Skip to content

chore(deps): bump the deps group across 1 directory with 10 updates - #59

Merged
matheusfillipe merged 1 commit into
mainfrom
dependabot/cargo/deps-19a0a2e1c3
Oct 26, 2026
Merged

chore(deps): bump the deps group across 1 directory with 10 updates#59
matheusfillipe merged 1 commit into
mainfrom
dependabot/cargo/deps-19a0a2e1c3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the deps group with 10 updates in the / directory:

Package From To
rmcp 3.5.0 3.7.0
ratatui-image 12.0.0-rc.0 12.0.0-rc.3
tree-sitter-php 0.24.2 0.25.1
tree-sitter-swift 0.7.3 0.7.4
tree-sitter-scala 0.26.2 0.26.3
serde_json 1.0.151 1.0.154
toml 1.1.6+spec-1.1.0 1.1.8+spec-1.1.0
uuid 1.26.1 1.28.0
pulldown-cmark 0.13.4 0.13.5
insta 1.48.0 1.49.0

Updates rmcp from 3.5.0 to 3.7.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.7.0

Fixed

  • (transport) accept nested x-mcp-header annotations (#1359)
  • ship LICENSE in rmcp and rmcp-macros crates (#1342)

Other

  • combine AI issue triage with a maintainer rotation as the responsible reviewer (#1260)

rmcp-v3.7.0

Added

  • (auth) support OIDC ID-token subjects in enterprise exchange (#1385)

Fixed

  • (auth) allow cross-origin resource_metadata urls (#1302)
  • (transport) keep 401/403 status when the body is a JSON-RPC error (#1341)

Other

  • Merge commit from fork

rmcp-macros-v3.6.0

Fixed

  • (transport) accept nested x-mcp-header annotations (#1359)
  • ship LICENSE in rmcp and rmcp-macros crates (#1342)

Other

  • combine AI issue triage with a maintainer rotation as the responsible reviewer (#1260)

rmcp-v3.6.0

Added

  • (client) cancel an abandoned tools/call, prompts/get or resources/read (#1344)
  • (auth) add initial authorization scope selection (#1352)
  • (transport) add non-blocking stdio_pipes transport (#1304)

Fixed

  • (server) reject requests to 2026-07-28 clients (#1326)
  • (streamable-http-server) look up tool schemas per request (#1349)
  • (transport) follow same-origin 307/308 redirects in the default Streamable HTTP client (#1367)
  • (streamable-http-server) answer a session-less non-initialize POST with 400 (#1377)
  • (model) read a request id written in float form as that integer (#1346)
  • (client) answer a server ping during the initialize handshake (#1366)
  • (transport) accept nested x-mcp-header annotations (#1359)

... (truncated)

Commits
  • 5d6a11f chore: release v3.7.0 (#1384)
  • 7bc5c07 fix(auth): allow cross-origin resource_metadata urls (#1302)
  • ac808ab Merge commit from fork
  • b11a40d feat(auth): support OIDC ID-token subjects in enterprise exchange (#1385)
  • e0e7e50 fix(transport): keep 401/403 status when the body is a JSON-RPC error (#1341)
  • c960b4b ci(triage): redact command output from failure logs (#1380)
  • 74d7895 chore: release v3.6.0 (#1327)
  • ad2a66a fix(server): reject requests to 2026-07-28 clients (#1326)
  • c519c79 fix(streamable-http-server): look up tool schemas per request (#1349)
  • be386d5 fix(transport): follow same-origin 307/308 redirects in the default Streamabl...
  • Additional commits viewable in compare view

Updates ratatui-image from 12.0.0-rc.0 to 12.0.0-rc.3

Release notes

Sourced from ratatui-image's releases.

v12.0.0-rc.3

Other

  • :stdio option and helper

v12.0.0-rc.2

Other

  • remove fontsize fallback except for halfblocks
  • split workflows so PRs don't require approval

v12.0.0-rc.1

Added

  • Kitty: write one placeholder per cell, skip not needed anymore
  • Query for kitty transmission compression (opt-in), and use it if detected
  • Picker: expose tmux_detected() method

Fixed

  • Fix regression from 967af26 "sliced sixel also uses round_pixel_size_to_cells"
  • Widen integer before multiplying cell counts, not after

Other

  • Allow nonsensical chafa-dyn + chafa-static for some tools
Changelog

Sourced from ratatui-image's changelog.

12.0.0-rc.3 - 2026-10-17

Other

  • :stdio option and helper

12.0.0-rc.2 - 2026-10-05

Other

  • remove fontsize fallback except for halfblocks
  • split workflows so PRs don't require approval

11.1.0 - 2026-09-16

Added

  • Kitty: write one placeholder per cell, skip not needed anymore
  • Query for kitty transmission compression (opt-in), and use it if detected
  • Picker: expose tmux_detected() method

Fixed

  • Fix regression from 967af26 "sliced sixel also uses round_pixel_size_to_cells"
  • Widen integer before multiplying cell counts, not after

Other

  • Allow nonsensical chafa-dyn + chafa-static for some tools

11.0.8 - 2026-09-04

Other

  • sliced sixel also uses round_pixel_size_to_cells

11.0.7 - 2026-09-03

Other

  • SlicedProtocol replaces DECGRA raster size accounting for the used bands
  • Derive Eq for ProtocolType
  • collapse screenshot list in PR comment
  • use ioctl font-size and env hints when the capability query gets no response
  • mention yazi-adapter rather than yazi

11.0.6 - 2026-06-25

Other

... (truncated)

Commits
  • 5d350c6 chore: release v12.0.0-rc.3 (#227)
  • da37168 QueryStdioOptions::stdio option and helper
  • a08dc3c chore: release v12.0.0-rc.2 (#223)
  • 58f4a04 remove fontsize fallback except for halfblocks
  • c3059e8 release-plz: split workflows so PRs don't require approval
  • 685d686 chore: release v12.0.0-rc.1
  • 723a83b rebase with comment-command
  • 0e6ad7c fix(sliced): fix images that are cut from top and bottom at the same time
  • cb51c02 docs(cap_parser): fix the links to the renamed shm_name
  • 0837261 touch up docs a bit
  • Additional commits viewable in compare view

Updates tree-sitter-php from 0.24.2 to 0.25.1

Release notes

Sourced from tree-sitter-php's releases.

v0.25.1

NOTE: Download tree-sitter-php.tar.gz for the complete source code.

What's Changed

New Contributors

Full Changelog: tree-sitter/tree-sitter-php@v0.25.0...v0.25.1

v0.25.0

NOTE: Download tree-sitter-php.tar.gz for the complete source code.

What's Changed

New Contributors

Full Changelog: tree-sitter/tree-sitter-php@v0.24.2...v0.25.0

Commits
  • 58d5643 chore: bump version to 0.25.1
  • e2ee12f ci: drop removed attestations input from publish workflow
  • 1f8bc04 chore: generate
  • 46fc12d fix: allow cast-type keywords as argument constants
  • 7caebd3 feat: support clone with arguments
  • 92b5271 chore: bump version to 0.25.0
  • 3c7e657 chore: generate
  • a8c3d99 ci: update invalid example files
  • 3027631 fix(scanner): treat any non-name char as heredoc closer
  • 7eb55b7 fix(grammar): allow leading backslash on group use
  • Additional commits viewable in compare view

Updates tree-sitter-swift from 0.7.3 to 0.7.4

Commits
  • 171fa3b 0.7.4 release
  • b42acc4 Updating top repository version
  • 5f435e2 Parse Swift 6 syntax: sending, isolated, copy, value generics, inline arrays,...
  • 35245fb fix: multi_agent.cwe-476 security vulnerability
  • 187fd4d Add strict memory safety syntax -- SE-0458
  • 4a0e502 Updating top repository version
  • 00bbb0a Fix npm publish never triggering after tag pushes
  • 048688b Include prebuilt .wasm in the npm package
  • f02fc0a Updating top repository version
  • 90b7a70 Fix attributes with an empty argument list
  • Additional commits viewable in compare view

Updates tree-sitter-scala from 0.26.2 to 0.26.3

Release notes

Sourced from tree-sitter-scala's releases.

v0.26.3

bug fixes

behind the scenes

new contributors

Full Changelog: tree-sitter/tree-sitter-scala@v0.26.2...v0.26.3

Commits
  • 851032f Merge pull request #687 from eed3si9n/wip/bump-version
  • a941de4 Bump to 0.26.3
  • b924e51 Merge pull request #686 from tree-sitter/generation
  • 65d08af chore: generate and sync from 8b7250aa3e1edc25a84cdd87dfea849b668a2372
  • 8b7250a Merge pull request #683 from requaos/scala2-export-identifier
  • ec65f61 Merge branch 'master' into scala2-export-identifier
  • 8ba1d41 Merge pull request #685 from tree-sitter/generation
  • 25655cb chore: generate and sync from 37d5424b587e29ca95f5f6b09f448b1baf206c69
  • 37d5424 Merge pull request #684 from requaos/braced-for-dedent-enumerator
  • 05985b7 fix: read export as an identifier and a package segment in Scala 2 code
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

Commits
  • 20572a6 Release 1.0.154
  • a91bfaf Fix RandomState links in map documentation
  • 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
  • 4b2d726 Release 1.0.153
  • 83335ee Touch up PR 1345
  • 4b4810a Resolve range_plus_one pedantic clippy lint
  • 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
  • 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • Additional commits viewable in compare view

Updates toml from 1.1.6+spec-1.1.0 to 1.1.8+spec-1.1.0

Commits
  • ceac6e4 chore: Release
  • 0fe9e93 docs: Update changelog
  • e3a64aa fix(display): Ensure all keys are encoded (#1245)
  • 76484d0 fix(display): Ensure all keys are encoded
  • 711b1ba refactor(display): Clarify that we are working with encoded keys
  • 4f73ebd test(display): Reproduce the key bug
  • 6c6a5cd fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 9c5e95d fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 4d45944 perf(parser): Remove no-op code (#1243)
  • 189c91c perf(parser): Remove no-op code
  • Additional commits viewable in compare view

Updates uuid from 1.26.1 to 1.28.0

Release notes

Sourced from uuid's releases.

v1.28.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

Commits
  • 276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
  • 4b3b9f5 prepare for 1.28.0 release
  • cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
  • 784a022 Inline expected tokens in optional compact serde test
  • a5678c3 Simplify optional serde adapter tests to option tokens
  • 638a518 Refactor optional serde adapter tests and share byte wrapper
  • b62154e Merge pull request #917 from uuid-rs/cargo/v1.27.0
  • ffd8ec5 prepare for 1.27.0 release
  • 654fa5b Add optional serde format adapters
  • 4b6c10f Merge pull request #915 from uuid-rs/fix/v7-ordering
  • Additional commits viewable in compare view

Updates pulldown-cmark from 0.13.4 to 0.13.5

Release notes

Sourced from pulldown-cmark's releases.

0.13.5

This release fixes some security issues already fixed in main branch. More details in pulldown-cmark/pulldown-cmark#1181.

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.4...v0.13.5

Commits
  • 48a2767 Merge pull request #1181 from pulldown-cmark/release-0.13.5
  • a126502 feat: cherry-pick pull request #1148 commits into 0.13 branch
  • 6da8248 feat: cherry-pick pull request #1155 commits into 0.13 branch
  • 73fe547 feat: cherry-pick pull request #1143 commits into 0.13 branch
  • cf4ee5f feat: cherry-pick pull request #1136 commits into 0.13 branch
  • 63ab297 feat: cherry-pick pull request #1046 commits into 0.13 branch
  • fd112a4 chore: cargo update and bump version to 0.13.5
  • 078feb5 feat: cherry-pick pull request #1021 commits into 0.13 branch
  • 9620194 feat: cherry-pick pull request #1111 commits into 0.13 branch
  • e6eafca feat: cherry-pick pull request #1102 commits into 0.13 branch
  • Additional commits viewable in compare view

Updates insta from 1.48.0 to 1.49.0

Release notes

Sourced from insta's releases.

1.49.0

Release Notes

  • Allow Option<&OsStr> snapshot names, such as Path::file_name(), without explicit string conversion. #929 (@​dislogical)
  • Add prebuilt cargo-insta binaries for ARM64 Linux (aarch64-unknown-linux-gnu). #942 (@​aljohri)
  • Fix JSON serialization of maps keyed by unit enum variants. Keys use the serialized variant name, including serde renames. #934 (@​teddytennant)
  • Remove trailing semicolons from serialization macro bodies to avoid compiler warnings when used in expression position. #940 (@​Tiwalun)
  • Mention INSTA_UPDATE=always in snapshot mismatch hints for file snapshots. #927 (@​hiro-nikaitou)
  • Update the lockfile's tempfile and rustix dependencies to fix builds with newer Rust toolchains. #939
  • Fix cargo insta test --all-targets --test-runner nextest failing with "Can't mix --doc with other target selecting options". Like cargo test --all-targets, it no longer runs doctests. #460

Install cargo-insta 1.49.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.49.0/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.49.0/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.49.0

File Platform Checksum
cargo-insta-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
cargo-insta-x86_64-apple-darwin.tar.xz Intel macOS checksum
cargo-insta-x86_64-pc-windows-msvc.zip x64 Windows checksum
cargo-insta-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

This was written by Codex on behalf of @​max-sixty

Changelog

Sourced from insta's changelog.

1.49.0

  • Allow Option<&OsStr> snapshot names, such as Path::file_name(), without explicit string conversion. #929 (@​dislogical)
  • Add prebuilt cargo-insta binaries for ARM64 Linux (aarch64-unknown-linux-gnu). #942 (@​aljohri)
  • Fix JSON serialization of maps keyed by unit enum variants. Keys use the serialized variant name, including serde renames. #934 (@​teddytennant)
  • Remove trailing semicolons from serialization macro bodies to avoid compiler warnings when used in expression position. #940 (@​Tiwalun)
  • Mention INSTA_UPDATE=always in snapshot mismatch hints for file snapshots. #927 (@​hiro-nikaitou)
  • Update the lockfile's tempfile and rustix dependencies to fix builds with newer Rust toolchains. #939
  • Fix cargo insta test --all-targets --test-runner nextest failing with "Can't mix --doc with other target selecting options". Like cargo test --all-targets, it no longer runs doctests. #460
Commits
  • 5df39ce Release 1.49.0 (#944)
  • 1c28c19 Skip the separate doctest run for nextest with --all-targets (#941)
  • 064742e Build cargo-insta for aarch64-unknown-linux-gnu (#942)
  • 08b67d9 Remove trailing semicolons from macro bodies (#940)
  • 06858e1 fix: regenerate Cargo.lock to avoid broken rustix 0.37.27 (#939)
  • 70be034 Serialize unit enum variants used as JSON map keys (#934)
  • 54d0b96 feat: implement From for SnapshotValue with OsStr (#929)
  • 3d62572 [fix] Mention INSTA_UPDATE variable in snapshot mismatch errors (#927)
  • 1712876 ci: run CI on a pinned toolchain via rust-toolchain.toml; fix format-arg lint...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the deps group across 1 directory with 10 updates
31a071f 
Bumps the deps group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.5.0` | `3.7.0` |
| [ratatui-image](https://github.com/ratatui/ratatui-image) | `12.0.0-rc.0` | `12.0.0-rc.3` |
| [tree-sitter-php](https://github.com/tree-sitter/tree-sitter-php) | `0.24.2` | `0.25.1` |
| [tree-sitter-swift](https://github.com/alex-pinkus/tree-sitter-swift) | `0.7.3` | `0.7.4` |
| [tree-sitter-scala](https://github.com/tree-sitter/tree-sitter-scala) | `0.26.2` | `0.26.3` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [toml](https://github.com/toml-rs/toml) | `1.1.6+spec-1.1.0` | `1.1.8+spec-1.1.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.26.1` | `1.28.0` |
| [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark) | `0.13.4` | `0.13.5` |
| [insta](https://github.com/mitsuhiko/insta) | `1.48.0` | `1.49.0` |



Updates `rmcp` from 3.5.0 to 3.7.0
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.5.0...rmcp-v3.7.0)

Updates `ratatui-image` from 12.0.0-rc.0 to 12.0.0-rc.3
- [Release notes](https://github.com/ratatui/ratatui-image/releases)
- [Changelog](https://github.com/ratatui/ratatui-image/blob/master/CHANGELOG.md)
- [Commits](ratatui/ratatui-image@v12.0.0-rc.0...v12.0.0-rc.3)

Updates `tree-sitter-php` from 0.24.2 to 0.25.1
- [Release notes](https://github.com/tree-sitter/tree-sitter-php/releases)
- [Commits](tree-sitter/tree-sitter-php@v0.24.2...v0.25.1)

Updates `tree-sitter-swift` from 0.7.3 to 0.7.4
- [Release notes](https://github.com/alex-pinkus/tree-sitter-swift/releases)
- [Commits](alex-pinkus/tree-sitter-swift@0.7.3...0.7.4)

Updates `tree-sitter-scala` from 0.26.2 to 0.26.3
- [Release notes](https://github.com/tree-sitter/tree-sitter-scala/releases)
- [Commits](tree-sitter/tree-sitter-scala@v0.26.2...v0.26.3)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `toml` from 1.1.6+spec-1.1.0 to 1.1.8+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.6...toml-v1.1.8)

Updates `uuid` from 1.26.1 to 1.28.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.26.1...v1.28.0)

Updates `pulldown-cmark` from 0.13.4 to 0.13.5
- [Release notes](https://github.com/raphlinus/pulldown-cmark/releases)
- [Commits](pulldown-cmark/pulldown-cmark@v0.13.4...v0.13.5)

Updates `insta` from 1.48.0 to 1.49.0
- [Release notes](https://github.com/mitsuhiko/insta/releases)
- [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md)
- [Commits](mitsuhiko/insta@1.48.0...1.49.0)

---
updated-dependencies:
- dependency-name: rmcp
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: ratatui-image
  dependency-version: 12.0.0-rc.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: tree-sitter-php
  dependency-version: 0.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: tree-sitter-swift
  dependency-version: 0.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: tree-sitter-scala
  dependency-version: 0.26.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: toml
  dependency-version: 1.1.8+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: uuid
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: pulldown-cmark
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: insta
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 26, 2026
@matheusfillipe
matheusfillipe merged commit f451f96 into main Oct 26, 2026
13 checks passed
@dependabot
dependabot Bot deleted the dependabot/cargo/deps-19a0a2e1c3 branch October 26, 2026 17:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@matheusfillipe