chore(deps): bump the cargo-minor-and-patch group with 12 updates by dependabot[bot] · Pull Request #9376 · aaif-goose/goose

dependabot · 2026-05-22T19:08:23Z

Bumps the cargo-minor-and-patch group with 12 updates:

Package	From	To
serde_json	`1.0.149`	`1.0.150`
tower-http	`0.6.10`	`0.6.11`
tree-sitter	`0.26.8`	`0.26.9`
minijinja	`2.19.0`	`2.20.0`
aws-smithy-types	`1.4.7`	`1.4.8`
aws-sdk-bedrockruntime	`1.130.0`	`1.131.0`
aws-sdk-sagemakerruntime	`1.101.0`	`1.102.0`
dashmap	`6.1.0`	`6.2.1`
pulldown-cmark	`0.13.3`	`0.13.4`
pastey	`0.2.2`	`0.2.3`
nostr	`0.44.2`	`0.44.3`
tar	`0.4.45`	`0.4.46`

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

Reject non-string enum object keys (#1324, thanks @puneetdixit200)

Commits

a1ae73a Release 1.0.150
1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
2037b63 Reject non-string enum object keys
5d30df6 Resolve manual_assert_eq pedantic clippy lint
dc8003a Raise required compiler for preserve_order feature to 1.85
a42fa98 Unpin CI miri toolchain
684a60e Pin CI miri to nightly-2026-02-11
7c7da33 Raise required compiler to Rust 1.71
acf4850 Simplify Number::is_f64
6b8ceab Resolve unnecessary_map_or clippy lint
Additional commits viewable in compare view

Updates tower-http from 0.6.10 to 0.6.11

Release notes

Sourced from tower-http's releases.

tower-http-0.6.11

Added
set-header: add SetMultipleResponseHeadersLayer and SetMultipleResponseHeader for setting multiple response headers at once. Supports overriding, appending, and if_not_present modes. Header values can be fixed or computed dynamically via closures (#672)
use http::{Response, header::{self, HeaderValue}};
use http_body::Body as _;
use tower_http::set_header::response::SetMultipleResponseHeadersLayer;
let layer = SetMultipleResponseHeadersLayer::overriding(vec![
(header::X_FRAME_OPTIONS, HeaderValue::from_static("DENY")).into(),
(header::CONTENT_LENGTH, |res: &Response<MyBody>| {
res.body().size_hint().exact()
.map(|size| HeaderValue::from_str(&size.to_string()).unwrap())
}).into(),
]);
set-header: add SetMultipleRequestHeadersLayer and SetMultipleRequestHeaders for setting multiple request headers at once, mirroring the response-side API (#677)

classify: add From<i32> and From<NonZeroI32> impls for GrpcCode. Unrecognized status codes map to GrpcCode::Unknown (#506)
Changed

compression: compress application/grpc-web responses. Previously all application/grpc* content types were excluded from compression; now only application/grpc (non-web) is excluded (#408)

Fixed

fs: fix ServeDir returning 500 instead of 405 for non-GET/HEAD requests when call_fallback_on_method_not_allowed is enabled but no fallback service is configured (#587)

fs: remove duplicate cfg attribute on is_reserved_dos_name (#675)

#408: tower-rs/tower-http#408 #506: tower-rs/tower-http#506 #587: tower-rs/tower-http#587 #672: tower-rs/tower-http#672 #675: tower-rs/tower-http#675 #677: tower-rs/tower-http#677

All PRs

ci: fix flaky encoding test, add nightly stress test job by @jlizen in tower-rs/tower-http#670

... (truncated)

Commits

1d082ef v0.6.11
9c3117d feat: set multiple request header (#677)
667e7c7 Remove duplicate cfg attribute for is_reserved_dos_name (#675)
7551a9b feat(set_header): refactor and improve multiple header middleware (#672)
991e9ee add From<i32> impl for GrpcCode (#506)
3962dba Do compress grpc-web responses (#408)
f0b3bb6 Fix serve_dir method not allowed handling when no fallback is configured (#587)
d1a571b ci: use static timeout in stress-test workflow (#671)
309555a ci: fix flaky encoding test, add nightly stress test job (#670)
See full diff in compare view

Updates tree-sitter from 0.26.8 to 0.26.9

Release notes

Sourced from tree-sitter's releases.

v0.26.9

What's Changed

ci(actions): bump actions/cache to v5 by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5482

build(deps): bump wasmtime-c-api to v36.0.7 by @WillLillis in tree-sitter/tree-sitter#5514

fix(loader): allow filenames with dots by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5538

fix(rust): fix new clippy lints by @WillLillis in tree-sitter/tree-sitter#5539

test: bump c test fixture to v0.24.2 by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5542

fix(generate): pass default optimization level in generate_parser_for_grammar by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5543

feat(dist): enable install via cargo binstall (#5533) by @clason in tree-sitter/tree-sitter#5544

Prevent a buffer over-read when parsing 4-byte UTF-16 characters. by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5549

fix(query): overflow in capture pool ids + some perf by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5555

docs: note zero point unbounded behavior in query functions by @WillLillis in tree-sitter/tree-sitter#5563

build(deps): bump wasmtime-c-api to v36.0.8 by @clason in tree-sitter/tree-sitter#5574

fix(cli): account for process versions > 5 in the parse command's pretty debug output. by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5577

fix(generate): improve error message for nonterminals used in immediate token rule by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5583

fix(generate): rewrite parse_grammar with forward DFS by @WillLillis in tree-sitter/tree-sitter#5584

fix(wasm): load supertype tables for ABI 15 grammars by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5606

build(deps): bump wasmtime-c-api to v36.0.9 by @clason in tree-sitter/tree-sitter#5611

Validate Wasm language memory reads by @tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5613

release v0.26.9 by @clason in tree-sitter/tree-sitter#5612

Full Changelog: tree-sitter/tree-sitter@v0.26.8...v0.26.9

Commits

7f53486 release v0.26.9
77b96de fix(wasm): validate memory reads (#5569) (#5613)
a082228 build(deps): bump wasmtime-c-api to v36.0.9
7aea015 fix(wasm): load supertype tables for ABI 15 grammars (#5605) (#5606)
2cad8b8 fix(generate): consider reserved words when removing unused rules
ddbe469 fix(generate): rewrite parse_grammar with forward DFS
17f9796 fix(generate): improve error message for nonterminals used in immediate token...
17e4bf9 fix(cli): account for process versions > 5 in the parse command's pretty
ec120d0 build(deps): bump wasmtime-c-api to v36.0.8
7c3d842 docs: note zero point unbounded behavior in query functions
Additional commits viewable in compare view

Updates minijinja from 2.19.0 to 2.20.0

Changelog

Sourced from minijinja's changelog.

2.20.0

Added support for Jinja-style required blocks in Rust and Go, including scoped required parsing compatibility and validation that required blocks only contain whitespace or comments.

Added support for chained comparisons (for example a < b < c) in Rust and Go to match Jinja/Python semantics.

Fixed dotted integer lookup in the middle of attribute chains (for example foo.0.bar) for Jinja compatibility. #900

Fixed compilation with multi_template disabled by gating block-only APIs behind the feature.

Commits

571e28a chore(release): 2.20.0
32a70a2 docs(changelog): update unreleased changes
8d5d304 fix(parser): support chained comparisons
685660b doc: Fix mention of add_test in docs (#898)
558a254 fix(lexer): support mid-chain dotted-integer attribute access (#900)
a4860a0 fix(multi_template): gate block-only APIs behind feature
29ac0b2 feat(templates): add required block support
See full diff in compare view

Updates aws-smithy-types from 1.4.7 to 1.4.8

Commits

See full diff in compare view

Updates aws-sdk-bedrockruntime from 1.130.0 to 1.131.0

Commits

See full diff in compare view

Updates aws-sdk-sagemakerruntime from 1.101.0 to 1.102.0

Commits

See full diff in compare view

Updates dashmap from 6.1.0 to 6.2.1

Release notes

Sourced from dashmap's releases.

v6.2.1

This is an interim maintenance release for the existing v6 branch before v7 can be released. This bumps the MSRV to 1.85 and updates dependencies to their latest versions.

Commits

749ed1f v6.2.1
d02b945 v6.2.0
b983625 update dependencies
94a294a bump msrv to 1.85
See full diff in compare view

Updates pulldown-cmark from 0.13.3 to 0.13.4

Release notes

Sourced from pulldown-cmark's releases.

0.13.4

Fix panic in specific cases with TightParagraph.

What's Changed

fix: panic in parser iterator for TightParagraph in some cases by @Martin1887 in pulldown-cmark/pulldown-cmark#1096

Full Changelog: pulldown-cmark/pulldown-cmark@v0.13.3...v0.13.4

Commits

38e4d08 chore: cargo update
9c61031 chore: bump pulldown-cmark version to 0.13.4
709268f Merge pull request #1096 from pulldown-cmark/fix-1095
c1d4450 Add test case from 1097
6fea453 fix: panic in parser iterator for TightParagraph in some cases
See full diff in compare view

Updates pastey from 0.2.2 to 0.2.3

Release notes

Sourced from pastey's releases.

v0.2.3

Improved

Improved Branch Coverage #34

Improved Line Coverage #32

Full Changelog: AS1100K/pastey@v0.2.2...v0.2.3

Changelog

Sourced from pastey's changelog.

[0.2.3] - 2026-05-20

Improved

Improved Branch Coverage #34

Improved Line Coverage #32

Commits

c377d07 RELEASE v0.2.3
d23c755 Improve Branch Coverage to 100% (#34)
998437f Improve Line Coverage (#32)
See full diff in compare view

Updates nostr from 0.44.2 to 0.44.3

Commits

See full diff in compare view

Updates tar from 0.4.45 to 0.4.46

Release notes

Sourced from tar's releases.

0.4.46

Security

archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm) by @cgwalters in composefs/tar-rs#454

See also GHSA-3cv2-h65g-fgmm

Other changes

ci: Fix and re-enable reverse dependency testing by @cgwalters in composefs/tar-rs#444

Update astral-tokio-tar requirement from 0.5 to 0.6 by @dependabot[bot] in composefs/tar-rs#446

Update some links by @atouchet in composefs/tar-rs#445

Add support of absolute paths by @zxvfc in composefs/tar-rs#426

docs: Expand notes on concurrent mutations and following symlinks by @cgwalters in composefs/tar-rs#453

Update repo links by @cgwalters in composefs/tar-rs#451

ci: Add crates.io trusted publishing workflow by @cgwalters in composefs/tar-rs#456

Release 0.4.46 by @cgwalters in composefs/tar-rs#455

New Contributors

@dependabot[bot] made their first contribution in composefs/tar-rs#446

@atouchet made their first contribution in composefs/tar-rs#445

@zxvfc made their first contribution in composefs/tar-rs#426

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

Commits

fc459c1 Release 0.4.46
43e05a8 ci: Add crates.io trusted publishing workflow
bba5666 Update repo links
cd94c46 docs: Document TOCTOU / concurrent-mutation threat model
1b4997c builder: Expand docs for follow_symlinks and append_dir_all
bab14dd archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm)
2349b49 Add support of absolute paths
39d0311 Update some links
59d803e Update astral-tokio-tar requirement from 0.5 to 0.6
8296b9a ci: Fix and re-enable reverse dependency testing (#444)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo-minor-and-patch group with 12 updates: | Package | From | To | | --- | --- | --- | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.150` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.10` | `0.6.11` | | [tree-sitter](https://github.com/tree-sitter/tree-sitter) | `0.26.8` | `0.26.9` | | [minijinja](https://github.com/mitsuhiko/minijinja) | `2.19.0` | `2.20.0` | | [aws-smithy-types](https://github.com/smithy-lang/smithy-rs) | `1.4.7` | `1.4.8` | | [aws-sdk-bedrockruntime](https://github.com/awslabs/aws-sdk-rust) | `1.130.0` | `1.131.0` | | [aws-sdk-sagemakerruntime](https://github.com/awslabs/aws-sdk-rust) | `1.101.0` | `1.102.0` | | [dashmap](https://github.com/xacrimon/dashmap) | `6.1.0` | `6.2.1` | | [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark) | `0.13.3` | `0.13.4` | | [pastey](https://github.com/as1100k/pastey) | `0.2.2` | `0.2.3` | | [nostr](https://github.com/rust-nostr/nostr) | `0.44.2` | `0.44.3` | | [tar](https://github.com/composefs/tar-rs) | `0.4.45` | `0.4.46` | Updates `serde_json` from 1.0.149 to 1.0.150 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) Updates `tower-http` from 0.6.10 to 0.6.11 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.10...tower-http-0.6.11) Updates `tree-sitter` from 0.26.8 to 0.26.9 - [Release notes](https://github.com/tree-sitter/tree-sitter/releases) - [Commits](tree-sitter/tree-sitter@v0.26.8...v0.26.9) Updates `minijinja` from 2.19.0 to 2.20.0 - [Release notes](https://github.com/mitsuhiko/minijinja/releases) - [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md) - [Commits](mitsuhiko/minijinja@minijinja-go/v2.19.0...minijinja-go/v2.20.0) Updates `aws-smithy-types` from 1.4.7 to 1.4.8 - [Release notes](https://github.com/smithy-lang/smithy-rs/releases) - [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-rs/commits) Updates `aws-sdk-bedrockruntime` from 1.130.0 to 1.131.0 - [Release notes](https://github.com/awslabs/aws-sdk-rust/releases) - [Commits](https://github.com/awslabs/aws-sdk-rust/commits) Updates `aws-sdk-sagemakerruntime` from 1.101.0 to 1.102.0 - [Release notes](https://github.com/awslabs/aws-sdk-rust/releases) - [Commits](https://github.com/awslabs/aws-sdk-rust/commits) Updates `dashmap` from 6.1.0 to 6.2.1 - [Release notes](https://github.com/xacrimon/dashmap/releases) - [Commits](xacrimon/dashmap@v6.1.0...v6.2.1) Updates `pulldown-cmark` from 0.13.3 to 0.13.4 - [Release notes](https://github.com/raphlinus/pulldown-cmark/releases) - [Commits](pulldown-cmark/pulldown-cmark@v0.13.3...v0.13.4) Updates `pastey` from 0.2.2 to 0.2.3 - [Release notes](https://github.com/as1100k/pastey/releases) - [Changelog](https://github.com/AS1100K/pastey/blob/master/CHANGELOG.md) - [Commits](AS1100K/pastey@v0.2.2...v0.2.3) Updates `nostr` from 0.44.2 to 0.44.3 - [Commits](https://github.com/rust-nostr/nostr/commits) Updates `tar` from 0.4.45 to 0.4.46 - [Release notes](https://github.com/composefs/tar-rs/releases) - [Commits](composefs/tar-rs@0.4.45...0.4.46) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tower-http dependency-version: 0.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tree-sitter dependency-version: 0.26.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: minijinja dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: aws-smithy-types dependency-version: 1.4.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: aws-sdk-bedrockruntime dependency-version: 1.131.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: aws-sdk-sagemakerruntime dependency-version: 1.102.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: dashmap dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-and-patch - dependency-name: pulldown-cmark dependency-version: 0.13.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: pastey dependency-version: 0.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: nostr dependency-version: 0.44.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch - dependency-name: tar dependency-version: 0.4.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

* main: (48 commits) docs: stats update (#9410) Build summon instructions per turn (#9329) Fix desktop chat search session limiting (#9366) fix(agents): serialize per-session agent creation to stop duplicate MCP init (#9357) chore(deps): bump image from 0.24.9 to 0.25.10 (#9383) chore(deps): bump agent-client-protocol from 0.11.1 to 0.12.1 (#9381) chore(deps): bump ctor from 0.2.9 to 1.0.6 (#9380) chore(deps): bump strum from 0.27.2 to 0.28.0 (#9384) chore(deps): bump lru from 0.16.3 to 0.18.0 (#9382) chore(deps): bump shlex from 1.3.0 to 2.0.1 (#9379) chore(deps): bump sigstore-verify from 0.6.6 to 0.8.0 (#9378) chore(deps): bump clap_mangen from 0.2.33 to 0.3.0 (#9377) chore(deps): bump the cargo-minor-and-patch group with 12 updates (#9376) chore(deps): bump qs and express in /documentation (#9375) chore(deps): bump docker/build-push-action from 6.18.0 to 7.2.0 (#9374) chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.4 (#9373) chore(deps): bump EmbarkStudios/cargo-deny-action from 2.0.17 to 2.0.19 (#9372) chore(deps): bump actions/setup-python from 5 to 6 (#9371) chore(deps): bump actions-rust-lang/setup-rust-toolchain from 1.16.0 to 1.16.1 (#9370) protocol cleanup (#9147) ...

…if-goose#9376) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 22, 2026

github-actions Bot approved these changes May 22, 2026

View reviewed changes

github-actions Bot enabled auto-merge May 22, 2026 19:08

jamadeo disabled auto-merge May 22, 2026 21:09

jamadeo added this pull request to the merge queue May 22, 2026

Merged via the queue into main with commit 61252fc May 22, 2026
23 checks passed

jamadeo deleted the dependabot/cargo/cargo-minor-and-patch-e523eb0665 branch May 22, 2026 22:09

github-actions Bot mentioned this pull request May 26, 2026

chore(release): release version 1.36.0 #9426

Closed

Navigation Menu

Uh oh!

chore(deps): bump the cargo-minor-and-patch group with 12 updates - #9376

chore(deps): bump the cargo-minor-and-patch group with 12 updates#9376
jamadeo merged 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-e523eb0665

dependabot Bot commented on behalf of github May 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 22, 2026

v1.0.150

tower-http-0.6.11

Added

Changed

Fixed

All PRs

v0.26.9

What's Changed

2.20.0

v6.2.1

0.13.4

What's Changed

v0.2.3

Improved

[0.2.3] - 2026-05-20

Improved

0.4.46

Security

Other changes

New Contributors

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant