Skip to content

Bump the major group with 5 updates#1272

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/major-c7650718bd
Closed

Bump the major group with 5 updates#1272
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/major-c7650718bd

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 26, 2026

Bumps the major group with 5 updates:

Package From To
async-nats 0.46.0 0.47.0
lru 0.16.3 0.17.0
sha2 0.10.9 0.11.0
scraper 0.25.0 0.26.0
shapefile 0.7.0 0.8.0

Updates async-nats from 0.46.0 to 0.47.0

Release notes

Sourced from async-nats's releases.

async-nats/v0.47.0

This release adds subject validation (with opt-out possibility) and wraps while connect attempt in timeout, making it more robust.

Added

Fixed

Changed

New Contributors

Full Changelog: nats-io/nats.rs@async-nats/v0.46.0...async-nats/v0.47.0

Commits
  • 0b4ca5e Release async-nats/v0.47.0
  • e96ec26 Fix connection_timeout to cover full NATS handshake
  • 5bd0810 Update dictionary
  • c497c39 Add respond_with_headers method to handle responses with custom headers
  • f7dcce2 Update rustls-webpki to 0.103.10
  • d595b62 Implement Clone for ConnectOptions
  • d239ec9 Add sync client deprecation version as 0.26
  • b5e31f1 Deprecate old synchronous client
  • 2f42dfb Add Subject & Header Validation
  • c51d71c Improve doc comments
  • Additional commits viewable in compare view

Updates lru from 0.16.3 to 0.17.0

Changelog

Sourced from lru's changelog.

v0.17.0 - 2026-04-14

  • Upgrade hashbrown to 0.17.0 and update MSRV to 1.85.0.

v0.16.4 - 2026-04-13

  • Add get_or_insert_with_key and variants.
Commits
  • 13321a9 Merge pull request #232 from jeromefroe/jerome/prepare-0-17-0-release
  • f7d0ece Prepare 0.17.0 release
  • 2d3d6d5 Merge pull request #231 from xtqqczze/deps/hashbrown
  • 346e2fe Bump hashbrown to 0.17.0
  • 1302b4e Update MSRV to 1.85.0
  • d8c7f5c Merge pull request #230 from jeromefroe/jerome/prepare-0-16-4-release
  • bd5261b Prepare 0.16.4 release
  • 16e161d Merge pull request #229 from pikatos/get_or_insert_with_key
  • 5135e8e Apply suggestions from code review
  • 81c2ef0 Add get_or_insert_with_key variants
  • See full diff in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates scraper from 0.25.0 to 0.26.0

Release notes

Sourced from scraper's releases.

v0.26.0

What's Changed

New Contributors

Full Changelog: rust-scraper/scraper@v0.25.0...v0.26.0

Commits
  • 170cdd3 Merge pull request #306 from rust-scraper/bump
  • bca1839 Bump html5ever from 0.38.0 to 0.39.0
  • d07444e Bump selectors from 0.35.0 to 0.36.0 (#307)
  • 637a8d3 Version 0.26.0
  • f3132d9 Bump html5ever from 0.37.1 to 0.38.0
  • ff2ea51 cargo fmt
  • 7d14577 Edition 2024
  • 60cd9e7 Merge pull request #300 from rust-scraper/upgrade-ego-tree-html5ever
  • ba8f3fc Upgrade ego-tree to 0.11.0 and html5ever to 0.37.1
  • a2cfbe4 Bump indexmap from 2.12.1 to 2.13.0
  • Additional commits viewable in compare view

Updates shapefile from 0.7.0 to 0.8.0

Changelog

Sourced from shapefile's changelog.

0.8.0

  • Added serde feature which is forwarded to dbase, enabling serde support for dbase record field types.
  • Added reading of .cpg files to detect the encoding of .dbf files.
  • Fixed overly strict size-checks for shapes; shapes with a record size larger than expected are now read successfully (extra bytes are skipped) instead of returning an error.
  • Updated geo-traits dependency to 0.3.
  • Added Polygon::try_into_geo_traits(), which converts a polygon to an object that implements geo_traits::PolygonTrait.
  • Converting to geo_types::Polygon is now fallible (i.e. TryFrom, not From).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the major group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [async-nats](https://github.com/nats-io/nats.rs) | `0.46.0` | `0.47.0` |
| [lru](https://github.com/jeromefroe/lru-rs) | `0.16.3` | `0.17.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [scraper](https://github.com/rust-scraper/scraper) | `0.25.0` | `0.26.0` |
| [shapefile](https://github.com/tmontaigu/shapefile-rs) | `0.7.0` | `0.8.0` |


Updates `async-nats` from 0.46.0 to 0.47.0
- [Release notes](https://github.com/nats-io/nats.rs/releases)
- [Commits](nats-io/nats.rs@async-nats/v0.46.0...async-nats/v0.47.0)

Updates `lru` from 0.16.3 to 0.17.0
- [Changelog](https://github.com/jeromefroe/lru-rs/blob/master/CHANGELOG.md)
- [Commits](jeromefroe/lru-rs@0.16.3...0.17.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `scraper` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/rust-scraper/scraper/releases)
- [Commits](rust-scraper/scraper@v0.25.0...v0.26.0)

Updates `shapefile` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/tmontaigu/shapefile-rs/releases)
- [Changelog](https://github.com/tmontaigu/shapefile-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tmontaigu/shapefile-rs/commits)

---
updated-dependencies:
- dependency-name: async-nats
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: lru
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: scraper
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: shapefile
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 26, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 3, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 3, 2026
@dependabot dependabot Bot deleted the dependabot/cargo/major-c7650718bd branch May 3, 2026 16:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants