Bump the cargo group across 1 directory with 2 updates

[dependabot]

Bumps the cargo group with 2 updates in the / directory: minijinja and css-inline.

Updates minijinja from 2.15.1 to 2.18.0

Release notes

Sourced from minijinja's releases.

2.17.0

Release Notes

• Added 'c' (character) format type support for format filters and str.format-style formatting. #868
• Added prebuilt minijinja-cli release targets for aarch64-pc-windows-msvc (Windows ARM64) and armv7-unknown-linux-gnueabihf.
• Fixed strict and semi-strict undefined handling so string-coercing filter/function arguments also fail for nested Rest<String> and Vec<String> conversions. #877
• Fixed Python CI/build compatibility with newer maturin by moving stripping from global config to release wheel build arguments.

Install minijinja-cli 2.17.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/minijinja/releases/download/minijinja-go/v2.17.0/minijinja-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/minijinja/releases/download/minijinja-go/v2.17.0/minijinja-cli-installer.ps1 | iex"

Download minijinja-cli 2.17.0

File	Platform	Checksum
minijinja-cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
minijinja-cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
minijinja-cli-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
minijinja-cli-i686-pc-windows-msvc.zip	x86 Windows	checksum
minijinja-cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
minijinja-cli-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
minijinja-cli-i686-unknown-linux-gnu.tar.xz	x86 Linux	checksum
minijinja-cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
minijinja-cli-armv7-unknown-linux-gnueabihf.tar.xz	ARMv7 Linux	checksum
minijinja-cli-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
minijinja-cli-i686-unknown-linux-musl.tar.xz	x86 MUSL Linux	checksum
minijinja-cli-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

2.16.0

Release Notes

• Added musllinux wheel builds for Python release artifacts.
• Fixed |escape to honor custom formatters. #861
• Aligned undefined behavior handling in the Go port with Rust.
• Removed non-Rust keys and values filters from the Go port for parity. #863

Install minijinja-cli 2.16.0

Install prebuilt binaries via shell script

... (truncated)

Changelog

Sourced from minijinja's changelog.

2.18.0

• Added keyword argument support (width, first, blank) to the indent filter for Jinja2 compatibility in Rust and Go. #864
• Added support for dotted integer lookup (for example foo.0) in Rust and Go for Jinja compatibility. #881
• Added support for dotted filter and test names (including foo . bar . baz) for Jinja compatibility. #879
• Fixed string escape handling to preserve unknown escapes (such as \s) for Jinja compatibility in Rust and Go. #880
• Improved generic performance across template parsing, compilation, and rendering.
• Fixed minijinja-cabi ownership and pointer-safety issues that could leak mj_value values on error paths.
• Added high-priority minijinja-cabi APIs for callback-based functions/filters/tests, globals, loaders, path joining, auto-escape configuration, and fuel limits.
• Switched minijinja-cabi header maintenance to manual source-based syncing and removed cbindgen-based generation tooling.
• Added lightweight C smoke tests for minijinja-cabi (via make -C minijinja-cabi test) with coverage across all exported C ABI functions, and wired them into top-level testing and CI.
• Added render_captured and render_captured_to methods on Template which return a Captured type holding the rendered output and the template state.
• Added into_output method on Captured to consume and return the output string.
• Deprecated render_and_return_state, eval_to_state, and render_to_write in favor of the new render_captured / render_captured_to / Captured API.

2.17.1

• Re-release of 2.17.0 to fix release automation.
• Switched npm publishing to trusted publishing (OIDC/provenance) and removed token-based auth from CI.
• Prevented duplicate crates.io publish attempts by skipping slash-prefixed tags in crates publishing.

2.17.0

• Added 'c' (character) format type support for format filters and str.format-style formatting. #868
• Added prebuilt minijinja-cli release targets for aarch64-pc-windows-msvc (Windows ARM64) and armv7-unknown-linux-gnueabihf.
• Fixed strict and semi-strict undefined handling so string-coercing filter/function arguments also fail for nested Rest<String> and Vec<String> conversions. #877
• Fixed Python CI/build compatibility with newer maturin by moving stripping from global config to release wheel build arguments.

2.16.0

• Added musllinux wheel builds for Python release artifacts.
• Fixed |escape to honor custom formatters. #861
• Aligned undefined behavior handling in the Go port with Rust.
• Removed non-Rust keys and values filters from the Go port for parity. #863

Commits

• 92f114d release 2.18.0
• 80d30a7 refactor(vendor): prune unused self_cell API surface
• 50ce37a fix: typos
• 24891e1 feat(filters): add kwargs support to indent filter for Jinja2 parity
• 4cca670 refactor: deprecate render_to_write in favor of render_captured_to
• ac88f8e fix: correct typo render_capturedd_to -> render_captured_to
• 710137b chore: remove dead_code allow and unused MutBorrow from vendored self_cell
• 39d00e6 feat: Added new capture methods for state
• 42b0d08 feat: vendor self_cell and make loader default
• cc12ae0 fix: make cabi compatible with older rustc
• Additional commits viewable in compare view

Updates css-inline from 0.20.0 to 0.20.1

Release notes

Sourced from css-inline's releases.

[C] Release 0.20.1

Changed

• Update html5ever to 0.39.
• Update selectors to 0.36.

Fixed

• !important lost when inlining styles onto elements with existing inline style attributes. #682
• !important lost when minify_css is enabled due to separator mismatch during property lookup. #682

[Java] Release 0.20.1

Changed

• Update html5ever to 0.39.
• Update selectors to 0.36.

Fixed

• !important lost when inlining styles onto elements with existing inline style attributes. #682
• !important lost when minify_css is enabled due to separator mismatch during property lookup. #682

[JavaScript] Release 0.20.1

Changed

• Update html5ever to 0.39.
• Update selectors to 0.36.

Fixed

• !important lost when inlining styles onto elements with existing inline style attributes. #682
• !important lost when minify_css is enabled due to separator mismatch during property lookup. #682

[PHP] Release 0.20.1

Changed

• Update html5ever to 0.39.
• Update selectors to 0.36.

Fixed

• !important lost when inlining styles onto elements with existing inline style attributes. #682
• !important lost when minify_css is enabled due to separator mismatch during property lookup. #682

[Python] Release 0.20.1

Changed

• Update html5ever to 0.39.
• Update selectors to 0.36.

... (truncated)

Changelog

Sourced from css-inline's changelog.

[0.20.1] - 2026-03-26

Changed

• Update html5ever to 0.39.
• Update selectors to 0.36.

Fixed

• !important lost when inlining styles onto elements with existing inline style attributes. #682
• !important lost when minify_css is enabled due to separator mismatch during property lookup. #682

Commits

• 7d68478 chore(c): Release 0.20.1
• ae58025 chore(python): Release 0.20.1
• 49e5c36 build: pass proper interpreter version explicitly to maturin
• 309e657 chore(rust): Release 0.20.1
• 587a0ff build(deps): bump docker/setup-qemu-action from 3 to 4
• 63aa891 build(deps): bump picomatch from 2.3.1 to 2.3.2 in /bindings/javascript
• e813347 build(deps-dev): bump nokogiri from 1.18.10 to 1.19.1 in /bindings/ruby
• eff94f4 build(deps): bump actions/download-artifact from 7 to 8
• 6a4e140 build(deps): bump aevea/commitsar from 1.0.2 to 1.0.3
• 89f8814 build(deps): bump flatted from 3.3.3 to 3.4.2 in /bindings/javascript
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions