[dependabot]

Bumps the rust-dependencies group with 4 updates: arbitrary, serde_json, diesel and zstd.

Updates arbitrary from 1.4.2 to 1.5.0

Changelog

Sourced from arbitrary's changelog.

1.5.0

Released 2026-10-05.

Added

• Added support for deriving Arbitrary for types with raw identifiers.

Changed

• Updated derive_arbitrary to syn 3. This raises the MSRV from 1.63.0 to 1.71.0, which is the MSRV of syn 3.

Fixed

• Fixed soundness when generating arrays.
• Fixed nonzero integer generation to always produce a nonzero value.
• Updated derive_arbitrary to include fixes for fully qualified paths.

---

Commits

• 9807b59 Merge pull request #243 from fitzgen/bump-to-1.5.0
• 7a49e61 Bump to version 1.5.0
• aa2802b Merge pull request #242 from drakeo338/claude/241-fix
• a9f7ca5 Update derive_arbitrary to syn 3 and raise MSRV to 1.71
• cd35bd2 Merge pull request #239 from Manishearth/fix-soundness
• 53a651d agent-driven: Fix soundness in try_create_array
• df8afe9 Merge pull request #238 from baloo/baloo/push-lopsmyosqnpv
• 15f5c08 Bring fix for fully qualified path
• 341a8fd Merge pull request #237 from ngildenhuys/downgrading_msrv_deps
• 9b68ef4 ci: adding update commands to downgrade dependencies to fix MSRV test
• Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates diesel from 2.3.13 to 2.3.14

Changelog

Sourced from diesel's changelog.

[2.3.14] 2026-10-07

• Add support for sqlite-wasm-rs 0.6
• Fixed a failed top-level COMMIT, such as a deferred foreign key violation on SQLite, leaving the transaction open
• Fixed embed_migrations! making the crate hash depend on the directory the crate is built in, which broke reproducible builds
• Correctly implement Error::source for our error types
• Workaround a potential future breaking change in rust

Commits

• 4007d77 Merge pull request #5263 from weiznich/prepare_2.3.14
• 276dfc6 Another compile test fix
• bbf3705 Drop bytebase as sponsor as they stopped their sponsorship
• eaa1ebd Fix compile and wasm tests
• 7f6b7ba Prepare a 2.3.14 release
• f6096a6 Merge pull request #5260 from weiznich/rust/1.99
• 9763c09 Merge pull request #5249 from weiznich/update_dist_to_0_33
• 30e2d4f Merge pull request #5247 from mgeisler/fix-embed-migrations-not-reproducible
• 33d2aba Merge pull request #5241 from LucaCappelletti94/upstream/sqlite-failed-commit...
• d9af93b Merge pull request #5239 from sjwang05/main
• Additional commits viewable in compare view

Updates zstd from 0.14.0 to 0.14.2

Commits

• 1e52c7e Release zstd 0.14.2
• 42fc51f Add reader-preserving fallible decoder constructors
• 78170db Add Decoder::into_inner for reader recovery without additional input
• 9167d35 Release zstd 0.14.1, zstd-safe 8.1.0, and zstd-sys 2.1.1
• b59becf Propagate C API deprecations through Rust bindings and wrappers
• d8a325a Simplify Rust allocator constructors and test support
• 594e743 Delegate panicking dictionary constructors to fallible variants
• 779d39a Add fallible constructors for prepared dictionaries
• fc5d2b7 Merge pull request #379 from gyscos/fix/pr-378-rust-allocator
• 18028cd Count actual newline bytes in dictionary training samples
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: LucaCappelletti94/coderabbit/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 81cec696-b7a9-4bf0-bd9c-a75a53134ed6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}