Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 25, 2025

Bumps the production-dependencies group with 6 updates:

Package From To
minijinja 2.11.0 2.12.0
serde_json 1.0.142 1.0.143
tantivy 0.24.2 0.25.0
regex 1.11.1 1.11.2
idna 1.0.3 1.1.0
tempfile 3.20.0 3.21.0

Updates minijinja from 2.11.0 to 2.12.0

Release notes

Sourced from minijinja's releases.

2.12.0

Release Notes

  • Item or attribute lookup will no longer swallow all errors in Python. #814
  • Added |zip filter. #818
  • Fix break_on_hyphens for the |wordwrap filter. #823
  • Prefer error message from unknown_method_callback. #824
  • Ignore .jinja and .jinja2 as extensions in auto escape. #832

Install minijinja-cli 2.12.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/minijinja/releases/download/2.12.0/minijinja-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/minijinja/releases/download/2.12.0/minijinja-cli-installer.ps1 | iex"

Download minijinja-cli 2.12.0

File Platform Checksum
minijinja-cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
minijinja-cli-x86_64-apple-darwin.tar.xz Intel macOS checksum
minijinja-cli-i686-pc-windows-msvc.zip x86 Windows checksum
minijinja-cli-x86_64-pc-windows-msvc.zip x64 Windows checksum
minijinja-cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
minijinja-cli-i686-unknown-linux-gnu.tar.xz x86 Linux checksum
minijinja-cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
minijinja-cli-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
minijinja-cli-i686-unknown-linux-musl.tar.xz x86 MUSL Linux checksum
minijinja-cli-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum
Changelog

Sourced from minijinja's changelog.

2.12.0

  • Item or attribute lookup will no longer swallow all errors in Python. #814
  • Added |zip filter. #818
  • Fix break_on_hyphens for the |wordwrap filter. #823
  • Prefer error message from unknown_method_callback. #824
  • Ignore .jinja and .jinja2 as extensions in auto escape. #832
Commits
  • 50d24fb 2.12.0
  • b6e0417 Switch to regular cargo-dist
  • b808ef9 Added .jinja and .jinja2 as ignored extensions (#832)
  • 27b1d0e fix: mixed up example names, "object-using-async" and "function-using-async" ...
  • 891aa60 Improve documentation of 'trim' filter (#829)
  • 16cfc39 Add changelog entry
  • 5c91137 Prefer error message from unknown_method_callback (#824)
  • 7ebd538 Fix WASI doctest failure in Object trait (#830)
  • 31331bb Fix some clippy warnings
  • 513f6f2 fix: wrong slicing with negative indices which overflow range bounds (#822)
  • Additional commits viewable in compare view

Updates serde_json from 1.0.142 to 1.0.143

Release notes

Sourced from serde_json's releases.

v1.0.143

Commits
  • 10102c4 Release 1.0.143
  • 2a5b853 Replace super::super with absolute path within crate
  • 447170b Merge pull request 1271 from mickvangelderen/mick/impl-from-str-for-map
  • ec190d6 Merge pull request #1264 from xlambein/master
  • 8be6647 Merge pull request #1268 from SOF3/compact-default
  • ba5b3cc Revert "Pin nightly toolchain used for miri job"
  • fd35a02 Implement FromStr for Map<String, Value>
  • bea0fe6 Implement Default for CompactFormatter
  • 0c0e9f6 Add Clone and Debug impls to map iterators
  • See full diff in compare view

Updates tantivy from 0.24.2 to 0.25.0

Release notes

Sourced from tantivy's releases.

Tantivy v0.25

What's Changed

New Contributors

Full Changelog: quickwit-oss/tantivy@0.24...0.25.0

Changelog

Sourced from tantivy's changelog.

Tantivy 0.25

Bugfixes

Features/Improvements

Tantivy 0.24

Tantivy 0.24 will be backwards compatible with indices created with v0.22 and v0.21. The new minimum rust version will be 1.75. Tantivy 0.23 will be skipped.

Bugfixes

Breaking API Changes

Features/Improvements

... (truncated)

Commits
  • b4139bc chore: Release
  • 8676a1f prepare release: update Changelog (#2685)
  • 021ff2a move bench to binggan (#2684)
  • 39e0276 per field size details (#2679)
  • a1d65c3 test stable ordering with pagination (#2683)
  • 2e4615c Merge pull request #2678 from Darkheir/feat/query_grammar_space_between_field...
  • 610091e feat: Applies PR review suggestion
  • c301e7b Merge pull request #2673 from paradedb/stuhood.fix-order-by-dup-string
  • d9eb093 Attempt to clarify sorted_ords_to_term_cb.
  • d4b0901 feat: Support spaces between field name and value
  • Additional commits viewable in compare view

Updates regex from 1.11.1 to 1.11.2

Changelog

Sourced from regex's changelog.

1.11.2 (2025-08-24)

This is a new patch release of regex with some minor fixes. A larger number of typo or lint fix patches were merged. Also, we now finally recommend using std::sync::LazyLock.

Improvements:

Bug fixes:

Commits

Updates idna from 1.0.3 to 1.1.0

Commits

Updates tempfile from 3.20.0 to 3.21.0

Changelog

Sourced from tempfile's changelog.

3.21.0

  • Updated windows-sys requirement to allow version 0.60.x
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [minijinja](https://github.com/mitsuhiko/minijinja) | `2.11.0` | `2.12.0` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.142` | `1.0.143` |
| [tantivy](https://github.com/quickwit-oss/tantivy) | `0.24.2` | `0.25.0` |
| [regex](https://github.com/rust-lang/regex) | `1.11.1` | `1.11.2` |
| [idna](https://github.com/servo/rust-url) | `1.0.3` | `1.1.0` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.20.0` | `3.21.0` |


Updates `minijinja` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/minijinja@2.11.0...2.12.0)

Updates `serde_json` from 1.0.142 to 1.0.143
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.142...v1.0.143)

Updates `tantivy` from 0.24.2 to 0.25.0
- [Release notes](https://github.com/quickwit-oss/tantivy/releases)
- [Changelog](https://github.com/quickwit-oss/tantivy/blob/main/CHANGELOG.md)
- [Commits](quickwit-oss/tantivy@0.24.2...0.25.0)

Updates `regex` from 1.11.1 to 1.11.2
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.11.1...1.11.2)

Updates `idna` from 1.0.3 to 1.1.0
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](https://github.com/servo/rust-url/commits)

Updates `tempfile` from 3.20.0 to 3.21.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/commits)

---
updated-dependencies:
- dependency-name: minijinja
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: serde_json
  dependency-version: 1.0.143
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tantivy
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: regex
  dependency-version: 1.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: idna
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tempfile
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 25, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 8, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 8, 2025
@dependabot dependabot bot deleted the dependabot/cargo/production-dependencies-b7bb3cc89d branch September 8, 2025 06:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant