[dependabot]

Bumps the cargo-deps group with 8 updates:

Package	From	To
uuid	1.28.0	1.29.0
redis	1.7.1	1.8.0
jaq-core	3.1.1	3.1.2
fastembed	7.1.1	7.5.0
jaq-std	3.0.3	3.0.4
libc	0.2.190	0.2.191
minijinja	3.0.1	3.0.3
webbrowser	1.2.4	1.2.5

Updates uuid from 1.28.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

• Add versioned constructors to NonNilUuid by @​RanaPriyansh in uuid-rs/uuid#919
• Prepare for 1.29.0 release by @​KodrAus in uuid-rs/uuid#920

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

Commits

• 4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
• a3631fd prepare for 1.29.0 release
• 304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
• d49f963 Reuse existing version tests for NonNilUuid constructors
• 2f02404 Add versioned constructors to NonNilUuid
• See full diff in compare view

Updates redis from 1.7.1 to 1.8.0

Release notes

Sourced from redis's releases.

redis-1.8.0

Changes & Bug fixes

• Use a const chunking function in tuple impl of FromRedisValue (#2424 by @​nihohit)
• lint: Add FromStr for NodeAddress (#2444 by @​somechris)
• Add Debug implementation to AsyncConnectionConfig, PubSubSink and dependent types (#2450 by @​nihohit)
• Add Debug implementation to Sentinel configuration types (#2451 by @​nihohit)
• Add debug impl for cluster config types (#2453 by @​nihohit)
• Add Debug impls for command input types (#2454 by @​nihohit)
• Add Debug impls for return types (#2455 by @​nihohit)
• Add FLAT vector field support for FT.CREATE [5/8] (#2319 by @​StefanPalashev)
• Replace assert with an error when a multi-slot shard returns a wrong result count (#2471 by @​17krishna8)
• Handle TLS handshake errors when connecting with a timeout (#2473 by @​17krishna8)
• Add HNSW vector field support for FT.CREATE [6/8] (#2467 by @​StefanPalashev)
• Add SVS-VAMANA vector field support for FT.CREATE [7/8] (#2468 by @​StefanPalashev)
• Route FT.CREATE as a keyless command and add cluster integration tests [8/8] (#2469 by @​StefanPalashev)
• Reject mismatched shard response lengths in logical_aggregate (#2472 by @​17krishna8)
• Redact secrets in Debug for BasicAuth and ClientCertificate (#2487 by @​varun3257)
• AsyncPubsub: await all confirmations of subscription commands (#2475 by @​nihohit)
• Multiplexed Connection: await all confirmations of subscription commands (#2491 by @​nihohit)
• fix(streams): parse the fields of XINFO STREAM's first and last entries (#2494 by @​LindseyZ1205)
• Support custom root certificates under tls-native-tls (#2488 by @​MohitKS5)
• Reject mixed TLS initial nodes regardless of order in ClusterClientBuilder (#2496 by @​varun3257)
• fix(types): forward num_of_args and describe_numeric_behavior for Cow (#2500 by @​LindseyZ1205)
• fix(connection-manager, cluster): await all confirmations of subscription commands (#2504 by @​nihohit)
• sentinel: ask the next sentinel when one has no valid master for the name (#2427 by @​1jeffchristensen)

CI & operational improvements

• ci: Fix Valkey Bloom module caching (#2420 by @​nkaradzhov)
• Add test harness and CI support for the Search module [4/8] (#2318 by @​StefanPalashev)
• doc: Add the environment variable for the search module (#2429 by @​somechris)
• feat: add a seeded randomized test to ensure that interleaved MOVED/broken_connection does not cause a deadlock (#2425 by @​virratanasangpunth)
• Fix new nightly lints lints (#2460 by @​nihohit)
• ci: Switch lint-and-check to stabilized dependencies format (#2477 by @​somechris)
• Pin all github runners (#2501 by @​nihohit)
• Add asserts on error content in tests. (#2498 by @​nihohit)
• Improve caching (#2497 by @​nihohit)
• Pick the parser microbenchmark harnesses over from #2199 (#2484 by @​nihohit)

Commits

• fec5ef0 Prepare version 1.8.0 (#2507)
• 9758f38 sentinel: ask the next sentinel when one has no valid master for the name (#2...
• 1d666d1 fix(connection-manager, cluster): await all confirmations of subscription com...
• a61f735 fix(types): forward num_of_args and describe_numeric_behavior for Cow (#2500)
• d7f0bcc build(deps): bump xxhash-rust from 0.8.15 to 0.8.16 (#2503)
• ceec309 benches: bring the parser microbenchmark harnesses over from pr-2199 (#2484)
• 78e1da0 Improve caching (#2497)
• f54cc50 Add asserts on error content in tests. (#2498)
• d415e4b Pin all github runners (#2501)
• 3911503 Reject mixed TLS initial nodes regardless of order in ClusterClientBuilder (#...
• Additional commits viewable in compare view

Updates jaq-core from 3.1.1 to 3.1.2

Release notes

Sourced from jaq-core's releases.

3.1.2

This release corrects bugs, increases compatibility with jq, and polishes the HTML manual.

Corrected bugs:

• The REPL works again, and as bonus, now exposes inputs and input_filename 01mf02/jaq#473
• Comments not followed by a newline do not crash jaq anymore 01mf02/jaq#479
• jaq can now actually be used on no_std systems, thanks to @​flyingmutant 01mf02/jaq#464

Compatibility:

• The scan filter now automatically applies the g flag and specially treats regexes with capture groups, like jq 01mf02/jaq#474

HTML manual:

• Syntax highlighting for jq and JSON snippets 01mf02/jaq#468
• Printing the manual now hides the TOC 01mf02/jaq#483

New Contributors

• @​flyingmutant made their first contribution in 01mf02/jaq#464

Full Changelog: 01mf02/jaq@v3.1.1...v3.1.2

Commits

• f7fea92 Bump versions.
• 8c294f9 Merge pull request #483 from 01mf02/manual-print-notoc
• f2ffd64 Merge pull request #482 from 01mf02/concat-noclone-test
• 4a82f98 Omit TOC when printing HTML manual.
• 782da79 New test for checking cloning behaviour of concatenation.
• 4acfc07 Merge pull request #481 from 01mf02/output-stack-overflow
• ba0695f Add output stack overflow example.
• d29c687 Merge pull request #473 from 01mf02/repl-input-filename
• 9ec8ea4 Make it smaller.
• 6d1a5eb Merge pull request #474 from 01mf02/scan-compat
• Additional commits viewable in compare view

Updates fastembed from 7.1.1 to 7.5.0

Release notes

Sourced from fastembed's releases.

v7.5.0

7.5.0 (2026-10-23)

🍕 Features

• Run the Qwen3 reranker's shared prompt head once per score call (#342) (477c69a) - @​dhkts1

v7.4.1

7.4.1 (2026-10-23)

🐛 Bug Fixes

• Qwen3 reranker scores in f32, without padding, in bounded forwards, loading two output rows (#339) (562795e) - By @​dhkts1
• Tokenize only the kept prefix of a long Qwen3 text (#340) (64ec3ac) - By @​dhkts1

v7.4.0

7.4.0 (2026-10-23)

🍕 Features

• Make ONNX Runtime optional, and split qwen3 into qwen3-text and qwen3-vl (#335) (e37fb5e) - By @​dhkts1
• Run Qwen3's MLP activation silu(gate) * up as one Metal kernel (#337) (601cde4) - By @​dhkts1

🐛 Bug Fixes

• Qwen3 vectors are unit length in bf16, and the fused q/k norm-rope rounds once (#334) (fe741ea) - By @​dhkts1

🧹 Chores

• Test Metal in CI, run the Nomic test, mark the download tests ignored (#336) (d85f955) - By @​dhkts1

v7.3.2

7.3.2 (2026-10-23)

🐛 Bug Fixes

• Share default ORT environment and harden Qwen3 embed/rerank (#333) (d2b80fa) - By @​anush008

v7.3.1

7.3.1 (2026-10-23)

🧹 Chores

• Add @​dhkts1 to the crate authors list (#332) (92ee34c)

v7.3.0

7.3.0 (2026-10-22)

🍕 Features

... (truncated)

Commits

• 366443c chore(release): 7.5.0 [skip ci]
• 477c69a feat: run the Qwen3 reranker's shared prompt head once per score call (#342)
• 23830dc chore(release): 7.4.1 [skip ci]
• 562795e fix: Qwen3 reranker scores in f32, without padding, in bounded forwards, load...
• 64ec3ac fix: tokenize only the kept prefix of a long Qwen3 text (#340)
• 6b01aaf docs: Credit Greptile.com in the README (#341)
• 8ca201e chore(release): 7.4.0 [skip ci]
• 601cde4 feat: run Qwen3's MLP activation silu(gate) * up as one Metal kernel (#337)
• d85f955 chore: test Metal in CI, run the Nomic test, mark the download tests ignored ...
• e37fb5e feat: make ONNX Runtime optional, and split qwen3 into qwen3-text and qwen3-v...
• Additional commits viewable in compare view

Updates jaq-std from 3.0.3 to 3.0.4

Commits

• See full diff in compare view

Updates libc from 0.2.190 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

• Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

• Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
• Apple: add ifaliasreq and in6_aliasreq (#5557)
• FreeBSD: Add PT_* constants (#5625)
• Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
• Hurd: Add POSIX_SPAWN_* flags (#5578)
• NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
• OpenBSD: Add sensordev (#5534)
• QuRT: Add isatty (#5618)
• WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

• FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

• AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
• Android: Make prop_info an extern type (#5561)
• Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
• FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

• Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

• Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)
• Apple: add ifaliasreq and in6_aliasreq (#5557)
• FreeBSD: Add PT_* constants (#5625)
• Haiku: Add AI_* and NI_* constants from netdb.h (#5585)
• Hurd: Add POSIX_SPAWN_* flags (#5578)
• NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)
• OpenBSD: Add sensordev (#5534)
• QuRT: Add isatty (#5618)
• WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

• FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

• AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)
• Android: Make prop_info an extern type (#5561)
• Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)
• FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

Commits

• ccc2ff4 libc: Release 0.2.191
• bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
• ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
• b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
• 9c7f568 apple: add ifaliasreq and in6_aliasreq
• 018c7e9 wasi: Add pthread_condattr_{get,set}clock
• 2c77185 openbsd: add sensordev structure
• e10813c hurd: Add missing POSIX_SPAWN_* flags
• 2ea4bc1 Fix FreeBSD/aarch64
• 6d666fd dragonfly: Parse version from headers rather than CLI
• Additional commits viewable in compare view

Updates minijinja from 3.0.1 to 3.0.3

Changelog

Sourced from minijinja's changelog.

3.0.3

• Re-release of 3.0.2 without code changes. The Python package for 3.0.2 could not be published to PyPI because the 32-bit Linux wheel failed to build on the new Ubuntu 26.04 GitHub Actions runners, so 3.0.3 is the first release with the 3.0.2 changes on PyPI. All other packages are identical to 3.0.2.

3.0.2

• Macros and variables starting with an underscore are now private and are no longer exported from imported templates in Rust and Go, matching Jinja2. They are not visible as attributes of a module imported with {% import %}, and {% from ... import %} of such a name is a syntax error. State::exports / State.Exports no longer return them either, but they can still be retrieved with lookup. #970
• Fixed modules imported with {% import %} not being iterable in Go.
• Fixed the indent filter indenting blank lines of CRLF text when blank is false, in Rust and Go. A blank line ended up as " \r" instead of "\r", leaving trailing whitespace. #972
• Fixed the wordwrap filter ignoring break_long_words when break_on_hyphens is false. The two arguments are independent in Jinja2, so a word longer than width is still broken unless break_long_words is false. #940
• Fixed chained integer lookups like foo.1.0 failing with a syntax error in Rust and Go. Like in Jinja2, a number right after a dot is now always read as an item index, so foo.1.0 is foo[1][0] instead of foo followed by the float 1.0. #974
• Fixed \x and octal string escapes above \x7f producing invalid UTF-8 in Go. Like in Rust they now produce the code point, so '\xe9' is é. Go now also understands the \b and \f escapes and surrogate pairs written as two \u escapes, and rejects a lone surrogate like Rust does. #975
• Added the method argument to the round filter for Jinja2 compatibility in Rust and Go. It takes common (the default), ceil or floor, and both precision and method can now be passed as keyword arguments. Integers are now rounded to a negative precision like in Jinja2, so 15|round(-1) is 20 rather than 15. #968
• Fixed Python exceptions leaking into later renders in the Python bindings. An exception that MiniJinja did not report, for instance one raised by an iterator after a {% break %}, was raised in place of the next unrelated error. Exceptions are now attached to the error that carries them. Exceptions raised by a loader are also no longer treated as missing templates, so they are no longer ignored by ignore missing or skipped by an include with a list of templates. #967
• The Python package is now also published as free-threaded wheels for Linux, macOS and Windows: a version-specific wheel for CPython 3.14t and an abi3t (PEP 803) wheel for CPython 3.15+. #969
• The Python package metadata includes the readme again, so the PyPI page shows a project description.

Commits

• 6ba9ade chore(release): 3.0.3
• 355694a ci: disable seccomp for the i686 manylinux container
• a3414f9 chore(release): finalize 3.0.2
• 66fccf2 fix(py): include the readme in the package metadata
• 566e191 chore(py): reformat tests with black 26
• e0608e0 fix(py): attach Python exceptions to the errors that carry them
• 529a34c feat: add method argument to round (#968)
• 83a10b6 fix(go): unescape strings like the Rust lexer (#975)
• 941b883 fix(lexer): read a number after a dot as an item index (#974)
• cade1a0 fix(filters): honor break_long_words when break_on_hyphens is false (#940)
• Additional commits viewable in compare view

Updates webbrowser from 1.2.4 to 1.2.5

Release notes

Sourced from webbrowser's releases.

v1.2.5

Fixed

• Windows: use raw-dylib for shlwapi to fix GNU/LLD linking. See #123

Changelog

Sourced from webbrowser's changelog.

[1.2.5] - 2026-10-22

Fixed

• Windows: use raw-dylib for shlwapi to fix GNU/LLD linking. See #123

Commits

• 278ec1b Release v1.2.5
• 19127fc Merge branch 'tasnimjabir-fix/windows-raw-dylib'. See PR #123
• da8736f Fix i686 GNU CI runtime setup
• 98ab38b fix build
• 96d1973 Fix Windows GNU linking with raw-dylib
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
overslash	Ready	Preview	Oct 30, 2026 8:09pm UTC

[github-actions]

Code diff size

+0 / −0 across 0 files (net +0)

No production source files changed.

_{Source files under src/ only (.cjs, .go, .js, .jsx, .mjs, .py, .rs, .svelte, .ts, .tsx); test files and inline #[cfg(test)] modules excluded. 3 other changed files not counted.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!