Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 28, 2025

Bumps the rust-dependencies group with 6 updates in the / directory:

Package From To
serde_json 1.0.145 1.0.148
tempfile 3.23.0 3.24.0
cc 1.2.50 1.2.51
itoa 1.0.15 1.0.17
proc-macro2 1.0.103 1.0.104
ryu 1.0.21 1.0.22

Updates serde_json from 1.0.145 to 1.0.148

Release notes

Sourced from serde_json's releases.

v1.0.148

  • Update zmij dependency to 1.0

v1.0.147

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Commits

Updates tempfile from 3.23.0 to 3.24.0

Changelog

Sourced from tempfile's changelog.

3.24.0

  • Actually support WASIp2 without the nightly feature. This library is now feature complete on WASIp2 without any additional feature flags.
  • Exclude CI scripts from the published crate.
Commits

Updates cc from 1.2.50 to 1.2.51

Release notes

Sourced from cc's releases.

cc-v1.2.51

Other

  • Regenerate target info (#1642)
  • Update Readmes (#1641)
Changelog

Sourced from cc's changelog.

1.2.51 - 2025-12-26

Other

  • Regenerate target info (#1642)
  • Update Readmes (#1641)
Commits

Updates find-msvc-tools from 0.1.5 to 0.1.6

Release notes

Sourced from find-msvc-tools's releases.

find-msvc-tools-v0.1.6

Other

Commits

Updates itoa from 1.0.15 to 1.0.17

Release notes

Sourced from itoa's releases.

1.0.16

  • Synchronize algorithm improvements from libcore (#65)
Commits
  • 21d6109 Release 1.0.17
  • 55c15a1 Use performance chart from itoa-benchmark
  • cf33343 Update ryu links to zmij
  • 2dff249 Set repr(C) on DECIMAL_PAIRS
  • 4c18677 Release 1.0.16
  • 2e6134d Exclude benchmark dependencies from being compiled by miri
  • 2c7311b Merge pull request #65 from dtolnay/up
  • bb76a9c Update libcore implementation links
  • 83539d1 Ignore cast_lossless pedantic clippy lint
  • 4394758 Update benchmark chart
  • Additional commits viewable in compare view

Updates proc-macro2 from 1.0.103 to 1.0.104

Release notes

Sourced from proc-macro2's releases.

1.0.104

Commits
  • 4321369 Release 1.0.104
  • 9561144 Merge pull request #527 from dtolnay/extend
  • 57fed01 Update actions/upload-artifact@v5 -> v6
  • 1096f1a Update actions/upload-artifact@v4 -> v5
  • 4275e26 Update to 2021 edition
  • bccca27 Delete rustversion attributes older than required compiler version
  • 8f4c801 Update actions/checkout@v5 -> v6
  • 1baff31 Add new TokenStream Extend impls
  • 6f45ba0 Rename TokenTree collections to "tokens"
  • 2942447 Merge pull request #526 from dtolnay/up
  • Additional commits viewable in compare view

Updates rustix from 1.1.2 to 1.1.3

Commits

Updates ryu from 1.0.21 to 1.0.22

Release notes

Sourced from ryu's releases.

1.0.22

  • Documentation improvements
Commits
  • 234334c Release 1.0.22
  • 51b8e83 Exclude dtoa-benchmark.png from published crate
  • df6352e Use performance chart from dtoa-benchmark
  • b3037a6 Add static assertion on static table size
  • 0ab19d1 Delete f32 from fuzz target
  • dbc9322 Remove clippy suppression that is no longer triggered
  • afdaf39 Add miri architecture matrix
  • 6461eaa Support platform without 64-bit atomic
  • 9b909ce Resolve cast_lossless pedantic clippy lint in test
  • 9b09b79 Switch to fixed size counters
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.148` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.23.0` | `3.24.0` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.2.50` | `1.2.51` |
| [itoa](https://github.com/dtolnay/itoa) | `1.0.15` | `1.0.17` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.103` | `1.0.104` |
| [ryu](https://github.com/dtolnay/ryu) | `1.0.21` | `1.0.22` |



Updates `serde_json` from 1.0.145 to 1.0.148
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.148)

Updates `tempfile` from 3.23.0 to 3.24.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.23.0...v3.24.0)

Updates `cc` from 1.2.50 to 1.2.51
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.50...cc-v1.2.51)

Updates `find-msvc-tools` from 0.1.5 to 0.1.6
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@find-msvc-tools-v0.1.5...find-msvc-tools-v0.1.6)

Updates `itoa` from 1.0.15 to 1.0.17
- [Release notes](https://github.com/dtolnay/itoa/releases)
- [Commits](dtolnay/itoa@1.0.15...1.0.17)

Updates `proc-macro2` from 1.0.103 to 1.0.104
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.103...1.0.104)

Updates `rustix` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v1.1.2...v1.1.3)

Updates `ryu` from 1.0.21 to 1.0.22
- [Release notes](https://github.com/dtolnay/ryu/releases)
- [Commits](dtolnay/ryu@1.0.21...1.0.22)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.148
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: tempfile
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: cc
  dependency-version: 1.2.51
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: find-msvc-tools
  dependency-version: 0.1.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: itoa
  dependency-version: 1.0.17
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: proc-macro2
  dependency-version: 1.0.104
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: rustix
  dependency-version: 1.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: ryu
  dependency-version: 1.0.22
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Dec 28, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 4, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 4, 2026
@dependabot dependabot bot deleted the dependabot/cargo/rust-dependencies-874f757afa branch January 4, 2026 18:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants