Repository navigation
chore(deps): bump the rust-dependencies group with 6 updates - #2786
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the rust-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.3` | `1.54.1` | | [jaq-core](https://github.com/01mf02/jaq) | `3.1.1` | `3.1.2` | | [jaq-std](https://github.com/01mf02/jaq) | `3.0.3` | `3.0.4` | | [vt100](https://github.com/doy/vt100-rust) | `0.16.2` | `0.18.1` | | [napi](https://github.com/napi-rs/napi-rs) | `3.14.2` | `3.15.0` | | [napi-derive](https://github.com/napi-rs/napi-rs) | `3.6.12` | `3.6.13` | Updates `tokio` from 1.53.3 to 1.54.1 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.3...tokio-1.54.1) Updates `jaq-core` from 3.1.1 to 3.1.2 - [Release notes](https://github.com/01mf02/jaq/releases) - [Commits](01mf02/jaq@v3.1.1...v3.1.2) Updates `jaq-std` from 3.0.3 to 3.0.4 - [Release notes](https://github.com/01mf02/jaq/releases) - [Commits](https://github.com/01mf02/jaq/commits) Updates `vt100` from 0.16.2 to 0.18.1 - [Changelog](https://github.com/doy/vt100-rust/blob/main/CHANGELOG.md) - [Commits](doy/vt100-rust@v0.16.2...v0.18.1) Updates `napi` from 3.14.2 to 3.15.0 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-v3.14.2...napi-v3.15.0) Updates `napi-derive` from 3.6.12 to 3.6.13 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-derive-v3.6.12...napi-derive-v3.6.13) --- updated-dependencies: - dependency-name: tokio dependency-version: 1.54.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: jaq-core dependency-version: 3.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: jaq-std dependency-version: 3.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: vt100 dependency-version: 0.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: napi dependency-version: 3.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: napi-derive dependency-version: 3.6.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
bashkit | b0f261a | Commit Preview URL Branch Preview URL |
Oct 26 2026, 09:52 AM |
2 tasks done
chaliy
added a commit
that referenced
this pull request
Oct 26, 2026
…2789) Supersedes Dependabot #2786, which bumped the version alone and failed 28 jobs: vt100 0.18 takes and returns screen dimensions as `NonZero<u16>` where 0.16 used `u16`, so the bump needs a source change Dependabot cannot make. `TerminalSize` keeps plain `u16` fields -- they are public API, and nothing about this upgrade justifies breaking callers -- so the conversion lives at the vt100 boundary only, in the six call sites across `terminal/tty.rs` and `terminal/mod.rs`. Zero needs a decision, since `NonZero` cannot carry it. `TerminalSize::new` clamps each dimension to 2, but the struct's fields are public and can be set literally, so a zero can still arrive. It clamps to 1 rather than panicking: a degenerate size is the caller's to notice and not worth aborting a session over, and 0.16 accepted it without complaint. No behaviour change for any non-zero size, and no public API change. Moves the cargo-vet exemption to 0.18.1 rather than adding a delta audit: the delta is ~3100 lines across a dozen files plus a new capture.rs, so a delta audit would claim a review that diff does not get -- the call #2773 made for crypto-bigint. Checked what the exemption asserts instead, and it all holds: zero `unsafe` in src (unchanged from 0.16.2), zero use of std::fs, std::net, std::process or std::env, and no new runtime dependency, since 0.18.1's new `embedded-io` is optional and absent from vt100's resolved deps. The lockfile delta is the vt100 entry alone. `cargo update -p vt100` also moved tempfile from getrandom 0.3.4 to 0.4.3, which this change has no reason to carry; main's lockfile is not stale, so that was opportunistic re-resolution and is left out. Verified: 52 checks green; locally cargo vet --locked succeeds, fmt and clippy --all-targets are clean on the terminal feature, and the terminal test slice passes --locked with 0 failures.
Contributor
|
The 28 failing jobs here were the That migration landed separately in #2789, along with moving the cargo-vet exemption to 0.18.1, so The other seven bumps here are still wanted, so this is a rebase rather than a close. ·@·d·ependabot r·ebase Generated by Claude Code |
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/cargo/rust-dependencies-100d2df5bc
branch
October 26, 2026 12:42
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the rust-dependencies group with 6 updates:
1.53.31.54.13.1.13.1.23.0.33.0.40.16.20.18.13.14.23.15.03.6.123.6.13Updates
tokiofrom 1.53.3 to 1.54.1Release notes
Sourced from tokio's releases.
... (truncated)
Commits
b53b200chore: prepare Tokio v1.54.1 (#8693)5ed619btime: revert "remove the runtime handle from timers" (#8692)66d34e4chore: prepare Tokio v1.54.0 (#8667)0d322ceio: support vectored writes in sink (#8663)4167c56codec: expose I/O sources from codec errors (#8665)cdd9daefs: propagate iouring stress test failures (#8644)52ac781ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)4890d02stream: implementFusedStreamforJoinSetStream(#8629)a6bd8e1wasm: check Emscripten version when using JSPI (#8627)9dd749dMerge 'tokio-1.53.3' into 'master' (#8641)Updates
jaq-corefrom 3.1.1 to 3.1.2Release notes
Sourced from jaq-core's releases.
Commits
f7fea92Bump versions.8c294f9Merge pull request #483 from 01mf02/manual-print-notocf2ffd64Merge pull request #482 from 01mf02/concat-noclone-test4a82f98Omit TOC when printing HTML manual.782da79New test for checking cloning behaviour of concatenation.4acfc07Merge pull request #481 from 01mf02/output-stack-overflowba0695fAdd output stack overflow example.d29c687Merge pull request #473 from 01mf02/repl-input-filename9ec8ea4Make it smaller.6d1a5ebMerge pull request #474 from 01mf02/scan-compatUpdates
jaq-stdfrom 3.0.3 to 3.0.4Commits
Updates
vt100from 0.16.2 to 0.18.1Changelog
Sourced from vt100's changelog.
... (truncated)
Commits
fb0f54echangelog and version bumpb88a5a1a few tweaks to github actionsc20819dfeat: addcapture::basic_formatted_to_plain_indexed(#38)17965e8perf: trim trailing blank cells from scrollback rows (#36)a87517bfeat: make vertical resizes more closely match real terminal emulators even w...33abc97feat: change behavior ofset_size(#31)46d1dfbfeat: addParser::screen_and_callbacks_mut(#29)04d933ffeat: add basic formatted capture utilities, fix: fix handling of triple-widt...1102dfffeat: makeScreen::sizereturnNonZeroU16s (#26)32e8a3efix: respect alternate screen inScreen::contents_formatted_basic(#24)Updates
napifrom 3.14.2 to 3.15.0Release notes
Sourced from napi's releases.
Commits
d9cb526chore: release (#3575)d3d4536chore(deps): update oxc-node to v1 (#3635)ebdac4bchore: add emnapi version72eafbechore(deps): update release-plz/action action to v0.5.144 (#3633)bafc7dbchore(release): publish8603be9chore(deps): update dependency oxfmt to ^0.74.0 (#3629)3caf68echore(deps): update dependency vite to v8.3.3 [security] (#3632)0ad70a7fix(cli): take over the WASI flavor of a binding a postbuild fallback swaps i...5547cd4fix(cli): resolve null when the incarnation probe's spawn throws synchronousl...b3bb7a4feat(napi): cancel a ReadableStream through its Reader, and fix ReadableStrea...Updates
napi-derivefrom 3.6.12 to 3.6.13Release notes
Sourced from napi-derive's releases.
Commits
d9cb526chore: release (#3575)d3d4536chore(deps): update oxc-node to v1 (#3635)ebdac4bchore: add emnapi version72eafbechore(deps): update release-plz/action action to v0.5.144 (#3633)bafc7dbchore(release): publish8603be9chore(deps): update dependency oxfmt to ^0.74.0 (#3629)3caf68echore(deps): update dependency vite to v8.3.3 [security] (#3632)0ad70a7fix(cli): take over the WASI flavor of a binding a postbuild fallback swaps i...5547cd4fix(cli): resolve null when the incarnation probe's spawn throws synchronousl...b3bb7a4feat(napi): cancel a ReadableStream through its Reader, and fix ReadableStrea...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions