Skip to content

deps(rust): bump the rust-minor-patch group across 1 directory with 6 updates#218

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-patch-f0382376c8
Open

deps(rust): bump the rust-minor-patch group across 1 directory with 6 updates#218
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-patch-f0382376c8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-minor-patch group with 6 updates in the / directory:

Package From To
anyhow 1.0.102 1.0.103
bytes 1.11.1 1.12.0
fastembed 5.15.0 5.17.2
http 1.4.1 1.4.2
time 0.3.47 0.3.51
uuid 1.23.2 1.23.4

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)
Commits
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • See full diff in compare view

Updates bytes from 1.11.1 to 1.12.0

Release notes

Sourced from bytes's releases.

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Changelog

Sourced from bytes's changelog.

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Commits

Updates fastembed from 5.15.0 to 5.17.2

Release notes

Sourced from fastembed's releases.

v5.17.2

5.17.2 (2026-06-15)

🍕 Features

  • Add cosine_similarity, dot, top_k helpers (#263) (6fc2eb9).

🐛 Bug Fixes

🧹 Chores

  • Update safetensors requirement from 0.7.0 to 0.8.0 (#261) (d2c55c0).

📖 Documentation

🔁 Continuous Integration

  • Update GitHub Actions, bump to Node 24 runtimes (#262) (78c4a68).

v5.17.0

5.17.0 (2026-06-15)

🍕 Features

  • similarity: add cosine_similarity, dot, top_k helpers (#263) (6fc2eb9)

🔁 Continuous Integration

  • strip commas from clippy-features cache key, pin actions to SHAs, bump to Node 24 runtimes (#262) (78c4a68)

🧹 Chores

  • deps: update safetensors requirement from 0.7.0 to 0.8.0 (#261) (d2c55c0)

v5.16.2

5.16.2 (2026-06-14)

🐛 Bug Fixes

  • qwen3: clamp image max_pixels to tokenizer token budget (#260) (5340989)
  • nomic-v2-moe: resolve dtype mismatches for BF16/F16 inference (#259) (5dae66b)

📝 Documentation

  • Usage reconciliation at README.md and lib.rs docstrings (#258) (53bf4db)

... (truncated)

Commits
  • d0e8e9e chore(release): 5.17.2 [skip ci]
  • ee2465f fix(docs): replace removed doc_auto_cfg with doc_cfg (#265)
  • 5deec6c chore(release): 5.17.1 [skip ci]
  • 5cd990f docs: Re-order README.md sections (#264)
  • bceb1e9 chore(release): 5.17.0 [skip ci]
  • 6fc2eb9 feat(similarity): add cosine_similarity, dot, top_k helpers (#263)
  • 78c4a68 ci: strip commas from clippy-features cache key, pin actions to SHAs, bump to...
  • d2c55c0 chore(deps): update safetensors requirement from 0.7.0 to 0.8.0 (#261)
  • 3a9588a chore(release): 5.16.2 [skip ci]
  • 5340989 fix(qwen3): clamp image max_pixels to tokenizer token budget (#260)
  • Additional commits viewable in compare view

Updates http from 1.4.1 to 1.4.2

Changelog

Sourced from http's changelog.

1.4.2 (June 8, 2026)

  • Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.
  • Fix Uri to properly reject DEL characters.
Commits

Updates time from 0.3.47 to 0.3.51

Release notes

Sourced from time's releases.

v0.3.51

See the changelog for details.

v0.3.49

See the changelog for details.

v0.3.48

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.51 [2026-06-22]

Fixed

  • time compiles with macros enabled. This version is otherwise identical to v0.3.50.

0.3.50 [2026-06-22]

Added

  • Timestamp type

Fixed

  • [year] in a runtime-parsed version 3 format description when the large-dates feature is not enabled now succeeds. This previously failed due to a missing #[cfg].

Performance

  • Further gains when parsing with the non-deprecated parts of the RFC 2822 well-known format
  • Gains when formatting with the ISO 8601 well-known format
  • Date arithmetic is improved in common situations

0.3.49 [2026-06-13]

Fixed

  • Due to a long-standing bug in the Rust compiler, v0.3.48 caused a number of crates to stop compiling. A patch has been added that avoids triggering the bug.

0.3.48 [2026-06-12] [YANKED]

Security

  • The number of digits parsed by [subsecond digits:1+] is capped at 32 to avoid parsing unbounded user input. Digits after the 9th have no semantic meaning.
  • Explicitly specify #[repr] for Weekday. The value of the variants is relied upon in multiple locations for soundness. The practical effect of this change is nothing, as Rust has always mapped C-like enums to 0..N in memory.

Compatibility

  • Non-UTF-8 formatting and parsing is deprecated without replacement. It is recommended to only format and parse valid UTF-8.
  • format_description::parse is deprecated. It is recommended to use format_description::parse_borrowed::<3> or format_description::parse_owned::<3>.

Added

  • All types in the unit module have a generic parameter, though this is currently not used for

... (truncated)

Commits
  • 4ae4926 v0.3.51 release
  • 88eece3 v0.3.50 release
  • e1aa9ed Remove unused imports
  • 6f64473 Add regression test for issue 773
  • 9f8d7da Improve performance of ISO 8601 formatting
  • 356975c Share parsing components with different versions
  • 2850178 Improve RFC 2822 fast path
  • 1f6fa79 Add #[inline] to trivial method
  • 7e4fd30 Add fast path for Date arithmetic
  • a928f2d Avoid range error when not using large-dates
  • Additional commits viewable in compare view

Updates uuid from 1.23.2 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

v1.23.3

What's Changed

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

Commits
  • 3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
  • cba53d0 prepare for 1.23.4 release
  • e347af4 Merge pull request #889 from frostyplanet/main
  • e9bf55c doc: Fix broken link warnings
  • 5351af4 doc: Enable feature flag label for docs.rs
  • 1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
  • c9619f6 fix up name of fuzz script in readme
  • 20da78b Merge pull request #887 from uuid-rs/cargo/v1.23.3
  • 62232ca prepare for 1.23.3 release
  • 2320c6a Merge pull request #886 from uuid-rs/fix/parser-panics
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the rust-minor-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.0` |
| [fastembed](https://github.com/Anush008/fastembed-rs) | `5.15.0` | `5.17.2` |
| [http](https://github.com/hyperium/http) | `1.4.1` | `1.4.2` |
| [time](https://github.com/time-rs/time) | `0.3.47` | `0.3.51` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.23.2` | `1.23.4` |



Updates `anyhow` from 1.0.102 to 1.0.103
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.102...1.0.103)

Updates `bytes` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.11.1...v1.12.0)

Updates `fastembed` from 5.15.0 to 5.17.2
- [Release notes](https://github.com/Anush008/fastembed-rs/releases)
- [Commits](Anush008/fastembed-rs@v5.15.0...v5.17.2)

Updates `http` from 1.4.1 to 1.4.2
- [Release notes](https://github.com/hyperium/http/releases)
- [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md)
- [Commits](hyperium/http@v1.4.1...v1.4.2)

Updates `time` from 0.3.47 to 0.3.51
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.47...v0.3.51)

Updates `uuid` from 1.23.2 to 1.23.4
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.23.2...v1.23.4)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.103
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: bytes
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-patch
- dependency-name: fastembed
  dependency-version: 5.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-minor-patch
- dependency-name: http
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: time
  dependency-version: 0.3.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
- dependency-name: uuid
  dependency-version: 1.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Jun 29, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
all-source-admin Ready Ready Preview, Comment Jun 29, 2026 7:00pm
all-source-web Ready Ready Preview, Comment Jun 29, 2026 7:00pm

@github-actions

Copy link
Copy Markdown

iai-callgrind — chronis/iai


@github-actions

Copy link
Copy Markdown

iai-callgrind — allsource-prime/iai


@github-actions

Copy link
Copy Markdown

iai-callgrind — allsource-core/iai


Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants