Skip to content

build(deps): bump the cargo-minor-patch group across 1 directory with 7 updates#135

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-cd10c72e73
Open

build(deps): bump the cargo-minor-patch group across 1 directory with 7 updates#135
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-cd10c72e73

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-patch group with 7 updates in the / directory:

Package From To
rand 0.10.1 0.10.2
toml 1.1.2+spec-1.1.0 1.1.3+spec-1.1.0
regex 1.12.4 1.13.1
clap 4.6.1 4.6.2
parquet 59.0.0 59.1.0
arrow 59.0.0 59.1.0
plist 1.9.0 1.10.0

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

Updates toml from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0

Commits

Updates regex from 1.12.4 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

  • #1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

  • #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.
Commits
  • 2b52759 1.13.1, redux
  • 40e9823 1.13.1
  • 75fcb96 changelog: 1.13.1
  • 64ad0b6 automata: fix bug in reverse suffix/inner optimization
  • fa91c31 automata: fix a bug caught by Codex review
  • 30390ec automata: formatting tweaks
  • 821a8eb automata: refactor reverse suffix/inner search slightly
  • 10afd70 automata: expose the extracted literals for inner literal extraction
  • 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
  • 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
  • Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.2

Release notes

Sourced from clap's releases.

v4.6.2

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Changelog

Sourced from clap's changelog.

[4.6.2] - 2026-07-15

Fixes

  • (help) Say alias when there is only one
Commits
  • 0fe0be3 chore: Release
  • 480af9d docs: Update changelog
  • 2b3ddd0 Merge pull request #6340 from liskin/fix-completion-escape
  • 7ffe739 fix(complete): Do not suggest options after "--"
  • d47fc4f test(complete): Options suggested after escape (--)
  • See full diff in compare view

Updates parquet from 59.0.0 to 59.1.0

Release notes

Sourced from parquet's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from parquet's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

Performance improvements:

Closed issues:

  • Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
  • ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits
  • b1de629 Prepare for 59.1.0 release (#10274)
  • c36e926 feat: Add support for MapArray in arrow_row (#9486)
  • d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
  • ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
  • d969025 fix main: parquet test compilation failure (#10266)
  • c7dc6b8 Add validated row decode benchmark (#10259)
  • 7307740 fix: write error for dbg output of out of range timestamps (#10130)
  • af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
  • 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
  • 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
  • Additional commits viewable in compare view

Updates arrow from 59.0.0 to 59.1.0

Release notes

Sourced from arrow's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from arrow's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

Performance improvements:

Closed issues:

  • Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
  • ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits
  • b1de629 Prepare for 59.1.0 release (#10274)
  • c36e926 feat: Add support for MapArray in arrow_row (#9486)
  • d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
  • ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
  • d969025 fix main: parquet test compilation failure (#10266)
  • c7dc6b8 Add validated row decode benchmark (#10259)
  • 7307740 fix: write error for dbg output of out of range timestamps (#10130)
  • af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
  • 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
  • 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
  • Additional commits viewable in compare view

Updates plist from 1.9.0 to 1.10.0

Changelog

Sourced from plist's changelog.

[1.10.0] - 2026-07-04

Changed

  • Add plist! (#184) and plist_dict! (#189) macros.
  • Update quick-xml to v0.41.0 to fix RUSTSEC-2026-0194 (#190).

Fixed

  • Read binary plists with 24-bit references (#188).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the cargo-minor-patch group across 1 directory with…
97a0cf3 
… 7 updates

Bumps the cargo-minor-patch group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rand](https://github.com/rust-random/rand) | `0.10.1` | `0.10.2` |
| [toml](https://github.com/toml-rs/toml) | `1.1.2+spec-1.1.0` | `1.1.3+spec-1.1.0` |
| [regex](https://github.com/rust-lang/regex) | `1.12.4` | `1.13.1` |
| [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.2` |
| [parquet](https://github.com/apache/arrow-rs) | `59.0.0` | `59.1.0` |
| [arrow](https://github.com/apache/arrow-rs) | `59.0.0` | `59.1.0` |
| [plist](https://github.com/ebarnard/rust-plist) | `1.9.0` | `1.10.0` |



Updates `rand` from 0.10.1 to 0.10.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.1...0.10.2)

Updates `toml` from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.2...toml-v1.1.3)

Updates `regex` from 1.12.4 to 1.13.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.12.4...1.13.1)

Updates `clap` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.1...clap_complete-v4.6.2)

Updates `parquet` from 59.0.0 to 59.1.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@59.0.0...59.1.0)

Updates `arrow` from 59.0.0 to 59.1.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@59.0.0...59.1.0)

Updates `plist` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/ebarnard/rust-plist/releases)
- [Changelog](https://github.com/ebarnard/rust-plist/blob/master/CHANGELOG.md)
- [Commits](ebarnard/rust-plist@v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: toml
  dependency-version: 1.1.3+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: regex
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: clap
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: parquet
  dependency-version: 59.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: arrow
  dependency-version: 59.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: plist
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants