deps: bump regorus from 0.10.1 to 0.11.0

[dependabot]

Bumps regorus from 0.10.1 to 0.11.0.

Release notes

Sourced from regorus's releases.

regorus-v0.11.0

Added

• (compiler) support registered host-await builtins for natural function call syntax (#667)
• (value) introduce Set storage abstraction (#740)

Fixed

• (rvm) assert every-quantifier results so failing cases don't pass (#765)
• Engine::add_data now deep-merges nested data documents instead of only merging top-level keys. Adding { "a": { "x": 1 } } followed by { "a": { "y": 2 } } now yields { "a": { "x": 1, "y": 2 } } (matching OPA's data-document merge). Nested sets under a shared key are unioned. Only genuine leaf conflicts (the same path holding two different values) are reported as errors. (#760)
• A zero-arg function producing two different complete values (e.g. f() := { "a": 1 } and f() := { "b": 2 }) is now reported as a conflict, matching OPA's complete-rule semantics, instead of silently combining the outputs.

Security

• Engine::add_data now rejects data nested beyond 128 levels instead of risking a stack overflow on adversarially deep input.

Other

• (deps) bump the rust-dependencies group across 5 directories with 11 updates (#764)
• Expand keyword-in-ref coverage for complex parser edge cases (interpreter + RVM) (#744)
• (deps) bump the rust-dependencies group across 5 directories with 4 updates (#754)
• (deps) bump the rust-dependencies group across 5 directories with 6 updates (#750)
• (value) migrate Value::Object to Object storage abstraction (#736)
• normalize path separators in folder filter on Windows (#742)
• Introduce Object storage abstraction (#735)
• (rvm) add debug-mode invariant assertions (#737)
• (deps) bump the rust-dependencies group across 5 directories with 5 updates (#734)

Changelog

Sourced from regorus's changelog.

0.11.0 - 2026-07-21

Added

• (compiler) support registered host-await builtins for natural function call syntax (#667)
• (value) introduce Set storage abstraction (#740)

Fixed

• (rvm) assert every-quantifier results so failing cases don't pass (#765)
• Engine::add_data now deep-merges nested data documents instead of only merging top-level keys. Adding { "a": { "x": 1 } } followed by { "a": { "y": 2 } } now yields { "a": { "x": 1, "y": 2 } } (matching OPA's data-document merge). Nested sets under a shared key are unioned. Only genuine leaf conflicts (the same path holding two different values) are reported as errors. (#760)
• A zero-arg function producing two different complete values (e.g. f() := { "a": 1 } and f() := { "b": 2 }) is now reported as a conflict, matching OPA's complete-rule semantics, instead of silently combining the outputs.

Security

• Engine::add_data now rejects data nested beyond 128 levels instead of risking a stack overflow on adversarially deep input.

Other

• (deps) bump the rust-dependencies group across 5 directories with 11 updates (#764)
• Expand keyword-in-ref coverage for complex parser edge cases (interpreter + RVM) (#744)
• (deps) bump the rust-dependencies group across 5 directories with 4 updates (#754)
• (deps) bump the rust-dependencies group across 5 directories with 6 updates (#750)
• (value) migrate Value::Object to Object storage abstraction (#736)
• normalize path separators in folder filter on Windows (#742)
• Introduce Object storage abstraction (#735)
• (rvm) add debug-mode invariant assertions (#737)
• (deps) bump the rust-dependencies group across 5 directories with 5 updates (#734)

Commits

• f98865f chore(release): release regorus v0.11.0 (#766)
• 6ef5e74 fix(rvm): assert every-quantifier results so failing cases don't pass (#765)
• 9a486c7 fix: Deep-merge nested data documents in Engine::add_data (#760)
• 9838b25 build(deps): bump the rust-dependencies group across 5 directories with 11 up...
• f0acc64 feat(compiler): support registered host-await builtins for natural function c...
• 166ea72 build(deps): bump the per-dependency group across 1 directory with 3 updates ...
• 4c45ebf build(deps): update maturin requirement (#683)
• 41e1303 feat(value): introduce Set storage abstraction (#740)
• 9b42239 Expand keyword-in-ref coverage for complex parser edge cases (interpreter + R...
• 9b6ad0b build(deps): bump org.apache.maven.plugins:maven-surefire-plugin (#732)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.