Repository navigation
chore(deps): update 13 Rust dependencies while retaining Rust 1.88 - #64
Closed
dependabot[bot] wants to merge 3 commits into
Closed
dependabot[bot] wants to merge 3 commits into
dependabot[bot] wants to merge 3 commits into
Conversation
Bumps the rust-deps group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` | | [clap_complete](https://github.com/clap-rs/clap) | `4.6.9` | `4.6.11` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.20` | `2.0.21` | | [tree-sitter](https://github.com/tree-sitter/tree-sitter) | `0.26.11` | `0.27.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.26.1` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` | | dirs | `6.0.0` | `7.0.0` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` | | [which](https://github.com/harryfei/which-rs) | `8.0.5` | `8.0.6` | | [rand](https://github.com/rust-random/rand) | `0.10.2` | `0.10.3` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.11` | `0.7.1` | | [console](https://github.com/console-rs/console) | `0.16.4` | `0.16.6` | | [mockall](https://github.com/asomers/mockall) | `0.14.0` | `0.15.0` | | [tokio-test](https://github.com/tokio-rs/tokio) | `0.4.5` | `0.4.6` | Updates `clap` from 4.6.6 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7) Updates `clap_complete` from 4.6.9 to 4.6.11 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.9...clap_complete-v4.6.11) Updates `thiserror` from 2.0.20 to 2.0.21 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.20...2.0.21) Updates `tree-sitter` from 0.26.11 to 0.27.0 - [Release notes](https://github.com/tree-sitter/tree-sitter/releases) - [Commits](tree-sitter/tree-sitter@v0.26.11...v0.27.0) Updates `uuid` from 1.24.0 to 1.26.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.24.0...v1.26.1) Updates `base64` from 0.22.1 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1) Updates `dirs` from 6.0.0 to 7.0.0 Updates `futures` from 0.3.33 to 0.3.34 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.33...0.3.34) Updates `which` from 8.0.5 to 8.0.6 - [Release notes](https://github.com/harryfei/which-rs/releases) - [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md) - [Commits](harryfei/which-rs@8.0.5...8.0.6) Updates `rand` from 0.10.2 to 0.10.3 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.10.2...0.10.3) Updates `tower-http` from 0.6.11 to 0.7.1 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.11...tower-http-0.7.1) Updates `console` from 0.16.4 to 0.16.6 - [Release notes](https://github.com/console-rs/console/releases) - [Changelog](https://github.com/console-rs/console/blob/main/CHANGELOG.md) - [Commits](console-rs/console@0.16.4...0.16.6) Updates `mockall` from 0.14.0 to 0.15.0 - [Changelog](https://github.com/asomers/mockall/blob/master/CHANGELOG.md) - [Commits](asomers/mockall@v0.14.0...v0.15.0) Updates `tokio-test` from 0.4.5 to 0.4.6 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-test-0.4.5...tokio-test-0.4.6) --- updated-dependencies: - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-deps - dependency-name: clap_complete dependency-version: 4.6.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-deps - dependency-name: thiserror dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-deps - dependency-name: tree-sitter dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-deps - dependency-name: uuid dependency-version: 1.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-deps - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-deps - dependency-name: dirs dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-deps - dependency-name: futures dependency-version: 0.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-deps - dependency-name: which dependency-version: 8.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-deps - dependency-name: rand dependency-version: 0.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-deps - dependency-name: tower-http dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-deps - dependency-name: console dependency-version: 0.16.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-deps - dependency-name: mockall dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-deps - dependency-name: tokio-test dependency-version: 0.4.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-deps ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Keep tree-sitter 0.26.11 and tree-sitter-language 0.1.7 because the proposed 0.27.0 and 0.1.8 releases require Rust 1.90. Preserve the other 13 grouped dependency updates. Verified Rust 1.88 locked all-target check, Rust 1.99 formatting and strict Clippy, release build, conformance, and 833 tests excluding the pre-existing path validation failure addressed in #61. AI-assisted implementation and verification; maintainer review remains required.
Owner
|
Added 4e5622c to preserve the project's Rust 1.88 support.
Validation on the exact two-file correction:
The baseline path/Windows test failures and rustls audit update are handled in #61; this follow-up deliberately stays dependency-focused. CI for the exact published head now passes Rust 1.88, formatting/Clippy, dependency review, package metadata, and all three installer jobs. The remaining failures reproduce the existing Linux/macOS C:/evil.rs test, Windows environment-scrubbing test, and RUSTSEC-2026-0285 (rustls 0.23.43). This PR still needs #61's fixes and the repository's normal review and merge requirements. A local integration of current #61 with this corrected dependency set also passes Rust 1.88 all-target checking and all 838 tests without filtering a failure (one ignored doctest). The integration retains the grouped updates and rustls 0.23.45/rustls-webpki 0.103.15; it has not been published. AI-assisted implementation and verification. Human review has not been claimed or bypassed. |
tang-vu
changed the title
Integrate main cea4725 while retaining the 13 dependency updates and Rust 1.88-compatible tree-sitter 0.26.11. Preserve main's PATH, path validation, bytecode, pytest prerequisite, and rustls security fixes. The resulting tree matches the independently reviewed local #61+#64 integration. Stable fmt, all-targets clippy, release build, and offline conformance passed locally; two Python e2e fixtures remain blocked by missing local pytest. Hosted CI must validate this exact branch head. AI-assisted by OpenAI Codex.
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates 13 direct Rust dependencies and their lockfile entries. Keeps tree-sitter at 0.26.11 because 0.27 requires Rust 1.90; the declared MSRV remains 1.88. Manifest version changes are base64 0.23, dirs 7, tower-http 0.7, and mockall 0.15. Application source and authorization defaults are unchanged.
PR #61 is merged. Merge commit
50605d291d3eff71313d3ee73fc2c132a80f6a81incorporates actual maincea4725331962f6b3a365e5b3122e0e7037e2a35without rewriting this branch's history. The resulting diff against main is onlyCargo.lockandcrates/contribai-rs/Cargo.toml; it retains main's rustls 0.23.45 / rustls-webpki 0.103.15 and verification fixes.Compatibility
The existing base64 STANDARD engine and dirs home_dir usage remain compatible. tower-http 0.7 removes unnecessary CORS Vary headers for the existing Any/Any/Any policy; authentication and allowed-origin configuration are unchanged. No application API migration was needed.
Validation
The published tree
25e6ca7625ab73d96827fbbed51cc06eb47231fematches all 420 files of the independently reviewed local integration. Local stable Rust 1.99 formatting, locked all-targets Clippy with warnings denied, release workspace build, and debug/release conformance (43/43 each) passed. Release-asset tests (10), isolated Bash installer tests (18), installer contract, and site contract also passed.The local workspace aggregate had 836 passing tests and two Python e2e failures because pytest was unavailable. The existing bytecode-cache unit test returned early, so its assertions were not exercised locally. No combined local MSRV or fresh audit pass is claimed.
CI run 37583664710 passed all 11 jobs on exact head
50605d291d3eff71313d3ee73fc2c132a80f6a81. Ubuntu and macOS each passed 838 workspace tests; Windows passed 837, with one existing ignored doctest on each platform. Both Python e2e fixtures passed on every OS, and all three release builds completed. Rust 1.88, strict formatting/Clippy, RustSec audit, dependency review, package validation, and the installer matrix all passed.AI-assisted implementation and source verification.