Repository navigation
chore(deps): bump rusqlite from 0.32.1 to 0.41.1 - #173
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
Bumps [rusqlite](https://github.com/rusqlite/rusqlite) from 0.32.1 to 0.41.1. - [Release notes](https://github.com/rusqlite/rusqlite/releases) - [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md) - [Commits](rusqlite/rusqlite@v0.32.1...v0.41.1) --- updated-dependencies: - dependency-name: rusqlite dependency-version: 0.41.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/cargo/rusqlite-0.41.1
branch
from
November 4, 2026 16:48
f6c1672 to
931ebaa
Compare
isc-tdyar
pushed a commit
that referenced
this pull request
Nov 4, 2026
* chore(deps): windows 0.62, rusqlite 0.41, aes-gcm 0.11, dirs 7, ctor 1 Rolls up Dependabot #159, #160, #173, #178 and #179. - ctor 1 refuses a constructor without the unsafe acknowledgement, so every #[ctor::ctor] is now #[ctor::ctor(unsafe)]. They are the test-isolation hooks; what they run is unchanged. - aes-gcm 0.11 deprecates from_slice. The safeStorage decrypt converts the key and nonce with TryFrom; both lengths are checked first, and a failed conversion is an error, not a panic. The test helper that seals fixtures uses From on its fixed-size arrays. - windows 0.62 passes optional arguments as Option: GetUserNameW and LocalFree take Some(..). CryptUnprotectData is unchanged. - rusqlite 0.41 and dirs 7 build without code changes. - The payload test's fixture value is renamed so the staged-file secret scan does not read it as a credential; the test is unchanged. The Windows paths compile only on the Windows runner; windows-handshake and its DPAPI round-trip step cover them. * chore(vscode): vsce 4.1, qs 6.17.1 Rolls up the vsce half of Dependabot #177 and #168. qs 6.17.1 clears its moderate advisory; minimatch stays at 10.2.6, behind vsce, until vsce takes 11. Not taken: @types/vscode 1.144 (#177), @types/node 26 (#156) and which 7 (#155). The extension supports VS Code 1.99, which runs on Node 20: newer typings would let code use APIs that release lacks, and which 7 needs Node 22.22. They move with engines.vscode. * ci(release): docker actions to their current majors Dependabot #157: setup-qemu 4.4.0, setup-buildx 4.4.1, login 4.7.0, metadata 6.2.0, build-push 7.4.0. Each pin is the commit its tag points to. All five run on node24 and still take every input this workflow passes and give the outputs it reads (tags, labels, digest). The image job runs only on a release tag, so the next release is its first run. * chore(dependabot): hold engine-tied extension packages, wait 7 days @types/vscode, @types/node from 21 and which from 7 are ignored for the extension: they follow engines.vscode, which moves by hand. Every ecosystem now has a 7-day cooldown, so a version update is proposed only after a release has been public for a week; security updates are not delayed. zizmor's dependabot-cooldown check had six findings here.
Contributor
Author
|
Looks like rusqlite is up-to-date now, so this is no longer needed. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps rusqlite from 0.32.1 to 0.41.1.
Release notes
Sourced from rusqlite's releases.
... (truncated)
Commits
18ee76dPrepare next release11ac8f5Merge pull request #1924 from gwenn/pragma_name_check4d2be94Merge pull request #1927 from gwenn/from_raw_partsa60e76bMerge pull request #1919 from gwenn/0.41.0f652850Prepare release661107fMerge pull request #1917 from LucaCappelletti94/feat/sqlcipher-srcdd770f6Fix the SQLCipher license link and match upstream style2daf10aSelect the SQLCipher source with cfg_selectbb40153Merge pull request #1916 from gwenn/uuid92a7d49Bump uuid version to 1.28