chore(deps): bump the rust-deps group across 1 directory with 7 updates

[dependabot]

Bumps the rust-deps group with 7 updates in the / directory:

Package	From	To
tree-sitter	0.26.11	0.26.13
uuid	1.24.0	1.26.0
base64	0.22.1	0.23.1
futures	0.3.33	0.3.34
which	8.0.5	8.0.6
tower-http	0.6.11	0.7.0
mockall	0.14.0	0.15.0

Updates tree-sitter from 0.26.11 to 0.26.13

Release notes

Sourced from tree-sitter's releases.

v0.26.13

What's Changed

• fix(query): correctly identify MISSING nodes in queries by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5835
• fix(query): correctly set a state's skipped_quantifier flag when a by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5842
• fix(generate): fold case-insensitive patterns at the AST leaves by @​WillLillis in tree-sitter/tree-sitter#5854
• fix(parser): avoid wide error nodes on unparseable input by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5855
• fix(ci): run all workspace tests by @​WillLillis in tree-sitter/tree-sitter#5867
• build(deps): bump wasmtime-c-api to v36.0.14 by @​clason in tree-sitter/tree-sitter#5870
• fix(rust): remove must_use attribute from Tree::changed_ranges by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5877
• release v0.26.13 by @​clason in tree-sitter/tree-sitter#5873

Full Changelog: tree-sitter/tree-sitter@v0.26.12...v0.26.13

v0.26.12

What's Changed

• fix(generate): fold case-insensitive patterns ourselves by @​WillLillis in tree-sitter/tree-sitter#5761
• fix(query): keep the trailing anchor when a zero-matched quantifier is anchored on both sides by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5764
• fix(templates): add C source files to Python sdist by @​WillLillis in tree-sitter/tree-sitter#5765
• fix(init): don't lowercase repository url by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5768
• fix(highlight): use std::sync::OnceCell for various loader fields by @​WillLillis in tree-sitter/tree-sitter#5785
• fix(parser): restart recovery for invalid tokens in the error state by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5792
• Fix associativity resolution with mixed shift precedences by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5796
• fix(parser): fix parsing bug repeat operator by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5829
• release v0.26.12 by @​clason in tree-sitter/tree-sitter#5831

Full Changelog: tree-sitter/tree-sitter@v0.26.11...v0.26.12

Commits

• d97971e release v0.26.13
• d2436dc fix(rust): remove must_use attribute from Tree::changed_ranges
• e323709 build(deps): bump wasmtime-c-api to v36.0.14
• c7a65b6 fix(ci): run all workspace tests
• 9d1f316 fix(parser): nest error children during recovery
• f837fc9 fix(lib): accumulate error costs through hidden error nodes
• 15adfa9 fix(generate): fold case-insensitive patterns at the AST leaves
• 063f8f8 fix(query): correctly set a state's skipped_quantifier flag when a
• 6320165 fix(query): correctly identify MISSING nodes in queries
• 808e4b1 release v0.26.12
• Additional commits viewable in compare view

Updates uuid from 1.24.0 to 1.26.0

Release notes

Sourced from uuid's releases.

v1.26.0

What's Changed

• Add ContextV7::with_additional_precision_bits by @​ChrisJr404 in uuid-rs/uuid#904
• Prepare for 1.26.0 release by @​KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

• Add a serde::bytes module that encodes a Uuid as a byte string by @​ChrisJr404 in uuid-rs/uuid#902
• Prepare for 1.25.0 release by @​KodrAus in uuid-rs/uuid#903

New Contributors

• @​ChrisJr404 made their first contribution in uuid-rs/uuid#902

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

• Fix non-ASCII character handling in parse diagnostics by @​questfever in uuid-rs/uuid#899
• Prepare for 1.24.1 release by @​KodrAus in uuid-rs/uuid#900

New Contributors

• @​questfever made their first contribution in uuid-rs/uuid#899

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits

• cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
• 34e4f49 don't test macros under miri
• d9e7242 update nightly used for miri
• ec16819 prepare for 1.26.0 release
• 162cd20 Merge pull request #904 from ChrisJr404/v7-additional-precision-bits
• 97eceff Add ContextV7::with_additional_precision_bits for microsecond clocks
• 302e0bf Merge pull request #903 from uuid-rs/cargo/1.25.0
• b7ccde8 prepare for 1.25.0 release
• c62dffb Merge pull request #902 from ChrisJr404/serde-bytes-module
• 8c198b2 Add a serde::bytes module that encodes as a byte string
• Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

• Make the tests build again on non-SIMD architectures

0.23.0

• Added more consts for preconfigured configs and engines
• Make DecodeError::InvalidLastSymbol more clear by including the decoded value
• Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
• Update MSRV to 1.71.0
• Add support for custom padding symbols

Commits

• 069bf70 v0.23.1
• 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
• 7cffce6 Fix testing on architectures without unsafe SIMD support
• e34f9a0 Merge pull request #308 from atouchet/com
• e9240c9 Remove outdated comment
• 9e9220a v0.23.0
• 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
• fbec5f1 Document no trailing trailing bits
• 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
• f10b7e2 Update deps & edition
• Additional commits viewable in compare view

Updates futures from 0.3.33 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

Commits

• 705e6b5 Release 0.3.34
• 616dac7 compat: Inline RawWaker clone function
• 4176369 Inline remaining RawWaker clone functions
• f17a895 Fix cloned FuturesUnordered waker identity
• 51d62ad macro: bump syn to v3 (#3028)
• 9e26177 ci: Reduce timeout-minutes
• b2d0983 tsan: Enable Adaptive Delay
• f733d0e Miri: Ignore compat tests
• e5def2f Rename default branch to main
• See full diff in compare view

Updates which from 8.0.5 to 8.0.6

Release notes

Sourced from which's releases.

8.0.6

What's Changed

• fix: resolve relative PATH entries against the provided cwd by @​RSS1102 in harryfei/which-rs#128

New Contributors

• @​RSS1102 made their first contribution in harryfei/which-rs#128

Full Changelog: harryfei/which-rs@8.0.5...8.0.6

Changelog

Sourced from which's changelog.

8.0.6

• Bug fix: #128 Resolve relative PATH entries against the user provided CWD when available, rather than the process CWD. Thanks @​RSS1102 for your contribution to which!

Commits

• 17fde4a prepare patch release
• 48e49d5 Resolve relative PATH entries against cwd (#128)
• See full diff in compare view

Updates tower-http from 0.6.11 to 0.7.0

Release notes

Sourced from tower-http's releases.

tower-http-0.7.0

Changes since 0.6.11

Added

• csrf: add cross-site request forgery (CSRF) protection middleware, porting the cross-origin protection scheme introduced in Go 1.25 (#699)

  use tower::ServiceBuilder;
  use tower_http::csrf::CsrfLayer;
  // Rejects cross-origin state-changing requests using Sec-Fetch-Site,
  // an Origin allow-list, and an Origin/Host fallback. No per-request
  // token state required.
  let layer = CsrfLayer::new().add_trusted_origin("https://example.com")?;
  let service = ServiceBuilder::new().layer(layer).service_fn(handler);

• timeout: add DeadlineBody for non-resetting body timeouts, applied via the new RequestBodyDeadlineLayer and ResponseBodyDeadlineLayer (#688)

  Unlike TimeoutBody, which resets its deadline on every frame, DeadlineBody caps the total time of a body transfer. A slow client trickling one byte at a time never trips an idle timeout but will trip a deadline.

  use std::time::Duration;
  use tower::ServiceBuilder;
  use tower_http::timeout::RequestBodyDeadlineLayer;
  // Abort the request body transfer after 30s total, regardless of how
  // frequently data arrives.
  let service = ServiceBuilder::new()
  .layer(RequestBodyDeadlineLayer::new(Duration::from_secs(30)))
  .service_fn(handler);

• fs: add strong ETag support to ServeDir, including If-Match and If-None-Match precondition handling per RFC 9110. 304 Not Modified responses now carry the ETag and Last-Modified validators (#691)

• fs: add a Backend trait to make ServeDir work with non-filesystem sources (e.g. embedded assets or object storage). The default TokioBackend preserves existing behavior. Use ServeDir::with_backend() to plug in custom implementations (#684)

  use tower_http::services::fs::ServeDir;
  // MyBackend implements tower_http::services::fs::Backend.
  // The default ServeDir::new() continues to use TokioBackend (local FS).
  let service = ServeDir::with_backend("assets", MyBackend::new());

• fs: add html_as_default_extension option to ServeDir, appending .html when the request path has no extension (#519)

• fs: add redirect_path_prefix option to ServeDir, prepending a prefix on trailing-slash redirects so the service can be mounted under a sub-path (#486)

• validate-request: add ValidateRequestHeaderLayer::has_header_value() to reject requests when a header does not have an expected value (#360)

• body: UnsyncBoxBody::new() constructor and From<ServeFileSystemResponseBody> conversion to avoid double-boxing when combining ServeDir responses with other body types (#537)

• limit: implement Default for limit::ResponseBody when the wrapped body also implements Default (#679)

Changed

... (truncated)

Commits

• b194fcf v0.7.0
• af828a6 feat(follow_redirect)!: preserve request extensions across redirects (#706)
• 8cb8d99 feat(ValidateRequestHeaderLayer): add has_header("...").with_value("...") fun...
• 3b56d2d feat!: Add configurable Backend trait for ServeDir, bump MSRV 1.65 (#684)
• 8508716 Add redirect_path_prefix option (#486)
• 56327b2 Add Windows drive-prefix path regression test (#705)
• 54c6db8 feat(compression)!: upgrade SizeAbove threshold from u16 to u64 (#704)
• 68cd6d8 Add DeadlineBody for non-resetting body timeouts (#688)
• fa8a98c feat(fs): add strong ETag support to ServeDir (#691)
• 36d2205 fix: Make SetMultiple*Header Clone for !Clone http bodies (#703)
• Additional commits viewable in compare view

Updates mockall from 0.14.0 to 0.15.0

Changelog

Sourced from mockall's changelog.

[ 0.15.0 ] - 2026-06-28

Added

• Compatibility with the #[auto_impl] macro. (#686)

Commits

• fc2c853 chore: Release
• 551fadd Merge pull request #688 from asomers/audit-job-lockfile
• 21529e3 Fix the audit CI job
• 2270cdb Merge pull request #686 from Kranzes/automock-auto_impl-compat
• d3b041d Add compatibility with the #[auto_impl] macro
• 055886e Merge pull request #687 from asomers/clippy-june-2026
• ed4bf07 Clippy cleanup
• f7a4d6f Merge pull request #685 from asomers/clippy=may-2026
• ba15180 Clippy cleanup: useless_borrows_in_formatting
• de22d57 Merge pull request #684 from asomers/github-workflows
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
contribai	Ready	Preview	Aug 31, 2026 12:57am