build(deps): bump rpassword from 7.4.0 to 7.5.0 by dependabot[bot] · Pull Request #6 · paddleboarddev/paddleboard

dependabot · 2026-05-08T14:18:15Z

Bumps rpassword from 7.4.0 to 7.5.0.

Release notes

v7.5.0

This release comes with lots of stuff. It should be fully backward compatible.

New features

Support for masking or partially masking a password as it's being typed. Thank you, @chipsenkbeil, for your contribution.

New API. The documentation has been vastly improved to support this, see https://docs.rs/rpassword/. To sum up, you can now call read_password_with_config(config) and there is a ConfigBuilder that allows you to configure how passwords should be read. This makes the library much more flexible and means new options will be added without breaking existing code.

Fixes

Fix for CVE-2025-64170 which affects rpassword on versions v7.4.0 and below. Thank you, @squell and @DevLaTron, for reporting this.

Better support for multibyte characters and more reliable handling of control characters and terminal escape sequences. Thank you again, @chipsenkbeil, for your contribution.

Deprecations

_from_bufread functions have been deprecated. You are encouraged to migrate to _with_config functions. See UPGRADE.md as well as the documentation which has examples that you can most likely drop into your code without other changes.

Misc

Update of the windows-sys dependency.

Update Rust edition from 2018 to 2024.

Better cross-platform testing, through more unit tests and a CI that runs Linux, Windows and Wasm.

Feedback is very much welcome.

Commits

2d9873e release v7.5.0
e67e3b4 removes commented out code
fdde958 remove .idea from .gitignore
d531c59 allow reading from any Read and writing to any Write
205dfb2 differentiate Input and Output targets
6aa333a make PasswordFeedback internal though ConfigBuilder
aadeef2 allow more flexible input/output
ff7be55 add support for Ctrl-W
c56fefa format rust files with cargo fmt
c6f4f19 handle character encodings more reliably
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [rpassword](https://github.com/conradkleinespel/rpassword) from 7.4.0 to 7.5.0. - [Release notes](https://github.com/conradkleinespel/rpassword/releases) - [Commits](conradkleinespel/rpassword@v7.4.0...v7.5.0) --- updated-dependencies: - dependency-name: rpassword dependency-version: 7.5.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-13T17:27:26Z

Looks like rpassword is up-to-date now, so this is no longer needed.

… → 17) Clusters #1-#5 step 3 of the PR #37 upstream-merge cleanup, bundled together since the changes do not compile independently. Net: 16-error cluster #5 punch list resolved, plus the prior 510 → 16 reductions from clusters #1-4. Cluster #1: php/swift LSP-adapter trait conversions Cluster #2: editor.rs vs extracted-module duplicate-method deletion (-4247 lines) Cluster #3 + small wins: zed_actions → paddleboard_actions rename and isolated 1-offs Cluster #5 step 1+2: cloud.rs import cleanup + dead Zed-Cloud token-counting deletion Cluster #5 step 3: residual cloud.rs renames, EditPredictionPromptFormat, async-tungstenite 0.31 → 0.34.1 (resolves jupyter-websocket-client type mismatch), copilot_start_menu restoration. Remaining: 17 errors all in `agent` crate (newly visible now that language_models compiles). Cluster #6 punch list captured in RECAPS.md. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

…rrors) Cluster #6 of the PR #37 upstream-merge cleanup. With cluster #5 done and language_models compiling, the agent crate became checkable and surfaced 17 errors driven by the agent_client_protocol 0.12.x split into a thin top-level crate plus agent-client-protocol-schema-0.13.x. Only a narrow set of types stayed re-exported at the root; the rest moved into `agent_client_protocol::schema`. Fixes: - Re-route `agent_client_protocol as acp` to `agent_client_protocol::schema as acp` in sandbox_tool.rs, sandbox_service_tool.rs, and agent_ui/thread_history.rs. - Restore crates/agent/src/tools/tool_edit_parser.rs from PB main (PB-only file that did not survive the upstream merge). - Drop 5 dead tool imports from thread.rs (NowTool, OpenTool, RestoreFileFromDiskTool, SaveFileTool, StreamingEditFileTool — removed upstream, never referenced after the import). - Add `kind: AuthorizationKind::PermissionGrant` to the step-mode ToolCallAuthorization initializer (new required field upstream). - Wrap two `LanguageModelToolResultContent::Text(...)` literals in `vec![...]` to match the field's `Vec<...>` type. - Replace `AgentToolOutput::from_error("...")` with `AgentToolOutput::from(anyhow::anyhow!("..."))` (method was removed in favor of the `From<anyhow::Error>` impl). - Rewrite the `if let LanguageModelToolResultContent::Image(_) = &output.llm_output` checks to iterate the Vec, since llm_output is no longer a single enum. Remaining: 41 errors in agent_ui (cluster #7). Punch list in RECAPS.md. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Cluster #9 of the PR #37 upstream-merge cleanup. Resolves all `./script/clippy` errors (clippy --workspace --release --all-targets --all-features --deny warnings), confirms the debug binary links, and smoke-tests `--system-specs` to exercise the startup path. Cleanups: - Delete language_model/{rate_limiter,role}.rs (PB shadows of the canonical language_model_core::* re-exports — confirmed unused). - Delete agent/tools/tool_edit_parser.rs (ToolEditParser was unused anywhere; restored in cluster #6 only to silence the missing-mod error, but the `mod` declaration was orphaned). - Rename ZED_PREDICT_DATA_COLLECTION_CHOICE → PADDLEBOARD_… in edit_prediction_tests.rs (7 sites; runtime code already renamed). - Switch Command::spawn / Command::output to util::command helpers in paddleboard_sandbox_prereqs_ui and repl/podman_kernel (the podman_kernel one is in Drop, so wrapped in #[allow(clippy::disallowed_methods)] with explanatory comment). - `#[allow(dead_code)]` for the PB history-panel infrastructure (ActiveView::History, AgentPanel history methods, branch_names.rs, thread_history.rs, thread_history_view.rs). The action handler isn't wired up yet — followup tracked in RECAPS.md. - Add Agent::Stub match arm to has_history_for_selected_agent for the `test-support` feature shape. - 24 misc lint cleanups: 5× redundant clones, 6× unused imports, 3× pre-existing dead-code allows, 1× sort_by_key simplification, 3× unused-variable underscoring in conversation_view/thread_view.rs. - Add smol to agent_ui's dev-dependencies (used in TestSessionList). - Add util to paddleboard_sandbox_prereqs_ui's deps. Verified: - `./script/clippy` finishes successfully (release profile, all-targets, all-features, deny warnings). - `cargo build -p paddleboard` finishes successfully in 1m 41s on macOS. - `./target/debug/paddleboard --system-specs` boots cleanly and prints PaddleBoard v0.232.0+dev.3a592ef18 system-specs output. PR #37 is ready to flip from draft to ready-for-review. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

… → 17) Clusters #1-#5 step 3 of the PR #37 upstream-merge cleanup, bundled together since the changes do not compile independently. Net: 16-error cluster #5 punch list resolved, plus the prior 510 → 16 reductions from clusters #1-4. Cluster #1: php/swift LSP-adapter trait conversions Cluster #2: editor.rs vs extracted-module duplicate-method deletion (-4247 lines) Cluster #3 + small wins: zed_actions → paddleboard_actions rename and isolated 1-offs Cluster #5 step 1+2: cloud.rs import cleanup + dead Zed-Cloud token-counting deletion Cluster #5 step 3: residual cloud.rs renames, EditPredictionPromptFormat, async-tungstenite 0.31 → 0.34.1 (resolves jupyter-websocket-client type mismatch), copilot_start_menu restoration. Remaining: 17 errors all in `agent` crate (newly visible now that language_models compiles). Cluster #6 punch list captured in RECAPS.md. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

…rrors) Cluster #6 of the PR #37 upstream-merge cleanup. With cluster #5 done and language_models compiling, the agent crate became checkable and surfaced 17 errors driven by the agent_client_protocol 0.12.x split into a thin top-level crate plus agent-client-protocol-schema-0.13.x. Only a narrow set of types stayed re-exported at the root; the rest moved into `agent_client_protocol::schema`. Fixes: - Re-route `agent_client_protocol as acp` to `agent_client_protocol::schema as acp` in sandbox_tool.rs, sandbox_service_tool.rs, and agent_ui/thread_history.rs. - Restore crates/agent/src/tools/tool_edit_parser.rs from PB main (PB-only file that did not survive the upstream merge). - Drop 5 dead tool imports from thread.rs (NowTool, OpenTool, RestoreFileFromDiskTool, SaveFileTool, StreamingEditFileTool — removed upstream, never referenced after the import). - Add `kind: AuthorizationKind::PermissionGrant` to the step-mode ToolCallAuthorization initializer (new required field upstream). - Wrap two `LanguageModelToolResultContent::Text(...)` literals in `vec![...]` to match the field's `Vec<...>` type. - Replace `AgentToolOutput::from_error("...")` with `AgentToolOutput::from(anyhow::anyhow!("..."))` (method was removed in favor of the `From<anyhow::Error>` impl). - Rewrite the `if let LanguageModelToolResultContent::Image(_) = &output.llm_output` checks to iterate the Vec, since llm_output is no longer a single enum. Remaining: 41 errors in agent_ui (cluster #7). Punch list in RECAPS.md. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Cluster #9 of the PR #37 upstream-merge cleanup. Resolves all `./script/clippy` errors (clippy --workspace --release --all-targets --all-features --deny warnings), confirms the debug binary links, and smoke-tests `--system-specs` to exercise the startup path. Cleanups: - Delete language_model/{rate_limiter,role}.rs (PB shadows of the canonical language_model_core::* re-exports — confirmed unused). - Delete agent/tools/tool_edit_parser.rs (ToolEditParser was unused anywhere; restored in cluster #6 only to silence the missing-mod error, but the `mod` declaration was orphaned). - Rename ZED_PREDICT_DATA_COLLECTION_CHOICE → PADDLEBOARD_… in edit_prediction_tests.rs (7 sites; runtime code already renamed). - Switch Command::spawn / Command::output to util::command helpers in paddleboard_sandbox_prereqs_ui and repl/podman_kernel (the podman_kernel one is in Drop, so wrapped in #[allow(clippy::disallowed_methods)] with explanatory comment). - `#[allow(dead_code)]` for the PB history-panel infrastructure (ActiveView::History, AgentPanel history methods, branch_names.rs, thread_history.rs, thread_history_view.rs). The action handler isn't wired up yet — followup tracked in RECAPS.md. - Add Agent::Stub match arm to has_history_for_selected_agent for the `test-support` feature shape. - 24 misc lint cleanups: 5× redundant clones, 6× unused imports, 3× pre-existing dead-code allows, 1× sort_by_key simplification, 3× unused-variable underscoring in conversation_view/thread_view.rs. - Add smol to agent_ui's dev-dependencies (used in TestSessionList). - Add util to paddleboard_sandbox_prereqs_ui's deps. Verified: - `./script/clippy` finishes successfully (release profile, all-targets, all-features, deny warnings). - `cargo build -p paddleboard` finishes successfully in 1m 41s on macOS. - `./target/debug/paddleboard --system-specs` boots cleanly and prints PaddleBoard v0.232.0+dev.bd467db14 system-specs output. PR #37 is ready to flip from draft to ready-for-review. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 8, 2026

dependabot Bot closed this May 13, 2026

dependabot Bot deleted the dependabot/cargo/rpassword-7.5.0 branch May 13, 2026 17:27

Navigation Menu

Uh oh!

build(deps): bump rpassword from 7.4.0 to 7.5.0 - #6

build(deps): bump rpassword from 7.4.0 to 7.5.0#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rpassword-7.5.0

dependabot Bot commented on behalf of github May 8, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github May 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.5.0

New features

Fixes

Deprecations

Misc

Uh oh!

dependabot Bot commented on behalf of github May 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 8, 2026 •

edited

Loading