') + ')', 'gi'); if (regex.test(text)) { found = true; var frag = document.createDocumentFragment(); var parts = text.split(regex); parts.forEach(function(part, i) { if (i % 2 === 0) { frag.appendChild(document.createTextNode(part)); } else { var span = document.createElement('span'); span.className = 'userscript-highlight'; span.textContent = part; frag.appendChild(span); } }); node.parentNode.replaceChild(frag, node); } }); } else if (node.nodeType === 1 && node.childNodes) { // element var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT']; if (!skipTags.includes(node.tagName)) { Array.from(node.childNodes).forEach(highlight); } } } highlight(document.body); // Re-highlight on dynamic content var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1 || node.nodeType === 3) highlight(node); }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Strip utm_, fbclid, gclid, etc. from all links on page (function() { var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid', 'ref', 'ref_src', 'source', 'medium', 'campaign']; function cleanUrl(url) { try { var u = new URL(url, window.location.origin); var changed = false; trackingParams.forEach(function(p) { if (u.searchParams.has(p)) { u.searchParams.delete(p); changed = true; } }); return changed ? u.toString() : url; } catch (e) { return url; } } function cleanLinks() { document.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } cleanLinks(); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1) { if (node.tagName === 'A') cleanLinks(); node.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Auto-enable theater mode on YouTube (function() { function tryTheater() { var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]'); if (btn && !btn.classList.contains('activated')) { btn.click(); } } // Try immediately tryTheater(); // Try after navigation (SPA) var lastUrl = location.href; setInterval(function() { if (location.href !== lastUrl) { lastUrl = location.href; setTimeout(tryTheater, 500); } }, 1000); // Also try on player load var observer = new MutationObserver(tryTheater); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Remove or un-stick sticky/fixed headers that block content (function() { function unstick() { document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) { if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') { el.style.position = 'static'; el.style.top = 'auto'; el.style.zIndex = 'auto'; } }); } unstick(); var observer = new MutationObserver(unstick); observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] }); })(); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); })(); chore(deps): bump the workspace group across 1 directory with 3 updates by dependabot[bot] · Pull Request #49 · oxgraph/oxcode · GitHub
Skip to content

chore(deps): bump the workspace group across 1 directory with 3 updates - #49

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/workspace-2bdaf9e94a
Closed

chore(deps): bump the workspace group across 1 directory with 3 updates#49
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/workspace-2bdaf9e94a

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 10, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the workspace group with 3 updates in the / directory: clap, ignore and rmcp.

Updates clap from 4.6.4 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

  • Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Commits
  • 348cff3 chore: Release
  • d478377 docs: Update changelog
  • 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
  • 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
  • f90a966 fix(complete): Use spaces for indentation in fish
  • dd4997b fix(complete): Don't glob-expand bash positionals
  • 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
  • 8141e11 chore(deps): Update compatible (dev) (#6398)
  • 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
  • 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
  • Additional commits viewable in compare view

Updates ignore from 0.4.31 to 0.4.33

Commits

Updates rmcp from 3.0.1 to 3.1.2

Release notes

Sourced from rmcp's releases.

rmcp-macros-v3.1.2

Fixed

  • emit cache hints from handler macros (#1120)

Other

  • upgrade darling and syn (#1138)

rmcp-v3.1.2

Fixed

  • (auth) map 401/403 challenges on the SSE GET stream (#1152)
  • (sse) loop instead of recursing when skipping SSE events (#1146)
  • (auth) preserve issuer trailing slash during discovery (#1145)

rmcp-macros-v3.1.1

Fixed

  • emit cache hints from handler macros (#1120)

Other

  • upgrade darling and syn (#1138)

rmcp-v3.1.1

Fixed

  • emit cache hints from handler macros (#1120)
  • expose MRTR state to tool handlers (#1104)
  • disambiguate input-required results (#1103)

Other

  • make async-trait optional (#1119)

rmcp-macros-v3.1.0

Added

  • add strict stateless protocol metadata validation (#1091)

Other

  • document the ping utility with examples (#1106)
  • complete Tier 1 feature docs and finalize roadmap (#1101)
  • (conformance) meeting requirements for tier 1 (#1087)

rmcp-v3.1.0

Added

... (truncated)

Commits
  • 02c62ae chore: release v3.1.2 (#1148)
  • c345078 fix(auth): map 401/403 challenges on the SSE GET stream (#1152)
  • f8e6382 chore(deps): bump taiki-e/install-action from 2.85.7 to 2.85.8 (#1153)
  • 8fb3e04 chore(deps): bump github/codeql-action from 4.37.4 to 4.37.6 (#1154)
  • 3c8fb2a fix(sse): loop instead of recursing when skipping SSE events (#1146)
  • e150d4f fix(auth): preserve issuer trailing slash during discovery (#1145)
  • 9a3168a chore(deps): bump taiki-e/install-action from 2.85.6 to 2.85.7 (#1139)
  • baac607 chore: release v3.1.1 (#1115)
  • f57d585 chore: upgrade darling and syn (#1138)
  • 07bcda2 fix: emit cache hints from handler macros (#1120)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the workspace group across 1 directory with 3 updates
ec48066
Bumps the workspace group with 3 updates in the / directory: [clap](https://github.com/clap-rs/clap), [ignore](https://github.com/BurntSushi/ripgrep) and [rmcp](https://github.com/modelcontextprotocol/rust-sdk).
Updates `clap` from 4.6.4 to 4.6.6
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.4...clap_complete-v4.6.6)
Updates `ignore` from 0.4.31 to 0.4.33
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@ignore-0.4.31...ignore-0.4.33)
Updates `rmcp` from 3.0.1 to 3.1.2
- [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml)
- [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.0.1...rmcp-v3.1.2)
---
updated-dependencies:
- dependency-name: clap
dependency-version: 4.6.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: workspace
- dependency-name: ignore
dependency-version: 0.4.33
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: workspace
- dependency-name: rmcp
dependency-version: 3.1.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: workspace
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 10, 2026
@dependabot
dependabotBot requested a review from snowmead as a code ownerAugust 10, 2026 23:17
@dependabotdependabotBot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 10, 2026
cursor[bot]
cursorBot reviewed Aug 10, 2026
View reviewed changes

@cursorcursorBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thermos review

No medium+ findings (security/correctness + code quality).

Dependabot workspace-group Cargo.lock-only bump (+24/−36) on merge-base 68b7b2c → ec48066.

Verified

  • Scope: only Cargo.lock; crates.io checksums match for clap/clap_builder 4.6.6, ignore 0.4.32, rmcp/rmcp-macros 3.1.2, darling 0.24.0; none yanked
  • cargo check --locked --workspace clean; CI ci + Release plan green; CodeQL skipping
  • cargo audit: no advisories on bumped crates (pre-existing memmap2 RUSTSEC-2026-0186 warning only)
  • Production MCP path remains stdio (OxcodeServer::new().serve(stdio()) with server/transport-io/macros); rmcp 3.1.x HTTP/SSE/auth fixes do not apply
  • ignore0.4.32 only skips loading ignore files in unvisited/max_depth dirs; oxcode uses reachable WalkBuilder::standard_filters(true).hidden(false) without max_depth
  • clap changes are help/get_overridden_usage only; derive CLI unaffected

Below medium (not blocking)

  • Dependabot body claims ignore 0.4.33; lock resolves 0.4.32 (0.4.33 is pool-capacity/perf only)
  • Workspace Cargo.toml floors still clap 4.5.53 / ignore 0.4.25 / rmcp 3.0.1 while lock is newer via caret — normal lockfile-only Dependabot style
Open in WebView Automation

Sent by Cursor Automation: Find vulnerabilities

@dependabot@github

dependabotBot commented on behalf of githubAug 17, 2026

Copy link
Copy Markdown
ContributorAuthor

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabotdependabotBot closed this Aug 17, 2026
@dependabot
dependabotBot deleted the dependabot/cargo/workspace-2bdaf9e94a branch August 17, 2026 23:15
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cursorcursor[bot]cursor[bot] left review comments
@snowmeadsnowmeadAwaiting requested review from snowmeadsnowmead is a code owner

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filerustPull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants