Bump the external-deps group across 1 directory with 4 updates

[dependabot]

Bumps the external-deps group with 4 updates in the / directory: config, anyhow, rand and tree-sitter.

Updates config from 0.15.24 to 0.15.25

Changelog

Sourced from config's changelog.

[0.15.25] - 2026-06-26

Fixes

• (ron) Support u64, and not just i64

Commits

• 8fc857f chore: Release config version 0.15.25
• cbf8542 docs: Update changelog
• ac0ee7b fix(ron): map u64 values to ValueKind::U64 instead of lossy I64 cast (#761)
• 55d4418 fix(ron): map u64 values to ValueKind::U64 instead of lossy I64 cast
• See full diff in compare view

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

Updates tree-sitter from 0.26.9 to 0.26.10

Release notes

Sourced from tree-sitter's releases.

v0.26.10

What's Changed

• fix(lib): update doc comment for ts_parser_parse by @​WillLillis in tree-sitter/tree-sitter#5642
• fix(lib): use correct TREE_SITTER_HIDE_SYMBOLS macro name in alloc.h by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5643
• fix(cli): improve soundness of cst range calculation by @​WillLillis in tree-sitter/tree-sitter#5650
• fix(lib): Consider subtree lookahead bytes when determining whether the parser can reuse a node. by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5656
• fix(cli): display warning to user if parser test corpus dir isn't found by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5669
• fix: add DESCRIPTION to grammar Makefile template by @​WillLillis in tree-sitter/tree-sitter#5672
• fix(cli): infinite loop in highlight test by @​WillLillis in tree-sitter/tree-sitter#5674
• fix(lib): address strict aliasing violations in TreeCursor type by @​WillLillis in tree-sitter/tree-sitter#5693
• build(deps): bump wasmtime-c-api to v36.0.12 by @​clason in tree-sitter/tree-sitter#5709
• fix(dsl): forbid invalid field names by @​WillLillis in tree-sitter/tree-sitter#5710
• Fix issues with queries matching a parent node with anchored children (siblings) by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5712
• test(query): regression test for anchored siblings inside a parent by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5716
• release v0.26.10 by @​WillLillis in tree-sitter/tree-sitter#5717

Full Changelog: tree-sitter/tree-sitter@v0.26.9...v0.26.10

Commits

• 3fc4cd2 release v0.26.10
• 568aee0 test(query): regression test for anchored siblings inside a parent
• 2efce10 fix(query): skip passthrough steps when checking for fallible step splitting
• e8b9639 fix(query): avoid overriding states not seeking immediate match with states s...
• 576564d fix(query): take anchors between siblings into account for fallible step spli...
• fbf3049 fix(dsl): forbid invalid field names
• 99bc36b build(deps): bump wasmtime-c-api to v36.0.12
• 1ef1048 fix(build): use std helper rather than passing -std=c11 flag
• a61be4a fix(lib): address strict aliasing violations in TreeCursor type
• be8f380 fix(cli): highlight test did not properly check for spans on later rows
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: alpha, 📦 dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.