Repository navigation
chore(deps): bump the cargo-minor-patch group across 1 directory with 7 updates - #1154
Conversation
… 7 updates Bumps the cargo-minor-patch group with 7 updates in the /languages/typescript/packages/protect-ffi directory: | Package | From | To | | --- | --- | --- | | [rust_decimal](https://github.com/paupino/rust-decimal) | `1.42.1` | `1.43.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.27.0` | | [neon](https://github.com/neon-bindings/neon) | `1.1.1` | `1.1.2` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.2` | | [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.3` | `1.8.7` | | [lazy_static](https://github.com/rust-lang-nursery/lazy-static.rs) | `1.5.0` | `1.5.1` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | Updates `rust_decimal` from 1.42.1 to 1.43.0 - [Release notes](https://github.com/paupino/rust-decimal/releases) - [Changelog](https://github.com/paupino/rust-decimal/blob/master/CHANGELOG.md) - [Commits](paupino/rust-decimal@1.42.1...1.43.0) Updates `uuid` from 1.24.0 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.24.0...v1.27.0) Updates `neon` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/neon-bindings/neon/releases) - [Changelog](https://github.com/neon-bindings/neon/blob/main/RELEASES.md) - [Commits](https://github.com/neon-bindings/neon/commits) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2) Updates `blake3` from 1.8.3 to 1.8.7 - [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases) - [Commits](BLAKE3-team/BLAKE3@1.8.3...1.8.7) Updates `lazy_static` from 1.5.0 to 1.5.1 - [Release notes](https://github.com/rust-lang-nursery/lazy-static.rs/releases) - [Commits](https://github.com/rust-lang-nursery/lazy-static.rs/commits) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) --- updated-dependencies: - dependency-name: rust_decimal dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: neon dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: blake3 dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: lazy_static dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
freshtonic
left a comment
There was a problem hiding this comment.
The bump is correct. Merge #1158 first, because the two PRs conflict.
Conflict with #1158
git merge-tree gives a conflict in languages/typescript/packages/protect-ffi/Cargo.lock with #1158, the rustls 0.23.45 security patch. Merge #1158 first. Then tell Dependabot to rebase this PR.
Why Drizzle v3 integration fails
This run started at 01:08 UTC on 2026-10-12, before the Clerk tokens were added to the Dependabot secrets at 04:06 UTC. Both cells fail with missing CLERK_MACHINE_TOKEN in lock-context.integration.test.ts. The cause is not this PR. A re-run today fails with a different error, 401 Unknown credential, until the CS_* credentials work again.
What I checked
cargo test + clippy + rustfmtpasses. Thus--lockedaccepts the new lockfile.protect-ffi integration suitepasses. It does live encryption against Postgres, and it includes the numeric paths thatrust_decimal1.43.0 touches.rust_decimal1.43.0 removes itsrkyv0.7 bridge, and nine crates leave the lockfile with it. No crypto crate changes exceptblake31.8.7.eql-bindingsstill resolves by path. The lint-eql-pins guard is not affected.
Suggested follow-up PR
- The
@cipherstash/protect-ffibinaries compile from this lockfile. Without a changeset, these versions reach npm only with the next protect-ffi release. If you want them sooner, add a@cipherstash/protect-ffipatch changeset when you rebase.
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Bumps the cargo-minor-patch group with 7 updates in the /languages/typescript/packages/protect-ffi directory:
1.42.11.43.01.24.01.27.01.1.11.1.21.53.11.53.21.8.31.8.71.5.01.5.10.13.40.13.5Updates
rust_decimalfrom 1.42.1 to 1.43.0Release notes
Sourced from rust_decimal's releases.
Commits
8592462version 1.43.09be5917Remove rkyv 0.7 from feature bridge and update rand 0.8 support (#819)f017c8bMerge pull request #823 from flisky/v193bd26ffix: add negative sign forarray_string5c3bf3bMerge pull request #814 from momomuchu/fix/rust-decimal-macros-minimal-versio...fe55209fix: require rust_decimal_macros >=1.37 to avoid circular dependency551be15General clippy cleanup (#813)f7272b5Various performance improvements (#809)b363729Accumulated fixes backported from master (#808)Updates
uuidfrom 1.24.0 to 1.27.0Release notes
Sourced from uuid's releases.
Commits
b62154eMerge pull request #917 from uuid-rs/cargo/v1.27.0ffd8ec5prepare for 1.27.0 release4b6c10fMerge pull request #915 from uuid-rs/fix/v7-orderinga1aa126Merge pull request #912 from jaideeppyne/fix/urn-prefix-case-insensitive4639d67fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos2723703bump MSRV to 1.89.0a3e64farefactor: simplify URN prefix parsing5055fd4refactor: inline case-insensitive URN prefix checkscb8b1d5refactor: simplify case-insensitive URN parsing285967dAccept case-insensitive urn:uuid: prefixes when parsingUpdates
neonfrom 1.1.1 to 1.1.2Changelog
Sourced from neon's changelog.
Commits
Updates
tokiofrom 1.53.1 to 1.53.2Release notes
Sourced from tokio's releases.
Commits
ff0c406chore: prepare Tokio v1.53.2 (#8580)a762700Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)ec31a9fchore: prepare Tokio v1.51.5 (#8579)625c851sync: assign semaphore permits before emitting tracing event (#8542)832dd23sync: avoid leaking semaphore permits on tracing panic (#8542)826954async: unlink semaphore waiter before emitting tracing event (#8542)9a47992process: unregister Windows wait before closing child handle (#8564)2fc5972fs: handle integer overflow in buffered relative seek (#8574)85a6d13io: revert "always cleanup AsyncFd registration list on deregister" (#8540)436faa2rt: drop blocking pool mutex before shutting down rejected task (#8562)Updates
blake3from 1.8.3 to 1.8.7Release notes
Sourced from blake3's releases.
Commits
f3149ecversion 1.8.7b65bcb7add #[allow(deprecated)] annotations to fix nightly/beta warnings483a220fix warnings related to not using MAX constantsba02549Codex: removearrayref77b257eversion 1.8.683b1746useseekinstead ofmetadatato establish mmap length (#570)9eac279use vswhere to find Visual Studio in CIfc3d0e9Fix path to Visual Studio toolchain in CI8aa5145a few more colons6bb9773use cargo:: build script syntaxUpdates
lazy_staticfrom 1.5.0 to 1.5.1Commits
Updates
reqwestfrom 0.13.4 to 0.13.5Release notes
Sourced from reqwest's releases.
Changelog
Sourced from reqwest's changelog.
Commits
de55373v0.13.54d3fe12fix: proxy could use wrong credentials if many matched (#3098)9f06fd2docs: improve description of JSON method (#3082)5bdb2f0perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...ffda263perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...4e9a3c7chore: add pull request template for human-written content17e9bcbchore(deps): upgrade base64 to 0.23 (#3074)221abe9chore: Remove unnecessary clones and a cast (#3071)99996a1fix(error): detect timeouts wrapped in body decode errors (#3064)fc99bd5feat: expose the negotiated TLS version viaTlsInfo(#3067)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions