Changed
- Dependency bumps (dependabot queue drain): consolidated 8 open dependabot PRs (#783-#790) into a single verified branch:
- Rust crates:
rayon 1.10 -> 1.12,toml 0.8 -> 1.x(the cleancargo updateresolved to the latest 1.x release at merge time; coexists withrust-i18n-support's0.8.x),rmcp 1.4 -> 1.5,similar 3.0 -> 3.1,uuid 1.23.0 -> 1.23.1. - CI actions:
actions/setup-nodeintool-release-watch.ymlbumpedv4.4.0 -> v6.4.0; othersetup-nodecallers bumpedv6.3.0 -> v6.4.0;taiki-e/install-action 2.75.17 -> 2.75.21;anthropics/claude-code-action@v1SHA updated toe58dfa5(v1.0.101 -> v1.0.105). deny.tomlskip list updated: the post-bump dep tree dropped0.48.5from severalwindows_*arch crates and added a new0.53.1family (transitive via newer tokio/notify).cargo auditignores two new transitive advisories fromrust-i18n-macro 3.1.2→libyml(RUSTSEC-2025-0067) andserde_yml(RUSTSEC-2025-0068); both tracked indocs/RUSTSEC-ADVISORIES.mdfor removal when rust-i18n migrates offserde_yml.- Full workspace build +
cargo test+cargo clippy --workspace --all-targets -- -D warningspass after the bump.
- Rust crates: