[dependabot]

Bumps the rust-deps group with 3 updates in the / directory: log, similar and serde-saphyr.

Updates log from 0.4.34 to 0.4.35

Release notes

Sourced from log's releases.

v0.4.35

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

• rework CI/CD to align with Rust project standards

Changelog

Sourced from log's changelog.

0.4.35 - 2026-10-30

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

• rework CI/CD to align with Rust project standards

Commits

• a46450b Update CHANGELOG.md
• a715f17 chore: release v0.4.35
• b4e2b12 Merge pull request #747 from rust-lang/chore/release-plz-mgnt
• 6b490b6 run fmt
• 2c7fd52 simplify some crate release tasks for easier automation
• 5bc5545 Merge pull request #745 from marcoienibot/release-plz-disable-semver-check
• 4234b8c Disable release-plz semver check
• 95918ff Merge pull request #744 from Kobzol/trusted-publishing
• e7ed747 Fix Zizmor lints
• e87a3c6 Setup trusted publishing
• Additional commits viewable in compare view

Updates similar from 3.2.0 to 3.2.1

Changelog

Sourced from similar's changelog.

3.2.1

• Improved real-world diffing performance substantially without changing the produced diffs. On a corpus of real source file revisions, line diffs run about 4x faster with Algorithm::Myers, 5x faster with Algorithm::Histogram, and 2.5x faster with Algorithm::Patience; word diffs run about 2x faster. This comes from a faster line tokenizer, a SipHash-1-3 content hash that consumes whole words (randomly keyed with std), cheaper integer-keyed lookup tables, hashing only the changed middle of Myers line diffs, flat occurrence tables in Histogram, and a gap buffer in the compaction pass that was quadratic on diffs with many ops. Allocation counts and peak memory dropped as well; in particular one sided and heavily unbalanced inputs no longer build index structures proportional to the larger side for Algorithm::Hunt, Algorithm::Histogram, and Algorithm::Patience.
• Fixed Algorithm::Histogram overflowing the stack on inputs with many scattered changes. Pending ranges are now tracked on the heap, so stack usage no longer grows with the number of anchors. #105
• Fixed TextMerge::labels writing carriage returns and newlines verbatim into conflict markers, which let a label add lines to the output that looked like merged content. Line terminators in labels are now replaced with spaces. #101

Commits

• 71d4831 chore(release): prepare 3.2.1
• b61e6c3 test(histogram): skip small stack tests on WASI
• a4ee936 fix(histogram): track pending ranges on the heap
• 96993d9 docs: add runnable example output gallery (#104)
• 1c64280 docs(changelog): describe diff performance and memory improvements
• a3da6ec perf(compact): use a gap buffer for large operation lists
• ce3a403 perf(histogram): reuse indexes and bound unbalanced input allocations
• 2bcae2f perf(myers): skip unchanged hashing and unused split bookkeeping
• 5a5aa8d perf(text): accelerate line and word tokenization
• 80bc240 perf(hash): accelerate content hashing and integer lookups
• Additional commits viewable in compare view

Updates serde-saphyr from 2.0.0 to 2.1.1

Release notes

Sourced from serde-saphyr's releases.

2.1.1 Optimization and maintenance release

Fixed

• Fixed 2.1.0 regression empty documents producing errors (#265). Empty document is a valid YAML document. Fix of this regression is the reason of making this release so early.

Performance improvements

• Significantly reduced allocations when deserializing (#262), thanks @​mat-gas

2.1.0 Minor feature extension, maintenance and performance release

Added

• Added opt-in Options::reject_tagged_field_names to catch misplaced tags on struct field names, with Error::TaggedStructFieldName diagnostics. Struct field names can only be strings; !!str is still accepted. As other tags can only be ignored, tag on a structure field name is almost for sure placed wrongly. This setting will be default in next major release.
• Added Options::leading_zero_numbers_as_strings and Options::underscored_numbers_as_strings to preserve numeric spellings such as 0755 and 1_000 as strings in untyped values, including untagged enums and flattened fields (#225). Both default to false; direct typed parsing, explicit numeric tags, and mapping-key comparison keep their existing behavior.
• Added Error::render_to to append diagnostics to any std::fmt::Write using RenderOptions, without collecting the complete output in an intermediate string (#221).
• Added DuplicateKeyPolicy::PassThrough to delegate repeated explicit mapping entries to Serde visitors, matching serde_yaml's handling for structs, standard maps, and custom multimap visitors (#226). The default remains Error; merge expansion retains its precedence rules. See the README migration note for the scope of this option.

Deprecated

• Deprecated SerializerOptions::empty_as_braces. Setting it to false emits YAML null for empty block collections without tags or anchors. These values do not round-trip into collection types. Omit the setting to keep the default true and emit [] or {}. Existing serialization behavior remains supported for compatibility.

Fixed

• Emit empty lines in literal and folded block scalars without indentation, avoiding trailing whitespace while preserving whitespace in the string content (#249).
• Expose the original std::io::Error from deserialization failures through std::error::Error::source(). The outer message is IO error, so error chains include the underlying cause only once. Standalone Miette, Figment, and Figment2 diagnostics retain the cause in their messages. Custom Miette formatters retain control over the complete message through MessageFormatter::format_standalone_message.
• Avoid duplicate messages from Error::WithSnippet when following std::error::Error::source() by forwarding the wrapped error's source. Use without_snippet() to inspect the wrapped error. Alias errors retain their complete source chain, including snippet wrappers, for compatibility.

... (truncated)

Changelog

Sourced from serde-saphyr's changelog.

2.1.1

Fixed

• Fixed 2.1.0 regression empty documents producing errors (#265). Empty document is a valid YAML document.

Performance improvements

• Significantly reduced allocations when deserializing (#262)

2.1.0

–

Added

• Added PropertySyntax::DockerComposeWithNulls: Compose interpolation where a value that is solely a reference to an unset property, or whose expansion is null/~, becomes YAML null. Explicitly empty properties and empty defaults stay empty strings, and DockerCompose itself is unchanged.
• Added opt-in Options::reject_tagged_field_names to catch misplaced tags on struct field names, with Error::TaggedStructFieldName diagnostics. Struct field names can only be strings, !!str is still accepted. As other tags can only be ignored, tag on a structure field name is almost for sure placed wrongly. This setting will be default in next major release.
• Added Options::leading_zero_numbers_as_strings and Options::underscored_numbers_as_strings to preserve numeric spellings such as 0755 and 1_000 as strings in untyped values, including untagged enums and flattened fields (#225). Both default to false; direct typed parsing, explicit numeric tags, and mapping-key comparison keep their existing behavior.
• Added Error::render_to to append diagnostics to any std::fmt::Write using RenderOptions, without collecting the complete output in an intermediate string (#221).
• Added DuplicateKeyPolicy::PassThrough to delegate repeated explicit mapping entries to Serde visitors, matching serde_yaml's handling for structs, standard maps, and custom multimap visitors (#226). The default remains Error; merge expansion retains its precedence rules. See the README migration note for the scope of this option.

Deprecated

• Deprecated SerializerOptions::empty_as_braces. Setting it to false emits YAML null for empty block collections without tags or anchors. These values do not round-trip into collection types. Omit the setting to keep the default true and emit [] or {}. Existing serialization behavior remains supported for compatibility.

Fixed

• Preserve application-tagged null-like documents in multi-document APIs, including the garde and validator integrations. A document such as !Maybe null now reaches enum dispatch instead of being skipped. This also affects default options: an Option<String> target receives a None item for !Foo null, while a String target reports NullIntoString. Untagged null documents and explicit !!null are still skipped.
• Resolve tagged enum payloads according to their target type under no_schema:

... (truncated)

Commits

• 07bfc26 Fix formatting
• a988642 Advance release version number
• ef4862b Restore empty YAML stream deserialization into collections (#265)
• 3501fa9 Reduce allocations when deserializing (#262)
• 38f4202 Removed unneeded here file
• 57f72d5 The failed parser now releases its cached error before conversion, preserving...
• 346afe2 Tag lookup optimization, this way confirmed to work faster.
• aa5d474 Number of tests goes over 4000
• 1cadc9c Prepare to 2.1.0 release
• 1d509d2 Add DockerComposeWithNulls with consistent null handling (#261)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[cloudflare-workers-and-pages]

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://dependabot-cargo-rust-deps-fc29ef4c92-repoverlay.tyler-511.workers.dev (commit 5fda7b1)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status	Deployment URL	Commit	Updated (UTC)	See this deployment's details
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://f76b50d8-repoverlay.tyler-511.workers.dev	5fda7b1	2026-11-09T13:08:32.693Z	Visit the dashboard ↗