Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025

Bumps bnjbvr/cargo-machete from 04b9adbd8c1c00963289b5628510dd907b27dc60 to 10aef304cba9ef99dacee57a756c14892391cdca.

Changelog

Sourced from bnjbvr/cargo-machete's changelog.

unreleased

  • Improved: add renamed table to track renamed crates (#152 #153).

0.7.0 (released on 2024-09-25)

  • Breaking change: Don't search in ignored files (those specified in .ignore/.gitignore) by default. It's possible to use --no-ignore to search in these directories by default (#137).
  • Improved: fix false positives for multi dependencies single use statements (#120). This improves precision at the cost of a small performance hit.
  • Improved: make usage of --with-metadata more accurate (#122, #132).
  • Improved: instead of displaying . for the current directory, cargo-machete will now display this directory (#109).
  • Added: There's now an automated docker image build that publishes to the github repository (#121).
  • Added: --ignore flag which make cargo-machete respect .ignore and .gitignore files when searching for files (#95).

0.6.2 (released on 2024-03-24)

  • Added: shorter display when scanning the current directory (#109).
  • Fix: adapt to latest pkgid specification, so as not to crash with --with-metadata (#106).

0.6.1 (released on 2024-02-21)

  • Chore: bump major dependencies, to fix parsing issues of Cargo.toml files (#101, #105).

0.6.0 (released on 2023-09-23)

  • Breaking/improved: match against crate name case-insensitive (#69).
  • Added: Github action (#85). See README for documentation.
  • Added: support for ignored workspace dependencies (#57, #86). See README for documentation.
  • Added: --version switch to print the version (#66).
  • Fix: avoid searching for workspace Cargo.toml longer than needed (#84).
  • Chore: better documentation and reporting (#63, #72, #80).

0.5.0 (released on 2022-11-15)

  • Breaking: Use argh for parsing. Now, paths of directories to scan must be passed in the last position, when running from the command line (#51).
  • Fix rare false positive and speed up most common case (#53).
  • Fix loading properties from workspace (#54).

0.4.0 (released on 2022-10-16)

  • Added --skip-target-dir to not analyze target/ directories.
  • Added a message indicating of any unused dependencies were found or not.
  • Support for workspace properties

0.3.1 (released on 2022-06-12)

  • Support empty global prefix, e.g. use ::log;.

0.3.0 (released on 2022-05-09)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 24, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 24, 2025 14:24
@dependabot dependabot bot requested review from poljar and removed request for a team November 24, 2025 14:24
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 24, 2025
@codspeed-hq
Copy link

codspeed-hq bot commented Nov 24, 2025

CodSpeed Performance Report

Merging #5893 will not alter performance

Comparing dependabot/github_actions/bnjbvr/cargo-machete-10aef304cba9ef99dacee57a756c14892391cdca (74e9b90) with main (7475f03)

Summary

✅ 50 untouched

@codecov
Copy link

codecov bot commented Nov 24, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.65%. Comparing base (7475f03) to head (74e9b90).
⚠️ Report is 38 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #5893      +/-   ##
==========================================
+ Coverage   88.64%   88.65%   +0.01%     
==========================================
  Files         362      362              
  Lines      103146   103146              
  Branches   103146   103146              
==========================================
+ Hits        91434    91445      +11     
+ Misses       7464     7453      -11     
  Partials     4248     4248              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Bumps [bnjbvr/cargo-machete](https://github.com/bnjbvr/cargo-machete) from 04b9adbd8c1c00963289b5628510dd907b27dc60 to 10aef304cba9ef99dacee57a756c14892391cdca.
- [Release notes](https://github.com/bnjbvr/cargo-machete/releases)
- [Changelog](https://github.com/bnjbvr/cargo-machete/blob/main/CHANGELOG.md)
- [Commits](bnjbvr/cargo-machete@04b9adb...10aef30)

---
updated-dependencies:
- dependency-name: bnjbvr/cargo-machete
  dependency-version: 10aef304cba9ef99dacee57a756c14892391cdca
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/bnjbvr/cargo-machete-10aef304cba9ef99dacee57a756c14892391cdca branch from f61056f to 74e9b90 Compare November 25, 2025 09:49
@poljar poljar merged commit 3a65508 into main Nov 26, 2025
53 checks passed
@poljar poljar deleted the dependabot/github_actions/bnjbvr/cargo-machete-10aef304cba9ef99dacee57a756c14892391cdca branch November 26, 2025 08:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants