cargo: bump the cargo-dependencies group across 1 directory with 13 updates

[dependabot]

Bumps the cargo-dependencies group with 13 updates in the / directory:

Package	From	To
clap	4.5.23	4.5.31
indexmap	2.7.0	2.7.1
open	5.3.1	5.3.2
poem	3.1.5	3.1.7
rust-embed	8.5.0	8.6.0
serde	1.0.217	1.0.218
thiserror	2.0.9	2.0.11
tokio	1.42.0	1.43.0
toml	0.8.19	0.8.20
insta	1.41.1	1.42.1
tempfile	3.14.0	3.17.1
serde_json	1.0.134	1.0.139
tauri-build	1.5.5	1.5.6

Updates clap from 4.5.23 to 4.5.31

Release notes

Sourced from clap's releases.

v4.5.31

[4.5.31] - 2025-02-24

Features

• Add ValueParserFactory for Saturating<T>

v4.5.30

[4.5.30] - 2025-02-17

Fixes

• (assert) Allow num_args(0..=1) to be used with SetTrue
• (assert) Clean up rendering of takes_values assertions

v4.5.29

[4.5.29] - 2025-02-11

Fixes

• Change ArgMatches::args_present so not-present flags are considered not-present (matching the documentation)

v4.5.28

[4.5.28] - 2025-02-03

Features

• (derive) Unstable support for full markdown syntax for doc comments, enabled with unstable-markdown

v4.5.27

[4.5.27] - 2025-01-20

Documentation

• Iterate on tutorials and reference based on feedback

v4.5.26

[4.5.26] - 2025-01-09

Fixes

• (error) Reduce binary size with the suggestions feature

v4.5.25

[4.5.25] - 2025-01-09

Fixes

• (help) Reduce binary size

... (truncated)

Changelog

Sourced from clap's changelog.

[4.5.31] - 2025-02-24

Features

• Add ValueParserFactory for Saturating<T>

[4.5.30] - 2025-02-17

Fixes

• (assert) Allow num_args(0..=1) to be used with SetTrue
• (assert) Clean up rendering of takes_values assertions

[4.5.29] - 2025-02-11

Fixes

• Change ArgMatches::args_present so not-present flags are considered not-present (matching the documentation)

[4.5.28] - 2025-02-03

Features

• (derive) Unstable support for full markdown syntax for doc comments, enabled with unstable-markdown

[4.5.27] - 2025-01-20

Documentation

• Iterate on tutorials and reference based on feedback

[4.5.26] - 2025-01-09

Fixes

• (error) Reduce binary size with the suggestions feature

[4.5.25] - 2025-01-09

Fixes

• (help) Reduce binary size

[4.5.24] - 2025-01-07

Fixes

• (parser) Correctly handle defaults with ignore_errors(true) and when a suggestion is provided for an unknown argument

Commits

• acf9abb chore: Release
• 9186a18 docs: Update changelog
• 233c316 Merge pull request #5926 from sorairolake/feature/value-parser-factory-for-sa...
• 13931a2 Merge pull request #5923 from Reverier-Xu/master
• 536e29f feat(builder): Add ValueParserFactory for Saturating\<T>
• 45ed71c chore: Avoid using gen for rust 2024 preserved keyword
• 5029bb3 chore: Avoid using gen for rust 2024 preserved keyword
• 8a1d59b chore(deps): Update Rust Stable to v1.85 (#5921)
• 9caee53 docs(changelog): Clarify 5.0.0
• cb2352f Merge pull request #5918 from epage/test
• Additional commits viewable in compare view

Updates indexmap from 2.7.0 to 2.7.1

Changelog

Sourced from indexmap's changelog.

2.7.1 (2025-01-19)

• Added #[track_caller] to functions that may panic.
• Improved memory reservation for insert_entry.

Commits

• 42e57a3 Merge pull request #369 from cuviper/release-2.7.1
• f61b581 Release 2.7.1
• cb520a7 Merge pull request #368 from cuviper/reserve_entries
• f0ec924 Merge pull request #367 from savannstm/better-panics
• 38ef618 Merge pull request #364 from hkBst/patch-1
• 1f12721 Improve memory reservation for insert_entry
• 2f55755 Improve panic messages
• 7b64edc Add #[track_caller] attributes to functions that may panic
• f63bb6e remove fxhash dep
• 8eb4de5 Remove fxhash example from lib.rs
• Additional commits viewable in compare view

Updates open from 5.3.1 to 5.3.2

Release notes

Sourced from open's releases.

v5.3.2

Bug Fixes

• fix that_detached for UNC path of a directory

Commit Statistics

• 3 commits contributed to the release over the course of 1 calendar day.
• 51 days passed between releases.
• 1 commit was understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Commit Details

• Uncategorized
  • Merge pull request #107 from amrbashir/fix/windows/remove-unc-and-fallback-on-error (472ce26)
  • Fix that_detached for UNC path of a directory (c452a8c)
  • Merge pull request #79 from Byron/better-docs (2646ff8)

Changelog

Sourced from open's changelog.

5.3.2 (2025-01-05)

Bug Fixes

• fix that_detached for UNC path of a directory

Commit Statistics

• 3 commits contributed to the release over the course of 1 calendar day.
• 51 days passed between releases.
• 1 commit was understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Commit Details

• Uncategorized
  • Merge pull request #107 from amrbashir/fix/windows/remove-unc-and-fallback-on-error (472ce26)
  • Fix that_detached for UNC path of a directory (c452a8c)
  • Merge pull request #79 from Byron/better-docs (2646ff8)

Commits

• f196640 Release open v5.3.2
• 472ce26 Merge pull request #107 from amrbashir/fix/windows/remove-unc-and-fallback-on...
• c452a8c fix(windows): fix that_detached for UNC path of a directory
• 2646ff8 Merge pull request #79 from Byron/better-docs
• See full diff in compare view

Updates poem from 3.1.5 to 3.1.7

Commits

• See full diff in compare view

Updates rust-embed from 8.5.0 to 8.6.0

Changelog

Sourced from rust-embed's changelog.

[8.6.0] - 2025-02-25

• Update include-flate to 0.3 #246. Thanks to krant
• refactor: remove redundant reference and closure #250. Thanks to hamirmahal
• refactor: replace map().unwrap_or_else(). #250. Thanks to hamirmahal
• Compatible with Axum 0.7.9 #253. Thanks to wkmyws
• Add allow_missing option to derive macro #256. Thanks to lirannl

Commits

• See full diff in compare view

Updates serde from 1.0.217 to 1.0.218

Release notes

Sourced from serde's releases.

v1.0.218

• Documentation improvements

Commits

• 7bfd518 Release 1.0.218
• 723a949 Merge pull request #2895 from dtolnay/stabledoc
• 2b44efb Point standard library links to stable
• 03dc0fc Merge pull request #2894 from dtolnay/doclink
• 85cb0c4 Convert html links to intra-doc links
• abe7194 Update ui test suite to nightly-2025-02-12
• aaccac7 Unset doc-scrape-examples for lib target
• 7cd4d84 Update ui test suite to nightly-2025-02-07
• 04ff3e8 More precise gitignore patterns
• dc3031b Remove *.sw[po] from gitignore
• Additional commits viewable in compare view

Updates thiserror from 2.0.9 to 2.0.11

Release notes

Sourced from thiserror's releases.

2.0.11

• Add feature gate to tests that use std (#409, #410, thanks @​Maytha8)

2.0.10

• Support errors containing a generic type parameter's associated type in a field (#408)

Commits

• 0f532e3 Release 2.0.11
• 3d15543 Merge pull request #410 from dtolnay/testnostd
• 1a226ae Disable two more integration tests in no-std mode
• 8b5f2d7 Fix unused import in test when built without std
• eecd247 Add CI step to test with "std" disabled
• 8f2a76b Merge pull request #409 from Maytha8/std-tests
• 693a6cd Add feature gate to tests that use std
• 349f696 Release 2.0.10
• 6cd87bc Merge pull request #408 from dtolnay/assoctype
• 6b3e1e5 Generate trait bounds on associated types
• Additional commits viewable in compare view

Updates tokio from 1.42.0 to 1.43.0

Release notes

Sourced from tokio's releases.

Tokio v1.43.0

1.43.0 (Jan 8th, 2025)

Added

• net: add UdpSocket::peek methods (#7068)
• net: add support for Haiku OS (#7042)
• process: add Command::into_std() (#7014)
• signal: add SignalKind::info on illumos (#6995)
• signal: add support for realtime signals on illumos (#7029)

Fixed

• io: don't call set_len before initializing vector in Blocking (#7054)
• macros: suppress clippy::needless_return in #[tokio::main] (#6874)
• runtime: fix thread parking on WebAssembly (#7041)

Changes

• chore: use unsync loads for unsync_load (#7073)
• io: use Buf::put_bytes in Repeat read impl (#7055)
• task: drop the join waker of a task eagerly (#6986)

Changes to unstable APIs

• metrics: improve flexibility of H2Histogram Configuration (#6963)
• taskdump: add accessor methods for backtrace (#6975)

Documented

• io: clarify ReadBuf::uninit allows initialized buffers as well (#7053)
• net: fix ambiguity in TcpStream::try_write_vectored docs (#7067)
• runtime: fix LocalRuntime doc links (#7074)
• sync: extend documentation for watch::Receiver::wait_for (#7038)
• sync: fix typos in OnceCell docs (#7047)

#6874: tokio-rs/tokio#6874 #6963: tokio-rs/tokio#6963 #6975: tokio-rs/tokio#6975 #6986: tokio-rs/tokio#6986 #6995: tokio-rs/tokio#6995 #7014: tokio-rs/tokio#7014 #7029: tokio-rs/tokio#7029 #7038: tokio-rs/tokio#7038 #7041: tokio-rs/tokio#7041 #7042: tokio-rs/tokio#7042 #7047: tokio-rs/tokio#7047 #7053: tokio-rs/tokio#7053 #7054: tokio-rs/tokio#7054 #7055: tokio-rs/tokio#7055

... (truncated)

Commits

• 5f3296d chore: prepare Tokio v1.43.0 (#7079)
• cc974a6 chore: prepare tokio-macros v2.5.0 (#7078)
• 15495fd metrics: improve flexibility of H2Histogram Configuration (#6963)
• ad41834 io: don't call set_len before initializing vector in Blocking (#7054)
• bd3e857 runtime: move is_join_waker_set assertion in unset_waker (#7072)
• 15f7366 runtime: fix LocalRuntime doc links (#7074)
• fd2048d ci: split miri jobs into unit and integration tests (#7071)
• e8f3915 chore: use unsync loads for unsync_load (#7073)
• 67f1277 net: fix ambiguity in TcpStream::try_write_vectored docs (#7067)
• 463502c io: clarify ReadBuf::uninit allows initialized buffers as well (#7053)
• Additional commits viewable in compare view

Updates toml from 0.8.19 to 0.8.20

Commits

• f550dbf chore: Release
• 25587db docs: Update changelog
• fbc77ec Merge pull request #829 from tisonkun/map-get-kv
• 4605a64 fea: impl Map get_key_value
• 8efc81e chore(deps): Update Rust crate serde_json to v1.0.138 (#828)
• 15496f1 chore: Release
• 1131ce8 docs: Update changelog
• 4776fca Merge pull request #827 from epage/winnow07
• 754769b chore: Upgrade to Winnow 0.7
• 9415da2 refactor(parser): Switch to ModalParser
• Additional commits viewable in compare view

Updates insta from 1.41.1 to 1.42.1

Release notes

Sourced from insta's releases.

1.42.1

Release Notes

• Improved handling of control characters in inline snapshots. #713

Install cargo-insta 1.42.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.42.1/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.42.1/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.42.1

File	Platform	Checksum
cargo-insta-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
cargo-insta-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
cargo-insta-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

1.42.0

Release Notes

• Text snapshots no longer contain snapshot_type: text in their metadata. For context, we originally added this in the prior release (1.41.0) to support binary snapshots, but some folks disliked the diff noise on any snapshot changes, and the maintainers' weighted votes favored reverting. I apologize that this will cause some additional churn for those who used cargo insta test --force-update-snapshots to update their snapshots to the 1.41 format; running this again with 1.42 will remove those metadata entries. To confirm: this doesn't affect whether snapshot tests pass or fail — the worst impact is some additional diffs in metadata. #690
• Pending snapshots are no longer removed throughout the workspace by cargo-insta before running tests. Instead, running a test will overwrite or remove its own pending snapshot. To remove all pending snapshots, use cargo insta reject or run tests with --unreferenced=delete. #651
• insta::internals::SettingsBindDropGuard (returned from Settings::bind_to_scope) no longer implements Send. This was incorrect and any tests relying on this behavior where not working properly. Fixes #694 in #695 by @​jalil-salame

Install cargo-insta 1.42.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.42.0/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.42.0/cargo-insta-installer.ps1 | iex"

... (truncated)

Changelog

Sourced from insta's changelog.

1.42.1

• Improved handling of control characters in inline snapshots. #713
• Add pending deprecation warning for --accept-unseen. We've left an issue open at mitsuhiko/insta#659 eliciting feedback on whether anyone uses this for a few months. A warning will now be printed when --accept-unseen is used, and we'll eventually remove the feature unless we get some feedback that it's useful. #668

1.42.0

• Text snapshots no longer contain snapshot_type: text in their metadata. For context, we originally added this in the prior release (1.41.0) to support binary snapshots, but some folks disliked the diff noise on any snapshot changes, and the maintainers' weighted votes favored reverting. I apologize that this will cause some additional churn for those who used cargo insta test --force-update-snapshots to update their snapshots to the 1.41 format; running this again with 1.42 will remove those metadata entries. To confirm: this doesn't affect whether snapshot tests pass or fail — the worst impact is some additional diffs in metadata. #690
• Pending snapshots are no longer removed throughout the workspace by cargo-insta before running tests. Instead, running a test will overwrite or remove its own pending snapshot. To remove all pending snapshots, use cargo insta reject or run tests with --unreferenced=delete. #651
• insta::internals::SettingsBindDropGuard (returned from Settings::bind_to_scope) no longer implements Send. This was incorrect and any tests relying on this behavior where not working properly. Fixes #694 in #695 by @​jalil-salame

Commits

• 272d628 Bump version to 1.42.1 (#714)
• c22d1ee Improved handling of control characters in inline snapshots (#713)
• f778d29 Replace use of unsafe with pin_project (#711)
• 949ac94 Update test output for snapshot_text change (#706)
• 1da675c Fix command in changelog (#705)
• c20f566 Bump version to 1.42.0 (#703)
• aca7fe4 Update changelog for 1.42; add snapshot_kind explanation (#702)
• 3f1e9a1 Fix clippy error & run --all-features in CI (#701)
• f750c5b Update dist config (#700)
• 60638c2 Defer to cargo metadata to evaluate the workspace root (#660)
• Additional commits viewable in compare view

Updates tempfile from 3.14.0 to 3.17.1

Changelog

Sourced from tempfile's changelog.

3.17.1

• Fix build with windows-sys 0.52. Unfortunately, we have no CI for older windows-sys versions at the moment...

3.17.0

• Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in Builder::make_in (when creating temporary files of arbitrary types).
• Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test.
• When reseeding with getrandom, use platform (e.g., CPU) specific randomness sources where possible.
• Clarify some documentation.
• Unlink unnamed temporary files on windows immediately when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible.

3.16.0

• Update getrandom to 0.3.0 (thanks to @​paolobarbolini).
• Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @​ErichDonGubler).
• Improved security documentation (thanks to @​n0toose for collaborating with me on this).

3.15.0

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#314). This resolves a potential DoS vector (#178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.

Commits

• 714a259 chore: release 3.17.1
• 78309ed fix: cast handle to the windows crate HANDLE (#332)
• 6e7d167 chore: release 3.17.0
• 3718075 doc: remove incorrect documentation about windows and open files
• 461369f feat: delete unnamed temporary files on windows immediately
• 78d30a2 doc: clarify "inner file will be deleted" documentation (#329)
• 0fe11c4 doc: document how to "keep" temporary files/dirs after creation (#328)
• 35e0629 feat: simplify getrandom call (#325)
• 1e5059f fix: handle TLS deallocation (#324)
• c7b2e1a chore: simplify reborrow
• Additional commits viewable in compare view

Updates serde_json from 1.0.134 to 1.0.139

Release notes

Sourced from serde_json's releases.

v1.0.139

• Documentation improvements

v1.0.138

• Documentation improvements

v1.0.137

• Turn on "float_roundtrip" and "unbounded_depth" features for serde_json in play.rust-lang.org (#1231)

v1.0.136

• Optimize serde_json::value::Serializer::serialize_map by using Map::with_capacity (#1230, thanks @​goffrie)

v1.0.135

• Add serde_json::Map::into_values method (#1226, thanks @​tisonkun)

Commits

• 4d4f53c Release 1.0.139
• 5d6b32f Merge pull request #1242 from dtolnay/writefloat
• e5bb8bd Document behavior of write_f32/f64 on non-finite floats
• 7a79781 Merge pull request #1241 from dtolnay/doclink
• 13591f1 Convert html links to intra-doc links
• 1d7378e Unset doc-scrape-examples for lib target
• 1174c5f Resolve unnecessary_semicolon pedantic clippy lint
• c916099 Release 1.0.138
• dc29e48 Move BufReader to caller
• 29122f9 Sort imports from PR 1237
• Additional commits viewable in compare view

Updates tauri-build from 1.5.5 to 1.5.6

Release notes

Sourced from tauri-build's releases.

tauri-build v1.5.6

Updating crates.io index Locking 610 packages to latest compatible versions Adding base64 v0.21.7 (available: v0.22.1) Adding cargo_toml v0.15.3 (available: v0.21.0) Adding clap v3.2.25 (available: v4.5.26) Adding cocoa v0.24.1 (available: v0.26.0) Adding glib v0.15.12 (available: v0.20.7) Adding gtk v0.15.5 (available: v0.18.2) Adding html5ever v0.26.0 (available: v0.29.0) Adding http v0.2.12 (available: v1.2.0) Adding hyper v0.14.32 (available: v1.5.2) Adding indexmap v1.9.3 (available: v2.7.0) Adding infer v0.13.0 (available: v0.16.0) Adding json-patch v2.0.0 (available: v3.0.1) Adding mockito v0.31.1 (available: v1.6.1) Adding nix v0.26.4 (available: v0.29.0) Adding open v3.2.0 (available: v5.3.2) Adding raw-window-handle v0.5.2 (available: v0.6.2) Adding reqwest v0.11.27 (available: v0.12.12) Adding rfd v0.10.0 (available: v0.15.2) Adding serial_test v0.8.0 (available: v3.2.0) Adding state v0.5.3 (available: v0.6.0) Adding syn v1.0.109 (available: v2.0.96) Adding tauri-winres v0.1.1 (available: v0.2.0) Adding thiserror v1.0.69 (available: v2.0.11) Adding toml v0.7.8 (available: v0.8.19) Adding webkit2gtk v0.18.2 (available: v2.0.1) Adding webview2-com v0.19.1 (available: v0.34.0) Adding windows v0.39.0 (available: v0.59.0) Adding wry v0.24.11 (available: v0.48.0) Adding zip v0.6.6 (available: v2.2.2)

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 724 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (622 crate dependencies)
Crate:     atk
Version:   0.15.1
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.15.1
└── gtk 0.15.5
</tr></table> 

... (truncated)

Commits

• 089939b Apply Version Updates From Current Changes (v1) (#12203)
• ac83bf4 ci: Fix msrv check (#12345)
• e98cd59 chore: Fix clippy 1.84 warnings (#12339)
• b3c258d ci: downgrade windows-version in msrv check (#12305)
• b802a06 chore(deps): update dependency typescript to v5.7.3 (1.x) (#12320)
• c3e98bf Revert "chore(deps): update rust crate windows-registry to 0.4 (1.x) (#12306)"
• 40a799d chore(deps): update rust crate windows-registry to 0.4 (1.x) (#12306)
• ff19056 chore(deps): update rust crate ico to 0.4 (1.x) (#12303)
• d8db504 chore(deps): update dependency husky to v9 (1.x) (#12256)
• 17d1b81 chore(deps): update dependency prettier to v3.4.2 (1.x) (#12258)
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
tauri-build	[>= 2.a, < 3]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions