Skip to content

Bump the "backend" group with 1 update across multiple ecosystems#112

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/backend-83c3d50648
Open

Bump the "backend" group with 1 update across multiple ecosystems#112
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/backend-83c3d50648

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026 •
edited
Loading

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the backend group with 8 updates:

Package From To
askama 0.15.4 0.15.6
aws-sdk-s3 1.125.0 1.126.0
clap 4.5.60 4.6.0
duckdb 1.4.4 1.10501.0
md-5 0.10.6 0.11.0
tempfile 3.26.0 3.27.0
tracing-subscriber 0.3.22 0.3.23
which 8.0.1 8.0.2

Updates askama from 0.15.4 to 0.15.6

Release notes

Sourced from askama's releases.

v0.15.6

What's Changed

Full Changelog: askama-rs/askama@v0.15.5...v0.15.6

v0.15.5

What's Changed

Full Changelog: askama-rs/askama@v0.15.4...v0.15.5

Commits
  • 4260d0d Merge pull request #719 from GuillaumeGomez/update-crate-version
  • 1471702 Update crate version to 0.15.6
  • fb6f3fb Merge pull request #718 from GuillaumeGomez/improve-ui-tests
  • 4f36391 Merge pull request #717 from GuillaumeGomez/fix-non-ident-block
  • 1b4350b Update trybuild version to 1.0.116 to enforce diagnostics width
  • 2ad677c Correctly handle non-ident item in block error
  • 5e12585 Merge pull request #714 from jplatte/jplatte/lt-refactor
  • 0ebfd0f Merge pull request #716 from jplatte/jplatte/clippy
  • 3c0f1b0 Merge pull request #715 from jplatte/jplatte/winnow1
  • acc29f3 Remove unnecessary .clone()
  • Additional commits viewable in compare view

Updates aws-sdk-s3 from 1.125.0 to 1.126.0

Commits

Updates clap from 4.5.60 to 4.6.0

Changelog

Sourced from clap's changelog.

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits

Updates duckdb from 1.4.4 to 1.10501.0

Release notes

Sourced from duckdb's releases.

v1.10501.0

Highlights

  • New profiling metrics API: collect query profiling data (timing, row counts, operator tree) via Connection.
  • Removed deprecated arrow2 exposure: step2() is gone. Use query_polars() for Polars DataFrames or step() for raw arrow-rs access. Breaking change.
  • duckdb_entrypoint_c_api macro now suppresses the clippy::missing_safety_doc lint automatically.
  • Upgraded to Arrow 58 and bundled DuckDB v1.5.1.

What's Changed

New Contributors

Full Changelog: duckdb/duckdb-rs@v1.10500.0...v1.10501.0

v1.10500.0

[!WARNING] New crate versioning scheme. Crate versions now encode the DuckDB version in their second semver component (1.MAJOR_MINOR_PATCH.x), allowing patch releases independent of DuckDB. For example, DuckDB v1.5.0 maps to crate version 1.10500.x.

Highlights

  • Full rust_decimal::Decimal support: FromSql, ToSql, and Appender binding for decimal values.
  • Params implemented for tuples (up to arity 16), enabling conn.execute("...", (a, b, c)) syntax.
  • ENUM columns now support FromSql<String> directly.
  • Date32 and Time64 can now be bound in prepared statements.
  • Loadable extensions need only a single duckdb crate dependency; eliminated .unwrap() panic paths in duckdb_entrypoint_c_api macro.
  • Fix: cloned database handles now keep the original db handle alive (fixes #312).
  • Fix: chrono datetime writes normalized to UTC.
  • Upgraded to Rust edition 2024, Arrow 57, and bundled DuckDB v1.5.0.

What's Changed

... (truncated)

Commits

Updates md-5 from 0.10.6 to 0.11.0

Commits

Updates tempfile from 3.26.0 to 3.27.0

Changelog

Sourced from tempfile's changelog.

3.27.0

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

  1. TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
  2. The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @​meng-xu-cs for reporting this issue.

Commits
  • 5c8fa12 chore: release 3.27.0
  • e34e574 test: disable uds conflict test on redox
  • 772c795 test: add CWD guards
  • 2632fb9 fix: resolve relative paths when constructing TempPath
  • See full diff in compare view

Updates tracing-subscriber from 0.3.22 to 0.3.23

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.23

Fixed

  • Allow ansi sanitization to be disabled (#3484)

#3484: tokio-rs/tracing#3484

Commits

Updates which from 8.0.1 to 8.0.2

Release notes

Sourced from which's releases.

8.0.2

What's Changed

New Contributors

Full Changelog: harryfei/which-rs@8.0.1...8.0.2

Changelog

Sourced from which's changelog.

8.0.2

  • Dependency on home_env removed, the implementation found in rust 1.85.0 for a home directory has been fixed. Thanks, [@​madsmtm],(https://github.com/madsmtm) for this contribution to which!
  • Dependency on winsafe removed, code for Windows API is now handwritten.
  • Dependency on rustix removed, we now depend on libc directly to reduce compile times.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the backend group with 8 updates
5d7da50 
Bumps the backend group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [askama](https://github.com/askama-rs/askama) | `0.15.4` | `0.15.6` |
| [aws-sdk-s3](https://github.com/awslabs/aws-sdk-rust) | `1.125.0` | `1.126.0` |
| [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.0` |
| [duckdb](https://github.com/duckdb/duckdb-rs) | `1.4.4` | `1.10501.0` |
| [md-5](https://github.com/RustCrypto/hashes) | `0.10.6` | `0.11.0` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.26.0` | `3.27.0` |
| [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` |
| [which](https://github.com/harryfei/which-rs) | `8.0.1` | `8.0.2` |


Updates `askama` from 0.15.4 to 0.15.6
- [Release notes](https://github.com/askama-rs/askama/releases)
- [Commits](askama-rs/askama@v0.15.4...v0.15.6)

Updates `aws-sdk-s3` from 1.125.0 to 1.126.0
- [Release notes](https://github.com/awslabs/aws-sdk-rust/releases)
- [Commits](https://github.com/awslabs/aws-sdk-rust/commits)

Updates `clap` from 4.5.60 to 4.6.0
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.0)

Updates `duckdb` from 1.4.4 to 1.10501.0
- [Release notes](https://github.com/duckdb/duckdb-rs/releases)
- [Commits](duckdb/duckdb-rs@v1.4.4...v1.10501.0)

Updates `md-5` from 0.10.6 to 0.11.0
- [Commits](RustCrypto/hashes@md-5-v0.10.6...md2-v0.11.0)

Updates `tempfile` from 3.26.0 to 3.27.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.26.0...v3.27.0)

Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `which` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/harryfei/which-rs/releases)
- [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md)
- [Commits](harryfei/which-rs@8.0.1...8.0.2)

---
updated-dependencies:
- dependency-name: askama
  dependency-version: 0.15.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: aws-sdk-s3
  dependency-version: 1.126.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: clap
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: duckdb
  dependency-version: 1.10501.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: md-5
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: which
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants