build(deps): bump the all group across 1 directory with 5 updates

[dependabot]

Bumps the all group with 5 updates in the / directory:

Package	From	To
clap	4.6.0	4.6.1
crossterm	0.28.1	0.29.0
quick-xml	0.39.2	0.40.1
ratatui	0.29.0	0.30.0
tui-tree-widget	0.23.1	0.24.0

Updates clap from 4.6.0 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

• (derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

• (derive) Ensure rebuilds happen when an read env variable is changed

Commits

• 1420275 chore: Release
• d2c817d docs: Update changelog
• f88c94e Merge pull request #6341 from epage/sep
• acbb822 fix(complete): Reduce risk of conflict with actual subcommands
• a49fadb refactor(complete): Pull out subcommand separator
• ddc008b Merge pull request #6332 from epage/update
• 497dc50 chore: Update compatible dependencies
• dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
• 54bdaa3 chore(deps): Update j178/prek-action action to v2
• f0d30d9 chore: Release
• Additional commits viewable in compare view

Updates crossterm from 0.28.1 to 0.29.0

Release notes

Sourced from crossterm's releases.

0.29

Version 0.29

Added ⭐

• Copy to clipboard using OSC52 (#974)
• Derive standard traits for "SetCursorStyle" (#909)
• Add query_keyboard_enhancement_flags to read enabled flags (#958)
• Add is_* and as_* methods to the event enums (#949)
• Add a feature flag for derive_more impls (#970)
• Update rustix to 1.0 (#982)
• Upgrade various dependencies

Breaking ⚠️

• Correctly fix KeyModifiers Display impl Properly adding + in between modifiers (#979)

@​joshka @​linrongbin16 @​kmicklas @​maciek50322 @​rosew0od @​sxyazi @​the-mikedavis @​hthuz @​aschey @​naseschwarz @​Flokkq @​gaesa @​WindSoilder

Changelog

Sourced from crossterm's changelog.

Unreleased

Version 0.29

Added ⭐

• Copy to clipboard using OSC52 (#974)
• Derive standard traits for "SetCursorStyle" (#909)
• Add query_keyboard_enhancement_flags to read enabled flags (#958)
• Add is_* and as_* methods to the event enums (#949)
• Add a feature flag for derive_more impls (#970)
• Update rustix to 1.0 (#982)

Breaking ⚠️

• Correctly fix KeyModifiers Display impl Properly adding + in between modifiers (#979)

Commits

• See full diff in compare view

Updates quick-xml from 0.39.2 to 0.40.1

Release notes

Sourced from quick-xml's releases.

v0.40.1 - Fix rarely possible serde deserialization panic

What's Changed

• #964: Fix unreachable!() panic in the serde deserializer when a DOCTYPE declaration appears between two text runs inside an element (e.g. <a>x<!DOCTYPE y>z</a>). The DOCTYPE used to break drain_text's consecutive-text merge, so two DeEvent::Text events reached read_text and tripped its "Cannot be two consequent Text events" invariant. DOCTYPE is now treated as transparent during text drain — it still goes through the entity resolver, but the surrounding text is merged into one run. Discovered via libFuzzer on a real-world SAML deserializer harness.

#964: tafia/quick-xml#964

New Contributors

• @​williamareynolds made their first contribution in tafia/quick-xml#964

Full Changelog: tafia/quick-xml@v0.40.0...v0.40.1

v0.40.0 - UTF-16 and ISO-2022-JP encodings supported

What's Changed

MSRV bumped to 1.79.

Now quick-xml supports the UTF-16 and ISO-2022-JP encoded documents. See the new DecodingReader type.

New Features

• #956: Add DecodingReader, a BufRead adapter that auto-detects encoding from BOM or XML declaration and transcodes to UTF-8. Enabled by the encoding feature.

• #938: Add new enumeration XmlVersion and typified getter BytesDecl::xml_version().

• #938: Add new error variant IllFormedError::UnknownVersion.

• #371: Add new error variant EscapeError::TooManyNestedEntities.

• #371: Improved compliance with the XML attribute value normalization process by adding

  • Attribute::normalized_value()
  • Attribute::normalized_value_with()
  • Attribute::decoded_and_normalized_value()
  • Attribute::decoded_and_normalized_value_with()

  which ought to be used in place of deprecated

  • Attribute::unescape_value()
  • Attribute::unescape_value_with()
  • Attribute::decode_and_unescape_value()
  • Attribute::decode_and_unescape_value_with()

  Deprecated functions now behaves the same as newly added.

Bug Fixes

• #938: Use correct rules for EOL normalization in Deserializer when parse XML 1.0 documents. Previously XML 1.1. rules was applied.

Misc Changes

• #914: Remove deprecated .prefixes(), .resolve(), .resolve_attribute(), and .resolve_element() of NsReader. Use .resolver().<...> methods instead.
• #938: Now BytesText::xml_content, BytesCData::xml_content and BytesRef::xml_content accepts XmlVersion parameter to apply correct EOL normalization rules.
• #944: read_text() now returns BytesText which allows you to get the content with properly normalized EOLs. To get the previous behavior use .read_text().decode()?.
• #956: Bumped MSRV from 1.59 (Feb 2022) to 1.79 (June 2024)

... (truncated)

Changelog

Sourced from quick-xml's changelog.

0.40.1 -- 2026-05-15

Bug Fixes

• #964: Fix unreachable!() panic in the serde deserializer when a DOCTYPE declaration appears between two text runs inside an element (e.g. <a>x<!DOCTYPE y>z</a>). The DOCTYPE used to break drain_text's consecutive-text merge, so two DeEvent::Text events reached read_text and tripped its "Cannot be two consequent Text events" invariant. DOCTYPE is now treated as transparent during text drain — it still goes through the entity resolver, but the surrounding text is merged into one run. Discovered via libFuzzer on a real-world SAML deserializer harness.

#964: tafia/quick-xml#964

Misc Changes

0.40.0 -- 2026-05-11

MSRV bumped to 1.79.

Now quick-xml supports the UTF-16 encoded documents. See the new DecodingReader type.

New Features

• #956: Add DecodingReader, a BufRead adapter that auto-detects encoding from BOM or XML declaration and transcodes to UTF-8. Enabled by the encoding feature.

• #938: Add new enumeration XmlVersion and typified getter BytesDecl::xml_version().

• #938: Add new error variant IllFormedError::UnknownVersion.

• #371: Add new error variant EscapeError::TooManyNestedEntities.

• #371: Improved compliance with the XML attribute value normalization process by adding

  • Attribute::normalized_value()
  • Attribute::normalized_value_with()
  • Attribute::decoded_and_normalized_value()
  • Attribute::decoded_and_normalized_value_with()

  which ought to be used in place of deprecated

  • Attribute::unescape_value()
  • Attribute::unescape_value_with()
  • Attribute::decode_and_unescape_value()
  • Attribute::decode_and_unescape_value_with()

  Deprecated functions now behaves the same as newly added.

Bug Fixes

• #938: Use correct rules for EOL normalization in Deserializer when parse XML 1.0 documents. Previously XML 1.1. rules was applied.

... (truncated)

Commits

• 9aaea92 Release 0.40.1
• ce488bc Merge pull request #964 from williamareynolds/fix/de-doctype-in-text-unreachable
• e00ae5c Fix unreachable!() panic when DOCTYPE appears between text runs in element co...
• 2778564 Release 0.40.0
• 393db03 Merge pull request #962 from Mingun/prepare-0.40
• a27709a Fix misprint in code example
• 0c0c914 Make some functions const and enable clippy::missing_const_for_fn lint
• bf4ffe5 Fix clippy warning: use .first() instead of .get(0)
• d69baad Fix clippy warning: remove unnecessary after 241f01e20ff679e9248f2ae424c9ba82...
• 8e0ae4f Fix clippy warning: use strip_prefix instead of manual stripping
• Additional commits viewable in compare view

Updates ratatui from 0.29.0 to 0.30.0

Release notes

Sourced from ratatui's releases.

ratatui-v0.30.0

"Rats don't just survive; they discover; they create. ... I mean, just look at what they do with the terminal!" – Remy & Orhun

We are excited to announce the biggest release of ratatui so far - a Rust library that's all about cooking up TUIs 👨‍🍳🐀

🌠 Added "no_std" support for embedded targets, modularized architecture, major widget & layout upgrades!

✨ Release highlights: https://ratatui.rs/highlights/v030/

⚠️ List of breaking changes can be found here.

Features

• 90a77aa (direction) Add Direction::perpendicular(self) by @​b-guild in #2197

• 56d5e05 (bar) Update label and text_value to accept Into<> by @​Emivvvvv in #1471 [breaking]

  BREAKING CHANGE:label and text_value now accept Into<> types, which breaks type inference.

  - Bar::default().label("foo".into());
  + Bar::default().label("foo");

  - Bar::default().text_value("bar".into());
  + Bar::default().text_value("bar");

• b76ad3b (bar) Impl Styled for Bar by @​Emivvvvv in #1476

  Related:ratatui/ratatui#683

• e15fefa (barchar) Add BarChart::grouped constructor by @​joshka in #1513

  Add a new constructor to the BarChart widget that allows creating a grouped barchart with multiple groups of bars.

  Also add a new constructor to the BarGroup widget that allows creating a group of bars with a label.

• 369b18e (barchart) Reduce barchart creation verbosity by @​Emivvvvv in #1453

  Adds constructor methods for BarChart, BarGroup, and Bar

• 1dc18bf (calendar) Add width and height functions by @​joshka in #2198

  Fixes ratatui/ratatui#2016

... (truncated)

Changelog

Sourced from ratatui's changelog.

v0.30.0 - 2025-12-26

"Rats don't just survive; they discover; they create. ... I mean, just look at what they do with the terminal!" – Remy & Orhun

We are excited to announce the biggest release of ratatui so far - a Rust library that's all about cooking up TUIs 👨‍🍳🐀

🌠 Added "no_std" support for embedded targets, modularized architecture, major widget & layout upgrades!

✨ Release highlights: https://ratatui.rs/highlights/v030/

⚠️ List of breaking changes can be found here.

Features

• 90a77aa (direction) Add Direction::perpendicular(self) by @b-guild in #2197

• 56d5e05 (bar) Update label and text_value to accept Into<> by @Emivvvvv in #1471 [breaking]

  BREAKING CHANGE:label and text_value now accept Into<> types, which breaks type inference.

  - Bar::default().label("foo".into());
  + Bar::default().label("foo");

  - Bar::default().text_value("bar".into());
  + Bar::default().text_value("bar");

• b76ad3b (bar) Impl Styled for Bar by @Emivvvvv in #1476

  Related:ratatui/ratatui#683

• e15fefa (barchar) Add BarChart::grouped constructor by @joshka in #1513

  Add a new constructor to the BarChart widget that allows creating a grouped barchart with multiple groups of bars.

  Also add a new constructor to the BarGroup widget that allows creating a group of bars with a label.

• 369b18e (barchart) Reduce barchart creation verbosity by @Emivvvvv in #1453

  Adds constructor methods for BarChart, BarGroup, and Bar

• 1dc18bf (calendar) Add width and height functions by @joshka in #2198

... (truncated)

Commits

• 0a2a7c0 chore(ratatui): unleash the rats v0.30.0 (#2294)
• 8c620d6 docs(widgets): add link to no-std concept page (#2288)
• 686d955 chore: re-release 0.30.0-beta.1 (#2292)
• 04e86bb chore: revert the 0.30-beta.1 update to re-trigger release-plz (#2291)
• 06a30cc chore(widgets): disable scrape-examples and revert ratatui dev dep (#2290)
• 3936b10 chore: release 0.30.0-beta.1 (#2287)
• 1f7efe9 build(deps): bump dtolnay/rust-toolchain from 0b1efabc08b657293548b77fb76cc02...
• fbd560a build(deps): bump taiki-e/install-action from 2.63.3 to 2.65.1 (#2282)
• 4495754 build(deps): bump serde_json from 1.0.145 to 1.0.146 (#2284)
• a8d8afe build(deps): bump tracing from 0.1.43 to 0.1.44 (#2283)
• Additional commits viewable in compare view

Updates tui-tree-widget from 0.23.1 to 0.24.0

Release notes

Sourced from tui-tree-widget's releases.

v0.24.0

• feat: update to ratatui-core v0.1 / ratatui-widgets v0.3 (#59) e422b5fbdd6aa4aca19fa22ade39cf9d33b6a0b8

Commits

• 081432c build: v0.24.0
• 13d67c5 build(bench): update criterion to v0.8
• e422b5f feat: update to ratatui-core v0.1 / ratatui-widgets v0.3 (#59)
• d46dd70 ci: update actions
• 79660eb ci(rust): there are no features
• d994269 build(cargo): update edition to 2024
• 121c5af build(cargo): bump pprof from 0.14.0 to 0.15.0 (#52)
• See full diff in compare view

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.