Skip to content

chore(deps): bump the build-policy group (sha2 0.11, toml 1.1, serde_json), on current main - #18

Open
afflom wants to merge 1 commit into
mainfrom
chore/deps-build-policy
Open

afflom wants to merge 1 commit into
mainfrom
chore/deps-build-policy

Conversation

@afflom

@afflom afflom commented Oct 15, 2026

Copy link
Copy Markdown
Member

Item M3 of the completion plan #3. This supersedes #2.

Why a new PR. #2's commit is unchanged here: it is Dependabot's own commit, cherry-picked onto current main. #2 was based on 0494523, and its model job failed in Verify the model (exit 3) on that older base, before main gained d1938a0 (the gate's diagnostic as an annotation) and 515f75f (the rebuilt bundle). The rebase command could not be issued from this session.

Review against R6.

  • Every bump is in build-time and CI crates only: repo-model (toml), xtask (sha2, serde_json) and the dev-dependencies of repo-conformance (sha2). No shipped crate changes.
  • cargo deny check: advisories ok, bans ok, licenses ok, sources ok.
  • cargo build --workspace --all-targets and xtask check-model pass.
  • cargo test -p repo-conformance --test mnist passes all six of MN-01 to MN-06. It was run with LexLean built at the pinned 54f2ec41 and Rust 1.97.0, because 1.97.1 is not downloadable in this session.

The model job is the gate this change must pass. The acceptance jobs fail on main as well, until prismpm.lock exists (#11).

🤖 Generated with Claude Code

https://claude.ai/code/session_013Eo1UJoRXDrVSdkPw8UC35


Generated by Claude Code

…dates

Bumps the build-policy group with 3 updates in the / directory: [sha2](https://github.com/RustCrypto/hashes), [toml](https://github.com/toml-rs/toml) and [serde_json](https://github.com/serde-rs/json).


Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `toml` from 0.8.23 to 1.1.8+spec-1.1.0
- [Commits](toml-rs/toml@toml-v0.8.23...toml-v1.1.8)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.152
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-policy
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: build-policy
- dependency-name: toml
  dependency-version: 1.1.8+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: build-policy
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant