build(deps): bump the cargo-dependencies group across 1 directory with 9 updates

[dependabot]

Bumps the cargo-dependencies group with 9 updates in the / directory:

Package	From	To
clap	4.6.1	4.6.6
globset	0.4.18	0.4.20
ignore	0.4.26	0.4.33
json5	0.4.1	1.3.1
noyalib	0.0.8	0.0.18
regex	1.12.4	1.13.1
serde	1.0.228	1.0.229
serde_json	1.0.150	1.0.151
toml	1.1.2+spec-1.1.0	1.1.4+spec-1.1.0

Updates clap from 4.6.1 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Commits

• 348cff3 chore: Release
• d478377 docs: Update changelog
• 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
• 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
• f90a966 fix(complete): Use spaces for indentation in fish
• dd4997b fix(complete): Don't glob-expand bash positionals
• 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
• 8141e11 chore(deps): Update compatible (dev) (#6398)
• 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
• 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
• Additional commits viewable in compare view

Updates globset from 0.4.18 to 0.4.20

Commits

• 5055264 globset-0.4.20
• 020687a ignore,globset: increase pool capacity
• 5ed408e ignore-0.4.32
• 435f59f ignore: skip loading unreachable ignore files
• f9c05a9 index: remove incorrect README
• 8372866 index: add some initial indexing scaffolding
• d99ac34 core: add index module
• 2ed0c00 flags: disable many flags when indexing is enabled
• 59e318f ignore-0.4.31
• a9dc222 cargo: set rust-version on all crates
• Additional commits viewable in compare view

Updates ignore from 0.4.26 to 0.4.33

Commits

• 3fce3b5 ignore-0.4.33
• 5055264 globset-0.4.20
• 020687a ignore,globset: increase pool capacity
• 5ed408e ignore-0.4.32
• 435f59f ignore: skip loading unreachable ignore files
• f9c05a9 index: remove incorrect README
• 8372866 index: add some initial indexing scaffolding
• d99ac34 core: add index module
• 2ed0c00 flags: disable many flags when indexing is enabled
• 59e318f ignore-0.4.31
• Additional commits viewable in compare view

Updates json5 from 0.4.1 to 1.3.1

Release notes

Sourced from json5's releases.

1.3.0

What's Changed

• fix: support utf-16 surrogate pair in string escape by @​zonyitoo in callum-oakley/json5-rs#53

Full Changelog: callum-oakley/json5-rs@1.2.0...1.3.0

1.2.0

Also serialize u128/i128

Full Changelog: callum-oakley/json5-rs@1.1.0...1.2.0

1.1.0

u128/i128 support

Full Changelog: callum-oakley/json5-rs@1.0.0...1.1.0

1.0.0

Full Changelog: callum-oakley/json5-rs@0.4.1...1.0.0

Commits

• 6905ad2 expose char
• 9c8dcc9 enum representation tests
• 691cf04 more benchmarks
• f22f424 formatting
• 643ca75 benchmarks
• 9214f35 1.3.0
• 435e3bb defer to char::decode_utf16
• 6f2f03e Merge pull request #53 from zonyitoo/main
• d65920b fix: support utf-16 surrogate pair in string escape
• b8af7e3 also serialize u64/i64
• Additional commits viewable in compare view

Updates noyalib from 0.0.8 to 0.0.18

Release notes

Sourced from noyalib's releases.

noyalib v0.0.18

What's Changed

• test+docs+refactor(cst): close the v0.0.18 coverage gate and doc gaps (be957ed)
• test(cst): cover Emit forwarders + drop dead closure to clear the coverage gate (350bea2)
• test(cst): cover the full Emit surface to restore the coverage gate (352b677)
• docs(cst): list the Emit *_value mutators in the User Guide table (99ecdf1)
• fix(cst): emit floats canonically and cover the Emit rollback arm (review of #223) (3641ac9)
• fix(cst): guard rename_anchor against colliding target; fold into example + docs (4bf49c6)
• feat(cst): add the Emit auto-formatting tier for insertions (#221) (2ae6cc3)
• feat(security): enforce max_nodes budget, classify width caps, harden coverage (8adc190)
• docs(cst): cover the full surgical-edit API in examples + benches (29839fb)
• test(cst): add 269 robustness tests across streaming, de, parser, ser, value (d6d33e8)
• test(cst): DRY the inline comment guard; cover the leading-comment refusal (b52aec2)
• feat(cst): add leading comment mutation — set/remove_leading_comment (#221) (1c6db5f)
• feat(cst): extend Document::remove to multi-line / nested values (#221) (8858323)
• feat(cst): add inline comment mutation — set/remove_inline_comment (#221) (f2c6ef1)
• feat(cst): add Document::move_item — atomic block-sequence move (#221) (2703227)
• feat(cst): add Document::swap_items — block-sequence reorder (#221) (66ef9cf)
• feat(cst): add Document::key_span — read-only key-token span (#221) (d7afa22)
• chore(release): bump noyalib to v0.0.18 (19cd5ca)
• feat(cst): add Document::rename_key — first-class mapping-key rename (#222) (f807068)
• deps(cargo)(deps): bump jsonschema from 0.48.5 to 0.49.1 (#215) (05d8856)
• deps(cargo)(deps): bump the tokio-stack group with 3 updates (#214) (7a27288)
• deps(cargo)(deps): bump the serde group with 2 updates (#213) (70cab26)
• refactor: derive serde fully qualified (#178) (7bd7f45)
• ci(deps): bump taiki-e/install-action (#217) (d7fb9dd)
• ci(deps): bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.3 (#219) (27f3d01)
• ci(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.3 (#218) (e6a4708)
• ci(deps): bump github/codeql-action/init from 4.37.1 to 4.37.3 (#220) (f09246c)
• ci(deps): bump actions/checkout from 7.0.0 to 7.0.1 in the actions group (#216) (8b055ce)

Checksums

ccc67d13e91577493ff12d930fcdc92a342b46e2299210089d90d2caed837f60  noyalib-0.0.18.crate

noyalib v0.0.17

What's Changed

• release: v0.0.17 — lockstep republish (no core change) (#212) (c98a945)

Checksums

179fb3ecf8e64246b67049033e61c739c467c7bb1d79b2c1a65c1ac13f87512a  noyalib-0.0.17.crate

noyalib v0.0.16

What's Changed

... (truncated)

Changelog

Sourced from noyalib's changelog.

[v0.0.18] - 2026-07-31

Added

• Document::rename_key(path, new_key) — first-class, re-parse-guarded mapping-key rename (#221, gap 2). The path addresses the entry the same way set / remove do; only the key token's bytes are rewritten — the :, the value, whitespace, comments, and sibling entries survive verbatim. The new key's spelling is style-matched to the key it replaces: a plain key stays plain when the plain spelling re-parses to exactly that string, a quoted key keeps its quote style, and quoting is forced only when the plain spelling would re-parse to something else (a: b, -flag, 8080). Renaming a key to its own name is a byte-preserving no-op, decided on the decoded key so a plain true: is never requoted. Refuses: sibling-duplicate renames (reported separately when the colliding sibling comes from a << merge), flow-mapping entries, alias keys, keys produced by a << merge, paths reached through an alias, entries inside an anchored value that has alias references, bracket path segments that are not indices (servers[web]), << as the new key, and new keys carrying non-printable characters. After the splice the document must re-parse to the old value with exactly that one key renamed, or the edit is rolled back and the failure is reported in the operation's own terms.
• Document::key_span(path) — read-only byte span of a mapping entry's key token, the companion to span_at (which returns the value span). Exposes, read-only, the same key site rename_key rewrites, so tooling can report duplicate keys with positions or drive a "rename key" code action without walking the green tree by hand (#221). Returns None for sites that own no simple scalar key — sequence indices, alias (*name) sites, and keys provided by a << merge.
• Document::swap_items(path, i, j) — exchange two items of a block sequence, rewriting only the two items' value bytes; the - indicators, indentation and every other item stay byte-identical (#221, gap 3). Guarded like the other mutators: the result must re-parse and its typed value must equal the original with exactly items i and j exchanged, or the edit rolls back. Swapping an index with itself, or two equal values, is a byte-preserving no-op.
• Document::move_item(path, from, to) — move a block-sequence item to a new index, shifting the items in between (#221, gap 3). Applied as a run of adjacent swap_items steps, so it inherits the structure-preservation and per-step guard, and the whole move is atomic: a refused step rolls the document back to its state before the call.
• Document::set_inline_comment(path, text) and Document::remove_inline_comment(path) — first-class mutation

... (truncated)

Commits

• 76235c1 Merge pull request #224 from sebastienrousseau/feat/v0.0.18
• be957ed test+docs+refactor(cst): close the v0.0.18 coverage gate and doc gaps
• 350bea2 test(cst): cover Emit forwarders + drop dead closure to clear the coverage gate
• 352b677 test(cst): cover the full Emit surface to restore the coverage gate
• 99ecdf1 docs(cst): list the Emit *_value mutators in the User Guide table
• 3641ac9 fix(cst): emit floats canonically and cover the Emit rollback arm (review of ...
• 63ea2a0 Merge PR #223: cst::Emit auto-formatting tier for insertions (#221 gap 5)
• 4bf49c6 fix(cst): guard rename_anchor against colliding target; fold into example + docs
• 2ae6cc3 feat(cst): add the Emit auto-formatting tier for insertions (#221)
• 8adc190 feat(security): enforce max_nodes budget, classify width caps, harden coverage
• Additional commits viewable in compare view

Updates regex from 1.12.4 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

• #1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

• #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

Commits

• 2b52759 1.13.1, redux
• 40e9823 1.13.1
• 75fcb96 changelog: 1.13.1
• 64ad0b6 automata: fix bug in reverse suffix/inner optimization
• fa91c31 automata: fix a bug caught by Codex review
• 30390ec automata: formatting tweaks
• 821a8eb automata: refactor reverse suffix/inner search slightly
• 10afd70 automata: expose the extracted literals for inner literal extraction
• 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
• 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
• Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• See full diff in compare view

Updates toml from 1.1.2+spec-1.1.0 to 1.1.4+spec-1.1.0

Commits

• beee9fe chore: Release
• 16e2ac1 docs: Update changelog
• 89f5541 fix(toml): preserve datetimes when deserializing Value (#1194)
• 534039c fix(serde): Deserialize Value datetimes into typed targets
• 6e45cef test(serde): Reproduce Value datetime deserialization error
• 4ec099f chore: Release
• 5a47a51 docs: Update changelog
• da0911f perf(parser): Reduce over allocation by better tokens/byte ratio (#1193)
• 26eb157 perf(parser): Reduce over allocation by better tokens/byte ratio
• ca4c7bf chore(deps): Update Prek to v0.4.11 (#1191)
• Additional commits viewable in compare view