Bump the rust-dependencies group across 1 directory with 28 updates by dependabot[bot] · Pull Request #2477 · cedar-policy/cedar

dependabot · 2026-07-15T01:00:29Z

Bumps the rust-dependencies group with 25 updates in the / directory:

Package	From	To
regex	`1.12.4`	`1.13.0`
num-bigint	`0.4.6`	`0.5.1`
bstr	`1.12.3`	`1.13.0`
bytes	`1.12.0`	`1.12.1`
cc	`1.2.65`	`1.2.67`
console	`0.16.3`	`0.16.4`
crossbeam-channel	`0.5.15`	`0.5.16`
crossbeam-deque	`0.8.6`	`0.8.7`
crossbeam-utils	`0.8.21`	`0.8.22`
memchr	`2.8.2`	`2.8.3`
mio	`1.2.1`	`1.2.2`
pest	`2.8.6`	`2.8.7`
pest_derive	`2.8.6`	`2.8.7`
rand	`0.9.4`	`0.9.5`
regex-automata	`0.4.14`	`0.4.15`
rustc-demangle	`0.1.27`	`0.1.28`
rustversion	`1.0.22`	`1.0.23`
socket2	`0.6.4`	`0.6.5`
thread_local	`1.1.9`	`1.1.10`
time	`0.3.52`	`0.3.53`
tinyvec	`1.11.0`	`1.12.0`
toml_edit	`0.25.12+spec-1.1.0`	`0.25.13+spec-1.1.0`
winnow	`1.0.3`	`1.0.4`
zerocopy	`0.8.52`	`0.8.54`
zmij	`1.0.21`	`1.0.23`

Updates regex from 1.12.4 to 1.13.0

Changelog

Sourced from regex's changelog.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:
use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);
Improvements:

#709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

Commits

926af2e 1.13.0
7d941a9 regex-automata-0.4.15
e358341 api: add regex! macro for lazy compilation
c420333 automata: disable miri on a couple doc tests
b9d2cf7 github: add FUNDING link
0858006 docs: add AI policy for contributors
468fc64 automata: reject dense DFA start states that are match states
See full diff in compare view

Updates num-bigint from 0.4.6 to 0.5.1

Changelog

Sourced from num-bigint's changelog.

Release 0.5.1 (2026-07-04)

Fixed a regression in the B-Z division algorithm.

Contributors: @cuviper

Release 0.5.0 (2026-07-02)

Upgrade to rand v0.10 and/or v0.9, and split rand_core.

The former rand feature is now split into multiple features, rand_0_9, rand_core_0_9, rand_0_10, and rand_core_0_10, depending on the version and feature set you need.

The RandBigInt extension trait is now split into BigRng09 and BigRng010 for each version.

The gen_* methods are deprecated in favor of new random_* methods.

This is also a value-breaking release, as rand defines it.

Contributors: @bionicles, @cuviper, @divergentdave

Release 0.4.8 (2026-07-04)

Fixed a regression in the B-Z division algorithm.

Contributors: @cuviper

Release 0.4.7 (2026-07-02)

Inline single-digit values. This reduces heap allocations, and also enables const ONE, const NEG_ONE, and const fn new_const.

Use divide and conquer in to_radix_digits, also implementing the Burnikel-Ziegler algorithm to speed up large divisions in general.

Implement LowerBounded for BigUint.

Contributors: @cp289, @cuviper, @hkalbasi, @mikem8891, @pRizz, @tyilo, @xtqqczze

Commits

33c59ba Merge pull request #348 from cuviper/bz-alg2-step3b
38b68f6 Release 0.5.1
f4a43f5 Fix the missing part of the Burnikel-Ziegler algorithm
ebfd89a Add failing tests for a bug in B-Z division
0ab95df Merge pull request #338 from cuviper/rand-0.10
33d6998 Release 0.5.0
84d05b7 Clean up manifests of ci crates
f8daf56 Allow clippy::duplicate_mod where intended
022310a Rearrange the rand features to support both 0.9 and 0.10
537a036 ci: use the fallback resolver for deps
Additional commits viewable in compare view

Updates bstr from 1.12.3 to 1.13.0

Commits

63c6578 1.13.0
9cc49de api: add to_bstring(), as_bstring(), and as_bstring_mut() methods to `B...
7105619 doc: fix typo "Use &BStr is useful because ..."
See full diff in compare view

Updates bytes from 1.12.0 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

Properly handle when Box::new panics (#837)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

Properly handle when Box::new panics (#837)

Commits

76c0fbb Release bytes v1.12.1 (#838)
924c82b Handle unwinding from Box::new (#837)
See full diff in compare view

Updates cc from 1.2.65 to 1.2.67

Release notes

Sourced from cc's releases.

cc-v1.2.67

Other

Fix clippy warning (#1788)

Regenerate target info (#1785)

Add support for aarch64-unknown-linux-pauthtest target (#1713)

Fix nightly compilation error (#1783)

cc-v1.2.66

Other

Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)

Support new QNX targets (#1775)

Add kache to the supported compiler wrappers (#1770)

Changelog

Sourced from cc's changelog.

1.2.67 - 2026-07-11

Other

Fix clippy warning (#1788)

Regenerate target info (#1785)

Add support for aarch64-unknown-linux-pauthtest target (#1713)

Fix nightly compilation error (#1783)

1.2.66 - 2026-07-05

Other

Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)

Support new QNX targets (#1775)

Add kache to the supported compiler wrappers (#1770)

Commits

fa031a0 chore(cc): release v1.2.67 (#1789)
842aab1 Bump taiki-e/install-action from 2.81.8 to 2.82.8 (#1786)
e2f07d0 Fix clippy warning (#1788)
8ced615 Regenerate target info (#1785)
2943b52 Add missing todo for deprecated API
43ae1bf Add support for aarch64-unknown-linux-pauthtest target (#1713)
a5c584a Fix nightly compilation error (#1783)
9c53ddc chore(cc): release v1.2.66 (#1777)
f2836c0 Fix target parsing (#1779)
3299691 ci(test-wasm): do not download pre release of wasi-sdk (#1778)
Additional commits viewable in compare view

Updates console from 0.16.3 to 0.16.4

Release notes

Sourced from console's releases.

0.16.4

What's Changed

chore: Remove redudant helper and add TermInner constructors by @ChrisDenton in console-rs/console#284

Style::from_dotted_str ignore non-ascii by @danjl1100 in console-rs/console#287

feat: add is_dumb public function by @ugur-eren in console-rs/console#290

Commits

598eca9 Bump version to 0.16.4
0f22c35 feat: add is_dumb public function
1426649 Bump actions/checkout from 3 to 7
d2d89ad ignore non-ascii input in Style::from_dotted_str
6cff3e0 document current panic in Style::from_dotted_str via test cases
dd4334f Apply suggestions from clippy 1.95
586efad Remove redundant as_handle helper
be20e85 Add TermInner::new constructors
See full diff in compare view

Updates crossbeam-channel from 0.5.15 to 0.5.16

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.16

Improve support for rust-analyzer auto-completion of code inside select!/select_biased! macro. (#1240)

Make never const. (#1250)

Commits

9b56303 Prepare for the next release
a078b17 ci: Sync config with main
508c29d Remove crossbeam-skiplist which is not published from this branch from worksp...
6a20e57 tests: Fix mismatched_lifetime_syntaxes
c2d674f epoch: Fix rustdoc::invalid_rust_codeblocks
bd6563e Update no_atomic.rs
d3e1e36 Make CachePadded<T> have C repr to allow casting to and from T (#1270)
c0c466e channel: Use non-poison Mutex
8b3940f Add missing word to docs (#1208)
df6eec0 docs: Link select_biased! from select! macro (#1202)
Additional commits viewable in compare view

Updates crossbeam-deque from 0.8.6 to 0.8.7

Release notes

Sourced from crossbeam-deque's releases.

crossbeam-deque 0.8.7

Optimize Worker::push, Stealer::steal_batch*, Injector::steal_batch*. (#1233)

Commits

9b56303 Prepare for the next release
a078b17 ci: Sync config with main
508c29d Remove crossbeam-skiplist which is not published from this branch from worksp...
6a20e57 tests: Fix mismatched_lifetime_syntaxes
c2d674f epoch: Fix rustdoc::invalid_rust_codeblocks
bd6563e Update no_atomic.rs
d3e1e36 Make CachePadded<T> have C repr to allow casting to and from T (#1270)
c0c466e channel: Use non-poison Mutex
8b3940f Add missing word to docs (#1208)
df6eec0 docs: Link select_biased! from select! macro (#1202)
Additional commits viewable in compare view

Updates crossbeam-utils from 0.8.21 to 0.8.22

Release notes

Sourced from crossbeam-utils's releases.

crossbeam-utils 0.8.22

Make AtomicCell::{as_ptr,into_inner} const. (#1237)

Make CachePadded repr(C). (#1270)

Optimize WaitGroup. (#1195)

Commits

9b56303 Prepare for the next release
a078b17 ci: Sync config with main
508c29d Remove crossbeam-skiplist which is not published from this branch from worksp...
6a20e57 tests: Fix mismatched_lifetime_syntaxes
c2d674f epoch: Fix rustdoc::invalid_rust_codeblocks
bd6563e Update no_atomic.rs
d3e1e36 Make CachePadded<T> have C repr to allow casting to and from T (#1270)
c0c466e channel: Use non-poison Mutex
8b3940f Add missing word to docs (#1208)
df6eec0 docs: Link select_biased! from select! macro (#1202)
Additional commits viewable in compare view

Updates memchr from 2.8.2 to 2.8.3

Commits

5fdb40c 2.8.3
922c7b5 memchr: let compiler know that indexes returned by memchr fns are in bounds
e21e9fb arch: add unsafe to internal routines
581faf0 rebar: update memchr version
See full diff in compare view

Updates mio from 1.2.1 to 1.2.2

Changelog

Sourced from mio's changelog.

1.2.2

Add support for Solaris using event ports (tokio-rs/mio#1962).

Add experiment support for NuttX using poll(2) (tokio-rs/mio#1966).

Commits

50ee78d Release 1.2.2
e7f35de Document Solaris is supported
8e067d2 Poll all fd events returned by port_getn in one zero-timeout poll call
f6a559a Remove dead POLLRDHUP handling and avoid registering unsupported priority
f0249a8 Add Solaris event ports selector
2e267a5 Support NuttX (#1966)
See full diff in compare view

Updates pest from 2.8.6 to 2.8.7

Release notes

Sourced from pest's releases.

v2.8.7

What's Changed

Keep grammar.rs in tree by @konstin in pest-parser/pest#1159

fix(test): make miette_error test independent of terminal by @MasterOfFeelingFish in pest-parser/pest#1164

docs: add Panics sections to line_col() and PrattParser::parse() by @MasterOfFeelingFish in pest-parser/pest#1167

Document panics in public API by @syu-toutousai in pest-parser/pest#1174

Reject unescaped quote inside char literal in meta grammar by @chatman-media in pest-parser/pest#1175

New Contributors

@konstin made their first contribution in pest-parser/pest#1159

@MasterOfFeelingFish made their first contribution in pest-parser/pest#1164

@syu-toutousai made their first contribution in pest-parser/pest#1174

@chatman-media made their first contribution in pest-parser/pest#1175

Full Changelog: pest-parser/pest@v2.8.6...v2.8.7

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:
...
pest_derive = { version = "2.8", features = ["grammar-extras"] }

Commits

24ed7bc fmt fix + bump version
75a1348 fix(macro): resolve parses_to! and fails_with! compiler errors in integration...
ad3c254 ci: bump nightly
f3f2eea fix: reject unescaped quote inside char literal in meta grammar (#1175)
b24fa55 docs: add missing # Panics sections to public API (#1174)
02c5ad8 docs: add Panics sections to line_col() and PrattParser::parse() (#1167)
2a69a98 fix(test): make miette_error test independent of terminal (#1164)
d1a5bef fix doc indentation check (#1166)
52f49b1 bump default CI toolchain to 1.86 (#1165)
64111e5 Keep grammar.rs in tree (#1159)
Additional commits viewable in compare view

Updates pest_derive from 2.8.6 to 2.8.7

Release notes

Sourced from pest_derive's releases.

v2.8.7

What's Changed

Keep grammar.rs in tree by @konstin in pest-parser/pest#1159

fix(test): make miette_error test independent of terminal by @MasterOfFeelingFish in pest-parser/pest#1164

docs: add Panics sections to line_col() and PrattParser::parse() by @MasterOfFeelingFish in pest-parser/pest#1167

Document panics in public API by @syu-toutousai in pest-parser/pest#1174

Reject unescaped quote inside char literal in meta grammar by @chatman-media in pest-parser/pest#1175

New Contributors

@konstin made their first contribution in pest-parser/pest#1159

@MasterOfFeelingFish made their first contribution in pest-parser/pest#1164

@syu-toutousai made their first contribution in pest-parser/pest#1174

@chatman-media made their first contribution in pest-parser/pest#1175

Full Changelog: pest-parser/pest@v2.8.6...v2.8.7

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:
...
pest_derive = { version = "2.8", features = ["grammar-extras"] }

Commits

24ed7bc fmt fix + bump version
75a1348 fix(macro): resolve parses_to! and fails_with! compiler errors in integration...
ad3c254 ci: bump nightly
f3f2eea fix: reject unescaped quote inside char literal in meta grammar (#1175)
b24fa55 docs: add missing # Panics sections to public API (#1174)
02c5ad8 docs: add Panics sections to line_col() and PrattParser::parse() (#1167)
2a69a98 fix(test): make miette_error test independent of terminal (#1164)
d1a5bef fix doc indentation check (#1166)
52f49b1 bump default CI toolchain to 1.86 (#1165)
64111e5 Keep grammar.rs in tree (#1159)
Additional commits viewable in compare view

Updates pest_generator from 2.8.6 to 2.8.7

Release notes

Sourced from pest_generator's releases.

v2.8.7

What's Changed

Keep grammar.rs in tree by @konstin in pest-parser/pest#1159

fix(test): make miette_error test independent of terminal by @MasterOfFeelingFish in pest-parser/pest#1164

docs: add Panics sections to line_col() and PrattParser::parse() by @MasterOfFeelingFish in pest-parser/pest#1167

Document panics in public API by @syu-toutousai in pest-parser/pest#1174

Reject unescaped quote inside char literal in meta grammar by @chatman-media in pest-parser/pest#1175

New Contributors

@konstin made their first contribution in pest-parser/pest#1159

@MasterOfFeelingFish made their first contribution in pest-parser/pest#1164

@syu-toutousai made their first contribution in pest-parser/pest#1174

@chatman-media made their first contribution in pest-parser/pest#1175

Full Changelog: pest-parser/pest@v2.8.6...v2.8.7

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:
...
pest_derive = { version = "2.8", features = ["grammar-extras"] }

Commits

24ed7bc fmt fix + bump version
75a1348 fix(macro): resolve parses_to! and fails_with! compiler errors in integration...
ad3c254 ci: bump nightly
f3f2eea fix: reject unescaped quote inside char literal in meta grammar (#1175)
b24fa55 docs: add missing # Panics sections to public API (#1174)
02c5ad8 docs: add Panics sections to line_col() and PrattParser::parse() (#1167)
2a69a98 fix(test): make miette_error test independent of terminal (#1164)
d1a5bef fix doc indentation check (#1166)
52f49b1 bump default CI toolchain to 1.86 (#1165)
64111e5 Keep grammar.rs in tree (#1159)
Additional commits viewable in compare view

Updates pest_meta from 2.8.6 to 2.8.7

Release notes

Sourced from pest_meta's releases.

v2.8.7

What's Changed

Keep grammar.rs in tree by @konstin in pest-parser/pest#1159

fix(test): make miette_error test independent of terminal by @MasterOfFeelingFish in pest-parser/pest#1164

docs: add Panics sections to line_col() and PrattParser::parse() by @MasterOfFeelingFish in pest-parser/pest#1167

Document panics in public API by @syu-toutousai in pest-parser/pest#1174

Reject unescaped quote inside char literal in meta grammar by @chatman-media in pest-parser/pest#1175

New Contributors

@konstin made their first contribution in pest-parser/pest#1159

@MasterOfFeelingFish made their first contribution in pest-parser/pest#1164

@syu-toutousai made their first contribution in pest-parser/pest#1174

@chatman-media made their first contribution in pest-parser/pest#1175

Full Changelog: pest-parser/pest@v2.8.6...v2.8.7

Warning: Semantic Versioning

Note that the node tag feature in 2.6.0 was a technically semver-breaking change even though it is a backwards-compatible / non-breaking change in the meta-grammar. There may be similar non-breaking changes to the meta-grammar between minor versions in the future. These non-breaking changes, however, may translate into semver-breaking changes due to the additional variants propagated from the generated Rule enum.

This new feature caused issues in some Cargo version resolution situations where Cargo mixed different versions of pest dependencies. For this reason, these "grammar non-breaking but semver-breaking" changes are now available only under the "grammar-extras" feature flag. If you would like to use node tags (or other future grammar features), you can do so by enabling this flag on the pest_derive crate in your Cargo.toml:
...
pest_derive = { version = "2.8", features = ["grammar-extras"] }

Commits

24ed7bc fmt fix + bump version
75a1348 fix(macro): resolve parses_to! and fails_with! compiler errors in integration...
ad3c254 ci: bump nightly
f3f2eea fix: reject unescaped quote inside char literal in meta grammar (#1175)
b24fa55 docs: add missing # Panics sections to public API (#1174)
02c5ad8 docs: add Panics sections to line_col() and PrattParser::parse() (#1167)
2a69a98 fix(test): make miette_error test independent of terminal (#1164)
d1a5bef fix doc indentation check (#1166)
52f49b1 bump default CI toolchain to 1.86 (#1165)
64111e5 Keep grammar.rs in tree (#1159)
Additional commits viewable in compare view

Updates rand from 0.9.4 to 0.9.5

Changelog

Sourced from rand's changelog.

[0.9.5] — 2026-07-02

Fixes

Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1803)

#1803: rust-random/rand#1803

Commits

3474ec0 rand v0.9.5: backport #1790 (#1803)
See full diff in compare view

Updates regex-automata from 0.4.14 to 0.4.15

Commits

7d941a9 regex-automata-0.4.15
e358341 api: add regex! macro for lazy compilation
c420333 automata: disable miri on a couple doc tests
b9d2cf7 github: add FUNDING link
0858006 docs: add AI policy for contributors
468fc64 automata: reject dense DFA start states that are match states
7b96fdc 1.12.4
7b89cf0 deps: update to regex-syntax 0.8.11
1401679 regex-syntax-0.8.11
d709000 changelog: 1.12.4
Additional commits viewable in compare view

Updates rustc-demangle from 0.1.27 to 0.1.28

Release notes

Sourced from rustc-demangle's releases.

rustc-demangle-v0.1.28

Other

Implement splat demangling

Fix a typo in early-recursion-limit

Changelog

Sourced from rustc-demangle's changelog.

0.1.28 - 2026-07-08

Other

Implement splat demangling

Fix a typo in early-recursion-limit

Commits

1fd8a3e chore: release
53ea128 Merge pull request #90 from teor2345/splat-mangling
5bae81a Implement splat demangling
4324dde Fix a typo in early-recursion-limit
ca5202e Merge pull request #88 from rust-lang/release-plz-2026-01-15T15-09-27Z
See full diff in compare view

Updates rustversion from 1.0.22 to 1.0.23

Release notes

Sourced from rustversion's releases.

1.0.23

Set RUSTVERSION=1 during rustc --version command (#68)

Commits

3a7c766 Release 1.0.23
9b213c4 Merge pull request #68 from dtolnay/env
8ffb0c2 Set RUSTVERSION=1 during rustc --version command
79462fd Update actions/upload-artifact@v6 -> v7
ca1eafe Update actions/checkout@v6 -> v7
119e831 Lint clippy::from_iter_instead_of_collect has been removed
a1dfebc Raise minimum tested compiler to rust 1.85
f717b8d Unpin CI miri toolchain
fb69332 Pin CI miri to nightly-2026-02-11
a389672 Update actions/upload-artifact@v5 -> v6
Additional commits viewable in compare view

Updates socket2 from 0.6.4 to 0.6.5

Changelog

Sourced from socket2's changelog.

0.6.5

Add support for Emscripten (wasm32) (rust-lang/socket2#660).

Add support for NuttX (rust-lang/socket2#663).

Enable Socket::(set_)tos_v4 on illumos (rust-lang/socket2#662).

Commits

See full diff in compare view

Updates thread_local from 1.1.9 to 1.1.10

Release notes

Sourced from thread_local's releases.

v1.1.10

Fixed

Fix undefined behavior when get_or or get_or_try reentrantly initializes the same ThreadLocal (#97).

Fix an integer underflow in iterator size_hint implementations (#89).

Fix compilation with the nightly feature enabled (#96).

Changed

ThreadLocal::get no longer allocates a thread ID or registers a thread-local destructor when no value exists for the current thread (#84).

Changelog

Sourced from thread_local's changelog.

1.1.10 - 2026-07-10

Fixed

Fix undefined behavior when get_or or get_or_try reentrantly initializes the same ThreadLocal (#97).

Fix an integer underflow in iterator size_hint implementations (#89).

Fix compilation with the nightly feature enabled (#96...
Description has been truncated

Bumps the rust-dependencies group with 25 updates in the / directory: | Package | From | To | | --- | --- | --- | | [regex](https://github.com/rust-lang/regex) | `1.12.4` | `1.13.0` | | [num-bigint](https://github.com/rust-num/num-bigint) | `0.4.6` | `0.5.1` | | [bstr](https://github.com/BurntSushi/bstr) | `1.12.3` | `1.13.0` | | [bytes](https://github.com/tokio-rs/bytes) | `1.12.0` | `1.12.1` | | [cc](https://github.com/rust-lang/cc-rs) | `1.2.65` | `1.2.67` | | [console](https://github.com/console-rs/console) | `0.16.3` | `0.16.4` | | [crossbeam-channel](https://github.com/crossbeam-rs/crossbeam) | `0.5.15` | `0.5.16` | | [crossbeam-deque](https://github.com/crossbeam-rs/crossbeam) | `0.8.6` | `0.8.7` | | [crossbeam-utils](https://github.com/crossbeam-rs/crossbeam) | `0.8.21` | `0.8.22` | | [memchr](https://github.com/BurntSushi/memchr) | `2.8.2` | `2.8.3` | | [mio](https://github.com/tokio-rs/mio) | `1.2.1` | `1.2.2` | | [pest](https://github.com/pest-parser/pest) | `2.8.6` | `2.8.7` | | [pest_derive](https://github.com/pest-parser/pest) | `2.8.6` | `2.8.7` | | [rand](https://github.com/rust-random/rand) | `0.9.4` | `0.9.5` | | [regex-automata](https://github.com/rust-lang/regex) | `0.4.14` | `0.4.15` | | [rustc-demangle](https://github.com/rust-lang/rustc-demangle) | `0.1.27` | `0.1.28` | | [rustversion](https://github.com/dtolnay/rustversion) | `1.0.22` | `1.0.23` | | [socket2](https://github.com/rust-lang/socket2) | `0.6.4` | `0.6.5` | | [thread_local](https://github.com/Amanieu/thread_local-rs) | `1.1.9` | `1.1.10` | | [time](https://github.com/time-rs/time) | `0.3.52` | `0.3.53` | | [tinyvec](https://github.com/Lokathor/tinyvec) | `1.11.0` | `1.12.0` | | [toml_edit](https://github.com/toml-rs/toml) | `0.25.12+spec-1.1.0` | `0.25.13+spec-1.1.0` | | [winnow](https://github.com/winnow-rs/winnow) | `1.0.3` | `1.0.4` | | [zerocopy](https://github.com/google/zerocopy) | `0.8.52` | `0.8.54` | | [zmij](https://github.com/dtolnay/zmij) | `1.0.21` | `1.0.23` | Updates `regex` from 1.12.4 to 1.13.0 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.12.4...1.13.0) Updates `num-bigint` from 0.4.6 to 0.5.1 - [Changelog](https://github.com/rust-num/num-bigint/blob/main/RELEASES.md) - [Commits](rust-num/num-bigint@num-bigint-0.4.6...num-bigint-0.5.1) Updates `bstr` from 1.12.3 to 1.13.0 - [Commits](BurntSushi/bstr@1.12.3...1.13.0) Updates `bytes` from 1.12.0 to 1.12.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.12.0...v1.12.1) Updates `cc` from 1.2.65 to 1.2.67 - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/cc-rs@cc-v1.2.65...cc-v1.2.67) Updates `console` from 0.16.3 to 0.16.4 - [Release notes](https://github.com/console-rs/console/releases) - [Changelog](https://github.com/console-rs/console/blob/main/CHANGELOG.md) - [Commits](console-rs/console@0.16.3...0.16.4) Updates `crossbeam-channel` from 0.5.15 to 0.5.16 - [Release notes](https://github.com/crossbeam-rs/crossbeam/releases) - [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md) - [Commits](crossbeam-rs/crossbeam@crossbeam-channel-0.5.15...crossbeam-channel-0.5.16) Updates `crossbeam-deque` from 0.8.6 to 0.8.7 - [Release notes](https://github.com/crossbeam-rs/crossbeam/releases) - [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md) - [Commits](crossbeam-rs/crossbeam@crossbeam-deque-0.8.6...crossbeam-deque-0.8.7) Updates `crossbeam-utils` from 0.8.21 to 0.8.22 - [Release notes](https://github.com/crossbeam-rs/crossbeam/releases) - [Changelog](https://github.com/crossbeam-rs/crossbeam/blob/main/CHANGELOG.md) - [Commits](crossbeam-rs/crossbeam@crossbeam-utils-0.8.21...crossbeam-utils-0.8.22) Updates `memchr` from 2.8.2 to 2.8.3 - [Commits](BurntSushi/memchr@2.8.2...2.8.3) Updates `mio` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/tokio-rs/mio/releases) - [Changelog](https://github.com/tokio-rs/mio/blob/master/CHANGELOG.md) - [Commits](tokio-rs/mio@v1.2.1...v1.2.2) Updates `pest` from 2.8.6 to 2.8.7 - [Release notes](https://github.com/pest-parser/pest/releases) - [Commits](pest-parser/pest@v2.8.6...v2.8.7) Updates `pest_derive` from 2.8.6 to 2.8.7 - [Release notes](https://github.com/pest-parser/pest/releases) - [Commits](pest-parser/pest@v2.8.6...v2.8.7) Updates `pest_generator` from 2.8.6 to 2.8.7 - [Release notes](https://github.com/pest-parser/pest/releases) - [Commits](pest-parser/pest@v2.8.6...v2.8.7) Updates `pest_meta` from 2.8.6 to 2.8.7 - [Release notes](https://github.com/pest-parser/pest/releases) - [Commits](pest-parser/pest@v2.8.6...v2.8.7) Updates `rand` from 0.9.4 to 0.9.5 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/0.9.5/CHANGELOG.md) - [Commits](rust-random/rand@0.9.4...0.9.5) Updates `regex-automata` from 0.4.14 to 0.4.15 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@regex-automata-0.4.14...regex-automata-0.4.15) Updates `rustc-demangle` from 0.1.27 to 0.1.28 - [Release notes](https://github.com/rust-lang/rustc-demangle/releases) - [Changelog](https://github.com/rust-lang/rustc-demangle/blob/main/CHANGELOG.md) - [Commits](rust-lang/rustc-demangle@rustc-demangle-v0.1.27...rustc-demangle-v0.1.28) Updates `rustversion` from 1.0.22 to 1.0.23 - [Release notes](https://github.com/dtolnay/rustversion/releases) - [Commits](dtolnay/rustversion@1.0.22...1.0.23) Updates `socket2` from 0.6.4 to 0.6.5 - [Release notes](https://github.com/rust-lang/socket2/releases) - [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-lang/socket2/commits/v0.6.5) Updates `thread_local` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/Amanieu/thread_local-rs/releases) - [Changelog](https://github.com/Amanieu/thread_local-rs/blob/master/CHANGELOG.md) - [Commits](Amanieu/thread_local-rs@v1.1.9...v1.1.10) Updates `time` from 0.3.52 to 0.3.53 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.52...v0.3.53) Updates `tinyvec` from 1.11.0 to 1.12.0 - [Changelog](https://github.com/Lokathor/tinyvec/blob/main/CHANGELOG.md) - [Commits](Lokathor/tinyvec@v1.11.0...v1.12.0) Updates `toml_edit` from 0.25.12+spec-1.1.0 to 0.25.13+spec-1.1.0 - [Commits](toml-rs/toml@v0.25.12...v0.25.13) Updates `winnow` from 1.0.3 to 1.0.4 - [Changelog](https://github.com/winnow-rs/winnow/blob/main/CHANGELOG.md) - [Commits](winnow-rs/winnow@v1.0.3...v1.0.4) Updates `zerocopy` from 0.8.52 to 0.8.54 - [Release notes](https://github.com/google/zerocopy/releases) - [Commits](google/zerocopy@v0.8.52...v0.8.54) Updates `zerocopy-derive` from 0.8.52 to 0.8.54 - [Release notes](https://github.com/google/zerocopy/releases) - [Commits](google/zerocopy@v0.8.52...v0.8.54) Updates `zmij` from 1.0.21 to 1.0.23 - [Release notes](https://github.com/dtolnay/zmij/releases) - [Commits](dtolnay/zmij@1.0.21...1.0.23) --- updated-dependencies: - dependency-name: regex dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: num-bigint dependency-version: 0.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: bstr dependency-version: 1.13.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: bytes dependency-version: 1.12.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: cc dependency-version: 1.2.67 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: console dependency-version: 0.16.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: crossbeam-channel dependency-version: 0.5.16 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: crossbeam-deque dependency-version: 0.8.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: crossbeam-utils dependency-version: 0.8.22 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: memchr dependency-version: 2.8.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: mio dependency-version: 1.2.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: pest dependency-version: 2.8.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: pest_derive dependency-version: 2.8.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: pest_generator dependency-version: 2.8.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: pest_meta dependency-version: 2.8.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rand dependency-version: 0.9.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: regex-automata dependency-version: 0.4.15 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rustc-demangle dependency-version: 0.1.28 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rustversion dependency-version: 1.0.23 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: socket2 dependency-version: 0.6.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: thread_local dependency-version: 1.1.10 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: time dependency-version: 0.3.53 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: tinyvec dependency-version: 1.12.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: toml_edit dependency-version: 0.25.13+spec-1.1.0 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: winnow dependency-version: 1.0.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: zerocopy dependency-version: 0.8.54 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: zerocopy-derive dependency-version: 0.8.54 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: zmij dependency-version: 1.0.23 dependency-type: indirect update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-15T01:18:00Z

Coverage Report

Head Commit: 8e5334ef584a82f569246c0999bc528a3d7dd6d3

Base Commit: e75a13b731928f70e80e75a859fb97fc47987737

Download the full coverage report.

Coverage of Added or Modified Lines of Rust Code

Required coverage: 80.00%

Actual coverage: 100.00%

Status: PASSED ✅

Details

File	Status	Covered	Coverage	Missed Lines

Coverage of All Lines of Rust Code

Required coverage: 80.00%

Actual coverage: 88.22%

Status: PASSED ✅

Details

Package	Status	Covered	Coverage	Base Coverage
cedar-language-server	🟢	4722/5102	92.55%	92.55%
cedar-policy	🟢	4659/5791	80.45%	80.45%
cedar-policy-cli	🟡	1286/1675	76.78%	76.78%
cedar-policy-core	🟢	24714/27889	88.62%	88.62%
cedar-policy-formatter	🟢	914/1088	84.01%	84.01%
cedar-policy-symcc	🟢	6833/7313	93.44%	93.44%
cedar-wasm	🔴	0/28	0.00%	0.00%

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 15, 2026

john-h-kastner-aws approved these changes Jul 15, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the rust-dependencies group across 1 directory with 28 updates#2477

Bump the rust-dependencies group across 1 directory with 28 updates#2477
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-648ab4ccd3

dependabot Bot commented on behalf of github Jul 15, 2026

Uh oh!

github-actions Bot commented Jul 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 15, 2026

1.13.0 (2026-07-09)

Release 0.5.1 (2026-07-04)

Release 0.5.0 (2026-07-02)

Release 0.4.8 (2026-07-04)

Release 0.4.7 (2026-07-02)

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

1.12.1 (July 8th, 2026)

Fixed

cc-v1.2.67

Other

cc-v1.2.66

Other

1.2.67 - 2026-07-11

Other

1.2.66 - 2026-07-05

Other

0.16.4

What's Changed

crossbeam-channel 0.5.16

crossbeam-deque 0.8.7

crossbeam-utils 0.8.22

1.2.2

v2.8.7

What's Changed

New Contributors

Warning: Semantic Versioning

v2.8.7

What's Changed

New Contributors

Warning: Semantic Versioning

v2.8.7

What's Changed

New Contributors

Warning: Semantic Versioning

v2.8.7

What's Changed

New Contributors

Warning: Semantic Versioning

[0.9.5] — 2026-07-02

Fixes

rustc-demangle-v0.1.28

Other

0.1.28 - 2026-07-08

Other

1.0.23

0.6.5

v1.1.10

Fixed

Changed

1.1.10 - 2026-07-10

Fixed

Uh oh!

github-actions Bot commented Jul 15, 2026

Coverage Report

Coverage of Added or Modified Lines of Rust Code

Coverage of All Lines of Rust Code

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant