build(deps): bump the cargo group with 5 updates

[dependabot]

Bumps the cargo group with 5 updates:

Package	From	To
clap	4.6.4	4.6.5
pyo3	0.29.0	0.29.1
napi	3.11.0	3.12.0
napi-derive	3.6.0	3.6.2
napi-build	2.3.2	2.4.0

Updates clap from 4.6.4 to 4.6.5

Release notes

Sourced from clap's releases.

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

Changelog

Sourced from clap's changelog.

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

Commits

• c8c9355 chore: Release
• af74def docs: Update changelog
• c96f222 Merge pull request #6368 from truffle-dev/fix/fish-env-escaping
• 49a05cd fix(complete): Two-pass quote fish env-completer
• e791004 test(complete): Snapshot fish env quoting cases
• See full diff in compare view

Updates pyo3 from 0.29.0 to 0.29.1

Release notes

Sourced from pyo3's releases.

PyO3 0.29.1

This patch is a stack of fixes for PyO3 0.29. Particular themes include:

• Fixes addressing build failures with newer interpreters such as GraalPy 3.13 and CPython 3.15
• Fixes resolving potential memory leaks inside #[pyclass] implementation internals
• Fixes to the new experimental-inspect type stub machinery

For a full list of the fixes in these above themes and more, please consult the CHANGELOG.

Thank you to the following contributors for the improvements:

@​alex @​bschoenmaeckers @​chirizxc @​davidhewitt @​dependabot[bot] @​exg @​ImFeH2 @​IvanIsCoding @​jonasdedden @​MatthieuDartiailh @​msimacek @​ngoldbaum @​Person-93 @​ratazzi @​rewitt94 @​scott-griffiths @​ShiroKSH @​tobni @​Tpt @​WaterWhisperer

Changelog

Sourced from pyo3's changelog.

[0.29.1] - 2026-08-02

Changed

• Use the inline definition of Py_TYPE in the unlimited API on 3.14+ #6179

Fixed

• Fix incorrect pointer arithmetic in FFI definitions PyObject_GET_WEAKREFS_LISTPTR and PyHeapType_GET_MEMBERS. #6145
• Fix compilation error with nightly feature on PyPy and GraalPy due to !Ungil implementations for FFI types not available on those platforms. #6146
• Fix append_to_inittab and PyInit_<module> internal module definition corruption on 32-bit and big-endian platforms on Python 3.15+. #6150
• Fix return value of PyClassGuardMutSuper::as_super being scoped to the full guard lifetime, now the &mut borrow of the as_super() call. #6181
• Fix builds for free-threaded interpreters older than 3.15 erroring with "cannot set a minimum Python version" when an abi3t-py3* feature is enabled and the configuration comes from PYO3_CONFIG_FILE, sysconfigdata or cross-compilation defaults. #6192
• Fix a memory leak when deallocating #[pyclass(dict)] instances with a populated __dict__. #6198
• Fix an abort inside a #[pyclass]'s GC traversal when the traversal is stopped early. #6206
• Fix reference cycles through the __dict__ of a #[pyclass(dict)] never being collected. #6206
• Fix building on GraalPy 3.13. #6208
• Fix reference count leak of references to #[pyclass] type objects held by their instances on instance deallocation. #6224
• Fix FFI definitions PyByteArray_GET_SIZE, PyList_GET_SIZE, and PySet_GET_SIZE to use an atomic load for free-threaded Python. #6230
• Fix a memory leak on Python 3.11 and 3.12 where creating an instance of a #[pyclass(dict)] class leaked one empty dict per instance. #6234
• Fix experimental-inspect type stubs to emit the arguments of many magic methods as positional-only to match runtime behavior, rather than positional-or-keyword. #6239
• Fix experimental-inspect type stubs to emit the Python name rather than the Rust name for #[pyfunction(name = "...")]. #6254
• Fix experimental-inspect generating invalid internal JSON when #[pymodule] members are gated by #[cfg]. #6255
• Fix __inplace_concat__ and __inplace_repeat__ overriding __concat__ and __repeat__ when both were defined. #6260
• Fix conversion of out-of-range time::Duration values to return OverflowError instead of panicking. #6266
• Fix experimental-inspect type stubs padding blank lines inside indented docstrings. #6270

Commits

• d7ad41f release: 0.29.1
• b55cb76 internal: Avoid parallel test triggered GC to interfere with test_gc.rs (#6238)
• ab81fe7 add an AI contributions policy (#6141)
• a1640ca pyo3-introspection Fixes wheel publishing (#6130)
• e7516f1 docs: mention maturin develop --release in quickstart (#6131)
• d185ecb experimental-inspect: don't pad blank docstring lines with the body indenta...
• e268e6d experimental-inspect: introspect #[pyfunction] under its Python name (#6254)
• 2505e48 experimental-inspect: emit positional-only arguments for slot-backed magic ...
• 2b66c50 internal: Remove IMPLEMENTS_INTOPYOBJECT parameter from PyClassGetterGenerato...
• 0dbb34d sync Requires Rust in pyo3-ffi\README.md, src\lib.rs with README.md (...
• Additional commits viewable in compare view

Updates napi from 3.11.0 to 3.12.0

Release notes

Sourced from napi's releases.

napi-v3.12.0

Added

• (cli) support non-threaded WASI targets (#3353)

Commits

• 58bd87f chore: release (#3414)
• 9da8723 chore(release): publish
• 8d22196 chore(deps): update dependency oxc-parser to ^0.142.0 (#3422)
• abc30fb build(deps): bump postcss from 8.5.17 to 8.5.23 (#3421)
• 5542139 build(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 (#3418)
• dc4ee8c build(deps): bump fast-uri from 3.1.3 to 3.1.4 (#3419)
• 050d985 feat(async-runtime): drain-linger surface + lock-free scheduler internals (#3...
• e0b8708 chore(deps): update dependency oxc-parser to ^0.141.0 (#3417)
• fc84940 chore(deps): update actions/setup-node action to v7 (#3413)
• ee598db build(deps): bump protobufjs from 7.6.4 to 7.6.5 (#3410)
• Additional commits viewable in compare view

Updates napi-derive from 3.6.0 to 3.6.2

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.6.2

Other

• updated the following local packages: napi-derive-backend

napi-derive-v3.6.1

Other

• updated the following local packages: napi-derive-backend

Commits

• e8e3bff chore: release (#3433)
• 9b5cda9 fix(napi-derive): keep the namespace when resolving cross-namespace type refe...
• cc8a85d chore(deps): update dependency lerna to v10 (#3431)
• f01d227 fix(napi-derive): look up constructor by js_name in validate() (#3432)
• 9c10fc5 build(wasm-runtime): use Rolldown (#3429)
• 5b344c3 chore(release): publish
• 0fd17fa perf(wasm-runtime): remove sourcemap (#3428)
• 3098f0c fix(cli): omit the WASI package from optionalDependencies when native targe...
• 164a1ca chore(release): publish
• 856326b fix(wasm-runtime): preserve emnapi v1 compatibility (#3426)
• Additional commits viewable in compare view

Updates napi-build from 2.3.2 to 2.4.0

Release notes

Sourced from napi-build's releases.

napi-build-v2.4.0

Added

• (cli) support non-threaded WASI targets (#3353)

Commits

• 58bd87f chore: release (#3414)
• 9da8723 chore(release): publish
• 8d22196 chore(deps): update dependency oxc-parser to ^0.142.0 (#3422)
• abc30fb build(deps): bump postcss from 8.5.17 to 8.5.23 (#3421)
• 5542139 build(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 (#3418)
• dc4ee8c build(deps): bump fast-uri from 3.1.3 to 3.1.4 (#3419)
• 050d985 feat(async-runtime): drain-linger surface + lock-free scheduler internals (#3...
• e0b8708 chore(deps): update dependency oxc-parser to ^0.141.0 (#3417)
• fc84940 chore(deps): update actions/setup-node action to v7 (#3413)
• ee598db build(deps): bump protobufjs from 7.6.4 to 7.6.5 (#3410)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.39%. Comparing base (a82364e) to head (166f252).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #425   +/-   ##
=======================================
  Coverage   92.39%   92.39%           
=======================================
  Files          23       23           
  Lines        3802     3802           
=======================================
  Hits         3513     3513           
  Misses        289      289           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.