Bump aws-credential-types from 1.2.13 to 1.2.14#789
Bump aws-credential-types from 1.2.13 to 1.2.14#789dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
Greptile SummaryThis is a routine Dependabot patch-level version bump for
Confidence Score: 5/5
|
| Filename | Overview |
|---|---|
| applications/data_manager/Cargo.toml | Bumps aws-credential-types from 1.2.13 to 1.2.14; no structural or dependency tree changes. |
| Cargo.lock | Lock file updated with new version (1.2.14) and checksum for aws-credential-types; all transitive dependencies remain unchanged. |
Last reviewed commit: 0ce37e9
There was a problem hiding this comment.
Pull request overview
This PR updates the aws-credential-types Rust crate dependency for the applications/datamanager crate from 1.2.13 to 1.2.14, and refreshes the lockfile accordingly.
Changes:
- Bump
aws-credential-typesfrom1.2.13to1.2.14inapplications/datamanager/Cargo.toml - Update
Cargo.lockto reflect the newaws-credential-typesversion and checksum
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| applications/datamanager/Cargo.toml | Updates the direct dependency version to 1.2.14. |
| Cargo.lock | Locks aws-credential-types to 1.2.14 with the updated checksum. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Bumps [aws-credential-types](https://github.com/smithy-lang/smithy-rs) from 1.2.13 to 1.2.14. - [Release notes](https://github.com/smithy-lang/smithy-rs/releases) - [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-rs/commits) --- updated-dependencies: - dependency-name: aws-credential-types dependency-version: 1.2.14 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
8fe1b1a to
0ce37e9
Compare
…, #798 Updated direct dependencies in applications/data_manager/Cargo.toml: - sentry 0.35 -> 0.47 and sentry-tower 0.35 -> 0.47: large jump across multiple releases; CI passed on the Dependabot PR confirming no breaking API usage. Updated SentryHttpLayer::with_transaction() (deprecated since 0.38) to SentryHttpLayer::new().enable_transaction() in router.rs. - duckdb 1.4.3 -> 1.10500.0: new versioning scheme (encodes bundled DuckDB v1.5.0). The Dependabot PR had a CI failure; build and all 18 tests pass locally with the updated version. - aws-config 1.5 -> 1.8.15 and aws-credential-types 1.2.13 -> 1.2.14: patch updates with no breaking changes. Transitive security fixes pulled in via Cargo.lock regeneration: - quinn-proto 0.11.13 -> 0.11.14: fixes DoS vulnerability GHSA-6xvm-j4wr-6v98 - tar 0.4.44 -> 0.4.45: fixes symlink-directory collision chmod attack Closes #788, #789, #794, #795, #798 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
Addressed in pull request #799. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Bumps aws-credential-types from 1.2.13 to 1.2.14.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)