Bump the rust-dependencies group across 1 directory with 9 updates #5925

dependabot · 2026-01-28T00:34:49Z

Bumps the rust-dependencies group with 9 updates in the / directory:

Package	From	To
uuid	`1.19.0`	`1.20.0`
clap	`4.5.54`	`4.5.55`
minijinja	`2.14.0`	`2.15.1`
moka	`0.12.12`	`0.12.13`
aws-smithy-types	`1.3.6`	`1.4.0`
aws-smithy-eventstream	`0.60.14`	`0.60.15`
aws-smithy-runtime-api	`1.10.0`	`1.11.0`
jsonwebtoken	`10.2.0`	`10.3.0`
quote	`1.0.43`	`1.0.44`

Updates uuid from 1.19.0 to 1.20.0

Release notes

Sourced from uuid's releases.

v1.20.0

What's Changed

Derive Ord and PartialOrd for NonNilUuid by @mivort in uuid-rs/uuid#854

Implement Deserialize on adapter types by @KodrAus in uuid-rs/uuid#855

Deprecate macro-diagnostics by @KodrAus in uuid-rs/uuid#856

Prepare for 1.20.0 release by @KodrAus in uuid-rs/uuid#857

New Contributors

@mivort made their first contribution in uuid-rs/uuid#854

Full Changelog: uuid-rs/uuid@v1.19.0...v1.20.0

Commits

c3346dd Merge pull request #857 from uuid-rs/cargo/v1.20.0
66eebc3 prepare for 1.20.0 release
3b66758 Merge pull request #856 from uuid-rs/docs/bytes-le-ordering
e2bdd44 don't run UI tests in wasm
b6dc7ec note that ordering applies to fields in to/from_bytes_le
a0281cd Merge pull request #855 from uuid-rs/feat/serde-fmt
db27b67 Merge pull request #854 from mivort/non-nil-uuid-ord
efb06f2 implement Deserialize on adapter types
50d44ad Derive Ord and PartialOrd for NonNilUuid
See full diff in compare view

Updates clap from 4.5.54 to 4.5.55

Release notes

Sourced from clap's releases.

v4.5.55

[4.5.55] - 2026-01-27

Fixes

Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

Changelog

Sourced from clap's changelog.

[4.5.55] - 2026-01-27

Fixes

Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

Commits

4c03930 chore: Release
fb948a2 docs: Update changelog
0f60239 Merge pull request #6057 from GilShoshan94/master
83d4206 test: Update fixture to cover all cases + styling
b13274d fix: Rename pvs to dvs for default values
df92ea0 feat(help): Allow styling for inline context
0e535e5 chore(deps): Update compatible (dev) (#6054)
de57287 chore(deps): Update Rust Stable to v1.88 (#6048)
5504a13 Merge pull request #6047 from clap-rs/revert-6045-cleanup-docsrs
c1c243c Revert "Cleanup docs.rs related issues"
Additional commits viewable in compare view

Updates minijinja from 2.14.0 to 2.15.1

Release notes

Sourced from minijinja's releases.

2.15.1

Release Notes

Re-release of 2.15.0 because of a bad release.

Install minijinja-cli 2.15.1

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/minijinja/releases/download/2.15.1/minijinja-cli-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/minijinja/releases/download/2.15.1/minijinja-cli-installer.ps1 | iex"
Download minijinja-cli 2.15.1

File Platform Checksum

minijinja-cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum

minijinja-cli-x86_64-apple-darwin.tar.xz Intel macOS checksum

minijinja-cli-i686-pc-windows-msvc.zip x86 Windows checksum

minijinja-cli-x86_64-pc-windows-msvc.zip x64 Windows checksum

minijinja-cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum

minijinja-cli-i686-unknown-linux-gnu.tar.xz x86 Linux checksum

minijinja-cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

minijinja-cli-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum

minijinja-cli-i686-unknown-linux-musl.tar.xz x86 MUSL Linux checksum

minijinja-cli-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

2.15.0

Release Notes

Added py.typed marker for PEP 561 typing support in Python bindings. #853

Added optional default argument to map.get() method in pycompat. #852

Added a go language port. #854

Fixed stability guarantees for the |sort filter when using reverse=true. #856

Fixed missing SemiStrict undefined mapping in Python bindings. #859

Install minijinja-cli 2.15.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/minijinja/releases/download/2.15.0/minijinja-cli-installer.sh | sh

... (truncated)

Changelog

Sourced from minijinja's changelog.

2.15.1

Re-release of 2.15.0 because of a bad release.

2.15.0

Added py.typed marker for PEP 561 typing support in Python bindings. #853

Added optional default argument to map.get() method in pycompat. #852

Added a go language port. #854

Fixed stability guarantees for the |sort filter when using reverse=true. #856

Fixed missing SemiStrict undefined mapping in Python bindings. #859

Commits

96caba2 Release 2.15.1
00c0d7c Copy LICENSE file instead of symlink for pkg.go.dev
3c35add Update cargo-dist to 0.30.3 for macOS-15 runners
5e6dbd1 Release 2.15.0
0bc0429 Improve some go examples
1841624 Update some deps
bbf292e Added stacktrace support go minijinja-go
7c7c241 Correct go link in readme
70784da Added more go examples
98826c4 Ensure to tag go releases
Additional commits viewable in compare view

Updates moka from 0.12.12 to 0.12.13

Release notes

Sourced from moka's releases.

Moka 0.12.13

Version 0.12.13

Fixed

Fixed/mitigated use-after-free issues in the hierarchical timer wheels when Expiry returns None (Issue #565 gh-issue-0565, reported by @sharksforarms).

Fixed a bug that caused freed timer nodes to remain in the timer wheels in some edge cases (#566 gh-pull-0566 by @powergee).

The mitigation added to v0.12.12 was enhanced by atomically reading the expiration state to prevent rare race conditions that could cause use-after-free issues (#570 gh-pull-0570).

Fixed Expiry::expire_after_update not clearing expiration time for expired entries (future::Cache: #549 gh-pull-0549, by @singulared, sync::Cache: #564 gh-pull-0564).

Changelog

Sourced from moka's changelog.

Version 0.12.13

Fixed

Fixed/mitigated use-after-free issues in the hierarchical timer wheels when Expiry returns None (Issue #565[gh-issue-0565], reported by [@sharksforarms][gh-sharksforarms]).

Fixed a bug that caused freed timer nodes to remain in the timer wheels in some edge cases (#566[gh-pull-0566] by [@powergee][gh-powergee]).

The mitigation added to v0.12.12 was enhanced by atomically reading the expiration state to prevent rare race conditions that could cause use-after-free issues (#570[gh-pull-0570]).

Fixed Expiry::expire_after_update not clearing expiration time for expired entries (future::Cache: #549[gh-pull-0549], by [@singulared][gh-singulared], sync::Cache: #564[gh-pull-0564]).

Commits

b5bdb4c Merge pull request #571 from moka-rs/exclude-lint-config
e8dff1f Add .markdownlint.json to the exclude files of the crate package
c6bcdb6 Merge pull request #570 from moka-rs/mitigate-timewheel-toctou-issue
2aaa2e5 Add .markdowlint.json to change the Markdown indents to four spaces
04b2460 Update the changelog
4f053aa Refactor duration comparison code for unit testing in both sync and future
ee982db A minor doc comment fix
49978c5 Try not to break the gen bits when adjusting timestamps that collide with the...
f1b6ec1 Prevent set_timer_node to re-read expiry_gen from expiration_state()
e959b7f Ensure that set_expiration_time accidentally pack real timestamp equal
Additional commits viewable in compare view

Updates aws-smithy-types from 1.3.6 to 1.4.0

Commits

See full diff in compare view

Updates aws-smithy-eventstream from 0.60.14 to 0.60.15

Commits

See full diff in compare view

Updates aws-smithy-runtime-api from 1.10.0 to 1.11.0

Commits

See full diff in compare view

Updates jsonwebtoken from 10.2.0 to 10.3.0

Changelog

Sourced from jsonwebtoken's changelog.

10.3.0 (2026-01-27)

Export everything needed to define your own CryptoProvider

Fix type confusion with exp/nbf when not required

Commits

abbc307 Fix type confusion
e99740d fix: bump minimal version requirements (#481)
50d15e0 Use try_sign to avoid panics (#479)
245858f Bump some dep
122c2ed Bump action number in CI
72e0c7f Expose cryptography backends via CryptoProvider (#452)
See full diff in compare view

Updates quote from 1.0.43 to 1.0.44

Release notes

Sourced from quote's releases.

1.0.44

Support raw lifetime syntax 'r#async (#323)

Commits

ad9fb40 Release 1.0.44
6df23cd Merge pull request #323 from dtolnay/lifetime
f784891 Support raw lifetime
508dbdd Add test of raw lifetime
27cb8c9 Update ui test suite to nightly-2026-01-21
bdd36fc Touch up PR 321
d62d6ec Merge pull request #321 from tamird/doc-alloc-format
242c683 doc: restore link to format!
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [uuid](https://github.com/uuid-rs/uuid) | `1.19.0` | `1.20.0` | | [clap](https://github.com/clap-rs/clap) | `4.5.54` | `4.5.55` | | [minijinja](https://github.com/mitsuhiko/minijinja) | `2.14.0` | `2.15.1` | | [moka](https://github.com/moka-rs/moka) | `0.12.12` | `0.12.13` | | [aws-smithy-types](https://github.com/smithy-lang/smithy-rs) | `1.3.6` | `1.4.0` | | [aws-smithy-eventstream](https://github.com/smithy-lang/smithy-rs) | `0.60.14` | `0.60.15` | | [aws-smithy-runtime-api](https://github.com/smithy-lang/smithy-rs) | `1.10.0` | `1.11.0` | | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `10.2.0` | `10.3.0` | | [quote](https://github.com/dtolnay/quote) | `1.0.43` | `1.0.44` | Updates `uuid` from 1.19.0 to 1.20.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.19.0...v1.20.0) Updates `clap` from 4.5.54 to 4.5.55 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.54...clap_complete-v4.5.55) Updates `minijinja` from 2.14.0 to 2.15.1 - [Release notes](https://github.com/mitsuhiko/minijinja/releases) - [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md) - [Commits](mitsuhiko/minijinja@2.14.0...minijinja-go/v2.15.1) Updates `moka` from 0.12.12 to 0.12.13 - [Release notes](https://github.com/moka-rs/moka/releases) - [Changelog](https://github.com/moka-rs/moka/blob/main/CHANGELOG.md) - [Commits](moka-rs/moka@v0.12.12...v0.12.13) Updates `aws-smithy-types` from 1.3.6 to 1.4.0 - [Release notes](https://github.com/smithy-lang/smithy-rs/releases) - [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-rs/commits) Updates `aws-smithy-eventstream` from 0.60.14 to 0.60.15 - [Release notes](https://github.com/smithy-lang/smithy-rs/releases) - [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-rs/commits) Updates `aws-smithy-runtime-api` from 1.10.0 to 1.11.0 - [Release notes](https://github.com/smithy-lang/smithy-rs/releases) - [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-rs/commits) Updates `jsonwebtoken` from 10.2.0 to 10.3.0 - [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](Keats/jsonwebtoken@v10.2.0...v10.3.0) Updates `quote` from 1.0.43 to 1.0.44 - [Release notes](https://github.com/dtolnay/quote/releases) - [Commits](dtolnay/quote@1.0.43...1.0.44) --- updated-dependencies: - dependency-name: uuid dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: clap dependency-version: 4.5.55 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: minijinja dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: moka dependency-version: 0.12.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: aws-smithy-types dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: aws-smithy-eventstream dependency-version: 0.60.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: aws-smithy-runtime-api dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: jsonwebtoken dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: quote dependency-version: 1.0.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file rust This issue involves Rust. labels Jan 28, 2026

Aaron1011 added the force-add-to-merge-queue A special label that allows a PR to be *added* to the merge queue early label Jan 29, 2026

Aaron1011 enabled auto-merge January 29, 2026 15:58

Aaron1011 approved these changes Jan 29, 2026

View reviewed changes

Aaron1011 added this pull request to the merge queue Jan 29, 2026

github-merge-queue bot removed this pull request from the merge queue due to failed status checks Jan 29, 2026

Aaron1011 added this pull request to the merge queue Jan 29, 2026

Merged via the queue into main with commit 7ccf1b2 Jan 29, 2026
67 of 68 checks passed

Aaron1011 deleted the dependabot/cargo/rust-dependencies-4cc83929c3 branch January 29, 2026 17:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the rust-dependencies group across 1 directory with 9 updates #5925

Bump the rust-dependencies group across 1 directory with 9 updates #5925

dependabot bot commented on behalf of github Jan 28, 2026

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

File	Platform	Checksum
minijinja-cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
minijinja-cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
minijinja-cli-i686-pc-windows-msvc.zip	x86 Windows	checksum
minijinja-cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
minijinja-cli-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
minijinja-cli-i686-unknown-linux-gnu.tar.xz	x86 Linux	checksum
minijinja-cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
minijinja-cli-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
minijinja-cli-i686-unknown-linux-musl.tar.xz	x86 MUSL Linux	checksum
minijinja-cli-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Bump the rust-dependencies group across 1 directory with 9 updates #5925

Bump the rust-dependencies group across 1 directory with 9 updates #5925

Conversation

dependabot bot commented on behalf of github Jan 28, 2026

v1.20.0

What's Changed

New Contributors

v4.5.55

[4.5.55] - 2026-01-27

Fixes

[4.5.55] - 2026-01-27

Fixes

2.15.1

Release Notes

Install minijinja-cli 2.15.1

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download minijinja-cli 2.15.1

2.15.0

Release Notes

Install minijinja-cli 2.15.0

Install prebuilt binaries via shell script

2.15.1

2.15.0

Moka 0.12.13

Version 0.12.13

Fixed

Version 0.12.13

Fixed

10.3.0 (2026-01-27)

1.0.44

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant