Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 5, 2026

Bumps the minor group with 8 updates in the / directory:

Package From To
tokio 1.48.0 1.49.0
tokio-stream 0.1.17 0.1.18
tokio-util 0.7.17 0.7.18
spider 2.38.110 2.38.116
lancedb 0.23.0 0.23.1
fastembed 5.5.0 5.6.0
syn 2.0.111 2.0.113
insta 1.45.1 1.46.0

Updates tokio from 1.48.0 to 1.49.0

Release notes

Sourced from tokio's releases.

Tokio v1.49.0

1.49.0 (January 3rd, 2026)

Added

  • net: add support for TCLASS option on IPv6 (#7781)
  • runtime: stabilize runtime::id::Id (#7125)
  • task: implement Extend for JoinSet (#7195)
  • task: stabilize the LocalSet::id() (#7776)

Changed

  • net: deprecate {TcpStream,TcpSocket}::set_linger (#7752)

Fixed

  • macros: fix the hygiene issue of join! and try_join! (#7766)
  • runtime: revert "replace manual vtable definitions with Wake" (#7699)
  • sync: return TryRecvError::Disconnected from Receiver::try_recv after Receiver::close (#7686)
  • task: remove unnecessary trait bounds on the Debug implementation (#7720)

Unstable

  • fs: handle EINTR in fs::write for io-uring (#7786)
  • fs: support io-uring with tokio::fs::read (#7696)
  • runtime: disable io-uring on EPERM (#7724)
  • time: add alternative timer for better multicore scalability (#7467)

Documented

  • docs: fix a typos in bounded.rs and park.rs (#7817)
  • io: add SyncIoBridge cross-references to copy and copy_buf (#7798)
  • io: doc that AsyncWrite does not inherit from std::io::Write (#7705)
  • metrics: clarify that num_alive_tasks is not strongly consistent (#7614)
  • net: clarify the cancellation safety of the TcpStream::peek (#7305)
  • net: clarify the drop behavior of unix::OwnedWriteHalf (#7742)
  • net: clarify the platform-dependent backlog in TcpSocket docs (#7738)
  • runtime: mention LocalRuntime in new_current_thread docs (#7820)
  • sync: add missing period to mpsc::Sender::try_send docs (#7721)
  • sync: clarify the cancellation safety of oneshot::Receiver (#7780)
  • sync: improve the docs for the errors of mpsc (#7722)
  • task: add example for spawn_local usage on local runtime (#7689)

#7125: tokio-rs/tokio#7125 #7195: tokio-rs/tokio#7195 #7305: tokio-rs/tokio#7305 #7467: tokio-rs/tokio#7467 #7614: tokio-rs/tokio#7614 #7686: tokio-rs/tokio#7686 #7689: tokio-rs/tokio#7689

... (truncated)

Commits

Updates tokio-stream from 0.1.17 to 0.1.18

Commits

Updates tokio-util from 0.7.17 to 0.7.18

Commits

Updates spider from 2.38.110 to 2.38.116

Release notes

Sourced from spider's releases.

v2.38.114

What's Changed

New Contributors

Full Changelog: spider-rs/spider@v2.38.109...v2.38.114

Commits

Updates lancedb from 0.23.0 to 0.23.1

Release notes

Sourced from lancedb's releases.

Node/Rust LanceDB v0.23.1

🐛 Bug Fixes

📚 Documentation

Python LanceDB v0.23.1-beta.2

🐛 Bug Fixes

🔧 Build and CI

Python LanceDB v0.23.1-beta.1

🔧 Build and CI

Node/Rust LanceDB v0.23.1-beta.1

🐛 Bug Fixes

Python LanceDB v0.23.1-beta.0

🎉 New Features

🔧 Build and CI

Node/Rust LanceDB v0.23.1-beta.0

🐛 Bug Fixes

Commits
  • e8feaed Bump version: 0.23.1-beta.2 → 0.23.1
  • e496184 Bump version: 0.23.1-beta.1 → 0.23.1-beta.2
  • d85d338 Bump version: 0.26.1-beta.2 → 0.26.1
  • f032072 Bump version: 0.26.1-beta.1 → 0.26.1-beta.2
  • dfbd355 feat: update lance dependency to v1.0.1 (#2881)
  • 1cf7b4b docs: remove incorrect "LanceDb Cloud only" from table_names params (#2893)
  • 8ae4f42 fix: add to_lance() and to_polars() stub methods for type-checkers (#2876)
  • 0667fa3 Bump version: 0.23.1-beta.0 → 0.23.1-beta.1
  • 30108c0 Bump version: 0.26.1-beta.0 → 0.26.1-beta.1
  • 1628f7e fix: pass namespace storage options provider into native table (#2873)
  • Additional commits viewable in compare view

Updates fastembed from 5.5.0 to 5.6.0

Release notes

Sourced from fastembed's releases.

v5.6.0

5.6.0 (2026-01-02)

🍕 Features

  • Added BAAI/bge-m3 for dense embeddings (#212) (dc378b6)
  • Added BAAI/bge-m3 For sparse embeddings (#213) (d90ed0c)
Commits

Updates syn from 2.0.111 to 2.0.113

Release notes

Sourced from syn's releases.

2.0.113

  • Allow parsing TypeParam with colon not followed by any type param bounds (#1953, thanks @​wyfo)

2.0.112

Commits
  • 8cfa32a Release 2.0.113
  • d5e19ff Do PR 1953 also for LifetimeParam
  • 3fe4dc6 Merge pull request #1953 from wyfo/fix/type-param-colon-no-bounds
  • 31508f3 Fix TypeParam expecting identifier after colon
  • 1534d3a Update reqwest dev-dependency to 0.13
  • f8f2a42 Release 2.0.112
  • ca22ce0 Merge pull request #1951 from VictorArcium/vt/fix-lit-byte
  • 0c4bea1 Fix LitByte::new().
  • 7e38d5d Disable test_parse_buffer.test_unwind_safe under Miri
  • f987b14 Update actions/upload-artifact@v5 -> v6
  • Additional commits viewable in compare view

Updates insta from 1.45.1 to 1.46.0

Release notes

Sourced from insta's releases.

1.46.0

Release Notes

  • Add INSTA_PENDING_DIR environment variable for Bazel and other hermetic build systems. When set, pending snapshots are written to a separate directory while keeping the source tree read-only. We are very open to feedback on this feature. #852
  • Fix documentation for test.runner_fallback config key. #853

Install cargo-insta 1.46.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.46.0/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.46.0/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.46.0

File Platform Checksum
cargo-insta-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
cargo-insta-x86_64-apple-darwin.tar.xz Intel macOS checksum
cargo-insta-x86_64-pc-windows-msvc.zip x64 Windows checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum
Changelog

Sourced from insta's changelog.

1.46.0

  • Add INSTA_PENDING_DIR environment variable for Bazel and other hermetic build systems. When set, pending snapshots are written to a separate directory while keeping the source tree read-only. We are very open to feedback on this feature. #852
  • Fix documentation for test.runner_fallback config key. #853
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.49.0` |
| [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.17` | `0.1.18` |
| [tokio-util](https://github.com/tokio-rs/tokio) | `0.7.17` | `0.7.18` |
| [spider](https://github.com/spider-rs/spider) | `2.38.110` | `2.38.116` |
| [lancedb](https://github.com/lancedb/lancedb) | `0.23.0` | `0.23.1` |
| [fastembed](https://github.com/Anush008/fastembed-rs) | `5.5.0` | `5.6.0` |
| [syn](https://github.com/dtolnay/syn) | `2.0.111` | `2.0.113` |
| [insta](https://github.com/mitsuhiko/insta) | `1.45.1` | `1.46.0` |



Updates `tokio` from 1.48.0 to 1.49.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.49.0)

Updates `tokio-stream` from 0.1.17 to 0.1.18
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-stream-0.1.17...tokio-stream-0.1.18)

Updates `tokio-util` from 0.7.17 to 0.7.18
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-util-0.7.17...tokio-util-0.7.18)

Updates `spider` from 2.38.110 to 2.38.116
- [Release notes](https://github.com/spider-rs/spider/releases)
- [Changelog](https://github.com/spider-rs/spider/blob/main/CHANGELOG.md)
- [Commits](https://github.com/spider-rs/spider/commits)

Updates `lancedb` from 0.23.0 to 0.23.1
- [Release notes](https://github.com/lancedb/lancedb/releases)
- [Changelog](https://github.com/lancedb/lancedb/blob/main/release_process.md)
- [Commits](lancedb/lancedb@v0.23.0...v0.23.1)

Updates `fastembed` from 5.5.0 to 5.6.0
- [Release notes](https://github.com/Anush008/fastembed-rs/releases)
- [Commits](Anush008/fastembed-rs@v5.5.0...v5.6.0)

Updates `syn` from 2.0.111 to 2.0.113
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.111...2.0.113)

Updates `insta` from 1.45.1 to 1.46.0
- [Release notes](https://github.com/mitsuhiko/insta/releases)
- [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md)
- [Commits](mitsuhiko/insta@1.45.1...1.46.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: tokio-stream
  dependency-version: 0.1.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: tokio-util
  dependency-version: 0.7.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: spider
  dependency-version: 2.38.116
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: lancedb
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: fastembed
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: syn
  dependency-version: 2.0.113
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: insta
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 5, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 6, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 6, 2026
@dependabot dependabot bot deleted the dependabot/cargo/minor-070a5a5181 branch January 6, 2026 06:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants