Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 6, 2025

Bumps the patch group with 6 updates in the / directory:

Package From To
bigdecimal 0.4.8 0.4.9
clap 4.5.48 4.5.51
getrandom 0.3.3 0.3.4
reqwest 0.12.23 0.12.24
proc-macro2 1.0.101 1.0.103
quote 1.0.41 1.0.42

Updates bigdecimal from 0.4.8 to 0.4.9

Release notes

Sourced from bigdecimal's releases.

v0.4.9

Changes

  • Add methods BigDecimal::{powi, powi_with_context} for raising a decimal to a i64 power

    • the powi uses Default Context
  • Add methods BigDecimal::mul_with_context for efficient multiplication to fixed precision

    • uses precision and rounding-mode in the Context
  • Add method BigDecimal::decimal_digit_count, returning number of decimal digits (i.e. precision) of the number

  • Add method BigDecimal::order_of_magnitude, returning position of most significant digit of this decimal

  • Add method BigDecimal::is_one_quickcheck, returning Option<bool> indicating if the value is 1.0 if it can be calculated without allocating, or None if too large

    • Replaced is_one in multiplication methods when used for optimizations
      • Should test if that actually speeds it up
    • Eg value 1.00000000000000000000000000000000000000000 is stored internally as [4870020673419870208, 16114848830623546549, 293] E -41 and it's hard to tell this is equivalent to 1
  • Add optimizations to inverse

    • small powers of ten will simply flip their scale 1/10e-5 -> 10e5
    • convert to f64 to make initial guess when before iterative algorithm
  • Add Context::invert(&self, BigDecimalRef), equivalent to BigDecimal::inverse_with_context(&self, &ctx)

    • Still has a bug where rounding ignores sign, affecting floor/ceiling modes
Commits
  • 51a1fba v0.4.9
  • deff059 Version 0.4.9
  • bdab3a7 Remove blanket allow(dead_code)
  • f2cf07d Merge implementation of powi into trunk
  • 9694c91 Add more pow test cases
  • a69eabe Clear tmp vector after use in DigitVec::from_biguint_using_tmp
  • a1237bd Invert before calling pow_u64
  • 372c094 Add new_truncating constructor for Context
  • f9e8435 Split BigDecimalRef conversions into separate function for multiply_decimal_w...
  • 555c6f3 Add function get_power_of_ten_u64 to arithmetic::decimal
  • Additional commits viewable in compare view

Updates clap from 4.5.48 to 4.5.51

Release notes

Sourced from clap's releases.

v4.5.51

[4.5.51] - 2025-10-29

Fixes

  • (help) Correctly calculate padding for short flags that take a value
  • (help) Don't panic on short flags using ArgAction::Count

v4.5.50

[4.5.50] - 2025-10-20

Features

  • Accept Cow where String and &str are accepted
Changelog

Sourced from clap's changelog.

[4.5.51] - 2025-10-29

Fixes

  • (help) Correctly calculate padding for short flags that take a value
  • (help) Don't panic on short flags using ArgAction::Count

[4.5.50] - 2025-10-20

Features

  • Accept Cow where String and &str are accepted

[4.5.49] - 2025-10-13

Fixes

  • (help) Correctly wrap when ANSI escape codes are present
Commits
  • b49dae2 chore: Release
  • d37b0b5 docs: Update changelog
  • 3398b6a Merge pull request #6009 from gtema/complete_try_generate
  • 21fc9e4 feat(clap-complete): Introduce fallible generator
  • bd01bdc Merge pull request #6012 from epage/sub
  • ed0c63d docs(derive): Specify arg_required_else_help is set for users
  • e2188d9 chore(deps): Update Rust Stable to v1.87 (#6004)
  • e01f2b7 docs: Cleanup unused links
  • 6b12a81 chore: Release
  • 8dd92a7 docs: Update changelog
  • Additional commits viewable in compare view

Updates getrandom from 0.3.3 to 0.3.4

Release notes

Sourced from getrandom's releases.

getrandom v0.3.4

Major change to wasm_js backend

Now, when the wasm_js feature is enabled, the wasm_js backend will be used by default. Users of wasm32-unknown-unknown targeting JavaScript environments like the Web and Node.js will no longer need to specify:

--cfg getrandom_backend="wasm_js"

in RUSTFLAGS for the crate to compile. They can now simple enable a feature.

Note: this should not affect non-JS users of the wasm32-unknown-unknown target. Using --cfg getrandom_backend will still override the source of randomness even if the wasm_js feature is enabled. This includes --cfg getrandom_backend=custom and --cfg getrandom_backend=unsupported.

For more information, see the discussions in #671, #675, and #730.

Added

  • unsupported opt-in backend #667
  • windows_legacy opt-in backend #724

Changed

  • Implement Memory Sanitizer unpoisoning more precisely #678
  • Relax MSRV for the linux_raw opt-in backend on ARM targets #688
  • Use getrandom syscall on all RISC-V Linux targets #699
  • Replaced wasi dependency with wasip2 #721
  • Enable wasm_js backend by default if the wasm_js feature is enabled #730

Removed

  • Unstable rustc-dep-of-std crate feature #694

#667: rust-random/getrandom#667 #671: rust-random/getrandom#671 #675: rust-random/getrandom#675 #678: rust-random/getrandom#678 #688: rust-random/getrandom#688 #694: rust-random/getrandom#694 #699: rust-random/getrandom#699 #721: rust-random/getrandom#721 #724: rust-random/getrandom#724 #730: rust-random/getrandom#730

Changelog

Sourced from getrandom's changelog.

[0.3.4] - 2025-10-14

Major change to wasm_js backend

Now, when the wasm_js feature is enabled, the wasm_js backend will be used by default. Users of wasm32-unknown-unknown targeting JavaScript environments like the Web and Node.js will no longer need to specify:

--cfg getrandom_backend="wasm_js"

in RUSTFLAGS for the crate to compile. They can now simple enable a feature.

Note: this should not affect non-JS users of the wasm32-unknown-unknown target. Using --cfg getrandom_backend will still override the source of randomness even if the wasm_js feature is enabled. This includes --cfg getrandom_backend=custom and --cfg getrandom_backend=unsupported.

For more information, see the discussions in #671, #675, and #730.

Added

  • unsupported opt-in backend #667
  • windows_legacy opt-in backend #724

Changed

  • Implement Memory Sanitizer unpoisoning more precisely #678
  • Relax MSRV for the linux_raw opt-in backend on ARM targets #688
  • Use getrandom syscall on all RISC-V Linux targets #699
  • Replaced wasi dependency with wasip2 #721
  • Enable wasm_js backend by default if the wasm_js feature is enabled #730

Removed

  • Unstable rustc-dep-of-std crate feature #694

#667: rust-random/getrandom#667 #671: rust-random/getrandom#671 #675: rust-random/getrandom#675 #678: rust-random/getrandom#678 #688: rust-random/getrandom#688 #694: rust-random/getrandom#694 #699: rust-random/getrandom#699 #721: rust-random/getrandom#721 #724: rust-random/getrandom#724 #730: rust-random/getrandom#730

Commits

Updates reqwest from 0.12.23 to 0.12.24

Release notes

Sourced from reqwest's releases.

v0.12.24

Highlights

  • Refactor cookie handling to an internal middleware.
  • Refactor internal random generator.
  • Refactor base64 encoding to reduce a copy.
  • Documentation updates.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.12.23...v0.12.24

Changelog

Sourced from reqwest's changelog.

v0.12.24

  • Refactor cookie handling to an internal middleware.
  • Refactor internal random generator.
  • Refactor base64 encoding to reduce a copy.
  • Documentation updates.
Commits
  • b126ca4 v0.12.24
  • 4023493 refactor: change fast_random from xorshift to siphash a counter
  • fd61bc9 refactor(cookie): avoid duplicate cookie insertion (#2834)
  • 0bfa526 test(multipart): fix build failure with no-default-features (#2801)
  • 994b8a0 docs: typo in retry max_retries_per_request (#2824)
  • da0702b refactor(cookie): de-duplicate cookie support as CookieService middleware (...
  • 7ebddea chore: align internal name usage of TotalTimeout (#2657)
  • b540a4e chore(readme): use correct CI status badge
  • e4550c4 docs: fix method name in changelog entry (#2807)
  • f4694a2 perf(util): avoid extra copy when base64 encoding (#2805)
  • Additional commits viewable in compare view

Updates proc-macro2 from 1.0.101 to 1.0.103

Release notes

Sourced from proc-macro2's releases.

1.0.103

  • Add semver-exempt Literal methods str_value, cstr_value, byte_str_value (#525)

1.0.102

  • Fix interaction of Display impls for TokenStream and Ident with formatting specifiers for padding, alignment, width (#523, #524)
Commits
  • d1bf13a Release 1.0.103
  • 29e08c0 Merge pull request #525 from dtolnay/literalvalue
  • f9eec24 Restore support for rustc older than 1.74
  • cc983fc Restore support for rustc older than 1.79
  • 465f781 Restore support for rustc older than 1.89
  • ab5231c Add string literal value tests
  • 4c039a8 Add Literal methods from proc_macro_value feature
  • 885fde9 Vendor rustc_literal_escaper v0.0.5
  • 39b016a Release 1.0.102
  • c3870f1 Add raw identifier Debug test
  • Additional commits viewable in compare view

Updates quote from 1.0.41 to 1.0.42

Release notes

Sourced from quote's releases.

1.0.42

Commits
  • bb9e7a4 Release 1.0.42
  • 683c1d6 Merge pull request #311 from dtolnay/append
  • ed93e8e Revert PR 305
  • 1f2a959 Merge pull request #310 from dtolnay/up
  • 37448aa Raise required compiler to Rust 1.68
  • 39ac89e Resolve manual_let_else pedantic clippy lint
  • f3eac36 Raise required compiler to Rust 1.65
  • 7b490c5 Merge pull request #309 from dtolnay/append
  • 71dfa84 Apply pattern from PR 306 to append_separated & append_terminated
  • df32af7 Touch up PR 306
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bigdecimal](https://github.com/akubera/bigdecimal-rs) | `0.4.8` | `0.4.9` |
| [clap](https://github.com/clap-rs/clap) | `4.5.48` | `4.5.51` |
| [getrandom](https://github.com/rust-random/getrandom) | `0.3.3` | `0.3.4` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.23` | `0.12.24` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.101` | `1.0.103` |
| [quote](https://github.com/dtolnay/quote) | `1.0.41` | `1.0.42` |



Updates `bigdecimal` from 0.4.8 to 0.4.9
- [Release notes](https://github.com/akubera/bigdecimal-rs/releases)
- [Commits](akubera/bigdecimal-rs@v0.4.8...v0.4.9)

Updates `clap` from 4.5.48 to 4.5.51
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.48...clap_complete-v4.5.51)

Updates `getrandom` from 0.3.3 to 0.3.4
- [Release notes](https://github.com/rust-random/getrandom/releases)
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](rust-random/getrandom@v0.3.3...v0.3.4)

Updates `reqwest` from 0.12.23 to 0.12.24
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.23...v0.12.24)

Updates `proc-macro2` from 1.0.101 to 1.0.103
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.101...1.0.103)

Updates `quote` from 1.0.41 to 1.0.42
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.41...1.0.42)

---
updated-dependencies:
- dependency-name: bigdecimal
  dependency-version: 0.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: clap
  dependency-version: 4.5.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: getrandom
  dependency-version: 0.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: reqwest
  dependency-version: 0.12.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: proc-macro2
  dependency-version: 1.0.103
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: quote
  dependency-version: 1.0.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Nov 6, 2025
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Nov 6, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 6, 2025

Superseded by #867.

@dependabot dependabot bot closed this Nov 6, 2025
@dependabot dependabot bot deleted the dependabot/cargo/patch-9194c37308 branch November 6, 2025 19:20
@codecov
Copy link

codecov bot commented Nov 6, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 46.95%. Comparing base (ece209e) to head (51823c6).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #866   +/-   ##
=======================================
  Coverage   46.95%   46.95%           
=======================================
  Files          34       34           
  Lines        9582     9582           
=======================================
  Hits         4499     4499           
  Misses       5083     5083           
Flag Coverage Δ
unittests 46.95% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant