Skip to content

build(deps): bump the cargo group across 1 directory with 5 updates#252

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/cargo-7c6c8321c6
Closed

build(deps): bump the cargo group across 1 directory with 5 updates#252
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/cargo-7c6c8321c6

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 25, 2026 •
edited
Loading

Bumps the cargo group with 5 updates in the / directory:

Package From To
chrono 0.4.42 0.4.43
colored 3.0.0 3.1.1
quick-xml 0.38.4 0.39.0
napi 3.8.1 3.8.2
napi-derive 3.5.0 3.5.1

Updates chrono from 0.4.42 to 0.4.43

Release notes

Sourced from chrono's releases.

0.4.43

What's Changed

Commits
  • 45caaa9 Update copyright year to 2026 in LICENSE.txt
  • 1c0b8f0 Bump version to 0.4.43
  • a03e43b Upgrade windows-bindgen to 0.66
  • 4fedaba Ignore bincode advisory
  • f4b7bbd Bump actions/checkout from 5 to 6
  • db12973 Added doctest for the NaiveDate years_since function (#1755)
  • 34b5f49 chore: minor improvement for docs
  • 8c82711 Bump actions/setup-node from 5 to 6
  • ea1f11b Drop deny lints, eager Debug impls are a mixed blessing
  • 35f9f2d Add feature gated defmt support.
  • Additional commits viewable in compare view

Updates colored from 3.0.0 to 3.1.1

Changelog

Sourced from colored's changelog.

Unreleased

  • Added methods ansi_color and on_ansi_color to Colorize.
Commits

Updates quick-xml from 0.38.4 to 0.39.0

Release notes

Sourced from quick-xml's releases.

v0.39.0 - Config for Writer

What's Changed

Added a way to configure Writer. Now all configuration is contained in the writer::Config struct and can be applied at once. When serde-types feature is enabled, configuration is serializable.

New Features

  • #846: Add methods config() and config_mut() to inspect and change the writer configuration.
  • #846: Add ability to write space before /> in self-closed tags for maximum compatibility with XHTML.
  • #846: Add method empty_element_handling() as a more powerful alternative to expand_empty_elements() in Serializer.
  • #929: Allow to pass list of field names to impl_deserialize_for_internally_tagged_enum! macro which is required if you enum variants contains $value fields.

Bug Fixes

  • #923: Implement correct skipping of well-formed DTD.

Misc Changes

  • #908: Increase minimal supported serde version from 1.0.139 to 1.0.180.
  • #913: Deprecate .prefixes(), .resolve(), .resolve_attribute(), and .resolve_element() of NsReader. Use .resolver().bindings() and .resolver().resolve() methods instead.
  • #913: Attributes::has_nil now accepts NamespaceResolver instead of Reader<R>.
  • #924: (breaking change) Split SyntaxError::UnclosedPIOrXmlDecl into UnclosedPI and UnclosedXmlDecl for more precise error reporting.
  • #924: (breaking change) Parser::eof_error now takes &self and content &[u8] parameters.
  • #926: (breaking change) Split SyntaxError::UnclosedTag into UnclosedTag, UnclosedSingleQuotedAttributeValue and UnclosedDoubleQuotedAttributeValue for more precise error reporting.

#846: tafia/quick-xml#846 #908: tafia/quick-xml#908 #913: tafia/quick-xml#913 #923: tafia/quick-xml#923 #924: tafia/quick-xml#924 #926: tafia/quick-xml#926 #929: tafia/quick-xml#929

New Contributors

Full Changelog: tafia/quick-xml@v0.38.4...v0.39.0

Changelog

Sourced from quick-xml's changelog.

0.39.0 -- 2026-01-11

Added a way to configure Writer. Now all configuration is contained in the writer::Config struct and can be applied at once. When serde-types feature is enabled, configuration is serializable.

New Features

  • #846: Add methods config() and config_mut() to inspect and change the writer configuration.
  • #846: Add ability to write space before /> in self-closed tags for maximum compatibility with XHTML.
  • #846: Add method empty_element_handling() as a more powerful alternative to expand_empty_elements() in Serializer.
  • #929: Allow to pass list of field names to impl_deserialize_for_internally_tagged_enum! macro which is required if you enum variants contains $value fields.

Bug Fixes

  • #923: Implement correct skipping of well-formed DTD.

Misc Changes

  • #908: Increase minimal supported serde version from 1.0.139 to 1.0.180.
  • #913: Deprecate .prefixes(), .resolve(), .resolve_attribute(), and .resolve_element() of NsReader. Use .resolver().bindings() and .resolver().resolve() methods instead.
  • #913: Attributes::has_nil now accepts NamespaceResolver instead of Reader<R>.
  • #924: (breaking change) Split SyntaxError::UnclosedPIOrXmlDecl into UnclosedPI and UnclosedXmlDecl for more precise error reporting.
  • #924: (breaking change) Parser::eof_error now takes &self and content &[u8] parameters.
  • #926: (breaking change) Split SyntaxError::UnclosedTag into UnclosedTag, UnclosedSingleQuotedAttributeValue and UnclosedDoubleQuotedAttributeValue for more precise error reporting.

#846: tafia/quick-xml#846 #908: tafia/quick-xml#908 #913: tafia/quick-xml#913 #923: tafia/quick-xml#923 #924: tafia/quick-xml#924 #926: tafia/quick-xml#926 #929: tafia/quick-xml#929

Commits
  • 6242da0 Release 0.39.0
  • 549bb09 Disable tests for documents that are not supported by rxml
  • 2c19dfd Run cargo fmt in compare project
  • 5fc5a16 Fix misprint in benchmark name
  • ba6b9c5 Update xml5ever & markup5even: 0.36 -> 0.37
  • 70208da Fix not updated internal documentation link after #922
  • 0bfface Fix misprint in error message
  • 9f6babb Merge pull request #932 from Mingun/unclosed-attr-error
  • 229d84c Split SyntaxError::UnclosedTag into UnclosedTag, `UnclosedSingleQuotedAtt...
  • f869d0e Merge pull request #931 from Mingun/benches
  • Additional commits viewable in compare view

Updates napi from 3.8.1 to 3.8.2

Release notes

Sourced from napi's releases.

napi-v3.8.2

Fixed

  • (napi) memory leak in async fn (#3089)
  • (napi) implement TypeName for ArrayBuffer (#3087)
Commits

Updates napi-derive from 3.5.0 to 3.5.1

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.5.1

Other

  • updated the following local packages: napi-derive-backend
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 25, 2026
@codecov
Copy link

codecov bot commented Jan 25, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.04%. Comparing base (3c2dde9) to head (90b1028).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #252   +/-   ##
=======================================
  Coverage   97.04%   97.04%           
=======================================
  Files          14       14           
  Lines        3078     3078           
=======================================
  Hits         2987     2987           
  Misses         91       91

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot
build(deps): bump the cargo group across 1 directory with 5 updates
90b1028 
Bumps the cargo group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [chrono](https://github.com/chronotope/chrono) | `0.4.42` | `0.4.43` |
| [colored](https://github.com/mackwic/colored) | `3.0.0` | `3.1.1` |
| [quick-xml](https://github.com/tafia/quick-xml) | `0.38.4` | `0.39.0` |
| [napi](https://github.com/napi-rs/napi-rs) | `3.8.1` | `3.8.2` |
| [napi-derive](https://github.com/napi-rs/napi-rs) | `3.5.0` | `3.5.1` |



Updates `chrono` from 0.4.42 to 0.4.43
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.42...v0.4.43)

Updates `colored` from 3.0.0 to 3.1.1
- [Release notes](https://github.com/mackwic/colored/releases)
- [Changelog](https://github.com/colored-rs/colored/blob/master/CHANGELOG.md)
- [Commits](colored-rs/colored@v3.0.0...v3.1.1)

Updates `quick-xml` from 0.38.4 to 0.39.0
- [Release notes](https://github.com/tafia/quick-xml/releases)
- [Changelog](https://github.com/tafia/quick-xml/blob/master/Changelog.md)
- [Commits](tafia/quick-xml@v0.38.4...v0.39.0)

Updates `napi` from 3.8.1 to 3.8.2
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](napi-rs/napi-rs@napi-v3.8.1...napi-v3.8.2)

Updates `napi-derive` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](napi-rs/napi-rs@napi-derive-v3.5.0...napi-derive-v3.5.1)

---
updated-dependencies:
- dependency-name: chrono
  dependency-version: 0.4.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: colored
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: quick-xml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: napi
  dependency-version: 3.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: napi-derive
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/cargo-7c6c8321c6 branch from 4ad5f9e to 90b1028 Compare February 1, 2026 22:10
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 4, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 4, 2026
@dependabot dependabot bot deleted the dependabot/cargo/cargo-7c6c8321c6 branch February 4, 2026 21:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants