Skip to content

build(deps): bump sha2 from 0.11.0 to 0.11.1 - #162

Merged
aesslinger merged 2 commits into
mainfrom
dependabot/cargo/sha2-0.11.1
Oct 22, 2026
Merged

aesslinger merged 2 commits into
mainfrom
dependabot/cargo/sha2-0.11.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps sha2 from 0.11.0 to 0.11.1.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.11.0 to 0.11.1.
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

---
updated-dependencies:
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from aesslinger as a code owner October 21, 2026 19:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 21, 2026
@aesslinger aesslinger self-assigned this Oct 22, 2026
@aesslinger aesslinger added the prerelease:rc Version suggestion targets a release candidate label Oct 22, 2026
@aesslinger
aesslinger merged commit 6659684 into main Oct 22, 2026
6 of 7 checks passed
@aesslinger
aesslinger deleted the dependabot/cargo/sha2-0.11.1 branch October 22, 2026 12:50
aesslinger added a commit that referenced this pull request Oct 22, 2026
Bumps version to 1.0.0-rc.11 in Cargo.toml, Cargo.lock, .tabularium, and
CHANGELOG.md.

### Included since rc.10

**Fixed:**
- Transaction-pooler result-set queries on non-builtin column types no longer hang or error (#160, #163) — pinned one-shot transaction path for pooler_mode=transaction: BEGIN pins the backend, DEALLOCATE ALL clears stale statements, prepare resolves column types while pinned, unnamed query_typed runs the data fetch, one-shot client is discarded so its type cache dies with the connection; bounded by a 90s plugin-side timeout
- One-shot pool path skips the redundant startup-script preflight (post_create hook already validates the script with the same error shape)
- pooler_mode is trimmed before the transaction comparison (matching startup_script), so whitespace can't silently bypass the pinned path

**Changed:**
- format_query_error now emits pooler guidance on all 26000/42P05 errors, not only when pooler_mode=transaction is set — is_transaction_pooler selects the phrasing (definitive vs conditional), so older hosts that can't send the field still see the hint

**Security:**
- Bumped rustls-webpki (0.103.15 -> 0.103.16) and webpki-root-certs (1.0.9 -> 1.0.10) to clear the emSign root-cert advisories; cargo audit now reports zero vulnerabilities

**Dependencies:**
- tokio 1.53.2 -> 1.53.3 (#161); sha2 0.11.0 -> 0.11.1 (#162)
aesslinger added a commit that referenced this pull request Oct 22, 2026
Bumps version to 1.0.0-rc.11 in Cargo.toml, Cargo.lock, .tabularium, and
CHANGELOG.md.

### Included since rc.10

**Fixed:**
- Transaction-pooler result-set queries on non-builtin column types no longer hang or error (#160, #163) — pinned one-shot transaction path for pooler_mode=transaction: BEGIN pins the backend, DEALLOCATE ALL clears stale statements, prepare resolves column types while pinned, unnamed query_typed runs the data fetch, one-shot client is discarded so its type cache dies with the connection; bounded by a 90s plugin-side timeout
- One-shot pool path skips the redundant startup-script preflight (post_create hook already validates the script with the same error shape)
- pooler_mode is trimmed before the transaction comparison (matching startup_script), so whitespace can't silently bypass the pinned path

**Changed:**
- format_query_error now emits pooler guidance on all 26000/42P05 errors, not only when pooler_mode=transaction is set — is_transaction_pooler selects the phrasing (definitive vs conditional), so older hosts that can't send the field still see the hint

**Security:**
- Bumped rustls-webpki (0.103.15 -> 0.103.16) and webpki-root-certs (1.0.9 -> 1.0.10) to clear the emSign root-cert advisories; cargo audit now reports zero vulnerabilities

**Dependencies:**
- tokio 1.53.2 -> 1.53.3 (#161); sha2 0.11.0 -> 0.11.1 (#162)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file prerelease:rc Version suggestion targets a release candidate rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant