Bump the rust group with 10 updates by dependabot[bot] · Pull Request #1789 · trailofbits/necessist

dependabot · 2026-01-18T21:00:26Z

Bumps the rust group with 10 updates:

Package	From	To
assert_cmd	`2.1.1`	`2.1.2`
clap	`4.5.51`	`4.5.54`
indexmap	`2.12.0`	`2.13.0`
serde_json	`1.0.148`	`1.0.149`
subprocess	`0.2.9`	`0.2.13`
swc_core	`53.0.1`	`55.0.0`
proc-macro2	`1.0.104`	`1.0.105`
quote	`1.0.42`	`1.0.43`
syn	`2.0.111`	`2.0.114`
libc	`0.2.178`	`0.2.180`

Updates assert_cmd from 2.1.1 to 2.1.2

Changelog

Sourced from assert_cmd's changelog.

[2.1.2] - 2026-01-09

Fixes

Add #[must_use] to help catch missing assertions

Commits

edda0b2 chore: Release assert_cmd version 2.1.2
891d412 docs: Update changelog
e39dc36 Merge pull request #267 from epage/must
d947cb0 fix: Add must_use before assertions are applied
7b8fd99 Merge pull request #264 from kemingy/doc_macro_semicolon
79f8e57 docs: add the missing semicolon for macro
6289384 chore(deps): Update Rust Stable to v1.92 (#262)
7b353d8 Merge pull request #260 from assert-rs/renovate/actions-checkout-6.x
48cda51 chore(deps): Update actions/checkout action to v6
ee88946 docs: Clarify cargo_bin_cmd
Additional commits viewable in compare view

Updates clap from 4.5.51 to 4.5.54

Release notes

Sourced from clap's releases.

v4.5.54

[4.5.54] - 2026-01-02

Fixes

(help) Move [default] to its own paragraph when PossibleValue::help is present in --help

v4.5.53

[4.5.53] - 2025-11-19

Features

Add default_values_if, default_values_ifs

v4.5.52

[4.5.52] - 2025-11-17

Fixes

Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup

Changelog

Sourced from clap's changelog.

[4.5.54] - 2026-01-02

Fixes

(help) Move [default] to its own paragraph when PossibleValue::help is present in --help

[4.5.53] - 2025-11-19

Features

Add default_values_if, default_values_ifs

[4.5.52] - 2025-11-17

Fixes

Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup

Commits

194c676 chore: Release
44838f6 docs: Update changelog
0f59d55 Merge pull request #6027 from Alpha1337k/master
3716f9f chore: Release
613b69a docs: Update changelog
d117f7a Merge pull request #6028 from epage/arg
cb8255d feat(builder): Allow quoted id's for arg macro
e2aa2f0 Feat: Add catch-all on external subcommands for zsh
b9c0aee Feat: Add external subcommands test to suite
1036060 Merge pull request #6025 from AldaronLau/typos-in-faq
Additional commits viewable in compare view

Updates indexmap from 2.12.0 to 2.13.0

Changelog

Sourced from indexmap's changelog.

2.13.0 (2026-01-07)

Implemented Clone for IntoKeys and IntoValues.

Added map::Slice::split_at_checked and split_at_mut_checked.

Added set::Slice::split_at_checked.

2.12.1 (2025-11-20)

Simplified a lot of internals using hashbrown's new bucket API.

Commits

a4aba99 Merge pull request #431 from cuviper/release-2.13.0
e345f3a Release 2.13.0
e6b677b Merge pull request #430 from cuviper/split_at_checked
61c9d53 Add Slice::split_at_checked and split_at_mut_checked
8b8d350 Merge pull request #426 from cuviper/clone-intokv
88efd0c impl Clone for IntoKeys and IntoValues
3b6d04b Merge pull request #425 from cuviper/inner-core
eb30eb1 Move crate::map::core to crate::inner
cfad758 Merge pull request #424 from cuviper/buckets
a96b9c7 Release 2.12.1
Additional commits viewable in compare view

Updates serde_json from 1.0.148 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @b41sh)

Commits

4f6dbfa Release 1.0.149
f3df680 Touch up PR 1306
e16730f Merge pull request #1306 from b41sh/fix-float-number-display
eeb2bcd Align arbitrary_precision number strings with zmij’s formatting
See full diff in compare view

Updates subprocess from 0.2.9 to 0.2.13

Commits

7b5166a Add formatting check to CI
30818de Remove code duplication in test
1bf5a8a Clean up documentation and reformat comments to 90 columns
f83f06b Make win32 code a bit closer to POSIX equivalent
413e456 Simplify PendingRead
0f98a9f Remove unnecessary Overlapped abstraction
df65dac Simplify timeout calculation
3797caa Bump version
7d022e4 Improve communicate() docstrings
1e6d6a5 Fix unresolved doc link
Additional commits viewable in compare view

Updates swc_core from 53.0.1 to 55.0.0

Changelog

Sourced from swc_core's changelog.

Changelog

[unreleased]

Bug Fixes

(ci) Handle merged PRs separately in milestone manager (#11409) (3554268)

(es/compat) Preserve this context in nested arrow functions (#11423) (f2bdaf2)

(es/es2017) Replace this in arrow functions during async-to-generator (#11450) (a993da6)

Features

(bindings/wasm) Enable ecma_lints feature to support semantic error detection (#11414) (1faa4a5)

(es/hooks) Implement VisitMutHook for Either type (#11428) (395c85e)

(es/hooks) Implement VisitMutHook for Option (#11429) (0bf1954)

(es/hooks) Add VisitHook trait for immutable AST visitors (#11437) (3efb41d)

(es/minifier) Improve nested template literal evaluation (#11411) (147df2f)

(es/minifier) Remove inlined IIFE arg and param (#11436) (2bc5d40)

Miscellaneous Tasks

(deps) Update rkyv (#11419) (432197b)

(deps) Update lru to 0.16.3 (#11438) (67c2d75)

(helpers) Replace MagicString with ast-grep's built-in edit API (#11410) (a3f0d33)

(hstr/wtf8) Address legacy FIXME comments by switching to derives (#11416) (f03bfd8)

... (truncated)

Commits

ab917ab chore: Publish crates with swc_core v55.0.0
a993da6 fix(es/es2017): Replace this in arrow functions during async-to-generator (...
764c3af chore: Fix collapsing of claude code reviews
affb6a2 ci: Collapse preivous claude[bot] PR review comments
4a27ae8 chore: Update AI instructions
0239523 refactor(es/minifier): Improve tpl to str (#11415)
144be84 Revert "feat(es/minifier): Remove inlined IIFE arg and param" (#11444)
2bc5d40 feat(es/minifier): Remove inlined IIFE arg and param (#11436)
1a5e5af chore: Use opus for Claude Code
a41e631 refactor(es/minifier): Migrate MinifierPass to Pass trait (#11442)
Additional commits viewable in compare view

Updates proc-macro2 from 1.0.104 to 1.0.105

Release notes

Sourced from proc-macro2's releases.

1.0.105

Make std dependencies more easily discoverable in source code (#528)

Commits

8c4135f Release 1.0.105
2825fb1 Make same crates available during probe as in crate root
cc5819c Merge pull request #528 from dtolnay/nostd
e78151e Disable std prelude
2fbddd4 Delete html_root_url comment
aa54fc3 Patch rustc-literal-escaper std dependencies
876f800 CStr is available in core since Rust 1.64
See full diff in compare view

Updates quote from 1.0.42 to 1.0.43

Release notes

Sourced from quote's releases.

1.0.43

Disambiguate references to stringify! macro inside generated code (#316)

Commits

635ee67 Release 1.0.43
5f605a6 Reorder module-level attributes in crate root
9c63cee Delete html_root_url comment
009af09 Disallow direct use of quote v1 as a no-std crate
546c7c2 Merge pull request 320 from tamird/no-std
fc59136 Merge pull request #319 from tamird/fix-tests
b3faa37 Make the crate no_std
8e70480 Merge pull request #318 from tamird/more-core
3b9996b tests: fix compilation with --no-default-features
4d1e4fe Change std imports to core/alloc
Additional commits viewable in compare view

Updates syn from 2.0.111 to 2.0.114

Release notes

Sourced from syn's releases.

2.0.114

Make std dependencies more easily discoverable in source code (#1956, thanks @tamird)

2.0.113

Allow parsing TypeParam with colon not followed by any type param bounds (#1953, thanks @wyfo)

2.0.112

Fix panic in LitByte::new().value() (#1951, thanks @VictorArcium)

Commits

211e0df Release 2.0.114
18cd645 Touch up PR 1956
8c9f7e1 Merge pull request #1956 from tamird/no-std-prep
f8a7a33 Disable std prelude
888a207 Delete html_root_url comment
8cfa32a Release 2.0.113
d5e19ff Do PR 1953 also for LifetimeParam
3fe4dc6 Merge pull request #1953 from wyfo/fix/type-param-colon-no-bounds
31508f3 Fix TypeParam expecting identifier after colon
1534d3a Update reqwest dev-dependency to 0.13
Additional commits viewable in compare view

Updates libc from 0.2.178 to 0.2.180

Release notes

Sourced from libc's releases.

0.2.180

Added

QNX: Add missing BPF and ifreq structures (#4769)

Fixed

Linux, L4Re: address soundness issues of CMSG_NXTHDR (#4903)

Linux-like: Handle zero-sized payload differences in CMSG_NXTHDR (#4903)

Musl: Fix incorrect definitions of struct stat on some 32-bit architectures (#4914)

NetBSD: RISC-V 64: Correct mcontext type definitions (#4886)

uClibc: Re-enable __SIZEOF_PTHREAD_COND_T on non-L4Re uclibc (#4915)

uClibc: Restructure Linux netlink module to resolve build errors (#4915)

0.2.179

With this release, we now have unstable support for 64-bit time_t on 32-bit platforms with both Musl and Glibc. Testing is appreciated!

For now, these can be enabled by setting environment variables during build:
RUST_LIBC_UNSTABLE_MUSL_V1_2_3=1
RUST_LIBC_UNSTABLE_GNU_TIME_BITS=64
Note that the exact configuration will change in the future. Setting the MUSL_V1_2_3 variable also enables some newer API unrelated to time_t.

Added

L4Re: Add uclibc aarch64 support (#4479)

Linux, Android: Add a generic definition for XCASE (#4847)

Linux-like: Add NAME_MAX (#4888)

Linux: Add AT_EXECVE_CHECK (#4422)

Linux: Add the SUN_LEN macro (#4269)

Linux: add getitimer and setitimer (#4890)

Linux: add pthread_tryjoin_n and pthread_timedjoin_np (#4887)

Musl: Add unstable support for 64-bit time_t on 32-bit platforms (#4463)

NetBSD, OpenBSD: Add interface LINK_STATE_* definitions from sys/net/if.h (#4751)

QuRT: Add support for Qualcomm QuRT (#4845)

Types: Add Padding::uninit() (#4862)

Fixed

Glibc: Link old version of cf{g,s}et{i,o}speed (#4882)

L4Re: Fixes for pthread (#4479)

L4re: Fix a wide variety of incorrect definitions (#4479)

Musl: Fix the value of CPU_SETSIZE on musl 1.2+ (#4865)

Musl: RISC-V: fix public padding fields in stat/stat64 (#4463)

Musl: s390x: Fix definition of SIGSTKSZ/MINSIGSTKSZ (#4884)

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.180 - 2026-01-08

Added

QNX: Add missing BPF and ifreq structures (#4769)

Fixed

Linux, L4Re: address soundness issues of CMSG_NXTHDR (#4903)

Linux-like: Handle zero-sized payload differences in CMSG_NXTHDR (#4903)

Musl: Fix incorrect definitions of struct stat on some 32-bit architectures (#4914)

NetBSD: RISC-V 64: Correct mcontext type definitions (#4886)

uClibc: Re-enable __SIZEOF_PTHREAD_COND_T on non-L4Re uclibc (#4915)

uClibc: Restructure Linux netlink module to resolve build errors (#4915)

0.2.179 - 2025-01-03

With this release, we now have unstable support for 64-bit time_t on 32-bit platforms with both Musl and Glibc. Testing is appreciated!

For now, these can be enabled by setting environment variables during build:
RUST_LIBC_UNSTABLE_MUSL_V1_2_3=1
RUST_LIBC_UNSTABLE_GNU_TIME_BITS=64
Note that the exact configuration will change in the future. Setting the MUSL_V1_2_3 variable also enables some newer API unrelated to time_t.

Added

L4Re: Add uclibc aarch64 support (#4479)

Linux, Android: Add a generic definition for XCASE (#4847)

Linux-like: Add NAME_MAX (#4888)

Linux: Add AT_EXECVE_CHECK (#4422)

Linux: Add the SUN_LEN macro (#4269)

Linux: add getitimer and setitimer (#4890)

Linux: add pthread_tryjoin_n and pthread_timedjoin_np (#4887)

Musl: Add unstable support for 64-bit time_t on 32-bit platforms (#4463)

NetBSD, OpenBSD: Add interface LINK_STATE_* definitions from sys/net/if.h (#4751)

QuRT: Add support for Qualcomm QuRT (#4845)

Types: Add Padding::uninit() (#4862)

Fixed

Glibc: Link old version of cf{g,s}et{i,o}speed (#4882)

L4Re: Fixes for pthread (#4479)

L4re: Fix a wide variety of incorrect definitions (#4479)

... (truncated)

Commits

4b38c69 chore: release libc 0.2.180
300e643 qnx: add missing BPF and ifreq structures
12fd831 ci: Add rtems to basic tier 3 checks
b062844 Only test addresses of cmsghdrs that are multiples of the size of cmsghdr.
676a4f8 linux: Move membarrier.h constants to src/new
0803fae linux: Restructure netlink to src/new
72f4c1a uclibc: Re-enable __SIZEOF_PTHREAD_COND_T on non-L4Re uclibc
757e55a netbsd/riscv64.rs: make changes so that this builds again.
042f118 musl: Fix incorrect definitions of struct stat on some architectures
03755c4 linux, emscripten, android, l4re: handle zero-sized payload differences in CM...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust group with 10 updates: | Package | From | To | | --- | --- | --- | | [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.1.1` | `2.1.2` | | [clap](https://github.com/clap-rs/clap) | `4.5.51` | `4.5.54` | | [indexmap](https://github.com/indexmap-rs/indexmap) | `2.12.0` | `2.13.0` | | [serde_json](https://github.com/serde-rs/json) | `1.0.148` | `1.0.149` | | [subprocess](https://github.com/hniksic/rust-subprocess) | `0.2.9` | `0.2.13` | | [swc_core](https://github.com/swc-project/swc) | `53.0.1` | `55.0.0` | | [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.104` | `1.0.105` | | [quote](https://github.com/dtolnay/quote) | `1.0.42` | `1.0.43` | | [syn](https://github.com/dtolnay/syn) | `2.0.111` | `2.0.114` | | [libc](https://github.com/rust-lang/libc) | `0.2.178` | `0.2.180` | Updates `assert_cmd` from 2.1.1 to 2.1.2 - [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md) - [Commits](assert-rs/assert_cmd@v2.1.1...v2.1.2) Updates `clap` from 4.5.51 to 4.5.54 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.51...clap_complete-v4.5.54) Updates `indexmap` from 2.12.0 to 2.13.0 - [Changelog](https://github.com/indexmap-rs/indexmap/blob/main/RELEASES.md) - [Commits](indexmap-rs/indexmap@2.12.0...2.13.0) Updates `serde_json` from 1.0.148 to 1.0.149 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.148...v1.0.149) Updates `subprocess` from 0.2.9 to 0.2.13 - [Commits](hniksic/rust-subprocess@release/0.2.9...release/0.2.13) Updates `swc_core` from 53.0.1 to 55.0.0 - [Release notes](https://github.com/swc-project/swc/releases) - [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG-CORE.md) - [Commits](https://github.com/swc-project/swc/compare/swc_core@v53.0.1...swc_core@v55.0.0) Updates `proc-macro2` from 1.0.104 to 1.0.105 - [Release notes](https://github.com/dtolnay/proc-macro2/releases) - [Commits](dtolnay/proc-macro2@1.0.104...1.0.105) Updates `quote` from 1.0.42 to 1.0.43 - [Release notes](https://github.com/dtolnay/quote/releases) - [Commits](dtolnay/quote@1.0.42...1.0.43) Updates `syn` from 2.0.111 to 2.0.114 - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](dtolnay/syn@2.0.111...2.0.114) Updates `libc` from 0.2.178 to 0.2.180 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.180/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.178...0.2.180) --- updated-dependencies: - dependency-name: assert_cmd dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: clap dependency-version: 4.5.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: indexmap dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: serde_json dependency-version: 1.0.149 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: subprocess dependency-version: 0.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: swc_core dependency-version: 55.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust - dependency-name: proc-macro2 dependency-version: 1.0.105 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: quote dependency-version: 1.0.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: syn dependency-version: 2.0.114 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: libc dependency-version: 0.2.180 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 18, 2026

dependabot bot requested a review from smoelius as a code owner January 18, 2026 21:00

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 18, 2026

This was referenced Jan 18, 2026

Bump clap from 4.5.51 to 4.5.54 #1781

Closed

Bump swc_core from 53.0.1 to 54.0.0 #1782

Closed

Bump syn from 2.0.111 to 2.0.113 #1783

Closed

Bump subprocess from 0.2.9 to 0.2.13 #1784

Closed

Bump libc from 0.2.178 to 0.2.179 #1785

Closed

Update supply_chain.json

6da9c20

smoelius added this pull request to the merge queue Jan 18, 2026

Merged via the queue into master with commit 41dc652 Jan 19, 2026
19 checks passed

smoelius deleted the dependabot/cargo/rust-ec306eb43c branch January 19, 2026 00:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the rust group with 10 updates#1789

Bump the rust group with 10 updates#1789
smoelius merged 2 commits intomasterfrom
dependabot/cargo/rust-ec306eb43c

dependabot bot commented on behalf of github Jan 18, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments

Conversation

dependabot bot commented on behalf of github Jan 18, 2026

[2.1.2] - 2026-01-09

Fixes

v4.5.54

[4.5.54] - 2026-01-02

Fixes

v4.5.53

[4.5.53] - 2025-11-19

Features

v4.5.52

[4.5.52] - 2025-11-17

Fixes

[4.5.54] - 2026-01-02

Fixes

[4.5.53] - 2025-11-19

Features

[4.5.52] - 2025-11-17

Fixes

2.13.0 (2026-01-07)

2.12.1 (2025-11-20)

v1.0.149

Changelog

[unreleased]

Bug Fixes

Features

Miscellaneous Tasks

1.0.105

1.0.43

2.0.114

2.0.113

2.0.112

0.2.180

Added

Fixed

0.2.179

Added

Fixed

0.2.180 - 2026-01-08

Added

Fixed

0.2.179 - 2025-01-03

Added

Fixed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments