cargo: bump the cargo-minor-and-patch group across 1 directory with 11 updates

[dependabot]

Bumps the cargo-minor-and-patch group with 11 updates in the / directory:

Package	From	To
anyhow	1.0.102	1.0.104
thiserror	2.0.18	2.0.19
clap	4.6.1	4.6.4
clap_complete	4.6.5	4.6.7
humantime	2.3.0	2.4.0
serde	1.0.228	1.0.229
serde_json	1.0.150	1.0.151
crossbeam-channel	0.5.15	0.5.16
regex	1.12.4	1.13.1
unicode-width	0.2.0	0.2.2
vergen-gitcl	10.0.0	10.0.1

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

• Update syn dev-dependency to version 3

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 1dbe186 Release 1.0.104
• f6479f8 Update to syn 3
• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

• Update to syn 3

Commits

• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
• c50e387 chore: improve thiserror maintenance path
• d4a2507 Raise minimum tested compiler to rust 1.85
• 99e8a6c Unpin CI miri toolchain
• 9ac165c Pin CI miri to nightly-2026-02-11
• Additional commits viewable in compare view

Updates clap from 4.6.1 to 4.6.4

Release notes

Sourced from clap's releases.

v4.6.4

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

v4.6.3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Changelog

Sourced from clap's changelog.

[4.6.4] - 2026-07-21

Internal

• Update to syn v3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Commits

• 87ec1ad chore: Release
• 78f2529 docs: Update changelog
• b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
• 74c6666 fix(complete): Keep zsh candidate order
• d142d8f Merge pull request #6360 from epage/string
• ba89563 style: Prefer explicit string operations
• bea966e Merge pull request #6359 from epage/man
• b811986 chore(man):Remove unused required-features
• 0010bf2 Merge pull request #6358 from clap-rs/renovate/crate-ci-typos-1.x
• bab9b24 chore(deps): Update compatible (dev) (#6357)
• Additional commits viewable in compare view

Updates clap_complete from 4.6.5 to 4.6.7

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates humantime from 2.3.0 to 2.4.0

Release notes

Sourced from humantime's releases.

2.4.0

What's Changed

• feat: allow creating Duration in const context by @​ctron in chronotope/humantime#70

Commits

• fc09281 chore: prepare release 2.4.0
• 8a022cc feat: allow creating Duration in const context
• 27a4f77 Explicitly set rust-version to 1.60
• acc3c19 ci: upgrade to actions/checkout v7
• 3acf96b ci: fix workflow formatting
• See full diff in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• See full diff in compare view

Updates crossbeam-channel from 0.5.15 to 0.5.16

Release notes

Sourced from crossbeam-channel's releases.

crossbeam-channel 0.5.16

• Improve support for rust-analyzer auto-completion of code inside select!/select_biased! macro. (#1240)
• Make never const. (#1250)

Commits

• 9b56303 Prepare for the next release
• a078b17 ci: Sync config with main
• 508c29d Remove crossbeam-skiplist which is not published from this branch from worksp...
• 6a20e57 tests: Fix mismatched_lifetime_syntaxes
• c2d674f epoch: Fix rustdoc::invalid_rust_codeblocks
• bd6563e Update no_atomic.rs
• d3e1e36 Make CachePadded<T> have C repr to allow casting to and from T (#1270)
• c0c466e channel: Use non-poison Mutex
• 8b3940f Add missing word to docs (#1208)
• df6eec0 docs: Link select_biased! from select! macro (#1202)
• Additional commits viewable in compare view

Updates regex from 1.12.4 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

• #1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

• #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

Commits

• 2b52759 1.13.1, redux
• 40e9823 1.13.1
• 75fcb96 changelog: 1.13.1
• 64ad0b6 automata: fix bug in reverse suffix/inner optimization
• fa91c31 automata: fix a bug caught by Codex review
• 30390ec automata: formatting tweaks
• 821a8eb automata: refactor reverse suffix/inner search slightly
• 10afd70 automata: expose the extracted literals for inner literal extraction
• 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
• 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
• Additional commits viewable in compare view

Updates unicode-width from 0.2.0 to 0.2.2

Commits

• 9d98411 Publish 0.2.2 (#79)
• 4bba1d1 Support Unicode 17 (#75)
• 0085e91 Publish 0.2.1
• 6db0c14 Remove compiler-builtins from rustc-dep-of-std dependencies (#77)
• 0bccd3f update copyright year (#76)
• 7a7fcdc Support Unicode 16 (#74)
• 82d7136 Advertise and enforce MSRV (#73)
• e77b292 Make characters with Line_Break=Ambiguous ambiguous (#61)
• 5a7fced Update version number in Readme (#70)
• See full diff in compare view

Updates vergen-gitcl from 10.0.0 to 10.0.1

Release notes

Sourced from vergen-gitcl's releases.

vergen 10.0.1

Patch release adding a new error-fallback knob, a builder-access API addition, dependency updates, and a security-audit refresh.

New features

• VERGEN_DEFAULT_ON_ERROR fallback (#509) — When building outside a git worktree (or any time an instruction cannot be generated), the new VERGEN_DEFAULT_ON_ERROR env var and Emitter::default_on_error() builder method populate missing instructions with the idempotent default (VERGEN_IDEMPOTENT_OUTPUT) so env!("VERGEN_GIT_SHA") keeps compiling — while builds inside a real worktree still emit real values.
• all() builder accessor (#513) — Exposes Build::all(), Cargo::all(), Rustc::all(), and Sysinfo::all() as public methods that return the builder with all instructions enabled, enabling subtractive modification (turn all on, then selectively disable).

Dependency updates

• bon 3.9.1 → 3.9.3
• gix 0.84.0 → 0.85.0
• regex 1.12.3 → 1.12.4
• time 0.3.47 → 0.3.51
• sysinfo 0.39.3 → 0.39.5
• memmap2 0.9.10 → 0.9.11 (resolves RUSTSEC-2026-0186)

Security audit refresh

• Added RUSTSEC-2026-0173 ignore (proc-macro-error2 unmaintained, informational only)
• Removed RUSTSEC-2025-0055 ignore (tracing-subscriber now resolved to ≥ 0.3.20)
• Removed RUSTSEC-2025-0141 ignore (bincode no longer in the dependency tree)
• cargo audit passes clean

Other

• Fixed inaccurate fail_on_error and idempotent docs (#509)
• Added cargo:rerun-if-changed=VERGEN_DEFAULT_ON_ERROR rerun directive
• Bumped cargo-binstall in CI (#503)
• Parse deprecation fixes (#505)

Full Changelog: rustyhorde/vergen@v10.0.0...10.0.1

Commits

• 23a6159 feat(api): expose all that returns builder for subtractive modification. (#513)
• b1ee361 v10.0.1 enhancements: VERGEN_DEFAULT_ON_ERROR fallback, dependency updates, a...
• a3ffa56 Fix parse deprecation issues (#505)
• 2bab576 chore: version bump for next release (#504)
• ee3edb2 Bump cargo-bins/cargo-binstall from 1.19.1 to 1.20.0 (#503)
• See full diff in compare view

[dependabot]

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.