chore(deps): update dependencies (non-major) #29

Merged
martin merged 1 commit from renovate/dependencies-(non-major) into main 2026-10-03 08:54:21 +00:00
Member

This PR contains the following updates:

Package Type Update Change
clap workspace.dependencies patch 4.6.6 → 4.6.7
config workspace.dependencies patch 0.15.25 → 0.15.27
open workspace.dependencies patch 5.4.3 → 5.4.4
rand (source) workspace.dependencies patch 0.10.2 → 0.10.3
reqwest workspace.dependencies patch 0.13.4 → 0.13.5

Release Notes

clap-rs/clap (clap)

v4.6.7

Compare Source

Features
  • (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands
rust-cli/config-rs (config)

v0.15.27

Compare Source

Performance
  • (toml) Reduced parsing overhead

v0.15.26

Compare Source

Compatibility
  • Bump MSRV to 1.88
Internal
  • Upgrade json5 to 1.3
Byron/open-rs (open)

v5.4.4

Compare Source

Bug Fixes
  • open Windows paths without wildcard expansion

    Opening a child of a bracket-named directory fails because Start-Process
    resolves parent directories as PowerShell wildcard patterns. The isolated
    Windows regression test reproduced WildcardPatternException for a copied
    executable under "【Tiny Asa】 [77P7V-712MB]\child" before this change.

    Use Test-Path and Invoke-Item with LiteralPath for existing items, retaining
    Start-Process for URLs and application names. These cmdlets also work under
    PowerShell Constrained Language Mode. Share the embedded script between
    Windows and WSL, keep targets in environment data, and stop on launch errors
    to report a nonzero exit status. Preserve the security boundary established
    in fd29861: cmd /c start remains opt-in through the insecure feature. No
    previously removed launcher options are restored.

    The integration test launches only a copy of its own test binary, which
    records its executable path and exits. It checks absolute and relative paths
    with invalid and valid bracket patterns, Unicode, backticks, quotes, shell
    metacharacters, and leading dashes in normal and constrained PowerShell
    sessions, plus failure for a missing executable. It requires neither Explorer
    nor registered document or URL handlers. Adjust the existing fallback
    assertion to also allow the opt-in cmd launcher after Explorer with all
    features enabled.

    Validated locally on Windows with PowerShell 5.1.26100.33438 and rustc 1.97.1:
    cargo test and cargo test --all-features each passed all 19 tests, including
    the behavioral regression. git diff --check passed, and cargo
    package --list includes the embedded script. Test-Path returned false without
    errors for representative https, mailto, and file URLs. Actual GUI folder,
    document, URL handling and WSL interop were not exercised locally.

Commit Statistics
  • 2 commits contributed to the release.
  • 8 days passed between releases.
  • 1 commit was understood as conventional.
  • 1 unique issue was worked on: #​132
Commit Details
view details
  • #​132
    • Open Windows paths without wildcard expansion (ad95c40)
  • Uncategorized
rust-random/rand (rand)

v0.10.3

Compare Source

Fixes
  • Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#​1808)
  • Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#​1821)
  • Fix possible panic due to sampling a deserialized Uniform<char> (#​1831)
Changes
  • Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#​1838)
seanmonstar/reqwest (reqwest)

v0.13.5

Compare Source

  • Add Error::is_dns() to identify errors caused by DNS resolution failures.
  • Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
  • Add TLS version to TlsInfo extension.
  • Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
  • Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [clap](https://github.com/clap-rs/clap) | workspace.dependencies | patch | `4.6.6` → `4.6.7` | | [config](https://github.com/rust-cli/config-rs) | workspace.dependencies | patch | `0.15.25` → `0.15.27` | | [open](https://github.com/Byron/open-rs) | workspace.dependencies | patch | `5.4.3` → `5.4.4` | | [rand](https://rust-random.github.io/book) ([source](https://github.com/rust-random/rand)) | workspace.dependencies | patch | `0.10.2` → `0.10.3` | | [reqwest](https://github.com/seanmonstar/reqwest) | workspace.dependencies | patch | `0.13.4` → `0.13.5` | --- ### Release Notes <details> <summary>clap-rs/clap (clap)</summary> ### [`v4.6.7`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#467---2026-09-14) [Compare Source](https://github.com/clap-rs/clap/compare/v4.6.6...v4.6.7) ##### Features - *(derive)* Add `#[command(defer = <bool>)]` attribute to opt-in to lazy initialisation of subcommands </details> <details> <summary>rust-cli/config-rs (config)</summary> ### [`v0.15.27`](https://github.com/rust-cli/config-rs/blob/HEAD/CHANGELOG.md#01527---2026-09-30) [Compare Source](https://github.com/rust-cli/config-rs/compare/v0.15.26...v0.15.27) ##### Performance - *(toml)* Reduced parsing overhead ### [`v0.15.26`](https://github.com/rust-cli/config-rs/blob/HEAD/CHANGELOG.md#01526---2026-09-21) [Compare Source](https://github.com/rust-cli/config-rs/compare/v0.15.25...v0.15.26) ##### Compatibility - Bump MSRV to 1.88 ##### Internal - Upgrade json5 to 1.3 </details> <details> <summary>Byron/open-rs (open)</summary> ### [`v5.4.4`](https://github.com/Byron/open-rs/blob/HEAD/changelog.md#544-2026-09-10) [Compare Source](https://github.com/Byron/open-rs/compare/v5.4.3...v5.4.4) ##### Bug Fixes - <csr-id-ad95c40f98144b368ec759492edecd0b8b20b672/> open Windows paths without wildcard expansion <!-- agent --> Opening a child of a bracket-named directory fails because Start-Process resolves parent directories as PowerShell wildcard patterns. The isolated Windows regression test reproduced WildcardPatternException for a copied executable under "【Tiny Asa】 \[77P7V-712MB]\child" before this change. Use Test-Path and Invoke-Item with LiteralPath for existing items, retaining Start-Process for URLs and application names. These cmdlets also work under PowerShell Constrained Language Mode. Share the embedded script between Windows and WSL, keep targets in environment data, and stop on launch errors to report a nonzero exit status. Preserve the security boundary established in [`fd29861`](https://github.com/Byron/open-rs/commit/fd29861): cmd /c start remains opt-in through the insecure feature. No previously removed launcher options are restored. The integration test launches only a copy of its own test binary, which records its executable path and exits. It checks absolute and relative paths with invalid and valid bracket patterns, Unicode, backticks, quotes, shell metacharacters, and leading dashes in normal and constrained PowerShell sessions, plus failure for a missing executable. It requires neither Explorer nor registered document or URL handlers. Adjust the existing fallback assertion to also allow the opt-in cmd launcher after Explorer with all features enabled. Validated locally on Windows with PowerShell 5.1.26100.33438 and rustc 1.97.1: cargo test and cargo test --all-features each passed all 19 tests, including the behavioral regression. git diff --check passed, and cargo package --list includes the embedded script. Test-Path returned false without errors for representative https, mailto, and file URLs. Actual GUI folder, document, URL handling and WSL interop were not exercised locally. ##### Commit Statistics <csr-read-only-do-not-edit/> - 2 commits contributed to the release. - 8 days passed between releases. - 1 commit was understood as [conventional](https://www.conventionalcommits.org). - 1 unique issue was worked on: [#&#8203;132](https://github.com/Byron/open-rs/issues/132) ##### Commit Details <csr-read-only-do-not-edit/> <details><summary>view details</summary> - **[#&#8203;132](https://github.com/Byron/open-rs/issues/132)** - Open Windows paths without wildcard expansion ([`ad95c40`](https://github.com/Byron/open-rs/commit/ad95c40f98144b368ec759492edecd0b8b20b672)) - **Uncategorized** - Merge pull request [#&#8203;133](https://github.com/Byron/open-rs/issues/133) from Byron/fix-open-on-windows ([`45317f8`](https://github.com/Byron/open-rs/commit/45317f8a4fdc43218dcc3418156e677e35662dff)) </details> </details> <details> <summary>rust-random/rand (rand)</summary> ### [`v0.10.3`](https://github.com/rust-random/rand/blob/HEAD/CHANGELOG.md#0103--2026-09-20) [Compare Source](https://github.com/rust-random/rand/compare/0.10.2...0.10.3) ##### Fixes - Fix `WeightedIndex` panic when the sum of float weights is infinite; return `Error::Overflow` instead ([#&#8203;1808]) - Fix spurious `Error::NonFinite` from `Uniform::new_inclusive` on large finite float ranges such as `0.0..=f64::MAX` ([#&#8203;1821]) - Fix possible panic due to sampling a deserialized `Uniform<char>` ([#&#8203;1831]) ##### Changes - Report exact remaining lengths from `WeightedIndex::weights()` and reduce overhead when reading weights ([#&#8203;1838]) [#&#8203;1808]: https://github.com/rust-random/rand/pull/1808 [#&#8203;1821]: https://github.com/rust-random/rand/pull/1821 [#&#8203;1831]: https://github.com/rust-random/rand/pull/1831 [#&#8203;1838]: https://github.com/rust-random/rand/pull/1838 </details> <details> <summary>seanmonstar/reqwest (reqwest)</summary> ### [`v0.13.5`](https://github.com/seanmonstar/reqwest/blob/HEAD/CHANGELOG.md#v0135) [Compare Source](https://github.com/seanmonstar/reqwest/compare/v0.13.4...v0.13.5) - Add `Error::is_dns()` to identify errors caused by DNS resolution failures. - Add `ClientBuilder::http1_max_headers(usize)` to configure the maximum number of headers accepted in an HTTP/1 response (default 100). - Add TLS version to `TlsInfo` extension. - Fix hickory-dns feature to use `Ipv6AndIpv4` strategy to prefer IPv6. - Fix sending wrong proxy-auth if multiple proxies intercept a given URL. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQ0Ljc5LjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
chore(deps): update dependencies (non-major)
All checks were successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/global-rust-verify Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
2b08b45e74
clank-bot force-pushed renovate/dependencies-(non-major) from 2b08b45e74
All checks were successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/global-rust-verify Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
to 0407f037da
All checks were successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/global-rust-verify Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
2026-09-15 00:01:18 +00:00
Compare
clank-bot force-pushed renovate/dependencies-(non-major) from 0407f037da
All checks were successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/global-rust-verify Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
to cd7011dddc
All checks were successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/global-rust-verify Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
2026-09-21 00:03:24 +00:00
Compare
clank-bot force-pushed renovate/dependencies-(non-major) from cd7011dddc
All checks were successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/global-rust-verify Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
to 7504a0f958
All checks were successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/global-rust-verify Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
2026-09-21 16:24:39 +00:00
Compare
clank-bot force-pushed renovate/dependencies-(non-major) from 7504a0f958
All checks were successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/global-rust-verify Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
to 6fc5e2cf88
All checks were successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/global-rust-verify Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
2026-09-30 05:21:50 +00:00
Compare
clank-bot force-pushed renovate/dependencies-(non-major) from 6fc5e2cf88
All checks were successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/global-rust-verify Pipeline was successful
ci/woodpecker/push/verify Pipeline was successful
to 4688789776
All checks were successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/global-rust-verify Pipeline was successful
ci/woodpecker/pr/verify-nix Pipeline was successful
2026-10-03 00:01:29 +00:00
Compare
martin merged commit 4671ce0134 into main 2026-10-03 08:54:21 +00:00
martin deleted branch renovate/dependencies-(non-major) 2026-10-03 08:54:21 +00:00
Sign in to join this conversation.
No description provided.