[dependabot]

Bumps the rust-dependencies group with 17 updates:

Package	From	To
fancy-regex	0.17.0	0.20.0
getrandom	0.3.4	0.4.3
signal-hook	0.4.5	0.4.6
hashbrown	0.16.1	0.17.1
itertools	0.14.0	0.15.0
ruff_python_ast	0.0.14	0.0.20
ruff_python_codegen	0.0.14	0.0.20
ruff_python_parser	0.0.14	0.0.20
ruff_python_stdlib	0.0.14	0.0.20
ruff_source_file	0.0.14	0.0.20
ruff_text_size	0.0.14	0.0.20
smallvec	1.16.0	1.16.4
speedate	0.17.0	0.18.0
strum	0.27.2	0.28.0
unicode-normalization	0.1.25	0.1.26
unicode_names2	1.3.0	4.0.0
jiff	0.2.35	0.2.39

Updates fancy-regex from 0.17.0 to 0.20.0

Release notes

Sourced from fancy-regex's releases.

0.20.0

Added

• Add RegexOptionsBuilder::build_delegate_prefilter to disable building the prefilter (#282)
• Add RegexOptionsBuilder::start_bytes that returns the first bytes that can match a pattern so you can build your own prefilter (#282)
• Add RegexOptionsBuilder::required_bytes that returns the required bytes for a pattern to match (#287)
• Add RegexOptionsBuilder::max_prog_size / RegexBuilder::max_prog_size to cap the number of VM instructions emitted while compiling. Subroutine calls are inlined at compile time, so a self- or mutually-recursive pattern can expand without bound even while the recursion-depth cap is respected; this bounds the emitted instruction vector instead. Exceeding the cap returns CompileError::PatternTooComplex. Disabled by default. (#298)
• Implement support for variable length hard lookbehinds, by seeking backwards to candidate match start positions and then matching forward as usual. The reverse DFA honours delegate_size_limit and delegate_dfa_size_limit. (#286, #309)
• Add RegexOptionsBuilder::delegate_dfa_skip_cache_capacity_check / RegexBuilder::delegate_dfa_skip_cache_capacity_check, enabled by default. Setting it to false makes the reverse DFA of a variable-length lookbehind strictly honour delegate_dfa_size_limit, so a too-small limit becomes a compile error. (#309)
• Add ByteSet::is_subset to test whether one byte set is a subset of another. (#289)

Changed

• If a lookbehind consists of an Alt containing only easy expressions and at least 4 branches (and no capture groups), compile it as a variable lookbehind (if the feature is enabled) instead of trying every branch as its own const-size lookbehind. One reverse-DFA delegate over the whole alternation is much cheaper per attempt, and grants a perf boost. (#285)
• Word boundaries (\b, \B, \<, \>) are no longer marked hard outside a lookbehind. regex-automata supports them, so a pattern like \b(?:foo|bar|baz)\b now compiles to a single delegated engine instead of one branch per alternative — previously it grew linearly with the number of alternatives. They remain hard inside a lookbehind, since regex-automata's reverse DFA can't run a variable-length lookbehind on unicode haystacks. The half-boundary variants (\<, \>) and \Z are still always hard. (#311)
• The parser now tracks every capture group declared with the same name; Regex::capture_names reports the name for each of them, and named backrefs resolve to the last group with that name (#177)

Fixed

• The reverse lazy DFA built for a variable-length lookbehind failed to compile when it needed a larger cache capacity than the configured delegate_dfa_size_limit (or the default of 2 MiB); for example (?<=\p{L}{99,100})x failed to compile with default settings. The capacity is now rounded up to the minimum required. Ordinary delegates were not affected because the meta engine falls back to another engine when the lazy DFA cannot be built. (#309)
• delegate_dfa_size_limit now sets the lazy DFA cache capacity (hybrid_cache_capacity) as documented, instead of the fully compiled DFA size limit. It had been forwarded to the wrong regex-automata option since the switch from the regex crate. (#307)
• Fix bug with literal bytes being used in unicode mode unexpectedly: in Unicode mode, \xHH escapes above 0x7F now match the Unicode codepoint (as UTF-8 bytes) instead of the raw byte, so e.g. \xFF matches ÿ rather than the byte 0xFF. In bytes modes the raw byte is matched as before. (#292)
• Fix case-insensitive prefilter computation for non-ASCII class ranges that fold to characters with different lead bytes (e.g. (?i)[à-ÿ]), which previously could miss candidate start positions. (#296)
• Fix ^ / $ and their multi-line variants matching at the start/end of arbitrary-byte haystacks in Ascii and UnicodeBytes bytes modes, where the match position was not a UTF-8 codepoint boundary. (#300)
• Fix seek optimization dropping matches when conditionals had empty branches, e.g. (a)?b(?(1)c) no longer fails to match b. (#304)
• Fix hard variable-length lookbehind reverse DFA ignoring the caller's Unicode and bytes-mode settings, giving wrong results in non-Unicode bytes modes (e.g. (?<=(\w+)\1)x on ééx). (#310)

0.19.2

Added

• Add a leftmost_longest feature (off by default) that adds a method to the RegexBuilder/RegexOptionsBuilder for building a VM which would operate in leftmost-longest match mode instead of the regular leftmost-first mode. Useful for POSIX compliance. (#281)

Changed

Fixed

0.19.1

Added

• Add a perf-dfa-full feature (off by default, mirroring the regex crate) that lets regex-automata eagerly build fully compiled dense DFAs for small patterns, for workloads that compile few regexes and match them very heavily (#272)

Changed

• Add VM instruction for case insensitive literals when in Unicode mode, to keep the build cost bounded (#268) and ensured the toy example graph output remains readable instead of being super verbose (#269)
• Compilation performance: the regex-automata dependency no longer enables the dfa-build feature by default. With dfa-build enabled, meta::Regex eagerly determinizes a full dense DFA for every small pattern, which dominated build time of simple class-containing patterns (e.g. \b(extern)\s+(crate) compiled ~4x slower than with the regex crate, which also ships without dfa-build); searches use the lazy DFA instead, with no measurable match-time difference (#272)
• Compilation performance: identical delegated fragments within one compile now share a single regex-automata engine instead of each building their own. Alternation-heavy patterns (TextMate grammar lookbehinds especially) often repeat the same fragment many times; on such patterns this removes a large share of build time (#277)

Fixed

• The playground didn't show when a literal or backreference was being matched case insensitively in the analysis tree view (#269)
• Seek patterns could become very large when recursive backrefs and subroutine calls were inlined, without bringing much benefit (#270)
• The optimize_nested_repeats pass could rewrite an optional capture group like (\w+)? into (\w*), causing an unmatched optional group to be reported as an empty match (Some("")) instead of None (#276)

0.19.0

Added

• Add BytesMode and the RegexInput trait so the matching and capture APIs can operate on strings or bytes, and allows to opt out of unicode handling if desired (#248)
  • Also allows searching within a range without slicing (#253)
  • Assertions can be overridden at runtime, if the regex builder allow_input_assertion_overrides option was used (#254)
  • Search can be performed in anchored mode, searching only at the start position specified (#263)
• Add experimental seek optimization to only invoke the VM at candidate positions where a match could occur (#246)
• Add RegexBuilder::disallow_empty_match_at_eof_after_newline to reject empty matches at the end of the haystack following a trailing newline, to match Oniguruma behavior (#247)
• Add RegexSet API for efficiently matching multiple patterns against the same text (#255)

Changed

... (truncated)

Changelog

Sourced from fancy-regex's changelog.

[0.20.0] - 2026-10-24

Added

• Add RegexOptionsBuilder::build_delegate_prefilter to disable building the prefilter (#282)
• Add RegexOptionsBuilder::start_bytes that returns the first bytes that can match a pattern so you can build your own prefilter (#282)
• Add RegexOptionsBuilder::required_bytes that returns the required bytes for a pattern to match (#287)
• Add RegexOptionsBuilder::max_prog_size / RegexBuilder::max_prog_size to cap the number of VM instructions emitted while compiling. Subroutine calls are inlined at compile time, so a self- or mutually-recursive pattern can expand without bound even while the recursion-depth cap is respected; this bounds the emitted instruction vector instead. Exceeding the cap returns CompileError::PatternTooComplex. Disabled by default. (#298)
• Implement support for variable length hard lookbehinds, by seeking backwards to candidate match start positions and then matching forward as usual. The reverse DFA honours delegate_size_limit and delegate_dfa_size_limit. (#286, #309)
• Add RegexOptionsBuilder::delegate_dfa_skip_cache_capacity_check / RegexBuilder::delegate_dfa_skip_cache_capacity_check, enabled by default. Setting it to false makes the reverse DFA of a variable-length lookbehind strictly honour delegate_dfa_size_limit, so a too-small limit becomes a compile error. (#309)
• Add ByteSet::is_subset to test whether one byte set is a subset of another. (#289)

Changed

• If a lookbehind consists of an Alt containing only easy expressions and at least 4 branches (and no capture groups), compile it as a variable lookbehind (if the feature is enabled) instead of trying every branch as its own const-size lookbehind. One reverse-DFA delegate over the whole alternation is much cheaper per attempt, and grants a perf boost. (#285)
• Word boundaries (\b, \B, \<, \>) are no longer marked hard outside a lookbehind. regex-automata supports them, so a pattern like \b(?:foo|bar|baz)\b now compiles to a single delegated engine instead of one branch per alternative — previously it grew linearly with the number of alternatives. They remain hard inside a lookbehind, since regex-automata's reverse DFA can't run a variable-length lookbehind on unicode haystacks. The half-boundary variants and \Z are still always hard. (#311)
• The parser now tracks every capture group declared with the same name; Regex::capture_names reports the name for each of them, and named backrefs resolve to the last group with that name (#177)

Fixed

• The reverse lazy DFA built for a variable-length lookbehind failed to compile when it needed a larger cache capacity than the configured delegate_dfa_size_limit (or the default of 2 MiB); for example (?<=\p{L}{99,100})x failed to compile with default settings. The capacity is now rounded up to the minimum required. Ordinary delegates were not affected because the meta engine falls back to another engine when the lazy DFA cannot be built. (#309)
• delegate_dfa_size_limit now sets the lazy DFA cache capacity (hybrid_cache_capacity) as documented, instead of the fully compiled DFA size limit. It had been forwarded to the wrong regex-automata option since the switch from the regex crate. (#307)
• Fix bug with literal bytes being used in unicode mode unexpectedly: in Unicode mode, \xHH escapes above 0x7F now match the Unicode codepoint (as UTF-8 bytes) instead of the raw byte, so e.g. \xFF matches ÿ rather than the byte 0xFF. In bytes modes the raw byte is matched as before. (#292)
• Fix case-insensitive prefilter computation for non-ASCII class ranges that fold to characters with different lead bytes (e.g. (?i)[à-ÿ]), which previously could miss candidate start positions. (#296)
• Fix ^ / $ and their multi-line variants matching at the start/end of arbitrary-byte haystacks in Ascii and UnicodeBytes bytes modes, where the match position was not a UTF-8 codepoint boundary. (#300)
• Fix seek optimization dropping matches when conditionals had empty branches, e.g. (a)?b(?(1)c) no longer fails to match b. (#304)
• Fix hard variable-length lookbehind reverse DFA ignoring the caller's Unicode and bytes-mode settings, giving wrong results in non-Unicode bytes modes (e.g. (?<=(\w+)\1)x on ééx). (#310)

[0.19.2] - 2026-09-13

Added

• Add a leftmost_longest feature (off by default) that adds a method to the RegexBuilder/RegexOptionsBuilder for building a VM which would operate in leftmost-longest match mode instead of the regular leftmost-first mode. Useful for POSIX compliance. (#281)

Changed

Fixed

• Fix a panic in capture_names() for a pattern with a zero-repeated named group such as (?<n>a){0} (#275)
• Literal bytes were being encoded as utf-8 in Ascii mode, now they match the exact byte literal

[0.19.1] - 2026-09-06

Added

• Add a perf-dfa-full feature (off by default, mirroring the regex crate) that lets regex-automata eagerly build fully compiled dense DFAs for small patterns, for workloads that compile few regexes and match them very heavily (#272)

Changed

• Add VM instruction for case insensitive literals when in Unicode mode, to keep the build cost bounded (#268) and ensured the toy example graph output remains readable instead of being super verbose (#269)
• Compilation performance: the regex-automata dependency no longer enables the dfa-build feature by default. With dfa-build enabled, meta::Regex eagerly determinizes a full dense DFA for every small pattern, which dominated build time of simple class-containing patterns (e.g. \b(extern)\s+(crate) compiled ~4x slower than with the regex crate, which also ships without dfa-build); searches use the lazy DFA instead, with no measurable match-time difference (#272)
• Compilation performance: identical delegated fragments within one compile now share a single regex-automata engine instead of each building their own. Alternation-heavy patterns (TextMate grammar lookbehinds especially) often repeat the same fragment many times; on such patterns this removes a large share of build time (#277)

Fixed

• The playground didn't show when a literal or backreference was being matched case insensitively in the analysis tree view (#269)
• Seek patterns could become very large when recursive backrefs and subroutine calls were inlined, without bringing much benefit (#270)
• The optimize_nested_repeats pass could rewrite an optional capture group like (\w+)? into (\w*), causing an unmatched optional group to be reported as an empty match (Some("")) instead of None (#276)

[0.19.0] - 2026-07-28

Added

• Add BytesMode and the RegexInput trait so the matching and capture APIs can operate on strings or bytes, and allows to opt out of unicode handling if desired (#248)
  • Also allows searching within a range without slicing (#253)
  • Assertions can be overridden at runtime, if the regex builder allow_input_assertion_overrides option was used (#254)
  • Search can be performed in anchored mode, searching only at the start position specified (#263)
• Add experimental seek optimization to only invoke the VM at candidate positions where a match could occur (#246)
• Add RegexBuilder::disallow_empty_match_at_eof_after_newline to reject empty matches at the end of the haystack following a trailing newline, to match Oniguruma behavior (#247)

... (truncated)

Commits

• 031e5e5 Version 0.20.0
• 735c50a docs: add missing CHANGELOG entries for 0.19.2..main
• 5973d40 Merge pull request #311 from fancy-regex/easy_wordboundary_except_in_lookbehind
• 647646a Make VM word-boundary assertions respect unicode_mode
• d97e33c Serialize half word boundaries correct in Expr::to_str
• 466bc65 Add tests for word-boundary hardness outside a lookbehind
• 5ba2a98 Split in_lookaround in the analyzer into in_lookahead/in_lookbehind wit...
• 7a0ff5d Add word-boundary perf benchmark comparing hard vs delegated word boundaries
• ef97e6d improve word boundary seek behavior
• 03dd46a add unicode word boundary tests
• Additional commits viewable in compare view

Updates getrandom from 0.3.4 to 0.4.3

Changelog

Sourced from getrandom's changelog.

0.4.3 - 2026-06-17

Added

• wasm64-unknown-unknown target support for wasm_js backend #848

Changed

• Drop wasip2 and wasip3 dependencies in favor of manual bindings #830

#830: rust-random/getrandom#830 #848: rust-random/getrandom#848

0.4.2 - 2026-03-03

Changed

• Bump r-efi dependency to v6 #814

Fixed

• Read errno only when it is set #810
• Check the return value of ProcessPrng on Windows #811

#810: rust-random/getrandom#810 #811: rust-random/getrandom#811 #814: rust-random/getrandom#814

0.4.1 - 2026-02-03

Fixed

• Documentation build on docs.rs #801

#801: rust-random/getrandom#801

0.4.0 - 2026-02-02

Added

• RawOsError type alias #739
• SysRng behind new feature sys_rng #751
• WASIp3 support #779
• extern_impl opt-in backend #786 #794
• Motor OS support #797

Changed

• Use Edition 2024 and MSRV 1.85 #749

#739: rust-random/getrandom#739 #749: rust-random/getrandom#749 #751: rust-random/getrandom#751 #779: rust-random/getrandom#779

... (truncated)

Commits

• 5e7cd57 Release v0.4.3 (#853)
• 1ea268a Use manual bindings for WASIp2/3 (#830)
• f7290b0 Update Cargo.lock (#852)
• 16ce801 Update Cargo.lock (#850)
• e5adfca Add wasm64-unknown-unknown support for wasm_js backend (#848)
• 626df8d Update Cargo.lock (#846)
• 4a01cb2 Update Cargo.lock (#841)
• f87bf39 Update Cargo.lock (#836)
• eadb879 ci: re-enable build job for x86_64-pc-cygwin (#832)
• d715d73 CI: Reduce the number of packages that are updated for wasip2 MSRV test (#825)
• Additional commits viewable in compare view

Updates signal-hook from 0.4.5 to 0.4.6

Changelog

Sourced from signal-hook's changelog.

0.4.6

• Allow registering 'static flags in addition to Arc ones (#215, #180).

Commits

• 0a1de6b Version 0.4.6
• ae4ece5 Merge pull request #215 from Frost-54/static-atomic-unsafe-trait
• 48b56d5 Deps updates
• fd51cde Allow &'static AtomicBool in flag module - #213
• See full diff in compare view

Updates hashbrown from 0.16.1 to 0.17.1

Release notes

Sourced from hashbrown's releases.

v0.17.1

Added

• Added HashMap::rustc_try_insert (#722)

v0.17.0

Added

• Added hash_table::OccupiedEntry::replace_entry_with (#669)
• Added hash_map::{OccupiedEntry::into_entry, VacantEntryRef::insert_entry_with_key} (#670)
• Added hash_table::UnsafeIter (#667)
• Added iter methods to various HashTable iterators (#667)
• Added HashMap::{replace_key,replace_key_unchecked,insert_with_key_unchecked} (#681)
• Added into_map methods to all HashMap entry types (#686)
• Added into_table methods to all HashTable entry types (#686)
• Added #[must_use] to constructors (#697)
• TryReserveError now implements Error (#698)

Changed

• Changed EntryRef to use ToOwned (#670)
• Bumped MSRV to 1.85 (2024 edition) (#676)

Fixed

• HashTable:clone_from now forwards to RawTable::clone_from instead of using the default implementation (#668)
• Fixed potential UB in RawTableInner::fallible_with_capacity (#692)
• Fixed incorrect length if a hasher panics during rehash (#710)

Changelog

Sourced from hashbrown's changelog.

0.17.1 - 2026-04-20

Added

• Added HashMap::rustc_try_insert (#722)

0.17.0 - 2026-04-06

Added

• Added hash_table::OccupiedEntry::replace_entry_with (#669)
• Added hash_map::{OccupiedEntry::into_entry, VacantEntryRef::insert_entry_with_key} (#670)
• Added hash_table::UnsafeIter (#667)
• Added iter methods to various HashTable iterators (#667)
• Added HashMap::{replace_key,replace_key_unchecked,insert_with_key_unchecked} (#681)
• Added into_map methods to all HashMap entry types (#686)
• Added into_table methods to all HashTable entry types (#686)
• Added #[must_use] to constructors (#697)
• TryReserveError now implements Error (#698)

Changed

• Changed EntryRef to use ToOwned (#670)
• Bumped MSRV to 1.85 (2024 edition) (#676)

Fixed

• HashTable:clone_from now forwards to RawTable::clone_from instead of using the default implementation (#668)
• Fixed potential UB in RawTableInner::fallible_with_capacity (#692)
• Fixed incorrect length if a hasher panics during rehash (#710)

Commits

• c62a63a chore: release v0.17.1
• 420e83b Merge pull request #722 from cuviper/rustc_try_insert
• 51cecbd Move the RustcOccupiedError note as requested in review
• 16d0f37 Add HashMap::rustc_try_insert
• 18a04c5 Merge pull request #721 from clarfonthey/branch-rename
• ee8a0ee Rename master to main in release-plz workflow
• 147df65 Merge pull request #720 from xtqqczze/authors
• 64a0acb Remove package.authors field from Cargo metadata
• 867db72 Merge pull request #716 from atouchet/rdm
• 57b760b Update Readme
• Additional commits viewable in compare view

Updates itertools from 0.14.0 to 0.15.0

Changelog

Sourced from itertools's changelog.

0.15.0

Breaking

• Restructure Position as struct instead of enum (#1042, #1043)
• Canonicalize all_equal_value's error type (#1032)

Added

• Add *_with_hasher adaptors (#1007)
• Add strip_prefix and strip_prefix_by methods (#1104)

Changed

• Remove Clone bounds from tuple_combinations and array_combinations(#1011)
• must_use for collect_vec (#1009)
• Make izip! temporary friendly (#1021)
• Add array_combinations_with_replacement (#1033)
• Implement Debug for remaining public types (#1038)
• Specialize ExactlyOneError::count (#1046)
• Implement PeekingNext for more types, in particular vec::IntoIter (#1059, #1073)
• Fix PadUsing::next_back (#1082)
• Introduce [circular_]array_windows, deprecate tuple_windows (#1086)
• Deprecate tuple_combinations (replaced by array_combinations) (#1085)

Notable Internal Changes

• Make into_group_map code more idiomatic (#1027)
• Fix clippy lints (#1017, #1029, #1076, #1099)

Commits

• 37bd72a Update CHANGELOG.md: strip_prefix[_by]
• 86ec635 Use ControlFlow in fold_while implementation
• d5897f7 refactor(strip_prefix): use try_for_each and drop PartialEq, Eq on StripPrefi...
• b2a978a feat(Itertools): add strip_prefix and strip_prefix_by methods
• 12b6ec6 Update CHANGELOG.md for all_equal_value_error's error type
• 121821e AllEqualValueError implements std::error::Error
• adac44e Introduce AllEqualValueError
• 5707384 Update CHANGELOG.md
• df60ff0 Update CHANGELOG.md
• 113b850 Update CHANGELOG.md to include with_hasher
• Additional commits viewable in compare view

Updates ruff_python_ast from 0.0.14 to 0.0.20

Commits

• See full diff in compare view

Updates ruff_python_codegen from 0.0.14 to 0.0.20

Commits

• See full diff in compare view

Updates ruff_python_parser from 0.0.14 to 0.0.20

Commits

• See full diff in compare view

Updates ruff_python_stdlib from 0.0.14 to 0.0.20

Commits

• See full diff in compare view

Updates ruff_source_file from 0.0.14 to 0.0.20

Commits

• See full diff in compare view

Updates ruff_text_size from 0.0.14 to 0.0.20

Commits

• See full diff in compare view

Updates smallvec from 1.16.0 to 1.16.4

Release notes

Sourced from smallvec's releases.

v1.16.4

What's Changed

• Port fuzzer changes from PR #737 to v1 by @​GauravPawar101 in servo/rust-smallvec#753
• chore: bump version by @​alejandro-vaz in servo/rust-smallvec#779

Full Changelog: smallvec/smallvec@v1.16.3...v1.16.4

v1.16.3

What's Changed

• Port new fuzzer to v1 by @​bolshoytoster in servo/rust-smallvec#678
• fix: overflow during fuzzy check by @​GauravPawar101 in servo/rust-smallvec#693
• chore: bump version by @​alejandro-vaz in servo/rust-smallvec#723

Full Changelog: smallvec/smallvec@v1.16.2...v1.16.3

v1.16.2

What's Changed

• Backport v2’s retain implementation to v1 by @​charliermarsh in servo/rust-smallvec#596
• Fix element ownership tracking with may_dangle by @​charliermarsh in servo/rust-smallvec#594
• Fix Cargo manual_readme warning by @​Rayan-and-beyond in servo/rust-smallvec#608
• chore: bump version by @​alejandro-vaz in servo/rust-smallvec#617

New Contributors

• @​Rayan-and-beyond made their first contribution in servo/rust-smallvec#608

Full Changelog: smallvec/smallvec@v1.16.1...v1.16.2

v1.16.1

What's Changed

• Speed up push by expanding triple_mut by @​bolshoytoster in servo/rust-smallvec#557
• chore: bump version to 1.16.1 by @​ryux1 in servo/rust-smallvec#585
• fix: doc warning by @​alejandro-vaz in servo/rust-smallvec#582
• fix: cargo warnings by @​alejandro-vaz in servo/rust-smallvec#581

New Contributors

• @​ryux1 made their first contribution in servo/rust-smallvec#585

Full Changelog: smallvec/smallvec@v1.16.0...v1.16.1

Commits

• eab7746 chore: bump version (#779)
• bb9e44b Port fuzzer changes from PR #737 to v1 (#753)
• 7ad35d2 chore: bump version (#723)
• 8aaf33e fix: overflow during fuzzy check (#693)
• c936db1 Port new fuzzer to v1 (#678)
• ccf5fc7 chore: bump version (#617)
• af207cc Merge pull request #608 from Rayan-and-beyond/fix/manual-readme-warning-606
• cda4b73 Merge pull request #594 from astral-sh/charlie/codex-fix-may-dangle
• d0556cb Merge pull request #596 from astral-sh/charlie/codex-v1-compact
• f73914c Flatten retain tests into the unit test module
• Additional commits viewable in compare view

Updates speedate from 0.17.0 to 0.18.0

Release notes

Sourced from speedate's releases.

v0.18.0 2026-10-15

What's Changed

• Add support for building the library in no_std environments by @​smaeul in pydantic/speedate#96
• bump MSRV to 1.88, edition 2024 by @​davidhewitt in pydantic/speedate#103
• Fix integer parsing with out-of-range inputs by @​davidhewitt in pydantic/speedate#106
• Fix from_float_with_config() with negative floats by @​Viicos in pydantic/speedate#108
• Fix float timestamps not respecting the configured TimestampUnit by @​Viicos in pydantic/speedate#109

New Contributors

• @​smaeul made their first contribution in pydantic/speedate#96

Full Changelog: pydantic/speedate@v0.17.0...v0.18.0

Commits

• 6a323c6 Prepare release v0.18.0 (#111)
• 8d53e81 Bump dependencies (#110)
• 69aa377 Fix float timestamps not respecting the configured TimestampUnit (#109)
• 16a749f Fix from_float_with_config() with negative floats (#108)
• a68ce86 Fix integer parsing with out-of-range inputs (#106)
• 03179d2 ci: use codecov token to upload (#104)
• 0369f02 Bump the actions group across 1 directory with 3 updates (#102)
• 57927b7 bump MSRV to 1.88, edition 2024 (#103)
• 6fafc2c Bump codecov/codecov-action from 5 to 6 in the actions group (#99)
• 6ba405c Bump the rust-deps group with 2 updates (#98)
• Additional commits viewable in compare view

Updates strum from 0.27.2 to 0.28.0

Release notes

Sourced from strum's releases.

v0.28.0

What's Changed

• Updated the CHANGELOG for the new release by @​Peternator7 in Peternator7/strum#452
• Add missing #[automatically_derived] by @​clechasseur in Peternator7/strum#462
• Bump MSRV to v1.71 by @​paolobarbolini in Peternator7/strum#466
• Use absolute paths in proc macro by @​Snarpix in Peternator7/strum#469
• Upgrade phf to v0.13 by @​paolobarbolini in Peternator7/strum#465
• docs: Fix typo by @​j-g00da in Peternator7/strum#463
• Allow any kind of passthrough attributes on EnumDiscriminants by @​clechasseur in Peternator7/strum#461
• Fix existing cargo fmt + clippy issues and add GH actions by @​Peternator7 in Peternator7/strum#473
• [EnumDiscriminant] Automatically add Default by @​Peternator7 in Peternator7/strum#474
• Honor parse_err_ty attribute when the enum has a default variant by @​scovich in Peternator7/strum#431
• Make TryFrom and FromStr infallible if there's a default by @​Peternator7 in Peternator7/strum#476
• Implement core::fmt::Display for ParseError by @​Peternator7 in Peternator7/strum#477
• Peternator7/0.28 by @​Peternator7 in Peternator7/strum#475

New Contributors

• @​clechasseur made their first contribution in Peternator7/strum#462
• @​Snarpix made their first contribution in Peternator7/strum#469
• @​j-g00da made their first contribution in Peternator7/strum#463
• @​scovich made their first contribution in Peternator7/strum#431

Full Changelog: Peternator7/strum@v0.27.2...v0.28.0

Changelog

S...

Description has been truncated

---

^{Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.}

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	bashkit	6a2b9ea	Commit Preview URL Branch Preview URL	Nov 06 2026, 12:22 AM

[bashkit-pr-reviewer]

Review summary — #2848 (dependabot rust-dependencies group, 17 updates)

Verdict: Routine manifest + lockfile bump. No source changes. No findings to file; nothing verified as broken. Mergable subject to the normal CI gate (which I could not run here — no cargo/build in this shell — so this review does not replace CI).

What the change is (verified from the diff):

• crates/bashkit-monty/Cargo.toml: fancy-regex 0.17.0→0.20.0, getrandom 0.3→0.4, hashbrown 0.16→0.17, itertools 0.14.0→0.15.0, all six ruff_* 0.0.14→0.0.20 in lockstep, speedate 0.17.0→0.18.0, strum 0.27→0.28, unicode_names2 1→4; plus small transitive bumps (signal-hook 0.4.5→0.4.6, smallvec 1.16.0→1.16.4, unicode-normalization 0.1.25→0.1.26, jiff-tzdb 0.1.8→0.1.9, etc.).
• crates/bashkit-monty-types/Cargo.toml: ruff_python_stdlib 0.0.14→0.0.20, strum 0.27→0.28.
• Cargo.lock: versions/checksums updated; stale duplicates pruned (fancy-regex 0.17.0, phf_* 0.12.1, psm/stacker, ar_archive_writer entries removed; phf now unified on 0.13.x consistent with strum 0.28 + phf feature). No git/vendor deps added; all sources remain registry+crates.io with checksums.

Context I read beyond the diff:

• AGENTS.md project rules; head files at /workspace/bashkit (checkout of 6a2b9ea OK).
• Both touched Cargo.toml files in full, and sampled call sites of the bumped crates: unicode_names2::name(c) in modules/codecs.rs, getrandom::fill in boundary_uuid.rs, strum::Display in modules/re.rs, ruff_python_ast imports in parse.rs, fancy-regex doc reference in modules/re.rs.

Risk notes (not findings — CI must confirm):

• The majors with no accompanying source edits (unicode_names2 1→4, getrandom 0.3→0.4, ruff_* 0.0.14→0.0.20, strum 0.27→0.28, fancy-regex 0.17→0.20) are the ones that would break compilation if upstream APIs moved. The sampled call sites look like stable, long-lived APIs (name(char), fill(&mut [u8]), #[derive(Display)], core ruff_python_ast types), and the lockfile unification (fewer duplicate versions) is a good sign, but I did not — and cannot here — compile or run tests.
• No sandbox/escape surface in this diff (no VFS, builtin, runtime, or network code touched); no knowledge/ update needed (no behavior decision changed).

What I could not review: nothing — truncated:false on the diff; all 3 files visible. What I could not do is build/test; defer to CI for compile + python3/re/codec behavior on the new ruff/fancy-regex/unicode_names2 versions.

[chaliy]

Superseded by #2851 — this bump cannot land as-is.

Root cause: ruff_python_* 0.0.16+ requires rustc 1.97 but the repo pins Rust 1.96.0, so every CI job fails at resolution (error: rustc 1.96.0 is not supported by ruff_python_ast@0.0.20 ...). #2851 keeps all your other bumps, caps ruff at 0.0.15 (newest release supporting rustc 1.96, verified per crate), and adapts to the fancy-regex 0.20 (Captures<'_, str>) and ruff 0.0.15 (TokenKind::Name → Identifier) API changes. Rerunning ruff 0.0.20+ must wait for a deliberate Rust 1.97 toolchain bump.

[chaliy]

Closed as superseded by #2851 (see root-cause note above). Reopen if #2851 fails to land.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml