Skip to content

chore(deps): bump the cargo group with 6 updates - #211

Merged
rvagg merged 1 commit into
mainfrom
dependabot/cargo/cargo-b4cf9827ce
Oct 1, 2026
Merged

rvagg merged 1 commit into
mainfrom
dependabot/cargo/cargo-b4cf9827ce

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 6 updates:

Package From To
clap 4.6.6 4.6.7
dirs 6.0.0 7.0.0
bip39 2.2.2 3.0.0
blake2 0.10.6 0.11.0
rand 0.10.2 0.10.3
flate2 1.1.9 1.1.10

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
Commits
  • d3e59a9 chore: Release
  • d997f87 docs: Update changelog
  • fb6058c Merge pull request #6409 from heaths/pwsh-support
  • 2310870 test(complete): Add tests for completer_for_path
  • 5967c17 refactor(complete): Move shell detection to Shells
  • 594602b fix(complete): Detect pwsh for PowerShell
  • 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
  • 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
  • c968b13 chore(deps): Update Rust crate shlex to v2
  • 8f247cb chore(deps): Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates dirs from 6.0.0 to 7.0.0

Updates bip39 from 2.2.2 to 3.0.0

Changelog

Sourced from bip39's changelog.

v3.0.0 - Sep. 17, 2026

  • Add WordCount for mnemonic generation (#98)
  • Use the operating system RNG for mnemonic generation and require rand v0.7 or newer (#105)
  • Add complete multilingual prefix lookup and deprecate the incomplete slice-based API (#104)
  • Preserve ambiguous mnemonic languages through entropy recovery and serde round trips (#108)
Commits
  • 4f182f0 Merge pull request #110 from tnull/2026-09-release-3.0.0
  • bb32cc6 Bump version to v3.0.0
  • 440c2d2 Merge pull request #109 from tnull/2026-08-release-2.3.0
  • 6af6278 Merge pull request #108 from tnull/2026-08-fix-chinese-mnemonic-roundtrips
  • 4b75324 Prepare v2.3.0 minor release
  • de2bcb2 Preserve mnemonic language through serde
  • 5c87fc1 Prevent ambiguous mnemonic entropy panics
  • 1a63bd4 Merge pull request #104 from tnull/2026-08-add-complete-prefix-lookup
  • 514584d Merge pull request #98 from coreyphillips/feat/wordcount-enum
  • eb76e31 Add WordCount for mnemonic generation
  • Additional commits viewable in compare view

Updates blake2 from 0.10.6 to 0.11.0

Commits

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

  • Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
  • Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
  • Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

  • Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits
  • 9e7d328 Prepare rand 0.10.3 (#1840)
  • f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
  • ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
  • c994eb1 docs: fix angle unit in quick start example (#1839)
  • 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
  • 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
  • bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
  • 521fab6 Stop pinning dependencies (#1820)
  • 3f7c433 Stop pinning dependencies
  • cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
  • Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits
  • ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
  • fb5228d Merge pull request #559 from bushrat011899/no_std
  • 6ed3ba3 Add executable no_std example
  • faed8a0 Expand CI to test no_std compatibility and correctness
  • 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
  • 3fe1126 Centralize usage of std for error and io
  • 98e313a Add GzHeader::mtime_as_duration
  • 0642965 Switch to core implicit prelude and only use std where required
  • 454a63c Remove left-over dbg! statement
  • 2a490b7 Add runtime_detection feature
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` |
| dirs | `6.0.0` | `7.0.0` |
| [bip39](https://github.com/rust-bitcoin/rust-bip39) | `2.2.2` | `3.0.0` |
| [blake2](https://github.com/RustCrypto/hashes) | `0.10.6` | `0.11.0` |
| [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` |


Updates `clap` from 4.6.6 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7)

Updates `dirs` from 6.0.0 to 7.0.0

Updates `bip39` from 2.2.2 to 3.0.0
- [Changelog](https://github.com/rust-bitcoin/rust-bip39/blob/master/CHANGELOG.md)
- [Commits](rust-bitcoin/rust-bip39@v2.2.2...v3.0.0)

Updates `blake2` from 0.10.6 to 0.11.0
- [Commits](RustCrypto/hashes@blake2-v0.10.6...blake2-v0.11.0)

Updates `rand` from 0.10.2 to 0.10.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.2...0.10.3)

Updates `flate2` from 1.1.9 to 1.1.10
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.9...1.1.10)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: dirs
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: bip39
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: blake2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rand
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: flate2
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 1, 2026
@dependabot
dependabot Bot requested review from beck-8 and rvagg as code owners October 1, 2026 00:46
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 1, 2026
@FilOzzy FilOzzy added this to FOC Oct 1, 2026
@rvagg
rvagg merged commit 432f5f3 into main Oct 1, 2026
4 checks passed
@rvagg
rvagg deleted the dependabot/cargo/cargo-b4cf9827ce branch October 1, 2026 02:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

Status: 🎉 Done

Development

Successfully merging this pull request may close these issues.

2 participants