build(deps): update dua-core requirement from =3.3.1 to =4.0.0

[dependabot]

Updates the requirements on dua-core to permit the latest version.

Release notes

Sourced from dua-core's releases.

dua-core v4.0.0

Performance (BREAKING)

• avoid unnecessary metadata during deletion

  Deletion needs entry types, but every walk collected full sizes, timestamps, allocation information, and file identities. Add Options::skip_metadata and use directory-entry types without extra metadata lookups when available. macOS and Windows use standard enumeration for this mode; Windows roots query only attribute/tag information. Keep the native metadata readers for ordinary scans and preserve Windows verbatim-path handling.

  Drop per-entry deletion byte accounting. Successful removals use the existing scanned total; partial failures retain entry/error counts and display unknown bytes instead of collecting metadata solely for that notification.

  Local macOS/APFS release medians showed 0-11.5% lower deletion time, with wide-directory traversal up to 40% shorter; gains vary with tree shape.

Commit Statistics

• 3 commits contributed to the release over the course of 7 calendar days.
• 8 days passed between releases.
• 1 commit was understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Commit Details

• Uncategorized
  • Merge pull request #397 from Byron/speed-up-deletions (97211e6)
  • Avoid unnecessary metadata during deletion (f643c74)
  • Merge pull request #385 from Byron/io-format (3343158)

Changelog

Sourced from dua-core's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

2.44.0 (2026-08-30)

This is a massive release that cost my weekend and was motivated by the chance to reduce the amount of open issues to 0. Besides the memory usage being cut in half, one can now keep snapshots of interactive runs, and compare them to older snapshots, or simply view them again with different settings. Finally, it's now possible to configure keyboarding as well. What follows is the more elaborate, generated version of this text, and not my speech.

This release turns traversal results into durable artifacts, shows exactly where disk usage moved, puts every interactive key under user control, and makes large traversals substantially leaner.

dua interactive --export before.dua
# ... later ...
dua interactive --export after.dua
dua diff before.dua after.dua

Snapshots. Completed interactive traversals can now be exported atomically to a deterministic, SHA-256-protected snapshot, with streaming zlib compression by default. Load one with dua interactive --import for a read-only tour, or replay it through dua aggregate --import as a flat list, a depth-limited tree, or folded stacks, with the usual sorting and total controls. Snapshot imports retain root order and traversal metadata; the aggregate renderers replay them with bounded memory. The interactive view still supports navigation, searching, sorting, marking, and opening stored paths that continue to exist, while refresh, trash, and deletion stay safely disabled. Its mark pane drops destructive prompts and colors for snapshots, or whenever both destructive actions are unbound. The dua crate exposes the snapshot, replay, and diff APIs for library users as well.

Diffing. dua diff OLD NEW streams additions, removals, and signed size changes as a compact, colored context tree, then shows the largest additions and removals. Use --directories-only, --prefix, --depth, --format, and --summary-limit to shape the report. Both snapshots are checksum-verified in parallel before their canonical entry streams are merged in bounded memory; whole added or removed directories collapse into a single useful change.

Configurable keybindings. Every interactive action can now be rebound or

... (truncated)

Commits

• 0e99238 Release dua-core v4.0.0, safety bump dua-cli v3.0.0
• 97211e6 Merge pull request #397 from Byron/speed-up-deletions
• f643c74 perf!: avoid unnecessary metadata during deletion
• 115f7bb Merge pull request #396 from Byron/fix-directory-display
• 38d30db feat: add directory_suffix option for directory markers
• f4f5aad Merge pull request #395 from Byron/fixes
• 5de1a72 fix: keep binary release installs current
• 74f88f0 Merge pull request #394 from Byron/languages
• c1f5dda feat: localize the interactive interface
• 5b5e83f feat: add German help translation
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)