Skip to content

deps(rust): bump the rust-dependencies group across 1 directory with 41 updates - #53

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-d687fd6642
Open

deps(rust): bump the rust-dependencies group across 1 directory with 41 updates#53
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-d687fd6642

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 41 updates in the / directory:

Package From To
pyo3 0.28.2 0.30.1
serde 1.0.228 1.0.229
serde_json 1.0.149 1.0.154
base64 0.22.1 0.23.1
lopdf 0.39.0 0.42.0
pulldown-cmark 0.13.1 0.13.5
scraper 0.25.0 0.27.0
regex 1.12.3 1.13.1
qdrant-client 1.17.0 1.18.0
tantivy 0.25.0 0.27.0
tokio 1.49.0 1.50.0
futures 0.3.32 0.3.34
futures-util 0.3.32 0.3.34
clap_complete 4.5.66 4.6.9
anyhow 1.0.102 1.0.104
thiserror 2.0.18 2.0.21
async-trait 0.1.89 0.1.92
tracing-subscriber 0.3.22 0.3.23
tracing-appender 0.2.4 0.2.5
uuid 1.21.0 1.29.0
chrono 0.4.44 0.4.45
sha2 0.10.9 0.11.1
rusqlite 0.38.0 0.40.2
toml 1.0.3+spec-1.1.0 1.0.6+spec-1.1.0
rayon 1.11.0 1.12.0
once_cell 1.21.3 1.21.4
indicatif 0.18.4 0.18.6
console 0.16.2 0.16.6
dirs 6.0.0 7.0.0
ort 2.0.0-rc.11 2.0.0-rc.15
tokenizers 0.22.2 0.23.2
wasmtime 42.0.1 42.0.2
sysinfo 0.38.3 0.39.6
parking_lot 0.12.5 0.13.0
md5 0.8.0 0.8.1
axum 0.8.8 0.8.9
tower-http 0.6.8 0.7.1
hyper 1.8.1 1.12.0
tokio-test 0.4.5 0.4.6
tempfile 3.26.0 3.27.0
proptest 1.10.0 1.12.0

Updates pyo3 from 0.28.2 to 0.30.1

Release notes

Sourced from pyo3's releases.

PyO3 0.30.1 is a re-release of PyO3 0.30.0 after investments in CI security unfortunately led to a failed crates.io publish. Rather than delete the failed tag, this new tag comes after the CI issues have (hopefully) been corrected.

Thanks to @​davidhewitt @​Tpt and @​viicos for the investigation and fixes.

PyO3 0.30.0

This release brings confirmed testing against Python 3.15.0 final. Support for Python 3.8 has been dropped. The minimum supported Rust version has also been increased to 1.85.

The largest sets of improvements come to PyO3 0.29.0's experimental-inspect feature, which has received substantial feedback since 0.29.0 and subsequently has seen many refinements to improve the quality and coverage to the generated stubs. Thank you to everyone who has helped to continue to drive this feature towards completion.

New safe wrappers for PyFrozenDict (3.15+) and PyContext have been added.

PyO3 now contains meson build files, which should make it possible for projects using meson-python to more straightforwardly use Rust and PyO3 for additional components.

Additionally, a number of small optimizations have landed, including:

  • simplifications to core implementations of PyAnyMethods,
  • reduced overhead from PyO3's internal "reference pool" used to dispose of Py<T> values dropped when not attached to the interpreter,
  • optimizations to num-bigint conversions, and
  • better generated code from IntoPyObject and IntoPyObjectRef derives.

There are also many other incremental improvements, bug fixes and smaller features; full detail can be found in the CHANGELOG.

Please consult the migration guide for help upgrading.

Thank you to everyone who contributed code, documentation, design ideas, bug reports, and feedback. The following contributors' commits are included in this release:

@​adamgerhant-ai @​alex @​bschoenmaeckers @​charliermarsh @​chirizxc @​clin1234 @​davidhewitt @​dependabot[bot] @​dylanpulver @​elbaro @​exg @​florentinl @​FranciscoTGouveia @​Icxolu @​imfeh2 @​IvanIsCoding @​JMak-Security @​jonasdedden @​jorenham @​konstin @​latent-9 @​MatthieuDartiailh @​mattip @​mejrs @​msimacek

... (truncated)

Changelog

Sourced from pyo3's changelog.

[0.30.1] - 2026-10-14

Packaging

  • Support PyPy 3.12. #6448

[0.30.0] - 2026-10-13

NB PyO3 0.30.0 failed to push to crates.io due to a CI issue, so 0.30.1 was prepared and pushed with minimal other changes other than confirming support for PyPy 3.12.

Packaging

  • Drop support for Python 3.8. #6128
  • Bump MSRV to 1.85. #6459
  • Support meson-python as a build backend. #6483
  • Bump minimum supported GraalPy version to 25.4. #6491
  • Support Python 3.15.0 final. #6517

Added

  • Add support for PyFrozenDict on 3.15+ #6174
  • Add PyContext type. #6227
  • experimental-inspect: classes which extend their base's instance layout are now decorated with disjoint_base in the generated stubs, as per PEP 800. #6362
  • Add methods PyBuffer::as_slice_ptr and PyBuffer::as_fortran_slice_ptr. #6382
  • Implement Copy for PyVisit. #6412
  • Add non-poisoning variant of PyMutex #6437
  • Add PyStringMethods::code_point_len. #6455
  • FFI Definitions:
    • Add FFI definition PyThread_get_thread_ident. #6056
    • Add FFI definitions for PEP 731 (PyInitConfig). #6152
    • Add FFI definitions PyContext_AddWatcher and PyContext_ClearWatcher on Python 3.14+. #6204
    • Add FFI definitions for PEP 539 ("Thread-Specific Storage" API). #6262
    • Enable FFI definitions PyObject_GC_Track and PyObject_GC_UnTrack on PyPy. #6299
    • Add FFI definitions PyUnicode_DecodeMBCS, PyUnicode_DecodeMBCSStateful, PyUnicode_DecodeCodePagetateful, PyUnicode_AsMBCSString, PyUnicode_EncodeCodePage, and PyUnicode_Equal. #6349
    • Add FFI definitions PyFloat_Pack{2,4,8} and PyFloat_Unpack{2,4,8}. #6350
    • Add FFI definitions PyFunction_GET_CODE, PyFunction_GET_GLOBALS, PyFunction_GET_MODULE, PyFunction_GET_DEFAULTS, PyFunction_GET_KW_DEFAULTS, PyFunction_GET_CLOSURE, PyFunction_GET_ANNOTATIONS, PyClassMethod_Type, PyStaticMethod_Type, PyClassMethod_New, and PyStaticMethod_New. #6351

Changed

  • Optimized num-bigint conversions on Python 3.14 and newer. #6144
  • Change #[pyclass] to not emit FromPyObject implementation by default (this was previously deprecated). #6188
  • Deprecate #[pyclass(skip_from_py_object)] option (as it is now the default). #6188
  • Deprecate pyo3_build_config::PythonAbi::from_build_env in favor of pyo3_build_config::PythonAbi::from_stable_abi. #6192
  • Change pyo3_build_config::InterpreterConfig::from_sysconfigdata to no longer select a target ABI based on the content of abi3 or abi3t cargo features (it will now always select a version-specific ABI). #6192
  • Optimize PyO3's internal reference pool used for disposal of Py<T> values dropped when not attached to the Python interpreter. #6200
  • experimental-inspect: Emit __all__ for complete modules in the type stubs. #6242
  • Change PyBytes::new_with_writer to take &mut PyBytesWriter instead of &mut dyn Write. #6251
  • Change #[pymodule_init] to allow functions which do not take a module argument (for experimental-inspect, such modules are not marked Incomplete). #6271
  • Change #[pymodule_init] to optionally allow functions to take a Python<'_> marker. #6271

... (truncated)

Commits

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

v1.0.151

v1.0.150

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures

0.23.0

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
Commits
  • 069bf70 v0.23.1
  • 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
  • 7cffce6 Fix testing on architectures without unsafe SIMD support
  • e34f9a0 Merge pull request #308 from atouchet/com
  • e9240c9 Remove outdated comment
  • 9e9220a v0.23.0
  • 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
  • fbec5f1 Document no trailing trailing bits
  • 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
  • f10b7e2 Update deps & edition
  • Additional commits viewable in compare view

Updates lopdf from 0.39.0 to 0.42.0

Changelog

Sourced from lopdf's changelog.

v0.42.0 (2026-06-23)

Feat

  • Add Content::decode_strict method for strict parsing

Fix

  • Limit array and dictionary nesting depth
  • Include subsequent ObjStm objects in xref stream range
  • Insert newline between concatenated content streams
  • Consume trailing comments in content streams

Test

  • Escape trailing whitespace in parser tests

v0.41.0 (2026-06-04)

Add

  • Add test to reproduce bug with replacing text in non-single character TJ Arrays
  • Add regression test PDF file
  • Add performance tests for document loading and page counting

Fix

  • Fix bug replacing text in non-single character TJ Arrays
  • fix clippy errors

Implement

  • Implement differences mapping

Release

  • Release 0.41

Removes

  • Removes nom_locate dependency to fix a performance regression introduced in v0.35.0.

v0.40.0 (2026-03-19)

Fix

... (truncated)

Commits
  • 2ffc4b4 Release 0.42.0
  • c755394 fix(parser): limit array and dictionary nesting depth
  • 762be26 fix(writer): include subsequent ObjStm objects in xref stream range
  • afb9f00 fix(document): insert newline between concatenated content streams
  • 162257d fix(parser): consume trailing comments in content streams
  • 3549a24 feat(parser): add Content::decode_strict method for strict parsing
  • 81202a2 test(parser): escape trailing whitespace in parser tests
  • fff5d1c Update CHANGELOG
  • cc9b63e Release 0.41
  • 681cc9f fix clippy errors
  • Additional commits viewable in compare view

Updates pulldown-cmark from 0.13.1 to 0.13.5

Release notes

Sourced from pulldown-cmark's releases.

0.13.5

This release fixes some security issues already fixed in main branch. More details in pulldown-cmark/pulldown-cmark#1181.

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.4...v0.13.5

0.13.4

Fix panic in specific cases with TightParagraph.

What's Changed

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.3...v0.13.4

0.13.3

Bug Fixes

  • Fix Wikilink offset.

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.2...v0.13.3

0.13.2

Security

  • Bump tar to 0.4.45.

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.1...v0.13.2

Commits
  • 48a2767 Merge pull request #1181 from pulldown-cmark/release-0.13.5
  • a126502 feat: cherry-pick pull request #1148 commits into 0.13 branch
  • 6da8248 feat: cherry-pick pull request #1155 commits into 0.13 branch
  • 73fe547 feat: cherry-pick pull request #1143 commits into 0.13 branch
  • cf4ee5f feat: cherry-pick pull request #1136 commits into 0.13 branch
  • 63ab297 feat: cherry-pick pull request #1046 commits into 0.13 branch
  • fd112a4 chore: cargo update and bump version to 0.13.5
  • 078feb5 feat: cherry-pick pull request #1021 commits into 0.13 branch
  • 9620194 feat: cherry-pick pull request #1111 commits into 0.13 branch
  • e6eafca feat: cherry-pick pull request #1102 commits into 0.13 branch
  • Additional commits viewable in compare view

Updates scraper from 0.25.0 to 0.27.0

Release notes

Sourced from scraper's releases.

v0.27.0

What's Changed

  • Bump dependencies including selectors and cssparser.
  • Avoid exposing optional dependencies as implicit features.

Full Changelog: rust-scraper/scraper@v0.26.0...v0.27.0

v0.26.0

What's Changed

New Contributors

Full Changelog: rust-scraper/scraper@v0.25.0...v0.26.0

Commits
  • 9c1eff3 Bump selectors and cssparser together.
  • 429d8a1 Avoid exposing optional dependencies as implicit features.
  • 8038521 Add categories as suggested by lib.rs maintainer dashboard.
  • f2d0e50 Bump selectors from 0.36.1 to 0.37.0
  • 2103564 Bump indexmap from 2.13.1 to 2.14.0
  • 57ebae6 Bump selectors from 0.36.0 to 0.36.1
  • d935dee Bump indexmap from 2.13.0 to 2.13.1
  • 170cdd3 Merge pull request #306 from rust-scraper/bump
  • bca1839 Bump html5ever from 0.38.0 to 0.39.0
  • d07444e Bump selectors from 0.35.0 to 0.36.0 (#307)
  • Additional commits viewable in compare view

Updates regex from 1.12.3 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

  • #1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

  • #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

1.12.4 (2026-06-09)

This release includes a performance optimization for compilation of regexes

... (truncated)

Commits
  • 2b52759 1.13.1, redux
  • 40e9823 1.13.1
  • 75fcb96 changelog: 1.13.1
  • 64ad0b6 automata: fix bug in reverse suffix/inner optimization
  • fa91c31 automata: fix a bug caught by Codex review
  • 30390ec automata: formatting tweaks
  • 821a8eb automata: refactor reverse suffix/inner search slightly
  • 10afd70 automata: expose the extracted literals for inner literal extraction
  • 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
  • 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
  • Additional commits viewable in compare view

Updates qdrant-client from 1.17.0 to 1.18.0

Release notes

Sourced from qdrant-client's releases.

v1.18.0

Change log

Features

Commits

Updates tantivy from 0.25.0 to 0.27.0

Release notes

Sourced from tantivy's releases.

Tantivy v0.26.1

What's Changed

... (truncated)

Changelog

Sourced from tantivy's changelog.

Tantivy 0.27.0

Breaking change

  • MSRV is now 1.88.
  • .set_fast(..) now takes a &str. The same behavior as .set_fast(None) can be obtained with .set_fast(tantivy::tokenizer::RAW_TOKENIZER_NAME). #3020 #3029(@​fulmicoton @​trinity-1686a)
  • Added the FieldType::TieBreaker variant; exhaustive matches on FieldType need a new arm.
  • Segment plugins add Custom variants to FieldType, Type, OwnedValue, ReferenceValueLeaf and SegmentComponent, and new TantivyError variants. SegmentComponent is no longer Copy, SegmentSerializer is removed and IndexMerger::write now takes a &Segment #2993(@​rebasedming)
  • IndexSettings has a new public sort_by_field field, and ColumnarWriter::serialize / FastFieldsWriter::serialize take an optional doc id mapping #2959(@​rebasedming)
  • Directory writers only need terminate(), not flush(). RamDirectory::deep_clone is removed #3095(@​PSeitz)
  • BooleanWeight::new is removed; use BooleanWeight::with_minimum_number_should_match #3071(@​fulmicoton)
  • SumAggregation has a new none_if_no_match field #2878(@​mdashti)
  • IntermediateTermBucketResult::entries() returns a slice instead of a hash map, and intermediate aggregation results no longer implement PartialEq #3040(@​PSeitz)
  • Per-segment aggregation request data types (*AggReqData) and columnar::ColumnBlockAccessor are no longer public #3110 #3066(@​fulmicoton)
  • tantivy-sstable: BlockReader::from_multiple_blocks and DeltaReader::from_multiple_blocks take the first term ordinal of each block #3030(@​flow3d)
  • CompactDoc::node_data is no longer public #3175(@​fulmicoton-dd)

Bugfixes

  • Aggregation
    • Fix range and histogram aggregations counting a document several times when several values of a multivalued field fall into the same bucket #3150(@​PSeitz)
    • Fix terms aggregation on numeric values not merging equal keys across segments with different column types (e.g. u64 and i64 in a JSON field) #3051(@​fulmicoton)
    • Fix wrong sub-aggregation results when the terms aggregation missing value also exists as a real term #3163(@​PSeitz)
    • Fix panic in terms aggregation on text fields when missing is used with include/exclude #2907(@​barbarj)
    • Composite aggregation now always returns after_key on a non-empty page, like Elasticsearch #2910(@​Abdul-Andha)
    • Use upstream datasketches for cardinality aggregation, fixing sketch LIST serialization, and switch to HLL8 #2936(@​fulmicoton)
    • Fix possible out-of-bounds write in terms aggregation on corrupt index files #3182(@​fulmicoton-dd)
  • Query Parser
  • Fix DisjunctionMaxQuery and other non-summing score combiners being scored as a sum with TopDocs #3022(@​marcbachmann)
  • Fix range queries with fractional bounds on integer columns (>= 1.5 no longer matches 1) #3074(@​fulmicoton)
  • Fix Streamer::term_ord() returning wrong ordinals when an automaton prunes dictionary blocks #3030(@​flow3d)
  • Fix FacetCollector returning a facet from an unrelated branch #2867(@​majiayu000)
  • Fix dates outside the i64 nanosecond range wrapping to a wrong date. Dynamic JSON fields index them as strings, typed date fields return an error. Add DateTime::try_from_utc #3156(@​Darkheir)
  • Fix overflow in the blockwise linear codec on large jumps #2971(@​trinity-1686a)
  • Return an error instead of truncating when a merged str/bytes dictionary exceeds 4GB #3169(@​nadav-govari)
  • Fix SegmentReader ignoring I/O errors when opening the positions file #2931(@​JinheLin)
  • Replace unmaintained rust-stemmers with frostem, fixing a panic on some Greek words #3028(@​Xuanwo)
  • Fix unsound unsafe code in StrColumn::ord_to_str, Term::get_json_path, the doc store and MemoryArena

@dependabot
deps(rust): bump the rust-dependencies group across 1 directory with …
680b31d 
…41 updates

Bumps the rust-dependencies group with 41 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pyo3](https://github.com/pyo3/pyo3) | `0.28.2` | `0.30.1` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.154` |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` |
| [lopdf](https://github.com/J-F-Liu/lopdf) | `0.39.0` | `0.42.0` |
| [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark) | `0.13.1` | `0.13.5` |
| [scraper](https://github.com/rust-scraper/scraper) | `0.25.0` | `0.27.0` |
| [regex](https://github.com/rust-lang/regex) | `1.12.3` | `1.13.1` |
| [qdrant-client](https://github.com/qdrant/rust-client) | `1.17.0` | `1.18.0` |
| [tantivy](https://github.com/quickwit-oss/tantivy) | `0.25.0` | `0.27.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` |
| [futures](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` |
| [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.5.66` | `4.6.9` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.104` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.21` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.89` | `0.1.92` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [tracing-appender](https://github.com/tokio-rs/tracing) | `0.2.4` | `0.2.5` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.21.0` | `1.29.0` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.1` |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.38.0` | `0.40.2` |
| [toml](https://github.com/toml-rs/toml) | `1.0.3+spec-1.1.0` | `1.0.6+spec-1.1.0` |
| [rayon](https://github.com/rayon-rs/rayon) | `1.11.0` | `1.12.0` |
| [once_cell](https://github.com/matklad/once_cell) | `1.21.3` | `1.21.4` |
| [indicatif](https://github.com/console-rs/indicatif) | `0.18.4` | `0.18.6` |
| [console](https://github.com/console-rs/console) | `0.16.2` | `0.16.6` |
| dirs | `6.0.0` | `7.0.0` |
| [ort](https://github.com/pykeio/ort) | `2.0.0-rc.11` | `2.0.0-rc.15` |
| [tokenizers](https://github.com/huggingface/tokenizers) | `0.22.2` | `0.23.2` |
| [wasmtime](https://github.com/bytecodealliance/wasmtime) | `42.0.1` | `42.0.2` |
| [sysinfo](https://github.com/GuillaumeGomez/sysinfo) | `0.38.3` | `0.39.6` |
| [parking_lot](https://github.com/Amanieu/parking_lot) | `0.12.5` | `0.13.0` |
| [md5](https://github.com/stainless-steel/md5) | `0.8.0` | `0.8.1` |
| [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.6.8` | `0.7.1` |
| [hyper](https://github.com/hyperium/hyper) | `1.8.1` | `1.12.0` |
| [tokio-test](https://github.com/tokio-rs/tokio) | `0.4.5` | `0.4.6` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.26.0` | `3.27.0` |
| [proptest](https://github.com/proptest-rs/proptest) | `1.10.0` | `1.12.0` |



Updates `pyo3` from 0.28.2 to 0.30.1
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/v0.30.1/CHANGELOG.md)
- [Commits](PyO3/pyo3@v0.28.2...v0.30.1)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.149 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.154)

Updates `base64` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1)

Updates `lopdf` from 0.39.0 to 0.42.0
- [Release notes](https://github.com/J-F-Liu/lopdf/releases)
- [Changelog](https://github.com/J-F-Liu/lopdf/blob/main/CHANGELOG.md)
- [Commits](J-F-Liu/lopdf@v0.39.0...v0.42.0)

Updates `pulldown-cmark` from 0.13.1 to 0.13.5
- [Release notes](https://github.com/raphlinus/pulldown-cmark/releases)
- [Commits](pulldown-cmark/pulldown-cmark@v0.13.1...v0.13.5)

Updates `scraper` from 0.25.0 to 0.27.0
- [Release notes](https://github.com/rust-scraper/scraper/releases)
- [Commits](rust-scraper/scraper@v0.25.0...v0.27.0)

Updates `regex` from 1.12.3 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.12.3...1.13.1)

Updates `qdrant-client` from 1.17.0 to 1.18.0
- [Release notes](https://github.com/qdrant/rust-client/releases)
- [Commits](qdrant/rust-client@v1.17.0...v1.18.0)

Updates `tantivy` from 0.25.0 to 0.27.0
- [Release notes](https://github.com/quickwit-oss/tantivy/releases)
- [Changelog](https://github.com/quickwit-oss/tantivy/blob/main/CHANGELOG.md)
- [Commits](quickwit-oss/tantivy@0.25.0...0.27.0)

Updates `tokio` from 1.49.0 to 1.50.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0)

Updates `futures` from 0.3.32 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.32...0.3.34)

Updates `futures-util` from 0.3.32 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.32...0.3.34)

Updates `clap_complete` from 4.5.66 to 4.6.9
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.66...clap_complete-v4.6.9)

Updates `anyhow` from 1.0.102 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.102...1.0.104)

Updates `thiserror` from 2.0.18 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.21)

Updates `async-trait` from 0.1.89 to 0.1.92
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.89...0.1.92)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `tracing-appender` from 0.2.4 to 0.2.5
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-appender-0.2.4...tracing-appender-0.2.5)

Updates `uuid` from 1.21.0 to 1.29.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.21.0...v1.29.0)

Updates `chrono` from 0.4.44 to 0.4.45
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.44...v0.4.45)

Updates `sha2` from 0.10.9 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.1)

Updates `rusqlite` from 0.38.0 to 0.40.2
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.38.0...v0.40.2)

Updates `toml` from 1.0.3+spec-1.1.0 to 1.0.6+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.0.3...toml-v1.0.6)

Updates `rayon` from 1.11.0 to 1.12.0
- [Changelog](https://github.com/rayon-rs/rayon/blob/main/RELEASES.md)
- [Commits](rayon-rs/rayon@rayon-core-v1.11.0...rayon-core-v1.12.0)

Updates `once_cell` from 1.21.3 to 1.21.4
- [Changelog](https://github.com/matklad/once_cell/blob/master/CHANGELOG.md)
- [Commits](matklad/once_cell@v1.21.3...v1.21.4)

Updates `indicatif` from 0.18.4 to 0.18.6
- [Release notes](https://github.com/console-rs/indicatif/releases)
- [Commits](console-rs/indicatif@0.18.4...0.18.6)

Updates `console` from 0.16.2 to 0.16.6
- [Release notes](https://github.com/console-rs/console/releases)
- [Changelog](https://github.com/console-rs/console/blob/main/CHANGELOG.md)
- [Commits](console-rs/console@0.16.2...0.16.6)

Updates `dirs` from 6.0.0 to 7.0.0

Updates `ort` from 2.0.0-rc.11 to 2.0.0-rc.15
- [Release notes](https://github.com/pykeio/ort/releases)
- [Commits](pykeio/ort@v2.0.0-rc.11...v2.0.0-rc.15)

Updates `tokenizers` from 0.22.2 to 0.23.2
- [Release notes](https://github.com/huggingface/tokenizers/releases)
- [Commits](huggingface/tokenizers@v0.22.2...v0.23.2)

Updates `wasmtime` from 42.0.1 to 42.0.2
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v42.0.2/RELEASES.md)
- [Commits](bytecodealliance/wasmtime@v42.0.1...v42.0.2)

Updates `sysinfo` from 0.38.3 to 0.39.6
- [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/main/CHANGELOG.md)
- [Commits](GuillaumeGomez/sysinfo@v0.38.3...v0.39.6)

Updates `parking_lot` from 0.12.5 to 0.13.0
- [Release notes](https://github.com/Amanieu/parking_lot/releases)
- [Changelog](https://github.com/Amanieu/parking_lot/blob/master/CHANGELOG.md)
- [Commits](Amanieu/parking_lot@parking_lot-v0.12.5...parking_lot-v0.13.0)

Updates `md5` from 0.8.0 to 0.8.1
- [Commits](https://github.com/stainless-steel/md5/commits)

Updates `axum` from 0.8.8 to 0.8.9
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9)

Updates `tower-http` from 0.6.8 to 0.7.1
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.8...tower-http-0.7.1)

Updates `hyper` from 1.8.1 to 1.12.0
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.8.1...v1.12.0)

Updates `tokio-test` from 0.4.5 to 0.4.6
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-test-0.4.5...tokio-test-0.4.6)

Updates `tempfile` from 3.26.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.26.0...v3.27.0)

Updates `proptest` from 1.10.0 to 1.12.0
- [Release notes](https://github.com/proptest-rs/proptest/releases)
- [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md)
- [Commits](proptest-rs/proptest@v1.10.0...v1.12.0)

---
updated-dependencies:
- dependency-name: pyo3
  dependency-version: 0.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: lopdf
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: pulldown-cmark
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: scraper
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: regex
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: qdrant-client
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: tantivy
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: tokio
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: futures
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: futures-util
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap_complete
  dependency-version: 4.6.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: async-trait
  dependency-version: 0.1.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tracing-appender
  dependency-version: 0.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: uuid
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: chrono
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: rusqlite
  dependency-version: 0.40.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: toml
  dependency-version: 1.0.6+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: rayon
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: once_cell
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: indicatif
  dependency-version: 0.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: console
  dependency-version: 0.16.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: dirs
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: ort
  dependency-version: 2.0.0-rc.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tokenizers
  dependency-version: 0.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: wasmtime
  dependency-version: 42.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: sysinfo
  dependency-version: 0.39.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: parking_lot
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: md5
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: axum
  dependency-version: 0.8.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tower-http
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: hyper
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: tokio-test
  dependency-version: 0.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: proptest
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from Lenvanderhof as a code owner October 26, 2026 19:20
@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Lenvanderhof Lenvanderhof Awaiting requested review from Lenvanderhof Lenvanderhof is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants