Skip to content

chore(deps): bump the cargo group with 4 updates - #1722

Merged
hrkfdn merged 1 commit into
mainfrom
dependabot/cargo/cargo-c48c21127b
Oct 15, 2025
Merged

chore(deps): bump the cargo group with 4 updates#1722
hrkfdn merged 1 commit into
mainfrom
dependabot/cargo/cargo-c48c21127b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2025

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 4 updates: libc, regex, toml and unicode-width.

Updates libc from 0.2.176 to 0.2.177

Release notes

Sourced from libc's releases.

0.2.177

Added

  • Apple: Add TIOCGETA, TIOCSETA, TIOCSETAW, TIOCSETAF constants (#4736)
  • Apple: Add pthread_cond_timedwait_relative_np (#4719)
  • BSDs: Add _CS_PATH constant (#4738)
  • Linux-like: Add SIGEMT for mips* and sparc* architectures (#4730)
  • OpenBSD: Add elf_aux_info (#4729)
  • Redox: Add more sysconf constants (#4728)
  • Windows: Add wcsnlen (#4721)

Changed

  • WASIP2: Invert conditional to include p2 APIs (#4733)
Changelog

Sourced from libc's changelog.

0.2.177 - 2025-10-09

Added

  • Apple: Add TIOCGETA, TIOCSETA, TIOCSETAW, TIOCSETAF constants (#4736)
  • Apple: Add pthread_cond_timedwait_relative_np (#4719)
  • BSDs: Add _CS_PATH constant (#4738)
  • Linux-like: Add SIGEMT for mips* and sparc* architectures (#4730)
  • OpenBSD: Add elf_aux_info (#4729)
  • Redox: Add more sysconf constants (#4728)
  • Windows: Add wcsnlen (#4721)

Changed

  • WASIP2: Invert conditional to include p2 APIs (#4733)
Commits
  • 9f598d2 chore: release libc 0.2.177
  • 329a5e7 Add missing TIOCGETA/TIOCSETA constants for macOS
  • 72a40e2 add pthread_cond_timedwait_relative_np
  • 2914d6f linux_like: add SIGEMT for mips* and sparc*
  • ff2ff25 openbsd add elf_aux_info
  • 4ae44a4 Update semver tests
  • d5737a0 Define _CS_PATH on the BSDs
  • fe277da redox: more sysconf constants
  • bdad426 wasip2: Invert conditional to include p2 APIs
  • 0af069d Windows: add wcsnlen
  • Additional commits viewable in compare view

Updates regex from 1.11.3 to 1.12.1

Changelog

Sourced from regex's changelog.

1.12.1 (2025-10-10)

This release makes a bug fix in the new regex::Captures::get_match API introduced in 1.12.0. There was an oversight with the lifetime parameter for the Match returned. This is technically a breaking change, but given that it was caught almost immediately and I've yanked the 1.12.0 release, I think this is fine.

1.12.0 (2025-10-10)

This release contains a smattering of bug fixes, a fix for excessive memory consumption in some cases and a new regex::Captures::get_match API.

Improvements:

Bug fixes:

Commits

Updates toml from 0.9.7 to 0.9.8

Commits
  • 93e9146 chore: Release
  • 7de1b4e docs: Update changelog
  • 1b579c3 feat(serde): Support integer, bools, and chars as keys (#1050)
  • ac1e077 feat(serde): Support chars as keys
  • f3dec32 feat(serde): Support bools as keys
  • 139b30a feat(serde): Support integer keys
  • 2d65a88 test(serde): Show existing key behavior
  • 80217f8 chore(deps): Update actions/checkout action to v5 (#1047)
  • b36e351 chore(deps): Update actions/checkout action to v5
  • 7d2c649 chore(deps): Update actions/setup-python action to v6 (#1048)
  • Additional commits viewable in compare view

Updates unicode-width from 0.2.1 to 0.2.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the cargo group with 4 updates
ba1071b 
Bumps the cargo group with 4 updates: [libc](https://github.com/rust-lang/libc), [regex](https://github.com/rust-lang/regex), [toml](https://github.com/toml-rs/toml) and [unicode-width](https://github.com/unicode-rs/unicode-width).


Updates `libc` from 0.2.176 to 0.2.177
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.177/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.176...0.2.177)

Updates `regex` from 1.11.3 to 1.12.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.11.3...1.12.1)

Updates `toml` from 0.9.7 to 0.9.8
- [Commits](toml-rs/toml@toml-v0.9.7...toml-v0.9.8)

Updates `unicode-width` from 0.2.1 to 0.2.2
- [Commits](unicode-rs/unicode-width@v0.2.1...v0.2.2)

---
updated-dependencies:
- dependency-name: libc
  dependency-version: 0.2.177
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: regex
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: toml
  dependency-version: 0.9.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: unicode-width
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 13, 2025
@hrkfdn
hrkfdn merged commit f7c8262 into main Oct 15, 2025
6 checks passed
@hrkfdn
hrkfdn deleted the dependabot/cargo/cargo-c48c21127b branch October 15, 2025 09:12
@BrewTestBot BrewTestBot mentioned this pull request Nov 11, 2025
Merged
MichaelPachec0 added a commit to MichaelPachec0/ncspot that referenced this pull request Jul 30, 2026
@MichaelPachec0
fix(deps): bump librespot pin to retain refresh token on refresh
98a61a0 
Spotify's token endpoint stopped including a refresh_token in
refresh-grant responses (optional per RFC 6749 §6). librespot-oauth
assumed it was always present and overwrote the stored token with an
empty string, which ncspot then persisted to rspotify_token.json —
breaking every subsequent refresh and forcing interactive browser
re-auth on each token expiry.

Bump the [patch.crates-io] pin from db1ef7a to db65eb1, the head of
librespot-org/librespot#1732, which retains the previous refresh token
when the response omits one. The new rev sits on the dev tip and
includes the previously pinned CDN-fallback fix (hrkfdn#1722), so nothing is
lost. Update flake.nix outputHashes for the new rev accordingly.

Drop the pin once a librespot release containing hrkfdn#1722 and hrkfdn#1732 is
published.

Signed-off-by: Michael Pacheco <git@michaelpacheco.org>
MichaelPachec0 added a commit to MichaelPachec0/ncspot that referenced this pull request Jul 30, 2026
@MichaelPachec0
fix(deps): bump librespot pin to retain refresh token on refresh
aaa317b 
Spotify's token endpoint stopped including a refresh_token in
refresh-grant responses. librespot-oauth
assumed it was always present and overwrote the stored token with an
empty string, which ncspot then persisted to rspotify_token.json —
breaking every subsequent refresh and forcing interactive browser
re-auth on each token expiry.

Bump the [patch.crates-io] pin from db1ef7a to db65eb1, the head of
librespot-org/librespot#1732, which retains the previous refresh token
when the response omits one. The new rev sits on the dev tip and
includes the previously pinned CDN-fallback fix (hrkfdn#1722), so nothing is
lost. Update flake.nix outputHashes for the new rev accordingly.

Drop the pin once a librespot release containing hrkfdn#1722 and hrkfdn#1732 is
published.

Signed-off-by: Michael Pacheco <git@michaelpacheco.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hrkfdn