chore(deps): bump the all group across 1 directory with 7 updates

[dependabot]

Bumps the all group with 7 updates in the / directory:

Package	From	To
bytes	1.11.0	1.11.1
clap	4.5.54	4.5.57
criterion	0.8.1	0.8.2
git2	0.20.3	0.20.4
reqwest	0.13.1	0.13.2
zip	7.2.0	7.4.0
annotate-snippets	0.12.10	0.12.11

Updates bytes from 1.11.0 to 1.11.1

Release notes

Sourced from bytes's releases.

Bytes v1.11.1

1.11.1 (February 3rd, 2026)

• Fix integer overflow in BytesMut::reserve

Changelog

Sourced from bytes's changelog.

1.11.1 (February 3rd, 2026)

• Fix integer overflow in BytesMut::reserve

Commits

• 417dccd Release bytes v1.11.1 (#820)
• d0293b0 Merge commit from fork
• See full diff in compare view

Updates clap from 4.5.54 to 4.5.57

Release notes

Sourced from clap's releases.

v4.5.57

[4.5.57] - 2026-02-03

Fixes

• Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

v4.5.56

[4.5.56] - 2026-01-29

Fixes

• On conflict error, don't show conflicting arguments in the usage

v4.5.55

[4.5.55] - 2026-01-27

Fixes

• Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

Changelog

Sourced from clap's changelog.

[4.5.57] - 2026-02-03

Fixes

• Regression from 4.5.55 where having an argument with .value_terminator("--") caused problems with an argument with .last(true)

[4.5.56] - 2026-01-29

Fixes

• On conflict error, don't show conflicting arguments in the usage

[4.5.55] - 2026-01-27

Fixes

• Fix inconsistency in precedence between positionals with a value_terminator("--") and escapes (--) where ./foo -- bar means the first arg is empty, rather than escaping future args

Commits

• 69c0ddb chore: Release
• 8206bba docs: Update changelog
• c109d67 Merge pull request #6104 from epage/hide
• 9d7f212 fix(complete): Hide dot files on dynamic completer
• 77b3fdb test(complete): Show dot file behavior
• f89b9b8 test(derive): Make stable across upgrade
• 58eb8a9 chore: Release
• 10a2a75 docs: Update changelog
• a42eebf Merge pull request #6103 from epage/mut_subcommands
• 5335f54 feat: Add Command::mut_subcommands
• Additional commits viewable in compare view

Updates criterion from 0.8.1 to 0.8.2

Release notes

Sourced from criterion's releases.

criterion-plot-v0.8.2

Other

• Update Readme

criterion-v0.8.2

Fixed

• don't build alloca on unsupported targets

Other

• (deps) bump crate-ci/typos from 1.40.0 to 1.43.0
• Fix panic with uniform iteration durations in benchmarks
• Update Readme
• Exclude development scripts from published package

Changelog

Sourced from criterion's changelog.

0.8.2 - 2026-02-04

Fixed

• don't build alloca on unsupported targets

Other

• (deps) bump crate-ci/typos from 1.40.0 to 1.43.0
• Fix panic with uniform iteration durations in benchmarks
• Update Readme
• Exclude development scripts from published package

Commits

• 7f0d745 chore: release v0.8.2
• 4a467ce chore(deps): bump crate-ci/typos from 1.40.0 to 1.43.0
• b277a75 Fix panic with uniform iteration durations in benchmarks
• 828af14 fix: don't build alloca on unsupported targets
• b01316b Update Readme
• 4c02a3b Exclude development scripts from published package
• See full diff in compare view

Updates git2 from 0.20.3 to 0.20.4

Changelog

Sourced from git2's changelog.

0.20.4 - 2026-02-02

0.20.3...0.20.4

Fixed

• Fix undefined behavior when dereferencing empty Buf. #1213

Commits

• 8852d7d Merge pull request #1214 from weihanglo/backport-from-raw-parts
• 0b274f7 Bump to 0.20.4
• 73a5d5d Add test for dereference of an empty Buf
• ce56683 fix: check ptr nullity before calling from_raw_parts
• See full diff in compare view

Updates reqwest from 0.13.1 to 0.13.2

Changelog

Sourced from reqwest's changelog.

v0.13.2

• Fix HTTP/2 and native-tls ALPN feature combinations.
• Fix HTTP/3 to send h3 ALPN.
• (wasm) fix RequestBuilder::json() from override previously set content-type.

Commits

• ad83b63 v0.13.2
• c25f3db chore: Add Windows and Linux arm64 to CI (#2960)
• 761b89e chore: upgrade wasm-streams to v0.5 (#2958)
• fd2d507 fix(wasm): custom content-type overidden by json method for wasm (#2908)
• 23eb7d4 chore: update copyright year to 2026 (#2943)
• 10c31c2 fix(http3): specify h3 alpn for http3 connector (#2929)
• 8530ec3 docs: native-tls-alpn has changed to native-tls-no-alpn (#2940)
• 04a216f chore(deps): remove unused webpki-roots and rustls-native-certs (#2932)
• 406b59e fix http2 feature is not enabled for native-tls ALPN (#2927)
• 325a020 Update readme for 0.13 (#2926)
• Additional commits viewable in compare view

Updates zip from 7.2.0 to 7.4.0

Release notes

Sourced from zip's releases.

v7.4.0

🚀 Features

• Increase MSRV to 1.88 and update dependencies (#626)

v7.3.0

🚀 Features

• cleanup the benchs and Cargo.toml (#606)
• Add support for per-file comments (#543)

🐛 Bug Fixes

• Document feature unreserved and make the mapping of extra fields public (#616)
• Return an error if abort_file() fails when exceeding non-large-file limit (#598)

⚙️ Miscellaneous Tasks

• Bump version to 7.3.0 (semver checks fail if it's still 7.3.0-pre1)

v7.3.0-pre1

🐛 Bug Fixes

• Reject empty ZipCrypto password when encrypting files (can still be used when decrypting)
• make zip crate safer and more readable (#536)

⚡ Performance

• Optimizations for CP437 conversion (#559)

⚙️ Miscellaneous Tasks

• Trigger release 7.3.0-pre1 to reset cargo-semver-checks baseline

Changelog

Sourced from zip's changelog.

7.4.0 - 2026-02-05

🚀 Features

• Increase MSRV to 1.88 and update dependencies (#626)

7.3.0 - 2026-02-04

🚀 Features

• cleanup the benchmarks and Cargo.toml (#606)
• Add support for per-file comments (#543)

🐛 Bug Fixes

• Document feature unreserved and make the mapping of extra fields public (#616)
• Return an error if abort_file() fails when exceeding non-large-file limit (#598)

⚙️ Miscellaneous Tasks

• Bump version to 7.3.0 (semver checks fail if it's still 7.3.0-pre1)

7.3.0-pre1 - 2026-01-27

🐛 Bug Fixes

• Reject empty ZipCrypto password when encrypting files (can still be used when decrypting)
• make zip crate safer and more readable (#536)

⚡ Performance

• Optimizations for CP437 conversion (#559)

⚙️ Miscellaneous Tasks

• Trigger release 7.3.0-pre1 to reset cargo-semver-checks baseline

Commits

• 016d421 chore: release v7.4.0 (#628)
• 18792c2 feat: Increase MSRV to 1.88 and update dependencies (#626)
• c9bce39 test: Potential fixes for 5 code quality findings (method-description comment...
• 5b61c24 test: Potential fixes for 2 code quality findings in tests/end_to_end.rs (#624)
• 1c59f3c Apply suggested fix to CHANGELOG.md from Copilot Autofix (#623)
• 41aeb9f Revert "ci: Temporarily override baseline for semver checks (revert after 7.3...
• ba77189 chore: release v7.3.0 (#580)
• 57b5ecc fix: Document feature unreserved and make the mapping of extra fields publi...
• 579b67c Apply suggested fix to tests/zip_crypto.rs from Copilot Autofix (#620)
• ca432a0 Apply suggested fix to tests/wasm32.rs from Copilot Autofix (#618)
• Additional commits viewable in compare view

Updates annotate-snippets from 0.12.10 to 0.12.11

Changelog

Sourced from annotate-snippets's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased] - ReleaseDate

[0.12.11] - 2026-01-29

Fixed

• Fix Unicode highlight alignment in patches #357

Commits

• a699837 Merge pull request #361 from Muscraft/v0.12.11
• fc0211a chore: Release annotate-snippets version 0.12.11
• 78b1f7d Merge pull request #357 from KeqingMoe/fix-unicode-patch
• 3d365cc fix: Fix Unicode highlight alignment in patches
• d17b037 test: Unicode highlight alignment in patches
• ea21774 Merge pull request #360 from rust-lang/renovate/stable-1.x
• 3edb595 chore(deps): Update Rust Stable to v1.93
• 3a106da Merge pull request #358 from Muscraft/match-anstyle-svg-changes
• e4fcfb6 test: Match anstyle-svg background color fix
• d225a68 chore(deps): Update Rust Stable to v1.92 (#356)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions