[dependabot]

Bumps cargo-bins/cargo-binstall from 1.24.0 to 1.25.1.

Release notes

Sourced from cargo-bins/cargo-binstall's releases.

v1.25.1

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

• Fix prebuilt not used by cargo binstall cargo-binstall on and Windows ARM @​rscorer (#2692)

v1.25.0

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

• Add --list and --prune to inspect and reconcile manifests @​rscorer (#2675 #2677)
• docs: add crate author guide for supporting binstall @​saylesss88 (#2682)

Fixed

• Fix zip extraction to prevent absolute path (GHSA-8276-gxvh-4xr8 and GHSA-jrxx-5q54-fhjr #2685)
• fix msrv: 📌 vergen dep requires MSRV 1.96.0 @​vepain (#2683)

Other changes:

• upgrade dependencies

Commits

• 7bebc2e release: cargo-binstall v1.25.1 (#2693)
• 307bd5f fix(manifest): add zip pkg-fmt overrides for macOS and Windows ARM targets (#...
• a29e258 release: cargo-binstall v1.25.0 (#2691)
• d17d20f chore: release (#2684)
• 391d1b8 build(deps): bump minisign-verify from 0.2.5 to 0.3.0 in the deps group (#2690)
• 218b600 dep: Upgrade transitive dependencies (#2689)
• d5ebb4e Fix zip extraction to prevent absolute path (#2685)
• f8162f4 feat(cli): add --list and --prune to inspect and reconcile manifests (#2677)
• 2e63c34 fix: 📌 vergen dep requires MSRV 1.96.0 (#2683)
• ad9eafc docs: add crate author guide for supporting binstall (#2682)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: eb37fa7c-f952-4546-8635-7a811146c142

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}