[dependabot]

Bumps the rust-minor-and-patch group with 3 updates in the /analyzers directory: clap, rawzip and serde_json.

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates rawzip from 0.5.1 to 0.5.2

Changelog

Sourced from rawzip's changelog.

v0.5.2 - October 4th, 2026

Fix central directory iteration that did not end after a parse error. The slice Iterator and the reader next_entry returned the same error forever, so callers that skip errors (for example, filter_map(Result::ok)) did not stop. An error now ends iteration, and ZipSliceEntries implements FusedIterator.

Fix incorrect local header reads stemming from a u64::MAX overflow summing a Zip64 local header offset with prelude data. Debug builds panicked and release builds wrapped silently. An Eof is now returned.

Fix 32-bit targets (eg: wasm32) with zip data of 4 GiB or more. In a few instances, a u64 was narrowed to a usize in arithmetic.

• Reading an entry with 4 GiB or more remaining returned short reads, or a false EOF at exactly 4 GiB (#198, thanks @​MarSoft)
• A local header offset of 4 GiB or more read from the wrong position instead of returning an error
• Central directory iteration with 4 GiB or more remaining returned a false Eof
• A max_search_space of 4 GiB or more could miss the end of central directory record, or not stop the search

64-bit targets are not affected.

Fix timestamps outside the supported date range. When writing, dates after 2106-02-07 06:28:15 UTC now use the maximum extended timestamp instead of wrapping to an earlier date. UtcDateTime::from_unix also clamps values outside years 1 through 65535. Reading standard ZIP timestamp fields is unchanged.

Commits

• b04fa8f chore: Release rawzip version 0.5.2
• d9fe016 update changelog to latest
• 6bf9361 Merge pull request #202 from nickbabcock/fix/fuse-entry-iteration
• 5c95c7d End central directory iteration after a parse error
• d43b830 Merge pull request #201 from nickbabcock/fix/zip-timestamp-overflow
• a69553c Clamp out-of-range timestamps when writing ZIPs
• 20ef3a1 Merge pull request #200 from nickbabcock/fix/local-header-offset-overflow
• 3383644 Fix local header offset overflow
• 03561c7 Merge pull request #199 from nickbabcock/fix/32bit-truncation-audit
• 7562574 Fix 32 bit target truncation paths
• Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view