Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the all-dependencies group with 6 updates in the / directory:

Package From To
clap 4.5.51 4.5.53
reqwest 0.12.24 0.12.28
hyper 1.7.0 1.8.1
ratatui 0.29.0 0.30.0
hyper-util 0.1.17 0.1.19
serde_json 1.0.145 1.0.148

Updates clap from 4.5.51 to 4.5.53

Release notes

Sourced from clap's releases.

v4.5.53

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

v4.5.52

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup
Changelog

Sourced from clap's changelog.

[4.5.53] - 2025-11-19

Features

  • Add default_values_if, default_values_ifs

[4.5.52] - 2025-11-17

Fixes

  • Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup
Commits
  • 3716f9f chore: Release
  • 613b69a docs: Update changelog
  • d117f7a Merge pull request #6028 from epage/arg
  • cb8255d feat(builder): Allow quoted id's for arg macro
  • 1036060 Merge pull request #6025 from AldaronLau/typos-in-faq
  • 2fcafc0 docs: Fix minor grammar issues in FAQ
  • a380b65 Merge pull request #6023 from epage/template
  • 4d7ab14 chore: Update from _rust/main template
  • b8a7ea4 chore(deps): Update Rust Stable to v1.87 (#18)
  • f9842b3 chore: Avoid MSRV problems out of the box
  • Additional commits viewable in compare view

Updates reqwest from 0.12.24 to 0.12.28

Release notes

Sourced from reqwest's releases.

v0.12.28

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.27...v0.12.28

v0.12.27

tl;dr

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Pipe.

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.26...v0.12.27

v0.12.26

tl;dr

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.25...v0.12.26

v0.12.25

Highlights

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

What's Changed

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.12.28

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.
Commits

Updates hyper from 1.7.0 to 1.8.1

Release notes

Sourced from hyper's releases.

v1.8.1

Bug Fixes

  • http1: fix consuming extra CPU from previous change (#3977) (4492f31e)

Full Changelog: hyperium/hyper@v1.8.0...v1.8.1

v1.8.0

Highlights

Features

  • rt: add Timer::now() method to allow overriding the instant returned (#3965) (5509ebe6)

Bug Fixes

Breaking Changes

While technically breaking, it's assumed you will not need to do anything or be affected.

  • The HTTP/2 client connection no longer allows an executor that can not spawn itself.

    This was an oversight originally. The client connection will now include spawning a future that keeps a copy of the executor to spawn other futures. Thus, if it is !Send, it needs to spawn !Send futures. The likelihood of executors that match the previously allowed behavior should be very remote.

    There is also technically a semver break in here, which is that the Http2ClientConnExec trait no longer dyn-compatible, because it now expects to be Clone. This should not break usage of the conn builder, because it already separately had E: Clone bounds. If someone were using dyn Http2ClientConnExec, that will break. However, there is no purpose for doing so, and it is not usable otherwise, since the trait only exists to propagate bounds into hyper. Thus, the breakage should not affect anyone. (58e0e7dc)

What's Changed

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.8.1 (2025-11-13)

Bug Fixes

  • http1: fix consuming extra CPU from previous change (#3977) (4492f31e)

v1.8.0 (2025-11-11)

Bug Fixes

Features

  • rt: add Timer::now() method to allow overriding the instant returned (#3965) (5509ebe6)

Breaking Changes

  • The HTTP/2 client connection no longer allows an executor that can not spawn itself.

    This was an oversight originally. The client connection will now include spawning a future that keeps a copy of the executor to spawn other futures. Thus, if it is !Send, it needs to spawn !Send futures. The likelihood of executors that match the previously allowed behavior should be very remote.

    There is also technically a semver break in here, which is that the Http2ClientConnExec trait no longer dyn-compatible, because it now expects to be Clone. This should not break usage of the conn builder, because it already separately had E: Clone bounds. If someone were using dyn Http2ClientConnExec, that will break. However, there is no purpose for doing so, and it is not usable otherwise, since the trait only exists to propagate bounds into hyper. Thus, the breakage should not affect anyone. (58e0e7dc)

Commits
  • 166c6ca v1.8.1
  • 4492f31 fix(http1): fix consuming extra CPU from previous change (#3977)
  • dbe6f25 v1.8.0
  • 58e0e7d fix(http2): fix internals of HTTP/2 CONNECT upgrades (#3967)
  • 0a37a8c test(ready_stream): replace tracing with printlns (#3973)
  • 2377b89 fix(http1): fix rare missed write wakeup on connections (#3952)
  • 5509ebe feat(rt): add Timer::now() method to allow overriding the instant returned ...
  • f9f8f44 tests(client): port tests to in-memory socket (#3947)
  • 5803a9c docs(server): update default values for http1::Builder (#3938)
  • e1e1f2b refactor(ffi): specify "C" ABI explicitly in ffi_fn! macro (#3937)
  • Additional commits viewable in compare view

Updates ratatui from 0.29.0 to 0.30.0

Release notes

Sourced from ratatui's releases.

ratatui-v0.30.0

"Rats don't just survive; they discover; they create. ... I mean, just look at what they do with the terminal!" – Remy & Orhun

We are excited to announce the biggest release of ratatui so far - a Rust library that's all about cooking up TUIs 👨‍🍳🐀

🌠 Added "no_std" support for embedded targets, modularized architecture, major widget & layout upgrades!

Release highlights: https://ratatui.rs/highlights/v030/

⚠️ List of breaking changes can be found here.

Features

  • 90a77aa (direction) Add Direction::perpendicular(self) by @​b-guild in #2197

  • 56d5e05 (bar) Update label and text_value to accept Into<> by @​Emivvvvv in #1471 [breaking]

    BREAKING CHANGE:label and text_value now accept Into<> types, which breaks type inference.

    - Bar::default().label("foo".into());
    + Bar::default().label("foo");
    - Bar::default().text_value("bar".into());
    + Bar::default().text_value("bar");
  • b76ad3b (bar) Impl Styled for Bar by @​Emivvvvv in #1476

    Related:ratatui/ratatui#683

  • e15fefa (barchar) Add BarChart::grouped constructor by @​joshka in #1513

    Add a new constructor to the BarChart widget that allows creating a grouped barchart with multiple groups of bars.

    Also add a new constructor to the BarGroup widget that allows creating a group of bars with a label.

  • 369b18e (barchart) Reduce barchart creation verbosity by @​Emivvvvv in #1453

    Adds constructor methods for BarChart, BarGroup, and Bar

  • 1dc18bf (calendar) Add width and height functions by @​joshka in #2198

    Fixes ratatui/ratatui#2016

... (truncated)

Changelog

Sourced from ratatui's changelog.

v0.30.0 - 2025-12-26

"Rats don't just survive; they discover; they create. ... I mean, just look at what they do with the terminal!" – Remy & Orhun

We are excited to announce the biggest release of ratatui so far - a Rust library that's all about cooking up TUIs 👨‍🍳🐀

🌠 Added "no_std" support for embedded targets, modularized architecture, major widget & layout upgrades!

Release highlights: https://ratatui.rs/highlights/v030/

⚠️ List of breaking changes can be found here.

Features

  • 90a77aa (direction) Add Direction::perpendicular(self) by @​b-guild in #2197

  • 56d5e05 (bar) Update label and text_value to accept Into<> by @​Emivvvvv in #1471 [breaking]

    BREAKING CHANGE:label and text_value now accept Into<> types, which breaks type inference.

    - Bar::default().label("foo".into());
    + Bar::default().label("foo");
    - Bar::default().text_value("bar".into());
    + Bar::default().text_value("bar");
  • b76ad3b (bar) Impl Styled for Bar by @​Emivvvvv in #1476

    Related:ratatui/ratatui#683

  • e15fefa (barchar) Add BarChart::grouped constructor by @​joshka in #1513

    Add a new constructor to the BarChart widget that allows creating a grouped barchart with multiple groups of bars.

    Also add a new constructor to the BarGroup widget that allows creating a group of bars with a label.

  • 369b18e (barchart) Reduce barchart creation verbosity by @​Emivvvvv in #1453

    Adds constructor methods for BarChart, BarGroup, and Bar

  • 1dc18bf (calendar) Add width and height functions by @​joshka in #2198

... (truncated)

Commits
  • 0a2a7c0 chore(ratatui): unleash the rats v0.30.0 (#2294)
  • 8c620d6 docs(widgets): add link to no-std concept page (#2288)
  • 686d955 chore: re-release 0.30.0-beta.1 (#2292)
  • 04e86bb chore: revert the 0.30-beta.1 update to re-trigger release-plz (#2291)
  • 06a30cc chore(widgets): disable scrape-examples and revert ratatui dev dep (#2290)
  • 3936b10 chore: release 0.30.0-beta.1 (#2287)
  • 1f7efe9 build(deps): bump dtolnay/rust-toolchain from 0b1efabc08b657293548b77fb76cc02...
  • fbd560a build(deps): bump taiki-e/install-action from 2.63.3 to 2.65.1 (#2282)
  • 4495754 build(deps): bump serde_json from 1.0.145 to 1.0.146 (#2284)
  • a8d8afe build(deps): bump tracing from 0.1.43 to 0.1.44 (#2283)
  • Additional commits viewable in compare view

Updates hyper-util from 0.1.17 to 0.1.19

Release notes

Sourced from hyper-util's releases.

v0.1.19

See the related blog post.

Highlights

  • Add client::pool module for composable pools. Enable with the client-pool feature.
  • Add pool::singleton for sharing a single cloneable connection.
  • Add pool::cache for caching a list of connections.
  • Add pool::negotiate for combining two pools with upgrade and fallback negotiation.
  • Add pool::map for customizable mapping of keys and connections.

What's Changed

Full Changelog: hyperium/hyper-util@v0.1.18...v0.1.19

v0.1.18

Highlights

  • Fix rt::TokioTimer to support Tokio's paused time.
  • Fix client::proxy::match::Matcher to parse auth without passwords.

What's Changed

New Contributors

Thanks

Full Changelog: hyperium/hyper-util@v0.1.17...v0.1.18

Changelog

Sourced from hyper-util's changelog.

0.1.19 (2025-12-03)

  • Add client::pool module for composable pools. Enable with the client-pool feature.
  • Add pool::singleton for sharing a single cloneable connection.
  • Add pool::cache for caching a list of connections.
  • Add pool::negotiate for combining two pools with upgrade and fallback negotiation.
  • Add pool::map for customizable mapping of keys and connections.

0.1.18 (2025-11-13)

  • Fix rt::TokioTimer to support Tokio's paused time.
  • Fix client::proxy::match::Matcher to parse auth without passwords.
Commits
  • d574011 v0.1.19
  • 818748f docs(pool): add module level docs for pools (#248)
  • 765bc98 feat(pool): add a Map pool service type (#247)
  • 567db01 feat(pool): add a Negotiate pooling service (#228)
  • c4cf24d feat(pool): add a Cache pooling service (#227)
  • 9b1008d feat(pool): add a Singleton pool type (#226)
  • 71ef2fc docs: fix spelling mistakes. improve RFC non-compliant behaviour with user/au...
  • eed21e7 chore(ci): check docs links with full features (#245)
  • 203c956 v0.1.18
  • d91ea8e fix(rt): support fake time in legacy client and TokioTimer (#238)
  • Additional commits viewable in compare view

Updates serde_json from 1.0.145 to 1.0.148

Release notes

Sourced from serde_json's releases.

v1.0.148

  • Update zmij dependency to 1.0

v1.0.147

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…6 updates

Bumps the all-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.51` | `4.5.53` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.24` | `0.12.28` |
| [hyper](https://github.com/hyperium/hyper) | `1.7.0` | `1.8.1` |
| [ratatui](https://github.com/ratatui/ratatui) | `0.29.0` | `0.30.0` |
| [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.17` | `0.1.19` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.148` |



Updates `clap` from 4.5.51 to 4.5.53
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.51...clap_complete-v4.5.53)

Updates `reqwest` from 0.12.24 to 0.12.28
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.24...v0.12.28)

Updates `hyper` from 1.7.0 to 1.8.1
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.7.0...v1.8.1)

Updates `ratatui` from 0.29.0 to 0.30.0
- [Release notes](https://github.com/ratatui/ratatui/releases)
- [Changelog](https://github.com/ratatui/ratatui/blob/main/CHANGELOG.md)
- [Commits](ratatui/ratatui@v0.29.0...ratatui-v0.30.0)

Updates `hyper-util` from 0.1.17 to 0.1.19
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper-util@v0.1.17...v0.1.19)

Updates `serde_json` from 1.0.145 to 1.0.148
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.148)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.5.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: reqwest
  dependency-version: 0.12.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: hyper
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: ratatui
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: hyper-util
  dependency-version: 0.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: serde_json
  dependency-version: 1.0.148
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jan 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant