[dependabot]

Bumps the production-dependencies group with 12 updates in the / directory:

Package	From	To
serde	1.0.228	1.0.229
bitflags	2.13.0	2.13.1
serde_json	1.0.150	1.0.151
ureq	3.3.0	3.4.0
cc	1.2.66	1.4.4
cpal	0.18.1	0.18.2
thiserror	2.0.18	2.0.20
log	0.4.33	0.4.34
toml	1.1.2+spec-1.1.0	1.1.3+spec-1.1.0
bytemuck	1.25.0	1.25.2
clap	4.6.1	4.6.6
clap_complete	4.6.7	4.6.9

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates bitflags from 2.13.0 to 2.13.1

Release notes

Sourced from bitflags's releases.

2.13.1

What's Changed

• Lower the LLVM IR output of the generated output by @​bolshoytoster in bitflags/bitflags#492
• Prepare for 2.13.1 release by @​KodrAus in bitflags/bitflags#493

New Contributors

• @​bolshoytoster made their first contribution in bitflags/bitflags#492

Full Changelog: bitflags/bitflags@2.13.0...2.13.1

Changelog

Sourced from bitflags's changelog.

2.13.1

What's Changed

• Lower the LLVM IR output of the generated output by @​bolshoytoster in bitflags/bitflags#492

New Contributors

• @​bolshoytoster made their first contribution in bitflags/bitflags#492

Full Changelog: bitflags/bitflags@2.13.0...2.13.1

Commits

• f92a292 Merge pull request #493 from bitflags/cargo/2.13.1
• c1271c5 prepare for 2.13.1 release
• e077c4a Merge pull request #492 from bolshoytoster/main
• 75d1be4 Bless compile fail stderr
• 7813d71 Support the MSRV
• d8f8234 Remove unused variable warning with empty bitflags
• 2e27d6a Fix const _ = !0;
• dd8beda Fix Self in flags
• dbc0ce1 Lower the LLVM IR output of the generated output
• See full diff in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• See full diff in compare view

Updates ureq from 3.3.0 to 3.4.0

Changelog

Sourced from ureq's changelog.

3.4.0

• Seal RequestExt (technically breaking) #1189
• Send canonical Basic authentication scheme to CONNECT proxies #1185
• Establish target TLS through HTTPS CONNECT proxies #1183
• Update rustls-platform-verifier to 0.7.0 #1174
• Fix pooled connections never aging out according to max_idle_age #1172
• Strip brackets from IPv6-literal hosts before TLS SNI/ServerName #1171
• RequestExt::middleware_config for conf inside middleware #1169

Commits

• 5e803fc 3.4.0
• 82b37b5 Update changelog for 3.4.0
• 07b8ea2 Seal RequestExt (#1189)
• 0df28a1 Update changelog
• 653e963 Bump deps (#1188)
• 830f6ca chore: remove redundant clone (#1187)
• 6e9a050 Send CONNECT Proxy-Authorization scheme as canonical "Basic" (#1185)
• f8a5bed Fix TLS to targets through HTTPS proxies (#1183)
• 1f1c342 Support testing in release mode (#1180)
• 089c235 Update rustls-platform-verifier to 0.7.0
• Additional commits viewable in compare view

Updates cc from 1.2.66 to 1.4.4

Release notes

Sourced from cc's releases.

cc-v1.4.4

Fixed

• honour Build::env overrides in Android llvm-ar probe (#1868)
• honour Build::env overrides in flag support and compiler family detection probes (#1866)

cc-v1.4.3

Other

• Update MSRV to 1.65 (#1834)
• Regenerate target info (#1848)

cc-v1.4.2

Fixed

• Infer NEON, not VFPv4, from neon in the target name (#1843)
• do not emit -mno-omit-leaf-frame-pointer if unsupported (#1845)

cc-v1.4.1

Fixed

• Fix -Cforce-frame-pointers's corresponding CFLAGS (#1814)
• Fix parsing of thumbv7a-vex-v5 (#1840)

Other

• Regenerate target info (#1839)
• Add aarch64_be to prefix_for_target (#1835)
• Use lp64d ABI for Managarm riscv64 (#1829)
• Make cc work on Motor OS (#1822)
• Update edition to 2021 (#1811)
• Update MSRV to 1.64 (#1808)

cc-v1.4.0

Added

• support trim paths with clang-cl.exe (#1799)

cc-v1.3.0

Added

• inherit path remap rules from cargo trim-paths (#1794)

cc-v1.2.67

Other

• Fix clippy warning (#1788)
• Regenerate target info (#1785)
• Add support for aarch64-unknown-linux-pauthtest target (#1713)
• Fix nightly compilation error (#1783)

Changelog

Sourced from cc's changelog.

1.4.4 - 2026-08-21

Fixed

• honour Build::env overrides in Android llvm-ar probe (#1868)
• honour Build::env overrides in flag support and compiler family detection probes (#1866)

1.4.3 - 2026-08-14

Other

• Update MSRV to 1.65 (#1834)
• Regenerate target info (#1848)

1.4.2 - 2026-08-08

Fixed

• Infer NEON, not VFPv4, from neon in the target name (#1843)
• do not emit -mno-omit-leaf-frame-pointer if unsupported (#1845)

1.4.1 - 2026-08-07

Fixed

• Fix -Cforce-frame-pointers's corresponding CFLAGS (#1814)
• Fix parsing of thumbv7a-vex-v5 (#1840)

Other

• Regenerate target info (#1839)
• Add aarch64_be to prefix_for_target (#1835)
• Use lp64d ABI for Managarm riscv64 (#1829)
• Make cc work on Motor OS (#1822)
• Update edition to 2021 (#1811)
• Update MSRV to 1.64 (#1808)

1.4.0 - 2026-07-24

Added

• support trim paths with clang-cl.exe (#1799)

1.3.0 - 2026-07-18

Added

• inherit path remap rules from cargo trim-paths (#1794)

1.2.67 - 2026-07-11

... (truncated)

Commits

• 82ee29e chore(cc): release v1.4.4 (#1869)
• 1301078 fix: run the Android llvm-ar probe in the caller's environment (#1868)
• c5cc913 fix: honor Build::env overrides in flag support probes (#1866)
• caf7609 chore(deps): bump dtolnay/rust-toolchain (#1862)
• 3c4ab88 chore: release (#1858)
• 951c5f5 cc-test: add loongarch64 assembly shim (#1855)
• 60e2e00 chore(deps): bump Swatinem/rust-cache from 2.9.1 to 2.9.2 (#1853)
• cdb4701 ci: replace rustup installation with actions-rust-lang/setup-rust-toolchain (...
• 3af3b8d cargo: use workspace inheritance (#1850)
• 6df6471 cargo: convert to workspace lints (#1849)
• Additional commits viewable in compare view

Updates cpal from 0.18.1 to 0.18.2

Release notes

Sourced from cpal's releases.

cpal 0.18.2

Added

• AAudio: Xruns are now reported as ErrorKind::Xrun.
• CoreAudio: Xruns are now reported as ErrorKind::Xrun.
• PipeWire: Xruns are now reported as ErrorKind::Xrun.
• WASAPI: Capture xruns are now reported as ErrorKind::Xrun.

Changed

• BSD: Clarify that realtime-dbus has no effect there.
• CoreAudio: Bump objc2-core-foundation dependency lower bound to 0.3.1.
• iOS: Timestamps now include hardware latency and update when the audio route changes.
• JACK: Timestamps now include port latency.
• Linux: Clarify that realtime alone is a no-op without realtime-dbus.
• PipeWire: Devices with multiple ports now get distinct, localized, per-port names.
• WASAPI: The windows and windows-core dependencies are now both pinned to 0.62.

Fixed

• Timestamps now stay monotonic across device and graph changes.
• ALSA: A nonzero but sub-millisecond stream timeout is no longer treated as a non-blocking poll.
• ALSA: Fix compilation on FreeBSD, DragonFly, and NetBSD.
• ASIO: Fix duplex streams silently dropping audio when built from separate Device handles.
• AudioWorklet: Fix Stream operations to work when called from any thread.
• AudioWorklet: Fix stale audio output when a data callback wrote a partial buffer.
• CoreAudio: Fix stale audio output when a data callback wrote a partial buffer.
• CoreAudio: Default-output streams now report xrun status.
• iOS: Streams now resume automatically when an audio session interruption ends.
• JACK: Streams with more channels than physical system ports no longer fail to build.
• JACK: Channel enumeration is no longer capped at the physical system port count.
• JACK: Device::id no longer embeds the process ID, so DeviceId is now stable across application restarts.
• PipeWire: Fix streams starting audio before play() is called.
• PipeWire: Fix real-time promotion blocking the audio callback thread on Linux.
• PipeWire: Fix rtkit burst limit errors from repeated real-time promotion on quantum jitter.
• PipeWire: Fix 24-bit sample format mapping.
• PipeWire: Nodes with an /Internal media class are now enumerated as devices.
• PipeWire: Streams for a specific device no longer auto-reroute if it disappears.
• PipeWire: Build on 32-bit targets without native 64-bit atomics.
• PulseAudio: NoData errors are no longer misreported as buffer xruns.
• PulseAudio: Build on 32-bit targets without native 64-bit atomics.
• visionOS: The CoreAudio backend now builds.
• WASAPI: Stream::drop, play, and pause no longer panic when the device is lost.
• WASAPI: Output streams no longer reject formats that the built-in resampler can convert.
• WASAPI: Fix 24-bit samples not being packed into the upper bits of their sample container.
• WASAPI: Reported buffer sizes are no longer off by one frame.
• WASAPI: Default device changes no longer report DeviceChanged, which wrongly implied the stream had rerouted automatically.
• WebAudio: Fix stale audio output when a data callback wrote a partial buffer.
• WebAudio: Fix unsound Send + Sync on Stream when compiled with +atomics.
• WebAudio: Fix Host::is_available() always returning true, even in non-window contexts.

... (truncated)

Changelog

Sourced from cpal's changelog.

[0.18.2] - 2026-08-16

Added

• AAudio: Xruns are now reported as ErrorKind::Xrun.
• CoreAudio: Xruns are now reported as ErrorKind::Xrun.
• PipeWire: Xruns are now reported as ErrorKind::Xrun.
• WASAPI: Capture xruns are now reported as ErrorKind::Xrun.

Changed

• BSD: Clarify that realtime-dbus has no effect there.
• CoreAudio: Bump objc2-core-foundation dependency lower bound to 0.3.1.
• iOS: Timestamps now include hardware latency and update when the audio route changes.
• JACK: Timestamps now include port latency.
• Linux: Clarify that realtime alone is a no-op without realtime-dbus.
• PipeWire: Devices with multiple ports now get distinct, localized, per-port names.
• WASAPI: The windows and windows-core dependencies are now both pinned to 0.62.

Fixed

• Timestamps now stay monotonic across device and graph changes.
• ALSA: A nonzero but sub-millisecond stream timeout is no longer treated as a non-blocking poll.
• ALSA: Fix compilation on FreeBSD, DragonFly, and NetBSD.
• ASIO: Fix duplex streams silently dropping audio when built from separate Device handles.
• AudioWorklet: Fix Stream operations to work when called from any thread.
• AudioWorklet: Fix stale audio output when a data callback wrote a partial buffer.
• CoreAudio: Default-output streams now report xrun status.
• CoreAudio: Fix stale audio output when a data callback wrote a partial buffer.
• iOS: Streams now resume automatically when an audio session interruption ends.
• JACK: Streams with more channels than physical system ports no longer fail to build.
• JACK: Channel enumeration is no longer capped at the physical system port count.
• JACK: Device::id no longer embeds the process ID, so DeviceId is now stable across application restarts.
• PipeWire: Fix streams starting audio before play() is called.
• PipeWire: Fix rtkit burst limit errors from repeated real-time promotion on quantum jitter.
• PipeWire: Fix real-time promotion blocking the audio callback thread on Linux.
• PipeWire: Fix 24-bit sample format mapping.
• PipeWire: Nodes with an /Internal media class are now enumerated as devices.
• PipeWire: Streams for a specific device no longer auto-reroute if it disappears.
• PipeWire: Build on 32-bit targets without native 64-bit atomics.
• PulseAudio: NoData errors are no longer misreported as buffer xruns.
• PulseAudio: Build on 32-bit targets without native 64-bit atomics.
• visionOS: The CoreAudio backend now builds.
• WASAPI: Default device changes no longer report DeviceChanged, which wrongly implied the stream had rerouted automatically.
• WASAPI: Reported buffer sizes are no longer off by one frame.
• WASAPI: Stream::drop, play, and pause no longer panic when the device is lost.
• WASAPI: Capture streams no longer report a spurious xrun on the first buffer after starting.
• WASAPI: Output streams no longer reject formats that the built-in resampler can convert.
• WASAPI: Fix 24-bit samples not being packed into the upper bits of their sample container.
• WebAudio: Fix stale audio output when a data callback wrote a partial buffer.

... (truncated)

Commits

• e1612d5 chore: prepare cpal 0.18.2 and asio-sys 0.4.0 release
• 8806724 fix(wasapi): shift i24 to/from top bits (#1309) (#1311)
• 8846425 fix(asio): share duplex buffer state across Device handles for the same drive...
• 9d05a73 docs: alphabetize error variants in supported-configs docs
• d733d51 doc: record UnsupportedConfig on the supported-configs queries
• 9f6f47a fix(ci): pin mipsel to no forced frame pointers
• b87721d fix(pipewire): fix 24-bit sample format mapping
• e0893c3 doc: realtime-dbus has never worked on BSD
• 11014e4 ios: recover the stream after an audio session interruption (#1295)
• c4a92cb fix: include *BSD in frames_to_duration gate
• Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

• Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

• Update to syn 3

Commits

• b1d5db5 Release 2.0.20
• c4c3ebd Merge pull request #454 from dtolnay/clippy
• 2266152 Suppress redundant_field_names clippy lint
• 2901cfd Raise minimum tested compiler to rust 1.88
• aa9d91f Update ui tests for version 2.0.19
• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• Additional commits viewable in compare view

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

• doc: Add context-logger utility to README by @​alekseysidorov in rust-lang/log#735
• Add alloc support for boxed loggers by @​malezjaa in rust-lang/log#737

New Contributors

• @​alekseysidorov made their first contribution in rust-lang/log#735
• @​malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

• doc: Add context-logger utility to README by @​alekseysidorov in rust-lang/log#735
• Add alloc support for boxed loggers by @​malezjaa in rust-lang/log#737

New Contributors

• @​alekseysidorov made their first contribution in rust-lang/log#735
• @​malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

• 8034743 Merge pull request #738 from rust-lang/cargo/0.4.34
• 7d1e24e prepare for 0.4.34 release
• 3b939b6 Merge pull request #737 from malezjaa/master
• b88266c Add alloc support for boxed loggers
• 037d7a5 doc: Add context-logger utility to README
• See full diff in compare view

Updates toml from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0

Commits

• eb25160 chore: Release
• f36fb52 docs: Update changelog
• 3adbbb7 fix(writer): Don't overflow (#1189)
• fb0c1b3 fix(writer): Don't overflow
• 5e70a70 test(writer): Add overflow test
• 771a975 chore: Upgrade toml-test (#1186)
• 28f6c9c chore: Upgrade toml-test
• 30d75ca chore(deps): Update Prek to v0.4.9 (#1185)
• 17efe57 chore(deps): Update Rust Stable to v1.97 (#1184)
• c9d0d54 style: Make clippy happy
• Additional commits viewable in compare view

Updates bytemuck from 1.25.0 to 1.25.2

Changelog

Sourced from bytemuck's changelog.

1.25.2

• implement NoUninit for char, bool, NonZero* arrays

1.25.1

• Don't impl core::error::Error on spirv, which was causing a build error on that target.
• Added a reminder on try_cast_slice that empty slices must still be aligned.

1.25

• Remove extern "stdcall" fn ptr impls on non-x86-32 windows.
• Fix nightly_portable_simd after LaneCount removal.

1.24

• use new stable avx512 types from rust 1.89
• impl AnyBitPattern for [MaybeUninit<T: AnyBitPattern>; N]
• bump derive minimum version.

1.23.2

• bump derive minimum version.

1.23.1

• Added a windows-only ZeroableInOption impl for "stdcall" functions.

1.23

• impl_core_error crate feature adds core::error::Error impl.
• More ZeroableInOption impls.

1.22

• Add the pod_saturating feature, which adds Pod impls for Saturating<T> when T is already Pod.
• A bump in the minimum bytemuck_derive dependency from 1.4.0 to 1.4.1 to avoid a bug if you have a truly ancient cargo.lock file sitting around.
• Adds Send and Sync impls to BoxBytes.

1.21

• Implement Pod and Zeroable for core::arch::{x86, x86_64}::__m512, __m512d and __m512i without nightly. Requires Rust 1.72, and is gated through the avx512_simd cargo feature.
• Allow the use of must_cast_mut and must_cast_slice_mut in const contexts. Requires Rust 1.83, and is gated through the must_cast_extra cargo feature.
• internal: introduced the maybe_const_fn macro that allows defining some function to be const depending upon some cfg predicate.

... (truncated)

Commits

• f363643 chore: Release bytemuck version 1.25.2
• 3de980b changelog
• 1d05bec implement NoUninit for char,bool,NoZero* array (#350)
• cabc8e7 chore: Release bytemuck version 1.25.1
• 2d4d8ca changelog
• 946e7a9 chore: Release bytemuck_derive version 1.11.0
• 8a8f7cf changelog derive
• ee6742e changelog
• e2d1c7f Don't impl core::error::Error on spirv (#348)
• 7dd7174 make the note more terse
• Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Commits

• 348cff3 chore: Release
• d478377 docs: Update changelog
• 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
• 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
• f90a966 fix(complete): Use spaces for indentation in fish
• dd4997b fix(complete): Don't glob-expand bash positionals
• 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
• 8141e11 chore(deps): Update compatible (dev) (#6398)
• 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
• 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
• Additional commits viewable in compare view

Updates clap_complete from 4.6.7 to 4.6.9

Commits

• 715b812 chore: Release
• 89e6e9b docs: Update changelog
• 3918cb4 Merge pull request #6468 from sjh9714/fix-bash-posix-fn-name
• 526c819 Merge pull request #6469 from latent-9/docs/fix-derive-reference-link
• b2bd685 docs(clap_derive): Fix derive reference link
• ecee8a4 fix(complete): Name the function after fn_name
• 6dd2e5a test(complete): Show POSIX bash will not source
• 4684d7a chore: Release
• 51d50ad docs: Update changelog
• 3bc3622 Merge pull request #6457 from bl4ck4t/master
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Antigravity review (Gemini via Ultra)

This trivial PR updates multiple production dependencies in the Cargo.lock file.

Blocking issues

None found.

Suggestions

None.

Nitpicks

None.

_{Automated first-pass review by agy on a self-hosted runner -- not a human review.}

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[doublegate]

Reviewed and Approved -- DG 10/9