chore(deps): bump the rust-deps group across 1 directory with 10 updates

[dependabot]

Bumps the rust-deps group with 10 updates in the / directory:

Package	From	To
serde	1.0.228	1.0.229
serde_json	1.0.149	1.0.150
thiserror	2.0.18	2.0.19
sqlparser	0.53.0	0.62.0
sha2	0.10.9	0.11.0
toml	0.8.23	1.1.3+spec-1.1.0
regex	1.12.3	1.13.1
postgres	0.19.13	0.19.14
insta	1.46.3	1.48.0
clap	4.6.0	4.6.2

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

• Reject non-string enum object keys (#1324, thanks @​puneetdixit200)

Commits

• a1ae73a Release 1.0.150
• 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
• 2037b63 Reject non-string enum object keys
• 5d30df6 Resolve manual_assert_eq pedantic clippy lint
• dc8003a Raise required compiler for preserve_order feature to 1.85
• a42fa98 Unpin CI miri toolchain
• 684a60e Pin CI miri to nightly-2026-02-11
• 7c7da33 Raise required compiler to Rust 1.71
• acf4850 Simplify Number::is_f64
• 6b8ceab Resolve unnecessary_map_or clippy lint
• Additional commits viewable in compare view

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

• Update to syn 3

Commits

• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
• c50e387 chore: improve thiserror maintenance path
• d4a2507 Raise minimum tested compiler to rust 1.85
• 99e8a6c Unpin CI miri toolchain
• 9ac165c Pin CI miri to nightly-2026-02-11
• Additional commits viewable in compare view

Updates sqlparser from 0.53.0 to 0.62.0

Commits

• 3dd0e30 chore: Bump version to 0.62.0 and add changelog (#2331)
• 9833c03 feat(clickhouse): support PARTITION BY after ORDER BY and ARRAY JOIN (#2283)
• 9550e93 Add Teradata dialect (#2309)
• 7eba3ca PostgreSQL: Parse optimizer hints in leading comments (#2320)
• fa1dae1 Snowflake: Add support for text data type modifiers (#2297)
• 63e9a33 Redshift: PartiQL AT <index> (#2303)
• 19a7468 Track Parens\<T>'s span (#2291)
• 9a70c42 PostgreSQL: Add support for LATERAL ... WITH ORDINALITY (#2304)
• 53dcc82 Spark SQL: Add SparkSqlDialect (#2305)
• 9f04ebe Coding agents guidelines (#2298)
• Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

• ffe0939 Release sha2 0.11.0 (#806)
• 8991b65 Use the standard order of the [package] section fields (#807)
• 3d2bc57 sha2: refactor backends (#802)
• faa55fb sha3: bump keccak to v0.2 (#803)
• d3e6489 sha3 v0.11.0-rc.9 (#801)
• bbf6f51 sha2: tweak backend docs (#800)
• 155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
• ed514f2 Use published version of keccak v0.2 (#799)
• 702bcd8 Migrate to closure-based keccak (#796)
• 827c043 sha3 v0.11.0-rc.8 (#794)
• Additional commits viewable in compare view

Updates toml from 0.8.23 to 1.1.3+spec-1.1.0

Commits

• eb25160 chore: Release
• f36fb52 docs: Update changelog
• 3adbbb7 fix(writer): Don't overflow (#1189)
• fb0c1b3 fix(writer): Don't overflow
• 5e70a70 test(writer): Add overflow test
• 771a975 chore: Upgrade toml-test (#1186)
• 28f6c9c chore: Upgrade toml-test
• 30d75ca chore(deps): Update Prek to v0.4.9 (#1185)
• 17efe57 chore(deps): Update Rust Stable to v1.97 (#1184)
• c9d0d54 style: Make clippy happy
• Additional commits viewable in compare view

Updates regex from 1.12.3 to 1.13.1

Changelog

Sourced from regex's changelog.

1.13.1 (2026-07-15)

This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See #1364 for (many) more details.

Bug fixes:

• #1354: Fixes previously unsound reverse suffix and inner optimizations.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

• #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.

1.12.4 (2026-06-09)

This release includes a performance optimization for compilation of regexes

... (truncated)

Commits

• 2b52759 1.13.1, redux
• 40e9823 1.13.1
• 75fcb96 changelog: 1.13.1
• 64ad0b6 automata: fix bug in reverse suffix/inner optimization
• fa91c31 automata: fix a bug caught by Codex review
• 30390ec automata: formatting tweaks
• 821a8eb automata: refactor reverse suffix/inner search slightly
• 10afd70 automata: expose the extracted literals for inner literal extraction
• 8c34f41 automata: avoid reverse suffix optimization for non-leftmost-first
• 5524f02 test: add regression tests for failed reverse suffix/inner optimizations
• Additional commits viewable in compare view

Updates postgres from 0.19.13 to 0.19.14

Release notes

Sourced from postgres's releases.

postgres v0.19.14

Changed

• Updated tokio-postgres to v0.7.18.

Commits

• e47a75e Release postgres v0.19.14
• f1cb6ec Release tokio-postgres v0.7.18
• 70cf8eb Release postgres-types v0.2.14
• 5cdab55 Release postgres-derive v0.4.9
• 76062c9 Release postgres-protocol v0.6.12
• b661993 fix(derive): error instead of panicking on incomplete composite values
• d40097a fix(protocol): bound the SCRAM iteration count to prevent a DoS
• 2af79a0 fix(types): avoid panic decoding out-of-range time 0.2 dates/timestamps
• 7a00ffa fix(tokio): reject DataRow with a field count that differs from the columns
• a7cf84b fix(protocol): avoid panic on out-of-bounds hstore key/value length
• Additional commits viewable in compare view

Updates insta from 1.46.3 to 1.48.0

Release notes

Sourced from insta's releases.

1.48.0

Release Notes

• Add strip_ansi_escape_codes setting which removes ANSI escape sequences (color codes, cursor movement, etc.) from snapshot content before comparison. Requires the filters feature. #899 (@​pierluigilenoci)
• Add opt-in support for YAML literal blocks for multiline strings in snapshot metadata fields such as description and expression. Set INSTA_YAML_BLOCK_STYLE=1 to enable. #851 (@​ivov)
• Setting CI=true normally makes cargo insta test behave as though --check was passed. Explicit snapshot handling options such as --accept now take precedence over this environment variable, allowing users to override this behavior if they want to. #924
• Fix cargo insta test --profile being forwarded to nextest as the nextest profile instead of the cargo build profile; it now translates to --cargo-profile for the nextest runner. Add --nextest-profile to select the nextest profile. #910
• Fix cargo insta pending-snapshots printing unusable \\?\-prefixed paths on Windows. The --snapshot filter now also accepts partial paths: any trailing path suffix of the snapshot file matches, so a bare --snapshot my_test.snap works. #904
• Accepting a binary snapshot no longer fails with os error 2 when its data file is missing (e.g. gitignored and not committed). #914

Install cargo-insta 1.48.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.48.0

File	Platform	Checksum
cargo-insta-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
cargo-insta-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
cargo-insta-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

1.47.2

Release Notes

... (truncated)

Changelog

Sourced from insta's changelog.

1.48.0

• Add strip_ansi_escape_codes setting which removes ANSI escape sequences (color codes, cursor movement, etc.) from snapshot content before comparison. Requires the filters feature. #899 (@​pierluigilenoci)
• Add opt-in support for YAML literal blocks for multiline strings in snapshot metadata fields such as description and expression. Set INSTA_YAML_BLOCK_STYLE=1 to enable. #851 (@​ivov)
• Setting CI=true normally makes cargo insta test behave as though --check was passed. Explicit snapshot handling options such as --accept now take precedence over this environment variable, allowing users to override this behavior if they want to. #924
• Fix cargo insta test --profile being forwarded to nextest as the nextest profile instead of the cargo build profile; it now translates to --cargo-profile for the nextest runner. Add --nextest-profile to select the nextest profile. #910
• Fix cargo insta pending-snapshots printing unusable \\?\-prefixed paths on Windows. The --snapshot filter now also accepts partial paths: any trailing path suffix of the snapshot file matches, so a bare --snapshot my_test.snap works. #904
• Accepting a binary snapshot no longer fails with os error 2 when its data file is missing (e.g. gitignored and not committed). #914

1.47.2

• Restore Send + Sync on Settings, Redactions, and Redaction by reverting the Arc to Rc change from 1.47.0, which was semver-breaking. #873 #874
• Add Send + Sync bounds to Comparator trait for consistency with Arc-based storage. #872
• Add compile-time assertion to prevent future auto-trait regressions.

1.47.1

• Revert sorting of sequences in sort_maps. The change in 1.47.0 sorted all Seq values (including Vec), not just non-deterministic collections like HashSet, which was a breaking change. #876

1.47.0

• Add Comparator trait for customizing how snapshot values are compared. #872 (@​dstu)
• Sort sequences in sort_maps to fix non-deterministic HashSet snapshots. #876
• Improve TOML serialization error message for unsupported types, suggesting assert_json_snapshot! or assert_yaml_snapshot! as alternatives. #880
• Remove unnecessary Send + Sync bounds from Redaction, allowing non-Send closures in dynamic redactions. #874
• Don't use Arc in Settings unnecessarily. #873 (@​dstu)
• Upgrade console to 0.16 and MSRV to 1.66. #885
• Upgrade toml-edit to 0.25. #882 (@​alexanderkjall)

Commits

• 7f23d2e Release 1.48.0 (#925)
• ee9cae1 Allow CI=true to be overridden by an explicitly passed --accept CLI flag ...
• 043cf82 fix: translate --profile to --cargo-profile for nextest (#913)
• 9c77f13 test: cover deep-wildcard redaction through arrays (#915)
• 362f432 Fix --snapshot filter on Windows; allow partial paths (#904)
• a436836 fix: tolerate a missing binary snapshot data file (#914)
• bf5fcdf fix: regenerate Cargo.lock and guard it with --locked in CI (#912)
• a761a9c feat: Support YAML literal blocks for multiline strings (#851)
• f9633f3 ci: pin check-minver to nightly-2026-04-25 (#905)
• c7b98b8 feat: add strip_ansi_escape_codes setting (#899)
• Additional commits viewable in compare view

Updates clap from 4.6.0 to 4.6.2

Release notes

Sourced from clap's releases.

v4.6.2

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

v4.6.1

[4.6.1] - 2026-04-15

Fixes

• (derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

[4.6.1] - 2026-04-15

Fixes

• (derive) Ensure rebuilds happen when an read env variable is changed

Commits

• 0fe0be3 chore: Release
• 480af9d docs: Update changelog
• 2b3ddd0 Merge pull request #6340 from liskin/fix-completion-escape
• 7ffe739 fix(complete): Do not suggest options after "--"
• d47fc4f test(complete): Options suggested after escape (--)
• 1420275 chore: Release
• d2c817d docs: Update changelog
• f88c94e Merge pull request #6341 from epage/sep
• acbb822 fix(complete): Reduce risk of conflict with actual subcommands
• a49fadb refactor(complete): Pull out subcommand separator
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions