Skip to content

chore(deps): bump the dependencies group with 7 updates#11

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/dependencies-f351bc15e9
Open

chore(deps): bump the dependencies group with 7 updates#11
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/dependencies-f351bc15e9

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 9, 2026 •
edited
Loading

Updates the requirements on thiserror, nalgebra, itertools, reqwest, criterion, pyo3 and numpy to permit the latest version.
Updates thiserror to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

Commits
  • dc0f6a2 Release 2.0.18
  • 0275292 Touch up PR 443
  • 3c33bc6 Merge pull request #443 from LucaCappelletti94/master
  • 995939c Reproduce issue 442
  • 21653d1 Made clippy lifetime allows conditional
  • 45e5388 Update actions/upload-artifact@v5 -> v6
  • 386aac1 Update actions/upload-artifact@v4 -> v5
  • ec50561 Update actions/checkout@v5 -> v6
  • 247eab5 Update name of empty_enum clippy lint
  • 91b181f Raise required compiler to Rust 1.68
  • Additional commits viewable in compare view

Updates nalgebra to 0.34.1

Changelog

Sourced from nalgebra's changelog.

[0.34.1] (20 Sept. 2025)

Added

  • Added encase feature, providing encase trait implementations for nalgebra types.

[0.34.0] (31 July 2025)

Added

  • Add the convert-glam030 feature to enable conversion from/to types from glam v0.30.
  • Add the defmt cargo feature that enables derives of defmt::Format for all no-std types.

Changed

  • Bumped MSRV to 1.87.0.
  • Updated rand dependency to 0.9.0.
  • Renamed associated const DimName::USIZE to DimName::DIM.
  • Moved to Rust 2024 edition.
  • Several methods are now const whenever possible. See details in #1522.
  • Features for conversion from/to types from glam (such as convert-glam029) no longer enable default features for glam, allowing use in no_std environments.

Fixed

  • Fix infinite loop when attempting to take the Schur decomposition of a 0 matrix.

[0.33.2] (29 October 2024)

Added

  • Add the convert-glam029 feature to enable conversion from/to types from glam v0.29.

[0.33.1] (16 October 2024)

Added

  • Add implementations of bytemuck traits for isometries and similarities.
  • Implement AsRef<[T]> for matrices with contiguous storage.
  • Enable the num-complex/bytemuck feature when the convert-bytemuck feature is enabled.

[0.33.0] (23 June 2024)

Fixed

  • Fix a memory leak in Matrix::generic_resize.
  • Fix glm::is_null to check the vector magnitude instead of individual components.
  • Ensure that inverting a 4x4 matrix leaves it unchanged if the inversion fails.

Added

... (truncated)

Commits

Updates itertools to 0.14.0

Changelog

Sourced from itertools's changelog.

0.14.0

Breaking

  • Increased MSRV to 1.63.0 (#960)
  • Removed generic parameter from cons_tuples (#988)

Added

  • Added array_combinations (#991)
  • Added k_smallest_relaxed and variants (#925)
  • Added next_array and collect_array (#560)
  • Implemented DoubleEndedIterator for FilterOk (#948)
  • Implemented DoubleEndedIterator for FilterMapOk (#950)

Changed

  • Allow Q: ?Sized in Itertools::contains (#971)
  • Improved hygiene of chain! (#943)
  • Improved into_group_map_by documentation (#1000)
  • Improved tree_reduce documentation (#955)
  • Improved discoverability of merge_join_by (#966)
  • Improved discoverability of take_while_inclusive (#972)
  • Improved documentation of find_or_last and find_or_first (#984)
  • Prevented exponentially large type sizes in tuple_combinations (#945)
  • Added track_caller attr for asser_equal (#976)

Notable Internal Changes

  • Fixed clippy lints (#956, #987, #1008)
  • Addressed warnings within doctests (#964)
  • CI: Run most tests with miri (#961)
  • CI: Speed up "cargo-semver-checks" action (#938)
  • Changed an instance of default_features in Cargo.toml to default-features (#985)

0.13.0

Breaking

  • Removed implementation of DoubleEndedIterator for ConsTuples (#853)
  • Made MultiProduct fused and fixed on an empty iterator (#835, #834)
  • Changed iproduct! to return tuples for maxi one iterator too (#870)
  • Changed PutBack::put_back to return the old value (#880)
  • Removed deprecated repeat_call, Itertools::{foreach, step, map_results, fold_results} (#878)
  • Removed TakeWhileInclusive::new (#912)

Added

  • Added Itertools::{smallest_by, smallest_by_key, largest, largest_by, largest_by_key} (#654, #885)
  • Added Itertools::tail (#899)
  • Implemented DoubleEndedIterator for ProcessResults (#910)
  • Implemented Debug for FormatWith (#931)
  • Added Itertools::get (#891)

Changed

  • Deprecated Itertools::group_by (renamed chunk_by) (#866, #879)

... (truncated)

Commits
  • a015a68 Add next_array and collect_array
  • a1213e1 Prepare v0.14.0 release
  • ff0c942 fix clippy lints
  • f80883b Fix into_group_map_by documentation errors
  • b793238 Add track_caller for asser_equal
  • 5d4056b default_features is deprecated - switch it to default-features
  • a447b68 doc for added trait
  • d0479b0 "nitpicks"
  • 35c78ce IndexMut -> BorrowMut<slice>
  • deb53ba refactored to share code
  • Additional commits viewable in compare view

Updates reqwest to 0.13.2

Changelog

Sourced from reqwest's changelog.

v0.13.2

  • Fix HTTP/2 and native-tls ALPN feature combinations.
  • Fix HTTP/3 to send h3 ALPN.
  • (wasm) fix RequestBuilder::json() from override previously set content-type.

v0.13.1

  • Fixes compiling with rustls on Android targets.

v0.13.0

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

  • Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

  • Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

  • Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
  • Fix sending Proxy-Authorization if only username is configured.
  • Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
  • Refactor internal decompression handling to use tower-http.

v0.12.24

  • Refactor cookie handling to an internal middleware.
  • Refactor internal random generator.
  • Refactor base64 encoding to reduce a copy.
  • Documentation updates.

... (truncated)

Commits

Updates criterion to 0.8.2

Release notes

Sourced from criterion's releases.

criterion-plot-v0.8.2

Other

  • Update Readme
Changelog

Sourced from criterion's changelog.

0.8.2 - 2026-02-04

Fixed

  • don't build alloca on unsupported targets

Other

  • (deps) bump crate-ci/typos from 1.40.0 to 1.43.0
  • Fix panic with uniform iteration durations in benchmarks
  • Update Readme
  • Exclude development scripts from published package

0.8.1 - 2025-12-07

Fixed

  • Homepage link

Other

  • (deps) bump crate-ci/typos from 1.23.5 to 1.40.0
  • (deps) bump jontze/action-mdbook from 3 to 4
  • (deps) bump actions/checkout from 4 to 6

0.8.0 - 2025-11-29

BREAKING

  • Drop async-std support

Changed

  • Bump MSRV to 1.86, stable to 1.91.1

Added

  • Add ability to plot throughput on summary page.
  • Add support for reporting throughput in elements and bytes - Throughput::ElementsAndBytes allows the text summary to report throughput in both units simultaneously.
  • Add alloca-based memory layout randomisation to mitigate memory effects on measurements.
  • Add doc comment to benchmark runner in criterion_group macro (removes linter warnings)

Fixed

  • Fix plotting NaN bug

Other

  • Remove Master API Docs links temporarily while we restore the docs publishing.

... (truncated)

Commits
  • 7f0d745 chore: release v0.8.2
  • 4a467ce chore(deps): bump crate-ci/typos from 1.40.0 to 1.43.0
  • b277a75 Fix panic with uniform iteration durations in benchmarks
  • 828af14 fix: don't build alloca on unsupported targets
  • b01316b Update Readme
  • 4c02a3b Exclude development scripts from published package
  • e4e06df chore: release v0.8.1
  • aa548b9 fix: Homepage link
  • 950c3b7 fix: Typo
  • 7e3e50c chore(deps): bump crate-ci/typos from 1.23.5 to 1.40.0
  • Additional commits viewable in compare view

Updates pyo3 to 0.27.2

Release notes

Sourced from pyo3's releases.

PyO3 0.27.2

This patch contains very minor fixes for the PyO3 0.27 series:

  • Workaround a rustc 1.92+ crash compiling PyO3 with both debug assertions and optimizations enabled.
  • Fix runtime crash when subclassing dicts on PyPy and GraalPy.

There are also a number of documentation improvements applied across the codebase.

Thank you to the following contributors for the improvements:

@​davidhewitt @​dependabot[bot] @​MusicalNinjaDad @​pkalivas @​tpoliaw @​Tpt

Changelog

Sourced from pyo3's changelog.

[0.27.2] - 2025-11-30

Changed

  • Disable subclassing PyDict on GraalPy (unsupported for now, may crash at runtime). #5653

Fixed

  • Fix crash when compiling on Rust 1.92+ with both debug assertions and optimizations enabled. #5638
  • Fix FFI definition of PyDictObject on PyPy. #5653

[0.27.1] - 2025-10-21

Fixed

  • Fix clippy:declare_interior_mutable_const warning from #[pyfunction]. #5538
  • Expose pyo3::types::PySendResult in public API. #5539

[0.27.0] - 2025-10-19

Packaging

  • Extend range of supported versions of hashbrown optional dependency to include version 0.16. #5428
  • Bump optional num-bigint dependency minimum version to 0.4.4. #5471
  • Test against Python 3.14 final release. #5499
  • Drop support for PyPy 3.9 and 3.10. #5516
  • Provide a better error message when building an outdated PyO3 for a too-new Python version. #5519

Added

  • Add FromPyObjectOwned as convenient trait bound for FromPyObject when the data is not borrowed from Python. #4390
  • Add Borrowed::extract, same as PyAnyMethods::extract, but does not restrict the lifetime by deref. #4390
  • experimental-inspect: basic support for #[derive(IntoPyObject)] (no struct fields support yet). #5365
  • experimental-inspect: support #[pyo3(get, set)] and #[pyclass(get_all, set_all)]. #5370
  • Add PyTypeCheck::classinfo_object that returns an object that can be used as parameter in isinstance or issubclass. #5387
  • Implement PyTypeInfo on datetime.* types even when the limited API is enabled. #5388
  • Implement PyTypeInfo on PyIterator, PyMapping and PySequence. #5402
  • Implement PyTypeInfo on PyCode when using the stable ABI. #5403
  • Implement PyTypeInfo on PyWeakrefReference when using the stable ABI. #5404
  • Add pyo3::sync::RwLockExt trait, analogous to pyo3::sync::MutexExt for readwrite locks. #5435
  • Add PyString::from_bytes. #5437
  • Implement AsRef<[u8]> for PyBytes. #5445
  • Add CastError and CastIntoError. #5468
  • Add PyCapsuleMethods::pointer_checked and PyCapsuleMethods::is_valid_checked. #5474
  • Add Borrowed::cast, Borrowed::cast_exact and Borrowed::cast_unchecked. #5475
  • Add conversions for jiff::civil::ISOWeekDate. #5478
  • Add conversions for &Cstr, Cstring and Cow<Cstr>. #5482
  • add #[pyclass(skip_from_py_object)] option, to opt-out of the FromPyObject: PyClass + Clone blanket impl. #5488
  • Add PyErr::add_note. #5489
  • Add FromPyObject impl for Cow<Path> & Cow<OsStr>. #5497

... (truncated)

Commits
  • 117102d release: 0.27.2
  • 2b1d6c5 fix FFI definition of PyDictObject on PyPy (#5653)
  • 032d4d3 ci: add lychee cache (#5616)
  • b4f78c0 fix rumdl formatting
  • 0497d48 ci: remove old netlify build files (#5631)
  • f3d6e05 Avoid introducing generic parameter with implied bounds from an associated ty...
  • c8e6597 ci: pin mdbook to 0.4 for now, properly install mdbook-tabs (#5632)
  • 30cca7e build(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#5629)
  • bb7bb94 Update PyIterator::send docs to match behaviour (#5593)
  • 1acadc5 Add radiate to README examples section (#5561)
  • Additional commits viewable in compare view

Updates numpy to 0.28.0

Release notes

Sourced from numpy's releases.

v0.28.0

What's Changed

New Contributors

Full Changelog: PyO3/rust-numpy@v0.27.1...v0.28.0

Changelog

Sourced from numpy's changelog.

Changelog

  • v0.28.0

    • Fix mismatched behavior between PyArrayLike1 and PyArrayLike2 when used with floats (#520)
    • Add ownership-moving conversions into PyReadonlyArray and PyReadwriteArray (#524)
    • Fix UB when calling PyArray::as_slice and as_slice_mut on misaligned arrays (#525)
    • Bump PyO3 dependency to v0.28.0. (#530)

  • v0.27.1

    • Bump ndarray dependency to v0.17. (#516)

  • v0.27.0

    • Bump PyO3 dependency to v0.27.0. (#515)

  • v0.26.0

    • bump MSRV to 1.74, matching PyO3 (#504)
    • extend supported nalgebra version to 0.34 (#503)
    • Bump PyO3 dependency to v0.26.0. (#506)

  • v0.25.0,

    • Bump PyO3 dependency to v0.25.0. (#492)

  • v0.24.0

    • Bump PyO3 dependency to v0.24.0. (#483)
    • Support Python 3.13t "free-threaded" Python. (#471)

  • v0.23.0

    • Drop support for PyPy 3.7 and 3.8. (#470)
    • Require Element: Sync as part of the free-threading support in PyO3 0.23 (#469)
    • Bump PyO3 dependency to v0.23.0 ([#457])
      • removed the gil-refs feature
      • reintroduced function names without _bound suffix + deprecating the old names
      • switched to IntoPyObject as trait bound
    • Bump rustc-hash dependency to 2.0. ([#472])

  • v0.22.1

    • Fix building on 32-bit Windows. (#463)
    • Add PyReadwriteArray::make_nonwriteable. (#462)
    • Implement From<PyReadWriteArray> for PyReadonlyArray. (#462)

  • v0.22.0

    • Bump MSRV to 1.63. (#450)
    • Add permute and transpose methods for changing the order of axes of a PyArray. (#428)
    • Add support for NumPy v2 which had a number of changes to the C API. (#442)
    • Add support for ndarray 0.16. (#439)
    • Bumped pyo3 dependency to v0.22.0 which required the addition of several new methods to the Element trait. (#435)

  • v0.21.0

    • Migrate to the new Bound API introduced by PyO3 0.21. (#410) (#411) (#412) (#415) (#416) (#418) (#419) (#420) (#421) (#422)
    • Add a prelude module to simplify importing method traits required by the Bound API. (#417)
    • Extend documentation to cover some more surprising behaviours. (#405) (#414)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 9, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot force-pushed the dependabot/cargo/dependencies-f351bc15e9 branch from c947784 to ff3adaa Compare February 13, 2026 13:43
@dependabot
chore(deps): bump the dependencies group with 7 updates
7d88ef4 
Updates the requirements on [thiserror](https://github.com/dtolnay/thiserror), [nalgebra](https://github.com/dimforge/nalgebra), [itertools](https://github.com/rust-itertools/itertools), [reqwest](https://github.com/seanmonstar/reqwest), [criterion](https://github.com/criterion-rs/criterion.rs), [pyo3](https://github.com/pyo3/pyo3) and [numpy](https://github.com/PyO3/rust-numpy) to permit the latest version.

Updates `thiserror` to 2.0.18
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.0...2.0.18)

Updates `nalgebra` to 0.34.1
- [Changelog](https://github.com/dimforge/nalgebra/blob/main/CHANGELOG.md)
- [Commits](dimforge/nalgebra@v0.32.0...v0.34.1)

Updates `itertools` to 0.14.0
- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)
- [Commits](rust-itertools/itertools@v0.12.0...v0.14.0)

Updates `reqwest` to 0.13.2
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.0...v0.13.2)

Updates `criterion` to 0.8.2
- [Release notes](https://github.com/criterion-rs/criterion.rs/releases)
- [Changelog](https://github.com/criterion-rs/criterion.rs/blob/master/CHANGELOG.md)
- [Commits](criterion-rs/criterion.rs@0.5.0...criterion-v0.8.2)

Updates `pyo3` to 0.27.2
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](PyO3/pyo3@v0.27.0...v0.27.2)

Updates `numpy` to 0.28.0
- [Release notes](https://github.com/PyO3/rust-numpy/releases)
- [Changelog](https://github.com/PyO3/rust-numpy/blob/main/CHANGELOG.md)
- [Commits](PyO3/rust-numpy@v0.27.0...v0.28.0)

---
updated-dependencies:
- dependency-name: thiserror
  dependency-version: 2.0.18
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: nalgebra
  dependency-version: 0.34.1
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: itertools
  dependency-version: 0.14.0
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: reqwest
  dependency-version: 0.13.2
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: criterion
  dependency-version: 0.8.2
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: pyo3
  dependency-version: 0.27.2
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: numpy
  dependency-version: 0.28.0
  dependency-type: direct:production
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/dependencies-f351bc15e9 branch from ff3adaa to 7d88ef4 Compare February 16, 2026 12:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants