[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
tree-sitter-language-pack	==1.16.1 → ==1.23.1

---

Release Notes

xberg-io/tree-sitter-language-pack (tree-sitter-language-pack)

v1.23.1

Compare Source

Fixed

• Keep the Elixir NIF core dependency aligned with the release version after version corrections.
• Restore iOS Dart builds with libc 0.2.191.
• Trap Swift scanner allocation failures on WASM without importing unsupported stdio or exit symbols;
  retain the native allocation-failure diagnostic.
• Generate Elixir release checksums with the system Bash on macOS.
• Resolve the grammar generator from the project Mise toolchain before entering upstream repositories.
  Preserve bounded failure diagnostics and terminate owned descendants even after their leader exits.
• Refresh the grammar query table and coding-agent plugin provenance.

Security

• Update Zstandard, Rustls, certificate validation and root certificates in the independent
  Elixir, Ruby and Rust consumer lockfiles; audit all five Cargo resolutions in CI.

v1.22.1

Compare Source

Fixed

• The Ruby gem build no longer fails on the Ruby 3.2 ABI. The development steep dependency, which needs Ruby 3.3,
  is now declared only on Ruby 3.3 or newer, so Ruby gems can be published again after the 1.21.2 to 1.22.0 gaps.

v1.22.0

Compare Source

Changed

• Updated 25 bundled grammars to their latest upstream revisions: abl, ada, al, asciidoc, cuda, desktop, dotenv,
  editorconfig, erlang, gdscript, gnuplot, idl, lean, mlir, nix, perl, php, proto, rshtml, scss, slint, swift, templ,
  wit and xresources. Parse results for these languages can change where upstream fixed or extended the grammar.
• Updated dependencies, including ext-php-rs 0.16.2, serde_json 1.0.154 and zstd 0.14.2.

v1.21.3

Compare Source

Fixed

• Coding-agent plugin bundles are now generated and verified from the plugin-specific configuration,
  including the Claude marketplace manifest.

v1.21.1

Compare Source

Fixed

• Source chunking now walks the syntax tree once and routes metadata to overlapping chunks, instead
  of walking the full tree once per chunk. Metadata collection now scales with the AST traversal and
  the node-to-chunk overlaps it produces.

Changed

• Regenerate all bindings, fixtures, documentation and workflows with Alef 0.107.12. Native bindings
  now preserve typed error variants, map cancellation consistently and safely defer handle destruction
  until concurrent calls finish.

v1.21.0

Compare Source

Added

• BAML grammar (baml, from BoundaryML/baml-treesitter, Apache-2.0), bringing the pack to 372
  languages (#​200). Upstream ships an ABI 15 parser.c; it is regenerated at ABI 14 like the rest of
  the pack. Known limitation: the grammar rejects the documented backtick prompt form until
  BoundaryML/baml#5012 is fixed upstream.
• Parser bundles now carry the pinned licence and NOTICE text for every grammar they contain, so
  redistributors can retain the applicable upstream notices (#​191). Coverage is fail-closed: a grammar
  with no resolvable licence text fails the build.
• A root-owned, non-writable parser cache directory is accepted, so a grammar cache baked into a
  read-only container image works without a chown (#​202). Group- or other-writable directories are
  still rejected.
• Python DocstringFormat, StructureKind and SymbolKind gain a from_other() factory, and the
  unit enums are hashable. WASM classes gain copyForTransfer().

Changed

• Refresh 48 grammar pins to their latest upstream revisions. No grammar changed ABI or lost a query;
  F#, F# Signature and Protocol Buffers gained locals/tags queries. cuda stays held: its upstream
  parser.c is past the regeneration size threshold and would lose its injections and tags queries.
• BREAKING (Java, C#): DocstringFormat, StructureKind and SymbolKind are sealed types, not
  enums. Java uses sealed interfaces with record variants and C# uses abstract records with sealed
  record variants, so StructureKind.FUNCTION / StructureKind.Function becomes
  new StructureKind.Function(). Other now carries its string payload, and Java's values(),
  getValue() and case-insensitive fromValue() are gone, so match with pattern matching or
  instanceof/is. The JSON wire format is unchanged. Java ErrorException now extends
  TreeSitterLanguagePackRsException.
• BREAKING (Python): cache_dir, clean_cache, configure, download, download_all,
  download_group, init, manifest_groups, manifest_languages, prefetch and process raise the
  typed tree_sitter_language_pack.Error subclasses (DownloadError, LanguageNotFoundError, ...)
  instead of RuntimeError, matching get_language. except RuntimeError: no longer catches them.
  The .pyi stubs also drop the never-present type attribute and TypedDict variants on the kind
  types and tighten constructor parameter types.
• BREAKING (WASM): the data and bodySpan setters no longer accept null/undefined. Use the
  new clearData() and clearBodySpan() instead.
• BREAKING (PHP, Ruby type signatures): the PHP stubs describe the kind types as classes with a
  type_tag property, an other property and static factories, not as string constants. The Ruby RBS
  enum classes become enum_* type aliases. Kotlin Android unit enums now return the wire string
  from toString() ("Line", not "LINE").
• Regenerate all bindings, fixtures, documentation and workflows with Alef 0.103.14 (was 0.87.1 at
  1.20.0), which is the source of the changes above. The PHP extension now builds against ext-php-rs
  0.16 and the Elixir package requires rustler_precompiled ~> 0.10. Ruby builds against magnus 0.9
  and the MCP server against rmcp 3.5. libc is held at 0.2.189 because 0.2.190 breaks iOS builds
  (rust-lang/libc#5601).

Fixed

• download([...]) fetches languages the manifest knows but the cache does not hold. It previously
  returned the requested count without downloading anything, leaving downloaded_languages() empty on
  a fresh cache (#​201).
• Python get_language() releases the GIL while it downloads a missing grammar, so a cache miss no
  longer freezes every other thread and the asyncio loop for up to the HTTP timeout (#​203).
• rustls is past RUSTSEC-2026-0285 in every lock, including the Elixir NIF, Ruby extension and Rust e2e
  locks that the earlier bump missed (#​198).

v1.20.0

Compare Source

Changed

• BREAKING (Java): enum constants are now UPPER_SNAKE_CASE. StructureKind.Function becomes
  StructureKind.FUNCTION, and likewise across CommentKind, DataNodeKind, DiagnosticSeverity,
  DocstringFormat, ExportKind and SymbolKind. The serialized wire values are unchanged, so no
  data migration is needed and persisted JSON stays readable; only Java source naming the old
  identifiers has to be updated.
• BREAKING (Swift): process() returns typed value types instead of opaque Rust handles.
  ProcessResult, StructureItem, DataNode and fifteen other types are now Codable structs with
  stored properties rather than typealiases to swift-bridge handles. Field access moves from method
  to property syntax (result.structure, not result.structure()), collections are real Swift arrays,
  and StructureKind / SymbolKind / DocstringFormat are Swift enums with associated values rather
  than strings. Values now cross the bridge as JSON and are decoded in Swift, so process() is
  throws on malformed input rather than returning a handle that fails on first access.
• Regenerate all bindings, fixtures, documentation and release workflows with Alef 0.87.1 (was
  0.85.15), lifting the hold recorded in 1.19.1. 0.86.1 promoted the Swift binding to value types but
  left the Swift e2e suite it generates calling the old method syntax; 0.87.0 fixed that but emitted
  enums whose Codable conformance could not read serde's wire format. Both are resolved in 0.87.1.

Added

• Swift structure-extraction test coverage. Every test in the Swift package suite previously read only
  scalar fields off process(), leaving the structure path unexercised — all seventeen passed against
  an Alef 0.87.0 build whose process() threw on any source containing structure. The new test asserts
  the decoded StructureKind cases and item names, which is what exercises the element decoder; nim
  cannot cover this (its grammar uses none of the node kind names structure_kind_at() matches) so it
  goes through mojo, already in the package's statically compiled language set.

Fixed

• Swift enums with associated values decode serde's externally tagged wire format. Unit variants
  serialize as a bare string ("Function") and payload variants as a single-keyed object
  ({"Other": "macro"}); the generated conformance previously fell through to Swift's synthesized
  Codable, which expects {"function": {}} and matched neither form. (Alef 0.87.1)
• Node and WebAssembly e2e suites read internally tagged FormatMetadata as the flattened shape serde
  actually emits, with the sibling-field form asserted directly so a regression to the nested form
  fails loudly instead of silently degrading to the variant name. (Alef 0.87.1)
• The Go binding pairs native error messages with their sentinels, so callers can match with
  errors.Is while still reading the detail the native layer produced. (Alef 0.87.1)

v1.19.1

Compare Source

Changed

• Alef stays pinned at 0.85.15. 0.86.1 rewrites the Swift binding to real value types --
  DataNode, ProcessResult and StructureItem become Codable structs with typed properties
  instead of typealiases to opaque Rust handles -- but does not update the Swift e2e suite it
  generates alongside them, which still calls result.language() and result.structure() on
  what are now properties. The two halves of its own output do not compile together, and e2e/
  is generated with a CI freshness gate, so the mismatch cannot be patched downstream. Reported
  upstream; the upgrade lands once the e2e emitter follows the binding emitter.
• Removed the eight superseded release/swift/<version> branches. publish.yaml moves the
  release tag onto the same checksummed commit it pushes the branch to, so each branch named a
  commit already reachable through v<version>; a consumer pinned to one can switch to
  exact: "<version>" with no other change. release/swift/1.19.0 is retained.

Fixed

• Patched an indent-stack underflow in the vendored agda external scanner. VEC_POP is a bare
  len-- and VEC_BACK reads data[len - 1], so the dedent loop could drain the stack, wrap
  len to UINT32_MAX and dereference the buffer plus 16 GiB. 1023 or more repeated '
  characters -- or NUL bytes -- crash the parser with SIGBUS. The same scanner also seeded its
  column-0 sentinel only when deserialize was called with a NULL buffer, while tree-sitter
  resets a scanner with a non-NULL inline buffer of length 0, leaving the following scan to read
  data[-1]. A survey of all 186 vendored scanners found both defects only in agda.
• Dynamically loaded grammars are ABI-checked at load time. load_from_dir called
  Language::from_raw on a downloaded parser with only a null check, so an incompatible grammar
  was accepted and failed later at ts_parser_set_language -- or, just outside the compatible
  range, parsed wrongly. The ABI version is now compared against the linked runtime's
  MIN_COMPATIBLE_LANGUAGE_VERSION..=LANGUAGE_VERSION and rejected with both versions named. The
  bounds are read from the runtime, so a runtime upgrade moves them rather than leaving a stale
  literal behind.
• scripts/sync_zig_zon_hashes.py now maintains alef.toml's
  [crates.e2e.registry.packages.zig.platform_hashes] alongside test_apps/zig/build.zig.zon.
  Nothing had ever populated that table, so it carried five STALE_HASH_REGENERATE placeholders;
  Alef responds to a placeholder by omitting the .hash line entirely, which is the only reason
  the manifest had to be declared user_owned in the first place. The five real digests are in
  place and the gate now fails on drift in either file.
• The nightly sanitizer sweep finishes inside its job. Six consecutive nightlies were killed at
  the 120-minute limit, every one inside the parse sweep after all twelve preceding steps had
  passed, so the job reported neither its findings nor how far it got. The sweep now runs against
  a 90-minute budget checked between languages, states how many languages it swept, names any it
  did not reach, and bounds each parse with a timeout -- one pathological input had been running
  over ten minutes. The day's language order rotates by day-of-year so a truncated sweep stops
  dropping the same alphabetical tail every night.
• That sweep also reports a finding it cannot attribute to a sanitizer exit code. UBSan raises
  SIGABRT where abort_on_error defaults to 1 and prints ERROR: UndefinedBehaviorSanitizer,
  neither of which the previous detector matched, so the agda crash above was exactly the shape
  it let through; any parse killed by a signal now counts. Its sanitizer environment is scoped to
  the ts-pack invocation as well -- as a step-level env: it also reached the shell, python3,
  find, grep and tee, each running uninstrumented with the runtime LD_PRELOADed into it
  and exitcode=42 in force, so a diagnosis raised in a helper would have been reported as a
  scanner finding.

v1.19.0

Compare Source

Changed

• Upgraded the tree-sitter runtime to 0.27, moving tree-sitter-language to 0.1.8 in the same
  step. The two pins are not independent: 0.27 requires tree-sitter-language ^0.1.8, and 0.1.8
  relocates the 0.26 WASM shims under wasm/unsupported/ so they no longer compile against the
  older runtime. The grammar ABI is unchanged -- both 0.26 and 0.27 are
  TREE_SITTER_LANGUAGE_VERSION 15 with a minimum compatible version of 13 -- so every bundled
  grammar loads exactly as before and no regeneration is implied.
• Consumers that also depend on tree-sitter directly must move to 0.27 in the same step. The
  tree-sitter crate declares links = "tree-sitter", and Cargo permits only one package per
  links value in a dependency graph, so pairing this release with a 0.26 pin fails to resolve
  rather than failing to compile. Nothing this crate exports changed: the requirement is a
  dependency floor, not a break in its own API.
• Grammar scanners now compile with NDEBUG on wasm32. 0.27's WASM libc is a documented subset
  that excludes assert, so a scanner keeping its assertions emitted an unresolved __assert_fail.
  That became an env module import rather than a link error, and the package then failed to load
  at runtime with Cannot find module 'env'. Native builds keep their assertions.
• Dropped this crate's own WASM libc shims (memchr, strcmp, iswalnum and friends) now that
  0.27 defines them. Keeping both made the two definitions collide at link time, which broke the
  WASM package under the split-codegen-unit settings the release build uses.
• Replaced the 0.26 WASM integration, which used a separate non-thread-safe allocator and an
  incomplete libc. 0.27 supplies its own WASM libc and forwards C allocation to the Rust
  application's global allocator.

Fixed

• Swift binaries again link a single tree-sitter C runtime. SwiftPM builds tree-sitter 0.25.10 for
  SwiftTreeSitter as loose object files, while this package's Rust staticlib carries the 0.27
  runtime in one archive member. Archive members load only to resolve an undefined symbol, and
  0.27's new ts_language_is_parseable was the first symbol SwiftPM's copy could not supply --
  pulling the member in and colliding on 253 other runtime symbols at link time. The C bridge now
  provides a weak definition, so the member stays unreferenced and yields to any future SwiftPM
  runtime that exports the symbol itself (#​189).
• wasm32 builds now find their headers under either wasi-sysroot include layout. wasi-libc
  renamed include/wasm32-wasi to include/wasm32-wasip1, and probing only the former meant a
  sysroot that existed but used the newer name contributed no include flag at all, failing every
  grammar with 'stdlib.h' file not found. Toolchains whose clang supplies its own sysroot were
  unaffected, which is why this surfaced only in local builds.
• Node::child_count now returns tree-sitter's u32 widened to the usize this crate has always
  declared, rather than failing to compile against the new runtime.

v1.18.0

Compare Source

Changed

• Refreshed 22 grammar pins to their upstream latest: al, blade, cfml, dotenv,
  gitcommit, javadoc, kcl, kdl, lean, magik, mlir, nix, ocaml,
  ocaml_interface, perl, proto, sas, sql, swift, sysml and t32. abl is no
  longer held back: upstream now defines the outer_join node its highlights.scm
  references, so it compiles for the first time since the hold was taken. cuda is now the
  one deliberate hold -- upstream's committed parser.c grew past the regeneration
  threshold, so a bump would ship it as-is at ABI 15 and drop the injections and tags
  queries the grammar only receives while being regenerated.
• Re-derived the ocaml_interface highlights overlay from upstream's reworked query.
  tree-sitter-ocaml declares one shared queries/highlights.scm for all three of its
  grammars, but that query matches (shebang), which only the implementation grammar
  defines; the overlay is upstream's file with that alternative removed, and it had drifted
  behind their block-access rework.
• Regenerated bindings, fixtures, documentation and release workflows with Alef 0.85.15.
  C# contains assertions now compare a JSON-serialized value instead of
  Convert.ToString, which reported a type name rather than content for tagged unions such
  as StructureKind. The PHP e2e runner exports the verified extension path so processes it
  spawns under -n load the same build.
• Upgraded rmcp to 3.3.
• Retained tree-sitter 0.26 and the tree-sitter-language 0.1.7 pin. tree-sitter 0.27
  requires tree-sitter-language 0.1.8 and removed its Package.swift, so SwiftTreeSitter
  cannot follow it; the upgrade also changes this crate's public API, since Language is
  re-exported. (#​189)

Fixed

• Publish every native NuGet runtime package required by the managed package's runtime graph.
• Upload Dart native archives and checksums required by the generated package downloader.
• Publish Go installer archive aliases and their required SHA256 sidecars.
• Recorded the node e2e harness's tree-sitter floor in alef.toml and realigned
  test_apps/node's lockfile with its regenerated manifest, which disagreed and broke
  pnpm install --frozen-lockfile. Realigned the generated Go e2e module pin, which the
  version sync leaves behind.

v1.17.0

Compare Source

Changed

• Retain tree-sitter 0.26 and the current grammar revisions. The attempted 0.27 upgrade
  is deferred because SwiftTreeSitter 0.25 requires the 0.25 C runtime, which conflicts
  with the newer runtime in our published static Swift library. Pin the WASM shim
  dependency tree-sitter-language to 0.1.7 because 0.1.8 rejects the retained runtime. (#​189)
• Regenerate bindings, fixtures, documentation, and release workflows with Alef 0.85.11;
  upgrade Rust dependencies, including dirs 7 and zstd 0.14.

Added

• Restore the Rust extension_ambiguity() API and its serde-gated JSON companion to expose the
  default language and alternatives for ambiguous file extensions. (#​185)

Fixed

• Propagate C# fallible-void native failures as typed exceptions while preserving their
  native error codes and messages; narrow Java boolean returns to the C ABI width.
• Preserve Swift declaration kinds, protocol requirements, aliases and constants; retain
  TypeScript namespace ownership and named arrow functions without duplicate constants. (#​186)
• Preserve YAML flow collections and scalar keys, TOML dotted keys and commented containers,
  JSON property spans, and Terraform/HCL paths. Reject concatenated JSON documents and handle
  deeply nested TOML keys without overflowing the stack. (#​186)
• Stage the matching ktreesitter host native library for Kotlin Android JVM tests and
  synchronize dependency lockfiles used by documentation and generated test suites.

v1.16.2

Compare Source

Fixed

• process() returns a ProcessResult object again in Python, so attribute access works.
  In 1.16.1 the generator emitted options.ProcessResult as class ProcessResult(TypedDict, total=False), which is a type annotation and not a runtime class -- process() therefore handed
  back a plain dict, and every documented access (result.language, result.chunks,
  result.metrics.total_lines) raised AttributeError. Only Python was affected; the TypedDict
  path existed in no other binding, so the same call in Node, Go, Ruby or Java kept returning a
  real object throughout. ProcessResult is a @dataclass(frozen=True, slots=True) again, as it
  was before 1.16.1 and as every sibling binding already models it. (#​183)
• The generated e2e suites assert against the shape their binding actually returns. Two
  backends were broken by one generator-level disagreement, in which the e2e emitter and the
  binding emitter held different ideas about the shape of a value they share. In Python, 72 of the
  523 tests failed because the emitter wrote attribute assertions (result.language == "python")
  against a value the binding emitter was generating as a dict. In TypeScript, 18 of the 37
  process tests failed because the emitter wrote String(e.kind).includes("Function") against
  kind, which is an object -- String({ type: "Function" }) is "[object Object]", so every
  structure-kind assertion evaluated false and reported it as the uninformative expected false to be true. Both emitters now read the value the way the binding presents it -- the dataclass
  attribute in Python, e.kind?.["type"] === "Function" in TypeScript -- and both suites are 523
  passed / 0 failed. (#​182)

Changed

• Regenerated all bindings, stubs, scaffolding, READMEs, test apps and e2e suites on alef 0.84.1
  (from 0.82.2). 0.82.1 deleted the TypedDict path from the Python binding emitter and 0.75.0
  fixed the e2e emitter, so this is the first release carrying both. 0.84.1 also makes generation
  reproducible across runs, which clears the 459 spurious TypeScript snippet-compile failures the
  0.84.0 line reported.

Note on the npm package

@xberg-io/tree-sitter-language-pack skipped both 1.16.0 and 1.16.1 -- npm's latest is still
1.15.8 -- for two different reasons. 1.16.0 never got past Validate version consistency, the
unrun task version:sync recorded in the 1.16.1 notes below. 1.16.1 cleared that gate and then
failed E2E gate — Node on the 18 TypeScript failures above; that job blocks the npm publish, so
the package never reached the registry. The wasm package is gated separately and did ship 1.16.1.
1.16.2 is the first release in which both gates pass.

Note

• 1.16.2 is a fix-only release. The two defects above landed together in 1.16.1 and are the whole
  content of this one; no grammar pins moved.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codspeed]

Merging this PR will improve performance by 35.82%

2 warnings

⚠️ 2 benchmarks with a significant change ran on different hardware

Their base and head results were measured on machines with a different CPU, core count or memory, so the changes might not come from the code. Run base and head on the same runner type.

Learn more about Macro Runners

See affected benchmarks

⚠️ 2 benchmarks with a significant change ran in a different software environment

Their base and head results were measured with a different OS or toolchain, such as compiler, runtime or library versions, so the changes might come from this difference rather than from the code. Open an affected benchmark to see what changed.

See affected benchmarks

⚡ 2 improved benchmarks
✅ 15 untouched benchmarks

Performance Changes

	Benchmark	BASE	HEAD	Efficiency
⚡	ascii	1.7 ms	1.2 ms	+42.29%
⚡	unicode	2.1 ms	1.6 ms	+29.64%

Tip

Curious why performance improved? Comment @codspeedbot explain why performance improved on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing renovate/tree-sitter-language-pack-1.x (a0547c4) with main (826518d)}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[github-actions]

📊 Source Code Metrics (this PR vs main)

No metric changes detected.

Generated by mehen v1.10.0 — the code quality watcher.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: ophi-dev/antlr-rust-runtime
• Branch: main
• File: .coderabbit.yaml
• Commit: 826518d
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: d6ffd41f-d4a9-409d-9634-912d020f7f52

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn