Repository navigation
chore(deps): Bump the cargo-minor-patch group across 1 directory with 11 updates - #2580
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
Codex Review Summary: ✅ CompletedThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
b6aa6bd to
bd7a3cd
Compare
… 11 updates Bumps the cargo-minor-patch group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.18.2` | `1.19.0` | | [pest](https://github.com/pest-parser/pest) | `2.8.5` | `2.9.5` | | [napi](https://github.com/napi-rs/napi-rs) | `3.15.0` | `3.16.1` | | [napi-derive](https://github.com/napi-rs/napi-rs) | `3.6.13` | `3.7.0` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `3.7.0` | `3.9.0` | | [rustix](https://github.com/bytecodealliance/rustix) | `1.1.5` | `1.1.6` | | [russh](https://github.com/warp-tech/russh) | `0.65.0` | `0.65.1` | | [signal-hook](https://github.com/vorner/signal-hook) | `0.4.5` | `0.4.6` | | [ureq](https://github.com/algesten/ureq) | `3.5.0` | `3.5.1` | | [uuid](https://github.com/uuid-rs/uuid) | `1.28.0` | `1.29.0` | | [wat](https://github.com/bytecodealliance/wasm-tools) | `1.262.0` | `1.263.0` | Updates `aws-lc-rs` from 1.18.2 to 1.19.0 - [Release notes](https://github.com/aws/aws-lc-rs/releases) - [Commits](aws/aws-lc-rs@v1.18.2...v1.19.0) Updates `pest` from 2.8.5 to 2.9.5 - [Release notes](https://github.com/pest-parser/pest/releases) - [Commits](pest-parser/pest@v2.8.5...v2.9.5) Updates `napi` from 3.15.0 to 3.16.1 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-v3.15.0...napi-v3.16.1) Updates `napi-derive` from 3.6.13 to 3.7.0 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-derive-v3.6.13...napi-derive-v3.7.0) Updates `rmcp` from 3.7.0 to 3.9.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v3.7.0...rmcp-v3.9.0) Updates `rustix` from 1.1.5 to 1.1.6 - [Release notes](https://github.com/bytecodealliance/rustix/releases) - [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md) - [Commits](bytecodealliance/rustix@v1.1.5...v1.1.6) Updates `russh` from 0.65.0 to 0.65.1 - [Release notes](https://github.com/warp-tech/russh/releases) - [Commits](Eugeny/russh@v0.65.0...v0.65.1) Updates `signal-hook` from 0.4.5 to 0.4.6 - [Changelog](https://github.com/vorner/signal-hook/blob/master/CHANGELOG.md) - [Commits](vorner/signal-hook@v0.4.5...v0.4.6) Updates `ureq` from 3.5.0 to 3.5.1 - [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md) - [Commits](algesten/ureq@3.5.0...3.5.1) Updates `uuid` from 1.28.0 to 1.29.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.28.0...v1.29.0) Updates `wat` from 1.262.0 to 1.263.0 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](bytecodealliance/wasm-tools@v1.262.0...v1.263.0) --- updated-dependencies: - dependency-name: aws-lc-rs dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: napi dependency-version: 3.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: napi-derive dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: pest dependency-version: 2.9.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: rmcp dependency-version: 3.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: russh dependency-version: 0.65.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: rustix dependency-version: 1.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: signal-hook dependency-version: 0.4.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: ureq dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: wat dependency-version: 1.263.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
bd7a3cd to
8ff3c7f
Compare
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 8ff3c7f4d0
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| [[package]] | ||
| name = "aws-lc-rs" | ||
| version = "1.18.2" | ||
| version = "1.19.0" |
There was a problem hiding this comment.
For builds using the workspace FIPS backend for field encryption and JWT verification, this now selects aws-lc-rs 1.19.0 and aws-lc-sys 0.47.0, while release/notes/dependency-vetting-aws-lc-fips.md accepts only 1.18.2/0.46.0 and explicitly requires repeating the review whenever the locked version, checksum, or dependency graph changes. Accepting this bump without updating that review leaves the cryptographic release dependency outside the recorded source, feature, transitive, advisory, and FIPS-posture analysis.
AGENTS.md reference: AGENTS.md:L409-L415
Useful? React with 👍 / 👎.
| rustix = { version = "1", features = ["fs", "process"] } | ||
| # SSH uses AWS-LC ciphers and RustCrypto KEX/signatures, not whole-session FIPS. | ||
| russh = { version = "=0.65.0", default-features = false, features = ["aws-lc-rs"] } | ||
| russh = { version = "=0.65.1", default-features = false, features = ["aws-lc-rs"] } |
There was a problem hiding this comment.
When the Adapter job is built with job-sftp, this changes its in-process authentication and host-key transport from the exactly reviewed russh 0.65.0 to 0.65.1, but release/notes/dependency-vetting-adapter-job-transports.md still accepts and inventories only 0.65.0. Re-run and record the source, license, advisory, feature, and transitive-risk review for 0.65.1 before moving this security-sensitive exact pin.
AGENTS.md reference: AGENTS.md:L409-L415
Useful? React with 👍 / 👎.
Bumps the cargo-minor-patch group with 11 updates in the / directory:
1.18.21.19.02.8.52.9.53.15.03.16.13.6.133.7.03.7.03.9.01.1.51.1.60.65.00.65.10.4.50.4.63.5.03.5.11.28.01.29.01.262.01.263.0Updates
aws-lc-rsfrom 1.18.2 to 1.19.0Release notes
Sourced from aws-lc-rs's releases.
... (truncated)
Commits
5d496f8Prepare aws-lc-rs v1.19.0 (#1278)d099134Feat: Add the ability to specify an RSA-PSS salt length (#1267)b639322feat(signature): implement Clone for signing key pairs (#1277)7548d5cPrepare aws-lc-sys v0.47.0 (#1274)a5862bdPrepare aws-lc-fips-sys v0.14.4 (#1275)9bba3fbperf(builder): share cc's compiler detection across builds (#1273)6a66144Add Keccak-256 digest algorithm (unstable) (#1266)cf4f62bfeat(fips): add on-demand AWS-LC self-test API (#1262)825d0e3feat: support AES OFB, CFB8 and CFB1 modes (#1259)c225ce4Lower minimum system AWS-LC to 4.2.0 and add anunstablefloor (#1268)Updates
pestfrom 2.8.5 to 2.9.5Release notes
Sourced from pest's releases.
... (truncated)
Commits
c474eecmake stacker-based checks opt-in on non-native targets (#1234) (fixes #1233)66a059cFix typos in the three-string fast path of skip_until (#1231)b4882advalidator: reject repetitions that loop because of the stack (#1227) (fixes 1...7e779b7add Cargo.lock for reproducible builds (fixes #1161) (#1230)4248cbdbump version to 2.9.3 (#1228)429e893Limit parse depth (#1212)3cdfaceDetect left recursion behind a prefix that can match empty (fixes #411) (#1211)9124917Add AI contribution and usage policy (#1221)9abf9e5bump syn to 3 (#1210)acf7fd9Remove reqwest dependency from pest_debugger (#1209)Updates
napifrom 3.15.0 to 3.16.1Release notes
Sourced from napi's releases.
Commits
417375achore: release (#3671)9ffcf8dbuild(deps): bump qs from 6.16.0 to 6.17.1 (#3669)8a89547fix(napi): avoid a deadlock when a worker loads the addon duringblock_on(...eec0c64chore(deps): update dependency oxfmt to ^0.75.0 (#3660)f89400dchore: release (#3637)192cbaachore(deps): update dependency@types/inquirerto v10 (#3668)9188219chore(deps): update dependency electron to v45 (#3634)1d93a4efix(napi): compact class identity metadata (#3667)e9de902fix(napi): keep the registered classes when a later load fails (#3666)cad7ff7feat(napi): support well-known symbol keys for class members (#3665)Updates
napi-derivefrom 3.6.13 to 3.7.0Release notes
Sourced from napi-derive's releases.
Commits
f89400dchore: release (#3637)192cbaachore(deps): update dependency@types/inquirerto v10 (#3668)9188219chore(deps): update dependency electron to v45 (#3634)1d93a4efix(napi): compact class identity metadata (#3667)e9de902fix(napi): keep the registered classes when a later load fails (#3666)cad7ff7feat(napi): support well-known symbol keys for class members (#3665)c01ce60fix(napi): free define_class closures, honour static flags, avoid TS1016 in c...5a49dadfeat(napi): support symbol_for keys for class members (#3661)0c58903fix(napi): free threadsafe function call data when the call fails (#3656)ada66a3chore(deps): update release-plz/action action to v0.5.147 (#3659)Updates
rmcpfrom 3.7.0 to 3.9.0Release notes
Sourced from rmcp's releases.
... (truncated)
Commits
5596a8achore: release v3.9.0 (#1403)429524dfix(model): don't treat _meta alone as a CallToolResult (#1405)e7d201ftest(transport): fix spell-check failures in response-limit tests (#1432)3e0156cMerge commit from forkd66a74dfix(client): keep ProgressDispatcher lock off the await path (#1310)09d29d9fix(auth): refresh with only granted scopes (#1331)8878a79fix: streamable-http server: stateful session workers ignore config.canc (#1427)3fc54d0fix(skills): enforce manifest boundaries and capability negotiation (#1412)b166e81fix(transport): send SIGTERM before killing a child process on graceful shutd...df2af23fix(handler): generate a tool's outputSchema for the serialize contract (#1378)Updates
rustixfrom 1.1.5 to 1.1.6Commits
4a563adchore: Release rustix version 1.1.68e6aaa6Merge commit from fork4686873fix: expose additional termios output mode flags (#1709)c9ad9d3fix(net): don't trustcmsg_lenpast the end of a truncated control buffer (...98358afAvoid constructing a zero Pid in tcgetpgrp on non-Linux targets (#1710)664aeaefix(net): use IPPROTO_IPV6 for IPV6_MULTICAST_HOPS (#1692)bf78ee6freebsd: Fix cfg gates for FreeBSD 12 (#1707)b3d81bdFixfallocateon Apple platforms. (#1708)915ab6ffix(fs): Set properinotifyWatchFlagsvalues onlibcbackend (#1714)52d5db7Use 32-bit UID/GID syscalls on arm, sparc, and x86 (#1716)Updates
russhfrom 0.65.0 to 0.65.1Release notes
Sourced from russh's releases.
Commits
b33092av0.65.120c5a93fix(keys): keep the comment when loading a public key file (#801)3a21566fix(client): accept non-canonical ECDSA P-521 signature mpints after strict d...a6be9bafix(cipher): count the MAC tag in the minimum packet length check (#802)43a46d6fix(AgentClient): propagate method errors (#808)56384e6add Eric-D as a contributor for code (#799)7c59594fix(server): let Dropbear through strict kex by accounting for the ignored fi...d10345ddeps: trim aws-lc-rs features to avoid transitive deps (#809)0a8cc28deps: remove dep on generic-array 0.14 compat (#810)92562d3tests: adapt to VerifiedPublicKey after #785 (#807)Updates
signal-hookfrom 0.4.5 to 0.4.6Changelog
Sourced from signal-hook's changelog.
Commits
0a1de6bVersion 0.4.6ae4ece5Merge pull request #215 from Frost-54/static-atomic-unsafe-trait48b56d5Deps updatesfd51cdeAllow &'static AtomicBool in flag module - #213Updates
ureqfrom 3.5.0 to 3.5.1Changelog
Sourced from ureq's changelog.
Commits
33ca9d33.5.1d1b194cBump ureq-proto to 0.7.181d1b40Bump ureq-proto to 0.7.00cbee9adocs: clarify body read limit defaults (#1223)f92baaeSend only cookie names and values in the Cookie headerf60896dPreserve readable responses after macOS timeout setter failuresUpdates
uuidfrom 1.28.0 to 1.29.0Release notes
Sourced from uuid's releases.
Commits
4643e60Merge pull request #920 from uuid-rs/cargo/v1.29.0a3631fdprepare for 1.29.0 release304913eMerge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901d49f963Reuse existing version tests for NonNilUuid constructors2f02404Add versioned constructors to NonNilUuidUpdates
watfrom 1.262.0 to 1.263.0Release notes
Sourced from wat's releases.
Commits
7a2fa42Release wasm-tools 1.263.0 (#2803)e5095e9wasm-wave: require commas between record/flag/map entries per the grammar (#2...25a937awit-parser: fix panics decoding WIT from components (#2794)e6e6991Implement the multibyte-array-access proposal (#2800)cc0d3b7wast: parse core rec groups in component and instance types (#2798)24de91cwasmprinter: fix outer aliases that print unparsable or shadowed identifiers ...23dc76bImplement the acquire-release-atomics proposal (#2799)ebcc07cPlumb wasm features through reencoding/printing (#2797)2e6b2d6Reject handles in the value types of maps (#2791)8c7a8e6Move recursion inwasmprinterto the heap (#2790)