Bump noyalib from 0.0.45 to 0.0.49

[dependabot]

Bumps noyalib from 0.0.45 to 0.0.49.

Release notes

Sourced from noyalib's releases.

noyalib v0.0.49

What's Changed

• test: correct duplicate-key fuzz oracle (82ace16)
• fix: re-export rayon pool types (1ccd33b)
• docs: refresh v0.0.49 scorecard (1fd209d)
• feat: add caller-owned rayon pools (2a80d48)

Checksums

af2a0d7fe1295305ac365ce82d8ef8d6b18d75779a4e381d7bb0703193128c4d  ./noyalib-0.0.49.crate

noyalib v0.0.48

What's Changed

• docs: refresh v0.0.48 scorecard (e8b44ba)
• feat: add strict query paths (c171653)

Checksums

0a34f594fe6ffbc08b0533927243229e61f5d71786c0b747dfc7c49ac74f33ca  ./noyalib-0.0.48.crate

noyalib v0.0.47

What's Changed

• ci: silence release cache cleanup errors (7c07bcb)
• chore: prepare noyalib v0.0.47 (325dc82)
• ci: fix hosted feature sweep (26a9eb6)

Checksums

db0f607bfa182410812a5ee4d90f726a0d8530038bffdc6fe0e20d3e0ee526b7  ./noyalib-0.0.47.crate

noyalib v0.0.46

What's Changed

• refactor: isolate CST path resolution (76f6839)
• ci: refresh pinned workflow actions (3055d0f)
• refactor: isolate CST edit validation (adad17a)
• fix: preserve include error contract (e113a36)
• fix: normalize include read errors (c58da58)
• refactor: isolate filesystem includes (692dac5)
• fix: confine filesystem includes (e6a8d3e)
• feat: add atomic CST edit sessions (2f9a23d)
• fix: preserve CST edit atomicity (cbf1370)
• ci: require clean package sizing (25fdb04)
• fix: bound expanded include nodes (de22276)

... (truncated)

Changelog

Sourced from noyalib's changelog.

[v0.0.49] - 2026-09-22

Added

• Added caller-owned Rayon pool entry points for typed and dynamic multi-document parsing, allowing services to bound worker counts and own thread lifecycle without changing the global pool.

[v0.0.48] - 2026-09-22

Changed

• Advanced the core release surfaces to the next incremental roadmap version.

Added

• Added public, reusable QueryPath parsing with typed error categories, canonical formatting, owned and borrowed value lookups, and strict CST mutation support.
• Added property and fuzz coverage for arbitrary query-path grammar input and canonical display/parse round trips.

[v0.0.47] - 2026-09-21

Fixed

• Kept the documented default feature surface active while the weekly feature-powerset workflow checks every hosted target with each optional feature. This prevents the sweep from failing on an unsupported alloc-only test configuration before it reaches the intended feature matrix.
• Gated the strict-deserialisation regression module at the feature that owns the API and added a gate self-test for the hosted-target contract.
• Kept the release artifact job from caching its transient package target tree, preventing successful releases from emitting misleading cache-cleanup error annotations.

[v0.0.46] - 2026-09-20

Changed

• Split the former integration-test grab bag into eight themed binaries: anchors, conformance, errors, integrations, limits, properties, regressions, and values. Test behaviour is unchanged, but failures and targeted test runs now map directly to a functional area.
• Reworked the README to the workspace-wide canonical structure and retained the complete prior guide in docs/README-REFERENCE.md.
• Bumped the core and ecosystem documentation to the 0.0.46 lockstep release.
• Switched the Rust 2024 workspace to Cargo resolver 3 and pinned every Cargo utility installed by CI.
• Centralized multi-document boundary splitting for async, parallel, and

... (truncated)

Commits

• 3844dd8 Merge pull request #456 from sebastienrousseau/feat/v0.0.49
• 82ace16 test: correct duplicate-key fuzz oracle
• 1ccd33b fix: re-export rayon pool types
• 1fd209d docs: refresh v0.0.49 scorecard
• 2a80d48 feat: add caller-owned rayon pools
• 7999371 Merge pull request #455 from sebastienrousseau/feat/v0.0.48
• e8b44ba docs: refresh v0.0.48 scorecard
• c171653 feat: add strict query paths
• 3951808 Merge pull request #454 from sebastienrousseau/feat/v0.0.47
• 7c07bcb ci: silence release cache cleanup errors
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: f09f4419-5562-490c-a8b6-f7d714382f59

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[gcomte]

Dependency upgrade assessment — commit d6b275db8a81c78eb3e60bfefeba524cebe17d6c

Reviewed noyalib 0.0.45 → 0.0.49 against the base snapshot, versioned upstream changelog, and checksum-verified crate sources. Bitcoinvert already uses the supported APIs appropriately; no additional edits are warranted. All configured checks ultimately passed, including the permitted audit retry. The input snapshot is unchanged.

Findings:

• Scope: one Cargo package, no workspaces or transitive dependency changes. Only noyalib's version and checksum changed. Resolved features remain std only, with default features disabled.
• src/defaults.rs uses ParserConfig::new().no_schema(true) and from_str_with_config. Preserve this supported configuration: it retains exact decimal lexemes for legacy unquoted amounts. Existing tests cover quoted/unquoted/scientific amounts, invalid values, real noyalib serialization, and configured JSON output order. Production template writing remains through home-config.
• Applicable internal improvements include bounded scanner preallocation, avoiding owned comment copies during normal parsing, and randomized hashing in hosted mappings and parser structures. They require no caller changes; mappings retain insertion order.
• QueryPath, atomic CST edits, caller-owned Rayon pools, async stream limits, and include confinement/budgets do not apply to this synchronous typed configuration reader. The 0.0.47 CI fixes concern upstream infrastructure. Enabling these features or replacing the existing parser configuration would be unnecessary scope expansion.
• Primary sources: https://raw.githubusercontent.com/sebastienrousseau/noyalib/v0.0.49/CHANGELOG.md ; https://static.crates.io/crates/noyalib/noyalib-0.0.45.crate ; https://static.crates.io/crates/noyalib/noyalib-0.0.49.crate . Both artifact checksums match their respective lockfiles. Compared shipped configuration, deserializer, streaming parser, scanner, and mapping implementations.
• Noyalib's declared Rust minimum remains 1.86.0, compatible with bitcoinvert's declared 1.95.0 minimum. Validation used Rust 1.98.1; the minimum toolchain was not separately exercised. Delegated review was unavailable because the agent service failed.

The session reported running checks. No independent validation was run for this result.