chore: bump the cargo-minor-patch group across 1 directory with 5 updates by dependabot[bot] · Pull Request #177 · RAprogramm/twc-rs

dependabot · 2026-09-14T18:08:21Z

Bumps the cargo-minor-patch group with 5 updates in the / directory:

Package	From	To
open	`5.4.1`	`5.4.4`
keyring	`4.1.6`	`4.2.0`
clap_complete_nushell	`4.6.1`	`4.6.2`
rust-i18n	`4.2.1`	`4.2.2`
reqwest	`0.13.4`	`0.13.5`

Updates open from 5.4.1 to 5.4.4

Release notes

Sourced from open's releases.

v5.4.4

Bug Fixes

open Windows paths without wildcard expansion

Opening a child of a bracket-named directory fails because Start-Process resolves parent directories as PowerShell wildcard patterns. The isolated Windows regression test reproduced WildcardPatternException for a copied executable under "【Tiny Asa】 [77P7V-712MB]\child" before this change.

Use Test-Path and Invoke-Item with LiteralPath for existing items, retaining Start-Process for URLs and application names. These cmdlets also work under PowerShell Constrained Language Mode. Share the embedded script between Windows and WSL, keep targets in environment data, and stop on launch errors to report a nonzero exit status. Preserve the security boundary established in fd29861: cmd /c start remains opt-in through the insecure feature. No previously removed launcher options are restored.

The integration test launches only a copy of its own test binary, which records its executable path and exits. It checks absolute and relative paths with invalid and valid bracket patterns, Unicode, backticks, quotes, shell metacharacters, and leading dashes in normal and constrained PowerShell sessions, plus failure for a missing executable. It requires neither Explorer nor registered document or URL handlers. Adjust the existing fallback assertion to also allow the opt-in cmd launcher after Explorer with all features enabled.

Validated locally on Windows with PowerShell 5.1.26100.33438 and rustc 1.97.1: cargo test and cargo test --all-features each passed all 19 tests, including the behavioral regression. git diff --check passed, and cargo package --list includes the embedded script. Test-Path returned false without errors for representative https, mailto, and file URLs. Actual GUI folder, document, URL handling and WSL interop were not exercised locally.

Commit Statistics

2 commits contributed to the release.

8 days passed between releases.

1 commit was understood as conventional.

1 unique issue was worked on: #132

Commit Details

#132

Open Windows paths without wildcard expansion (ad95c40)

Uncategorized

... (truncated)

Changelog

Sourced from open's changelog.

5.4.4 (2026-09-10)

Bug Fixes

open Windows paths without wildcard expansion

Opening a child of a bracket-named directory fails because Start-Process resolves parent directories as PowerShell wildcard patterns. The isolated Windows regression test reproduced WildcardPatternException for a copied executable under "【Tiny Asa】 [77P7V-712MB]\child" before this change.

Use Test-Path and Invoke-Item with LiteralPath for existing items, retaining Start-Process for URLs and application names. These cmdlets also work under PowerShell Constrained Language Mode. Share the embedded script between Windows and WSL, keep targets in environment data, and stop on launch errors to report a nonzero exit status. Preserve the security boundary established in fd29861: cmd /c start remains opt-in through the insecure feature. No previously removed launcher options are restored.

The integration test launches only a copy of its own test binary, which records its executable path and exits. It checks absolute and relative paths with invalid and valid bracket patterns, Unicode, backticks, quotes, shell metacharacters, and leading dashes in normal and constrained PowerShell sessions, plus failure for a missing executable. It requires neither Explorer nor registered document or URL handlers. Adjust the existing fallback assertion to also allow the opt-in cmd launcher after Explorer with all features enabled.

Validated locally on Windows with PowerShell 5.1.26100.33438 and rustc 1.97.1: cargo test and cargo test --all-features each passed all 19 tests, including the behavioral regression. git diff --check passed, and cargo package --list includes the embedded script. Test-Path returned false without errors for representative https, mailto, and file URLs. Actual GUI folder, document, URL handling and WSL interop were not exercised locally.

Commit Statistics

2 commits contributed to the release.

8 days passed between releases.

1 commit was understood as conventional.

1 unique issue was worked on: #132

Commit Details

... (truncated)

Commits

ba35e00 Release open v5.4.4
45317f8 Merge pull request #133 from Byron/fix-open-on-windows
ad95c40 fix: open Windows paths without wildcard expansion (#132)
9551952 Release open v5.4.3
136d4d0 Merge pull request #131 from ncfavier/reap
43e601d review
a78c0ca fix: wait for intermediate child to terminate when double-forking
1a3ef5d Release open v5.4.2
7468760 Merge pull request #130 from s00d/fix/macos-that-detached-zombies
351bb54 review
Additional commits viewable in compare view

Updates keyring from 4.1.6 to 4.2.0

Release notes

Sourced from keyring's releases.

v4.2.0: update the CLI dependencies

This release updates the dependencies of the CLI feature so that it builds appropriate credential stores on each platform. In particular, the db-keystore requires 64-bit platforms and the Android keystore is included on Android.

What's Changed

Bump base64 from 0.23.0 to 0.23.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#346

Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#349

Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 by @dependabot[bot] in open-source-cooperative/keyring-rs#348

Remove mimalloc feature from db-keystore. by @brotskydotcom in open-source-cooperative/keyring-rs#350

Restore the android-native-keyring-store dependency for the cli. by @brotskydotcom in open-source-cooperative/keyring-rs#351

Full Changelog: open-source-cooperative/keyring-rs@v4.1.6...v4.2.0

Commits

d18b5c8 Restore the android-native-keyring-store dependency for the cli. (#351)
ef30fb8 Restore the android-native-keyring-store dependency for the cli.
a0a5a7f Remove mimalloc feature from db-keystore. (#350)
36981e5 Remove mimalloc feature from db-keystore.
6db16c4 Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (#348)
19d5b62 Merge branch 'main' into dependabot/cargo/dbus-secret-service-keyring-store-1...
6ea8273 Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1 (#349)
6a3ac80 Bump zbus-secret-service-keyring-store from 1.0.0 to 1.0.1
659caf5 Bump dbus-secret-service-keyring-store from 1.0.0 to 1.0.1
ce7fee7 Bump base64 from 0.23.0 to 0.23.1 (#346)
Additional commits viewable in compare view

Updates clap_complete_nushell from 4.6.1 to 4.6.2

Release notes

Sourced from clap_complete_nushell's releases.

v4.6.2

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Changelog

Sourced from clap_complete_nushell's changelog.

[4.6.2] - 2026-07-15

Fixes

(help) Say alias when there is only one

Commits

8e50ec8 chore: Release
1f7ca4e chore: Update transitive clap
3e790f2 docs: Update changelog
0b83f87 Merge pull request #6477 from antoniszymanski/master
dee8b8e fix(clap_complete_nushell): Set argument type to directory for `ValueHint::...
4a622b4 chore: Release
e1f6b90 docs: Update changelog
a9660f4 Merge pull request #6467 from sylvestre/mangen-override-usage
715b812 chore: Release
89e6e9b docs: Update changelog
Additional commits viewable in compare view

Updates rust-i18n from 4.2.1 to 4.2.2

Release notes

Sourced from rust-i18n's releases.

v4.2.2

What's Changed

Bump serde-saphyr to 1.2 to fix smallvec version conflict by @huacnlee in longbridge/rust-i18n#147

Full Changelog: longbridge/rust-i18n@v4.2.1...v4.2.2

Commits

c47194d Version 4.2.2
96e1b61 Bump serde-saphyr to 1.2 to fix smallvec version conflict (#147)
eed1f02 Update README.md (#145)
See full diff in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

fix(blocking): preserve version and extensions in TryFromhttp::Request by @wwhsaber in seanmonstar/reqwest#3050

Remove unnecessary clones by @FranciscoTGouveia in seanmonstar/reqwest#3052

Add Referrer and Referrer Policy methods to WASM Request API by @Billy-Sheppard in seanmonstar/reqwest#3049

chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in seanmonstar/reqwest#3058

feat: add Error::is_dns() to identify DNS resolution failures by @JoakoI98 in seanmonstar/reqwest#3057

Fix blocking client timeout panic by @V-Mann-Nick in seanmonstar/reqwest#3060

Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @FalkWoldmann in seanmonstar/reqwest#3063

feat: Add ClientBuilder::http1_max_headers by @smaeda-ks in seanmonstar/reqwest#3065

feat: expose the negotiated TLS version via TlsInfo by @dennisameling in seanmonstar/reqwest#3067

fix(error): detect timeouts wrapped in body decode errors by @raphaelroshan in seanmonstar/reqwest#3064

Remove unnecessary clones and a cast by @FranciscoTGouveia in seanmonstar/reqwest#3071

chore(deps): upgrade base64 to 0.23 by @paolobarbolini in seanmonstar/reqwest#3074

perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @spellsaif in seanmonstar/reqwest#3085

fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @spellsaif in seanmonstar/reqwest#3084

src/async_impl/request.rs_improved_doc_for_json_fn: by @Athleteg in seanmonstar/reqwest#3082

fix: proxy could use wrong credentials if many matched by @seanmonstar in seanmonstar/reqwest#3098

New Contributors

@wwhsaber made their first contribution in seanmonstar/reqwest#3050

@FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052

@Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049

@JoakoI98 made their first contribution in seanmonstar/reqwest#3057

@V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060

@FalkWoldmann made their first contribution in seanmonstar/reqwest#3063

@smaeda-ks made their first contribution in seanmonstar/reqwest#3065

@raphaelroshan made their first contribution in seanmonstar/reqwest#3064

@spellsaif made their first contribution in seanmonstar/reqwest#3085

@Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

Add Error::is_dns() to identify errors caused by DNS resolution failures.

Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).

Add TLS version to TlsInfo extension.

Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.

Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

de55373 v0.13.5
4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
9f06fd2 docs: improve description of JSON method (#3082)
5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
4e9a3c7 chore: add pull request template for human-written content
17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
221abe9 chore: Remove unnecessary clones and a cast (#3071)
99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates Bumps the cargo-minor-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [open](https://github.com/Byron/open-rs) | `5.4.1` | `5.4.4` | | [keyring](https://github.com/open-source-cooperative/keyring-rs) | `4.1.6` | `4.2.0` | | [clap_complete_nushell](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.2` | | [rust-i18n](https://github.com/longbridge/rust-i18n) | `4.2.1` | `4.2.2` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | Updates `open` from 5.4.1 to 5.4.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.4.1...v5.4.4) Updates `keyring` from 4.1.6 to 4.2.0 - [Release notes](https://github.com/open-source-cooperative/keyring-rs/releases) - [Commits](open-source-cooperative/keyring-rs@v4.1.6...v4.2.0) Updates `clap_complete_nushell` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete_nushell-v4.6.1...clap_complete_nushell-v4.6.2) Updates `rust-i18n` from 4.2.1 to 4.2.2 - [Release notes](https://github.com/longbridge/rust-i18n/releases) - [Commits](longbridge/rust-i18n@v4.2.1...v4.2.2) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) --- updated-dependencies: - dependency-name: open dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: keyring dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: clap_complete_nushell dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: rust-i18n dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-09-14T18:08:27Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: d2a1575e-81c5-453e-b709-d0f2f6c78765

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 14, 2026

Navigation Menu

Uh oh!

chore: bump the cargo-minor-patch group across 1 directory with 5 updates - #177

chore: bump the cargo-minor-patch group across 1 directory with 5 updates#177
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-patch-a921ea37ad

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

coderabbitai Bot commented Sep 14, 2026

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026

v5.4.4

Bug Fixes

Commit Statistics

Commit Details

5.4.4 (2026-09-10)

Bug Fixes

Commit Statistics

Commit Details

v4.2.0: update the CLI dependencies

What's Changed

v4.6.2

[4.6.2] - 2026-07-15

Fixes

[4.6.2] - 2026-07-15

Fixes

v4.2.2

What's Changed

v0.13.5

tl;dr

What's Changed

New Contributors

v0.13.5

Uh oh!

coderabbitai Bot commented Sep 14, 2026

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants