Skip to content

build: bump transitive dependencies - #509

Closed
2bndy5 wants to merge 1 commit into
mainfrom
update-trans-deps
Closed

2bndy5 wants to merge 1 commit into
mainfrom
update-trans-deps

Conversation

@2bndy5

@2bndy5 2bndy5 commented Oct 19, 2026 •

Copy link
Copy Markdown
Collaborator

Ran cargo update (for pinned deps in Cargo.lock) and upgraded some other direct dependencies.

FYI, I have to do this every once in a while because dependabot does not touch much beyond the Cargo.lock file (leaving Cargo.toml files outdated).

Should also resolve a security issue about rustls: https://github.com/cpp-linter/cpp-linter-rs/security/dependabot/102

Summary by CodeRabbit

  • Chores
    • Updated component versions across the project and its supporting tools as part of routine maintenance.
    • These updates do not change the features or behavior available in the product.

Ran `cargo update` (for pinned deps in Cargo.lock) and upgraded some other direct dependencies.

FYI, I have to do this every once in a while because dependabot does not touch much beyond the Cargo.lock file (leaving Cargo.toml files outdated).

Should also resolve a security issue about `rustls`:
https://github.com/cpp-linter/cpp-linter-rs/security/dependabot/102
@2bndy5 2bndy5 added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 19, 2026
@coderabbitai

coderabbitai Bot commented Oct 19, 2026

Copy link
Copy Markdown
Contributor

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Repository UI (base), Organization UI (inherited)
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 46679e56-7c48-49cc-ad43-87918dead491
📥 Commits

Reviewing files that changed from the base of the PR and between ab28a16 and b7ef7ee.

⛔ Files ignored due to path filters: 1
  • Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing: 4
  • Cargo.toml
  • bindings/node/Cargo.toml
  • clang-tools-manager/Cargo.toml
  • cpp-linter/Cargo.toml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Walkthrough

The pull request updates dependency versions in the workspace manifest and three package manifests. It does not change the reported dependency features or other manifest settings.

Changes: Dependency version updates

Layer / File(s) Summary
Update dependency versions
Cargo.toml, cpp-linter/Cargo.toml, clang-tools-manager/Cargo.toml, bindings/node/Cargo.toml
The manifests specify updated versions for workspace and package dependencies. The reported feature configurations and other settings remain unchanged.

Priority: ➖ Normal

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: ⚪ Minimal · up to b7ef7

The dependency update moves rustls to the inspected advisory's patched version. No actionable merge-blocking risk is established by the changes.

Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly describes the primary change: updating dependency versions. It is concise and relevant, although the changes also include direct dependencies.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (4 skipped: 4 unsupported.)

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codecov

codecov Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.41%. Comparing base (f0d6f08) to head (b7ef7ee).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #509   +/-   ##
=======================================
  Coverage   99.41%   99.41%           
=======================================
  Files          28       28           
  Lines        6487     6487           
=======================================
  Hits         6449     6449           
  Misses         38       38           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@2bndy5

2bndy5 commented Oct 19, 2026

Copy link
Copy Markdown
Collaborator Author

signed and merged in 4cb2e2c

I also turned on automatic commit signing locally. Should help with merging branches/PRs where a single commit is already signed.

@2bndy5 2bndy5 closed this Oct 19, 2026
@2bndy5
2bndy5 deleted the update-trans-deps branch October 19, 2026 06:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant