build(deps): bump the major group across 1 directory with 4 updates

[dependabot]

Bumps the major group with 4 updates in the / directory: posthog-rs, sysinfo, termimad and rmcp.

Updates posthog-rs from 0.20.0 to 0.21.0

Release notes

Sourced from posthog-rs's releases.

0.21.0

Minor changes

• 7dab8cd $feature_flag_called events now carry a tri-state $feature_flag_has_experiment property and are minimized for non-experiment flags when the server enables it. The experiment signal is read from has_experiment on each flag — from the /flags?v=2 metadata object (remote evaluation) or the /flags/definitions flag definitions (local evaluation) — and is sent as true/false when reported, omitted entirely when the server does not report it (never fabricated as false).

  When the server-controlled gate is on — minimalFlagCalledEvents: true on the /flags?v=2 response (remote) or minimal_flag_called_events: true on the local-evaluation definitions payload (local) — and the evaluated flag has has_experiment: false, the event is rebuilt from a strict allowlist ($feature_flag, $feature_flag_response, $feature_flag_has_experiment, $feature_flag_id, $feature_flag_version, $feature_flag_reason, $feature_flag_request_id, $feature_flag_evaluated_at, $feature_flag_error, locally_evaluated, $groups, $process_person_profile, $geoip_disable, $session_id, $window_id, $device_id, $lib, $lib_version, $is_server, $os, $os_version); everything else — $feature/<key>, $feature_flag_payload, and any user-supplied properties — is stripped. Any missing signal (gate absent, has_experiment unknown, experiment-linked flag, legacy response shapes) keeps today's full event shape. The gate is captured per evaluation source and pinned onto each flag's snapshot record, so a concurrent poller refresh cannot reshape an event after its value was determined. The gate is server-controlled per project; no SDK configuration is added.

  Local-evaluation support for the minimal_flag_called_events field depends on a PostHog server release that emits it; until then the client defaults to the full event shape. — Thanks @​haacked!

Changelog

Sourced from posthog-rs's changelog.

0.21.0 — 2026-07-20

Minor changes

• 7dab8cd $feature_flag_called events now carry a tri-state $feature_flag_has_experiment property and are minimized for non-experiment flags when the server enables it. The experiment signal is read from has_experiment on each flag — from the /flags?v=2 metadata object (remote evaluation) or the /flags/definitions flag definitions (local evaluation) — and is sent as true/false when reported, omitted entirely when the server does not report it (never fabricated as false).

  When the server-controlled gate is on — minimalFlagCalledEvents: true on the /flags?v=2 response (remote) or minimal_flag_called_events: true on the local-evaluation definitions payload (local) — and the evaluated flag has has_experiment: false, the event is rebuilt from a strict allowlist ($feature_flag, $feature_flag_response, $feature_flag_has_experiment, $feature_flag_id, $feature_flag_version, $feature_flag_reason, $feature_flag_request_id, $feature_flag_evaluated_at, $feature_flag_error, locally_evaluated, $groups, $process_person_profile, $geoip_disable, $session_id, $window_id, $device_id, $lib, $lib_version, $is_server, $os, $os_version); everything else — $feature/<key>, $feature_flag_payload, and any user-supplied properties — is stripped. Any missing signal (gate absent, has_experiment unknown, experiment-linked flag, legacy response shapes) keeps today's full event shape. The gate is captured per evaluation source and pinned onto each flag's snapshot record, so a concurrent poller refresh cannot reshape an event after its value was determined. The gate is server-controlled per project; no SDK configuration is added.

  Local-evaluation support for the minimal_flag_called_events field depends on a PostHog server release that emits it; until then the client defaults to the full event shape. — Thanks @​haacked!

Commits

• bbd158a chore: Release v0.21.0 [skip ci]
• 7dab8cd feat(flags): minimize $feature_flag_called events for non-experiment flags (#...
• See full diff in compare view

Updates sysinfo from 0.38.4 to 0.39.6

Changelog

Sourced from sysinfo's changelog.

0.39.6

• NetBSD: Add support for disk I/O usage.
• NetBSD: Improve retrieval of disk information.

0.39.5

• macOS: Fix build for apple app store

0.39.4

• Unix: Fix soundness issue when retrieving user's groups.
• macOS: Add new macOS version name.
• macOS: Fix inaccurate open_files returned value.

0.39.3

• Unix: Fix retrieval of Network::mac_addr.
• Linux: Improve retrieval of process information if process terminates while doing so.

0.39.2

• Windows: Greatly improve performance of System::refresh_cpu_specifics when CPU usage is not requested.
• iOS: Fix compilation error when user feature is enabled.
• Linux: Correctly set thread information for processes.

0.39.1

• Linux: Fix wrong network numbers computation.

0.39.0

• Update minimum supported rust version to 1.95.
• Add new NetworkData::operational_state API.
• Add new Process::cgroup_limits API (only returning data on Linux).
• All supported systems other than Windows: Improve performance of Networks::refresh*.
• All supported systems other than Windows: Fix soundness issue when retrieving users.
• Linux: Take into account parent cgroup memory limits.
• Linux: Fix panic when retrieving process information on ESXi.
• FreeBSD: Use the name of dataset as name for zfs disks.

Commits

• 1bc6ed4 Update crate version to 0.39.6
• da9bea0 Update CHANGELOG for 0.39.6
• cefd877 Update src/unix/bsd/netbsd/system.rs
• 9d79f93 Fix NetBSD disk I/O and process I/O statistics
• 029025e Update crate version to 0.39.5
• 78205e7 Update CHANGELOG for 0.39.5
• 2a39746 Fix build for apple app store
• c07bb44 Update CHANGELOG for 0.39.4
• 559b07d Update crate version to 0.39.4
• 07e3177 Linux: Fix soundness issue when retrieving user groups
• Additional commits viewable in compare view

Updates termimad from 0.34.1 to 0.35.1

Changelog

Sourced from termimad's changelog.

v0.35.1 - 2026-07-11

• Fix a panic in some cases of tables with rows having more columns than the header row - Fix #77

v0.35.0 - 2026-07-10

• Support for ordered lists, and their depth dependent styling - Fix #75
• Unordered list items can also be created with - and + and not just *
• CompoundStyle, LineStyle, and StyledChar are now Copy

Commits

• See full diff in compare view

Updates rmcp from 1.8.0 to 2.2.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v2.2.0

Added

• [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

• fill missing fully qualified syntax in prompt_handler macros (#866)

Other

• align README examples with v2 model API (#928)

rmcp-v2.2.0

Added

• reject auth servers lacking S256 PKCE support (#955)

Fixed

• pass client conformance suite (#960)
• don't respond to cancelled requests (#957)
• fail orphaned streamable HTTP responses on reinit (#914)
• address 2025-11-25 conformance audit findings (#951)

rmcp-macros-v2.1.0

Added

• [breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

• fill missing fully qualified syntax in prompt_handler macros (#866)

Other

• align README examples with v2 model API (#928)

rmcp-v2.1.0

Added

• add SEP-414 trace context meta accessors (#910)
• add SEP-2575 meta helpers (#942)

Fixed

• (transport) make AsyncRwTransport::receive cancel-safe (#941) (#947)
• (auth) preserve refresh_token when refresh response omits it (#949)
• block redirect header leaks (#936)
• don't respond to unparsable messages (#940)

... (truncated)

Commits

• 5195776 chore: release v2.2.0 (#953)
• 6dd7b85 chore(deps): update p256 requirement from 0.13 to 0.14 (#959)
• a037935 fix: pass client conformance suite (#960)
• dbda50c fix: don't respond to cancelled requests (#957)
• 45f2f72 fix: fail orphaned streamable HTTP responses on reinit (#914)
• 95490fa feat: reject auth servers lacking S256 PKCE support (#955)
• bdf0c32 fix: address 2025-11-25 conformance audit findings (#951)
• 8e44af4 chore: release v2.1.0 (#950)
• 4833ec7 fix(transport): make AsyncRwTransport::receive cancel-safe (#941) (#947)
• 5837e22 fix(auth): preserve refresh_token when refresh response omits it (#949)
• Additional commits viewable in compare view

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.