Skip to content

Bump the cargo group with 6 updates - #8

Merged
john-athan merged 1 commit into
mainfrom
dependabot/cargo/cargo-361d93ddbc
Jul 27, 2026
Merged

Bump the cargo group with 6 updates#8
john-athan merged 1 commit into
mainfrom
dependabot/cargo/cargo-361d93ddbc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 6 updates:

Package From To
serde_json 1.0.150 1.0.151
ignore 0.4.30 0.4.31
pdfium-render 0.8.37 0.9.3
duckdb 1.10504.0 1.10505.0
rusqlite 0.37.0 0.40.1
sha2 0.10.9 0.11.0

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • See full diff in compare view

Updates ignore from 0.4.30 to 0.4.31

Commits

Updates pdfium-render from 0.8.37 to 0.9.3

Commits

Updates duckdb from 1.10504.0 to 1.10505.0

Release notes

Sourced from duckdb's releases.

v1.10505.0

Highlights

  • New type support: UHUGEINT via u128 (#795), a DuckDB-native Decimal carrier covering all decimals up to DECIMAL(38, s) (#799), GEOMETRY exposed as WKB with CRS metadata (#801), Arrow arrow.uuid extension mapping to UUID (#808), and narrow Arrow Decimal32/Decimal64 (#806)
  • Nested types via Arrow: LIST, STRUCT, MAP, and fixed-size ARRAY values now round-trip through Arrow record batches, vtabs, and scalar functions, with correct timestamp unit handling (#811, #813, #819)
  • Panic containment: panics in scalar and table function callbacks become query errors instead of aborting the host process so the connection stays usable (#824)
  • Correct result metadata: schema and logical types are decoded from the executed result, fixing stale metadata when cached prepared statements outlive schema changes (#800, #803)
  • Leaner build deps: libduckdb-sys downloads now use ureq instead of reqwest, dropping the tokio/hyper stack from build dependencies (#826)
  • ⚠️ Breaking: Type, Value, and ValueRef are now #[non_exhaustive] with new UHugeInt variants (#795); Statement::step returns Result<Option<StructArray>> (#800); stream_arrow no longer takes a schema parameter and the deprecated stream_step is removed (#807)
  • Updated DuckDB to v1.5.5 (#825) and Rust to 1.97 (#812)

What's Changed

Full Changelog: duckdb/duckdb-rs@v1.10504.0...v1.10505.0

Commits
  • 88f673c Merge pull request #827 from duckdb/fix-docs
  • 33f636d Correct documentation for supported workflows
  • 3d52e19 Merge pull request #825 from duckdb/duckdb-155
  • 41dde13 cargo update
  • 6de428b Revert "Fix extension header for downloaded DuckDB libs"
  • 13821e0 Update DuckDB to v1.5.5
  • 72f615b Merge pull request #826 from duckdb/replace-reqwest-with-ureq
  • 98ce316 Replace reqwest with ureq for the libduckdb download
  • 3b33bf9 Merge pull request #824 from duckdb/native-vector-callback-containment
  • a649025 Exercise callback containment in CI
  • Additional commits viewable in compare view

Updates rusqlite from 0.37.0 to 0.40.1

Release notes

Sourced from rusqlite's releases.

0.40.1

What's Changed

  • Fix clippy warnings #1852
  • Bump bundled SQLite version to 3.53.2 #1853
  • Bump hashlink version #1855
  • Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

0.40.0

What's Changed

  • Breaking changes: Replace VTab macros by constructors #1823
  • Breaking changes: Fix VTab::best_index #1824
  • Asserts on VTab::connect aux and args #1825
  • Breaking changes: Fix VTab::connect / create #1826
  • Breaking changes: Allow opting out of using sqlite-wasm-rs on wasm32-unknown-unknown #1828, #1829
  • Derive Default for SeriesTabCursor/ArrayTabCursor #1830
  • Update link to pre-update hook #1831
  • Breaking changes: Fix VTab::connect #1832
  • impl From for FromSqlError #1833
  • Breaking changes: Fix vtab::dequote #1835
  • Bump bundled SQLCipher to version 4.14.0 #1837
  • sqlite3_set_errmsg #1752
  • Bump sqlite3-parser version #1838
  • Fix UB in ToSqlOutput::from_rc #1839
  • Ensure miri doesn't complain #1840
  • Bump to actions/checkout@v6 #1842
  • Add support to UtcDateTime #1843, #1844
  • Bump bundled SQLite version to 3.53.1 #1848
  • Replace some cfg(not by cfg_select #1850

Full Changelog: rusqlite/rusqlite@v0.39.0...v0.40.0

0.39.0

What's Changed

  • Fix constraints on VTab Aux data #1778, #1771
  • Fix docs.rs generation #1779
  • Fix a small typo in rollback_hook docstring #1780
  • Fix some warnings from Intellij #1781
  • Minimal doc for features #1783
  • Clear hooks only for owning connections #1785, #1784
  • Fix link to SQLite C Interface, Prepare Flags #1787
  • Comment functions which are not usable from a loadable extension #1789
  • Factorize code #1792
  • Update getrandom to 0.4 #1798
  • Update Cargo.toml #1800
  • Fix appveyor #1807
  • Add support to unix timestamp for chrono, jiff and time #1808, #1803
  • fix(trace): check that the sql string pointer is not NULL #1805
  • Bump bundled SQLite version to 3.51.3 #1818

... (truncated)

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` |
| [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.30` | `0.4.31` |
| [pdfium-render](https://github.com/ajrcarey/pdfium-render) | `0.8.37` | `0.9.3` |
| [duckdb](https://github.com/duckdb/duckdb-rs) | `1.10504.0` | `1.10505.0` |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.37.0` | `0.40.1` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |


Updates `serde_json` from 1.0.150 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.150...v1.0.151)

Updates `ignore` from 0.4.30 to 0.4.31
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@ignore-0.4.30...ignore-0.4.31)

Updates `pdfium-render` from 0.8.37 to 0.9.3
- [Commits](https://github.com/ajrcarey/pdfium-render/commits)

Updates `duckdb` from 1.10504.0 to 1.10505.0
- [Release notes](https://github.com/duckdb/duckdb-rs/releases)
- [Commits](duckdb/duckdb-rs@v1.10504.0...v1.10505.0)

Updates `rusqlite` from 0.37.0 to 0.40.1
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.37.0...v0.40.1)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: ignore
  dependency-version: 0.4.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: pdfium-render
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: duckdb
  dependency-version: 1.10505.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rusqlite
  dependency-version: 0.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 27, 2026
@john-athan
john-athan merged commit 9389856 into main Jul 27, 2026
1 of 2 checks passed
@john-athan
john-athan deleted the dependabot/cargo/cargo-361d93ddbc branch July 27, 2026 05:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant