Skip to content

chore(deps): bump the patch-versions group with 5 updates#6410

Merged
hanabi1224 merged 2 commits intomainfrom
dependabot/cargo/patch-versions-0490b5bf2a
Jan 13, 2026
Merged

chore(deps): bump the patch-versions group with 5 updates#6410
hanabi1224 merged 2 commits intomainfrom
dependabot/cargo/patch-versions-0490b5bf2a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jan 13, 2026

Bumps the patch-versions group with 5 updates:

Package From To
async-compression 0.4.36 0.4.37
blake2b_simd 1.0.3 1.0.4
data-encoding-macro 0.1.18 0.1.19
flate2 1.1.5 1.1.8
assert_cmd 2.1.1 2.1.2

Updates async-compression from 0.4.36 to 0.4.37

Commits

Updates blake2b_simd from 1.0.3 to 1.0.4

Commits
  • 6a94ae2 version 1.0.4
  • dc3b8c8 don't try to build libfuzzer-sys outside of Linux
  • 5d4ae82 edition 2024
  • 9e1713c fix a deprecated function warning in tests
  • cc018d5 update outdated dependencies
  • e35c74c Update constant_time_eq from 0.3.0 to 0.4.2
  • 82b3e2a macOS runners are AArch64 now, not x86
  • 687a41e update duct to v1.0.0
  • ae455a3 update blake2 --help output in blake2_bin/README.md
  • See full diff in compare view

Updates data-encoding-macro from 0.1.18 to 0.1.19

Commits

Updates flate2 from 1.1.5 to 1.1.8

Release notes

Sourced from flate2's releases.

1.1.8

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.7...1.1.8

1.1.7 - depend on zlib-rs directly and remove libz-rs-sys

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.5...1.1.6

1.1.6 - YANKED

It caused rust-lang/flate2-rs#515.

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.5...1.1.6

Commits
  • 8b66c27 Merge pull request #525 from Byron/test-zlib-API
  • 5e752c9 Address PR review
  • 3196dd0 refactor internal feature toggles to better represent the status quo
  • 106cbcc Bump patch level in preparation for release
  • af7a0b3 Add capabilties test for functions reserved to zlib-implementations.
  • 22c77ee Describe unreachable!("...") branch in Deflate::set_level() of zlib-rs
  • b9e2979 Remove C-binding specific restriction from CI for zlib-rs test.
  • 71eb5c5 Merge pull request #524 from Byron/complete-zlib-rs
  • fec67eb zlib-rs: support set_dictionary and set_level
  • ecfdc2d update zlib-rs to 0.5.5
  • Additional commits viewable in compare view

Updates assert_cmd from 2.1.1 to 2.1.2

Changelog

Sourced from assert_cmd's changelog.

[2.1.2] - 2026-01-09

Fixes

  • Add #[must_use] to help catch missing assertions
Commits
  • edda0b2 chore: Release assert_cmd version 2.1.2
  • 891d412 docs: Update changelog
  • e39dc36 Merge pull request #267 from epage/must
  • d947cb0 fix: Add must_use before assertions are applied
  • 7b8fd99 Merge pull request #264 from kemingy/doc_macro_semicolon
  • 79f8e57 docs: add the missing semicolon for macro
  • 6289384 chore(deps): Update Rust Stable to v1.92 (#262)
  • 7b353d8 Merge pull request #260 from assert-rs/renovate/actions-checkout-6.x
  • 48cda51 chore(deps): Update actions/checkout action to v6
  • ee88946 docs: Clarify cargo_bin_cmd
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • Updated development dependencies to latest versions.

✏️ Tip: You can customize this high-level summary in your review settings.

Bumps the patch-versions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [async-compression](https://github.com/Nullus157/async-compression) | `0.4.36` | `0.4.37` |
| [blake2b_simd](https://github.com/oconnor663/blake2_simd) | `1.0.3` | `1.0.4` |
| [data-encoding-macro](https://github.com/ia0/data-encoding) | `0.1.18` | `0.1.19` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.5` | `1.1.8` |
| [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.1.1` | `2.1.2` |


Updates `async-compression` from 0.4.36 to 0.4.37
- [Release notes](https://github.com/Nullus157/async-compression/releases)
- [Commits](Nullus157/async-compression@async-compression-v0.4.36...async-compression-v0.4.37)

Updates `blake2b_simd` from 1.0.3 to 1.0.4
- [Commits](oconnor663/blake2_simd@1.0.3...1.0.4)

Updates `data-encoding-macro` from 0.1.18 to 0.1.19
- [Commits](https://github.com/ia0/data-encoding/commits)

Updates `flate2` from 1.1.5 to 1.1.8
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.5...1.1.8)

Updates `assert_cmd` from 2.1.1 to 2.1.2
- [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_cmd@v2.1.1...v2.1.2)

---
updated-dependencies:
- dependency-name: async-compression
  dependency-version: 0.4.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-versions
- dependency-name: blake2b_simd
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-versions
- dependency-name: data-encoding-macro
  dependency-version: 0.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-versions
- dependency-name: flate2
  dependency-version: 1.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-versions
- dependency-name: assert_cmd
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 13, 2026
@dependabot dependabot Bot requested a review from a team as a code owner January 13, 2026 00:22
@dependabot dependabot Bot requested review from LesnyRumcajs and akaladarshi and removed request for a team January 13, 2026 00:22
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jan 13, 2026
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Jan 13, 2026

Walkthrough

This pull request updates the ra_ap_syntax dev-dependency in Cargo.toml from version 0.0.312 to 0.0.315, a minor patch version bump of the rust-analyzer syntax parsing library.

Changes

Cohort / File(s) Summary
Dependency version bump
Cargo.toml
Updated ra_ap_syntax dev-dependency from 0.0.312 to 0.0.315 in the [dev-dependencies] section

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

Suggested reviewers

  • LesnyRumcajs
  • akaladarshi
🚥 Pre-merge checks | ✅ 2 | ❌ 1
❌ Failed checks (1 warning)
Check name Status Explanation Resolution
Title check ⚠️ Warning The title states 5 updates but the raw summary only shows 1 change (ra_ap_syntax bump), creating a discrepancy between stated and actual changes. Verify whether the raw summary is incomplete or the PR title is inaccurate. If multiple updates exist, ensure the raw summary reflects all changes; otherwise, correct the title to match actual changes.
✅ Passed checks (2 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


📜 Recent review details

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between e12b107 and ad87e87.

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • Cargo.toml
🧰 Additional context used
🧠 Learnings (1)
📚 Learning: 2025-08-08T12:10:45.218Z
Learnt from: hanabi1224
Repo: ChainSafe/forest PR: 5867
File: src/ipld/util.rs:553-558
Timestamp: 2025-08-08T12:10:45.218Z
Learning: Forest pins Rust toolchain to 1.89.0 via rust-toolchain.toml; features stabilized in 1.88 (e.g., let-chains) are acceptable in this codebase.

Applied to files:

  • Cargo.toml
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (8)
  • GitHub Check: Build MacOS
  • GitHub Check: Build Ubuntu
  • GitHub Check: cargo-publish-dry-run
  • GitHub Check: tests-release
  • GitHub Check: Build forest binaries on Linux AMD64
  • GitHub Check: Coverage
  • GitHub Check: All lint checks
  • GitHub Check: rubocop
🔇 Additional comments (1)
Cargo.toml (1)

257-257: PR objectives mismatch with actual changes.

The PR description mentions bumping async-compression, blake2b_simd, data-encoding-macro, flate2, and assert_cmd, but this file only shows a ra_ap_syntax version bump (0.0.312 → 0.0.315). The other crates use flexible version specs, so their patch bumps would appear in Cargo.lock rather than here.

The ra_ap_syntax dev-dependency update itself looks fine—it's a routine version bump for the rust-analyzer syntax parsing library used in tests.

Please confirm:

  1. The Cargo.lock file includes the 5 crate bumps mentioned in the PR objectives.
  2. Tests pass with the updated ra_ap_syntax version.

Comment @coderabbitai help to get the list of available commands and usage tips.

@codecov
Copy link
Copy Markdown

codecov Bot commented Jan 13, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 58.49%. Comparing base (e12b107) to head (ad87e87).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

see 17 files with indirect coverage changes


Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update e12b107...ad87e87. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@hanabi1224 hanabi1224 enabled auto-merge January 13, 2026 01:22
@hanabi1224 hanabi1224 added this pull request to the merge queue Jan 13, 2026
Merged via the queue into main with commit 2a4870b Jan 13, 2026
42 checks passed
@hanabi1224 hanabi1224 deleted the dependabot/cargo/patch-versions-0490b5bf2a branch January 13, 2026 09:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants