build(deps): bump the rust-dependencies group across 1 directory with 9 updates by dependabot[bot] · Pull Request #20 · NeoHsu/mnemark

dependabot · 2026-10-19T19:15:50Z

Bumps the rust-dependencies group with 9 updates in the / directory:

Package	From	To
clap	`4.6.4`	`4.6.7`
lindera	`4.0.1`	`6.2.0`
rusqlite	`0.40.1`	`0.40.2`
serde_json	`1.0.151`	`1.0.154`
tantivy	`0.26.1`	`0.26.2`
toml	`1.1.4+spec-1.1.0`	`1.1.8+spec-1.1.0`
uuid	`1.24.0`	`1.28.0`
proptest	`1.11.0`	`1.12.0`
flate2	`1.1.9`	`1.1.10`

Updates clap from 4.6.4 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

(help) Correctly mark which value_names are optional with num_args

Commits

d3e59a9 chore: Release
d997f87 docs: Update changelog
fb6058c Merge pull request #6409 from heaths/pwsh-support
2310870 test(complete): Add tests for completer_for_path
5967c17 refactor(complete): Move shell detection to Shells
594602b fix(complete): Detect pwsh for PowerShell
3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
c968b13 chore(deps): Update Rust crate shlex to v2
8f247cb chore(deps): Update actions/checkout action to v7
Additional commits viewable in compare view

Updates lindera from 4.0.1 to 6.2.0

Release notes

Sourced from lindera's releases.

Release v6.2.0

Highlights

Tokenizer constructors take a space-penalty setting.

Every binding's Tokenizer constructor now accepts the same values as TokenizerBuilder's space-penalty setter: null for the dictionary's default, false for off, true to require the dictionary's rules, or explicit rules.

A tokenizer built from an already loaded Dictionary can now turn ko-dic's left-space penalty off without loading the dictionary again. In Python, for example: Tokenizer(load_dictionary("/path/to/lindera-ko-dic"), space_penalty=False), where the path is the extracted lindera-ko-dic-6.2.0.zip release asset.

Omitting the argument keeps the previous behavior. (#1065)

Binding Constructor

Python Tokenizer(dictionary, mode="normal", user_dictionary=None, space_penalty=None)

Node.js new Tokenizer(dictionary, mode?, userDictionary?, spacePenalty?)

WASM new Tokenizer(dictionary, mode?, user_dictionary?, space_penalty?)

Ruby Lindera::Tokenizer.new(dictionary, mode = nil, user_dictionary = nil, space_penalty: nil)

PHP new Lindera\Tokenizer(Dictionary $dictionary, ?string $mode = null, ?UserDictionary $user_dictionary = null, mixed $space_penalty = null)

In Ruby, mode and user_dictionary are now optional, and three-argument calls keep working. space_penalty is a keyword argument; passed as a fourth positional argument, it raises ArgumentError.

No more crashes on cyclic or deeply nested arguments.

setSpacePenalty, appendCharacterFilter, appendTokenFilter and the new constructor argument now reject a value nested more than 128 levels deep, or one that contains itself, with an ordinary error in every binding.

Before, such a value (a cyclic one, or one nested a few thousand levels deep) had these effects: (#1064)

Binding Before

Node.js aborted the process

Python segfaulted

PHP segfaulted on deeply nested arrays

Ruby raised SystemStackError, or occasionally hung

WASM left the module unusable until reloaded

The unbounded recursion in napi-rs's serde_json::Value conversion is reported upstream as napi-rs/napi-rs#3548.

PHP: named arguments can skip optional parameters. Every optional parameter of the extension now defaults to null, so calls such as new Lindera\Penalty(other_penalty_length_threshold: 5) or $tokenizer->tokenizeNbest('東京都', 2, cost_threshold: 5000) work. (#1065, #1073)

Behavior changes

The space-penalty and filter arguments above may nest at most 128 levels. A deeper or self-containing value now raises the binding's usual error:

Binding Error

Python ValueError

Ruby ArgumentError

PHP ValueError

Node.js Error with code: 'InvalidArg'

WASM an error string

Configuration objects are normally a few levels deep. (#1064)

Fixes

Build scripts of dictionaries without a context_id_freq.txt (IPADIC, IPADIC-NEologd, CC-CEDICT, Jieba, SudachiDict) no longer rerun on every build. An incremental build that embeds one of them no longer rebuilds the dictionary and recompiles the crates that depend on it. (#1071)

... (truncated)

Commits

0482efc fix(wasm): keep the Tokenizer constructor's trailing arguments optional in Ty...
c25048d chore: bump version to 6.2.0 (#1075)
ad62459 fix(php): register null defaults for every optional parameter (#1073)
1c5522e ci: run the affected jobs when a shared build input changes (#1072)
eaafcb1 fix(dictionary): stop rerunning dictionary build scripts on every build (#1071)
4c89533 chore(nodejs): run the dictionary-backed tests with embedded IPADIC and ko-di...
58e1688 feat(bindings): accept a space-penalty setting in the Tokenizer constructor (...
eca6313 fix(bindings): reject cyclic or deeply nested arguments instead of crashing (...
8dd9002 fix(docs): restore the v6.0.0 reference in the WASM space-penalty note (#1061)
d6c3c0b chore: bump version to 6.1.0 (#1060)
Additional commits viewable in compare view

Updates rusqlite from 0.40.1 to 0.40.2

Release notes

Sourced from rusqlite's releases.

0.40.2

What's Changed

Lower MSRV to 1.88.0

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.40.2

Commits

e88f112 Prepare release
d11c76e Update main.yml
c922ca5 Lower MSRV to 1.88.0
See full diff in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates tantivy from 0.26.1 to 0.26.2

Changelog

Sourced from tantivy's changelog.

Tantivy 0.26.2

Bugfixes

Fix term aggregation document-count overflow when merging buckets across segments by widening intermediate counts from u32 to u64 (@PSeitz)

Fix missing local buffer flushes in nested aggregations that caused incorrect metric results for low-cardinality terms buckets #2992(@PSeitz)

Disable the buffered union seek_danger override to avoid consuming unaligned scorers #3086(@PSeitz)

Commits

72d1ef9 fix term aggregation u32::MAX overflow issue
be7cd01 chore: Release 0.26.2
b9f2417 fix cache flush in aggregations
c191044 fix: disable buffered union seek_danger override
See full diff in compare view

Updates toml from 1.1.4+spec-1.1.0 to 1.1.8+spec-1.1.0

Commits

ceac6e4 chore: Release
0fe9e93 docs: Update changelog
e3a64aa fix(display): Ensure all keys are encoded (#1245)
76484d0 fix(display): Ensure all keys are encoded
711b1ba refactor(display): Clarify that we are working with encoded keys
4f73ebd test(display): Reproduce the key bug
6c6a5cd fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
9c5e95d fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
4d45944 perf(parser): Remove no-op code (#1243)
189c91c perf(parser): Remove no-op code
Additional commits viewable in compare view

Updates uuid from 1.24.0 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

Add optional serde format adapters by @RanaPriyansh in uuid-rs/uuid#916

Prepare for 1.28.0 release by @KodrAus in uuid-rs/uuid#918

New Contributors

@RanaPriyansh made their first contribution in uuid-rs/uuid#916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

Accept case-insensitive urn:uuid: prefixes when parsing by @jaideeppyne in uuid-rs/uuid#912

Fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos by @KodrAus in uuid-rs/uuid#915

Prepare for 1.27.0 release by @KodrAus in uuid-rs/uuid#917

New Contributors

@jaideeppyne made their first contribution in uuid-rs/uuid#912

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

v1.26.1

What's Changed

Seat the v7 counter below the version nibble by @lenamonj in uuid-rs/uuid#907

Don't panic in overflowing Timestamp to SystemTime conversion by @KodrAus in uuid-rs/uuid#909

Prepare for 1.26.1 release by @KodrAus in uuid-rs/uuid#910

New Contributors

@lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

v1.26.0

What's Changed

Add ContextV7::with_additional_precision_bits by @ChrisJr404 in uuid-rs/uuid#904

Prepare for 1.26.0 release by @KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

Add a serde::bytes module that encodes a Uuid as a byte string by @ChrisJr404 in uuid-rs/uuid#902

Prepare for 1.25.0 release by @KodrAus in uuid-rs/uuid#903

New Contributors

@ChrisJr404 made their first contribution in uuid-rs/uuid#902

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

... (truncated)

Commits

276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
4b3b9f5 prepare for 1.28.0 release
cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
784a022 Inline expected tokens in optional compact serde test
a5678c3 Simplify optional serde adapter tests to option tokens
638a518 Refactor optional serde adapter tests and share byte wrapper
b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
ffd8ec5 prepare for 1.27.0 release
654fa5b Add optional serde format adapters
4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
Additional commits viewable in compare view

Updates proptest from 1.11.0 to 1.12.0

Commits

70cf37d Merge pull request #675 from proptest-rs/prep-1.12
729e0ff prepare next releases and fix panic handling
28c1fad Merge pull request #664 from Expyron/main
5ddd9a4 Merge pull request #668 from toddATavail/fix-fork-persisted-failure
a6a9ac7 Merge pull request #673 from glaziermag/fix-book-deploy
d57d88b Replace rand_chacha with chacha20
9411213 Deploy the book on pushes to main
1719745 fix: terminate the fork replay when a persisted failure fails
0f55b7a test: a persisted failure in a forked test must be reported
4b0594e Merge pull request #669 from proptest-rs/no-fail-fast
Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

feat: reuse zlib's decoder buffer by @Vaiz in rust-lang/flate2-rs#532

feat: add reset method for read::GzDecoder and buffered::GzDecoder by @Vaiz in rust-lang/flate2-rs#534

Drop cloudflare-zlib by @kornelski in rust-lang/flate2-rs#539

Add a wrapper for the Crc struct by @MikkelPaulson in rust-lang/flate2-rs#540

Bump miniz_oxide to 0.9 by @oscargus in rust-lang/flate2-rs#543

Upgrade miniz_oxide and add unit tests of the different flush kinds by @fintelia in rust-lang/flate2-rs#498

Fix infinite loop in writing gzip header/footer by @Shnatsel in rust-lang/flate2-rs#547

test: generate corrupt gzip fixture at runtime by @nanookclaw in rust-lang/flate2-rs#550

Reject oversized gzip extra fields by @Byron in rust-lang/flate2-rs#553

Reject incomplete deflate streams at EOF by @Guflly in rust-lang/flate2-rs#556

Include README.md in a private module by @bushrat011899 in rust-lang/flate2-rs#562

Add no_std support using nightly alloc_io by @bushrat011899 in rust-lang/flate2-rs#559

Update get_mut() documentation to make clear how 'inner` can be used by @Byron in rust-lang/flate2-rs#558

New Contributors

@Vaiz made their first contribution in rust-lang/flate2-rs#532

@MikkelPaulson made their first contribution in rust-lang/flate2-rs#540

@oscargus made their first contribution in rust-lang/flate2-rs#543

@nanookclaw made their first contribution in rust-lang/flate2-rs#550

@Guflly made their first contribution in rust-lang/flate2-rs#556

@bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
fb5228d Merge pull request #559 from bushrat011899/no_std
6ed3ba3 Add executable no_std example
faed8a0 Expand CI to test no_std compatibility and correctness
2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
3fe1126 Centralize usage of std for error and io
98e313a Add GzHeader::mtime_as_duration
0642965 Switch to core implicit prelude and only use std where required
454a63c Remove left-over dbg! statement
2a490b7 Add runtime_detection feature
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 9 updates Bumps the rust-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.6.4` | `4.6.7` | | [lindera](https://github.com/lindera/lindera) | `4.0.1` | `6.2.0` | | [rusqlite](https://github.com/rusqlite/rusqlite) | `0.40.1` | `0.40.2` | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [tantivy](https://github.com/quickwit-oss/tantivy) | `0.26.1` | `0.26.2` | | [toml](https://github.com/toml-rs/toml) | `1.1.4+spec-1.1.0` | `1.1.8+spec-1.1.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.28.0` | | [proptest](https://github.com/proptest-rs/proptest) | `1.11.0` | `1.12.0` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` | Updates `clap` from 4.6.4 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.4...clap_complete-v4.6.7) Updates `lindera` from 4.0.1 to 6.2.0 - [Release notes](https://github.com/lindera/lindera/releases) - [Commits](lindera/lindera@v4.0.1...v6.2.0) Updates `rusqlite` from 0.40.1 to 0.40.2 - [Release notes](https://github.com/rusqlite/rusqlite/releases) - [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md) - [Commits](rusqlite/rusqlite@v0.40.1...v0.40.2) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `tantivy` from 0.26.1 to 0.26.2 - [Release notes](https://github.com/quickwit-oss/tantivy/releases) - [Changelog](https://github.com/quickwit-oss/tantivy/blob/main/CHANGELOG.md) - [Commits](quickwit-oss/tantivy@0.26.1...0.26.2) Updates `toml` from 1.1.4+spec-1.1.0 to 1.1.8+spec-1.1.0 - [Commits](toml-rs/toml@toml-v1.1.4...toml-v1.1.8) Updates `uuid` from 1.24.0 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.24.0...v1.28.0) Updates `proptest` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md) - [Commits](proptest-rs/proptest@v1.11.0...v1.12.0) Updates `flate2` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.9...1.1.10) --- updated-dependencies: - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: lindera dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: rusqlite dependency-version: 0.40.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tantivy dependency-version: 0.26.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: toml dependency-version: 1.1.8+spec-1.1.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: proptest dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: flate2 dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 19, 2026

Navigation Menu

Repository navigation

build(deps): bump the rust-dependencies group across 1 directory with 9 updates - #20

build(deps): bump the rust-dependencies group across 1 directory with 9 updates#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-57d8570ccd

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Binding	Constructor
Python	`Tokenizer(dictionary, mode="normal", user_dictionary=None, space_penalty=None)`
Node.js	`new Tokenizer(dictionary, mode?, userDictionary?, spacePenalty?)`
WASM	`new Tokenizer(dictionary, mode?, user_dictionary?, space_penalty?)`
Ruby	`Lindera::Tokenizer.new(dictionary, mode = nil, user_dictionary = nil, space_penalty: nil)`
PHP	`new Lindera\Tokenizer(Dictionary $dictionary, ?string $mode = null, ?UserDictionary $user_dictionary = null, mixed $space_penalty = null)`

Binding	Before
Node.js	aborted the process
Python	segfaulted
PHP	segfaulted on deeply nested arrays
Ruby	raised `SystemStackError`, or occasionally hung
WASM	left the module unusable until reloaded

Binding	Error
Python	`ValueError`
Ruby	`ArgumentError`
PHP	`ValueError`
Node.js	`Error` with `code: 'InvalidArg'`
WASM	an error string

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.6.7

[4.6.7] - 2026-09-14

Features

v4.6.6

[4.6.6] - 2026-08-06

Features

v4.6.5

[4.6.5] - 2026-07-31

Fixes

[4.6.7] - 2026-09-14

Features

[4.6.6] - 2026-08-06

Features

[4.6.5] - 2026-07-31

Fixes

Release v6.2.0

Highlights

Behavior changes

Fixes

0.40.2

What's Changed

v1.0.154

v1.0.153

v1.0.152

Tantivy 0.26.2

Bugfixes

v1.28.0

What's Changed

New Contributors

v1.27.0

What's Changed

New Contributors

v1.26.1

What's Changed

New Contributors

v1.26.0

What's Changed

1.25.0

What's Changed

New Contributors

1.1.10

What's Changed

New Contributors

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading