chore(deps): bump the minor-and-patch group with 4 updates

[dependabot]

Bumps the minor-and-patch group with 4 updates: anyhow, uuid, html-to-markdown-rs and sysinfo.

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates uuid from 1.23.3 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

• Fix up name of fuzz script in readme by @​KodrAus in uuid-rs/uuid#888
• document fixes by @​frostyplanet in uuid-rs/uuid#889
• Prepare for 1.23.4 release by @​KodrAus in uuid-rs/uuid#890

New Contributors

• @​frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits

• 3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
• cba53d0 prepare for 1.23.4 release
• e347af4 Merge pull request #889 from frostyplanet/main
• e9bf55c doc: Fix broken link warnings
• 5351af4 doc: Enable feature flag label for docs.rs
• 1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
• c9619f6 fix up name of fuzz script in readme
• See full diff in compare view

Updates html-to-markdown-rs from 3.6.15 to 3.7.2

Release notes

Sourced from html-to-markdown-rs's releases.

v3.7.2

Swift Package Manager

Add to your Package.swift:

.package(url: "https://github.com/kreuzberg-dev/html-to-markdown", from: "3.7.2")

The Swift binding is distributed as a pre-built artifact bundle. No Rust toolchain required.

Artifact: HtmlToMarkdown-rs.artifactbundle.zip Checksum: f02a6cb0fb98942cca063d2357d97b182f4812efb851793cc944e1a327a7cfba

Zig

Add to your build.zig.zon:

.dependencies = .{
    .html-to-markdown-rs-zig = .{\n        .url = \"https://github.com/kreuzberg-dev/html-to-markdown/releases/download/v3.7.2/html-to-markdown-rs-zig-v3.7.2.tar.gz\",\n        .hash = \"html_to_markdown_rs-3.7.2-QtXyWxU3AQDv862xcu9C78TqO91fqpIAMEc8XI2kBqyo\",\n    },\n},\n```\n
v3.7.1
Fixed

ci(homebrew): drop the Intel-macOS sonoma bottle from the publish matrix. The formula intentionally has no x86_64-apple-darwin url (Apple-Silicon only), but the bottle matrix still built a sonoma (Intel) bottle, which failed with formula requires at least a URL. Because release-finalize gates on publish-homebrew-bottles with if: !contains(needs.*.result, 'failure'), that one chronic failure silently skipped release-finalize for three releases (v3.6.20, v3.6.21, v3.7.0) — and with it the packages/go/vX.Y.Z Go module tag, leaving go get …/packages/go/v3@vX.Y.Z unresolvable. Removing the Intel bottle restores release-finalize (and the Go tag) for every future release. (.github/workflows/publish.yaml)
ci(e2e, C# on Windows): keep cargo on PATH in the test before-hook. The "Run E2E tests (Windows)" step overrode PATH via env: with ${{ env.PATH }}, which omits cargo's $GITHUB_PATH additions under Git Bash, so the cargo build … html-to-markdown-ffi before-hook failed with cargo: command not found. Prepend the target dirs to the live $PATH at runtime instead. (.github/workflows/ci-e2e.yaml)
ci(e2e/docs, Elixir): force the NIF to build from source. Under MIX_ENV=test the force_build: … or Mix.env() in [:dev] clause does not apply, so mix test tried to download a precompiled NIF for the current (unreleased) version and failed with the precompiled NIF file does not exist in the checksum file. Set RUSTLER_PRECOMPILED_FORCE_BUILD_ALL=1 so the test/doc compile builds the NIF locally. (scripts/ci/elixir/run-tests.sh)
ci(e2e, Swift): build the FFI crate the generated Package.swift links. The swift e2e before-hook built only html-to-markdown-rs-swift, but the generated manifest links html_to_markdown_ffi, so swift test failed with library 'html_to_markdown_ffi' not found. Build html-to-markdown-ffi in the before-hook too (matching Go/C#/C). (alef.toml)
ci(e2e, PHP): drop --locked from the PHP test before-hook. The PHP e2e job's extension build rewrites the native package deps to the published registry version and runs cargo update, mutating the workspace Cargo.lock; the subsequent cargo build --locked -p html-to-markdown-php then failed with cannot update the lock file … --locked. (alef.toml)
ci(node/wasm): use --no-frozen-lockfile for the NAPI binding install. build-node-napi ran a frozen pnpm install, but the napi platform packages in optionalDependencies are pinned to the unpublished release version and can never be in pnpm-lock.yaml, so the install failed with ERR_PNPM_OUTDATED_LOCKFILE across every Node build/e2e. (shared kreuzberg-dev/actions/build-node-napi, alef.toml)
docs(php): recommend pie install over composer require. The PHP package is a native ext-php-rs extension that composer require cannot load (the cause of #420); every PHP install snippet now leads with pie install kreuzberg-dev/html-to-markdown. (docs/, readme_templates/)

Changed

ci(publish): require all 16 PHP PIE cells by explicit per-cell pattern in verify-release-assets. A dropped cell now fails the release instead of silently shipping a partial PIE matrix (#333). (.github/workflows/publish.yaml)
chore(deps): re-pin alef.toml.alef_version to 0.26.5 and regenerate every binding, e2e suite, README, and API doc. (alef 0.26.5)

<!-- zig-fetch -->
Zig
Add to your build.zig.zon:

.dependencies = .{ .html-to-markdown-rs-zig = .{\n .url = "https://github.com/kreuzberg-dev/html-to-markdown/releases/download/v3.7.1/html-to-markdown-rs-zig-v3.7.1.tar.gz\",\n .hash = "html_to_markdown_rs-3.7.1-QtXyWxU3AQC5VboClItxYGlHr9zwZbNiB_JuxgFAXM5z",\n },\n},\n```\n

v3.7.0

... (truncated)

Changelog

Sourced from html-to-markdown-rs's changelog.

[3.7.2] - 2026-06-23

Fixed

• chore(deps): bump alef.toml.alef_version to 0.26.6 and regenerate every binding. Fixes the dart wrapper crate failing to build under cargo build --no-default-features: alef 0.26.x had regressed the 0.25.33 fix and re-emitted #[cfg(feature = ...)] on the generated lib.rs mirror struct / opaque-wrapper declarations, their From conversions, and from_json bridge fns, while frb_generated.rs references those types/functions unconditionally (E0425: cannot find type VisitorHandle / create_html_metadata_from_json). alef 0.26.6 keeps those declarations unconditional again. Verified: the regenerated dart crate compiles under --no-default-features, default, and --all-features. (alef 0.26.6)
• ci(publish): the Homebrew Swift artifactbundle no longer forces kreuzberg/openssl-vendored. The shared build-swift-artifactbundle action hardcoded that feature for its Linux (cargo-zigbuild) targets, but it only exists in the kreuzberg core swift crate — so html-to-markdown's swift bundle build failed (the package '…' does not contain this feature), which cascaded to skip release-finalize (and with it the packages/go/vX.Y.Z Go module tag). The action now takes a linux-features input (left empty here). (shared xberg-io/actions/build-swift-artifactbundle)

[3.7.1] - 2026-06-23

Fixed

• ci(homebrew): drop the Intel-macOS sonoma bottle from the publish matrix. The formula intentionally has no x86_64-apple-darwin url (Apple-Silicon only), but the bottle matrix still built a sonoma (Intel) bottle, which failed with formula requires at least a URL. Because release-finalize gates on publish-homebrew-bottles with if: !contains(needs.*.result, 'failure'), that one chronic failure silently skipped release-finalize for three releases (v3.6.20, v3.6.21, v3.7.0) — and with it the packages/go/vX.Y.Z Go module tag, leaving go get …/packages/go/v3@vX.Y.Z unresolvable. Removing the Intel bottle restores release-finalize (and the Go tag) for every future release. (.github/workflows/publish.yaml)
• ci(e2e, C# on Windows): keep cargo on PATH in the test before-hook. The "Run E2E tests (Windows)" step overrode PATH via env: with ${{ env.PATH }}, which omits cargo's $GITHUB_PATH additions under Git Bash, so the cargo build … html-to-markdown-ffi before-hook failed with cargo: command not found. Prepend the target dirs to the live $PATH at runtime instead. (.github/workflows/ci-e2e.yaml)
• ci(e2e/docs, Elixir): force the NIF to build from source. Under MIX_ENV=test the force_build: … or Mix.env() in [:dev] clause does not apply, so mix test tried to download a precompiled NIF for the current (unreleased) version and failed with the precompiled NIF file does not exist in the checksum file. Set RUSTLER_PRECOMPILED_FORCE_BUILD_ALL=1 so the test/doc compile builds the NIF locally. (scripts/ci/elixir/run-tests.sh)
• ci(e2e, Swift): build the FFI crate the generated Package.swift links. The swift e2e before-hook built only html-to-markdown-rs-swift, but the generated manifest links html_to_markdown_ffi, so swift test failed with library 'html_to_markdown_ffi' not found. Build html-to-markdown-ffi in the before-hook too (matching Go/C#/C). (alef.toml)
• ci(e2e, PHP): drop --locked from the PHP test before-hook. The PHP e2e job's extension build rewrites the native package deps to the published registry version and runs cargo update, mutating the workspace Cargo.lock; the subsequent cargo build --locked -p html-to-markdown-php then failed with cannot update the lock file … --locked. (alef.toml)
• ci(node/wasm): use --no-frozen-lockfile for the NAPI binding install. build-node-napi ran a frozen pnpm install, but the napi platform packages in optionalDependencies are pinned to the unpublished release version and can never be in pnpm-lock.yaml, so the install failed with ERR_PNPM_OUTDATED_LOCKFILE across every Node build/e2e. (shared xberg-io/actions/build-node-napi, alef.toml)
• docs(php): recommend pie install over composer require. The PHP package is a native ext-php-rs extension that composer require cannot load (the cause of #420); every PHP install snippet now leads with pie install xberg-io/html-to-markdown. (docs/, readme_templates/)

Changed

• ci(publish): require all 16 PHP PIE cells by explicit per-cell pattern in verify-release-assets. A dropped cell now fails the release instead of silently shipping a partial PIE matrix (#333). (.github/workflows/publish.yaml)
• chore(deps): re-pin alef.toml.alef_version to 0.26.5 and regenerate every binding, e2e suite, README, and API doc. (alef 0.26.5)

[3.7.0] - 2026-06-22

Added

• feat(mcp): expand the MCP server to full API parity with typed, discoverable options and complete tool annotations. The convert_html tool now accepts a typed config object covering every settable ConversionOptions field (heading/list/escaping/whitespace/wrapping, preprocessing, image extraction, output format, tier strategy, …) instead of an opaque untyped JSON blob, so MCP clients discover all options through the tool's generated inputSchema; enum options are accepted as case-insensitive strings parsed by the core parsers. A new extract_metadata tool returns structured <head>/<meta> metadata (title, Open Graph, Twitter Card, JSON-LD/microdata, headers, links, images) as JSON. Both tools carry the full MCP annotation set (title, read_only_hint=true, idempotent_hint=true, destructive_hint=false, open_world_hint=false). The typed ConvertConfig mirror is implemented MCP-side (no changes to the alef-tracked core option types) and guarded by a drift test that fails if a core option is added without being mirrored. The mcp feature now implies metadata. (crates/html-to-markdown/src/mcp/)
• feat(mcp): add prompts, resources, and completions capabilities. Beyond tools, the server now advertises three more MCP capabilities: prompts — ready-made workflow templates (convert_to_markdown, extract_main_content, inspect_metadata) that drive the tools, with arguments; resources — htmltomarkdown://options-schema (the JSON Schema of every conversion option) and htmltomarkdown://output-formats (the markdown/djot/plain guide); and completions — argument autocompletion for prompt arguments (e.g. output_format → markdown/djot/plain). (crates/html-to-markdown/src/mcp/catalog.rs)

[3.6.21] - 2026-06-22

Changed

• chore(deps): re-pin alef.toml.alef_version to 0.25.60 and regenerate every binding, e2e suite, README, and API doc. Folds in the 0.25.59–0.25.60 generator fixes: the R/extendr by-reference DTO rework now emits a non-optional Named param following an optional param as &T (passed by reference via an owned name_core binding) instead of the non-compiling Nullable<&T>::into_option() path; Kotlin/Kotlin-Android content-union text() accessors reference the actual data-class payload property (value) instead of the non-existent field0; generated binding rustdoc de-links core intra-doc references (e.g. [`Error::LanguageNotFound`]) to plain code spans so rustdoc -D rustdoc::broken-intra-doc-links passes; and sync-versions now runs the same format_generated pass as alef all, so version-bumped manifests (package.json, composer.json, Package.swift) are byte-identical to the generate path and no longer trip freshness gates. (alef 0.25.60)

[3.6.20] - 2026-06-21

... (truncated)

Commits

• bd04f50 chore(release): substitute Swift checksum for 3.7.2
• ad79115 chore(release): v3.7.2
• 81efc77 chore(release): v3.7.1
• 0e65de9 docs(php): recommend pie install over composer require
• 7f18c34 fix(ci): stabilize release e2e and publish pipeline
• 2687eb5 chore(release): v3.7.0
• f01a529 feat(mcp): add prompts, resources, and completions capabilities
• c7d4b39 feat(mcp): expand MCP server to full API parity with typed options
• 27f9b5c chore(release): v3.6.21
• 72ee0ad chore(release): regenerate v3.6.20 against released alef 0.25.58
• Additional commits viewable in compare view

Updates sysinfo from 0.39.3 to 0.39.5

Changelog

Sourced from sysinfo's changelog.

0.39.5

• macOS: Fix build for apple app store

0.39.4

• Unix: Fix soundness issue when retrieving user's groups.
• macOS: Add new macOS version name.
• macOS: Fix inaccurate open_files returned value.

Commits

• 029025e Update crate version to 0.39.5
• 78205e7 Update CHANGELOG for 0.39.5
• 2a39746 Fix build for apple app store
• c07bb44 Update CHANGELOG for 0.39.4
• 559b07d Update crate version to 0.39.4
• 07e3177 Linux: Fix soundness issue when retrieving user groups
• 79943ec Add new macOS version name
• 86af156 Added failure handling for open_files()
• 634e1cf fix: inaccurate open_files() implementation (#1681) (#1682)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions