Repository navigation
chore(deps): bump toml_edit from 0.23.10+spec-1.0.0 to 0.25.0+spec-1.1.0 - #256
Merged
Merged
Conversation
dependabot
Bot
added
dependencies
Contributor
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
dependabot
Bot
force-pushed
the
dependabot/cargo/toml_edit-0.25.0spec-1.1.0
branch
from
November 4, 2026 23:09
481cdd6 to
a120b91
Compare
Bumps [toml_edit](https://github.com/toml-rs/toml) from 0.23.10+spec-1.0.0 to 0.25.0+spec-1.1.0. - [Commits](toml-rs/toml@v0.23.10...v0.25.0) --- updated-dependencies: - dependency-name: toml_edit dependency-version: 0.25.0+spec-1.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/cargo/toml_edit-0.25.0spec-1.1.0
branch
from
November 5, 2026 15:43
a120b91 to
e7b7871
Compare
hyperpolymath
approved these changes
Nov 5, 2026
hyperpolymath
enabled auto-merge (squash)
November 5, 2026 17:42
hyperpolymath
disabled auto-merge
November 5, 2026 17:42
|
hyperpolymath
added a commit
that referenced
this pull request
Nov 6, 2026
The configuration scanner unconditionally uses `toml_edit`, but Cargo.toml marks it optional. The manifest also regressed to version 0.23 while Cargo.lock retains the reviewed 0.25 update from #256. Downstream bridge builds fail with E0433; locked Verify jobs refuse the mismatched graph. Make the parser required, restore the reviewed 0.25 constraint already recorded in Cargo.lock, and add an independent HTTP-only Verify matrix entry matching consumers. Preserve the default and HTTP+SARIF cases. Validation: changed TOML/YAML parsed locally; dependency/default/HTTP declarations checked. Initial CI correctly rejected the manifest/lock mismatch, which the latest commit addresses. No Rust toolchain exists locally, so compilation, tests and lint must be established by the latest CI run before merge. Evidence: https://github.com/hyperpolymath/hypatia/actions/runs/42110426887/job/127536204396 Related: hyperpolymath/hypatia#1009
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps toml_edit from 0.23.10+spec-1.0.0 to 0.25.0+spec-1.1.0.
Commits
a8dac20chore: Release34fe772chore: Release7fa8e0ddocs: Update changelog1fb6ebafix(serde)!: Allow borrowed keys and values (#1099)9fe1ab1fix(serde)!: Allow borrowed values5154d6dfix(serde)!: Allow borrowed keysa51f752test(serde): Verify borrowingdc7d979feat(datetime)!: Track optional seconds, nanoseconds (#1098)b09eacefeat(datetime)!: Track optional seconds, nanoseconds82396e7test(dateime): Verify Display