chore(deps)(deps): bump the production-dependencies group across 1 directory with 2 updates by dependabot[bot] · Pull Request #48 · doublegate/Rusty2600

dependabot · 2026-10-19T10:10:51Z

Bumps the production-dependencies group with 2 updates in the / directory: serde_json and cc.

Updates serde_json from 1.0.151 to 1.0.154

Release notes

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates cc from 1.6.0 to 1.8.0

Release notes

Sourced from cc's releases.

cc-v1.8.0

Added

add CC_PREFER_CLANG_CL_OVER_MSVC to override prefer_clang_cl_over_msvc (#2001)

Fixed

(panic) fix panic in code and replace with error when appropriate (#2008)

(env) do not panic if WASM_MUSL_SYSROOT not set (#2007)

(jobserver) help thread gets more token than necessary (#2006)

stop forwarding -Cprofile-generate/-Cprofile-use to the C compiler (#2003)

do not apply target crt-static when target is overridden (#1999)

Other

(parallel) poll for process exit on linux (#2009)

document NVCC and other environment variables (#2005)

(jobserver) poll for new token (#2004)

(parallel) Use poll on unix (#2000)

cc-v1.7.0

Added

add Tool::get_envs, deprecate Tool::env and store tool env as Arc<OsStr> pairs (#1985)

link c++ when Clang uses libc++ (#1978)

add CC_MASM_ASM and fall back to llvm-ml for MASM files (#1975)

Fixed

(target parsing) for powerpc64-ibm-aix abi (#1989)

ignore ASCII case in program name checks (#1981)

Other

(compile) issue compilation cmds more frequently in parallel #1997 #1998

(cache) Optimize tool detection caching (#1995)

(cache) optimize EnvSnapshot Hash, PartialEq, Ord impl (#1994)

Regenerate target info (#1988)

Changelog

Sourced from cc's changelog.

1.8.0 - 2026-10-11

Added

add CC_PREFER_CLANG_CL_OVER_MSVC to override prefer_clang_cl_over_msvc (#2001)

Fixed

(panic) fix panic in code and replace with error when appropriate (#2008)

(env) do not panic if WASM_MUSL_SYSROOT not set (#2007)

(jobserver) help thread gets more token than necessary (#2006)

stop forwarding -Cprofile-generate/-Cprofile-use to the C compiler (#2003)

do not apply target crt-static when target is overridden (#1999)

Other

(parallel) poll for process exit on linux (#2009)

document NVCC and other environment variables (#2005)

(jobserver) poll for new token (#2004)

(parallel) Use poll on unix (#2000)

1.7.0 - 2026-10-10

Added

add Tool::get_envs, deprecate Tool::env and store tool env as Arc<OsStr> pairs (#1985)

link c++ when Clang uses libc++ (#1978)

add CC_MASM_ASM and fall back to llvm-ml for MASM files (#1975)

Fixed

(target parsing) for powerpc64-ibm-aix abi (#1989)

ignore ASCII case in program name checks (#1981)

Other

(compile) issue compilation cmds more frequently in parallel #1997 #1998

(cache) Optimize tool detection caching (#1995)

(cache) optimize EnvSnapshot Hash, PartialEq, Ord impl (#1994)

Regenerate target info (#1988)

Commits

d0454ee chore(cc): release v1.8.0 (#2010)
fd18a6c perf(parallel): poll for process exit on linux (#2009)
b69d7eb fix(panic): fix panic in code and replace with error when appropriate (#2008)
78eaf8f fix(env): do not panic if WASM_MUSL_SYSROOT not set (#2007)
ca93d67 docs: document NVCC and other environment variables (#2005)
e4f1339 fix(jobserver): help thread gets more token than necessary (#2006)
369070e perf(jobserver): poll for new token (#2004)
360d734 fix: stop forwarding -Cprofile-generate/-Cprofile-use to the C compiler (#2003)
5832160 refactor(forward_available): use let-else (#2002)
fb83356 feat: add CC_PREFER_CLANG_CL_OVER_MSVC to override `prefer_clang_cl_over_ms...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…rectory with 2 updates Bumps the production-dependencies group with 2 updates in the / directory: [serde_json](https://github.com/serde-rs/json) and [cc](https://github.com/rust-lang/cc-rs). Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `cc` from 1.6.0 to 1.8.0 - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/cc-rs@cc-v1.6.0...cc-v1.8.0) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: cc dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-19T10:10:57Z

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

socket-security · 2026-10-19T10:11:12Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	serde_json@1.0.151 ⏵ 1.0.154
	cc@1.6.0 ⏵ 1.8.0

View full report

coderabbitai · 2026-10-19T10:17:01Z

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

Cargo.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Advanced
Run ID: 5d2bbd69-353f-4faf-964b-002c72e11265

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-10-19T12:43:59Z

Antigravity review (Gemini via Ultra)

This is a trivial lockfile-only maintenance PR that updates cc (1.6.0 -> 1.8.0) and serde_json (1.0.151 -> 1.0.154) in Cargo.lock.

Blocking issues

None found.

Suggestions

Malformed Conventional Commit title (chore(deps)(deps): ...): The PR title duplicates the (deps) scope, which breaks strict Conventional Commits parsers. Edit the PR title/squash commit message to chore(deps): ... before merging, and remove include: "scope" (or change prefix to "chore") in dependabot.yml so future Dependabot PRs do not repeat the scope.

Nitpicks

None.

_{Automated first-pass review by agy on a self-hosted runner -- not a human review.}

doublegate · 2026-10-20T03:46:43Z

Bot Review Adjudication (Antigravity + CodeRabbit):

Incorporates serde_json 1.0.154 and cc 1.8.0 into the consolidated dependency PR.
Remediates the Antigravity review suggestion regarding duplicate (deps)(deps) scopes by removing include: "scope" from .github/dependabot.yml.

doublegate · 2026-10-20T05:07:34Z

Superseded by consolidated dependency PR #49.

dependabot · 2026-10-20T05:07:37Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

… Rust 1.99) (#49) * chore(deps): consolidate dependency bumps (egui 0.37, wgpu 30, zip 9, Rust 1.99) - Bump pinned toolchain and workspace MSRV from Rust 1.96 to Rust 1.99 across rust-toolchain.toml, Cargo.toml, workflows, and docs - Upgrade egui, egui-winit, and egui-wgpu to 0.37.0 (enabling monochrome_emoji_fonts to preserve default UI and debugger icon fonts) and migrate textures_delta and Id::unique call sites - Upgrade wgpu and naga to 30.0.1 across native, wasm32, and dev-dependencies and migrate RequestAdapterOptions, SurfaceConfiguration, and Queue::present - Upgrade zip to 9.0.5 and migrate ZipFile::name() Result return in rom_archive.rs - Upgrade wasm-bindgen (0.2.129), wasm-bindgen-futures (0.4.79), js-sys (0.3.106), web-sys (0.3.106), and transitive crates - Fix Rust 1.99 clippy lints (assert_is_empty, chunks_exact_to_as_chunks, suboptimal_flops) and dependabot.yml commit-message scope duplication Supersedes #42, #43, #44, #45, #46, #47, #48. * fix(frontend): consume egui texture deltas in scripting tests and skip undecodable zip names - Call full_output.drop_without_applying_deltas() in scripting overlay tests for egui 0.37 debug assertion compatibility - Skip non-decodable entry names and check ROM_EXTENSIONS before allocating owned String in rom_archive::extract_first_rom - Replace [] as [T; 0] slice assertions with .as_slice(), &[] and update wgpu version note in docs/frontend.md

dependabot Bot requested a review from doublegate as a code owner October 19, 2026 10:10

dependabot Bot assigned doublegate Oct 19, 2026

doublegate mentioned this pull request Oct 20, 2026

chore(deps): consolidate dependency bumps (egui 0.37, wgpu 30, zip 9, Rust 1.99) #49

Merged

doublegate closed this Oct 20, 2026

dependabot Bot deleted the dependabot/cargo/production-dependencies-ee80b9568e branch October 20, 2026 05:07

Navigation Menu

Repository navigation

chore(deps)(deps): bump the production-dependencies group across 1 directory with 2 updates - #48

chore(deps)(deps): bump the production-dependencies group across 1 directory with 2 updates#48
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/production-dependencies-ee80b9568e

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

socket-security Bot commented Oct 19, 2026

Uh oh!

coderabbitai Bot commented Oct 19, 2026

Review skipped

Uh oh!

github-actions Bot commented Oct 19, 2026

Uh oh!

doublegate commented Oct 20, 2026

Uh oh!

doublegate commented Oct 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026

v1.0.154

v1.0.153

v1.0.152

cc-v1.8.0

Added

Fixed

Other

cc-v1.7.0

Added

Fixed

Other

1.8.0 - 2026-10-11

Added

Fixed

Other

1.7.0 - 2026-10-10

Added

Fixed

Other

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Labels

Uh oh!

socket-security Bot commented Oct 19, 2026

Uh oh!

coderabbitai Bot commented Oct 19, 2026

Review skipped

Uh oh!

github-actions Bot commented Oct 19, 2026

Antigravity review (Gemini via Ultra)

Blocking issues

Suggestions

Nitpicks

Uh oh!

doublegate commented Oct 20, 2026

Uh oh!

doublegate commented Oct 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant