Skip to content

chore(deps)(deps): bump the production-dependencies group across 1 directory with 14 updates - #38

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/production-dependencies-8580d01c38
Closed

chore(deps)(deps): bump the production-dependencies group across 1 directory with 14 updates#38
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/production-dependencies-8580d01c38

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies group with 14 updates in the / directory:

Package From To
serde 1.0.228 1.0.229
bitflags 2.13.0 2.13.2
serde_json 1.0.150 1.0.151
ureq 3.3.0 3.4.1
cc 1.2.66 1.4.5
cpal 0.18.1 0.18.2
thiserror 2.0.18 2.0.20
log 0.4.33 0.4.34
toml 1.1.2+spec-1.1.0 1.1.3+spec-1.1.0
bytemuck 1.25.0 1.25.2
clap 4.6.1 4.6.6
clap_complete 4.6.7 4.6.9
mlua 0.12.0 0.12.1
uniffi 0.32.0 0.32.1

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates bitflags from 2.13.0 to 2.13.2

Release notes

Sourced from bitflags's releases.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

2.13.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.13.0...2.13.1

Changelog

Sourced from bitflags's changelog.

2.13.2

What's Changed

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

2.13.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.13.0...2.13.1

Commits
  • 80ce9b5 Merge pull request #497 from bitflags/cargo/2.13.2
  • 5822493 prepare for 2.13.2 release
  • 48f4f1a Merge pull request #496 from bitflags/fix/rustc-ice
  • 2c0b042 re-pull const declarations outside of nested const
  • c3f8d31 Merge pull request #494 from DanielEScherzer/flags-docs-example
  • 0fc3762 Flags: adjust order of elements in manual implementation example
  • f92a292 Merge pull request #493 from bitflags/cargo/2.13.1
  • c1271c5 prepare for 2.13.1 release
  • e077c4a Merge pull request #492 from bolshoytoster/main
  • 75d1be4 Bless compile fail stderr
  • Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates ureq from 3.3.0 to 3.4.1

Changelog

Sourced from ureq's changelog.

3.4.1

  • Bump ureq-proto to 0.6.2 (fixes to parsing and headers) #1199
  • Do not pool connections with unconsumed buffered input #1198
  • Fix timeout budgets restarting and applying to later phases #1194
  • Complete TLS handshake during connect so timeout_connect covers it #1193
  • Speed up read_json for responses with a known, small body size #1191

3.4.0

  • Seal RequestExt (technically breaking) #1189
  • Send canonical Basic authentication scheme to CONNECT proxies #1185
  • Establish target TLS through HTTPS CONNECT proxies #1183
  • Update rustls-platform-verifier to 0.7.0 #1174
  • Fix pooled connections never aging out according to max_idle_age #1172
  • Strip brackets from IPv6-literal hosts before TLS SNI/ServerName #1171
  • RequestExt::middleware_config for conf inside middleware #1169
Commits

Updates cc from 1.2.66 to 1.4.5

Release notes

Sourced from cc's releases.

cc-v1.4.5

Fixed

  • probe flag support without OUT_DIR via tempfile (#1875)

Other

  • simplify conditional logic using then method (#1860)

Fixed

  • Probe flag support without OUT_DIR via tempfile, so flag_if_supported no longer silently drops flags outside Cargo build scripts (#1875)

cc-v1.4.4

Fixed

  • honour Build::env overrides in Android llvm-ar probe (#1868)
  • honour Build::env overrides in flag support and compiler family detection probes (#1866)

cc-v1.4.3

Other

  • Update MSRV to 1.65 (#1834)
  • Regenerate target info (#1848)

cc-v1.4.2

Fixed

  • Infer NEON, not VFPv4, from neon in the target name (#1843)
  • do not emit -mno-omit-leaf-frame-pointer if unsupported (#1845)

cc-v1.4.1

Fixed

  • Fix -Cforce-frame-pointers's corresponding CFLAGS (#1814)
  • Fix parsing of thumbv7a-vex-v5 (#1840)

Other

  • Regenerate target info (#1839)
  • Add aarch64_be to prefix_for_target (#1835)
  • Use lp64d ABI for Managarm riscv64 (#1829)
  • Make cc work on Motor OS (#1822)
  • Update edition to 2021 (#1811)
  • Update MSRV to 1.64 (#1808)

cc-v1.4.0

Added

  • support trim paths with clang-cl.exe (#1799)

... (truncated)

Changelog

Sourced from cc's changelog.

1.4.5 - 2026-09-04

Fixed

  • probe flag support without OUT_DIR via tempfile (#1875)

Other

  • simplify conditional logic using then method (#1860)

Fixed

  • Probe flag support without OUT_DIR via tempfile, so flag_if_supported no longer silently drops flags outside Cargo build scripts (#1875)

1.4.4 - 2026-08-21

Fixed

  • honour Build::env overrides in Android llvm-ar probe (#1868)
  • honour Build::env overrides in flag support and compiler family detection probes (#1866)

1.4.3 - 2026-08-14

Other

  • Update MSRV to 1.65 (#1834)
  • Regenerate target info (#1848)

1.4.2 - 2026-08-08

Fixed

  • Infer NEON, not VFPv4, from neon in the target name (#1843)
  • do not emit -mno-omit-leaf-frame-pointer if unsupported (#1845)

1.4.1 - 2026-08-07

Fixed

  • Fix -Cforce-frame-pointers's corresponding CFLAGS (#1814)
  • Fix parsing of thumbv7a-vex-v5 (#1840)

Other

  • Regenerate target info (#1839)
  • Add aarch64_be to prefix_for_target (#1835)
  • Use lp64d ABI for Managarm riscv64 (#1829)
  • Make cc work on Motor OS (#1822)
  • Update edition to 2021 (#1811)
  • Update MSRV to 1.64 (#1808)

... (truncated)

Commits

Updates cpal from 0.18.1 to 0.18.2

Release notes

Sourced from cpal's releases.

cpal 0.18.2

Added

  • AAudio: Xruns are now reported as ErrorKind::Xrun.
  • CoreAudio: Xruns are now reported as ErrorKind::Xrun.
  • PipeWire: Xruns are now reported as ErrorKind::Xrun.
  • WASAPI: Capture xruns are now reported as ErrorKind::Xrun.

Changed

  • BSD: Clarify that realtime-dbus has no effect there.
  • CoreAudio: Bump objc2-core-foundation dependency lower bound to 0.3.1.
  • iOS: Timestamps now include hardware latency and update when the audio route changes.
  • JACK: Timestamps now include port latency.
  • Linux: Clarify that realtime alone is a no-op without realtime-dbus.
  • PipeWire: Devices with multiple ports now get distinct, localized, per-port names.
  • WASAPI: The windows and windows-core dependencies are now both pinned to 0.62.

Fixed

  • Timestamps now stay monotonic across device and graph changes.
  • ALSA: A nonzero but sub-millisecond stream timeout is no longer treated as a non-blocking poll.
  • ALSA: Fix compilation on FreeBSD, DragonFly, and NetBSD.
  • ASIO: Fix duplex streams silently dropping audio when built from separate Device handles.
  • AudioWorklet: Fix Stream operations to work when called from any thread.
  • AudioWorklet: Fix stale audio output when a data callback wrote a partial buffer.
  • CoreAudio: Fix stale audio output when a data callback wrote a partial buffer.
  • CoreAudio: Default-output streams now report xrun status.
  • iOS: Streams now resume automatically when an audio session interruption ends.
  • JACK: Streams with more channels than physical system ports no longer fail to build.
  • JACK: Channel enumeration is no longer capped at the physical system port count.
  • JACK: Device::id no longer embeds the process ID, so DeviceId is now stable across application restarts.
  • PipeWire: Fix streams starting audio before play() is called.
  • PipeWire: Fix real-time promotion blocking the audio callback thread on Linux.
  • PipeWire: Fix rtkit burst limit errors from repeated real-time promotion on quantum jitter.
  • PipeWire: Fix 24-bit sample format mapping.
  • PipeWire: Nodes with an /Internal media class are now enumerated as devices.
  • PipeWire: Streams for a specific device no longer auto-reroute if it disappears.
  • PipeWire: Build on 32-bit targets without native 64-bit atomics.
  • PulseAudio: NoData errors are no longer misreported as buffer xruns.
  • PulseAudio: Build on 32-bit targets without native 64-bit atomics.
  • visionOS: The CoreAudio backend now builds.
  • WASAPI: Stream::drop, play, and pause no longer panic when the device is lost.
  • WASAPI: Output streams no longer reject formats that the built-in resampler can convert.
  • WASAPI: Fix 24-bit samples not being packed into the upper bits of their sample container.
  • WASAPI: Reported buffer sizes are no longer off by one frame.
  • WASAPI: Default device changes no longer report DeviceChanged, which wrongly implied the stream had rerouted automatically.
  • WebAudio: Fix stale audio output when a data callback wrote a partial buffer.
  • WebAudio: Fix unsound Send + Sync on Stream when compiled with +atomics.
  • WebAudio: Fix Host::is_available() always returning true, even in non-window contexts.

... (truncated)

Changelog

Sourced from cpal's changelog.

[0.18.2] - 2026-08-16

Added

  • AAudio: Xruns are now reported as ErrorKind::Xrun.
  • CoreAudio: Xruns are now reported as ErrorKind::Xrun.
  • PipeWire: Xruns are now reported as ErrorKind::Xrun.
  • WASAPI: Capture xruns are now reported as ErrorKind::Xrun.

Changed

  • BSD: Clarify that realtime-dbus has no effect there.
  • CoreAudio: Bump objc2-core-foundation dependency lower bound to 0.3.1.
  • iOS: Timestamps now include hardware latency and update when the audio route changes.
  • JACK: Timestamps now include port latency.
  • Linux: Clarify that realtime alone is a no-op without realtime-dbus.
  • PipeWire: Devices with multiple ports now get distinct, localized, per-port names.
  • WASAPI: The windows and windows-core dependencies are now both pinned to 0.62.

Fixed

  • Timestamps now stay monotonic across device and graph changes.
  • ALSA: A nonzero but sub-millisecond stream timeout is no longer treated as a non-blocking poll.
  • ALSA: Fix compilation on FreeBSD, DragonFly, and NetBSD.
  • ASIO: Fix duplex streams silently dropping audio when built from separate Device handles.
  • AudioWorklet: Fix Stream operations to work when called from any thread.
  • AudioWorklet: Fix stale audio output when a data callback wrote a partial buffer.
  • CoreAudio: Default-output streams now report xrun status.
  • CoreAudio: Fix stale audio output when a data callback wrote a partial buffer.
  • iOS: Streams now resume automatically when an audio session interruption ends.
  • JACK: Streams with more channels than physical system ports no longer fail to build.
  • JACK: Channel enumeration is no longer capped at the physical system port count.
  • JACK: Device::id no longer embeds the process ID, so DeviceId is now stable across application restarts.
  • PipeWire: Fix streams starting audio before play() is called.
  • PipeWire: Fix rtkit burst limit errors from repeated real-time promotion on quantum jitter.
  • PipeWire: Fix real-time promotion blocking the audio callback thread on Linux.
  • PipeWire: Fix 24-bit sample format mapping.
  • PipeWire: Nodes with an /Internal media class are now enumerated as devices.
  • PipeWire: Streams for a specific device no longer auto-reroute if it disappears.
  • PipeWire: Build on 32-bit targets without native 64-bit atomics.
  • PulseAudio: NoData errors are no longer misreported as buffer xruns.
  • PulseAudio: Build on 32-bit targets without native 64-bit atomics.
  • visionOS: The CoreAudio backend now builds.
  • WASAPI: Default device changes no longer report DeviceChanged, which wrongly implied the stream had rerouted automatically.
  • WASAPI: Reported buffer sizes are no longer off by one frame.
  • WASAPI: Stream::drop, play, and pause no longer panic when the device is lost.
  • WASAPI: Capture streams no longer report a spurious xrun on the first buffer after starting.
  • WASAPI: Output streams no longer reject formats that the built-in resampler can convert.
  • WASAPI: Fix 24-bit samples not being packed into the upper bits of their sample container.
  • WebAudio: Fix stale audio output when a data callback wrote a partial buffer.

... (truncated)

Commits
  • e1612d5 chore: prepare cpal 0.18.2 and asio-sys 0.4.0 release
  • 8806724 fix(wasapi): shift i24 to/from top bits (#1309) (#1311)
  • 8846425 fix(asio): share duplex buffer state across Device handles for the same drive...
  • 9d05a73 docs: alphabetize error variants in supported-configs docs
  • d733d51 doc: record UnsupportedConfig on the supported-configs queries
  • 9f6f47a fix(ci): pin mipsel to no forced frame pointers
  • b87721d fix(pipewire): fix 24-bit sample format mapping
  • e0893c3 doc: realtime-dbus has never worked on BSD
  • 11014e4 ios: recover the stream after an audio session interruption (#1295)
  • c4a92cb fix: include *BSD in frames_to_duration gate
  • Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

  • Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

  • Update to syn 3
Commits
  • b1d5db5 Release 2.0.20
  • c4c3ebd Merge pull request #454 from dtolnay/clippy
  • 2266152 Suppress redundant_field_names clippy lint
  • 2901cfd Raise minimum tested compiler to rust 1.88
  • aa9d91f Update ui tests for version 2.0.19
  • e13a785 Release 2.0.19
  • 0a0e76c Update to syn 3
  • ec42ea7 Update actions/upload-artifact@v6 -> v7
  • 4178c4a Update actions/checkout@v6 -> v7
  • 7214e0e Ignore items_after_statements pedantic clippy lint in test
  • Additional commits viewable in compare view

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

Updates toml from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0

Commits

Updates bytemuck from 1.25.0 to 1.25.2

Changelog

Sourced from bytemuck's changelog.

1.25.2

  • implement NoUninit for char, bool, NonZero* arrays

1.25.1

1.25

1.24

1.23.2

  • bump derive minimum version.

1.23.1

  • Added a windows-only ZeroableInOption impl for "stdcall" functions.

1.23

  • impl_core_error crate feature adds core::error::Error impl.
  • More ZeroableInOption impls.

1.22

  • Add the pod_saturating feature, which adds Pod impls for Saturating<T> when T is already Pod.
  • A bump in the minimum bytemuck_derive dependency from 1.4.0 to 1.4.1 to avoid a bug if you have a truly ancient cargo.lock file sitting around.
  • Adds Send and Sync impls to BoxBytes.

1.21

  • Implement Pod and Zeroable for core::arch::{x86, x86_64}::__m512, __m512d and __m512i without nightly. Requires Rust 1.72, and is gated through the avx512_simd cargo feature.
  • Allow the use of must_cast_mut and must_cast_slice_mut in const contexts. Requires Rust 1.83, and is gated through the must_cast_extra cargo feature.
  • internal: introduced the maybe_const_fn macro that allows defining some function to be const depending upon some cfg predicate.

... (truncated)

Commits

Updates clap from 4.6.1 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3

[4.6.3] - 2026-07-20

Fixes

  • (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Commits
  • 348cff3 chore: Release
  • d478377 docs: Update changelog
  • 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
  • 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
  • f90a966 fix(complete): Use spaces for indentation in fish
  • dd4997b fix(complete): Don't glob-expand bash positionals
  • 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
  • 8141e11 chore(deps): Update compatible (dev) (#6398)
  • 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
  • Additional commits viewable in compare view

Updates clap_complete from 4.6.7 to 4.6.9

Commits
  • 715b812 chore: Release
  • 89e6e9b docs: Update changelog
  • 3918cb4 Merge pull request #6468 from sjh9714/fix-bash-posix-fn-name
  • 526c819 Merge pull request #6469 from latent-9/docs/fix-derive-reference-link
  • b2bd685 docs(clap_derive): Fix derive reference link
  • ecee8a4 fix(complete): Name the function after fn_name
  • 6dd2e5a test(complete): Show POSIX bash will not source
  • 4684d7a chore: Release
  • 51d50ad docs: Update changelog
  • 3bc3622 Merge pull request #6457 from bl4ck4t/master
  • Additional commits viewable in compare view

Updates mlua from 0.12.0 to 0.12.1

Release notes

Sourced from mlua's releases.

v0.12.1

What's Changed

  • Lua 5.5 updated to 5.5.1
  • Luau updated to 0.736
  • Allow #[mlua::userdata_impl] to be used in a different module from #[derive(UserData)] (#726)
  • Fix coroutine stack handling after yielding from hooks (#723)

Full Changelog: mlua-rs/mlua@v0.12.0...v0.12.1

Changelog

Sourced from mlua's changelog.

v0.12.1 (Aug 29, 2026)

  • Lua 5.5 updated to 5.5.1
  • Luau updated to 0.736
  • Allow #[mlua::userdata_impl] to be used in a different module from #[derive(UserData)] (#726)
  • Fix coroutine stack handling after yielding from hooks (#723)
Commits
  • 4fd87af v0.12.1
  • 983c384 mlua-sys: v0.12.0
  • 0224864 mlua_derive: v0.12.1
  • aca3bb3 Update CHANGELOG
  • 8ceeceb Create C closures under lua_cpcall so an allocation failure doesn't escape ...
  • 4bca98f clippy
  • 87dc0c1 mlua_derive: Make userdata_impl independent from module where UserData is d...
  • 7539003 mlua-sys: Bump luau-src to v0.21 (Luau 0.736)
  • e9b9844 mlua-sys: bump luau-src to 551+
  • 66b9f08 Fix coroutine stack handling after hook yields
  • See full diff in compare view

Updates uniffi from 0.32.0 to 0.32.1

Changelog

Sourced from uniffi's changelog.

v0.32.1 (backend crates: v0.32.1) - (2026-09-08)

What's Fixed

  • Kotlin: Fixed checksum failure on aarch64 (#2935)

All changes in v0.32.1.

Commits
  • 35a4743 chore: Release
  • 1f25db6 chore: Release
  • 2a8331b fix(kotlin): Make sure uniffiCheckApiChecksums compares against the rust gene...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps)(deps): bump the production-dependencies group across 1 di…
f7ab5e5 
…rectory with 14 updates

Bumps the production-dependencies group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.13.0` | `2.13.2` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [ureq](https://github.com/algesten/ureq) | `3.3.0` | `3.4.1` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.66` | `1.4.5` |
| [cpal](https://github.com/RustAudio/cpal) | `0.18.1` | `0.18.2` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.20` |
| [log](https://github.com/rust-lang/log) | `0.4.33` | `0.4.34` |
| [toml](https://github.com/toml-rs/toml) | `1.1.2+spec-1.1.0` | `1.1.3+spec-1.1.0` |
| [bytemuck](https://github.com/Lokathor/bytemuck) | `1.25.0` | `1.25.2` |
| [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.6` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.6.7` | `4.6.9` |
| [mlua](https://github.com/mlua-rs/mlua) | `0.12.0` | `0.12.1` |
| [uniffi](https://github.com/mozilla/uniffi-rs) | `0.32.0` | `0.32.1` |



Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `bitflags` from 2.13.0 to 2.13.2
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.13.0...2.13.2)

Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `ureq` from 3.3.0 to 3.4.1
- [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md)
- [Commits](algesten/ureq@3.3.0...3.4.1)

Updates `cc` from 1.2.66 to 1.4.5
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.66...cc-v1.4.5)

Updates `cpal` from 0.18.1 to 0.18.2
- [Release notes](https://github.com/RustAudio/cpal/releases)
- [Changelog](https://github.com/RustAudio/cpal/blob/master/CHANGELOG.md)
- [Commits](RustAudio/cpal@v0.18.1...v0.18.2)

Updates `thiserror` from 2.0.18 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.20)

Updates `log` from 0.4.33 to 0.4.34
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.33...0.4.34)

Updates `toml` from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.2...toml-v1.1.3)

Updates `bytemuck` from 1.25.0 to 1.25.2
- [Changelog](https://github.com/Lokathor/bytemuck/blob/main/changelog.md)
- [Commits](Lokathor/bytemuck@v1.25.0...v1.25.2)

Updates `clap` from 4.6.1 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.6)

Updates `clap_complete` from 4.6.7 to 4.6.9
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.7...clap_complete-v4.6.9)

Updates `mlua` from 0.12.0 to 0.12.1
- [Release notes](https://github.com/mlua-rs/mlua/releases)
- [Changelog](https://github.com/mlua-rs/mlua/blob/main/CHANGELOG.md)
- [Commits](mlua-rs/mlua@v0.12.0...v0.12.1)

Updates `uniffi` from 0.32.0 to 0.32.1
- [Changelog](https://github.com/mozilla/uniffi-rs/blob/v0.32.1/CHANGELOG.md)
- [Commits](mozilla/uniffi-rs@v0.32.0...v0.32.1)

---
updated-dependencies:
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bitflags
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ureq
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: cc
  dependency-version: 1.4.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: cpal
  dependency-version: 0.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: toml
  dependency-version: 1.1.3+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bytemuck
  dependency-version: 1.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: clap
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: clap_complete
  dependency-version: 4.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: mlua
  dependency-version: 0.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: uniffi
  dependency-version: 0.32.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from doublegate as a code owner September 14, 2026 10:12
@coderabbitai

coderabbitai Bot commented Sep 14, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 8440c1b9-4296-45a0-b68f-5289cc58e68d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@socket-security

socket-security Bot commented Sep 14, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updateduniffi@​0.32.0 ⏵ 0.32.11001009310070
Updatedthiserror@​2.0.18 ⏵ 2.0.208010093100100
Updatedureq@​3.3.0 ⏵ 3.4.18010093100100
Updatedserde@​1.0.228 ⏵ 1.0.2298110093100100
Updatedserde_json@​1.0.150 ⏵ 1.0.1518210093100100
Updatedcpal@​0.18.1 ⏵ 0.18.285100100100100
Updatedbitflags@​2.13.0 ⏵ 2.13.210010093100100
Updatedbytemuck@​1.25.0 ⏵ 1.25.210010093100100
Updatedcc@​1.2.66 ⏵ 1.4.59910093100100
Updatedclap@​4.6.1 ⏵ 4.6.69910093100100
Updatedclap_complete@​4.6.7 ⏵ 4.6.99710093100100
Updatedlog@​0.4.33 ⏵ 0.4.3410010093100100
Updatedmlua@​0.12.0 ⏵ 0.12.19610093100100
Updatedtoml@​1.1.2%2Bspec-1.1.0 ⏵ 1.1.3+spec-1.1.010010093100100

View full report

@github-actions

github-actions Bot commented Sep 14, 2026

Copy link
Copy Markdown

Antigravity review (Gemini via Ultra)

This PR automatically updates 14 dependency versions in Cargo.lock as part of a grouped dependency bump.

Blocking issues

None found.

Suggestions

  • Cargo.lock: This update introduces duplicate versions of dependencies into the tree. Specifically, syn 3.0.5 is added while 2.x remains, and base64 0.23.1 is added alongside 0.22.1. Consider running cargo tree -d to see if other crates can be bumped to deduplicate these, which will improve compile times and binary size.

Nitpicks

  • Trivial lockfile change.

Automated first-pass review by agy on a self-hosted runner -- not a human review.

@doublegate doublegate mentioned this pull request Oct 9, 2026
Merged
@doublegate

doublegate commented Oct 9, 2026

Copy link
Copy Markdown
Owner

Superseded by consolidated dependency bump PR #40.

@doublegate doublegate closed this Oct 9, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/cargo/production-dependencies-8580d01c38 branch October 9, 2026 19:29
doublegate
doublegate approved these changes Oct 10, 2026
View reviewed changes

@doublegate doublegate left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed and Approved -- DG 10/9

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@doublegate doublegate doublegate approved these changes

Assignees

@doublegate doublegate

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@doublegate