From 3ae9a919d945ecb98fdfbaa2c946fd39b71a8c39 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 14 Jun 2026 20:26:35 +0000
Subject: [PATCH 1/2] deps: bump gherkin from 0.15.0 to 0.16.0

Bumps [gherkin](https://github.com/cucumber-rs/gherkin) from 0.15.0 to 0.16.0.
- [Release notes](https://github.com/cucumber-rs/gherkin/releases)
- [Changelog](https://github.com/cucumber-rs/gherkin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/cucumber-rs/gherkin/compare/v0.15.0...v0.16.0)

---
updated-dependencies:
- dependency-name: gherkin
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 4 ++--
 Cargo.toml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index e653f71..862847e 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3426,9 +3426,9 @@ dependencies = [
 
 [[package]]
 name = "gherkin"
-version = "0.15.0"
+version = "0.16.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "70197ce7751bfe8bc828e3a855502d3a869a1e9416b58b10c4bde5cf8a0a3cb3"
+checksum = "9e2c0d8c632f8a251ce9a8198079b1022adc586ff4e3d33e18debd40eb463b31"
 dependencies = [
  "heck",
  "peg",
diff --git a/Cargo.toml b/Cargo.toml
index fc3748b..d23dd60 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -50,7 +50,7 @@ thiserror = "2"
 tracing = "0.1"
 tokio = { version = ">=1.23.1, <2", features = ["full", "macros", "sync"] }
 dotenvy = "0.15"
-gherkin = "0.15"
+gherkin = "0.16"
 regex = "1.12"
 sha2 = "0.11"
 clap = { version = "4.5", features = ["derive", "env", "wrap_help"] }

From e36e17eda2c70d6c1a66ce45471df4f0bb7f75aa Mon Sep 17 00:00:00 2001
From: Kenneth Pernyer <kenneth@pernyer.se>
Date: Sun, 14 Jun 2026 22:29:47 +0200
Subject: [PATCH 2/2] Contract update: ignore transitive bincode and paste
 unmaintained advisories

Unblocks cargo-deny on dependabot/cargo/gherkin-0.16.0 while Burn/Polars
transitives remain without upstream replacements.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 deny.toml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/deny.toml b/deny.toml
index dd49f21..619b34e 100644
--- a/deny.toml
+++ b/deny.toml
@@ -4,7 +4,10 @@
 # Run: cargo deny check  (or: just deny)
 
 [advisories]
-ignore = []
+ignore = [
+    "RUSTSEC-2025-0141",
+    "RUSTSEC-2024-0436",
+]
 
 [licenses]
 allow = [