Skip to content

chore(deps): bump the routine-rust-dependencies group across 1 directory with 8 updates - #319

Merged
SoichiroYamane merged 2 commits into
mainfrom
dependabot/cargo/routine-rust-dependencies-a6d53970ba
Oct 26, 2026
Merged

SoichiroYamane merged 2 commits into
mainfrom
dependabot/cargo/routine-rust-dependencies-a6d53970ba

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 18, 2026 •

Copy link
Copy Markdown
Contributor

Scope and outcome

Update the eight reviewed Rust dependencies with generated lock changes only. Exact shared-core serde_json/sha2 pins and float-roundtrip features remain intentional. No application code, schema/artifact version, hardware operation, generated contract or security-policy change.

Refs #326

Review and validation

  • Review 1: complete three-file dependency graph/consumer review; published registry and archive integrity, features, sources/licenses/MSRV inspected. Independent AI review found no blocking code defect and is not a second human approval.
  • Review 2: full three-file PR patch reconstructed/staged against verified current main; whitespace/stat/full diff and exact integrated tree checked. Main integration preserves all three reviewed Rust file fingerprints and only adds the already-reviewed Actions workflow updates.
  • Local repository Nix Rust 1.97.1: fmt, shared analysis/config/native-WASM test suite and isolated instruments tests pass on the integrated tree; cargo-deny 0.20.2 from the exact pinned nixpkgs revision passes all-feature advisories/licenses/sources.
  • Require refreshed exact-head/current-base CI and Documentation-site release gates, including native Windows, generated references, locked dependency policy, browser/accessibility/visual and real Lighthouse, before ordinary match-head merge.

Compatibility, blocker and next work

MSRV increases to Rust 1.88 within the inspected stable-toolchain contract. Native Windows compilation is not a new clipboard or live-instrument execution claim. Current local matching wasm-bindgen CLI availability remains an explicit environment limitation; no outside-Nix installation or budget relaxation is used. Existing fixtures/round trips are not a blanket historical serialized-byte compatibility proof. Verify refreshed head/base and merge/deployment evidence before final branch cleanup.

@dependabot dependabot Bot added dependencies Dependency updates minor Minor version increment labels Oct 18, 2026
@github-actions github-actions Bot added the chore label Oct 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/routine-rust-dependencies-a6d53970ba branch from e4657d5 to 24f159d Compare October 25, 2026 13:12
…ory with 8 updates

Bumps the routine-rust-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [toml](https://github.com/toml-rs/toml) | `1.1.6+spec-1.1.0` | `1.1.8+spec-1.1.0` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [jiff](https://github.com/BurntSushi/jiff) | `0.2.37` | `0.2.38` |
| [comfy-table](https://github.com/nukesor/comfy-table) | `8.0.0` | `8.0.1` |
| [arboard](https://github.com/1Password/arboard) | `3.6.1` | `3.7.0` |
| [insta](https://github.com/mitsuhiko/insta) | `1.48.0` | `1.49.0` |
| [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.191` |



Updates `toml` from 1.1.6+spec-1.1.0 to 1.1.8+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.6...toml-v1.1.8)

Updates `serde_json` from 1.0.151 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.154)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `jiff` from 0.2.37 to 0.2.38
- [Release notes](https://github.com/BurntSushi/jiff/releases)
- [Changelog](https://github.com/BurntSushi/jiff/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/jiff@jiff-static-0.2.37...jiff-static-0.2.38)

Updates `comfy-table` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/nukesor/comfy-table/releases)
- [Changelog](https://github.com/Nukesor/comfy-table/blob/main/CHANGELOG.md)
- [Commits](Nukesor/comfy-table@v8.0.0...v8.0.1)

Updates `arboard` from 3.6.1 to 3.7.0
- [Release notes](https://github.com/1Password/arboard/releases)
- [Commits](1Password/arboard@v3.6.1...v3.7.0)

Updates `insta` from 1.48.0 to 1.49.0
- [Release notes](https://github.com/mitsuhiko/insta/releases)
- [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md)
- [Commits](mitsuhiko/insta@1.48.0...1.49.0)

Updates `libc` from 0.2.189 to 0.2.191
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.189...0.2.191)

---
updated-dependencies:
- dependency-name: arboard
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-rust-dependencies
- dependency-name: comfy-table
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-rust-dependencies
- dependency-name: insta
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-rust-dependencies
- dependency-name: jiff
  dependency-version: 0.2.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-rust-dependencies
- dependency-name: libc
  dependency-version: 0.2.190
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-rust-dependencies
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-rust-dependencies
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-rust-dependencies
- dependency-name: toml
  dependency-version: 1.1.8+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-rust-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/routine-rust-dependencies-a6d53970ba branch from 24f159d to ec0b225 Compare October 25, 2026 19:05
@SoichiroYamane
SoichiroYamane merged commit d8a1e74 into main Oct 26, 2026
37 checks passed
@SoichiroYamane
SoichiroYamane deleted the dependabot/cargo/routine-rust-dependencies-a6d53970ba branch October 26, 2026 05:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore dependencies Dependency updates minor Minor version increment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant