chore(deps): bump the cargo-minor-patch group across 1 directory with 6 updates - #838
chore(deps): bump the cargo-minor-patch group across 1 directory with 6 updates#838dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 637d5a4569
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| napi-derive = { version = "3.6.2" } | ||
| p256 = { version = "0.13", features = ["ecdsa"] } | ||
| pg_query = { version = "=6.1.1", default-features = false } | ||
| pg_query = { version = "=6.2.0", default-features = false } |
There was a problem hiding this comment.
The commit message has no Signed-off-by: trailer, so this commit does not satisfy the repository's DCO requirement and will need to be recreated or included in a properly signed-off replacement commit before it can be accepted.
AGENTS.md reference: AGENTS.md:L314-L314
Useful? React with 👍 / 👎.
| rcgen = { version = "0.13", default-features = false, features = ["ring", "zeroize"] } | ||
| reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls", "rustls-tls-native-roots"] } | ||
| rhai = { version = "=1.25.1", features = ["sync", "serde"] } | ||
| rhai = { version = "=1.26.0", features = ["sync", "serde"] } |
There was a problem hiding this comment.
This pin changes the interpreter used by registry-evidence for derivation and other assertion scripts, and the included 1.26.0 release notes explicitly describe optimizer and function-call semantic changes; nevertheless, the commit contains no explicit review of their effect on Evidence's bounded assertion evaluation. Add the required security review notes before accepting this behavior-changing dependency update.
AGENTS.md reference: AGENTS.md:L323-L325
Useful? React with 👍 / 👎.
637d5a4 to
d530be6
Compare
… 6 updates Bumps the cargo-minor-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [napi](https://github.com/napi-rs/napi-rs) | `3.12.1` | `3.12.2` | | [pg_query](https://github.com/pganalyze/pg_query.rs) | `6.1.1` | `6.2.0` | | [rhai](https://github.com/rhaiscript/rhai) | `1.25.1` | `1.26.0` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.7.0` | `0.7.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.24.1` | `1.26.0` | | [oxjsonld](https://github.com/oxigraph/oxigraph) | `0.2.5` | `0.2.6` | Updates `napi` from 3.12.1 to 3.12.2 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-v3.12.1...napi-v3.12.2) Updates `pg_query` from 6.1.1 to 6.2.0 - [Changelog](https://github.com/pganalyze/pg_query.rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/pganalyze/pg_query.rs/commits/v6.2.0) Updates `rhai` from 1.25.1 to 1.26.0 - [Release notes](https://github.com/rhaiscript/rhai/releases) - [Changelog](https://github.com/rhaiscript/rhai/blob/main/CHANGELOG.md) - [Commits](https://github.com/rhaiscript/rhai/commits/v1.26.0) Updates `tower-http` from 0.7.0 to 0.7.1 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.7.0...tower-http-0.7.1) Updates `uuid` from 1.24.1 to 1.26.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.24.1...v1.26.0) Updates `oxjsonld` from 0.2.5 to 0.2.6 - [Release notes](https://github.com/oxigraph/oxigraph/releases) - [Changelog](https://github.com/oxigraph/oxigraph/blob/main/CHANGELOG.md) - [Commits](https://github.com/oxigraph/oxigraph/commits) --- updated-dependencies: - dependency-name: napi dependency-version: 3.12.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: oxjsonld dependency-version: 0.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: pg_query dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: rhai dependency-version: 1.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tower-http dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
d530be6 to
122fa36
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 122fa362c0
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| rcgen = { version = "0.13", default-features = false, features = ["ring", "zeroize"] } | ||
| reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls", "rustls-tls-native-roots"] } | ||
| rhai = { version = "=1.25.1", features = ["sync", "serde"] } | ||
| rhai = { version = "=1.26.0", features = ["sync", "serde"] } |
There was a problem hiding this comment.
When Evidence adapter scripts or BReg change-request planners run, this makes them execute under Rhai 1.26.0 even though products/evidence/contracts/rhai-abi.yaml:164 and ADAPTER-API.md:496-498 freeze observable behavior at 1.25.1, the Evidence lexical guard explicitly emulates 1.25.1 tokenization, and BReg still emits rhaiVersion: 1.25.1 from CHANGE_REQUEST_PLANNER_RHAI_VERSION. Thus compiled artifacts can be validated and advertised as 1.25.1 while receiving 1.26.0's changed optimizer and call semantics; retain the 1.25.1 pin unless the scanner, version metadata, compatibility tests, and governed contracts are intentionally revised together.
AGENTS.md reference: AGENTS.md:L167-L170
Useful? React with 👍 / 👎.
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Bumps the cargo-minor-patch group with 6 updates in the / directory:
3.12.13.12.26.1.16.2.01.25.11.26.00.7.00.7.11.24.11.26.00.2.50.2.6Updates
napifrom 3.12.1 to 3.12.2Release notes
Sourced from napi's releases.
Commits
444bf29chore(napi): release v3.12.2 (#3459)2ffb055fix(napi): memory safety in PromiseRaw callbacks and AbortSignal conversion (...511ead2chore(deps): update dependency oxc-parser to ^0.146.0 (#3457)220b402chore(deps): update dependency oxc-parser to ^0.145.0 (#3456)70c1493chore(release): publishaeba312fix(cli): compatible with emnapi v1 & v2 (#3454)d532909chore(deps): update dependency oxc-parser to ^0.144.0 (#3453)b8ba732fix(deps): update emnapi to v2.0.0-alpha.4 (#3451)06349ebchore(deps): update cross-platform-actions/action action to v1.4.0 (#3452)a5b5f27chore(release): publishUpdates
pg_queryfrom 6.1.1 to 6.2.0Changelog
Sourced from pg_query's changelog.
Commits
Updates
rhaifrom 1.25.1 to 1.26.0Release notes
Sourced from rhai's releases.
Changelog
Sourced from rhai's changelog.
Commits
Updates
tower-httpfrom 0.7.0 to 0.7.1Release notes
Sourced from tower-http's releases.
... (truncated)
Commits
c941451chore(release): prepare 0.7.1 (#729)9697702chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)e2582e2Allow ignoring multi-range requests (#727)888f7fefeat(services): configure directory redirects (#728)5ad7654chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)d154adbfix: reject multipart ranges before validation (#661)d9e5c8aci: Update to cargo-check-external-types 0.5.0 (#724)90c072bPropagate ServeDir::try_call I/O errors (#718)860922efix(decompression): don't end the body on an empty data frame (#722)8532252docs(example)/custom future with multiple bodies (#711)Updates
uuidfrom 1.24.1 to 1.26.0Release notes
Sourced from uuid's releases.
Commits
cdc96a8Merge pull request #905 from uuid-rs/cargo/v1.26.034e4f49don't test macros under mirid9e7242update nightly used for miriec16819prepare for 1.26.0 release162cd20Merge pull request #904 from ChrisJr404/v7-additional-precision-bits97eceffAdd ContextV7::with_additional_precision_bits for microsecond clocks302e0bfMerge pull request #903 from uuid-rs/cargo/1.25.0b7ccde8prepare for 1.25.0 releasec62dffbMerge pull request #902 from ChrisJr404/serde-bytes-module8c198b2Add a serde::bytes module that encodes as a byte stringUpdates
oxjsonldfrom 0.2.5 to 0.2.6Changelog
Sourced from oxjsonld's changelog.
... (truncated)
Commits