cargo: bump the cargo-minor-and-patch group across 1 directory with 13 updates

[dependabot]

Bumps the cargo-minor-and-patch group with 13 updates in the / directory:

Package	From	To
anyhow	1.0.102	1.0.104
thiserror	2.0.18	2.0.20
clap	4.6.1	4.6.6
clap_complete	4.6.5	4.6.9
humantime	2.3.0	2.4.0
serde	1.0.228	1.0.229
serde_json	1.0.150	1.0.151
crossbeam-channel	0.5.15	0.5.16
regex	1.12.4	1.13.1
flate2	1.1.9	1.1.10
unicode-width	0.2.0	0.2.2
vergen-gitcl	10.0.0	10.0.3
cc	1.4.0	1.4.4

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

• Update syn dev-dependency to version 3

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 1dbe186 Release 1.0.104
• f6479f8 Update to syn 3
• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates thiserror from 2.0.18 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

• Suppress redundant_field_names clippy lint in generated code (#454)

2.0.19

• Update to syn 3

Commits

• b1d5db5 Release 2.0.20
• c4c3ebd Merge pull request #454 from dtolnay/clippy
• 2266152 Suppress redundant_field_names clippy lint
• 2901cfd Raise minimum tested compiler to rust 1.88
• aa9d91f Update ui tests for version 2.0.19
• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

v4.6.4

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Commits

• 348cff3 chore: Release
• d478377 docs: Update changelog
• 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
• 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
• f90a966 fix(complete): Use spaces for indentation in fish
• dd4997b fix(complete): Don't glob-expand bash positionals
• 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
• 8141e11 chore(deps): Update compatible (dev) (#6398)
• 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
• 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
• Additional commits viewable in compare view

Updates clap_complete from 4.6.5 to 4.6.9

Release notes

Sourced from clap_complete's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

Changelog

Sourced from clap_complete's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

5.0.0 - TBD

available through unstable-v5 feature flag

Breaking Changes

• Made ArgPredicate non_exhaustive
• (help) Change default Command::term_width to "source format"
• (help) Change default Command::max_term_width to 100
• (derive) Vec<Vec<T>> types are now assuming to capture occurrences
• (derive) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

Features

• (derive) Group values by their occurrence with Vec<Vec<T>>

[Unreleased] - ReleaseDate

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

Commits

• 715b812 chore: Release
• 89e6e9b docs: Update changelog
• 3918cb4 Merge pull request #6468 from sjh9714/fix-bash-posix-fn-name
• 526c819 Merge pull request #6469 from latent-9/docs/fix-derive-reference-link
• b2bd685 docs(clap_derive): Fix derive reference link
• ecee8a4 fix(complete): Name the function after fn_name
• 6dd2e5a test(complete): Show POSIX bash will not source
• 4684d7a chore: Release
• 51d50ad docs: Update changelog
• 3bc3622 Merge pull request #6457 from bl4ck4t/master
• Additional commits viewable in compare view

Updates humantime from 2.3.0 to 2.4.0

Release notes

Sourced from humantime's releases.

2.4.0

What's Changed

• feat: allow creating Duration in const context by @​ctron in chronotope/humantime#70

Commits

• fc09281 chore: prepare release 2.4.0
• 8a022cc feat: allow creating Duration in const context
• 27a4f77 Explicitly set rust-version to 1.60
• acc3c19 ci: upgrade to actions/checkout v7
• 3acf96b ci: fix workflow formatting
• See full diff in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• See full diff in compare view

Updates crossbeam-channel from 0.5.15 to 0.5.16

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.16

• Improve support for rust-analyzer auto-completion of code inside select!/select_biased! macro. (#1240)
• Make never const. (#1250)

Commits

• 9b56303 Prepare for the next release
• a078b17 ci: Sync config with main
• 508c29d Remove crossbeam-skiplist which is not published from this branch from worksp...
• 6a20e57 tests: Fix mismatched_lifetime_syntaxes
• c2d674f epoch: Fix rustdoc::invalid_rust_codeblocks
• bd6563e Update no_atomic.rs
• d3e1e36 Make CachePadded<T> have C repr to allow casting to and from T (#1270)
• c0c466e channel: Use non-poison Mutex
• 8b3940f Add missing word to docs (#1208)
• df6eec0 docs: Link select_biased! from select! macro (#1202)
• Additional commits viewable in compare view

Updates regex from 1.12.4 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

• #1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

• #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

Commits

• 2b52759 1.13.1, redux
• 40e9823 1.13.1
• 75fcb96 changelog: 1.13.1
• 64ad0b6 automata: fix bug in reverse suffix/inner optimization
• fa91c31 automata: fix a bug caught by Codex review
• 30390ec automata: formatting tweaks
• 821a8eb automata: refactor reverse suffix/inner search slightly
• 10afd70 automata: expose the extracted literals for inner literal extraction
• 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
• 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
• Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

• feat: reuse zlib's decoder buffer by @​Vaiz in rust-lang/flate2-rs#532
• feat: add reset method for read::GzDecoder and buffered::GzDecoder by @​Vaiz in rust-lang/flate2-rs#534
• Drop cloudflare-zlib by @​kornelski in rust-lang/flate2-rs#539
• Add a wrapper for the Crc struct by @​MikkelPaulson in rust-lang/flate2-rs#540
• Bump miniz_oxide to 0.9 by @​oscargus in rust-lang/flate2-rs#543
• Upgrade miniz_oxide and add unit tests of the different flush kinds by @​fintelia in rust-lang/flate2-rs#498
• Fix infinite loop in writing gzip header/footer by @​Shnatsel in rust-lang/flate2-rs#547
• test: generate corrupt gzip fixture at runtime by @​nanookclaw in rust-lang/flate2-rs#550
• Reject oversized gzip extra fields by @​Byron in rust-lang/flate2-rs#553
• Reject incomplete deflate streams at EOF by @​Guflly in rust-lang/flate2-rs#556
• Include README.md in a private module by @​bushrat011899 in rust-lang/flate2-rs#562
• Add no_std support using nightly alloc_io by @​bushrat011899 in rust-lang/flate2-rs#559
• Update get_mut() documentation to make clear how 'inner` can be used by @​Byron in rust-lang/flate2-rs#558

New Contributors

• @​Vaiz made their first contribution in rust-lang/flate2-rs#532
• @​MikkelPaulson made their first contribution in rust-lang/flate2-rs#540
• @​oscargus made their first contribution in rust-lang/flate2-rs#543
• @​nanookclaw made their first contribution in rust-lang/flate2-rs#550
• @​Guflly made their first contribution in rust-lang/flate2-rs#556
• @​bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

• ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
• fb5228d Merge pull request #559 from bushrat011899/no_std
• 6ed3ba3 Add executable no_std example
• faed8a0 Expand CI to test no_std compatibility and correctness
• 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
• 3fe1126 Centralize usage of std for error and io
• 98e313a Add GzHeader::mtime_as_duration
• 0642965 Switch to core implicit prelude and only use std where required
• 454a63c Remove left-over dbg! statement
• 2a490b7 Add runtime_detection feature
• Additional commits viewable in compare view

Updates unicode-width from 0.2.0 to 0.2.2

Commits

• 9d98411 Publish 0.2.2 (#79)
• 4bba1d1 Support Unicode 17 (#75)
• 0085e91 Publish 0.2.1
• 6db0c14 Remove compiler-builtins from rustc-dep-of-std dependencies (#77)
• 0bccd3f update copyright year (#76)
• 7a7fcdc Support Unicode 16 (#74)
• 82d7136 Advertise and enforce MSRV (#73)
• e77b292 Make characters with Line_Break=Ambiguous ambiguous (#61)
• 5a7fced Update version number in Readme (#70)
• See full diff in compare view

Updates vergen-gitcl from 10.0.0 to 10.0.3

Release notes

Sourced from vergen-gitcl's releases.

vergen 10.0.1

Patch release adding a new error-fallback knob, a builder-access API addition, dependency updates, and a security-audit refresh.

New features

• VERGEN_DEFAULT_ON_ERROR fallback (#509) — When building outside a git worktree (or any time an instruction cannot be generated), the new VERGEN_DEFAULT_ON_ERROR env var and Emitter::default_on_error() builder method populate missing instructions with the idempotent default (VERGEN_IDEMPOTENT_OUTPUT) so env!("VERGEN_GIT_SHA") keeps compiling — while builds inside a real worktree still emit real values.
• all() builder accessor (#513) — Exposes Build::all(), Cargo::all(), Rustc::all(), and Sysinfo::all() as public methods that return the builder with all instructions enabled, enabling subtractive modification (turn all on, then selectively disable).

Dependency updates

• bon 3.9.1 → 3.9.3
• gix 0.84.0 → 0.85.0
• regex 1.12.3 → 1.12.4
• time 0.3.47 → 0.3.51
• sysinfo 0.39.3 → 0.39.5
• memmap2 0.9.10 → 0.9.11 (resolves RUSTSEC-2026-0186)

Security audit refresh

• Added RUSTSEC-2026-0173 ignore (proc-macro-error2 unmaintained, informational only)
• Removed RUSTSEC-2025-0055 ignore (tracing-subscriber now resolved to ≥ 0.3.20)
• Removed RUSTSEC-2025-0141 ignore (bincode no longer in the dependency tree)
• cargo audit passes clean

Other

• Fixed inaccurate fail_on_error and idempotent docs (#509)
• Added cargo:rerun-if-changed=VERGEN_DEFAULT_ON_ERROR rerun directive
• Bumped cargo-binstall in CI (#503)
• Parse deprecation fixes (#505)

Full Changelog: rustyhorde/vergen@v10.0.0...10.0.1

Commits

• See full diff in compare view

Updates cc from 1.4.0 to 1.4.4

Release notes

Sourced from cc's releases.

cc-v1.4.4

Fixed

• honour Build::env overrides in Android llvm-ar probe (#1868)
• honour Build::env overrides in flag support and compiler family detection probes (#1866)

cc-v1.4.3

Other

• Update MSRV to 1.65 (#1834)
• Regenerate target info (#1848)

cc-v1.4.2

Fixed

• Infer NEON, not VFPv4, from neon in the target name (#1843)
• do not emit -mno-omit-leaf-frame-pointer if unsupported (#1845)

cc-v1.4.1

Fixed

• Fix -Cforce-frame-pointers's corresponding CFLAGS (#1814)
• Fix parsing of thumbv7a-vex-v5 (#1840)

Other

• Regenerate target info (#1839)
• Add aarch64_be to prefix_for_target (#1835)
• Use lp64d ABI for Managarm riscv64 (#1829)
• Make cc work on Motor OS (#1822)
• Update edition to 2021 (#1811)
• Update MSRV to 1.64 (#1808)

Changelog

Sourced from cc's changelog.

1.4.4 - 2026-08-21

Fixed

• honour Build::env overrides in Android llvm-ar probe (#1868)
• honour Build::env overrides in flag support and compiler family detection probes (#1866)

1.4.3 - 2026-08-14

Other

• Update MSRV to 1.65 (#1834)
• Regenerate target info (#1848)

1.4.2 - 2026-08-08

Fixed

• Infer NEON, not VFPv4, from neon in the target name (#1843)
• do not emit -mno-omit-leaf-frame-pointer if unsupported (#1845)

1.4.1 - 2026-08-07

Fixed

• Fix -Cforce-frame-pointers's corresponding CFLAGS (#1814)
• Fix parsing of thumbv7a-vex-v5 (#1840)

Other

• Regenerate target info (#1839)
• Add aarch64_be to prefix_for_target (#1835)
• Use lp64d ABI for Managarm riscv64 (#1829)
• Make cc work on Motor OS (#1822)
• Update edition to 2021 (#1811)
• Update MSRV to 1.64 (#1808)

Commits

• 82ee29e chore(cc): release v1.4.4 (#1869)
• 1301078 fix: run the Android llvm-ar probe in the caller's environment (#1868)
• c5cc913 fix: honor Build::env overrides in flag support probes (#1866)
• caf7609 chore(deps): bump dtolnay/rust-toolchain (#1862)
• 3c4ab88 chore: release (#1858)
• 951c5f5 cc-test: add loongarch64 assembly shim (#1855)
• 60e2e00 chore(deps): bump Swatinem/rust-cache from 2.9.1 to 2.9.2 (#1853)
• cdb4701 ci: replace rustup installation with actions-rust-lang/setup-rust-toolchain (...
• 3af3b8d cargo: use workspace inheritance (#1850)
• 6df6471 cargo: convert to workspace lints (#1849)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.