chore(deps): Bump the rust-minor group with 7 updates by dependabot[bot] · Pull Request #20 · mrbandler/flow

dependabot · 2026-04-27T08:25:04Z

Bumps the rust-minor group with 7 updates:

Package	From	To
tokio	`1.49.0`	`1.52.1`
clap	`4.5.54`	`4.5.60`
thiserror	`2.0.17`	`2.0.18`
inquire	`0.9.2`	`0.9.4`
console	`0.16.2`	`0.16.3`
loro	`1.10.3`	`1.12.0`
cross-xdg	`2.1.0`	`2.1.1`

Updates tokio from 1.49.0 to 1.52.1

Release notes

Sourced from tokio's releases.

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

io: AioSource::register_borrowed for I/O safety support (#7992)

net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)

taskdump: add trace_with() for customized task dumps (#8025)

taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)

fs: support io_uring in AsyncRead for File (#7907)

Changed

runtime: improve spawn_blocking scalability with sharded queue (#7757)

runtime: use compare_exchange_weak() in worker queue (#8028)

Fixed

runtime: overflow second half of tasks when local queue is filled instead of first half (#8029)

Documented

docs: fix typo in oneshot::Sender::send docs (#8026)

docs: hide #[tokio::main] attribute in the docs of sync::watch (#8035)

net: add docs on ConnectionRefused errors with UDP sockets (#7870)

#7757: tokio-rs/tokio#7757 #7870: tokio-rs/tokio#7870 #7907: tokio-rs/tokio#7907 #7992: tokio-rs/tokio#7992 #8010: tokio-rs/tokio#8010 #8025: tokio-rs/tokio#8025 #8026: tokio-rs/tokio#8026 #8028: tokio-rs/tokio#8028 #8029: tokio-rs/tokio#8029

... (truncated)

Commits

905c146 chore: prepare to release v1.52.1 (#8059)
56aaa43 rt: revert #7757 to fix regression in spawn_blocking (#8057)
57ff47a ci: update trybuild to expect output from rustc 1.95.0 (#8058)
812de3e ci: bump taiki-e/cache-cargo-install-action from 1 to 3 (#8053)
ba82e73 ci: use Dependabot to keep github actions up to date (#8052)
2e85f9d ci: replace cirrus-ci with freebsd-vm (#8041)
a7e1cd8 ci: update GitHub Actions workflows to use latest tool versions (#8047)
5f7be0a chore: perpare 1.52.0 (#8045)
36d12d2 taskdump: allow impl FnMut() in taskdumps instead of just fn() (#8040)
f943312 fs: support io-uring in AsyncRead for File (#7907)
Additional commits viewable in compare view

Updates clap from 4.5.54 to 4.5.60

Release notes

Sourced from clap's releases.

v4.5.60

[4.5.60] - 2026-02-19

Fixes

(help) Quote empty default values, possible values

v4.5.59

[4.5.59] - 2026-02-16

Fixes

Command::ignore_errors no longer masks help/version on subcommands

v4.5.58

[4.5.58] - 2026-02-11

v4.5.57

[4.5.57] - 2026-02-03

Fixes

Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

v4.5.56

[4.5.56] - 2026-01-29

Fixes

On conflict error, don't show conflicting arguments in the usage

v4.5.55

[4.5.55] - 2026-01-27

Fixes

Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

Changelog

Sourced from clap's changelog.

[4.5.60] - 2026-02-19

Fixes

(help) Quote empty default values, possible values

[4.5.59] - 2026-02-16

Fixes

Command::ignore_errors no longer masks help/version on subcommands

[4.5.58] - 2026-02-11

[4.5.57] - 2026-02-03

Fixes

Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

[4.5.56] - 2026-01-29

Fixes

On conflict error, don't show conflicting arguments in the usage

[4.5.55] - 2026-01-27

Fixes

Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

Commits

33d24d8 chore: Release
9332409 docs: Update changelog
b7adce5 Merge pull request #6166 from fabalchemy/fix-dynamic-powershell-completion
009bba4 fix(clap_complete): Improve powershell registration
d89d57d chore: Release
f18b67e docs: Update changelog
9d218eb Merge pull request #6165 from epage/shirt
126440c fix(help): Correctly calculate padding for short-only args
9e3c05e test(help): Show panic with short, valueless arg
c9898d0 test(help): Verify short with value
Additional commits viewable in compare view

Updates thiserror from 2.0.17 to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

Make compatible with project-level needless_lifetimes = "forbid" (#443, thanks @LucaCappelletti94)

Commits

dc0f6a2 Release 2.0.18
0275292 Touch up PR 443
3c33bc6 Merge pull request #443 from LucaCappelletti94/master
995939c Reproduce issue 442
21653d1 Made clippy lifetime allows conditional
45e5388 Update actions/upload-artifact@v5 -> v6
386aac1 Update actions/upload-artifact@v4 -> v5
ec50561 Update actions/checkout@v5 -> v6
247eab5 Update name of empty_enum clippy lint
91b181f Raise required compiler to Rust 1.68
Additional commits viewable in compare view

Updates inquire from 0.9.2 to 0.9.4

Release notes

Sourced from inquire's releases.

v0.9.4

Features

Experimental: Added multi-line input support for Password and Text prompts via Alt+Enter. Enable the experimental-multiline-input feature to use it. It is only supported when using crossterm (default) as the terminal back-end. Thanks @domenkozar!

v0.9.3

Features

Added new_line_prefix option to RenderConfig, allowing a styled prefix to be displayed at the beginning of every new line.

Added answer_from_new_line option to RenderConfig, allowing the submitted answer to be rendered on a new line below the prompt.

Added unhighlighted_option_prefix option to RenderConfig, allowing customization of the prefix for non-highlighted options in Select and MultiSelect prompts.

Thanks @frol for the contribution!

Changelog

Sourced from inquire's changelog.

[0.9.4] - 2026-02-24

Features

Experimental: Added multi-line input support for Password and Text prompts via Alt+Enter. Enable the experimental-multiline-input feature to use it. It is only supported when using crossterm (default) as the terminal back-end.

[0.9.3] - 2026-02-06

Features

Added new_line_prefix option to RenderConfig, allowing a styled prefix to be displayed at the beginning of every new line.

Added answer_from_new_line option to RenderConfig, allowing the submitted answer to be rendered on a new line below the prompt.

Added unhighlighted_option_prefix option to RenderConfig, allowing customization of the prefix for non-highlighted options in Select and MultiSelect prompts.

Commits

3d5b654 chore: release v0.9.4
8fb244a Put multiline support behind feature
1bc2160 feat: Add multi-line input support for Password and Text prompts (#330)
59d1b21 chore: release v0.9.3
d37900b Fix multi-line answer rendering and add tests for new RenderConfig options
6bac8a9 feat: Added styling options for "newline", "option selection" and "answer" (#...
See full diff in compare view

Updates console from 0.16.2 to 0.16.3

Release notes

Sourced from console's releases.

0.16.3

What's Changed

Use std::sync::OnceLock instead of once_cell by @cuviper in console-rs/console#281

Bump version to 0.16.3 by @cuviper in console-rs/console#282

Commits

70ea3d0 Bump version to 0.16.3
6bd8894 Remove make msrv-lock
499e5f6 Use std::sync::OnceLock instead of once_cell
See full diff in compare view

Updates loro from 1.10.3 to 1.12.0

Release notes

Sourced from loro's releases.

loro-crdt-map@1.12.0

Minor Changes

7dfda87: Make update imports atomic across oplog and document state application.

import and import_json_updates now roll back imported oplog changes when state application fails, so malformed updates do not leave the document with oplog/state divergence.

Pending changes that are activated during import are included in the rollback boundary when they can affect state application.

Import rollback uses conditional guards to avoid adding fixed overhead to successful detached or no-op imports.

Patch Changes

64aa97c: Harden encoding, snapshot, and import paths against malformed input

JSON schema import (import_json_updates): out-of-range compressed peer indices now return DecodeError instead of being silently accepted as raw peer IDs; mismatched JsonOpContent vs container type returns DecodeError instead of panicking.

Outdated binary encoding decoder (decode_op): malformed op streams (missing delete iterators, type mismatches) now return DecodeDataCorruptionError instead of panicking.

Fast snapshot decoder (decode_snapshot_blob_meta): truncated or oversized section lengths now return DecodeDataCorruptionError instead of panicking on slice indexing.

Change store KV import (import_all): corrupted VersionVector/Frontiers metadata now returns DecodeDataCorruptionError instead of panicking.

Value encoding (LoroValueKind::from_u8, read_str): invalid byte values and invalid UTF-8 now return DecodeDataCorruptionError instead of panicking.

LoroDoc::diff(): checkout failures during diff calculation are now propagated as LoroError instead of panicking; state restore uses unwrap() to fail-fast on internal errors.

try_get_text/list/map/tree/movable_list/counter: now return None for wrong root container types instead of panicking.

Detached list insert out-of-bounds: returns LoroError::OutOfBound instead of panicking.

Tree mov_after/mov_before on deleted node: returns TreeNodeDeletedOrNotExist instead of panicking.

JsonChange::op_len: empty ops array returns 0 instead of panicking.

renew_peer_id: avoids theoretical collision with PeerID::MAX.

0977ad1: Fix lock-order panics when JavaScript callbacks re-enter Loro APIs.

opCount() no longer reacquires the OpLog lock while the current thread already holds a higher-order lock.

LoroText.iter() snapshots text chunks before invoking the user callback, so callback code can safely read or mutate the document.

ef100e6: Reduce memory spikes when exporting snapshots from shallow documents.

When a shallow document is re-exported from its existing shallow root with only a small tail of updates, Loro now reuses the stored shallow-root state instead of decoding all containers just to re-encode the same state.

933d5d6: feat: add clearRedo and clearUndo methods #921

17dc6c0: Fix several edge-case contract violations in document, text, and JSONPath APIs.

JSONPath value(...) comparisons now handle boolean values consistently with other scalar comparisons.

Rich text mark expansion now follows ExpandType::Before and ExpandType::Both at documented insertion boundaries.

Text delta slicing now validates invalid ranges and UTF-8/UTF-16 boundaries before slicing, and public deltas omit removed-style tombstones after unmarking.

Detached list and movable-list out-of-bounds operations now return LoroError::OutOfBound instead of panicking.

loro-crdt@1.12.0

Minor Changes

7dfda87: Make update imports atomic across oplog and document state application.

import and import_json_updates now roll back imported oplog changes when state application fails, so malformed updates do not leave the document with oplog/state divergence.

... (truncated)

Commits

f0cd98e chore: bump version to 1.12.0
f9e504d chore: version packages
933d5d6 chore: changeset
b61811b feat(undo): add clearRedo and clearUndo methods (#921)
ef100e6 fix: reuse shallow root state when exporting snapshots (#963)
74400e0 fix: harden LoroDoc import decoding (#960)
1ae8e74 feat: add user-focused Loro skill (#961)
d28f6b3 fix: limit ephemeral value decode depth (#962)
0977ad1 fix: avoid len_ops lock-order reentry (#958)
7dfda87 fix: make update imports atomic with conditional rollback (#952)
Additional commits viewable in compare view

Updates cross-xdg from 2.1.0 to 2.1.1

Release notes

Sourced from cross-xdg's releases.

v2.1.1

Other

update dependencies

release v2.1.0 (#8)

Changelog

Sourced from cross-xdg's changelog.

2.1.1 - 2026-04-25

Other

update dependencies

release v2.1.0 (#8)

Commits

1a5250d chore: release v2.1.1
4b9a571 chore: update dependencies
509e80c chore: release v2.1.0 (#8)
d156dc0 ci: Remove publish.sh script (#7)
0ac3af7 ci: Remove publish.sh script
1a8010a fix: use release-plz token (#5)
89ff876 fix: use release-plz token
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-minor group with 7 updates: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.52.1` | | [clap](https://github.com/clap-rs/clap) | `4.5.54` | `4.5.60` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.17` | `2.0.18` | | [inquire](https://github.com/mikaelmello/inquire) | `0.9.2` | `0.9.4` | | [console](https://github.com/console-rs/console) | `0.16.2` | `0.16.3` | | [loro](https://github.com/loro-dev/loro) | `1.10.3` | `1.12.0` | | [cross-xdg](https://github.com/secana/cross-xdg) | `2.1.0` | `2.1.1` | Updates `tokio` from 1.49.0 to 1.52.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.52.1) Updates `clap` from 4.5.54 to 4.5.60 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.54...clap_complete-v4.5.60) Updates `thiserror` from 2.0.17 to 2.0.18 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.17...2.0.18) Updates `inquire` from 0.9.2 to 0.9.4 - [Release notes](https://github.com/mikaelmello/inquire/releases) - [Changelog](https://github.com/mikaelmello/inquire/blob/main/CHANGELOG.md) - [Commits](mikaelmello/inquire@v0.9.2...v0.9.4) Updates `console` from 0.16.2 to 0.16.3 - [Release notes](https://github.com/console-rs/console/releases) - [Changelog](https://github.com/console-rs/console/blob/main/CHANGELOG.md) - [Commits](console-rs/console@0.16.2...0.16.3) Updates `loro` from 1.10.3 to 1.12.0 - [Release notes](https://github.com/loro-dev/loro/releases) - [Commits](loro-dev/loro@loro-v1.10.3...loro-v1.12.0) Updates `cross-xdg` from 2.1.0 to 2.1.1 - [Release notes](https://github.com/secana/cross-xdg/releases) - [Changelog](https://github.com/secana/cross-xdg/blob/main/CHANGELOG.md) - [Commits](secana/cross-xdg@v2.1.0...v2.1.1) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.52.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor - dependency-name: clap dependency-version: 4.5.60 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: thiserror dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: inquire dependency-version: 0.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: console dependency-version: 0.16.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: loro dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-minor - dependency-name: cross-xdg dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies rust labels Apr 27, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump the rust-minor group with 7 updates#20

chore(deps): Bump the rust-minor group with 7 updates#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-minor-6f5879a268

dependabot Bot commented on behalf of github Apr 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 27, 2026

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

Added (unstable)

Changed

Fixed

Documented

v4.5.60

[4.5.60] - 2026-02-19

Fixes

v4.5.59

[4.5.59] - 2026-02-16

Fixes

v4.5.58

[4.5.58] - 2026-02-11

v4.5.57

[4.5.57] - 2026-02-03

Fixes

v4.5.56

[4.5.56] - 2026-01-29

Fixes

v4.5.55

[4.5.55] - 2026-01-27

Fixes

[4.5.60] - 2026-02-19

Fixes

[4.5.59] - 2026-02-16

Fixes

[4.5.58] - 2026-02-11

[4.5.57] - 2026-02-03

Fixes

[4.5.56] - 2026-01-29

Fixes

[4.5.55] - 2026-01-27

Fixes

2.0.18

v0.9.4

Features

v0.9.3

Features

[0.9.4] - 2026-02-24

Features

[0.9.3] - 2026-02-06

Features

0.16.3

What's Changed

loro-crdt-map@1.12.0

Minor Changes

Patch Changes

loro-crdt@1.12.0

Minor Changes

v2.1.1

Other

2.1.1 - 2026-04-25

Other

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants