chore(deps): bump the rust-dependencies group across 1 directory with 9 updates by dependabot[bot] · Pull Request #1275 · rust-av/Av1an

dependabot · 2026-09-28T10:05:15Z

Bumps the rust-dependencies group with 9 updates in the / directory:

Package	From	To
cfg-if	`1.0.4`	`1.0.5`
crossbeam-channel	`0.5.16`	`0.5.17`
crossbeam-utils	`0.8.22`	`0.8.23`
rand	`0.10.2`	`0.10.3`
smallvec	`1.15.2`	`1.16.2`
thiserror	`2.0.20`	`2.0.21`
which	`8.0.5`	`8.0.6`
clap	`4.6.6`	`4.6.7`
clap_complete	`4.6.9`	`4.6.11`

Updates cfg-if from 1.0.4 to 1.0.5

Release notes

Sourced from cfg-if's releases.

v1.0.5

Add a note that this crate is deprecated, suggesting cfg_select! instead

Changelog

Sourced from cfg-if's changelog.

1.0.5 - 2026-09-16

Add a note that this crate is deprecated, suggesting cfg_select! instead

Commits

8b0a2b0 Deprecation notice + crate version bump
efabe3f Add a changelog entry for the upcoming deprecation notice
a66c2d4 Bump actions/checkout from 6 to 7
bda9677 Bump actions/checkout from 5 to 6
See full diff in compare view

Updates crossbeam-channel from 0.5.16 to 0.5.17

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.17

Fix UB in bounded channel when SelectedOperation is leaked. (#1295)

Fix behavior inconsistency on already received case in at(). (#1296)

Handle overflow in bounded channel initialization. (#1301)

Use 64-bit index on 32-bit platforms if 64-bit atomic is available. (#1321)

Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)

Commits

2920c98 Prepare for the next release
808b75a ci: Update codegen job
46774e0 channel: Document that send_timeout sends an available message even if the ti...
89a3fe4 epoch: Make Shared::null const
383d74a Use *::MAX associated constants
a30b825 channel,deque,queue: Use AtomicU64/u64 in head/tail index if available
a0e4d29 Replace iterative capacity growth with next_power_of_two (#1216)
94f74d2 Recognize x86_64-unknown-linux-gnutsan in build script
30e5963 epoch: Add missing fence emulation for tsan
708a6bd Handle overflow in bounded channel/queue initialization (#1301)
Additional commits viewable in compare view

Updates crossbeam-utils from 0.8.22 to 0.8.23

Release notes

Sourced from crossbeam-utils's releases.

crossbeam-utils 0.8.23

Fix SB violation when ShardedLockWriteGuard is leaked. (#1294)

Improve compatibility with ThreadSanitizer. (#1308)

Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)

Commits

2920c98 Prepare for the next release
808b75a ci: Update codegen job
46774e0 channel: Document that send_timeout sends an available message even if the ti...
89a3fe4 epoch: Make Shared::null const
383d74a Use *::MAX associated constants
a30b825 channel,deque,queue: Use AtomicU64/u64 in head/tail index if available
a0e4d29 Replace iterative capacity growth with next_power_of_two (#1216)
94f74d2 Recognize x86_64-unknown-linux-gnutsan in build script
30e5963 epoch: Add missing fence emulation for tsan
708a6bd Handle overflow in bounded channel/queue initialization (#1301)
Additional commits viewable in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)

Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)

Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

9e7d328 Prepare rand 0.10.3 (#1840)
f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
c994eb1 docs: fix angle unit in quick start example (#1839)
33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
521fab6 Stop pinning dependencies (#1820)
3f7c433 Stop pinning dependencies
cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
Additional commits viewable in compare view

Updates smallvec from 1.15.2 to 1.16.2

Release notes

Sourced from smallvec's releases.

v1.16.2

What's Changed

Backport v2’s retain implementation to v1 by @charliermarsh in servo/rust-smallvec#596

Fix element ownership tracking with may_dangle by @charliermarsh in servo/rust-smallvec#594

Fix Cargo manual_readme warning by @Rayan-and-beyond in servo/rust-smallvec#608

chore: bump version by @alejandro-vaz in servo/rust-smallvec#617

New Contributors

@Rayan-and-beyond made their first contribution in servo/rust-smallvec#608

Full Changelog: servo/rust-smallvec@v1.16.1...v1.16.2

v1.16.1

What's Changed

Speed up push by expanding triple_mut by @bolshoytoster in servo/rust-smallvec#557

chore: bump version to 1.16.1 by @ryux1 in servo/rust-smallvec#585

fix: doc warning by @alejandro-vaz in servo/rust-smallvec#582

fix: cargo warnings by @alejandro-vaz in servo/rust-smallvec#581

New Contributors

@ryux1 made their first contribution in servo/rust-smallvec#585

Full Changelog: servo/rust-smallvec@v1.16.0...v1.16.1

v1.16.0

What's Changed

Include debug_metadata/*.natvis in the published crate to fix debugger_visualizer/docs.rs build by @teddytennant in servo/rust-smallvec#417

feat: removed debugger visualizer + tests by @alejandro-vaz in servo/rust-smallvec#420

feat: added style check to CI && rustfmt.toml by @alejandro-vaz in servo/rust-smallvec#436

New Contributors

@teddytennant made their first contribution in servo/rust-smallvec#417

Full Changelog: servo/rust-smallvec@v1.15.2...v1.16.0

Commits

ccf5fc7 chore: bump version (#617)
af207cc Merge pull request #608 from Rayan-and-beyond/fix/manual-readme-warning-606
cda4b73 Merge pull request #594 from astral-sh/charlie/codex-fix-may-dangle
d0556cb Merge pull request #596 from astral-sh/charlie/codex-v1-compact
f73914c Flatten retain tests into the unit test module
954d599 Move retain tests into the unit test module
8d93633 Remove added retain benchmark harness
88c6bfa Limit compaction optimization to retain
b9ef17d Fix element ownership tracking with may_dangle
42029c2 Compact retained elements directly in retain and dedup_by
Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

Fix parsing of generic unit variants in display expressions (#459)

Commits

b1827ee Release 2.0.21
58037b5 Merge pull request #459 from dtolnay/turbofish
f82a0cf Keep track of nested turbofish depth
72ea492 Raise required compiler to Rust 1.77
72eea0d Resolve io_other_error clippy lint in tests
07f09a2 Raise required compiler to Rust 1.74
2715388 Update ui test suite to nightly-2026-09-22
5a306c7 Update ui test suite to nightly-2026-09-05
ef9383b Update ui test suite to nightly-2026-08-22
8336b84 Update ui tests for version 2.0.20
See full diff in compare view

Updates which from 8.0.5 to 8.0.6

Release notes

Sourced from which's releases.

8.0.6

What's Changed

fix: resolve relative PATH entries against the provided cwd by @RSS1102 in harryfei/which-rs#128

New Contributors

@RSS1102 made their first contribution in harryfei/which-rs#128

Full Changelog: harryfei/which-rs@8.0.5...8.0.6

Changelog

Sourced from which's changelog.

8.0.6

Bug fix: #128 Resolve relative PATH entries against the user provided CWD when available, rather than the process CWD. Thanks @RSS1102 for your contribution to which!

Commits

17fde4a prepare patch release
48e49d5 Resolve relative PATH entries against cwd (#128)
See full diff in compare view

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

d3e59a9 chore: Release
d997f87 docs: Update changelog
fb6058c Merge pull request #6409 from heaths/pwsh-support
2310870 test(complete): Add tests for completer_for_path
5967c17 refactor(complete): Move shell detection to Shells
594602b fix(complete): Detect pwsh for PowerShell
3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
c968b13 chore(deps): Update Rust crate shlex to v2
8f247cb chore(deps): Update actions/checkout action to v7
Additional commits viewable in compare view

Updates clap_complete from 4.6.9 to 4.6.11

Commits

2cb76fd chore: Release
0b00b8d docs: Update changelog
3443000 Merge pull request #6526 from bonnefoa/fix-completion-escape
a1b6be7 fix(clap_complete): Fix value escape in zsh completion
face9e8 test(complete): Add completion test without arg's help
88053ab test(complete): Re-enable complete tests
e6adcc2 chore(release): Simplify replacements
13f2db5 chore: Release
3304fea docs: Update changelog
7b2ad34 Merge pull request #6521 from r-near/feat/derive-deferred-initialization
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 9 updates Bumps the rust-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cfg-if](https://github.com/rust-lang/cfg-if) | `1.0.4` | `1.0.5` | | [crossbeam-channel](https://github.com/crossbeam-rs/crossbeam) | `0.5.16` | `0.5.17` | | [crossbeam-utils](https://github.com/crossbeam-rs/crossbeam) | `0.8.22` | `0.8.23` | | [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` | | [smallvec](https://github.com/servo/rust-smallvec) | `1.15.2` | `1.16.2` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` | | [which](https://github.com/harryfei/which-rs) | `8.0.5` | `8.0.6` | | [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` | | [clap_complete](https://github.com/clap-rs/clap) | `4.6.9` | `4.6.11` | Updates `cfg-if` from 1.0.4 to 1.0.5 - [Release notes](https://github.com/rust-lang/cfg-if/releases) - [Changelog](https://github.com/rust-lang/cfg-if/blob/main/CHANGELOG.md) - [Commits](rust-lang/cfg-if@v1.0.4...v1.0.5) Updates `crossbeam-channel` from 0.5.16 to 0.5.17 - [Release notes](https://github.com/crossbeam-rs/crossbeam/releases) - [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md) - [Commits](crossbeam-rs/crossbeam@crossbeam-channel-0.5.16...crossbeam-channel-0.5.17) Updates `crossbeam-utils` from 0.8.22 to 0.8.23 - [Release notes](https://github.com/crossbeam-rs/crossbeam/releases) - [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md) - [Commits](crossbeam-rs/crossbeam@crossbeam-utils-0.8.22...crossbeam-utils-0.8.23) Updates `rand` from 0.10.2 to 0.10.3 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.10.2...0.10.3) Updates `smallvec` from 1.15.2 to 1.16.2 - [Release notes](https://github.com/servo/rust-smallvec/releases) - [Commits](servo/rust-smallvec@v1.15.2...v1.16.2) Updates `thiserror` from 2.0.20 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.20...2.0.21) Updates `which` from 8.0.5 to 8.0.6 - [Release notes](https://github.com/harryfei/which-rs/releases) - [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md) - [Commits](harryfei/which-rs@8.0.5...8.0.6) Updates `clap` from 4.6.6 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7) Updates `clap_complete` from 4.6.9 to 4.6.11 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.9...clap_complete-v4.6.11) --- updated-dependencies: - dependency-name: cfg-if dependency-version: 1.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: crossbeam-channel dependency-version: 0.5.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: crossbeam-utils dependency-version: 0.8.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rand dependency-version: 0.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: smallvec dependency-version: 1.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: which dependency-version: 8.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: clap_complete dependency-version: 4.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 28, 2026

Navigation Menu

chore(deps): bump the rust-dependencies group across 1 directory with 9 updates - #1275

chore(deps): bump the rust-dependencies group across 1 directory with 9 updates#1275
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/rust-dependencies-f2af956b3c

dependabot Bot commented on behalf of github Sep 28, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.0.5

1.0.5 - 2026-09-16

crossbeam-channel 0.5.17

crossbeam-utils 0.8.23

[0.10.3] — 2026-09-20

Fixes

Changes

v1.16.2

What's Changed

New Contributors

v1.16.1

What's Changed

New Contributors

v1.16.0

What's Changed

New Contributors

2.0.21

8.0.6

What's Changed

New Contributors

8.0.6

v4.6.7

[4.6.7] - 2026-09-14

Features

[4.6.7] - 2026-09-14

Features

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 28, 2026 •

edited

Loading