build(deps): bump clap from 4.6.6 to 4.6.7 in /cli

[dependabot]

Bumps clap from 4.6.6 to 4.6.7.

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

[skymanbp]

Closing: this repository's Dependabot version-update lanes are parked as of d80f1f9 — .github/dependabot.yml now carries open-pull-requests-limit: 0 on all three lanes, so version updates open nothing on a schedule. Security updates are a separate channel and are not affected by that limit; those still arrive.

Nothing is wrong with this bump. The reason it is not being merged is that cli/Cargo.lock is a measured build input: the bench joining rule treats a lock change as a new program (see docs/BENCH.md), so merging a patch-level dependency bump obliges a fresh measurement run and a release to carry it. That is the right trade while a project is being actively developed, and the wrong one now that this one is in maintenance.

To take this upgrade on purpose later: raise open-pull-requests-limit on the cargo lane, let the scheduled run re-open the PR, merge it, then set the limit back to 0.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.