Skip to content

chore(deps): bump the rust-dependencies group with 2 updates#243

Merged
domcyrus merged 1 commit intomainfrom
dependabot/cargo/rust-dependencies-c148ea9ad9
May 1, 2026
Merged

chore(deps): bump the rust-dependencies group with 2 updates#243
domcyrus merged 1 commit intomainfrom
dependabot/cargo/rust-dependencies-c148ea9ad9

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps the rust-dependencies group with 2 updates: maxminddb and clap_complete.

Updates maxminddb from 0.28.0 to 0.28.1

Release notes

Sourced from maxminddb's releases.

0.28.1

  • Fixed: Databases with an impossible declared search tree size are now rejected during open/verify instead of causing runaway allocation during validation.
  • Fixed: within() now rejects IPv6 CIDRs on IPv4-only databases instead of yielding unrelated networks.
  • Fixed: Verification now rejects truncated scalar/string payloads instead of skipping past them and reporting the database as valid.
  • Fixed: LookupResult::network() now uses the reader's measured IPv4 subtree depth instead of assuming it always begins at bit 96.
Changelog

Sourced from maxminddb's changelog.

0.28.1 - 2026-04-26

  • Fixed: Databases with an impossible declared search tree size are now rejected during open/verify instead of causing runaway allocation during validation.
  • Fixed: within() now rejects IPv6 CIDRs on IPv4-only databases instead of yielding unrelated networks.
  • Fixed: Verification now rejects truncated scalar/string payloads instead of skipping past them and reporting the database as valid.
  • Fixed: LookupResult::network() now uses the reader's measured IPv4 subtree depth instead of assuming it always begins at bit 96.
Commits
  • 8e86128 Prepare v0.28.1 release
  • e762e0c Set release date
  • b730a7c Merge pull request #113 from oschwald/greg/fixes
  • 3ce5264 Use actual IPv4 subtree depth for network
  • 6ce0c23 Tighten decoder verification bounds
  • 536242a Reject IPv6 CIDRs in within() with IPv4 trees
  • 6a74e9a Improve test coverage of bad-database handling
  • 1cd81bb Validate search tree layout in reader
  • df493e2 Update MaxMind-DB fixtures
  • See full diff in compare view

Updates clap_complete from 4.6.2 to 4.6.3

Commits
  • 7e0bcca chore: Release
  • 0f09905 docs: Update changelog
  • 9706951 Merge pull request #6353 from truffle-dev/feat-completer-arg-index
  • ac0d148 feat(complete): Index-aware ValueCompleter
  • 1565a3c test(complete): Cover indexed multi-value case
  • 48fc10a Merge pull request #6350 from stefankreutz/missing_docs
  • 7d4c353 docs: Hint at clippy's missing docs lint
  • f6a6701 chore(deps): Update Rust Stable to v1.95 (#6347)
  • ac5fda6 chore: Release
  • b73c627 docs: Update changelog
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 2 updates: [maxminddb](https://github.com/oschwald/maxminddb-rust) and [clap_complete](https://github.com/clap-rs/clap).


Updates `maxminddb` from 0.28.0 to 0.28.1
- [Release notes](https://github.com/oschwald/maxminddb-rust/releases)
- [Changelog](https://github.com/oschwald/maxminddb-rust/blob/main/CHANGELOG.md)
- [Commits](oschwald/maxminddb-rust@v0.28.0...v0.28.1)

Updates `clap_complete` from 4.6.2 to 4.6.3
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.2...clap_complete-v4.6.3)

---
updated-dependencies:
- dependency-name: maxminddb
  dependency-version: 0.28.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap_complete
  dependency-version: 4.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 1, 2026
@domcyrus domcyrus merged commit e3fd9ca into main May 1, 2026
17 checks passed
@dependabot dependabot Bot deleted the dependabot/cargo/rust-dependencies-c148ea9ad9 branch May 1, 2026 13:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant