build(deps): bump the cargo-minor-patch group across 1 directory with 5 updates

[dependabot]

Bumps the cargo-minor-patch group with 5 updates in the / directory:

Package	From	To
rand	0.10.1	0.10.2
regex	1.12.4	1.13.0
parquet	59.0.0	59.1.0
arrow	59.0.0	59.1.0
plist	1.9.0	1.10.0

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

Updates regex from 1.12.4 to 1.13.0

Changelog

Sourced from regex's changelog.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

• #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

Commits

• 926af2e 1.13.0
• 7d941a9 regex-automata-0.4.15
• e358341 api: add regex! macro for lazy compilation
• c420333 automata: disable miri on a couple doc tests
• b9d2cf7 github: add FUNDING link
• 0858006 docs: add AI policy for contributors
• 468fc64 automata: reject dense DFA start states that are match states
• See full diff in compare view

Updates parquet from 59.0.0 to 59.1.0

Release notes

Sourced from parquet's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from parquet's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

• doc: More comments to concat_batches #10178 (2010YOUY01)
• Minor: improve PageStore docs with a temp-file spilling example #10074 [parquet] (alamb)

Performance improvements:

• perf: interleave_list for List<Primitive> could be optimized? #10022 [arrow]
• perf(arrow-ord): Avoid full index materialization for small-limit lexsorts #9990 [arrow]
• Replace conversion of binary->string in arrow-row from arraydata to direct construction #10261 [arrow] (Jefffrey)
• [arrow-flight encode path]re-use flatbufferbuilder #10220 [arrow] (Rich-T-kid)
• [10125] arrow-flight decode path optimizations (add skip_validation to arrow-flight) #10206 [arrow] [arrow-flight] (Rich-T-kid)
• Improve performance of concat_elements ByteViewArray concatenation #10161 [arrow] (pepijnve)
• [arrow-flight] Optimize flight, remove some allocations, add dictionary focused benchmarks #10126 [arrow] [arrow-flight] (Rich-T-kid)
• optimize(concat): concat map implementation #10048 [arrow] (mapleFU)
• Reduce copies in Arrow IPC writer #10044 [arrow] (Rich-T-kid)
• perf(interleave): Optimize list interleave_list when child is primitive #10025 [arrow] (mapleFU)

Closed issues:

• Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
• ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits

• b1de629 Prepare for 59.1.0 release (#10274)
• c36e926 feat: Add support for MapArray in arrow_row (#9486)
• d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
• ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
• d969025 fix main: parquet test compilation failure (#10266)
• c7dc6b8 Add validated row decode benchmark (#10259)
• 7307740 fix: write error for dbg output of out of range timestamps (#10130)
• af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
• 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
• 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
• Additional commits viewable in compare view

Updates arrow from 59.0.0 to 59.1.0

Release notes

Sourced from arrow's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from arrow's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

• doc: More comments to concat_batches #10178 (2010YOUY01)
• Minor: improve PageStore docs with a temp-file spilling example #10074 [parquet] (alamb)

Performance improvements:

• perf: interleave_list for List<Primitive> could be optimized? #10022 [arrow]
• perf(arrow-ord): Avoid full index materialization for small-limit lexsorts #9990 [arrow]
• Replace conversion of binary->string in arrow-row from arraydata to direct construction #10261 [arrow] (Jefffrey)
• [arrow-flight encode path]re-use flatbufferbuilder #10220 [arrow] (Rich-T-kid)
• [10125] arrow-flight decode path optimizations (add skip_validation to arrow-flight) #10206 [arrow] [arrow-flight] (Rich-T-kid)
• Improve performance of concat_elements ByteViewArray concatenation #10161 [arrow] (pepijnve)
• [arrow-flight] Optimize flight, remove some allocations, add dictionary focused benchmarks #10126 [arrow] [arrow-flight] (Rich-T-kid)
• optimize(concat): concat map implementation #10048 [arrow] (mapleFU)
• Reduce copies in Arrow IPC writer #10044 [arrow] (Rich-T-kid)
• perf(interleave): Optimize list interleave_list when child is primitive #10025 [arrow] (mapleFU)

Closed issues:

• Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
• ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits

• b1de629 Prepare for 59.1.0 release (#10274)
• c36e926 feat: Add support for MapArray in arrow_row (#9486)
• d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
• ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
• d969025 fix main: parquet test compilation failure (#10266)
• c7dc6b8 Add validated row decode benchmark (#10259)
• 7307740 fix: write error for dbg output of out of range timestamps (#10130)
• af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
• 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
• 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
• Additional commits viewable in compare view

Updates plist from 1.9.0 to 1.10.0

Changelog

Sourced from plist's changelog.

[1.10.0] - 2026-07-04

Changed

• Add plist! (#184) and plist_dict! (#189) macros.
• Update quick-xml to v0.41.0 to fix RUSTSEC-2026-0194 (#190).

Fixed

• Read binary plists with 24-bit references (#188).

Commits

• 2881e17 Release v1.10.0
• 18134d6 Add plist_dict! macro
• 0a2f9e7 Bump quick-xml to 0.41
• 13efd3e Allow 3-byte reference size
• 58a19eb Bump checkout action version
• bdf779a Store the MSRV in one place
• a4db573 Set default permissions for all CI jobs
• bc27c26 Add plist! macro
• cf7b028 Ensure Cargo.lock is up to date in CI
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.