Skip to content

build(deps): bump the cargo-dependencies group with 11 updates - #10

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-99ab11ba9f
Closed

build(deps): bump the cargo-dependencies group with 11 updates#10
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-99ab11ba9f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 30, 2026

Copy link
Copy Markdown

Bumps the cargo-dependencies group with 11 updates:

Package From To
chrono 0.4.44 0.4.45
i18n-embed-fl 0.9.4 0.10.0
open 5.3.5 5.4.2
rust-embed 8.11.0 8.12.0
serde 1.0.228 1.0.229
tokio 1.52.3 1.53.1
notify-rust 4.17.0 4.18.0
futures 0.3.32 0.3.34
weathervane 0.9.1 0.10.1
i18n-embed 0.15.4 0.16.0
libcosmic dc11d6a c003a58

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

Commits
  • 1703382 Prepare 0.4.45 release
  • 881f9ab tz_data: fix tzdata locations on Android
  • f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
  • c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
  • 120686c Bump codecov/codecov-action from 5 to 6
  • See full diff in compare view

Updates i18n-embed-fl from 0.9.4 to 0.10.0

Commits
  • 659b53c Publish i18n-embed-fl v0.10.0
  • a6b328d Actually publish i18n-build v0.10.3
  • 7c53d3e Publish i18n-build and i18n-embed
  • ae88dc7 Publish new versions of i18n-build and i18n-config
  • 4ca5f66 Update changelogs
  • 1c17e73 Fix some lints in i18n-config
  • 8f43993 Update dependencies in Cargo.lock
  • 9fd41e0 Switch to getting locales with sys-locale crate (#154)
  • 6af1ba0 Update Fluent syntax crate (#153)
  • f02d3ca Fix non-reproducible builds #151
  • Additional commits viewable in compare view

Updates open from 5.3.5 to 5.4.2

Release notes

Sourced from open's releases.

v5.4.2

Bug Fixes

  • wait in that_detached instead of double-fork On macOS /usr/bin/open already detaches via LaunchServices. spawn_detached() adds another fork and leaves zombie children. Align that_detached with with_detached (PR #119).

Commit Statistics

  • 4 commits contributed to the release over the course of 18 calendar days.
  • 19 days passed between releases.
  • 1 commit was understood as conventional.
  • 0 issues like '(#ID)' were seen in commit messages

Commit Details

  • Uncategorized
    • Merge pull request #130 from s00d/fix/macos-that-detached-zombies (7468760)
    • Review (351bb54)
    • Wait in that_detached instead of double-fork (c4369c5)
    • Merge pull request #129 from Byron/fix-wsl (beb6a3f)

v5.4.1

Bug Fixes

  • Forward WSL targets to PowerShell to make open actually work there

    Opening a URL from WSL failed because the Windows process did not receive OPEN_RS_TARGET, even though it was present in the Linux command environment. The failure reproduces with cargo run -- https://google.com on Ubuntu under WSL, where Start-Process receives a null FilePath and exits unsuccessfully.

    Add OPEN_RS_TARGET to WSLENV so WSL interop forwards the target into the PowerShell environment. Preserve existing WSLENV entries and their flags, while keeping the PowerShell command fixed so targets remain data rather than shell code.

    Validated with focused WSL tests, the all-features test suite, rustfmt, Clippy with warnings denied, and an end-to-end cargo run from WSL.

Commit Statistics

  • 1 commit contributed to the release.
  • 24 days passed between releases.

... (truncated)

Changelog

Sourced from open's changelog.

5.4.2 (2026-08-24)

Bug Fixes

  • wait in that_detached instead of double-fork On macOS /usr/bin/open already detaches via LaunchServices. spawn_detached() adds another fork and leaves zombie children. Align that_detached with with_detached (PR #119).

Commit Statistics

  • 4 commits contributed to the release over the course of 18 calendar days.
  • 19 days passed between releases.
  • 1 commit was understood as conventional.
  • 0 issues like '(#ID)' were seen in commit messages

Commit Details

  • Uncategorized
    • Merge pull request #130 from s00d/fix/macos-that-detached-zombies (7468760)
    • Review (351bb54)
    • Wait in that_detached instead of double-fork (c4369c5)
    • Merge pull request #129 from Byron/fix-wsl (beb6a3f)

5.4.1 (2026-08-05)

Bug Fixes

  • Forward WSL targets to PowerShell to make open actually work there

    Opening a URL from WSL failed because the Windows process did not receive OPEN_RS_TARGET, even though it was present in the Linux command environment. The failure reproduces with cargo run -- https://google.com on Ubuntu under WSL, where Start-Process receives a null FilePath and exits unsuccessfully.

    Add OPEN_RS_TARGET to WSLENV so WSL interop forwards the target into the PowerShell environment. Preserve existing WSLENV entries and their flags, while keeping the PowerShell command fixed so targets remain data rather than shell code.

    Validated with focused WSL tests, the all-features test suite, rustfmt, Clippy with warnings denied, and an end-to-end cargo run from WSL.

... (truncated)

Commits
  • 1a3ef5d Release open v5.4.2
  • 7468760 Merge pull request #130 from s00d/fix/macos-that-detached-zombies
  • 351bb54 review
  • c4369c5 fix(macos): wait in that_detached instead of double-fork
  • beb6a3f Merge pull request #129 from Byron/fix-wsl
  • e548a4e Release open v5.4.1
  • 96fa673 fix: Forward WSL targets to PowerShell to make open actually work there (#128)
  • b5c12bd Release open v5.4.0
  • bdc3397 Merge pull request #126 from Byron/fix-wsl
  • 7265cae fix: Align WSL PowerShell invocation with Windows
  • Additional commits viewable in compare view

Updates rust-embed from 8.11.0 to 8.12.0

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates tokio from 1.52.3 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

  • time: fix alt timer cancellation and insertion race (#8252)

Documented

  • runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

  • fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
  • metrics: add task schedule latency metric (#7986)
  • net: add SocketAddr methods to Unix sockets (#8144)

Changed

  • io: add #[inline] to IO trait impls for in-memory types (#8242)
  • net: implement UCred::pid on FreeBSD (#8086)
  • net: support Nuttx target os (#8259)
  • signal: refactor global variables on Windows (#8231)
  • sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
  • taskdump: support taskdumps on s390x (#8192)
  • time: add #[track_caller] to timeout_at() (#8077)
  • time: consolidate mutex locks on spurious poll (#8124)
  • time: defer waker clone on spurious poll (#8107)
  • time: move lazy-registration state into Sleep (#8132)
  • tracing: remove unnecessary span clone (#8126)

Fixed

  • io: do not treat zero-length reads as EOF in Chain (#8251)
  • net: use getpeereid for QNX peer credentials (#8270)
  • runtime: avoid illegal state in FastRand (#8078)
  • sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
  • taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
  • time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

Updates notify-rust from 4.17.0 to 4.18.0

Release notes

Sourced from notify-rust's releases.

v4.18.0

What's Changed

New Contributors

Full Changelog: hoodie/notify-rust@v4.17.0...v4.18.0

Changelog

Sourced from notify-rust's changelog.

v4.18.0 (2026-06-16)

Features

  • add common wait_for_response on all platforms (b20c59c)
  • add wait_for_actions and on_close using mac-notification-sys (2627ef7)
  • macos: add mac-usernotifications backend (602cd5f)
  • add common response types (25994d5)
  • add Windows notification handles (eaaa540)
Commits
  • 975d651 chore: bump version
  • 256e287 Merge pull request #286 from hoodie/feature/ci
  • c9cfe4b ci: add release workflow
  • 20ec544 chore: update mac-notification-sys
  • c424161 Merge pull request #285 from hoodie/feature/improve-docs
  • 9d11006 docs: improve docs
  • 3a444b6 Merge pull request #284 from hoodie/feature/response-example
  • 26b7223 docs: improve example
  • fc93326 refactor: clean up warnings
  • b20c59c feat: add common wait_for_response on all platforms
  • Additional commits viewable in compare view

Updates futures from 0.3.32 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

  • Preserve cloned waker identity. (#3032)
  • Updato syn to 3. (#3028)

0.3.33 - 2026-07-18

  • Fix ReadLine's soundness issue regarding to exception safety. (#3020)
  • Fix unsound Send impl for IterPinRef and Iter. (#3003)
  • Fix stacked borrows violation in compat01as03 implementation. (#3012)
  • Fix memory leak in FuturesUnordered::IntoIter. (#3005)
  • Add portable-atomic-alloc feature and use it in FuturesUnordered. (#3007)
  • Re-export alloc::task::Wake. (#3010)
  • Update spin to 0.12. (#3014)
Commits

Updates weathervane from 0.9.1 to 0.10.1

Changelog

Sourced from weathervane's changelog.

Changelog

0.10.0 — 2026-07-15

Added

  • DailyForecast gains four fields from the Open-Meteo daily block: windspeed_max: f32, wind_direction: i32, compass_direction: CompassDirection, and precipitation_probability_max: Option<i32>. Derived from windspeed_10m_max, wind_direction_10m_dominant, and precipitation_probability_max; compass_direction via CompassDirection::from_degrees.
  • NWS current-observation override for US coordinates: live National Weather Service observations overlay the Open-Meteo base (temperature, wind, humidity, pressure, dew point, visibility), mirroring the existing AMeDAS temperature override for Japan. The two overrides are mutually exclusive by geography; both fall through to Open-Meteo on any failure. Modeled sky fields (weathercode/condition/cloud cover/UV) stay Open-Meteo. Internal weather_nws module; no new public type.

Wire contract

  • Additive only: the four new DailyForecast fields extend the daily-forecast shape. tests/snapshots/ and CONTRACT.md updated accordingly; no field removed or retyped. Existing payloads round-trip (precipitation_probability_max is Option).

Packaging

  • repository and the outgoing HTTP User-Agent now point to github.com/crenshawdev/weathervane (the crate's home moved to GitHub).
Commits

Updates i18n-embed from 0.15.4 to 0.16.0

Commits
  • 7c53d3e Publish i18n-build and i18n-embed
  • ae88dc7 Publish new versions of i18n-build and i18n-config
  • 4ca5f66 Update changelogs
  • 1c17e73 Fix some lints in i18n-config
  • 8f43993 Update dependencies in Cargo.lock
  • 9fd41e0 Switch to getting locales with sys-locale crate (#154)
  • 6af1ba0 Update Fluent syntax crate (#153)
  • f02d3ca Fix non-reproducible builds #151
  • bd18870 Fix some typos using typos-cli (#143)
  • ceb3da0 Update workspace dependency for i18n-embed because i18n-embed-fl requires it.
  • See full diff in compare view

Updates libcosmic from dc11d6a to c003a58

Commits
  • c003a58 feat(iced): hide-cursor and multi-popup features
  • caec74c fix(menu example): fix key binds not being dispatched
  • 3b62210 fix(menu): request redraw when menu bar opens
  • 2a73fbc fix(segmented_button): request redraw on tab focus shift
  • f8f5c7b feat: popover top position (#1403)
  • ef490df Revert "feat(cosmic-config): add new_data method." (#1399)
  • fd34b92 Revert "feat(cosmic-config): add new_data method."
  • 2ab0d4c fix(iced): allow scrolling when children capture touch presses
  • b812c77 On platforms without state_dir, fall back to ~/.local/state (#1398)
  • 637c454 On platforms without state_dir, fall back to ~/.local/state
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the cargo-dependencies group with 11 updates
099de85 
Bumps the cargo-dependencies group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` |
| [i18n-embed-fl](https://github.com/kellpossible/cargo-i18n) | `0.9.4` | `0.10.0` |
| [open](https://github.com/Byron/open-rs) | `5.3.5` | `5.4.2` |
| rust-embed | `8.11.0` | `8.12.0` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.1` |
| [notify-rust](https://github.com/hoodie/notify-rust) | `4.17.0` | `4.18.0` |
| [futures](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.34` |
| [weathervane](https://github.com/crenshawdev/weathervane) | `0.9.1` | `0.10.1` |
| [i18n-embed](https://github.com/kellpossible/cargo-i18n) | `0.15.4` | `0.16.0` |
| [libcosmic](https://github.com/pop-os/libcosmic) | ``dc11d6a`` | ``c003a58`` |


Updates `chrono` from 0.4.44 to 0.4.45
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.44...v0.4.45)

Updates `i18n-embed-fl` from 0.9.4 to 0.10.0
- [Release notes](https://github.com/kellpossible/cargo-i18n/releases)
- [Commits](kellpossible/cargo-i18n@i18n-embed-fl_v0.9.4...i18n-embed-fl_v0.10.0)

Updates `open` from 5.3.5 to 5.4.2
- [Release notes](https://github.com/Byron/open-rs/releases)
- [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md)
- [Commits](Byron/open-rs@v5.3.5...v5.4.2)

Updates `rust-embed` from 8.11.0 to 8.12.0

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `tokio` from 1.52.3 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.1)

Updates `notify-rust` from 4.17.0 to 4.18.0
- [Release notes](https://github.com/hoodie/notify-rust/releases)
- [Changelog](https://github.com/hoodie/notify-rust/blob/main/CHANGELOG.md)
- [Commits](hoodie/notify-rust@v4.17.0...v4.18.0)

Updates `futures` from 0.3.32 to 0.3.34
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/futures-rs@0.3.32...0.3.34)

Updates `weathervane` from 0.9.1 to 0.10.1
- [Changelog](https://github.com/crenshawdev/weathervane/blob/main/CHANGELOG.md)
- [Commits](https://github.com/crenshawdev/weathervane/commits)

Updates `i18n-embed` from 0.15.4 to 0.16.0
- [Release notes](https://github.com/kellpossible/cargo-i18n/releases)
- [Commits](kellpossible/cargo-i18n@i18n-embed_v0.15.4...i18n-embed_v0.16.0)

Updates `libcosmic` from `dc11d6a` to `c003a58`
- [Commits](pop-os/libcosmic@dc11d6a...c003a58)

---
updated-dependencies:
- dependency-name: chrono
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: i18n-embed-fl
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: open
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: rust-embed
  dependency-version: 8.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: notify-rust
  dependency-version: 4.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: futures
  dependency-version: 0.3.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: weathervane
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: i18n-embed
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: libcosmic
  dependency-version: c003a58fff660f5c55ebfb54a5908722fa7d1d6e
  dependency-type: direct:production
  dependency-group: cargo-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 30, 2026
@crenshawdev

crenshawdev commented Aug 30, 2026

Copy link
Copy Markdown
Owner

Superseded by #11. This group mixed breaking 0.x/major releases with routine updates. Future minor/patch updates remain grouped; major upgrades will be isolated for explicit migration review.

@dependabot @github

dependabot Bot commented on behalf of github Aug 30, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-dependencies-99ab11ba9f branch August 30, 2026 02:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@crenshawdev