Skip to content

deps(deps): bump the serde-ecosystem group with 4 updates#10

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/serde-ecosystem-c76a2b0e40
Open

deps(deps): bump the serde-ecosystem group with 4 updates#10
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/serde-ecosystem-c76a2b0e40

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 4, 2026

Bumps the serde-ecosystem group with 4 updates: serde_json, serde_with, serde_with_macros and toml_parser.

Updates serde_json from 1.0.148 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

  • Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)
Commits

Updates serde_with from 3.16.1 to 3.17.0

Release notes

Sourced from serde_with's releases.

serde_with v3.17.0

Added

  • Support OneOrMany with smallvec v1 (#920, #922)

Changed

  • Switch to yaml_serde for a maintained yaml dependency by @​kazan417 (#921)
  • Bump MSRV to 1.82, since that is required for yaml_serde dev-dependency.
Commits
  • 4031878 Bump version to v3.17.0 (#924)
  • 204ae56 Bump version to v3.17.0
  • 7812b5a serde_yaml 0.9 to yaml_serde 0.10 (#921)
  • 614bd89 Bump MSRV to 1.82 as required by yaml_serde
  • 518d0ed Suppress RUSTSEC-2026-0009 since we don't have untrusted time input in tests ...
  • a6579a8 Suppress RUSTSEC-2026-0009 since we don't have untrusted time input in tests
  • 9d4d069 Implement OneOrMany for smallvec_1::SmallVec (#922)
  • fc78243 Add changelog
  • 2b8c30b Implement OneOrMany for smallvec_1::SmallVec
  • 2d9b9a1 Carg.lock update
  • Additional commits viewable in compare view

Updates serde_with_macros from 3.16.1 to 3.17.0

Release notes

Sourced from serde_with_macros's releases.

serde_with v3.17.0

Added

  • Support OneOrMany with smallvec v1 (#920, #922)

Changed

  • Switch to yaml_serde for a maintained yaml dependency by @​kazan417 (#921)
  • Bump MSRV to 1.82, since that is required for yaml_serde dev-dependency.
Commits
  • 4031878 Bump version to v3.17.0 (#924)
  • 204ae56 Bump version to v3.17.0
  • 7812b5a serde_yaml 0.9 to yaml_serde 0.10 (#921)
  • 614bd89 Bump MSRV to 1.82 as required by yaml_serde
  • 518d0ed Suppress RUSTSEC-2026-0009 since we don't have untrusted time input in tests ...
  • a6579a8 Suppress RUSTSEC-2026-0009 since we don't have untrusted time input in tests
  • 9d4d069 Implement OneOrMany for smallvec_1::SmallVec (#922)
  • fc78243 Add changelog
  • 2b8c30b Implement OneOrMany for smallvec_1::SmallVec
  • 2d9b9a1 Carg.lock update
  • Additional commits viewable in compare view

Updates toml_parser from 1.0.6+spec-1.1.0 to 1.0.9+spec-1.1.0

Commits
  • 500b269 chore: Release
  • daeba3e docs: Update changelog
  • 0f40c40 fix(parser): Report errors for -_1 (#1104)
  • 447b05c fix(parser): Report errors for -_1
  • 5a7b742 fix(parser): Improve error location for digit sep after prefix
  • 5c978e5 refactor(parser): Improve consistency in error calcs
  • 8a3c0b0 fix(parser): Be consistent about digit sep error
  • 3e63bc4 test(parser): Check different digit separator cases
  • 767747f chore: Release
  • c68aa87 fix(parser): Plug another whole in synthetic events (#1102)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 4, 2026

Assignees

The following users could not be added as assignees: rnpm/maintainers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps the serde-ecosystem group with 4 updates: [serde_json](https://github.com/serde-rs/json), [serde_with](https://github.com/jonasbb/serde_with), [serde_with_macros](https://github.com/jonasbb/serde_with) and [toml_parser](https://github.com/toml-rs/toml).


Updates `serde_json` from 1.0.148 to 1.0.149
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.148...v1.0.149)

Updates `serde_with` from 3.16.1 to 3.17.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.16.1...v3.17.0)

Updates `serde_with_macros` from 3.16.1 to 3.17.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.16.1...v3.17.0)

Updates `toml_parser` from 1.0.6+spec-1.1.0 to 1.0.9+spec-1.1.0
- [Commits](toml-rs/toml@toml_parser-v1.0.6...toml_parser-v1.0.9)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.149
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: serde-ecosystem
- dependency-name: serde_with
  dependency-version: 3.17.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: serde-ecosystem
- dependency-name: serde_with_macros
  dependency-version: 3.17.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: serde-ecosystem
- dependency-name: toml_parser
  dependency-version: 1.0.9+spec-1.1.0
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: serde-ecosystem
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/serde-ecosystem-c76a2b0e40 branch from 4509579 to 185d2c8 Compare March 9, 2026 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants