0bcca chore: Release
0f09905 docs: Update changelog
9706951 Merge pull request #6353 from truffle-dev/feat-completer-arg-index
ac0d148 feat(complete): Index-aware ValueCompleter
1565a3c test(complete): Cover indexed multi-value case
48fc10a Merge pull request #6350 from stefankreutz/missing_docs
7d4c353 docs: Hint at clippy's missing docs lint
f6a6701 chore(deps): Update Rust Stable to v1.95 (#6347)
ac5fda6 chore: Release
b73c627 docs: Update changelog
Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Add RawValue::from_string_unchecked (#1331, thanks @WonderLawrence)

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

de85007 Release 1.0.151
3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
cf16f75 Add RawValue::from_string_unchecked
827a315 Update actions/upload-artifact@v6 -> v7
cea36a5 Update actions/checkout@v6 -> v7
a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
Additional commits viewable in compare view

Updates toml from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0

Commits

eb25160 chore: Release
f36fb52 docs: Update changelog
3adbbb7 fix(writer): Don't overflow (#1189)
fb0c1b3 fix(writer): Don't overflow
5e70a70 test(writer): Add overflow test
771a975 chore: Upgrade toml-test (#1186)
28f6c9c chore: Upgrade toml-test
30d75ca chore(deps): Update Prek to v0.4.9 (#1185)
17efe57 chore(deps): Update Rust Stable to v1.97 (#1184)
c9d0d54 style: Make clippy happy
Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

Update to syn 3

Commits

e13a785 Release 2.0.19
0a0e76c Update to syn 3
ec42ea7 Update actions/upload-artifact@v6 -> v7
4178c4a Update actions/checkout@v6 -> v7
7214e0e Ignore items_after_statements pedantic clippy lint in test
febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
c50e387 chore: improve thiserror maintenance path
d4a2507 Raise minimum tested compiler to rust 1.85
99e8a6c Unpin CI miri toolchain
9ac165c Pin CI miri to nightly-2026-02-11
Additional commits viewable in compare view

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

Update syn dev-dependency to version 3

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

1dbe186 Release 1.0.104
f6479f8 Update to syn 3
5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates which from 8.0.2 to 8.0.5

Release notes

Sourced from which's releases.

8.0.5

What's Changed

Fix absolute path lookup when cwd is disabled by @weifanglab in harryfei/which-rs#126

New Contributors

@weifanglab made their first contribution in harryfei/which-rs#126

Full Changelog: harryfei/which-rs@8.0.4...8.0.5

8.0.4

What's Changed

feat: emit NonFatalError on Windows if PATHEXT not populated by @Xaeroxe in harryfei/which-rs#125

Full Changelog: harryfei/which-rs@8.0.3...8.0.4

8.0.3

What's Changed

feat: use catch-all cfg for is_valid_executable on unsupported targets by @pmikolajczyk41 in harryfei/which-rs#124

New Contributors

@pmikolajczyk41 made their first contribution in harryfei/which-rs#124

Full Changelog: harryfei/which-rs@8.0.2...8.0.3

Changelog

Sourced from which's changelog.

8.0.5

Bug fix: #126 Do not use current directory for search when provided path is absolute. Thanks @weifanglab for your contribution to which!

8.0.4

On Windows we now emit a NonFatalError if the PATHEXT environment variable is not populated, and the query did not specify a file extension.

8.0.3

Add fallback implementation of is_valid_executable allowing which-rs to compile on targets which are not Unix, Windows, WASI, or Redox. Thanks @pmikolajczyk41 for your contribution to which!

Commits

7fba0e0 bump version number, update CHANGELOG.md
e28a3bf Fix absolute path lookup when cwd is disabled (#126)
c9df5ef feat: emit NonFatalError on Windows if PATHEXT not populated (#125)
9b1ec59 bump version number, update changelog
6ddf6cf Implement is_valid_executable for other configurations (#124)
See full diff in compare view

Updates insta from 1.47.2 to 1.48.0

Release notes

Sourced from insta's releases.

1.48.0

Release Notes

Add strip_ansi_escape_codes setting which removes ANSI escape sequences (color codes, cursor movement, etc.) from snapshot content before comparison. Requires the filters feature. #899 (@pierluigilenoci)

Add opt-in support for YAML literal blocks for multiline strings in snapshot metadata fields such as description and expression. Set INSTA_YAML_BLOCK_STYLE=1 to enable. #851 (@ivov)

Setting CI=true normally makes cargo insta test behave as though --check was passed. Explicit snapshot handling options such as --accept now take precedence over this environment variable, allowing users to override this behavior if they want to. #924

Fix cargo insta test --profile being forwarded to nextest as the nextest profile instead of the cargo build profile; it now translates to --cargo-profile for the nextest runner. Add --nextest-profile to select the nextest profile. #910

Fix cargo insta pending-snapshots printing unusable \\?\-prefixed paths on Windows. The --snapshot filter now also accepts partial paths: any trailing path suffix of the snapshot file matches, so a bare --snapshot my_test.snap works. #904

Accepting a binary snapshot no longer fails with os error 2 when its data file is missing (e.g. gitignored and not committed). #914

Install cargo-insta 1.48.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-installer.ps1 | iex"
Download cargo-insta 1.48.0

File Platform Checksum

cargo-insta-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum

cargo-insta-x86_64-apple-darwin.tar.xz Intel macOS checksum

cargo-insta-x86_64-pc-windows-msvc.zip x64 Windows checksum

cargo-insta-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

cargo-insta-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

Changelog

Sourced from insta's changelog.

1.48.0

Add strip_ansi_escape_codes setting which removes ANSI escape sequences (color codes, cursor movement, etc.) from snapshot content before comparison. Requires the filters feature. #899 (@pierluigilenoci)

Add opt-in support for YAML literal blocks for multiline strings in snapshot metadata fields such as description and expression. Set INSTA_YAML_BLOCK_STYLE=1 to enable. #851 (@ivov)

Setting CI=true normally makes cargo insta test behave as though --check was passed. Explicit snapshot handling options such as --accept now take precedence over this environment variable, allowing users to override this behavior if they want to. #924

Fix cargo insta test --profile being forwarded to nextest as the nextest profile instead of the cargo build profile; it now translates to --cargo-profile for the nextest runner. Add --nextest-profile to select the nextest profile. #910

Fix cargo insta pending-snapshots printing unusable \\?\-prefixed paths on Windows. The --snapshot filter now also accepts partial paths: any trailing path suffix of the snapshot file matches, so a bare --snapshot my_test.snap works. #904

Accepting a binary snapshot no longer fails with os error 2 when its data file is missing (e.g. gitignored and not committed). #914

Commits

7f23d2e Release 1.48.0 (#925)
ee9cae1 Allow CI=true to be overridden by an explicitly passed --accept CLI flag ...
043cf82 fix: translate --profile to --cargo-profile for nextest (#913)
9c77f13 test: cover deep-wildcard redaction through arrays (#915)
362f432 Fix --snapshot filter on Windows; allow partial paths (#904)
a436836 fix: tolerate a missing binary snapshot data file (#914)
bf5fcdf fix: regenerate Cargo.lock and guard it with --locked in CI (#912)
a761a9c feat: Support YAML literal blocks for multiline strings (#851)
f9633f3 ci: pin check-minver to nightly-2026-04-25 (#905)
c7b98b8 feat: add strip_ansi_escape_codes setting (#899)
See full diff in compare view

Updates assert_cmd from 2.2.1 to 2.2.2

Changelog

Sourced from assert_cmd's changelog.

[2.2.2] - 2026-05-11

Fixes

Ensure #[track_caller] works for better panic messages

Commits

feece89 chore: Release assert_cmd version 2.2.2
367cdf7 docs: Update changelog
a98cc85 Merge pull request #289 from marcospb19/track_caller
cd2e167 fix: .success() not reporting panic location
45a1c74 chore(deps): Update Prek to v0.3.13 (#293)
f1d9b5b chore(deps): Update Prek to v0.3.12 (#292)
1d34bab Merge pull request #291 from epage/template
d9a70ad style: Make clippy happy
4f5b5af chore: Update from _rust template
1e1d586 chore(renovate): Fix the tag
Additional commits viewable in compare view

Updates serial_test from 3.4.0 to 3.5.0

Release notes

Sourced from serial_test's releases.

v3.5.0

What's Changed

Replace scc/sdd with std::sync::Mutex for Miri strict provenance compatibility by @justanotheranonymoususer in palfrey/serial_test#157

New Contributors

@justanotheranonymoususer made their first contribution in palfrey/serial_test#157

Full Changelog: palfrey/serial_test@v3.4.0...v3.5.0

Commits

6181f64 3.5.0
480bead Merge pull request #157 from justanotheranonymoususer/remove-scc-dep
e03019e Update ci.yml
820c0f3 Update ci.yml
62a89b0 Only skip file_lock with filesystem access
5ff5501 Update ci.yml
0bd996d Let's try --all-features
338e4ed Fix formatting
a55cde5 Cleanup code_lock.rs
9ad7a8f Remove unnecessary test leftover changes
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…0 updates Bumps the patch-and-minor group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.52.2` | `1.53.0` | | [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.3` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` | | [toml](https://github.com/toml-rs/toml) | `1.1.2+spec-1.1.0` | `1.1.3+spec-1.1.0` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` | | [which](https://github.com/harryfei/which-rs) | `8.0.2` | `8.0.5` | | [insta](https://github.com/mitsuhiko/insta) | `1.47.2` | `1.48.0` | | [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.2.1` | `2.2.2` | | [serial_test](https://github.com/palfrey/serial_test) | `3.4.0` | `3.5.0` | Updates `tokio` from 1.52.2 to 1.53.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.52.2...tokio-1.53.0) Updates `clap` from 4.6.1 to 4.6.3 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.3) Updates `serde_json` from 1.0.149 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `toml` from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0 - [Commits](toml-rs/toml@toml-v1.1.2...toml-v1.1.3) Updates `thiserror` from 2.0.18 to 2.0.19 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.19) Updates `anyhow` from 1.0.102 to 1.0.104 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.104) Updates `which` from 8.0.2 to 8.0.5 - [Release notes](https://github.com/harryfei/which-rs/releases) - [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md) - [Commits](harryfei/which-rs@8.0.2...8.0.5) Updates `insta` from 1.47.2 to 1.48.0 - [Release notes](https://github.com/mitsuhiko/insta/releases) - [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md) - [Commits](mitsuhiko/insta@1.47.2...1.48.0) Updates `assert_cmd` from 2.2.1 to 2.2.2 - [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md) - [Commits](assert-rs/assert_cmd@v2.2.1...v2.2.2) Updates `serial_test` from 3.4.0 to 3.5.0 - [Release notes](https://github.com/palfrey/serial_test/releases) - [Commits](palfrey/serial_test@v3.4.0...v3.5.0) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: clap dependency-version: 4.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: toml dependency-version: 1.1.3+spec-1.1.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: thiserror dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: anyhow dependency-version: 1.0.104 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: which dependency-version: 8.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: insta dependency-version: 1.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: assert_cmd dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: serial_test dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-27T16:09:51Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot assigned aram-devdocs Jul 20, 2026

dependabot Bot requested a review from aram-devdocs as a code owner July 20, 2026 16:11

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 20, 2026

dependabot Bot closed this Jul 27, 2026

dependabot Bot deleted the dependabot/cargo/patch-and-minor-7f2b79af35 branch July 27, 2026 16:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the patch-and-minor group across 1 directory with 10 updates - #317

chore(deps): bump the patch-and-minor group across 1 directory with 10 updates#317
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/patch-and-minor-7f2b79af35

dependabot Bot commented on behalf of github Jul 20, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

File	Platform	Checksum
cargo-insta-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
cargo-insta-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
cargo-insta-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

Changed

Fixed

IO uring (unstable)

Documented

v4.6.3

[4.6.3] - 2026-07-20

Fixes

v4.6.2

[4.6.2] - 2026-07-15

Fixes

[4.6.3] - 2026-07-20

Fixes

[4.6.2] - 2026-07-15

Fixes

v1.0.151

v1.0.150

2.0.19

1.0.104

1.0.103

8.0.5

What's Changed

New Contributors

8.0.4

What's Changed

8.0.3

What's Changed

New Contributors

8.0.5

8.0.4

8.0.3

1.48.0

Release Notes

Install cargo-insta 1.48.0

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download cargo-insta 1.48.0

1.48.0

[2.2.2] - 2026-05-11

Fixes

v3.5.0

What's Changed

New Contributors

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 20, 2026 •

edited

Loading