[oscars-integration] Integrate mark sweep backend and eliminate global GC state - #5480
Merged
Merged
Conversation
) Bumps the ci-dependencies group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [crate-ci/typos](https://github.com/crate-ci/typos). Updates `github/codeql-action/init` from 4.36.2 to 4.36.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/init's releases</a>.</em></p> <blockquote> <h2>v4.36.3</h2> <p>No user facing changes.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li> <li>Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. <a href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li> <li>Best-effort connection tests for private registries now use <code>GET</code> requests instead of <code>HEAD</code> for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. <a href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li> <li>Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. <a href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3">2.25.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3865">#3865</a></li> </ul> <h2>4.35.2 - 15 Apr 2026</h2> <ul> <li>The undocumented TRAP cache cleanup feature that could be enabled using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the <code>trap-caching: false</code> input to the <code>init</code> Action. <a href="https://redirect.github.com/github/codeql-action/pull/3795">#3795</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a"><code>54f647b</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3984">#3984</a> from github/update-v4.36.3-1f34ec164</li> <li><a href="https://github.com/github/codeql-action/commit/e78819e05527766c3c5919e3177647e280c6cb83"><code>e78819e</code></a> Trigger checks</li> <li><a href="https://github.com/github/codeql-action/commit/2c9d3d63eb4941734e2d29468953529a56f5ff1c"><code>2c9d3d6</code></a> Update changelog for v4.36.3</li> <li><a href="https://github.com/github/codeql-action/commit/1f34ec16430d82636d18716acc7aaa6d843b35a9"><code>1f34ec1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3983">#3983</a> from github/mbg/repo-props/ff-for-config-file-prop</li> <li><a href="https://github.com/github/codeql-action/commit/d5f0145480025b49d8b08c3f6b36e6ad41a68c90"><code>d5f0145</code></a> Log when repository property has a value but is ignored</li> <li><a href="https://github.com/github/codeql-action/commit/f27f56386a3c745af8d7bbfb806098c714a5e32a"><code>f27f563</code></a> Add test for when the FF is off</li> <li><a href="https://github.com/github/codeql-action/commit/0025d0f2b5676fde748a0be9725dcce18dd9f986"><code>0025d0f</code></a> Use FF</li> <li><a href="https://github.com/github/codeql-action/commit/f7fa18f05d107ff6735857c3510fbff190c9a1eb"><code>f7fa18f</code></a> Add FF for config file repo property</li> <li><a href="https://github.com/github/codeql-action/commit/628fc3f124e68b0151f0d2a5d81e864ee1e42335"><code>628fc3f</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3979">#3979</a> from github/henrymercer/overlay-db-cleanup-size-tele...</li> <li><a href="https://github.com/github/codeql-action/commit/9cfb67bab9b32441237f92d4ba29a7f3ccff259f"><code>9cfb67b</code></a> Add clarifying comments</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/analyze` from 4.36.2 to 4.36.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's releases</a>.</em></p> <blockquote> <h2>v4.36.3</h2> <p>No user facing changes.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li> <li>Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. <a href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li> <li>Best-effort connection tests for private registries now use <code>GET</code> requests instead of <code>HEAD</code> for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. <a href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li> <li>Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. <a href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3">2.25.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3865">#3865</a></li> </ul> <h2>4.35.2 - 15 Apr 2026</h2> <ul> <li>The undocumented TRAP cache cleanup feature that could be enabled using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the <code>trap-caching: false</code> input to the <code>init</code> Action. <a href="https://redirect.github.com/github/codeql-action/pull/3795">#3795</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a"><code>54f647b</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3984">#3984</a> from github/update-v4.36.3-1f34ec164</li> <li><a href="https://github.com/github/codeql-action/commit/e78819e05527766c3c5919e3177647e280c6cb83"><code>e78819e</code></a> Trigger checks</li> <li><a href="https://github.com/github/codeql-action/commit/2c9d3d63eb4941734e2d29468953529a56f5ff1c"><code>2c9d3d6</code></a> Update changelog for v4.36.3</li> <li><a href="https://github.com/github/codeql-action/commit/1f34ec16430d82636d18716acc7aaa6d843b35a9"><code>1f34ec1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3983">#3983</a> from github/mbg/repo-props/ff-for-config-file-prop</li> <li><a href="https://github.com/github/codeql-action/commit/d5f0145480025b49d8b08c3f6b36e6ad41a68c90"><code>d5f0145</code></a> Log when repository property has a value but is ignored</li> <li><a href="https://github.com/github/codeql-action/commit/f27f56386a3c745af8d7bbfb806098c714a5e32a"><code>f27f563</code></a> Add test for when the FF is off</li> <li><a href="https://github.com/github/codeql-action/commit/0025d0f2b5676fde748a0be9725dcce18dd9f986"><code>0025d0f</code></a> Use FF</li> <li><a href="https://github.com/github/codeql-action/commit/f7fa18f05d107ff6735857c3510fbff190c9a1eb"><code>f7fa18f</code></a> Add FF for config file repo property</li> <li><a href="https://github.com/github/codeql-action/commit/628fc3f124e68b0151f0d2a5d81e864ee1e42335"><code>628fc3f</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3979">#3979</a> from github/henrymercer/overlay-db-cleanup-size-tele...</li> <li><a href="https://github.com/github/codeql-action/commit/9cfb67bab9b32441237f92d4ba29a7f3ccff259f"><code>9cfb67b</code></a> Add clarifying comments</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a">compare view</a></li> </ul> </details> <br /> Updates `crate-ci/typos` from 1.47.2 to 1.48.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/crate-ci/typos/releases">crate-ci/typos's releases</a>.</em></p> <blockquote> <h2>v1.48.0</h2> <h2>[1.48.0] - 2026-06-30</h2> <h3>Features</h3> <ul> <li>Updated the dictionary with the <a href="https://redirect.github.com/crate-ci/typos/issues/1562">June 2026</a> changes</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/crate-ci/typos/blob/master/CHANGELOG.md">crate-ci/typos's changelog</a>.</em></p> <blockquote> <h1>Change Log</h1> <p>All notable changes to this project will be documented in this file.</p> <p>The format is based on <a href="https://keepachangelog.com/">Keep a Changelog</a> and this project adheres to <a href="https://semver.org/">Semantic Versioning</a>.</p> <!-- raw HTML omitted --> <h2>[Unreleased] - ReleaseDate</h2> <h2>[1.48.0] - 2026-06-30</h2> <h3>Features</h3> <ul> <li>Updated the dictionary with the <a href="https://redirect.github.com/crate-ci/typos/issues/1562">June 2026</a> changes</li> </ul> <h2>[1.47.2] - 2026-06-04</h2> <h3>Fixes</h3> <ul> <li>Don't correct <code>inferrable</code></li> <li>Correct unused <code>inferible</code> variant</li> </ul> <h2>[1.47.1] - 2026-06-03</h2> <h3>Fixes</h3> <ul> <li>Don't correct <code>requestors</code></li> </ul> <h2>[1.47.0] - 2026-05-29</h2> <h3>Features</h3> <ul> <li>Updated the dictionary with the <a href="https://redirect.github.com/crate-ci/typos/issues/1545">May 2026</a> changes</li> </ul> <h2>[1.46.3] - 2026-05-23</h2> <h3>Fixes</h3> <ul> <li>Don't correct to <code>sequentials</code></li> <li>Don't correct to <code>subdolder</code></li> </ul> <h2>[1.46.2] - 2026-05-16</h2> <h3>Fixes</h3> <ul> <li>Don't correct to <code>criterias</code></li> <li>Don't correct to <code>replaceables</code></li> </ul> <h2>[1.46.1] - 2026-05-08</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/crate-ci/typos/commit/bee27e3a4fd1ea2111cf90ab89cd076c870fce14"><code>bee27e3</code></a> chore: Release</li> <li><a href="https://github.com/crate-ci/typos/commit/4939ca9c90a49d78125c35a3376bc5ee5c8aa489"><code>4939ca9</code></a> chore: Release</li> <li><a href="https://github.com/crate-ci/typos/commit/44b25bec760cf3e606f713cae5dd41978c1d8295"><code>44b25be</code></a> docs: Update changelog</li> <li><a href="https://github.com/crate-ci/typos/commit/22edab389daa634b04b0971b2ed8180c3aba0963"><code>22edab3</code></a> Merge pull request <a href="https://redirect.github.com/crate-ci/typos/issues/1574">#1574</a> from epage/june</li> <li><a href="https://github.com/crate-ci/typos/commit/a73679cf8e45a62643936f55f94bd8eb8c1662c8"><code>a73679c</code></a> feat(dict): June updates</li> <li>See full diff in <a href="https://github.com/crate-ci/typos/compare/37bb98842b0d8c4ffebdb75301a13db0267cef89...bee27e3a4fd1ea2111cf90ab89cd076c870fce14">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
These were flagged when trying to push to github
… 13 updates (boa-dev#5423) Bumps the rust-dependencies group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [mimalloc-safe](https://github.com/napi-rs/mimalloc-safe) | `0.1.63` | `0.1.64` | | [rustls](https://github.com/rustls/rustls) | `0.23.40` | `0.23.41` | | [rustc-hash](https://github.com/rust-lang/rustc-hash) | `2.1.2` | `2.1.3` | | [time](https://github.com/time-rs/time) | `0.3.49` | `0.3.53` | | [log](https://github.com/rust-lang/log) | `0.4.32` | `0.4.33` | | [trybuild](https://github.com/dtolnay/trybuild) | `1.0.116` | `1.0.117` | | [rustyline](https://github.com/kkawakam/rustyline) | `18.0.0` | `18.0.1` | | [quote](https://github.com/dtolnay/quote) | `1.0.45` | `1.0.46` | | [rand](https://github.com/rust-random/rand) | `0.10.1` | `0.10.2` | | [arrayvec](https://github.com/bluss/arrayvec) | `0.7.6` | `0.7.8` | | [timezone_provider](https://github.com/boa-dev/temporal) | `0.2.3` | `0.2.4` | | [temporal_rs](https://github.com/boa-dev/temporal) | `0.2.3` | `0.2.4` | | [icu_collator](https://github.com/unicode-org/icu4x) | `2.2.0` | `2.2.1` | Updates `mimalloc-safe` from 0.1.63 to 0.1.64 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/napi-rs/mimalloc-safe/releases">mimalloc-safe's releases</a>.</em></p> <blockquote> <h2>mimalloc-safe-v0.1.64</h2> <h3>Chore</h3> <ul> <li><em>(deps)</em> Update actions/checkout action to v7 (<a href="https://redirect.github.com/napi-rs/mimalloc-safe/pull/81">#81</a>)</li> <li><em>(deps)</em> Switch mimalloc3 to upstream microsoft/mimalloc (<a href="https://redirect.github.com/napi-rs/mimalloc-safe/pull/82">#82</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/napi-rs/mimalloc-safe/blob/main/CHANGELOG.md">mimalloc-safe's changelog</a>.</em></p> <blockquote> <h2>[0.1.64] - 2026-06-24</h2> <h3>Chore</h3> <ul> <li><em>(deps)</em> Update actions/checkout action to v7 (<a href="https://redirect.github.com/napi-rs/mimalloc-safe/pull/81">#81</a>)</li> <li><em>(deps)</em> Switch mimalloc3 to upstream microsoft/mimalloc (<a href="https://redirect.github.com/napi-rs/mimalloc-safe/pull/82">#82</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/napi-rs/mimalloc-safe/commit/710831094789cc1568423a64977cf1a655226b74"><code>7108310</code></a> chore: release (<a href="https://redirect.github.com/napi-rs/mimalloc-safe/issues/83">#83</a>)</li> <li><a href="https://github.com/napi-rs/mimalloc-safe/commit/f8b6ea02f5be580897b4535e91d2e17f1181483d"><code>f8b6ea0</code></a> chore(deps): switch mimalloc3 to upstream microsoft/mimalloc (<a href="https://redirect.github.com/napi-rs/mimalloc-safe/issues/82">#82</a>)</li> <li><a href="https://github.com/napi-rs/mimalloc-safe/commit/14128b9806fb34d6416eb56526e0b365a3b43a4b"><code>14128b9</code></a> chore(deps): update actions/checkout action to v7 (<a href="https://redirect.github.com/napi-rs/mimalloc-safe/issues/81">#81</a>)</li> <li>See full diff in <a href="https://github.com/napi-rs/mimalloc-safe/compare/mimalloc-safe-v0.1.63...mimalloc-safe-v0.1.64">compare view</a></li> </ul> </details> <br /> Updates `rustls` from 0.23.40 to 0.23.41 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rustls/rustls/commit/642a10300a1e703279bdc70e73f7e6db8d99ccbf"><code>642a103</code></a> ci: drop Taplo job</li> <li><a href="https://github.com/rustls/rustls/commit/752c144bdc90f9673ce3b9004d218dce72c1f85a"><code>752c144</code></a> Drop nightly clippy tests</li> <li><a href="https://github.com/rustls/rustls/commit/8d8611a3eee9f4251d8ea297367a17742cd2d6ef"><code>8d8611a</code></a> Fix new <code>clippy::useless-borrows-in-formatting</code></li> <li><a href="https://github.com/rustls/rustls/commit/ebf329756205ae0448e442be46e034ff9027dcce"><code>ebf3297</code></a> Fix new <code>clippy::manual_clear</code></li> <li><a href="https://github.com/rustls/rustls/commit/46808e7a195d9075fe5de90970153f419781a2c0"><code>46808e7</code></a> ci: sync cargo-check-external-types nightly</li> <li><a href="https://github.com/rustls/rustls/commit/041a8d23639aff4639bfc663522f289d9f546272"><code>041a8d2</code></a> Cargo deny: allow RUSTSEC-2026-0173</li> <li><a href="https://github.com/rustls/rustls/commit/62e220e470256a2bf8e893370da9be544446513f"><code>62e220e</code></a> Take semver-compatible dependency updates</li> <li><a href="https://github.com/rustls/rustls/commit/3c146963a758a3213264cd396084c2e686397a81"><code>3c14696</code></a> Upgrade to hickory-resolver 0.26</li> <li><a href="https://github.com/rustls/rustls/commit/848a2ccc10517e95784cc8480adec053679bbec4"><code>848a2cc</code></a> connect-tests: delete ech.rs</li> <li><a href="https://github.com/rustls/rustls/commit/5ce9cac2cfbfb00ae903eebd302ee2309826b4fe"><code>5ce9cac</code></a> Bump version to 0.23.41</li> <li>Additional commits viewable in <a href="https://github.com/rustls/rustls/compare/v/0.23.40...v/0.23.41">compare view</a></li> </ul> </details> <br /> Updates `rustc-hash` from 2.1.2 to 2.1.3 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/rustc-hash/blob/main/CHANGELOG.md">rustc-hash's changelog</a>.</em></p> <blockquote> <h1>2.1.3</h1> <ul> <li><a href="https://redirect.github.com/rust-lang/rustc-hash/pull/77">Use derive_const to fix <code>feature = "nightly"</code> build</a></li> <li><a href="https://redirect.github.com/rust-lang/rustc-hash/pull/64">Internally update to rand 0.9</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rust-lang/rustc-hash/commit/c13e7ccca705e6255387a2ebc6dca142d6881621"><code>c13e7cc</code></a> Merge pull request <a href="https://redirect.github.com/rust-lang/rustc-hash/issues/78">#78</a> from Noratrieb/new-version-2-1-3</li> <li><a href="https://github.com/rust-lang/rustc-hash/commit/4c3fabd983f96c2c5178512940e29a050edd07e9"><code>4c3fabd</code></a> Bump to 2.1.3</li> <li><a href="https://github.com/rust-lang/rustc-hash/commit/3f1c0994892f5c592fe17192811c3b46caa108ac"><code>3f1c099</code></a> Merge pull request <a href="https://redirect.github.com/rust-lang/rustc-hash/issues/64">#64</a> from DaniPopes/rand-0.9</li> <li><a href="https://github.com/rust-lang/rustc-hash/commit/07c3f48480b2d1a143fe299f5a82812b311efea6"><code>07c3f48</code></a> Merge pull request <a href="https://redirect.github.com/rust-lang/rustc-hash/issues/77">#77</a> from DaniPopes/const-update</li> <li><a href="https://github.com/rust-lang/rustc-hash/commit/cbf0baf6f900674cf88f266f96a4fa223895186b"><code>cbf0baf</code></a> Use derive_const in nightly feature</li> <li><a href="https://github.com/rust-lang/rustc-hash/commit/c74d2b3bb92563dbd32a9d7e6343af02d99dff25"><code>c74d2b3</code></a> Update to rand 0.9</li> <li>See full diff in <a href="https://github.com/rust-lang/rustc-hash/compare/v2.1.2...v2.1.3">compare view</a></li> </ul> </details> <br /> Updates `time` from 0.3.49 to 0.3.53 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/time-rs/time/releases">time's releases</a>.</em></p> <blockquote> <h2>v0.3.53</h2> <p>See the <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">changelog</a> for details.</p> <h2>v0.3.52</h2> <p>See the <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">changelog</a> for details.</p> <h2>v0.3.51</h2> <p>See the <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">changelog</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">time's changelog</a>.</em></p> <blockquote> <h2>0.3.53 [2026-07-01]</h2> <p>There are no publicly-facing changes in this release. It solely works around the <code>cookie</code> crate relying on an implementation detail of <code>time</code> that was never part of the public API (and thus subject to semver guarantees). The internal API has been reverted to the extent necessary for <code>cookie</code> to compile. This measure is temporary; the internal change will be re-applied in an yet-to-be-determined future release.</p> <h2>0.3.52 [2026-06-30]</h2> <h3>Fixed</h3> <ul> <li>Subsecond values in the <code>time!</code> macro are parsed using the textual representation, ensuring accuracy. Previously, they were parsed using the floating point representation, which could result in a loss of precision and even invalid values.</li> <li>The <code>date!</code> macro could previously create an invalid value that would then panic at compile time. The macro now emits a proper error instead.</li> <li>When parsing an invalid format description, an edge case would inadvertently panic. This now returns an error as intended.</li> </ul> <h3>Added</h3> <ul> <li>Support default values when parsing</li> </ul> <h2>0.3.51 [2026-06-22]</h2> <h3>Fixed</h3> <ul> <li><code>time</code> compiles with <code>macros</code> enabled. This version is otherwise identical to v0.3.50.</li> </ul> <h2>0.3.50 [2026-06-22] [YANKED]</h2> <p><em>This version was yanked because it would not compile when the <code>macros</code> feature was enabled.</em></p> <h3>Added</h3> <ul> <li><code>Timestamp</code> type</li> </ul> <h3>Fixed</h3> <ul> <li><code>[year]</code> in a runtime-parsed version 3 format description when the <code>large-dates</code> feature is not enabled now succeeds. This previously failed due to a missing <code>#[cfg]</code>.</li> </ul> <h3>Performance</h3> <ul> <li>Further gains when parsing with the non-deprecated parts of the RFC 2822 well-known format</li> <li>Gains when formatting with the ISO 8601 well-known format</li> <li><code>Date</code> arithmetic is improved in common situations</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/time-rs/time/commit/0ae2f84d02f0da9eb723b2224c48e337c53ce4f2"><code>0ae2f84</code></a> v0.3.53 release</li> <li><a href="https://github.com/time-rs/time/commit/cea8c96be7e09a28b8248338bf33d6d695ac6f8b"><code>cea8c96</code></a> Avoid issue with <code>cookie</code> crate temporarily</li> <li><a href="https://github.com/time-rs/time/commit/55e1f2bfc31419230852c60cb03967fe9bb24a57"><code>55e1f2b</code></a> Require private type to properly seal traits</li> <li><a href="https://github.com/time-rs/time/commit/7cf4780914b157df6c891ad8284dbb2fea608c7f"><code>7cf4780</code></a> v0.3.52 release</li> <li><a href="https://github.com/time-rs/time/commit/0e5b04f7d71cc8a792c928ac4924da9ed7a2ea0d"><code>0e5b04f</code></a> Fix trusted publishing workflow</li> <li><a href="https://github.com/time-rs/time/commit/6e4140a9647a5ba602e4fd2c7e4718e1aacda413"><code>6e4140a</code></a> Support default values when parsing</li> <li><a href="https://github.com/time-rs/time/commit/10ac36a5ef1693fcb8080eadc71b71163ccb7a2d"><code>10ac36a</code></a> Add more doctests to <code>Timestamp</code></li> <li><a href="https://github.com/time-rs/time/commit/6b0d468aceccd8e799817d90bd2de4e80bb2a495"><code>6b0d468</code></a> Restore lexer depth on the unclosed-bracket error path</li> <li><a href="https://github.com/time-rs/time/commit/0abc06dd38443ecbf1fcef653f6c029bc20aeda6"><code>0abc06d</code></a> Add trusted publishing</li> <li><a href="https://github.com/time-rs/time/commit/43cf0c0cabf815f009953e4bd2abacc802c5b189"><code>43cf0c0</code></a> Preferentially group shards by target</li> <li>Additional commits viewable in <a href="https://github.com/time-rs/time/compare/v0.3.49...v0.3.53">compare view</a></li> </ul> </details> <br /> Updates `log` from 0.4.32 to 0.4.33 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/log/blob/master/CHANGELOG.md">log's changelog</a>.</em></p> <blockquote> <h2>[0.4.33] - 2026-06-20</h2> <h2>What's Changed</h2> <ul> <li>Fixed key comparison by <a href="https://github.com/matteo-zeggiotti-ok"><code>@matteo-zeggiotti-ok</code></a> in <a href="https://redirect.github.com/rust-lang/log/pull/732">rust-lang/log#732</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/matteo-zeggiotti-ok"><code>@matteo-zeggiotti-ok</code></a> made their first contribution in <a href="https://redirect.github.com/rust-lang/log/pull/732">rust-lang/log#732</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/rust-lang/log/compare/0.4.32...0.4.33">https://github.com/rust-lang/log/compare/0.4.32...0.4.33</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rust-lang/log/commit/f405739f3a15a3f00680c793e1e1fa7e57d26ba4"><code>f405739</code></a> Merge pull request <a href="https://redirect.github.com/rust-lang/log/issues/734">#734</a> from rust-lang/cargo/0.4.33</li> <li><a href="https://github.com/rust-lang/log/commit/6a24abf0835cef62e3d882287c97307dd3ecb403"><code>6a24abf</code></a> prepare for 0.4.33 release</li> <li><a href="https://github.com/rust-lang/log/commit/87e062162e051d54bb553aacae3f0c6c4c213e59"><code>87e0621</code></a> Merge pull request <a href="https://redirect.github.com/rust-lang/log/issues/732">#732</a> from matteo-zeggiotti-ok/fix-key-comparison</li> <li><a href="https://github.com/rust-lang/log/commit/a9b57119a631249fc8e881c7ef78e2028aacb823"><code>a9b5711</code></a> Review: fallback to the &str hash</li> <li><a href="https://github.com/rust-lang/log/commit/cc89cc6e41190de36892e33fff48e5f48cf57fa9"><code>cc89cc6</code></a> Review: fixed other comparisons</li> <li><a href="https://github.com/rust-lang/log/commit/920e7dc2811c18a228bf78e818196de950659d85"><code>920e7dc</code></a> Review: fixed comparison on <code>MaybeStaticStr</code></li> <li><a href="https://github.com/rust-lang/log/commit/0d71d3c685f2e23b1ad209b48408efe1205b18b0"><code>0d71d3c</code></a> Fixed key comparison</li> <li>See full diff in <a href="https://github.com/rust-lang/log/compare/0.4.32...0.4.33">compare view</a></li> </ul> </details> <br /> Updates `trybuild` from 1.0.116 to 1.0.117 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/trybuild/releases">trybuild's releases</a>.</em></p> <blockquote> <h2>1.0.117</h2> <ul> <li>Better error message when TRYBUILD env var is wrong (<a href="https://redirect.github.com/dtolnay/trybuild/issues/332">#332</a>, thanks <a href="https://github.com/tisonkun"><code>@tisonkun</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/trybuild/commit/333eb00c74599029f98a6c1f98881b0d45b247c1"><code>333eb00</code></a> Release 1.0.117</li> <li><a href="https://github.com/dtolnay/trybuild/commit/820b8a599134173dd81b5fcca19c70802d4c29b3"><code>820b8a5</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/trybuild/issues/332">#332</a> from tisonkun/patch-1</li> <li><a href="https://github.com/dtolnay/trybuild/commit/7e9d0a63390c8e8340125debb5cba7ddf779eba9"><code>7e9d0a6</code></a> Update actions/checkout@v6 -> v7</li> <li><a href="https://github.com/dtolnay/trybuild/commit/8dd26681830672f3b0ed5eeabdc77742d592bcc9"><code>8dd2668</code></a> Better error message when TRYBUILD env var is wrong</li> <li><a href="https://github.com/dtolnay/trybuild/commit/0ee8f5a98ab5955bb108f15066f06aaaaa2cc77c"><code>0ee8f5a</code></a> Raise required compiler to Rust 1.85</li> <li><a href="https://github.com/dtolnay/trybuild/commit/4dec71c184020caf4fb3b0a327291bf2b88d4255"><code>4dec71c</code></a> Resolve unnecessary_map_or clippy lint</li> <li><a href="https://github.com/dtolnay/trybuild/commit/7d7cc4cddfd3b691b93c14b0a0d3c47aff2479a5"><code>7d7cc4c</code></a> Raise required compiler to Rust 1.82</li> <li>See full diff in <a href="https://github.com/dtolnay/trybuild/compare/1.0.116...1.0.117">compare view</a></li> </ul> </details> <br /> Updates `rustyline` from 18.0.0 to 18.0.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/kkawakam/rustyline/releases">rustyline's releases</a>.</em></p> <blockquote> <h2>18.0.1</h2> <h2>What's Changed</h2> <ul> <li>Fix page_completions <a href="https://redirect.github.com/kkawakam/rustyline/issues/949">#949</a>, <a href="https://redirect.github.com/kkawakam/rustyline/issues/948">#948</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/kkawakam/rustyline/compare/v18.0.0...v18.0.1">https://github.com/kkawakam/rustyline/compare/v18.0.0...v18.0.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/kkawakam/rustyline/commit/cc1aab036d62aff3dbdc681b08949076ec275030"><code>cc1aab0</code></a> Prepare 18.0.1 release</li> <li><a href="https://github.com/kkawakam/rustyline/commit/eb7ab827a26418e18d62d8dd1f4f907855c75216"><code>eb7ab82</code></a> Merge pull request <a href="https://redirect.github.com/kkawakam/rustyline/issues/949">#949</a> from gwenn/comp</li> <li>See full diff in <a href="https://github.com/kkawakam/rustyline/compare/v18.0.0...v18.0.1">compare view</a></li> </ul> </details> <br /> Updates `quote` from 1.0.45 to 1.0.46 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/quote/releases">quote's releases</a>.</em></p> <blockquote> <h2>1.0.46</h2> <ul> <li>Avoid repeated <code>get_span</code> in <code>quote_spanned</code> (<a href="https://redirect.github.com/dtolnay/quote/issues/329">#329</a>, thanks <a href="https://github.com/Noratrieb"><code>@Noratrieb</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/quote/commit/bc4caf255fa9e58e025e5ff5a11ca948442c0f7a"><code>bc4caf2</code></a> Release 1.0.46</li> <li><a href="https://github.com/dtolnay/quote/commit/dc0e3045d7f719e6c7f3498a667fa8b2afc7e761"><code>dc0e304</code></a> Format with rustfmt</li> <li><a href="https://github.com/dtolnay/quote/commit/712114c69539b88611fa642d159d0d5806b427f3"><code>712114c</code></a> Drop arrow from syntax of quote_spanned_with_expanded_span</li> <li><a href="https://github.com/dtolnay/quote/commit/f93ab8ab9988d42ff36f4d552dc16fa9189fc925"><code>f93ab8a</code></a> Eliminate quote_spanned_with_expanded_span_as_expr macro</li> <li><a href="https://github.com/dtolnay/quote/commit/1ff39515429f7250e11be80357485fa0eca699fa"><code>1ff3951</code></a> Eliminate __quote_spanned macro</li> <li><a href="https://github.com/dtolnay/quote/commit/64e913ad914ebaab312cb7c3012a9e14e384b27d"><code>64e913a</code></a> Unify quote_spanned definitions</li> <li><a href="https://github.com/dtolnay/quote/commit/2978e8b9c991349b28f62eeb31a1c1b72f3b6f26"><code>2978e8b</code></a> Wrap comment to 80 columns</li> <li><a href="https://github.com/dtolnay/quote/commit/7f311a01f4f3c1837dc4e954e168bfcfed792165"><code>7f311a0</code></a> Fix PR 329 fat arrow spacing</li> <li><a href="https://github.com/dtolnay/quote/commit/313a8a25a4d298af36108e2e682767ecc9cb56d1"><code>313a8a2</code></a> Remove unneeded get_span from PR 329</li> <li><a href="https://github.com/dtolnay/quote/commit/0b33821245d285d764e0d3ea4a77093004148872"><code>0b33821</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/quote/issues/329">#329</a> from Noratrieb/avoid-repeat-expand</li> <li>Additional commits viewable in <a href="https://github.com/dtolnay/quote/compare/1.0.45...1.0.46">compare view</a></li> </ul> </details> <br /> Updates `rand` from 0.10.1 to 0.10.2 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-random/rand/blob/master/CHANGELOG.md">rand's changelog</a>.</em></p> <blockquote> <h2>[0.10.2] — 2026-07-02</h2> <h3>Fixes</h3> <ul> <li>Fix possible memory safety violation due to deserialization of <code>UniformChar</code> from bad source (<a href="https://redirect.github.com/rust-random/rand/issues/1790">#1790</a>)</li> </ul> <h3>Changes</h3> <ul> <li>Document required output order of fn <code>partial_shuffle</code> and apply <code>#[must_use]</code> (<a href="https://redirect.github.com/rust-random/rand/issues/1769">#1769</a>)</li> <li>Avoid usage of <code>unsafe</code> in contexts where non-local memory corruption could invalidate contract (<a href="https://redirect.github.com/rust-random/rand/issues/1791">#1791</a>)</li> </ul> <p><a href="https://redirect.github.com/rust-random/rand/issues/1769">#1769</a>: <a href="https://redirect.github.com/rust-random/rand/pull/1769">rust-random/rand#1769</a> <a href="https://redirect.github.com/rust-random/rand/issues/1790">#1790</a>: <a href="https://redirect.github.com/rust-random/rand/pull/1790">rust-random/rand#1790</a> <a href="https://redirect.github.com/rust-random/rand/issues/1791">#1791</a>: <a href="https://redirect.github.com/rust-random/rand/pull/1791">rust-random/rand#1791</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rust-random/rand/commit/1540ea327e8beaf0694ea64f6d9eb8eaadd47bd5"><code>1540ea3</code></a> Prepare rand 0.10.2 (<a href="https://redirect.github.com/rust-random/rand/issues/1800">#1800</a>)</li> <li><a href="https://github.com/rust-random/rand/commit/a29964ad94b54c25b3865626de6964ce0f796a29"><code>a29964a</code></a> Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (<a href="https://redirect.github.com/rust-random/rand/issues/1801">#1801</a>)</li> <li><a href="https://github.com/rust-random/rand/commit/ced94914cb75c93a1f19140a966a466345185fff"><code>ced9491</code></a> Tweak docs for RngExt::random_range and SampleRange (<a href="https://redirect.github.com/rust-random/rand/issues/1798">#1798</a>)</li> <li><a href="https://github.com/rust-random/rand/commit/db146647afaf002b866420d34e4501b0dd872163"><code>db14664</code></a> Check UniformChar validity on deser (<a href="https://redirect.github.com/rust-random/rand/issues/1790">#1790</a>)</li> <li><a href="https://github.com/rust-random/rand/commit/bea8620204c7aeecdefc132b5cb0dec8134add4b"><code>bea8620</code></a> Bump the all-deps group with 2 updates (<a href="https://redirect.github.com/rust-random/rand/issues/1796">#1796</a>)</li> <li><a href="https://github.com/rust-random/rand/commit/4f449322825498e4ec1f486119e5fd251ba97f8a"><code>4f44932</code></a> Bump actions/cache from 5 to 6 (<a href="https://redirect.github.com/rust-random/rand/issues/1795">#1795</a>)</li> <li><a href="https://github.com/rust-random/rand/commit/b999a130a990b30af01743021e8ea97f3b09a17e"><code>b999a13</code></a> Bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/rust-random/rand/issues/1794">#1794</a>)</li> <li><a href="https://github.com/rust-random/rand/commit/aeab810bd9704a3b7666ba0a78e1ad5d1d5ad1ae"><code>aeab810</code></a> Avoid unsafe where safety depends on non-local values (<a href="https://redirect.github.com/rust-random/rand/issues/1791">#1791</a>)</li> <li><a href="https://github.com/rust-random/rand/commit/1896d7c660524a022b3dbc3a1e044e162d766b25"><code>1896d7c</code></a> Add typos CI job (<a href="https://redirect.github.com/rust-random/rand/issues/1789">#1789</a>)</li> <li><a href="https://github.com/rust-random/rand/commit/43eddee18c8cca2cebee929be3899cf183afe801"><code>43eddee</code></a> Bump the all-deps group with 2 updates (<a href="https://redirect.github.com/rust-random/rand/issues/1788">#1788</a>)</li> <li>Additional commits viewable in <a href="https://github.com/rust-random/rand/compare/0.10.1...0.10.2">compare view</a></li> </ul> </details> <br /> Updates `arrayvec` from 0.7.6 to 0.7.8 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bluss/arrayvec/blob/master/CHANGELOG.md">arrayvec's changelog</a>.</em></p> <blockquote> <h2>0.7.8</h2> <ul> <li>Fix tests on 32-bit architectures by skipping them by <a href="https://github.com/decathorpe"><code>@decathorpe</code></a> <a href="https://redirect.github.com/bluss/arrayvec/pull/312">#312</a>.</li> </ul> <h2>0.7.7</h2> <ul> <li>Fix lifetime warning by <a href="https://github.com/niklasf"><code>@niklasf</code></a> <a href="https://redirect.github.com/bluss/arrayvec/pull/305">#305</a></li> <li>Fix double free for ZSTs by <a href="https://github.com/Shnatsel"><code>@Shnatsel</code></a> <a href="https://redirect.github.com/bluss/arrayvec/pull/308">#308</a></li> <li>Use 16-bit length on 16-bit targets (internal representation change) by <a href="https://github.com/kornelski"><code>@kornelski</code></a> <a href="https://redirect.github.com/bluss/arrayvec/pull/234">#234</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bluss/arrayvec/commit/0cb664cf505844348538230479b0040b44f3faf1"><code>0cb664c</code></a> 0.7.8</li> <li><a href="https://github.com/bluss/arrayvec/commit/f3a707f00201a6616006bee0151971809f9b0c2d"><code>f3a707f</code></a> Update CHANGELOG</li> <li><a href="https://github.com/bluss/arrayvec/commit/66f86e46929264b6a85d521ce9e469a8c523c3b8"><code>66f86e4</code></a> tests: skip two tests on 32-bit architectures</li> <li><a href="https://github.com/bluss/arrayvec/commit/8267e7e5614569192bd794fea9e88f85ed913eb8"><code>8267e7e</code></a> 0.7.7</li> <li><a href="https://github.com/bluss/arrayvec/commit/af46ae7792c6db081a6b93660ba7cbb95f671e02"><code>af46ae7</code></a> Update CHANGELOG</li> <li><a href="https://github.com/bluss/arrayvec/commit/1bc606d8c83a34b8fae9dd117bfeab10f90d2ca7"><code>1bc606d</code></a> Fix warning about hidden elided lifetime in <code>Drain</code></li> <li><a href="https://github.com/bluss/arrayvec/commit/29daea95b91046c1d18cdc738cec4f639ec2661e"><code>29daea9</code></a> Fix double-free for ZSTs with Drop in .extend()</li> <li><a href="https://github.com/bluss/arrayvec/commit/0ff49b9614311456def2f15748b7341efa0bf731"><code>0ff49b9</code></a> add a test demonstrating double-free in extend() for ZSTs</li> <li><a href="https://github.com/bluss/arrayvec/commit/812c83a2b16c7d97c5e5250ebfd785da4e089895"><code>812c83a</code></a> Use 16-bit lengths on 16-bit targets</li> <li><a href="https://github.com/bluss/arrayvec/commit/4ef0e8902896ac553ef25f36190f1c61498086fc"><code>4ef0e89</code></a> Add <code>ArrayVec::spare_capacity_mut</code></li> <li>See full diff in <a href="https://github.com/bluss/arrayvec/compare/0.7.6...0.7.8">compare view</a></li> </ul> </details> <br /> Updates `timezone_provider` from 0.2.3 to 0.2.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/boa-dev/temporal/releases">timezone_provider's releases</a>.</em></p> <blockquote> <h2>v0.2.4 release</h2> <h2>What's Changed in v0.2.4</h2> <ul> <li>ZonedDateTime backward shift spec change by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/725">#725</a></li> <li>Fix ComputeNudgeWindow startEpochNs computation to check full startDateDuration sign by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/723">#723</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/boa-dev/temporal/compare/v0.2.3...v0.2.4">https://github.com/boa-dev/temporal/compare/v0.2.3...v0.2.4</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/boa-dev/temporal/blob/main/CHANGELOG.md">timezone_provider's changelog</a>.</em></p> <blockquote> <h2>What's Changed in v0.2.4</h2> <ul> <li>ZonedDateTime backward shift spec change by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/725">#725</a></li> <li>Fix ComputeNudgeWindow startEpochNs computation to check full startDateDuration sign by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/723">#723</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/boa-dev/temporal/compare/v0.2.3...v0.2.4">https://github.com/boa-dev/temporal/compare/v0.2.3...v0.2.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/boa-dev/temporal/commit/a5cebbcce231552bf6ed985d7ea13b0c7b195f02"><code>a5cebbc</code></a> Release temporal_rs 0.2.4 (<a href="https://redirect.github.com/boa-dev/temporal/issues/731">#731</a>)</li> <li><a href="https://github.com/boa-dev/temporal/commit/f10b8d50a922893cfa3cd0529ca1b800d571347c"><code>f10b8d5</code></a> chore(dependabot): bump the rust-dependencies group with 9 updates (<a href="https://redirect.github.com/boa-dev/temporal/issues/728">#728</a>)</li> <li><a href="https://github.com/boa-dev/temporal/commit/ced23bc97b373e03c52683d3c5afc049ec89bab0"><code>ced23bc</code></a> ZonedDateTime backward shift spec change (<a href="https://redirect.github.com/boa-dev/temporal/issues/725">#725</a>)</li> <li><a href="https://github.com/boa-dev/temporal/commit/d47580805556a2e75575e547db165c24d5391145"><code>d475808</code></a> Fix ComputeNudgeWindow startEpochNs computation to check full startDateDurati...</li> <li>See full diff in <a href="https://github.com/boa-dev/temporal/compare/v0.2.3...v0.2.4">compare view</a></li> </ul> </details> <br /> Updates `temporal_rs` from 0.2.3 to 0.2.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/boa-dev/temporal/releases">temporal_rs's releases</a>.</em></p> <blockquote> <h2>v0.2.4 release</h2> <h2>What's Changed in v0.2.4</h2> <ul> <li>ZonedDateTime backward shift spec change by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/725">#725</a></li> <li>Fix ComputeNudgeWindow startEpochNs computation to check full startDateDuration sign by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/723">#723</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/boa-dev/temporal/compare/v0.2.3...v0.2.4">https://github.com/boa-dev/temporal/compare/v0.2.3...v0.2.4</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/boa-dev/temporal/blob/main/CHANGELOG.md">temporal_rs's changelog</a>.</em></p> <blockquote> <h2>What's Changed in v0.2.4</h2> <ul> <li>ZonedDateTime backward shift spec change by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/725">#725</a></li> <li>Fix ComputeNudgeWindow startEpochNs computation to check full startDateDuration sign by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/723">#723</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/boa-dev/temporal/compare/v0.2.3...v0.2.4">https://github.com/boa-dev/temporal/compare/v0.2.3...v0.2.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/boa-dev/temporal/commit/a5cebbcce231552bf6ed985d7ea13b0c7b195f02"><code>a5cebbc</code></a> Release temporal_rs 0.2.4 (<a href="https://redirect.github.com/boa-dev/temporal/issues/731">#731</a>)</li> <li><a href="https://github.com/boa-dev/temporal/commit/f10b8d50a922893cfa3cd0529ca1b800d571347c"><code>f10b8d5</code></a> chore(dependabot): bump the rust-dependencies group with 9 updates (<a href="https://redirect.github.com/boa-dev/temporal/issues/728">#728</a>)</li> <li><a href="https://github.com/boa-dev/temporal/commit/ced23bc97b373e03c52683d3c5afc049ec89bab0"><code>ced23bc</code></a> ZonedDateTime backward shift spec change (<a href="https://redirect.github.com/boa-dev/temporal/issues/725">#725</a>)</li> <li><a href="https://github.com/boa-dev/temporal/commit/d47580805556a2e75575e547db165c24d5391145"><code>d475808</code></a> Fix ComputeNudgeWindow startEpochNs computation to check full startDateDurati...</li> <li>See full diff in <a href="https://github.com/boa-dev/temporal/compare/v0.2.3...v0.2.4">compare view</a></li> </ul> </details> <br /> Updates `icu_collator` from 2.2.0 to 2.2.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/unicode-org/icu4x/blob/main/CHANGELOG.md">icu_collator's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>icu 2.2.x</h2> <p>Several crates have had patch releases in the 2.2 stream:</p> <ul> <li>Components <ul> <li>(2.2.1) <code>icu_calendar</code> <ul> <li>Fix extended year calculations in Gregorian-like and Coptic-like calendars (unicode-org#7849)</li> </ul> </li> <li>(2.2.1) <code>icu_collator</code> <ul> <li>Fix panic when using <code>AlternateHandling::Shifted</code> with <code>MaxVariable::Currency</code> (off-by-one in special primaries validation). (unicode-org#8081)</li> </ul> </li> </ul> </li> <li>Utils <ul> <li>(0.8.3) <code>yoke</code> <ul> <li>Fix soundness of Send/Sync impls on CartableOptionPointer (unicode-org#8029)</li> <li>Update to 2024 edition where possible (unicode-org#7878)</li> </ul> </li> </ul> </li> </ul> <h2>icu4x 2.2</h2> <ul> <li>Components <ul> <li>General <ul> <li>Use HTTPS links in docs (unicode-org#7212)</li> <li>Update MSRV to 1.86 (unicode-org#7576)</li> <li>Updated to CLDR 48.2 (unicode-org#7792)</li> <li>Replace <code>experimental</code> features with <code>unstable</code> features (unicode-org#7566)</li> <li>Add categories and keywords to Cargo.toml for all components (unicode-org#7737)</li> </ul> </li> <li><code>icu_calendar</code> <ul> <li>Add <code>Date::try_new</code>, which replaces <code>Date::try_new_from_codes</code>, and takes typed year/month values. (unicode-org#7773, unicode-org#7764)</li> <li>New methods: <code>Date::try_new</code> (and primarily-internal <code>Calendar::new_date</code>)</li> <li>New types: <code>InputYear</code>, <code>DateNewError</code></li> <li>Handle possible <code>Overflow</code> values on individual calendars (unicode-org#7795)</li> <li>New <code>Date::try_from_fields</code> API for fully general date construction from various choices of year and month values (unicode-org#7798)</li> <li>New methods: <code>Date::try_from_fields()</code></li> <li>New types: <code>DateFields</code>, <code>DateFromFieldsOptions</code>, <code>Overflow</code>, <code>MissingFieldsStrategy</code>, <code>DateFromFieldsError</code></li> <li>New associated method: <code>Calendar::from_fields()</code></li> <li>New Date arithmetic APIs for adding and subtracting dates (unicode-org#7798, unicode-org#7355, unicode-org#7257)</li> <li>New methods: <code>Date::try_add_with_options</code>, <code>Date::try_added_with_options</code>, <code>Date::try_until_with_options</code></li> <li>New types: <code>DateDuration</code>, <code>DateAddOptions</code>, <code>DateDifferenceOptions</code>, <code>DateDurationUnit</code>, <code>DateDurationParseError</code>, <code>DateAddError</code>, <code>MismatchedCalendarError</code></li> <li>New associated items: <code>Calendar::add</code>, <code>Calendar::until</code>, <code>Calendar::DateCompatibilityError</code></li> <li>Introduce a new <code>Month</code> type, preferred over using month codes (unicode-org#7147, unicode-org#7756) <ul> <li>New type: <code>Month</code></li> <li>New method: <code>MonthInfo::to_input()</code></li> </ul> </li> <li>Introduce year/date ranges to all APIs, documented on the APIs themselves. <code>Date</code> now has a fundamental range (ISO years between ±999,999), and most constructors enforce a stricter range of ±9999 years for input years. (unicode-org#7676, unicode-org#7062, unicode-org#7629, unicode-org#7753, unicode-org#7219, unicode-org#7227)</li> <li>Add constructors with <code>Month</code> for lunisolar calendars (unicode-org#7485)</li> <li>New methods: <code>Date::try_new_korean_traditional()</code>, <code>Date::try_new_chinese_traditional()</code>, <code>Date::try_new_hebrew_v2()</code></li> <li>Expose <code>LeapStatus</code> on <code>MonthInfo</code> (unicode-org#7667)</li> <li>New method: <code>MonthInfo::leap_status()</code></li> <li>New enum: <code>LeapStatus</code></li> <li>(Unstable) Integrate with <code>chrono</code>, <code>jiff</code>, and <code>time</code> (unicode-org#7617, unicode-org#7711)</li> <li>New impls: <code>From<chrono::NaiveDate></code>, <code>From<jiff::civil::Date></code>, <code>From<time::Date></code> for <code>Date<Gregorian></code></li> </ul> </li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/unicode-org/icu4x/commit/6f32890b737485e86b712777edb7001d2f31c9c8"><code>6f32890</code></a> Publish icu_calendar 2.2.1 (<a href="https://redirect.github.com/unicode-org/icu4x/issues/7850">#7850</a>)</li> <li><a href="https://github.com/unicode-org/icu4x/commit/20b106f661064f21182e15ce25e3e4b36be69c04"><code>20b106f</code></a> Fix extended year calculations by adding internal types AbstractGregorianYear...</li> <li>See full diff in <a href="https://github.com/unicode-org/icu4x/compare/icu@2.2.0...ind/icu_calendar@2.2.1">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…sts/fuzz (boa-dev#5421) Updates the requirements on [num-bigint](https://github.com/rust-num/num-bigint) to permit the latest version. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-num/num-bigint/blob/master/RELEASES.md">num-bigint's changelog</a>.</em></p> <blockquote> <h1>Release 0.5.0 (2026-07-02)</h1> <ul> <li><a href="https://redirect.github.com/rust-num/num-bigint/pull/338">Upgrade to <code>rand</code> v0.10 and/or v0.9, and split <code>rand_core</code></a>. <ul> <li>The former <code>rand</code> feature is now split into multiple features, <code>rand_0_9</code>, <code>rand_core_0_9</code>, <code>rand_0_10</code>, and <code>rand_core_0_10</code>, depending on the version and feature set you need.</li> <li>The <code>RandBigInt</code> extension trait is now split into <code>BigRng09</code> and <code>BigRng010</code> for each version.</li> <li>The <code>gen_*</code> methods are deprecated in favor of new <code>random_*</code> methods.</li> <li>This is also a <a href="https://rust-random.github.io/book/crate-reprod.html#api-breaking-value-breaking-and-semver">value-breaking</a> release, as <code>rand</code> defines it.</li> </ul> </li> </ul> <p><strong>Contributors</strong>: <a href="https://github.com/bionicles"><code>@bionicles</code></a>, <a href="https://github.com/cuviper"><code>@cuviper</code></a>, <a href="https://github.com/divergentdave"><code>@divergentdave</code></a></p> <h1>Release 0.4.7 (2026-07-02)</h1> <ul> <li><a href="https://redirect.github.com/rust-num/num-bigint/pull/307">Inline single-digit values.</a> This reduces heap allocations, and also enables <code>const ONE</code>, <code>const NEG_ONE</code>, and <code>const fn new_const</code>.</li> <li><a href="https://redirect.github.com/rust-num/num-bigint/pull/316">Use divide and conquer in <code>to_radix_digits</code>,</a> also implementing the Burnikel-Ziegler algorithm to speed up large divisions in general.</li> <li><a href="https://redirect.github.com/rust-num/num-bigint/pull/330">Implement <code>LowerBounded</code> for <code>BigUint</code>.</a></li> </ul> <p><strong>Contributors</strong>: <a href="https://github.com/cp289"><code>@cp289</code></a>, <a href="https://github.com/cuviper"><code>@cuviper</code></a>, <a href="https://github.com/hkalbasi"><code>@hkalbasi</code></a>, <a href="https://github.com/mikem8891"><code>@mikem8891</code></a>, <a href="https://github.com/pRizz"><code>@pRizz</code></a>, <a href="https://github.com/tyilo"><code>@tyilo</code></a>, <a href="https://github.com/xtqqczze"><code>@xtqqczze</code></a></p> <h1>Release 0.4.6 (2024-06-27)</h1> <ul> <li><a href="https://redirect.github.com/rust-num/num-bigint/pull/312">Fixed compilation on <code>x86_64-unknown-linux-gnux32</code>.</a></li> </ul> <p><strong>Contributors</strong>: <a href="https://github.com/cuviper"><code>@cuviper</code></a>, <a href="https://github.com/ralphtandetzky"><code>@ralphtandetzky</code></a>, <a href="https://github.com/yhx-12243"><code>@yhx-12243</code></a></p> <h1>Release 0.4.5 (2024-05-06)</h1> <ul> <li>[Upgrade to 2021 edition, <strong>MSRV 1.60</strong>][292]</li> <li>[Add <code>const ZERO</code> and implement <code>num_traits::ConstZero</code>][298]</li> <li><a href="https://redirect.github.com/rust-num/num-bigint/pull/288">Add <code>modinv</code> methods for the modular inverse</a></li> <li>[Optimize multiplication with imbalanced operands][295]</li> <li><a href="https://redirect.github.com/rust-num/num-bigint/pull/236">Optimize scalar division on x86 and x86-64</a></li> </ul> <p><strong>Contributors</strong>: <a href="https://github.com/cuviper"><code>@cuviper</code></a>, <a href="https://github.com/joelonsql"><code>@joelonsql</code></a>, <a href="https://github.com/waywardmonkeys"><code>@waywardmonkeys</code></a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rust-num/num-bigint/commit/0ab95df78c44aeb9036b3b4f06ff39a740230924"><code>0ab95df</code></a> Merge pull request <a href="https://redirect.github.com/rust-num/num-bigint/issues/338">#338</a> from cuviper/rand-0.10</li> <li><a href="https://github.com/rust-num/num-bigint/commit/33d6998b40cad9787e2179ddfecf8eab655d759d"><code>33d6998</code></a> Release 0.5.0</li> <li><a href="https://github.com/rust-num/num-bigint/commit/84d05b791d0b748b5bac9c7766109853949e5034"><code>84d05b7</code></a> Clean up manifests of ci crates</li> <li><a href="https://github.com/rust-num/num-bigint/commit/f8daf564cd3d0888c3aeca6e4a0e63cb3c69a83d"><code>f8daf56</code></a> Allow <code>clippy::duplicate_mod</code> where intended</li> <li><a href="https://github.com/rust-num/num-bigint/commit/022310ab277684b9e7fe586304d0dfaa11cb73fe"><code>022310a</code></a> Rearrange the <code>rand</code> features to support both 0.9 and 0.10</li> <li><a href="https://github.com/rust-num/num-bigint/commit/537a0362554ae00a97dbe4af58770dfcd0e0a1ca"><code>537a036</code></a> ci: use the fallback resolver for deps</li> <li><a href="https://github.com/rust-num/num-bigint/commit/6303d1a312295a8d62ccde624f25dc806d9d9b43"><code>6303d1a</code></a> Upgrade to <code>rand v0.10</code> and split <code>rand_core v0.10</code></li> <li><a href="https://github.com/rust-num/num-bigint/commit/1d3365b0d3b681059686f079222f323ac800304b"><code>1d3365b</code></a> Merge pull request <a href="https://redirect.github.com/rust-num/num-bigint/issues/346">#346</a> from cuviper/release-0.4.7</li> <li><a href="https://github.com/rust-num/num-bigint/commit/73a720548ddbc9f76589bc97b13c66244986e04d"><code>73a7205</code></a> Release 0.4.7</li> <li><a href="https://github.com/rust-num/num-bigint/commit/6e9fe33140bcb8f0a6cc6cb8b77146f093105b1b"><code>6e9fe33</code></a> Merge pull request <a href="https://redirect.github.com/rust-num/num-bigint/issues/335">#335</a> from cp289/sign_docs</li> <li>Additional commits viewable in <a href="https://github.com/rust-num/num-bigint/compare/num-bigint-0.4.6...num-bigint-0.5.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… 9 updates (boa-dev#5430) Bumps the rust-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [bitflags](https://github.com/bitflags/bitflags) | `2.13.0` | `2.13.1` | | [clap](https://github.com/clap-rs/clap) | `4.6.1` | `4.6.2` | | [regex](https://github.com/rust-lang/regex) | `1.13.0` | `1.13.1` | | [rustls](https://github.com/rustls/rustls) | `0.23.41` | `0.23.42` | | [trybuild](https://github.com/dtolnay/trybuild) | `1.0.117` | `1.0.118` | | [toml](https://github.com/toml-rs/toml) | `1.1.2+spec-1.1.0` | `1.1.3+spec-1.1.0` | | [syn](https://github.com/dtolnay/syn) | `2.0.118` | `2.0.119` | | [ryu-js](https://github.com/boa-dev/ryu-js) | `1.0.2` | `1.0.3` | | [bytemuck](https://github.com/Lokathor/bytemuck) | `1.25.0` | `1.25.1` | Updates `bitflags` from 2.13.0 to 2.13.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bitflags/bitflags/releases">bitflags's releases</a>.</em></p> <blockquote> <h2>2.13.1</h2> <h2>What's Changed</h2> <ul> <li>Lower the LLVM IR output of the generated output by <a href="https://github.com/bolshoytoster"><code>@bolshoytoster</code></a> in <a href="https://redirect.github.com/bitflags/bitflags/pull/492">bitflags/bitflags#492</a></li> <li>Prepare for 2.13.1 release by <a href="https://github.com/KodrAus"><code>@KodrAus</code></a> in <a href="https://redirect.github.com/bitflags/bitflags/pull/493">bitflags/bitflags#493</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/bolshoytoster"><code>@bolshoytoster</code></a> made their first contribution in <a href="https://redirect.github.com/bitflags/bitflags/pull/492">bitflags/bitflags#492</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/bitflags/bitflags/compare/2.13.0...2.13.1">https://github.com/bitflags/bitflags/compare/2.13.0...2.13.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md">bitflags's changelog</a>.</em></p> <blockquote> <h1>2.13.1</h1> <h2>What's Changed</h2> <ul> <li>Lower the LLVM IR output of the generated output by <a href="https://github.com/bolshoytoster"><code>@bolshoytoster</code></a> in <a href="https://redirect.github.com/bitflags/bitflags/pull/492">bitflags/bitflags#492</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/bolshoytoster"><code>@bolshoytoster</code></a> made their first contribution in <a href="https://redirect.github.com/bitflags/bitflags/pull/492">bitflags/bitflags#492</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/bitflags/bitflags/compare/2.13.0...2.13.1">https://github.com/bitflags/bitflags/compare/2.13.0...2.13.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bitflags/bitflags/commit/f92a2921b41644b02ca5d50a6ace542e309e6a6f"><code>f92a292</code></a> Merge pull request <a href="https://redirect.github.com/bitflags/bitflags/issues/493">#493</a> from bitflags/cargo/2.13.1</li> <li><a href="https://github.com/bitflags/bitflags/commit/c1271c5dc836456340be6030efefbb758e7a0730"><code>c1271c5</code></a> prepare for 2.13.1 release</li> <li><a href="https://github.com/bitflags/bitflags/commit/e077c4a679706661af508a91cfd96c6a7c4ac2d2"><code>e077c4a</code></a> Merge pull request <a href="https://redirect.github.com/bitflags/bitflags/issues/492">#492</a> from bolshoytoster/main</li> <li><a href="https://github.com/bitflags/bitflags/commit/75d1be4a8d98c1ef786da6d3e221d30dfb376114"><code>75d1be4</code></a> Bless compile fail stderr</li> <li><a href="https://github.com/bitflags/bitflags/commit/7813d71fef32d3c1e44711fd676b8b6d415bbb92"><code>7813d71</code></a> Support the MSRV</li> <li><a href="https://github.com/bitflags/bitflags/commit/d8f8234d2e2154c05f9ae97d781322da8084795a"><code>d8f8234</code></a> Remove unused variable warning with empty bitflags</li> <li><a href="https://github.com/bitflags/bitflags/commit/2e27d6aedbaae29054d855297001b01b44d656a3"><code>2e27d6a</code></a> Fix <code>const _ = !0;</code></li> <li><a href="https://github.com/bitflags/bitflags/commit/dd8beda61fff94c7b11c09b0ba0b1cd6c4111241"><code>dd8beda</code></a> Fix Self in flags</li> <li><a href="https://github.com/bitflags/bitflags/commit/dbc0ce19fd09db5c6ee0a23e788ebbd16957955a"><code>dbc0ce1</code></a> Lower the LLVM IR output of the generated output</li> <li>See full diff in <a href="https://github.com/bitflags/bitflags/compare/2.13.0...2.13.1">compare view</a></li> </ul> </details> <br /> Updates `clap` from 4.6.1 to 4.6.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/clap-rs/clap/releases">clap's releases</a>.</em></p> <blockquote> <h2>v4.6.2</h2> <h2>[4.6.2] - 2026-07-15</h2> <h3>Fixes</h3> <ul> <li><em>(help)</em> Say <code>alias</code> when there is only one</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/clap-rs/clap/blob/master/CHANGELOG.md">clap's changelog</a>.</em></p> <blockquote> <h2>[4.6.2] - 2026-07-15</h2> <h3>Fixes</h3> <ul> <li><em>(help)</em> Say <code>alias</code> when there is only one</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/clap-rs/clap/commit/0fe0be302726f4253b9bee27eed48438c92917aa"><code>0fe0be3</code></a> chore: Release</li> <li><a href="https://github.com/clap-rs/clap/commit/480af9d045453f4ab96d9bdd4d4b9f5aab3c272f"><code>480af9d</code></a> docs: Update changelog</li> <li><a href="https://github.com/clap-rs/clap/commit/2b3ddd0294a147d1eda917cb303243bcde0c12ee"><code>2b3ddd0</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/6340">#6340</a> from liskin/fix-completion-escape</li> <li><a href="https://github.com/clap-rs/clap/commit/7ffe7399ff032cc247eb0449cf8fcdfbfe55a4ec"><code>7ffe739</code></a> fix(complete): Do not suggest options after "--"</li> <li><a href="https://github.com/clap-rs/clap/commit/d47fc4f8a5e9fcc16d0cae15b51e6eb1a8ed5832"><code>d47fc4f</code></a> test(complete): Options suggested after escape (<code>--</code>)</li> <li>See full diff in <a href="https://github.com/clap-rs/clap/compare/clap_complete-v4.6.1...clap_complete-v4.6.2">compare view</a></li> </ul> </details> <br /> Updates `regex` from 1.13.0 to 1.13.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/regex/blob/master/CHANGELOG.md">regex's changelog</a>.</em></p> <blockquote> <h1>1.13.1 (2026-07-15)</h1> <p>This is a release that fixes a bug where incorrect regex match offsets could be reported. Note that this doesn't impact whether a match occurs or not, just where it occurs. The match offsets are still valid for slicing, they just may not refer to the correct leftmost-first match. See <a href="https://redirect.github.com/rust-lang/regex/pull/1364">#1364</a> for (many) more details.</p> <p>Bug fixes:</p> <ul> <li><a href="https://redirect.github.com/rust-lang/regex/issues/1354">#1354</a>: Fixes previously unsound reverse suffix and inner optimizations.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rust-lang/regex/commit/2b527599eb9eea0dcc288c704584f242f26a5c61"><code>2b52759</code></a> 1.13.1, redux</li> <li><a href="https://github.com/rust-lang/regex/commit/40e98238fff903f3e1ec95bbdb487185dd60504a"><code>40e9823</code></a> 1.13.1</li> <li><a href="https://github.com/rust-lang/regex/commit/75fcb962d6ea1c456f6f023c9537a66389413a85"><code>75fcb96</code></a> changelog: 1.13.1</li> <li><a href="https://github.com/rust-lang/regex/commit/64ad0b618e043b791ed5385dd5504a436da1ddae"><code>64ad0b6</code></a> automata: fix bug in reverse suffix/inner optimization</li> <li><a href="https://github.com/rust-lang/regex/commit/fa91c31a4291c9dda6afe19829e6fe2e3bbc2da5"><code>fa91c31</code></a> automata: fix a bug caught by Codex review</li> <li><a href="https://github.com/rust-lang/regex/commit/30390ec3e8889aad830337cdf3a7a01ae195ae73"><code>30390ec</code></a> automata: formatting tweaks</li> <li><a href="https://github.com/rust-lang/regex/commit/821a8eb1ad7860ddc788fe36f495036df63cfc35"><code>821a8eb</code></a> automata: refactor reverse suffix/inner search slightly</li> <li><a href="https://github.com/rust-lang/regex/commit/10afd704d88d00ddfcd10218883a81b3ae5e4831"><code>10afd70</code></a> automata: expose the extracted literals for inner literal extraction</li> <li><a href="https://github.com/rust-lang/regex/commit/8c34f41d3c5a0e16ce17dfb964587cb48625a8d5"><code>8c34f41</code></a> automata: avoid reverse suffix optimization for non-leftmost-first</li> <li><a href="https://github.com/rust-lang/regex/commit/5524f02430d2d118d5c34fde54136d08376de711"><code>5524f02</code></a> test: add regression tests for failed reverse suffix/inner optimizations</li> <li>Additional commits viewable in <a href="https://github.com/rust-lang/regex/compare/1.13.0...1.13.1">compare view</a></li> </ul> </details> <br /> Updates `rustls` from 0.23.41 to 0.23.42 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rustls/rustls/commit/411fb0278820bbf81ac825b24823f31bed55190e"><code>411fb02</code></a> Bump version to 0.23.42</li> <li><a href="https://github.com/rustls/rustls/commit/aff98458e66fc8be5ed170186792f6a12c4287aa"><code>aff9845</code></a> implement rfc 9149 ticket_request extension</li> <li><a href="https://github.com/rustls/rustls/commit/8bd3d1bafa77d1fc6bc32aeba1e2dd9afbfe3c20"><code>8bd3d1b</code></a> server: add max_tls13_tickets configuration</li> <li><a href="https://github.com/rustls/rustls/commit/4cce22234e89d9ad292251e0d4e22f3e72f48871"><code>4cce222</code></a> Address new <code>std_instead_of_core</code> in nightly</li> <li><a href="https://github.com/rustls/rustls/commit/d3ffdc12977b5e1961e7d972182849042491d186"><code>d3ffdc1</code></a> Address new <code>std_instead_of_core</code> in nightly</li> <li><a href="https://github.com/rustls/rustls/commit/75d1b7a6290af6b4172ef676440946e97978af5a"><code>75d1b7a</code></a> Take semver-compatible dependency updates</li> <li>See full diff in <a href="https://github.com/rustls/rustls/compare/v/0.23.41...v/0.23.42">compare view</a></li> </ul> </details> <br /> Updates `trybuild` from 1.0.117 to 1.0.118 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/trybuild/releases">trybuild's releases</a>.</em></p> <blockquote> <h2>1.0.118</h2> <ul> <li>Normalize cargo registry paths for any registry source (<a href="https://redirect.github.com/dtolnay/trybuild/issues/331">#331</a>, thanks <a href="https://github.com/devjgm"><code>@devjgm</code></a>)</li> <li>Limit custom registry to new normalization level (<a href="https://redirect.github.com/dtolnay/trybuild/issues/334">#334</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/trybuild/commit/7ce4c26bd1f074586beb7b385d65514e707b3f85"><code>7ce4c26</code></a> Release 1.0.118</li> <li><a href="https://github.com/dtolnay/trybuild/commit/b359f4a8a919ab7361222a6015f259168ce49ff5"><code>b359f4a</code></a> Update to 2024 edition</li> <li><a href="https://github.com/dtolnay/trybuild/commit/3551315f3a98592598886533f84271293e640505"><code>3551315</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/trybuild/issues/334">#334</a> from dtolnay/customregistry</li> <li><a href="https://github.com/dtolnay/trybuild/commit/520978743284a37dc5331307096880e4650ded83"><code>5209787</code></a> Limit custom registry to new normalization level</li> <li><a href="https://github.com/dtolnay/trybuild/commit/528223c3e219e0db611b1e99968108ba4f54d800"><code>528223c</code></a> Merge pull request 331 from devjgm/greg/trybuild-custom-registry-normalization</li> <li><a href="https://github.com/dtolnay/trybuild/commit/69689b3ff26787f18592ae9e13035aff619c2310"><code>69689b3</code></a> Update actions/upload-artifact@v6 -> v7</li> <li><a href="https://github.com/dtolnay/trybuild/commit/585d6f71a1ac670cd591c07e40fbbd475ecb1694"><code>585d6f7</code></a> Normalize cargo registry paths for any registry source</li> <li>See full diff in <a href="https://github.com/dtolnay/trybuild/compare/1.0.117...1.0.118">compare view</a></li> </ul> </details> <br /> Updates `toml` from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/toml-rs/toml/commit/eb251609a333580bf005cae27df853bb63dffdbe"><code>eb25160</code></a> chore: Release</li> <li><a href="https://github.com/toml-rs/toml/commit/f36fb52c37593b9fece9f4382a56ab51c9e65890"><code>f36fb52</code></a> docs: Update changelog</li> <li><a href="https://github.com/toml-rs/toml/commit/3adbbb7860810b146dbdedba1f315c90813083f2"><code>3adbbb7</code></a> fix(writer): Don't overflow (<a href="https://redirect.github.com/toml-rs/toml/issues/1189">#1189</a>)</li> <li><a href="https://github.com/toml-rs/toml/commit/fb0c1b376d291ee4ffdf5297a67579f2ad7ce70d"><code>fb0c1b3</code></a> fix(writer): Don't overflow</li> <li><a href="https://github.com/toml-rs/toml/commit/5e70a7031d7cd667bdc081419373df4b74bf78d8"><code>5e70a70</code></a> test(writer): Add overflow test</li> <li><a href="https://github.com/toml-rs/toml/commit/771a975840ff876825c2973a79634ffe79a3bf5a"><code>771a975</code></a> chore: Upgrade toml-test (<a href="https://redirect.github.com/toml-rs/toml/issues/1186">#1186</a>)</li> <li><a href="https://github.com/toml-rs/toml/commit/28f6c9cbc8ca691b9a32918f631408ffddc4f54d"><code>28f6c9c</code></a> chore: Upgrade toml-test</li> <li><a href="https://github.com/toml-rs/toml/commit/30d75ca443a1b27b13232e7cc807eb6e124f4ca2"><code>30d75ca</code></a> chore(deps): Update Prek to v0.4.9 (<a href="https://redirect.github.com/toml-rs/toml/issues/1185">#1185</a>)</li> <li><a href="https://github.com/toml-rs/toml/commit/17efe57deb402805ebc699da6dc6e29f9d80ea30"><code>17efe57</code></a> chore(deps): Update Rust Stable to v1.97 (<a href="https://redirect.github.com/toml-rs/toml/issues/1184">#1184</a>)</li> <li><a href="https://github.com/toml-rs/toml/commit/c9d0d54b21761d10ec967868cfb5549a30ef064d"><code>c9d0d54</code></a> style: Make clippy happy</li> <li>Additional commits viewable in <a href="https://github.com/toml-rs/toml/compare/toml-v1.1.2...toml-v1.1.3">compare view</a></li> </ul> </details> <br /> Updates `syn` from 2.0.118 to 2.0.119 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/syn/releases">syn's releases</a>.</em></p> <blockquote> <h2>2.0.119</h2> <ul> <li>Preserve attributes on tail-call expressions in statement position (<a href="https://redirect.github.com/dtolnay/syn/issues/1994">#1994</a>)</li> <li>Parse field-representing types builtin in type position (<a href="https://redirect.github.com/dtolnay/syn/issues/1996">#1996</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/syn/commit/3295f9e9841785ac88a5e558c884854d5fb7d67f"><code>3295f9e</code></a> Release 2.0.119</li> <li><a href="https://github.com/dtolnay/syn/commit/6ae9c18793d029bdad068a796e11c0d276d346d1"><code>6ae9c18</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/syn/issues/1996">#1996</a> from dtolnay/fieldrepresenting</li> <li><a href="https://github.com/dtolnay/syn/commit/8ebd96350c7f7f52f762a735d581e589a736d10e"><code>8ebd963</code></a> Parse field-representing types builtin</li> <li><a href="https://github.com/dtolnay/syn/commit/540ccf8298c3e422d672a9793f3e12f638d06691"><code>540ccf8</code></a> Drop unneeded lifetime on covariant Cursor in verbatim::between</li> <li><a href="https://github.com/dtolnay/syn/commit/aa05887100a7c28b3e9a777eb4711e3e7457849b"><code>aa05887</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/syn/issues/1995">#1995</a> from dtolnay/cursor</li> <li><a href="https://github.com/dtolnay/syn/commit/b7160d353ee7372567b1621f29a42c077c042a69"><code>b7160d3</code></a> Reduce forking for Verbatim construction</li> <li><a href="https://github.com/dtolnay/syn/commit/efdc9255a9668a4bfff8085d114eb95ae6ebd7e9"><code>efdc925</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/syn/issues/1994">#1994</a> from dtolnay/tailcall</li> <li><a href="https://github.com/dtolnay/syn/commit/de6424cc3b41f3a4d37691c2b5104d9d33eb8ec0"><code>de6424c</code></a> Preserve attribute on tail-call expression in statement position</li> <li><a href="https://github.com/dtolnay/syn/commit/050dd73d9622948e1321e96a5af378ce63506ee2"><code>050dd73</code></a> Stricter const move closure grammar</li> <li><a href="https://github.com/dtolnay/syn/commit/c7d514bd7f1cf7259945feb8b4c29427bbf2df7e"><code>c7d514b</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/syn/issues/1992">#1992</a> from dtolnay/scanconstmove</li> <li>Additional commits viewable in <a href="https://github.com/dtolnay/syn/compare/2.0.118...2.0.119">compare view</a></li> </ul> </details> <br /> Updates `ryu-js` from 1.0.2 to 1.0.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/boa-dev/ryu-js/releases">ryu-js's releases</a>.</em></p> <blockquote> <h2>v1.0.3</h2> <h4>Breaking Changes</h4> <ul> <li>Minimum rust version has been bumped from <code>1.64.0</code> to <code>1.71.0</code>.</li> </ul> <h4>Bug Fixes</h4> <ul> <li>[BUG <a href="https://redirect.github.com/boa-dev/ryu-js/issues/56">#56</a>](<a href="https://redirect.github.com/boa-dev/ryu-js/pull/2">boa-dev/ryu-js#2</a>): Fix panic in <code>format64_to_fixed</code> when rounding carries past all integer digits. (<a href="https://github.com/Ansh-699"><code>@Ansh-699</code></a>)</li> </ul> <h4>Internal Improvements</h4> <ul> <li>[INTERNAL <a href="https://redirect.github.com/boa-dev/ryu-js/issues/57">#57</a>](<a href="https://redirect.github.com/boa-dev/ryu-js/pull/57">boa-dev/ryu-js#57</a>): Sync <code>upstream/main</code>. (<a href="https://github.com/jedel1043"><code>@jedel1043</code></a>)</li> <li>[INTERNAL <a href="https://redirect.github.com/boa-dev/ryu-js/issues/63">#63</a>](<a href="https://redirect.github.com/boa-dev/ryu-js/pull/63">boa-dev/ryu-js#63</a>): Make <code>Cursor</code> store unsigned integer len and index. (<a href="https://github.com/HalidOdat"><code>@HalidOdat</code></a>)</li> </ul> <h4>New Contributors</h4> <ul> <li><a href="https://github.com/Ansh-699"><code>@Ansh-699</code></a> made their first contribution in <a href="https://redirect.github.com/boa-dev/ryu-js/pull/56">boa-dev/ryu-js#56</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/boa-dev/ryu-js/compare/v1.0.2...v1.0.3">https://github.com/boa-dev/ryu-js/compare/v1.0.2...v1.0.3</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/boa-dev/ryu-js/blob/main/CHANGELOG.md">ryu-js's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/boa-dev/ryu-js/compare/v1.0.2...v1.0.3"># 1.0.3 (2026-07-05)</a></h2> <h3>Breaking Changes</h3> <ul> <li>Minimum rust version has been bumped from <code>1.64.0</code> to <code>1.71.0</code>.</li> </ul> <h3>Bug Fixes</h3> <ul> <li>[BUG <a href="https://redirect.github.com/boa-dev/ryu-js/issues/56">#56</a>](<a href="https://redirect.github.com/boa-dev/ryu-js/pull/2">boa-dev/ryu-js#2</a>): Fix panic in <code>format64_to_fixed</code> when rounding carries past all integer digits. (<a href="https://github.com/Ansh-699"><code>@Ansh-699</code></a>)</li> </ul> <h3>Internal Improvements</h3> <ul> <li>[INTERNAL <a href="https://redirect.github.com/boa-dev/ryu-js/issues/57">#57</a>](<a href="https://redirect.github.com/boa-dev/ryu-js/pull/57">boa-dev/ryu-js#57</a>): Sync <code>upstream/main</code>. (<a href="https://github.com/jedel1043"><code>@jedel1043</code></a>)</li> <li>[INTERNAL <a href="https://redirect.github.com/boa-dev/ryu-js/issues/63">#63</a>](<a href="https://redirect.github.com/boa-dev/ryu-js/pull/63">boa-dev/ryu-js#63</a>): Make <code>Cursor</code> store unsigned integer len and index. (<a href="https://github.com/HalidOdat"><code>@HalidOdat</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/boa-dev/ryu-js/commit/f8d66267a2f5c92d1d9d634c92d06d1541640506"><code>f8d6626</code></a> Release <code>v1.0.3</code> (<a href="https://redirect.github.com/boa-dev/ryu-js/issues/64">#64</a>)</li> <li><a href="https://github.com/boa-dev/ryu-js/commit/9a936cb0097b993c4c97f7bf73c7a3b1cfd4f25c"><code>9a936cb</code></a> Make <code>Cursor</code> store unsigned integer len and index (<a href="https://redirect.github.com/boa-dev/ryu-js/issues/63">#63</a>)</li> <li><a href="https://github.com/boa-dev/ryu-js/commit/97e8180efd74db900ffcbd2721dfa3de733d0d45"><code>97e8180</code></a> Bump actions/cache from 4 to 6 (<a href="https://redirect.github.com/boa-dev/ryu-js/issues/62">#62</a>)</li> <li><a href="https://github.com/boa-dev/ryu-js/commit/4beec89dedfe4453beaafb35c1dd737448864ceb"><code>4beec89</code></a> Fix panic in format64_to_fixed when rounding carries past all integer digits ...</li> <li><a href="https://github.com/boa-dev/ryu-js/commit/03bf0f3a746895898f921d55c458f96fef2dba5d"><code>03bf0f3</code></a> Sync upstream/main (<a href="https://redirect.github.com/boa-dev/ryu-js/issues/57">#57</a>)</li> <li>See full diff in <a href="https://github.com/boa-dev/ryu-js/compare/v1.0.2...v1.0.3">compare view</a></li> </ul> </details> <br /> Updates `bytemuck` from 1.25.0 to 1.25.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Lokathor/bytemuck/blob/main/changelog.md">bytemuck's changelog</a>.</em></p> <blockquote> <h2>1.25.1</h2> <ul> <li><a href="https://redirect.github.com/Lokathor/bytemuck/pull/348">Don't impl core::error::Error on spirv</a>, which was causing a build error on that target.</li> <li>Added a reminder on <code>try_cast_slice</code> that empty slices must still be aligned.</li> </ul> <h2>1.25</h2> <ul> <li><a href="https://redirect.github.com/Lokathor/bytemuck/pull/333">Remove extern "stdcall" fn ptr impls on non-x86-32 windows.</a></li> <li><a href="https://redirect.github.com/Lokathor/bytemuck/pull/344">Fix nightly_portable_simd after LaneCount removal.</a></li> </ul> <h2>1.24</h2> <ul> <li><a href="https://redirect.github.com/Lokathor/bytemuck/pull/322">use new stable avx512 types from rust 1.89</a></li> <li><a href="https://redirect.github.com/Lokathor/bytemuck/pull/317">impl AnyBitPattern for [MaybeUninit<T: AnyBitPattern>; N]</a></li> <li>bump <code>derive</code> minimum version.</li> </ul> <h2>1.23.2</h2> <ul> <li>bump <code>derive</code> minimum version.</li> </ul> <h2>1.23.1</h2> <ul> <li>Added a windows-only <code>ZeroableInOption</code> impl for "stdcall" functions.</li> </ul> <h2>1.23</h2> <ul> <li><code>impl_core_error</code> crate feature adds <code>core::error::Error</code> impl.</li> <li>More <code>ZeroableInOption</code> impls.</li> </ul> <h2>1.22</h2> <ul> <li>Add the <code>pod_saturating</code> feature, which adds <code>Pod</code> impls for <code>Saturating<T></code> when <code>T</code> is already <code>Pod</code>.</li> <li>A bump in the minimum <code>bytemuck_derive</code> dependency from 1.4.0 to 1.4.1 to avoid a bug if you have a truly ancient <code>cargo.lock</code> file sitting around.</li> <li>Adds <code>Send</code> and <code>Sync</code> impls to <code>BoxBytes</code>.</li> </ul> <h2>1.21</h2> <ul> <li>Implement <code>Pod</code> and <code>Zeroable</code> for <code>core::arch::{x86, x86_64}::__m512</code>, <code>__m512d</code> and <code>__m512i</code> without nightly. Requires Rust 1.72, and is gated through the <code>avx512_simd</code> cargo feature.</li> <li>Allow the use of <code>must_cast_mut</code> and <code>must_cast_slice_mut</code> in const contexts. Requires Rust 1.83, and is gated through the <code>must_cast_extra</code> cargo feature.</li> <li>internal: introduced the <code>maybe_const_fn</code> macro that allows defining some function to be const depending upon some <code>cfg</code> predicate.</li> </ul> <h2>1.20</h2> <ul> <li>New functions to allocate zeroed <code>Arc</code> and <code>Rc</code>. Requires Rust 1.82</li> <li><code>TransparentWrapper</code> impls for <code>core::cmp::Reverse</code> and <code>core::num::Saturating</code>.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Lokathor/bytemuck/commit/cabc8e75899e67ad274959b6de27653558d01296"><code>cabc8e7</code></a> chore: Release bytemuck version 1.25.1</li> <li><a href="https://github.com/Lokathor/bytemuck/commit/2d4d8ca457a552bd9310a5a10327151a705b9f0b"><code>2d4d8ca</code></a> changelog</li> <li><a href="https://github.com/Lokathor/bytemuck/commit/946e7a905f7651b1dfb568d5045b8bcff1b56f26"><code>946e7a9</code></a> chore: Release bytemuck_derive version 1.11.0</li> <li><a href="https://github.com/Lokathor/bytemuck/commit/8a8f7cf4c9988a668336a792c78bbbb0a52ed8ef"><code>8a8f7cf</code></a> changelog derive</li> <li><a href="https://github.com/Lokathor/bytemuck/commit/ee6742e68cdb2a7058196a1cf13834ffbdac40d3"><code>ee6742e</code></a> changelog</li> <li><a href="https://github.com/Lokathor/bytemuck/commit/e2d1c7f2e9797d4b2f3de5a16b6a70879e53a8d8"><code>e2d1c7f</code></a> Don't impl core::error::Error on spirv (<a href="https://redirect.github.com/Lokathor/bytemuck/issues/348">#348</a>)</li> <li><a href="https://github.com/Lokathor/bytemuck/commit/7dd71742f67630949e5e9a21bb74469a69c1bce2"><code>7dd7174</code></a> make the note more terse</li> <li><a href="https://github.com/Lokathor/bytemuck/commit/24b1b71c599eb1e2b70b6059b851d4c264991e71"><code>24b1b71</code></a> Update Rust version in CI workflow to 1.71.0</li> <li><a href="https://github.com/Lokathor/bytemuck/commit/f0dfc1bc6ef0de704ffd0b64231f9c3565d65ac6"><code>f0dfc1b</code></a> docs: note that an empty slice must still satisfy target alignment in cast_sl...</li> <li>See full diff in <a href="https://github.com/Lokathor/bytemuck/compare/v1.25.0...v1.25.1">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
) Bumps the ci-dependencies group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [actions/labeler](https://github.com/actions/labeler). Updates `github/codeql-action/init` from 4.36.3 to 4.37.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/init's releases</a>.</em></p> <blockquote> <h2>v4.37.0</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> </ul> <h2>4.37.0 - 08 Jul 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li> <li>Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. <a href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li> <li>Best-effort connection tests for private registries now use <code>GET</code> requests instead of <code>HEAD</code> for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. <a href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li> <li>Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. <a href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/99df26d4f13ea111d4ec1a7dddef6063f76b97e9"><code>99df26d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3996">#3996</a> from github/update-v4.37.0-c7c896d71</li> <li><a href="https://github.com/github/codeql-action/commit/31c27074fda95256cda077009907f8a6022dd7c0"><code>31c2707</code></a> Add changenote for <a href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a></li> <li><a href="https://github.com/github/codeql-action/commit/72df2181aac054d1f4b44264399d2aac12cf11c6"><code>72df218</code></a> Update changelog for v4.37.0</li> <li><a href="https://github.com/github/codeql-action/commit/c7c896d71b3055d36f2aff93b16bcc6c69923b91"><code>c7c896d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3995">#3995</a> from github/update-bundle/codeql-bundle-v2.26.0</li> <li><a href="https://github.com/github/codeql-action/commit/3f34ff0ea3f5153c96071437b7cbf71ea3757146"><code>3f34ff0</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/43bec09f1dc368b430cab4b5d69799bc904079d1"><code>43bec09</code></a> Update default bundle to codeql-bundle-v2.26.0</li> <li><a href="https://github.com/github/codeql-action/commit/f58f0d11ebf5dedd870fab2f999275f7602cfa46"><code>f58f0d1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a> from github/mbg/repo-props/config-file-shorthands</li> <li><a href="https://github.com/github/codeql-action/commit/7dc37cbb5b3e37f0e1cd1f18b61e0ea849898fb8"><code>7dc37cb</code></a> Merge remote-tracking branch 'origin/main' into mbg/repo-props/config-file-sh...</li> <li><a href="https://github.com/github/codeql-action/commit/8e22350a7e28c34c82a5a499fc241923301c2c4f"><code>8e22350</code></a> Thread <code>ActionState</code> to <code>initConfig</code></li> <li><a href="https://github.com/github/codeql-action/commit/69c9e8c7d918cf2fee13b8b72fdde15883ff155b"><code>69c9e8c</code></a> Mark some <code>status-report</code> imports as <code>type</code>-only to avoid circular dependencies</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...99df26d4f13ea111d4ec1a7dddef6063f76b97e9">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/analyze` from 4.36.3 to 4.37.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's releases</a>.</em></p> <blockquote> <h2>v4.37.0</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> </ul> <h2>4.37.0 - 08 Jul 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li> <li>Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. <a href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li> <li>Best-effort connection tests for private registries now use <code>GET</code> requests instead of <code>HEAD</code> for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. <a href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li> <li>Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. <a href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/99df26d4f13ea111d4ec1a7dddef6063f76b97e9"><code>99df26d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3996">#3996</a> from github/update-v4.37.0-c7c896d71</li> <li><a href="https://github.com/github/codeql-action/commit/31c27074fda95256cda077009907f8a6022dd7c0"><code>31c2707</code></a> Add changenote for <a href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a></li> <li><a href="https://github.com/github/codeql-action/commit/72df2181aac054d1f4b44264399d2aac12cf11c6"><code>72df218</code></a> Update changelog for v4.37.0</li> <li><a href="https://github.com/github/codeql-action/commit/c7c896d71b3055d36f2aff93b16bcc6c69923b91"><code>c7c896d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3995">#3995</a> from github/update-bundle/codeql-bundle-v2.26.0</li> <li><a href="https://github.com/github/codeql-action/commit/3f34ff0ea3f5153c96071437b7cbf71ea3757146"><code>3f34ff0</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/43bec09f1dc368b430cab4b5d69799bc904079d1"><code>43bec09</code></a> Update default bundle to codeql-bundle-v2.26.0</li> <li><a href="https://github.com/github/codeql-action/commit/f58f0d11ebf5dedd870fab2f999275f7602cfa46"><code>f58f0d1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a> from github/mbg/repo-props/config-file-shorthands</li> <li><a href="https://github.com/github/codeql-action/commit/7dc37cbb5b3e37f0e1cd1f18b61e0ea849898fb8"><code>7dc37cb</code></a> Merge remote-tracking branch 'origin/main' into mbg/repo-props/config-file-sh...</li> <li><a href="https://github.com/github/codeql-action/commit/8e22350a7e28c34c82a5a499fc241923301c2c4f"><code>8e22350</code></a> Thread <code>ActionState</code> to <code>initConfig</code></li> <li><a href="https://github.com/github/codeql-action/commit/69c9e8c7d918cf2fee13b8b72fdde15883ff155b"><code>69c9e8c</code></a> Mark some <code>status-report</code> imports as <code>type</code>-only to avoid circular dependencies</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...99df26d4f13ea111d4ec1a7dddef6063f76b97e9">compare view</a></li> </ul> </details> <br /> Updates `actions/labeler` from 6.1.0 to 6.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/labeler/releases">actions/labeler's releases</a>.</em></p> <blockquote> <h2>v6.2.0</h2> <h2>What's Changed</h2> <h3>Bug Fix</h3> <ul> <li>Improve PR number validation and warning messages in input handling by <a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/939">actions/labeler#939</a></li> </ul> <h3>Dependency Updates</h3> <ul> <li>Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/943">actions/labeler#943</a></li> <li>Bump <code>@typescript-eslint/eslint-plugin</code> from 8.59.1 to 8.61.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/942">actions/labeler#942</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/labeler/compare/v6.1.0...v6.2.0">https://github.com/actions/labeler/compare/v6.1.0...v6.2.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/labeler/commit/b8dd2d9be0f68b860e7dae5dae7d772984eacd6d"><code>b8dd2d9</code></a> Bump <code>@typescript-eslint/eslint-plugin</code> from 8.59.1 to 8.61.1 (<a href="https://redirect.github.com/actions/labeler/issues/942">#942</a>)</li> <li><a href="https://github.com/actions/labeler/commit/53affe8ca4150876fc7eb7d268d3a1f74511a244"><code>53affe8</code></a> Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override for 0 vul...</li> <li><a href="https://github.com/actions/labeler/commit/f612d9ad188e81643862c2de70f57fbb1d17abd1"><code>f612d9a</code></a> Fix: Improve PR number validation and warning messages in input handling (<a href="https://redirect.github.com/actions/labeler/issues/939">#939</a>)</li> <li>See full diff in <a href="https://github.com/actions/labeler/compare/f27b608878404679385c85cfa523b85ccb86e213...b8dd2d9be0f68b860e7dae5dae7d772984eacd6d">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This Pull Request is part of the TC55 migration tracked in boa-dev#4988, and builds on the skeleton crate from boa-dev#5105. **It changes the following:** - **Moves the `base64` module** (`mod.rs` and `tests.rs`) into `boa_wintertc`. The implementation is **unchanged**; the only difference from the `boa_runtime` version is a short TC55 status note added to the module documentation. - **Deletes `core/runtime/src/base64/`** and **re-exports the module from `boa_runtime`**: `boa_runtime::base64` is now `#[doc(inline)] pub use boa_wintertc::base64;`, so the existing public path keeps resolving and the public API is unchanged. - **Delegates the extension**: `Base64Extension` now calls `boa_wintertc::base64::register`. It stays in the default extension set, so there is no behaviour change for existing users. - **Drops the `base64` crate dependency** from `boa_runtime`, as the moved module was its only user, and adds `boa_wintertc` to `[workspace.dependencies]` and to `boa_runtime`. - **Ports the test harness** (`TestAction` and `run_test_actions_with`) into `boa_wintertc` so the migrated unit tests run unchanged. This harness will be reused by later migrations. - **Adds dependencies** to `core/wintertc/Cargo.toml`: the `base64` dependency, plus `indoc`, `textwrap`, and `futures-lite` as dev dependencies. **Line counts (before and after, in both locations):** | File | `boa_runtime` (before) | `boa_wintertc` before | `boa_wintertc` after | | --- | --- | --- | --- | | `base64/mod.rs` | 82 (deleted) | 23 (stub) | 86 | | `base64/tests.rs` | 154 (deleted) | 0 (did not exist) | 154 | The 4 extra lines in `mod.rs` are the TC55 status doc note; the code itself is identical. `tests.rs` is byte for byte the same. **Approach:** following review, `boa_runtime` no longer keeps its own `base64` module. The module lives in `boa_wintertc` only, and `boa_runtime` re-exports it, so there is **no behaviour change** for existing users and the public API stays the same. The dependency direction is one way: `boa_runtime` -> `boa_wintertc` -> `boa_engine`. The remaining migration PRs will follow this same pattern. **Testing:** - `cargo test -p boa_wintertc`: all six base64 unit tests pass, plus the crate doctest. - `cargo test -p boa_runtime`: passes, with base64 now exercised through the re-export. - `cargo clippy -p boa_wintertc --all-features --all-targets` and `cargo clippy -p boa_wintertc --no-default-features`: clean, no warnings. - `cargo fmt --all -- --check`: clean. - Verified `atob` and `btoa` end to end through `boa_cli`, including forgiving decode, whitespace handling, and both error paths. **Out of scope:** - **WPT** is unchanged here: the runner targets `boa_runtime`, which now reaches this implementation through the re-export. - **Test262** does not apply, as `atob` and `btoa` are Web APIs rather than ECMAScript.
The CLI's default `fast-allocator` feature only installed a fast allocator on x86_64 Linux (jemalloc) and Windows (mimalloc); macOS silently fell back to the system `libmalloc`. Extend the existing mimalloc arm to cover macOS in both the CLI and the benchmark harness (`mimalloc-safe` already supports Apple Silicon). Keeping the benchmarks on a fast allocator on macOS also stops local runs from measuring `libmalloc` overhead instead of engine work, so results track CI (Linux/jemalloc) far more closely. Measured locally, allocation-heavy workloads improve by up to ~8.6% (closures/create) versus libmalloc, while compute-bound benchmarks are unchanged.
) Bumps the ci-dependencies group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.37.0 to 4.37.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/init's releases</a>.</em></p> <blockquote> <h2>v4.37.1</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.37.1 - 16 Jul 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li> </ul> <h2>4.37.0 - 08 Jul 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/7188fc363630916deb702c7fdcf4e481b751f97a"><code>7188fc3</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4020">#4020</a> from github/update-v4.37.1-9e7c07009</li> <li><a href="https://github.com/github/codeql-action/commit/c8b5f69be686908c3dfd844428137d56fe80c936"><code>c8b5f69</code></a> Update changelog for v4.37.1</li> <li><a href="https://github.com/github/codeql-action/commit/9e7c070092090e89e8b3d62f977d4456e0732cd7"><code>9e7c070</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4014">#4014</a> from github/mbg/explicit-remote-prefix</li> <li><a href="https://github.com/github/codeql-action/commit/3492b7e9ab96e28b1d8b971345d30e929c6f8fee"><code>3492b7e</code></a> Change <code>REMOTE_PATH_PREFIX</code> to <code>remote=</code></li> <li><a href="https://github.com/github/codeql-action/commit/3654baa924bc6456db54002581cb7c1c877548c4"><code>3654baa</code></a> Merge remote-tracking branch 'origin/main' into mbg/explicit-remote-prefix</li> <li><a href="https://github.com/github/codeql-action/commit/2d682ac05f1b3588aaff3814826bede39b9ba6bb"><code>2d682ac</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4017">#4017</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/23f6a50753a88efd9b7ae8687b29f6bdb65f6250"><code>23f6a50</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4009">#4009</a> from github/mbg/action-state/additions</li> <li><a href="https://github.com/github/codeql-action/commit/1ee3c75d1988ab8621f01ebb165115c38d56df91"><code>1ee3c75</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4018">#4018</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/e053684dc500899b0b5520edc8549ac0f1ed730b"><code>e053684</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4015">#4015</a> from github/dependabot/npm_and_yarn/npm-minor-fd2e83...</li> <li><a href="https://github.com/github/codeql-action/commit/6803c5671d2f87a83ed96e151c441b1cb3bdc66a"><code>6803c56</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4019">#4019</a> from github/update-bundle/codeql-bundle-v2.26.1</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/analyze` from 4.37.0 to 4.37.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's releases</a>.</em></p> <blockquote> <h2>v4.37.1</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.37.1 - 16 Jul 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li> </ul> <h2>4.37.0 - 08 Jul 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/7188fc363630916deb702c7fdcf4e481b751f97a"><code>7188fc3</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4020">#4020</a> from github/update-v4.37.1-9e7c07009</li> <li><a href="https://github.com/github/codeql-action/commit/c8b5f69be686908c3dfd844428137d56fe80c936"><code>c8b5f69</code></a> Update changelog for v4.37.1</li> <li><a href="https://github.com/github/codeql-action/commit/9e7c070092090e89e8b3d62f977d4456e0732cd7"><code>9e7c070</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4014">#4014</a> from github/mbg/explicit-remote-prefix</li> <li><a href="https://github.com/github/codeql-action/commit/3492b7e9ab96e28b1d8b971345d30e929c6f8fee"><code>3492b7e</code></a> Change <code>REMOTE_PATH_PREFIX</code> to <code>remote=</code></li> <li><a href="https://github.com/github/codeql-action/commit/3654baa924bc6456db54002581cb7c1c877548c4"><code>3654baa</code></a> Merge remote-tracking branch 'origin/main' into mbg/explicit-remote-prefix</li> <li><a href="https://github.com/github/codeql-action/commit/2d682ac05f1b3588aaff3814826bede39b9ba6bb"><code>2d682ac</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4017">#4017</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/23f6a50753a88efd9b7ae8687b29f6bdb65f6250"><code>23f6a50</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4009">#4009</a> from github/mbg/action-state/additions</li> <li><a href="https://github.com/github/codeql-action/commit/1ee3c75d1988ab8621f01ebb165115c38d56df91"><code>1ee3c75</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4018">#4018</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/e053684dc500899b0b5520edc8549ac0f1ed730b"><code>e053684</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4015">#4015</a> from github/dependabot/npm_and_yarn/npm-minor-fd2e83...</li> <li><a href="https://github.com/github/codeql-action/commit/6803c5671d2f87a83ed96e151c441b1cb3bdc66a"><code>6803c56</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4019">#4019</a> from github/update-bundle/codeql-bundle-v2.26.1</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…#5435) Bumps the rust-dependencies group with 2 updates: [portable-atomic](https://github.com/taiki-e/portable-atomic) and [tokio](https://github.com/tokio-rs/tokio). Updates `portable-atomic` from 1.13.1 to 1.14.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/portable-atomic/blob/main/CHANGELOG.md">portable-atomic's changelog</a>.</em></p> <blockquote> <h2>[1.14.0] - 2026-07-17</h2> <ul> <li> <p>Guarantee that <code>is_lock_free</code> to always return the same result. (<a href="https://github.com/taiki-e/portable-atomic/commit/e74f384efab9eae540087a20ed140dddc0d06ce7">e74f384</a>)</p> </li> <li> <p>Fix bug in 128-bit <code>fetch_{min,max}</code> on pre-z196 s390x. (<a href="https://github.com/taiki-e/portable-atomic/commit/a6c6c4bdb7c1b4f9d406ebbdcc54805e5e7eec10">a6c6c4b</a>)</p> </li> <li> <p>Fix bug in atomic float <code>fetch_{add,sub,max,min}</code> on AArch64 when FEAT_LSFE is enabled. (There are currently no known CPUs that support FEAT_LSFE.) (<a href="https://github.com/taiki-e/portable-atomic/commit/b105f9bc612e07c6f6a07291fa2be8cba38fa5df">b105f9bc</a>)</p> </li> <li> <p>Fix panic in build script when custom target with non-standard name on non-nightly rustc. (<a href="https://github.com/taiki-e/portable-atomic/commit/02ca7371eecd005fa1b170c12f8a0bad5e77a7fb">02ca737</a>)</p> </li> <li> <p>Improve robustness of interrupt disable/restore on RISC-V and Xtensa. (<a href="https://github.com/taiki-e/portable-atomic/commit/88cb3d50c66569dab95cc93250bd1e4202508a65">88cb3d5</a>)</p> </li> <li> <p>Optimize 128-bit CAS when FEAT_LSE is not enabled. (<a href="https://github.com/taiki-e/portable-atomic/commit/671b9a89d1e324547a3f29ae09a5a306b3b54a3b">671b9a89</a>)</p> </li> <li> <p>Optimize SeqCst atomics on AArch64 Windows MSVC. (<a href="https://github.com/taiki-e/portable-atomic/commit/671b9a89d1e324547a3f29ae09a5a306b3b54a3b">671b9a89</a>)</p> </li> <li> <p>Optimize 8-bit fetch_and/fetch_or/fetch_xor/fetch_not on AVR when RMW instructions available. (<a href="https://github.com/taiki-e/portable-atomic/commit/6f2f11f243673380e8732c5c5c1e18e6a5b553ff">6f2f11f2</a>)</p> </li> <li> <p>Optimize 128-bit RMW on s390x. (<a href="https://github.com/taiki-e/portable-atomic/commit/b8c502a9238e9aed4e169f909b3d25c797f76cc4">b8c502a9</a>)</p> </li> <li> <p>Optimize run-time CPU feature detection. (<a href="https://github.com/taiki-e/portable-atomic/commit/cae703222aca87d2a014372a02afb14c0b80ed32">cae7032</a>)</p> </li> <li> <p>Enable run-time detection by default on AArch64 Apple targets. (<a href="https://github.com/taiki-e/portable-atomic/commit/6c920155e7645b859e6f667963c90f775e561213">6c92015</a>)</p> </li> <li> <p>Enable run-time detection by default on AArch64 illumos. (<a href="https://github.com/taiki-e/portable-atomic/commit/59e3636bbe5515121c137d3b939e2cd39b50f1a4">59e3636b</a>)</p> </li> <li> <p>aarch64: Support run-time detection of FEAT_LSE2 on Windows. (<a href="https://github.com/taiki-e/portable-atomic/commit/16bc44f07b0709828a9d2f100dccde7db5477794">16bc44f0</a>)</p> </li> <li> <p>Make <code>portable_atomic_no_outline_atomics</code> cfg no-op instead of compile error on unsupported architectures. (<a href="https://github.com/taiki-e/portable-atomic/commit/6b8e3eb3b92bd64a0a6516bf4f72feb467ccbb3d">6b8e3eb</a>)</p> </li> <li> <p>Improve compile-time detection of AVR target features. (<a href="https://github.com/taiki-e/portable-atomic/commit/2b5a9a4f6df1736f536aecade53181ca24446846">2b5a9a4f</a>)</p> </li> <li> <p>Documentation improvements.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/portable-atomic/commit/5cfa54ab884015dc3d195648ad60f976c63024ef"><code>5cfa54a</code></a> Release 1.14.0</li> <li><a href="https://github.com/taiki-e/portable-atomic/commit/099b92819792e7ad7504e940bfefb23b2b016388"><code>099b928</code></a> Update changelog</li> <li><a href="https://github.com/taiki-e/portable-atomic/commit/c4124367b89594b1f6d5dbc493561e3bae51a324"><code>c412436</code></a> Fix bit_clear docs</li> <li><a href="https://github.com/taiki-e/portable-atomic/commit/921d719c9913f3556b69db4df910d50b50c5f57e"><code>921d719</code></a> Remove unused portable_atomic_pre_llvm_15 cfg</li> <li><a href="https://github.com/taiki-e/portable-atomic/commit/02ca7371eecd005fa1b170c12f8a0bad5e77a7fb"><code>02ca737</code></a> Do not panic in build script with odd custom target name</li> <li><a href="https://github.com/taiki-e/portable-atomic/commit/a6c6c4bdb7c1b4f9d406ebbdcc54805e5e7eec10"><code>a6c6c4b</code></a> s390x: Fix byte_wise_atomic_load</li> <li><a href="https://github.com/taiki-e/portable-atomic/commit/def5258aea655397927c1492a435eeea59fb1528"><code>def5258</code></a> ci: Temporarily disable f128 test for Windows</li> <li><a href="https://github.com/taiki-e/portable-atomic/commit/100179970a26d33f1d655325392a0dc304876758"><code>1001799</code></a> fallback: Move shared code to seq_lock_common.rs and improve tests</li> <li><a href="https://github.com/taiki-e/portable-atomic/commit/fd2f9f0b46d00abf8ea343350a93b3aa5f3ea394"><code>fd2f9f0</code></a> Update comments</li> <li><a href="https://github.com/taiki-e/portable-atomic/commit/2265f7aeceaf1a24508ffb45fb1920ce6f53d3cd"><code>2265f7a</code></a> Make cfg_*_fast_atomic_64! helper macros rustfmt-able</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/portable-atomic/compare/v1.13.1...v1.14.0">compare view</a></li> </ul> </details> <br /> Updates `tokio` from 1.52.3 to 1.53.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tokio-rs/tokio/releases">tokio's releases</a>.</em></p> <blockquote> <h2>Tokio v1.53.0</h2> <h1>1.53.0 (July 17th, 2026)</h1> <h3>Added</h3> <ul> <li>fs: implement <code>From<OwnedFd></code> and <code>From<OwnedHandle></code> for <code>File</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8266">#8266</a>)</li> <li>metrics: add task schedule latency metric (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7986">#7986</a>)</li> <li>net: add <code>SocketAddr</code> methods to Unix sockets (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8144">#8144</a>)</li> </ul> <h3>Changed</h3> <ul> <li>io: add <code>#[inline]</code> to IO trait impls for in-memory types (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8242">#8242</a>)</li> <li>net: implement UCred::pid on FreeBSD (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8086">#8086</a>)</li> <li>net: support Nuttx target os (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8259">#8259</a>)</li> <li>signal: refactor global variables on Windows (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8231">#8231</a>)</li> <li>sync: <code>mpsc::{Receiver,UnboundedReceiver}</code> now drops waker on drop, even if there are still senders (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8095">#8095</a>)</li> <li>taskdump: support taskdumps on s390x (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8192">#8192</a>)</li> <li>time: add <code>#[track_caller]</code> to <code>timeout_at()</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8077">#8077</a>)</li> <li>time: consolidate mutex locks on spurious poll (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8124">#8124</a>)</li> <li>time: defer waker clone on spurious poll (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8107">#8107</a>)</li> <li>time: move lazy-registration state into <code>Sleep</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8132">#8132</a>)</li> <li>tracing: remove unnecessary span clone (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8126">#8126</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>io: do not treat zero-length reads as EOF in <code>Chain</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8251">#8251</a>)</li> <li>net: use getpeereid for QNX peer credentials (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8270">#8270</a>)</li> <li>runtime: avoid illegal state in <code>FastRand</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8078">#8078</a>)</li> <li>sync: wake mpsc receiver when a queued <code>reserve[_many]</code> returns permits (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8260">#8260</a>)</li> <li>taskdump: skip double wake on <code>Trace::capture</code>/<code>Trace::trace_with</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8043">#8043</a>)</li> <li>time: avoid stack overflow in runtime constructor (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8093">#8093</a>)</li> <li>time (alt timer): ensure timers stay in the same runtime after <code>.reset()</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8169">#8169</a>)</li> </ul> <h3>IO uring (unstable)</h3> <ul> <li>fs: use io-uring for <code>fs::try_exists</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8080">#8080</a>)</li> <li>fs: use io-uring for renaming files (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7800">#7800</a>)</li> <li>rt: flush io-uring CQE in case of CQE overflow (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8277">#8277</a>)</li> </ul> <h3>Documented</h3> <ul> <li>docs: clarify cancel safety wording (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8181">#8181</a>)</li> <li>fs: clarify <code>create_dir_all</code> succeeds if path exists (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8149">#8149</a>)</li> <li>io: add warning about stdout reordering with multiple handles (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8276">#8276</a>)</li> <li>net: document pipe <code>try_read*</code>/<code>try_write*</code> readiness behavior (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8032">#8032</a>)</li> <li>runtime: document interaction with fork() (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8202">#8202</a>)</li> <li>sync: clarify broadcast lagging semantics (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8239">#8239</a>)</li> <li>sync: document memory ordering guarantees for Semaphore (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8119">#8119</a>)</li> <li>task: explain why <code>yield_now</code> defers its waker (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8254">#8254</a>)</li> <li>time: add panic docs to <code>timeout_at()</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8077">#8077</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tokio-rs/tokio/commit/be689a35f5ade5a39e507f79d3ec85cdab27806f"><code>be689a3</code></a> chore: prepare Tokio v1.53.0 (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8294">#8294</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/50f76c71ec7203013f7f0cda59deaa9016e93939"><code>50f76c7</code></a> chore: prepare tokio-macros v2.7.1 (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8295">#8295</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/f61fccad3cd598cce743fc511a983364b77af92a"><code>f61fcca</code></a> Merge 'tokio-1.52.4' into 'master' (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8290">#8290</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/efdba5fcf02c4b93d379114df136b994c3b21445"><code>efdba5f</code></a> chore: prepare Tokio v1.52.4 (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8289">#8289</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/b0ba02e75507518baed6718b0c37105e430f3a93"><code>b0ba02e</code></a> Merge 'tokio-1.51.4' into 'tokio-1.52.x' (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8288">#8288</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/7bcd2d343d997a658be5bc165520070c997fefbc"><code>7bcd2d3</code></a> taskdump: remove crate disambiguators from output (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8288">#8288</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/f84b209126a9b0f66dae1025e30e44d217205513"><code>f84b209</code></a> chore: prepare Tokio v1.51.4 (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8286">#8286</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/eacb98e18901fcbe011bfceddbc31853f1bf0c27"><code>eacb98e</code></a> runtime: don't skip the driver when <code>before_park</code> schedules work (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8222">#8222</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/5e16ee00faae5b81a58f70b734577b800e0b203b"><code>5e16ee0</code></a> task: avoid replacing the JoinQueue waker in <code>try_join_next</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8279">#8279</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/88212ab64afd2b2f87deeb073f9eef6aaaad3701"><code>88212ab</code></a> sync: document memory ordering guarantees for Semaphore (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8119">#8119</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tokio-rs/tokio/compare/tokio-1.52.3...tokio-1.53.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [lz4_flex](https://github.com/pseitz/lz4_flex) from 0.13.1 to 0.14.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/PSeitz/lz4_flex/blob/main/CHANGELOG.md">lz4_flex's changelog</a>.</em></p> <blockquote> <h1>0.14.0 (2026-07-14)</h1> <h3>Features</h3> <ul> <li>Add <code>alloc</code> feature to allow <code>no_std</code> operation without an allocator. The <code>std</code> feature now implies <code>alloc</code>. Without <code>alloc</code> only the <code>_into</code> variants of the block API are available, e.g. <code>compress_into</code>; the compression hash table is placed on the stack or can be provided via <code>compress_into_with_table</code>.</li> </ul> <pre><code>Note: Users with `default-features = false` need to additionally enable the `alloc` feature to keep the APIs returning `Vec`, e.g. `compress` and `decompress`. </code></pre> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/PSeitz/lz4_flex/commit/1bffdcbbf906a234b913937cb2f57c0245915038"><code>1bffdcb</code></a> Merge pull request <a href="https://redirect.github.com/pseitz/lz4_flex/issues/229">#229</a> from PSeitz/release/0.14.0-changelog</li> <li><a href="https://github.com/PSeitz/lz4_flex/commit/a5973e42f54a8bc4d0886e60308c9902cb595cd1"><code>a5973e4</code></a> Update CHANGELOG for 0.14.0 release, bump version to 0.14.0</li> <li><a href="https://github.com/PSeitz/lz4_flex/commit/43cdb228977c7e2527cf47ded6fd4bb2de000c7a"><code>43cdb22</code></a> Merge pull request <a href="https://redirect.github.com/pseitz/lz4_flex/issues/228">#228</a> from PSeitz/0.14.x</li> <li><a href="https://github.com/PSeitz/lz4_flex/commit/08fd47eb602d0958e6cde1aaa14091c86c667dd8"><code>08fd47e</code></a> add release skill</li> <li><a href="https://github.com/PSeitz/lz4_flex/commit/a6c6135f25f470797c7ff0d551cd745cd9b3f133"><code>a6c6135</code></a> Merge pull request <a href="https://redirect.github.com/pseitz/lz4_flex/issues/225">#225</a> from fbrozovic/alloc-feature</li> <li><a href="https://github.com/PSeitz/lz4_flex/commit/ca019ecef51ef6b516c415b69a6ee6f427f0d81c"><code>ca019ec</code></a> Add alloc feature to support no_std without an allocator</li> <li><a href="https://github.com/PSeitz/lz4_flex/commit/19194f99d159635688efdc0e875b78cc6ae91724"><code>19194f9</code></a> Merge pull request <a href="https://redirect.github.com/pseitz/lz4_flex/issues/223">#223</a> from PSeitz/0.13.x</li> <li>See full diff in <a href="https://github.com/pseitz/lz4_flex/compare/0.13.1...0.14.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…a-dev#5432) `if (a < b)` and `cond ? x : y` previously compiled the relational operator into a boolean in a scratch register (e.g. `LessThan`) and then tested it with `JumpIfFalse` — two dispatches plus a throwaway register. Route them through the existing `compile_condition_and_branch` helper (already used by `for`/`while`/`do-while` loops) so a relational condition emits a single fused `JumpIfNot{Less,Greater}Than[OrEqual]` opcode instead. Also `flatten()` the condition first, so parenthesized forms like `(a < b) ? x : y` and `while ((i < n))` reach the fused path too. Non-relational conditions keep the previous `compile_expr` + `JumpIfFalse` fallback. Reuses opcodes already proven for loops; all boa_engine tests pass.
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases">actions/setup-node's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <h3>Enhancements:</h3> <ul> <li>Add cache-primary-key and cache-matched-key as outputs by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1577">actions/setup-node#1577</a></li> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1574">actions/setup-node#1574</a></li> </ul> <h3>Bug fixes:</h3> <ul> <li>Remove dummy NODE_AUTH_TOKEN export by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1558">actions/setup-node#1558</a></li> <li>Only use <code>mirrorToken</code> in <code>getManifest</code> if it's provided by <a href="https://github.com/deiga"><code>@deiga</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li> </ul> <h3>Documentation updates:</h3> <ul> <li>Add documentation for publishing to npm with Trusted Publisher (OIDC) by <a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li> <li>docs: Update restore-only cache documentation by <a href="https://github.com/priya-kinthali"><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1550">actions/setup-node#1550</a></li> <li>docs: Update caching recommendations to mitigate cache poisoning risks by <a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1567">actions/setup-node#1567</a></li> </ul> <h3>Dependency update:</h3> <ul> <li>Upgrade <code>@actions/cache</code> to 5.1.0, log cache write denied by <a href="https://github.com/jasongin"><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li> <li><a href="https://github.com/deiga"><code>@deiga</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li> <li><a href="https://github.com/jasongin"><code>@jasongin</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6...v7.0.0">https://github.com/actions/setup-node/compare/v6...v7.0.0</a></p> <h2>v6.5.0</h2> <h2>What's Changed</h2> <ul> <li>Update <code>@actions/cache</code> to 5.1.0 and add security overrides for undici and fast-xml-parser by <a href="https://github.com/HarithaVattikuti"><code>@HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1579">actions/setup-node#1579</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-node/commit/820762786026740c76f36085b0efc47a31fe5020"><code>8207627</code></a> Migrate to ESM and upgrade dependencies (<a href="https://redirect.github.com/actions/setup-node/issues/1574">#1574</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/04be95cf3511ea51ebf9f224ddfb99cc7ab87cd4"><code>04be95c</code></a> Add cache-primary-key and cache-matched-key as outputs (<a href="https://redirect.github.com/actions/setup-node/issues/1577">#1577</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/7c2c68d20d402ed6a201ada70a81341941093140"><code>7c2c68d</code></a> docs: Update caching recommendations to mitigate cache poisoning risks (<a href="https://redirect.github.com/actions/setup-node/issues/1567">#1567</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/6a61c0375d66246de94630495909f12cf8dac84d"><code>6a61c03</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-node/issues/1569">#1569</a> from jasongin/update-actions-cache-5.1.0</li> <li><a href="https://github.com/actions/setup-node/commit/30eb73b41ded577900c1ebf968ef95cdf8f7434f"><code>30eb73b</code></a> Resolve high-severity audit issues</li> <li><a href="https://github.com/actions/setup-node/commit/4e1a87a501d0302f99e30e2748568adcb388d09f"><code>4e1a87a</code></a> Update dist</li> <li><a href="https://github.com/actions/setup-node/commit/360237f0c01778d0c17291f75c56d6feae4f7574"><code>360237f</code></a> Strict equality</li> <li><a href="https://github.com/actions/setup-node/commit/4f8aac5beb2f0854bc79651567a18c67eb0b9de3"><code>4f8aac5</code></a> Bump <code>@actions/cache</code> to 5.1.0, log cache write denied</li> <li><a href="https://github.com/actions/setup-node/commit/f4a67bbeca970f103397d3d2b9462cf787cd2980"><code>f4a67bb</code></a> Only use <code>mirrorToken</code> in <code>getManifest</code> if it's provided (<a href="https://redirect.github.com/actions/setup-node/issues/1548">#1548</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/0355742c943ddb13ca8a6b700f824231caa91e75"><code>0355742</code></a> Remove dummy NODE_AUTH_TOKEN export (<a href="https://redirect.github.com/actions/setup-node/issues/1558">#1558</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: José Julián Espina <jedel0124@gmail.com>
…-dev#5414) <!--- Thank you for contributing to Boa! Please fill out the template below, and remove or add any information as you feel necessary. ---> Hi boa-devs! I have a small contribution for the "ECMA-402" effort. Please let me know if this looks good to you. It changes the following: - Exposes `fractionalSecondDigits` as a property inside the object returned by `resolvedOptions()`
## Summary Adds `console.exception()` as an alias for `console.error()`, aligning with the WHATWG Console specification ([console.spec.whatwg.org](https://console.spec.whatwg.org/#assert)). The spec defines `console.exception()` as identical to `console.error()` — same signature, behavior, and security considerations. ## Changes - Registered `console.exception` in `Console::make_console()` as an alias for `Self::error` (same pattern as `dirxml` → `dir`) - Added `console_exception_is_alias_for_error` test ## Motivation Closes boa-dev#307 (partially — `profile()`, `profileEnd()`, `timeStamp()` are marked `not_planned` by maintainers). `console.exception()` is widely supported in browser environments (Chrome, Firefox, Safari) and is commonly used to log errors with stack trace information.
…om boa_runtime (boa-dev#5419) **Summary** Continues the boa_runtime -> boa_wintertc migration started with atob/btoa (boa-dev#5418),moving three more modules with the same move + re-export pattern. Code lives only inboa_wintertc; boa_runtime re-exports it (public paths unchanged) and the *Extension structs delegate. **Changes** - **structuredClone**: `clone` -> `boa_wintertc::clone`. Its `store` dependency (`JsValueStore`) also moves to `boa_wintertc::store`, since boa_wintertc cannot depend on boa_runtime. `store` stays public and is re-exported, so `boa_runtime::message` keeps compiling. `rustc-hash` moves with it. - **queueMicrotask**: `microtask` -> `boa_wintertc::microtask`. - **timers**: `interval` -> `boa_wintertc::timers` (renamed to its TC55 category). Re-exported as `pub use boa_wintertc::timers as interval`, so `boa_runtime::interval` (incl. `clear_all`, used by the WPT harness) is unchanged. **Notes / deviations** - `store` is a non-TC55 helper that is now public in boa_wintertc. Net public surfac across both crates is unchanged (it was already public in boa_runtime); happy to make it `pub(crate)` once `message` also migrates. - The queueMicrotask unit test now records order in a global array instead of `console`,since `console` is still a stub in boa_wintertc.
Refactoring of the logic added by 26271b7. This PR is a prerequisite for boa-dev#5199 It changes the following: - Introduced a shared implementation for `toLocaleString`, `toLocaleDateString`, and `toLocaleTimeString` - Removed `format_date_time_locale` as unnecessary - Some related minor improvements Testing: - `cargo test -p boa_engine --lib -- date::tests::date_proto_to_locale_string_intl` (skipped) - `cargo test -p boa_engine --features intl_bundled --lib -- date::tests::date_proto_to_locale_string_intl` (passed)
…tion order (boa-dev#5336) This Pull Request fixes/closes boa-dev#5335. It changes the following: - Swap the prototype lookup and `DateTimeFormat` creation to match the spec steps order - Add a regression test for this specific case - Add a step 1 from spec to `create_date_time_format` as well as comment about why it's missing **Validation** - Run (all passed) ``` cargo test --package boa_engine --lib --features intl_bundled -- builtins::intl::date_time_format::tests --nocapture ```
Part of the TC55 migration (boa-dev#4988), following the move + re-export pattern from boa-dev#5418. **Changes:** - **Moves `console`** (`mod.rs`, `table.rs`, `tests.rs`) into `boa_wintertc` unchanged — only additions are a TC55 doc note and a `register` entry point wrapping `Console::register_with_logger`. - **Deletes `core/runtime/src/console/`**; `boa_runtime::console` is now `#[doc(inline)] pub use boa_wintertc::console;` and `ConsoleExtension` delegates to it. Public API unchanged. - **Moves `comfy-table`** from `boa_runtime` to `boa_wintertc` (console was its only user); adds `boa_gc` + `rustc-hash` to `boa_wintertc`. - Two small `boa_runtime` test fixes since console's `#[cfg(test)]` helpers left the crate: `microtask/tests.rs` gets a local `RecordingLogger` (goes away when microtask migrates), and `run_test_actions` is `#[allow(unused)]` (only feature-gated tests use it now). **Line counts (before and after, in both locations):** | File | `boa_runtime` (before) | `boa_wintertc` before | `boa_wintertc` after | | --- | --- | --- | --- | | `console/mod.rs` | 1008 (deleted) | 23 (stub) | 1027 | | `console/table.rs` | 214 (deleted) | 0 (did not exist) | 214 | | `console/tests.rs` | 853 (deleted) | 0 (did not exist) | 852 | `mod.rs` gains 19 lines (doc note + `register` wrapper); `table.rs` is identical; `tests.rs` is one line shorter after merging two imports.
…v#5451) Bumps the rust-dependencies group with 12 updates: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.6.2` | `4.6.4` | | [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` | | [time](https://github.com/time-rs/time) | `0.3.53` | `0.3.54` | | [serde_repr](https://github.com/dtolnay/serde-repr) | `0.1.20` | `0.1.21` | | [quote](https://github.com/dtolnay/quote) | `1.0.46` | `1.0.47` | | [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.106` | `1.0.107` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.19` | | [bytemuck](https://github.com/Lokathor/bytemuck) | `1.25.1` | `1.25.2` | | [either](https://github.com/rayon-rs/either) | `1.16.0` | `1.17.0` | | [tokio](https://github.com/tokio-rs/tokio) | `1.53.0` | `1.53.1` | | [futures-channel](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.33` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.32` | `0.3.33` | Updates `clap` from 4.6.2 to 4.6.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/clap-rs/clap/releases">clap's releases</a>.</em></p> <blockquote> <h2>v4.6.4</h2> <h2>[4.6.4] - 2026-07-21</h2> <h3>Internal</h3> <ul> <li>Update to syn v3</li> </ul> <h2>v4.6.3</h2> <h2>[4.6.3] - 2026-07-20</h2> <h3>Fixes</h3> <ul> <li><em>(derive)</em> Allow <code>"literal".function()</code> as attribute values</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/clap-rs/clap/blob/master/CHANGELOG.md">clap's changelog</a>.</em></p> <blockquote> <h2>[4.6.4] - 2026-07-21</h2> <h3>Internal</h3> <ul> <li>Update to syn v3</li> </ul> <h2>[4.6.3] - 2026-07-20</h2> <h3>Fixes</h3> <ul> <li><em>(derive)</em> Allow <code>"literal".function()</code> as attribute values</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/clap-rs/clap/commit/87ec1ad80dc174563cba130772823562e4427560"><code>87ec1ad</code></a> chore: Release</li> <li><a href="https://github.com/clap-rs/clap/commit/78f2529351ad2133c453005e54f6b35ce3ae800b"><code>78f2529</code></a> docs: Update changelog</li> <li><a href="https://github.com/clap-rs/clap/commit/b61f270930e60ee4968dfed7dc81eef51232f22b"><code>b61f270</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/6369">#6369</a> from Metbcy/fix/zsh-completion-ordering</li> <li><a href="https://github.com/clap-rs/clap/commit/74c6666698e90ff0141eb50dd169915f59fa7bcf"><code>74c6666</code></a> fix(complete): Keep zsh candidate order</li> <li><a href="https://github.com/clap-rs/clap/commit/d142d8f96650c49302aeab87814d5bf352dbf4db"><code>d142d8f</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/6360">#6360</a> from epage/string</li> <li><a href="https://github.com/clap-rs/clap/commit/ba89563c9d4c806afba2002c345b7108b64f1a1e"><code>ba89563</code></a> style: Prefer explicit string operations</li> <li><a href="https://github.com/clap-rs/clap/commit/bea966e84a50dc375d75baecbd469362b4f66281"><code>bea966e</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/6359">#6359</a> from epage/man</li> <li><a href="https://github.com/clap-rs/clap/commit/b811986e6d8eeeba679e43ddc07bcd06ee6da17b"><code>b811986</code></a> chore(man):Remove unused required-features</li> <li><a href="https://github.com/clap-rs/clap/commit/0010bf290aae52b827134d7a88ecb58a8e3e88aa"><code>0010bf2</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/6358">#6358</a> from clap-rs/renovate/crate-ci-typos-1.x</li> <li><a href="https://github.com/clap-rs/clap/commit/bab9b24b129f5bfd6f5680cd5273d4d6be7cb37d"><code>bab9b24</code></a> chore(deps): Update compatible (dev) (<a href="https://redirect.github.com/clap-rs/clap/issues/6357">#6357</a>)</li> <li>Additional commits viewable in <a href="https://github.com/clap-rs/clap/compare/clap_complete-v4.6.2...clap_complete-v4.6.4">compare view</a></li> </ul> </details> <br /> Updates `serde_json` from 1.0.150 to 1.0.151 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/serde-rs/json/releases">serde_json's releases</a>.</em></p> <blockquote> <h2>v1.0.151</h2> <ul> <li>Add RawValue::from_string_unchecked (<a href="https://redirect.github.com/serde-rs/json/issues/1331">#1331</a>, thanks <a href="https://github.com/WonderLawrence"><code>@WonderLawrence</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/serde-rs/json/commit/de8500740cdcabffb9734f503e4889def823cf10"><code>de85007</code></a> Release 1.0.151</li> <li><a href="https://github.com/serde-rs/json/commit/3b2b3c5f28c20ed988bd081a4147c535e7e65c74"><code>3b2b3c5</code></a> Merge pull request <a href="https://redirect.github.com/serde-rs/json/issues/1331">#1331</a> from WonderLawrence/rawvalue-from-string-unchecked</li> <li><a href="https://github.com/serde-rs/json/commit/0406d96860e9d8b9252e2002fa3e626ae48ca1b0"><code>0406d96</code></a> Debug-assert well-formedness and no-whitespace in from_string_unchecked</li> <li><a href="https://github.com/serde-rs/json/commit/cf16f75d81e28c723323bfc60a68fc02d2994fff"><code>cf16f75</code></a> Add RawValue::from_string_unchecked</li> <li><a href="https://github.com/serde-rs/json/commit/827a315bf2198558f0325b07bcc1e2cd973aba2f"><code>827a315</code></a> Update actions/upload-artifact@v6 -> v7</li> <li><a href="https://github.com/serde-rs/json/commit/cea36a5c017ebffdeb95d0cd0f1aad473bfab758"><code>cea36a5</code></a> Update actions/checkout@v6 -> v7</li> <li>See full diff in <a href="https://github.com/serde-rs/json/compare/v1.0.150...v1.0.151">compare view</a></li> </ul> </details> <br /> Updates `time` from 0.3.53 to 0.3.54 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/time-rs/time/releases">time's releases</a>.</em></p> <blockquote> <h2>v0.3.54</h2> <p>See the <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">changelog</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">time's changelog</a>.</em></p> <blockquote> <h2>0.3.54 [2026-07-20]</h2> <h3>Added</h3> <ul> <li><code>PrimitiveDateTime</code> has been renamed to <code>PlainDateTime</code>.</li> <li><code>Duration</code> has been renamed to <code>SignedDuration</code>.</li> <li>Iteration is now possible over <code>Date</code>, <code>Month</code>, and <code>Weekday</code>. Relevant iterator methods have been overridden to ensure maximum performance.</li> </ul> <p>For both <code>PlainDateTime</code> and <code>SignedDuration</code>, a non-deprecated type alias has been added for backwards compatibility. The new names should be preferred.</p> <h3>Changed</h3> <ul> <li>The associated metadata type (for <code>powerfmt</code> implementations) for various types has been changed to <code>()</code> and made public. This guarantees that no additional metadata will be present.</li> </ul> <h3>Performance</h3> <ul> <li>More gains when parsing RFC 2822.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/time-rs/time/commit/d1c55a454051c83e8fd2ad8431cf37b90dd6ea31"><code>d1c55a4</code></a> v0.3.54 release</li> <li><a href="https://github.com/time-rs/time/commit/2fb04c46225393cf758074ad58a72dc9acab264d"><code>2fb04c4</code></a> Add ability to iterate over <code>Weekday</code>s</li> <li><a href="https://github.com/time-rs/time/commit/00779fa0e871e0e22a7d672bca3c4bdeef9d3cf7"><code>00779fa</code></a> Add ability to iterate over <code>Month</code>s</li> <li><a href="https://github.com/time-rs/time/commit/b99c5c2be0f472283355b677719ab7cc8048a011"><code>b99c5c2</code></a> Add ability to iterate over <code>Date</code>s</li> <li><a href="https://github.com/time-rs/time/commit/41eea5b1db5242662cd6a4ec8875cc547698236b"><code>41eea5b</code></a> Lint on missing panic documentation</li> <li><a href="https://github.com/time-rs/time/commit/5a0bdd8449dcb1688daa104f772bcee5ba54fe70"><code>5a0bdd8</code></a> Replace optimizing loop with linear pass</li> <li><a href="https://github.com/time-rs/time/commit/687d4a9a8b3e43d4d708a11bba7f5377e0381f67"><code>687d4a9</code></a> Address clippy lints</li> <li><a href="https://github.com/time-rs/time/commit/6bf0055e3a4e6af3ee5df230d58c6aa6c0061763"><code>6bf0055</code></a> Add LLM policy</li> <li><a href="https://github.com/time-rs/time/commit/81f9fe0676d2cc067361e97a9dc774df1252c05e"><code>81f9fe0</code></a> Rename <code>Duration</code> to <code>SignedDuration</code></li> <li><a href="https://github.com/time-rs/time/commit/058efaec654b08d0153525cb7732b7a34d354b06"><code>058efae</code></a> Rename internals for <code>PlainDateTime</code></li> <li>Additional commits viewable in <a href="https://github.com/time-rs/time/compare/v0.3.53...v0.3.54">compare view</a></li> </ul> </details> <br /> Updates `serde_repr` from 0.1.20 to 0.1.21 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/serde-repr/releases">serde_repr's releases</a>.</em></p> <blockquote> <h2>0.1.21</h2> <ul> <li>Update to syn 3</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/serde-repr/commit/205ce23cf7c55981be8c1e02ac87695c57a13ee0"><code>205ce23</code></a> Release 0.1.21</li> <li><a href="https://github.com/dtolnay/serde-repr/commit/d1d7da177c9c54141ceda5a2f82fc5b22741b7c6"><code>d1d7da1</code></a> Update to syn 3</li> <li><a href="https://github.com/dtolnay/serde-repr/commit/801177a316f65dca7f9a0b73dcab61643e4b1b72"><code>801177a</code></a> Update actions/upload-artifact@v6 -> v7</li> <li><a href="https://github.com/dtolnay/serde-repr/commit/d76d6b138f18626efd6d17fa7b185b6b85a35d47"><code>d76d6b1</code></a> Update actions/checkout@v6 -> v7</li> <li><a href="https://github.com/dtolnay/serde-repr/commit/492e7d323557db66d7917e944d427eddf7e75f94"><code>492e7d3</code></a> Raise minimum tested compiler to rust 1.85</li> <li><a href="https://github.com/dtolnay/serde-repr/commit/9cc96c07bf4720b590ab8ab6351c845b10cdb8d6"><code>9cc96c0</code></a> Unpin CI miri toolchain</li> <li><a href="https://github.com/dtolnay/serde-repr/commit/c5c43e80fd097c5226de40918d16c601ec99d59e"><code>c5c43e8</code></a> Pin CI miri to nightly-2026-02-11</li> <li><a href="https://github.com/dtolnay/serde-repr/commit/a2175cb1d74e5f817eeec914c9f1d3caf7a5a1c6"><code>a2175cb</code></a> Raise required compiler to Rust 1.71</li> <li><a href="https://github.com/dtolnay/serde-repr/commit/8a62d5f1e33540a3b517e7f58b33db18add841d9"><code>8a62d5f</code></a> Update actions/upload-artifact@v5 -> v6</li> <li><a href="https://github.com/dtolnay/serde-repr/commit/94725b25495ecaad911866133700b9b77136eaaa"><code>94725b2</code></a> Update actions/upload-artifact@v4 -> v5</li> <li>Additional commits viewable in <a href="https://github.com/dtolnay/serde-repr/compare/0.1.20...0.1.21">compare view</a></li> </ul> </details> <br /> Updates `quote` from 1.0.46 to 1.0.47 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/quote/releases">quote's releases</a>.</em></p> <blockquote> <h2>1.0.47</h2> <ul> <li>Documentation improvements</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/quote/commit/723dcb47d3f0ddc896e17287c8a8d3f2ea2317d5"><code>723dcb4</code></a> Release 1.0.47</li> <li><a href="https://github.com/dtolnay/quote/commit/86e2967ff7b8f91c1be824dcec4d8b438f1dd182"><code>86e2967</code></a> Update documentation links to syn 3</li> <li><a href="https://github.com/dtolnay/quote/commit/b56db874b8c53453a398aa1a671a27f9531de8f9"><code>b56db87</code></a> Update ui test suite to nightly-2026-07-14</li> <li><a href="https://github.com/dtolnay/quote/commit/cba5d96ac605a7c7d16b1455a891824035f68e90"><code>cba5d96</code></a> Update actions/upload-artifact@v6 -> v7</li> <li>See full diff in <a href="https://github.com/dtolnay/quote/compare/1.0.46...1.0.47">compare view</a></li> </ul> </details> <br /> Updates `proc-macro2` from 1.0.106 to 1.0.107 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/proc-macro2/releases">proc-macro2's releases</a>.</em></p> <blockquote> <h2>1.0.107</h2> <ul> <li>Documentation improvements</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/proc-macro2/commit/ed8a5497669cd63db33bf24646f261b012bbbc4a"><code>ed8a549</code></a> Release 1.0.107</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/d2550fba91b625218bca3cc4c364c27cae7bc483"><code>d2550fb</code></a> Update documentation links to syn 3</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/0bf387d8d57770f1e46d3dff23dd72175477048a"><code>0bf387d</code></a> Resolve redundant_else pedantic clippy lint</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/949d6966cbdecaa607757d57fc91b829991a4b80"><code>949d696</code></a> Update actions/upload-artifact@v6 -> v7</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/294a2bba6ccc073ca8e20c6b28aef84b3cd87855"><code>294a2bb</code></a> Update actions/checkout@v6 -> v7</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/cd46c1b96e5f37c584f999bb1d6c665f9337e895"><code>cd46c1b</code></a> Lint <code>clippy::from_iter_instead_of_collect</code> has been removed</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/bb38d83b86d2bfb8a31ff81cd540b36de1b236ee"><code>bb38d83</code></a> Update afl fuzzer from 0.17 to 0.18</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/0f510db0e462b34aa3c02f6d0cf150fc716dc4e3"><code>0f510db</code></a> Unpin CI miri toolchain</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/b3c5fe307f18d066c94b0872f66b348bb7dade31"><code>b3c5fe3</code></a> Pin CI miri to nightly-2026-02-11</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/7e2a9901afc18740403404a85a488ccae52accf6"><code>7e2a990</code></a> Raise required compiler to Rust 1.71</li> <li>Additional commits viewable in <a href="https://github.com/dtolnay/proc-macro2/compare/1.0.106...1.0.107">compare view</a></li> </ul> </details> <br /> Updates `thiserror` from 2.0.18 to 2.0.19 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/thiserror/releases">thiserror's releases</a>.</em></p> <blockquote> <h2>2.0.19</h2> <ul> <li>Update to syn 3</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/thiserror/commit/e13a7854338e446f184725fc8b9c9e86a0a537d2"><code>e13a785</code></a> Release 2.0.19</li> <li><a href="https://github.com/dtolnay/thiserror/commit/0a0e76cc0f041a32e638328b47721b00037d0690"><code>0a0e76c</code></a> Update to syn 3</li> <li><a href="https://github.com/dtolnay/thiserror/commit/ec42ea70852f8db43e971700d1ccc184957d1b32"><code>ec42ea7</code></a> Update actions/upload-artifact@v6 -> v7</li> <li><a href="https://github.com/dtolnay/thiserror/commit/4178c4a0e1cb17473d95f42f5e441ef92d13d172"><code>4178c4a</code></a> Update actions/checkout@v6 -> v7</li> <li><a href="https://github.com/dtolnay/thiserror/commit/7214e0e8331d76afbea7173d8a14997512ac8713"><code>7214e0e</code></a> Ignore items_after_statements pedantic clippy lint in test</li> <li><a href="https://github.com/dtolnay/thiserror/commit/febcc0381f003783efbb01595eb511bdf0c6f460"><code>febcc03</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/thiserror/issues/451">#451</a> from vip892766gma/maint/20260521171412</li> <li><a href="https://github.com/dtolnay/thiserror/commit/c50e38779da40084363232252c46d86dc59286d0"><code>c50e387</code></a> chore: improve thiserror maintenance path</li> <li><a href="https://github.com/dtolnay/thiserror/commit/d4a2507576d276dbebc4be45c9b3d657216b727f"><code>d4a2507</code></a> Raise minimum tested compiler to rust 1.85</li> <li><a href="https://github.com/dtolnay/thiserror/commit/99e8a6cd6a312d455d74f40b449a6cbb868b2460"><code>99e8a6c</code></a> Unpin CI miri toolchain</li> <li><a href="https://github.com/dtolnay/thiserror/commit/9ac165c40055a126fc5d2ca49f4024bbac575d95"><code>9ac165c</code></a> Pin CI miri to nightly-2026-02-11</li> <li>Additional commits viewable in <a href="https://github.com/dtolnay/thiserror/compare/2.0.18...2.0.19">compare view</a></li> </ul> </details> <br /> Updates `bytemuck` from 1.25.1 to 1.25.2 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Lokathor/bytemuck/blob/main/changelog.md">bytemuck's changelog</a>.</em></p> <blockquote> <h2>1.25.2</h2> <ul> <li>implement NoUninit for char, bool, NonZero* arrays</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Lokathor/bytemuck/commit/f363643e951a7ac9e4b9921de982f2b0918902e3"><code>f363643</code></a> chore: Release bytemuck version 1.25.2</li> <li><a href="https://github.com/Lokathor/bytemuck/commit/3de980b403470219a41a6ff9e62bb21fbd15c24f"><code>3de980b</code></a> changelog</li> <li><a href="https://github.com/Lokathor/bytemuck/commit/1d05bec37e3c850151b4856024efa78c04807887"><code>1d05bec</code></a> implement <code>NoUninit</code> for <code>char</code>,<code>bool</code>,<code>NoZero*</code> array (<a href="https://redirect.github.com/Lokathor/bytemuck/issues/350">#350</a>)</li> <li>See full diff in <a href="https://github.com/Lokathor/bytemuck/compare/v1.25.1...v1.25.2">compare view</a></li> </ul> </details> <br /> Updates `either` from 1.16.0 to 1.17.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rayon-rs/either/commit/e514cb110790f6394004b4c986f5589003594d85"><code>e514cb1</code></a> Merge pull request <a href="https://redirect.github.com/rayon-rs/either/issues/141">#141</a> from msrd0/hex</li> <li><a href="https://github.com/rayon-rs/either/commit/bc7c1f325c371ba728f5447bbde2066475c69fd1"><code>bc7c1f3</code></a> Release 1.17.0</li> <li><a href="https://github.com/rayon-rs/either/commit/9acb4b97e3ef352585b47b5320e426d0bbda8b00"><code>9acb4b9</code></a> ci: downgrade serde manually</li> <li><a href="https://github.com/rayon-rs/either/commit/c4ffc532c849bc83be8056cf34c1bfb26f54abde"><code>c4ffc53</code></a> Add test for <code>fmt::Pointer</code></li> <li><a href="https://github.com/rayon-rs/either/commit/ba48d315aecc6c0d12a9e442901a83ab52c561bc"><code>ba48d31</code></a> Implement all the fmt traits using a macro</li> <li><a href="https://github.com/rayon-rs/either/commit/a8f48ea0b1fea1c83c308d277a1809c2707323a1"><code>a8f48ea</code></a> Add implementations for <code>UpperHex</code> and <code>LowerHex</code></li> <li><a href="https://github.com/rayon-rs/either/commit/331cda79b92a45ac3a0925beaa795fe5a69c6377"><code>331cda7</code></a> Merge pull request <a href="https://redirect.github.com/rayon-rs/either/issues/139">#139</a> from atouchet/bdg</li> <li><a href="https://github.com/rayon-rs/either/commit/08dc1fb08c64a44929f4069f14739320ec00fd0d"><code>08dc1fb</code></a> Fix build status badge</li> <li>See full diff in <a href="https://github.com/rayon-rs/either/compare/1.16.0...1.17.0">compare view</a></li> </ul> </details> <br /> Updates `tokio` from 1.53.0 to 1.53.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tokio-rs/tokio/releases">tokio's releases</a>.</em></p> <blockquote> <h2>Tokio v1.53.1</h2> <h1>1.53.1 (July 20th, 2026)</h1> <h3>Fixed</h3> <ul> <li>signal: restore MSRV by removing <code>OnceLock::wait</code> from the Windows handler (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8300">#8300</a>)</li> </ul> <h3>Fixed (unstable)</h3> <ul> <li>time: fix alt timer cancellation and insertion race (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8252">#8252</a>)</li> </ul> <h3>Documented</h3> <ul> <li>runtime: remove dead link definition in Runtime::block_on (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8301">#8301</a>)</li> </ul> <p><a href="https://redirect.github.com/tokio-rs/tokio/issues/8252">#8252</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/8252">tokio-rs/tokio#8252</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/8300">#8300</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/8300">tokio-rs/tokio#8300</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/8301">#8301</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/8301">tokio-rs/tokio#8301</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tokio-rs/tokio/commit/75fef53d0a8590c2d1dbb63672aa7b7d1ef51155"><code>75fef53</code></a> chore: prepare Tokio v1.53.1 (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8303">#8303</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/ae9d01121377cdbef32b9d5e8559843cce9f927e"><code>ae9d011</code></a> signal: restore MSRV by removing OnceLock::wait from the Windows handler (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8300">#8300</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/eb4988dc2ecb85d2617971fbbabc84938c141bfd"><code>eb4988d</code></a> time: fix the loom test of the race between cancellation/insertion (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8302">#8302</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/91d3b4c0bccf2234fc3ed19e605e2cd402f19437"><code>91d3b4c</code></a> time: fix alt timer cancellation and insertion race (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8252">#8252</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/a46338401b9e0ffc9bd68c31100ee99cee717481"><code>a463384</code></a> runtime: remove dead link definition in <code>Runtime::block_on</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/8301">#8301</a>)</li> <li>See full diff in <a href="https://github.com/tokio-rs/tokio/compare/tokio-1.53.0...tokio-1.53.1">compare view</a></li> </ul> </details> <br /> Updates `futures-channel` from 0.3.32 to 0.3.33 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/releases">futures-channel's releases</a>.</em></p> <blockquote> <h2>0.3.33</h2> <ul> <li>Fix <code>ReadLine</code>'s soundness issue regarding to exception safety. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3020">#3020</a>)</li> <li>Fix unsound <code>Send</code> impl for <code>IterPinRef</code> and <code>Iter</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3003">#3003</a>)</li> <li>Fix stacked borrows violation in <code>compat01as03</code> implementation. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3012">#3012</a>)</li> <li>Fix memory leak in <code>FuturesUnordered::IntoIter</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3005">#3005</a>)</li> <li>Add <code>portable-atomic-alloc</code> feature and use it in <code>FuturesUnordered</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3007">#3007</a>)</li> <li>Re-export <code>alloc::task::Wake</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3010">#3010</a>)</li> <li>Update <code>spin</code> to 0.12. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3014">#3014</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md">futures-channel's changelog</a>.</em></p> <blockquote> <h1>0.3.33 - 2026-07-18</h1> <ul> <li>Fix <code>ReadLine</code>'s soundness issue regarding to exception safety. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3020">#3020</a>)</li> <li>Fix unsound <code>Send</code> impl for <code>IterPinRef</code> and <code>Iter</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3003">#3003</a>)</li> <li>Fix stacked borrows violation in <code>compat01as03</code> implementation. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3012">#3012</a>)</li> <li>Fix memory leak in <code>FuturesUnordered::IntoIter</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3005">#3005</a>)</li> <li>Add <code>portable-atomic-alloc</code> feature and use it in <code>FuturesUnordered</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3007">#3007</a>)</li> <li>Re-export <code>alloc::task::Wake</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3010">#3010</a>)</li> <li>Update <code>spin</code> to 0.12. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3014">#3014</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rust-lang/futures-rs/commit/89cc254cb8bfcc78e6a31e7711d0757f97bcb531"><code>89cc254</code></a> Release 0.3.33</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/cd9f5befe699dab2e94cfd32708879b41be0960a"><code>cd9f5be</code></a> ci: Update release workflow</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/d79a499c5f7b4427b8dfbee2216b0ff042bb38e4"><code>d79a499</code></a> Resolve rustdoc::broken_intra_doc_links warning</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/95bbcf83be9e414f1e5b9e0f5e0c91f1d8e433e3"><code>95bbcf8</code></a> Resolve rustdoc ambiguous link error</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/303c1658dc7bde42cf15d7a09621de8c6c857b37"><code>303c165</code></a> Resolve rustdoc::redundant_explicit_links warning</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/f34e3f5b9daba3901a464a0694e448a7eacf0e19"><code>f34e3f5</code></a> ci: Cleanup</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/66591a24275a79d9a77330dbb9106b79f623aa0d"><code>66591a2</code></a> Enable Miri for more tests</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/ab1072fec105b27e5133f9f7dd01f44fba55629f"><code>ab1072f</code></a> Simplify target_has_atomic cfg in utility crates</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/cf5d23b68bf7eafb926a2d485b1a1276a4a4e146"><code>cf5d23b</code></a> Fix unsound compat01as03 implementation (fixes <a href="https://redirect.github.com/rust-lang/futures-rs/issues/2514">#2514</a>) (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3012">#3012</a>)</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/8ae794faefbbae7f0070d11f75ea7e56bc2698c5"><code>8ae794f</code></a> Add portable-atomic-alloc feature and use it in FuturesUnordered (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3007">#3007</a>)</li> <li>Additional commits viewable in <a href="https://github.com/rust-lang/futures-rs/compare/0.3.32...0.3.33">compare view</a></li> </ul> </details> <br /> Updates `futures` from 0.3.32 to 0.3.33 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/releases">futures's releases</a>.</em></p> <blockquote> <h2>0.3.33</h2> <ul> <li>Fix <code>ReadLine</code>'s soundness issue regarding to exception safety. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3020">#3020</a>)</li> <li>Fix unsound <code>Send</code> impl for <code>IterPinRef</code> and <code>Iter</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3003">#3003</a>)</li> <li>Fix stacked borrows violation in <code>compat01as03</code> implementation. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3012">#3012</a>)</li> <li>Fix memory leak in <code>FuturesUnordered::IntoIter</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3005">#3005</a>)</li> <li>Add <code>portable-atomic-alloc</code> feature and use it in <code>FuturesUnordered</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3007">#3007</a>)</li> <li>Re-export <code>alloc::task::Wake</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3010">#3010</a>)</li> <li>Update <code>spin</code> to 0.12. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3014">#3014</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md">futures's changelog</a>.</em></p> <blockquote> <h1>0.3.33 - 2026-07-18</h1> <ul> <li>Fix <code>ReadLine</code>'s soundness issue regarding to exception safety. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3020">#3020</a>)</li> <li>Fix unsound <code>Send</code> impl for <code>IterPinRef</code> and <code>Iter</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3003">#3003</a>)</li> <li>Fix stacked borrows violation in <code>compat01as03</code> implementation. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3012">#3012</a>)</li> <li>Fix memory leak in <code>FuturesUnordered::IntoIter</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3005">#3005</a>)</li> <li>Add <code>portable-atomic-alloc</code> feature and use it in <code>FuturesUnordered</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3007">#3007</a>)</li> <li>Re-export <code>alloc::task::Wake</code>. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3010">#3010</a>)</li> <li>Update <code>spin</code> to 0.12. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3014">#3014</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rust-lang/futures-rs/commit/89cc254cb8bfcc78e6a31e7711d0757f97bcb531"><code>89cc254</code></a> Release 0.3.33</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/cd9f5befe699dab2e94cfd32708879b41be0960a"><code>cd9f5be</code></a> ci: Update release workflow</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/d79a499c5f7b4427b8dfbee2216b0ff042bb38e4"><code>d79a499</code></a> Resolve rustdoc::broken_intra_doc_links warning</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/95bbcf83be9e414f1e5b9e0f5e0c91f1d8e433e3"><code>95bbcf8</code></a> Resolve rustdoc ambiguous link error</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/303c1658dc7bde42cf15d7a09621de8c6c857b37"><code>303c165</code></a> Resolve rustdoc::redundant_explicit_links warning</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/f34e3f5b9daba3901a464a0694e448a7eacf0e19"><code>f34e3f5</code></a> ci: Cleanup</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/66591a24275a79d9a77330dbb9106b79f623aa0d"><code>66591a2</code></a> Enable Miri for more tests</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/ab1072fec105b27e5133f9f7dd01f44fba55629f"><code>ab1072f</code></a> Simplify target_has_atomic cfg in utility crates</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/cf5d23b68bf7eafb926a2d485b1a1276a4a4e146"><code>cf5d23b</code></a> Fix unsound compat01as03 implementation (fixes <a href="https://redirect.github.com/rust-lang/futures-rs/issues/2514">#2514</a>) (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3012">#3012</a>)</li> <li><a href="https://github.com/rust-lang/futures-rs/commit/8ae794faefbbae7f0070d11f75ea7e56bc2698c5"><code>8ae794f</code></a> Add portable-atomic-alloc feature and use it in FuturesUnordered (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3007">#3007</a>)</li> <li>Additional commits viewable in <a href="https://github.com/rust-lang/futures-rs/compare/0.3.32...0.3.33">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
) Bumps the ci-dependencies group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `actions/checkout` from 7.0.0 to 7.0.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.1</h2> <h2>What's Changed</h2> <ul> <li>skip running unsafe pr check if input is default by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2518">actions/checkout#2518</a></li> <li>trim only ascii whitespace for branch by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2521">actions/checkout#2521</a></li> <li>escape values passed to --unset by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2530">actions/checkout#2530</a></li> <li>Various dependency updates</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v7...v7.0.1">https://github.com/actions/checkout/compare/v7...v7.0.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v7.0.1</h2> <ul> <li>Skip running unsafe pr check if input is default by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2518">actions/checkout#2518</a></li> <li>Trim only ascii whitespace for branch by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2521">actions/checkout#2521</a></li> <li>Escape values passed to --unset by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2530">actions/checkout#2530</a></li> <li>Various dependency updates</li> </ul> <h2>v7.0.0</h2> <ul> <li>Block checking out fork PR for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Various dependency updates</li> </ul> <h2>v6.0.3</h2> <ul> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <h2>v6.0.2</h2> <ul> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <h2>v6.0.1</h2> <ul> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> </ul> <h2>v6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> </ul> <h2>v5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <h2>v5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> </ul> <h2>v4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <h2>v4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/3d3c42e5aac5ba805825da76410c181273ba90b1"><code>3d3c42e</code></a> prep v7.0.1 release (<a href="https://redirect.github.com/actions/checkout/issues/2531">#2531</a>)</li> <li><a href="https://github.com/actions/checkout/commit/28802689a136bfcdb721715abd713740beecbe07"><code>2880268</code></a> escape values passed to --unset (<a href="https://redirect.github.com/actions/checkout/issues/2530">#2530</a>)</li> <li><a href="https://github.com/actions/checkout/commit/12cd2235efa0937479335606d7c3ac9f6c0973b1"><code>12cd223</code></a> trim only ascii whitespace for branch (<a href="https://redirect.github.com/actions/checkout/issues/2521">#2521</a>)</li> <li><a href="https://github.com/actions/checkout/commit/62661c4e71a304b2823ed026347b8d34c3eac541"><code>62661c4</code></a> skip running unsafe pr check if input is default (<a href="https://redirect.github.com/actions/checkout/issues/2518">#2518</a>)</li> <li><a href="https://github.com/actions/checkout/commit/e8d4307400f9427dba7cb98e488d6ab85f1cec5f"><code>e8d4307</code></a> Bump the minor-actions-dependencies group with 2 updates (<a href="https://redirect.github.com/actions/checkout/issues/2499">#2499</a>)</li> <li><a href="https://github.com/actions/checkout/commit/631c942040754b6e095e929c1677c07e10ed4f87"><code>631c942</code></a> eslint 9 (<a href="https://redirect.github.com/actions/checkout/issues/2474">#2474</a>)</li> <li><a href="https://github.com/actions/checkout/commit/4f1f4aec02e41874fa0262ea8ff5172d7978ad1e"><code>4f1f4ae</code></a> Bump actions/upload-artifact from 4 to 7 (<a href="https://redirect.github.com/actions/checkout/issues/2476">#2476</a>)</li> <li><a href="https://github.com/actions/checkout/commit/ba097532fb203f7e88c9c3c0b899b49469908a92"><code>ba09753</code></a> Bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/actions/checkout/issues/2488">#2488</a>)</li> <li><a href="https://github.com/actions/checkout/commit/b9e0990d219a03df7633c93f6f005a8fecbcab22"><code>b9e0990</code></a> Bump docker/login-action from 3.3.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2479">#2479</a>)</li> <li><a href="https://github.com/actions/checkout/commit/e8cb398be4a550817e382abf69e4c12c76fce1f2"><code>e8cb398</code></a> Bump docker/build-push-action from 6.5.0 to 7.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2478">#2478</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/init` from 4.37.1 to 4.37.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/init's releases</a>.</em></p> <blockquote> <h2>v4.37.3</h2> <p>No user facing changes.</p> <h2>v4.37.2</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> <li>The CodeQL Action can now make use of <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured private registries</a> in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. <a href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> </ul> <h2>4.37.3 - 22 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.37.2 - 21 Jul 2026</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> <li>The CodeQL Action can now make use of <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured private registries</a> in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. <a href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li> </ul> <h2>4.37.1 - 16 Jul 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li> </ul> <h2>4.37.0 - 08 Jul 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81"><code>e4fba86</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4031">#4031</a> from github/update-v4.37.3-72f6a9da0</li> <li><a href="https://github.com/github/codeql-action/commit/fb50ab5d62a274adf3ef3e22cfe750ae87a0ede7"><code>fb50ab5</code></a> Update changelog for v4.37.3</li> <li><a href="https://github.com/github/codeql-action/commit/72f6a9da0def52d9193d6a758f0378b65091f8d1"><code>72f6a9d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4030">#4030</a> from github/mbg/fix/no-proxy</li> <li><a href="https://github.com/github/codeql-action/commit/3b5ee58597653d9cc6785f3f1277f796d81f3646"><code>3b5ee58</code></a> Use default <code>request</code> options instead of <code>undefined</code></li> <li><a href="https://github.com/github/codeql-action/commit/bfb6be4b5ecd3650f02f530571453e8c64ef0778"><code>bfb6be4</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4028">#4028</a> from github/mergeback/v4.37.2-to-main-e0647621</li> <li><a href="https://github.com/github/codeql-action/commit/526ab84f9858816d9cf5f7b9df4dd5e2235f0eba"><code>526ab84</code></a> Rebuild</li> <li><a href="https://github.com/github/codeql-action/commit/d6217b9b8c14166e4851db94c11155d03bd13c07"><code>d6217b9</code></a> Update changelog and version after v4.37.2</li> <li><a href="https://github.com/github/codeql-action/commit/e0647621c2984b5ed2f768cb892365bf2a616ad1"><code>e064762</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4027">#4027</a> from github/update-v4.37.2-385bcdc5a</li> <li><a href="https://github.com/github/codeql-action/commit/e0faed839190caa67a5cd42f1cc16246028ca3df"><code>e0faed8</code></a> Add a couple of change notes</li> <li><a href="https://github.com/github/codeql-action/commit/73aad0eaa9df172668665a150d17b8bc5a650c20"><code>73aad0e</code></a> Update changelog for v4.37.2</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/analyze` from 4.37.1 to 4.37.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's releases</a>.</em></p> <blockquote> <h2>v4.37.3</h2> <p>No user facing changes.</p> <h2>v4.37.2</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> <li>The CodeQL Action can now make use of <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured private registries</a> in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. <a href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> </ul> <h2>4.37.3 - 22 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.37.2 - 21 Jul 2026</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> <li>The CodeQL Action can now make use of <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured private registries</a> in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. <a href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li> </ul> <h2>4.37.1 - 16 Jul 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li> </ul> <h2>4.37.0 - 08 Jul 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81"><code>e4fba86</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4031">#4031</a> from github/update-v4.37.3-72f6a9da0</li> <li><a href="https://github.com/github/codeql-action/commit/fb50ab5d62a274adf3ef3e22cfe750ae87a0ede7"><code>fb50ab5</code></a> Update changelog for v4.37.3</li> <li><a href="https://github.com/github/codeql-action/commit/72f6a9da0def52d9193d6a758f0378b65091f8d1"><code>72f6a9d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4030">#4030</a> from github/mbg/fix/no-proxy</li> <li><a href="https://github.com/github/codeql-action/commit/3b5ee58597653d9cc6785f3f1277f796d81f3646"><code>3b5ee58</code></a> Use default <code>request</code> options instead of <code>undefined</code></li> <li><a href="https://github.com/github/codeql-action/commit/bfb6be4b5ecd3650f02f530571453e8c64ef0778"><code>bfb6be4</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4028">#4028</a> from github/mergeback/v4.37.2-to-main-e0647621</li> <li><a href="https://github.com/github/codeql-action/commit/526ab84f9858816d9cf5f7b9df4dd5e2235f0eba"><code>526ab84</code></a> Rebuild</li> <li><a href="https://github.com/github/codeql-action/commit/d6217b9b8c14166e4851db94c11155d03bd13c07"><code>d6217b9</code></a> Update changelog and version after v4.37.2</li> <li><a href="https://github.com/github/codeql-action/commit/e0647621c2984b5ed2f768cb892365bf2a616ad1"><code>e064762</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4027">#4027</a> from github/update-v4.37.2-385bcdc5a</li> <li><a href="https://github.com/github/codeql-action/commit/e0faed839190caa67a5cd42f1cc16246028ca3df"><code>e0faed8</code></a> Add a couple of change notes</li> <li><a href="https://github.com/github/codeql-action/commit/73aad0eaa9df172668665a150d17b8bc5a650c20"><code>73aad0e</code></a> Update changelog for v4.37.2</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/labeler](https://github.com/actions/labeler) from 6.2.0 to 7.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/labeler/releases">actions/labeler's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <h3>Enhancements:</h3> <ul> <li>Migrate to ESM and update dependencies by <a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/949">actions/labeler#949</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/labeler/compare/v6...v7.0.0">https://github.com/actions/labeler/compare/v6...v7.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/labeler/commit/bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13"><code>bf12e9b</code></a> feat: migrate to ESM and update dependencies (<a href="https://redirect.github.com/actions/labeler/issues/949">#949</a>)</li> <li>See full diff in <a href="https://github.com/actions/labeler/compare/b8dd2d9be0f68b860e7dae5dae7d772984eacd6d...bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [husky-rs](https://github.com/pplmx/husky-rs) from 0.3.3 to 0.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pplmx/husky-rs/releases">husky-rs's releases</a>.</em></p> <blockquote> <h2>v0.4.0</h2> <h3>🎯 Highlights</h3> <blockquote> <p><strong>prek native mode</strong>: husky-rs now installs prek hooks directly into <code>.git/hooks/</code> instead of relying on <code>.husky/</code> or <code>core.hooksPath</code>. This makes prek-managed projects cleaner and avoids conflicts between husky-rs and prek's own hook management. Standalone <code>.husky/</code> mode continues to work exactly as before.</p> </blockquote> <h3>⚠️ Breaking Changes</h3> <ul> <li><strong>MSRV bumped to 1.83</strong> (from 1.78). For most users this requires no action since Rust developers typically use rustup. Users on Debian Bookworm or Ubuntu 24.04 LTS apt packages already needed rustup even for 1.78.</li> <li><strong>prek mode now clears <code>core.hooksPath</code></strong>. Previously husky-rs called <code>prek install</code> which wrote shims to the directory pointed to by <code>core.hooksPath</code> (usually <code>.husky/</code>). Now husky-rs clears <code>core.hooksPath</code> and passes <code>--git-dir .git</code> to prek, so hooks are installed natively into <code>.git/hooks/</code>. If you had a custom <code>core.hooksPath</code>, it will be removed.</li> <li><strong>prek mode ignores <code>.husky/</code></strong>. When a prek config (<code>prek.toml</code>, <code>.pre-commit-config.yaml</code>, or <code>.pre-commit-config.yml</code>) exists, any existing <code>.husky/</code> directory is no longer used. A warning is printed to alert you. Pre-existing <code>.husky/</code> files are left untouched on disk but are not executed.</li> <li><strong>prek required in prek mode</strong>. If a prek config exists but <code>prek</code> is not on <code>PATH</code>, the build fails with: <code>config found but prek is not installed; run 'cargo install prek'</code>. Previously this was a soft fallback; now it is a hard error to prevent silently broken hooks.</li> </ul> <h3>✨ Added</h3> <ul> <li><strong>prek native mode</strong>: <code>prek install --git-dir .git</code> installs shims directly into <code>.git/hooks/</code>. No <code>.husky/</code> directory required. No <code>core.hooksPath</code> manipulation. Git uses its default hooks directory.</li> <li><strong><code>.husky/</code> ignored warning</strong>: When a prek config is detected alongside an existing <code>.husky/</code> directory, husky-rs prints a clear warning: <code>prek config detected — .husky/ will be ignored (prek manages hooks via .git/hooks/)</code>.</li> <li><strong><code>prek.toml</code> priority</strong>: When both <code>prek.toml</code> and <code>.pre-commit-config.yaml</code> exist, <code>prek.toml</code> takes precedence (matching prek's own behavior).</li> <li><strong><code>default_install_hook_types</code> support</strong> in <code>.pre-commit-config.yaml</code> to control which hook shims prek installs (pre-commit, commit-msg, pre-push).</li> <li><strong><code>default_stages</code> support</strong> for hooks without explicit <code>stages:</code>.</li> <li><strong>New tests</strong>: <code>test_prek_toml_takes_priority_over_yaml</code>, <code>test_husky_is_file_not_directory_fails_build</code> (85 tests total, +2).</li> </ul> <h3>🔧 Changed</h3> <ul> <li><strong>prek validate-config runs before any mutation</strong>. Config validation happens first; <code>core.hooksPath</code> is only cleared after validation passes, preventing partial state on failure.</li> <li><strong>Error messages include config path</strong>. Prek failures now report which config file caused the error, e.g.:</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pplmx/husky-rs/blob/main/CHANGELOG.md">husky-rs's changelog</a>.</em></p> <blockquote> <h2>[0.4.0] - 2026-07-24</h2> <h3>🎯 Highlights</h3> <blockquote> <p><strong>prek native mode</strong>: husky-rs now installs prek hooks directly into <code>.git/hooks/</code> instead of relying on <code>.husky/</code> or <code>core.hooksPath</code>. This makes prek-managed projects cleaner and avoids conflicts between husky-rs and prek's own hook management. Standalone <code>.husky/</code> mode continues to work exactly as before.</p> </blockquote> <h3>⚠️ Breaking Changes</h3> <ul> <li><strong>MSRV bumped to 1.83</strong> (from 1.78). For most users this requires no action since Rust developers typically use rustup. Users on Debian Bookworm or Ubuntu 24.04 LTS apt packages already needed rustup even for 1.78.</li> <li><strong>prek mode now clears <code>core.hooksPath</code></strong>. Previously husky-rs called <code>prek install</code> which wrote shims to the directory pointed to by <code>core.hooksPath</code> (usually <code>.husky/</code>). Now husky-rs clears <code>core.hooksPath</code> and passes <code>--git-dir .git</code> to prek, so hooks are installed natively into <code>.git/hooks/</code>. If you had a custom <code>core.hooksPath</code>, it will be removed.</li> <li><strong>prek mode ignores <code>.husky/</code></strong>. When a prek config (<code>prek.toml</code>, <code>.pre-commit-config.yaml</code>, or <code>.pre-commit-config.yml</code>) exists, any existing <code>.husky/</code> directory is no longer used. A warning is printed to alert you. Pre-existing <code>.husky/</code> files are left untouched on disk but are not executed.</li> <li><strong>prek required in prek mode</strong>. If a prek config exists but <code>prek</code> is not on <code>PATH</code>, the build fails with: <code>config found but prek is not installed; run 'cargo install prek'</code>. Previously this was a soft fallback; now it is a hard error to prevent silently broken hooks.</li> </ul> <h3>✨ Added</h3> <ul> <li><strong>prek native mode</strong>: <code>prek install --git-dir .git</code> installs shims directly into <code>.git/hooks/</code>. No <code>.husky/</code> directory required. No <code>core.hooksPath</code> manipulation. Git uses its default hooks directory.</li> <li><strong><code>.husky/</code> ignored warning</strong>: When a prek config is detected alongside an existing <code>.husky/</code> directory, husky-rs prints a clear warning: <code>prek config detected — .husky/ will be ignored (prek manages hooks via .git/hooks/)</code>.</li> <li><strong><code>prek.toml</code> priority</strong>: When both <code>prek.toml</code> and <code>.pre-commit-config.yaml</code> exist, <code>prek.toml</code> takes precedence (matching prek's own behavior).</li> <li><strong><code>default_install_hook_types</code> support</strong> in <code>.pre-commit-config.yaml</code> to control which hook shims prek installs (pre-commit, commit-msg, pre-push).</li> <li><strong><code>default_stages</code> support</strong> for hooks without explicit <code>stages:</code>.</li> <li><strong>New tests</strong>: <code>test_prek_toml_takes_priority_over_yaml</code>, <code>test_husky_is_file_not_directory_fails_build</code> (85 tests total, +2).</li> </ul> <h3>🔧 Changed</h3> <ul> <li><strong>prek validate-config runs before any mutation</strong>. Config validation happens first; <code>core.hooksPath</code> is only cleared after validation passes, preventing partial state on failure.</li> <li><strong>Error messages include config path</strong>. Prek failures now report which config</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pplmx/husky-rs/commit/2bda1e8909b46d79b9ad0e5616495448fe2583c4"><code>2bda1e8</code></a> chore(release): v0.4.0 — prek native mode</li> <li><a href="https://github.com/pplmx/husky-rs/commit/0b64c848038f7c32812f8d84fd1063da15b788bd"><code>0b64c84</code></a> chore: bump MSRV to 1.83</li> <li><a href="https://github.com/pplmx/husky-rs/commit/8ef393de3ea392bf98603345ed4258b55bac9f81"><code>8ef393d</code></a> test: add edge case tests (prek priority, husky-as-file); improve error messages</li> <li><a href="https://github.com/pplmx/husky-rs/commit/619d64a51c74bdfe0ff2f7eb563e06eed705a1ad"><code>619d64a</code></a> fix: warn when .husky/ exists alongside prek config</li> <li><a href="https://github.com/pplmx/husky-rs/commit/1247ae431fa80c1c4fdcc502cfeffdbbb99f35f0"><code>1247ae4</code></a> fix: prek native mode — clear core.hooksPath, install to .git/hooks/</li> <li><a href="https://github.com/pplmx/husky-rs/commit/e26c6695c7b5b7bd9746b33c9b8defac1e399980"><code>e26c669</code></a> fix: prek native mode — clear core.hooksPath, install to .git/hooks/, remove ...</li> <li><a href="https://github.com/pplmx/husky-rs/commit/10f36bed2c20052788ad97b1c17406dfc05463fc"><code>10f36be</code></a> feat: integrate prek-managed hooks</li> <li><a href="https://github.com/pplmx/husky-rs/commit/cf3c6fb8745fc80b35c019f047c69dad46083134"><code>cf3c6fb</code></a> chore: cross-pollinate from vllm-lite and ip-tools</li> <li><a href="https://github.com/pplmx/husky-rs/commit/e580a76546a25a70782e04513427060dd4d577e1"><code>e580a76</code></a> chore: add justfile alongside Makefile</li> <li>See full diff in <a href="https://github.com/pplmx/husky-rs/compare/v0.3.3...v0.4.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [base64](https://github.com/marshallpierce/rust-base64) from 0.22.1 to 0.23.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md">base64's changelog</a>.</em></p> <blockquote> <h1>0.23.0</h1> <ul> <li>Added more consts for preconfigured configs and engines</li> <li>Make DecodeError::InvalidLastSymbol more clear by including the decoded value</li> <li>Added SIMD-accelerated engines behind the default-on <code>simd-unsafe</code> feature: <code>Simd</code> picks the best instruction set at runtime (AVX2 on <code>x86_64</code>, NEON on <code>aarch64</code>) and falls back to the scalar <code>GeneralPurpose</code> engine, while <code>Avx2</code> and <code>Neon</code> target one instruction set with no runtime detection and work in <code>no_std</code>. The engines support the standard and URL-safe alphabets.</li> <li>Update MSRV to 1.71.0</li> <li>Add support for custom padding symbols</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/marshallpierce/rust-base64/commit/9e9220a4166f628de7c8803289e120ae1e944f78"><code>9e9220a</code></a> v0.23.0</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/870326ec592eebde9d6bfe4c5d8130c591273e9c"><code>870326e</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/306">#306</a> from marshallpierce/mp/trailing-bits-docs</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/fbec5f1050f9fc16e6a826ebabaa2b7b0644bd67"><code>fbec5f1</code></a> Document no trailing trailing bits</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/0a23549968f059b53cf39e96eba8f46779f322a7"><code>0a23549</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/305">#305</a> from marshallpierce/mp/edition-2021</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/f10b7e20614135aa61289140683fc93e5a45d338"><code>f10b7e2</code></a> Update deps & edition</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/9d21a598860645cb6290940e7a43033bc43ebd74"><code>9d21a59</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/304">#304</a> from marshallpierce/mp/custom-padding-rebase</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/f70bad2caaa85350b95d988bfb9a0997e824bfd8"><code>f70bad2</code></a> Support custom padding symbols</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/684d79cd3deb8dfd5323619634c75bc0ff6edfd9"><code>684d79c</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/301">#301</a> from marshallpierce/mp/simd-gardening</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/5bf66f2646c6fd99e1b18bf4e2bb0a47d34e1eaa"><code>5bf66f2</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/284">#284</a> from AbeZbm/add-tests</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/d3831cfbf7dafe226a8383450c3410e2f67c826a"><code>d3831cf</code></a> Followups to SIMD work</li> <li>Additional commits viewable in <a href="https://github.com/marshallpierce/rust-base64/compare/v0.22.1...v0.23.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Disables `comfy-table`’s default `tty` feature in `boa_wintertc`. This prevents it from pulling in `crossterm`, which does not compile for WASM targets.
…cies group (boa-dev#5468) Bumps the rust-dependencies group with 1 update: [thin-vec](https://github.com/mozilla/thin-vec). Updates `thin-vec` from 0.2.18 to 0.2.19 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mozilla/thin-vec/commit/5c0c9f5699d2f9620524d46a8a11a346226b330e"><code>5c0c9f5</code></a> chore: Bump version to 0.2.19</li> <li><a href="https://github.com/mozilla/thin-vec/commit/3ee2f89b50fff43d940c6ddb831222acb30b6d49"><code>3ee2f89</code></a> feat: add may_dangle Drop impl under unstable feature</li> <li><a href="https://github.com/mozilla/thin-vec/commit/4479f836cd1cfdcac672165e2378c943e54539d1"><code>4479f83</code></a> refactor: move drop_non_singleton out of the Drop impl</li> <li><a href="https://github.com/mozilla/thin-vec/commit/e9030806a87036bd5ac19a2ff32ffdcae5a74d65"><code>e903080</code></a> Use safe <code>Layout::from_size_align</code> (instead of unsafe `from_size_align_unchec...</li> <li><a href="https://github.com/mozilla/thin-vec/commit/de42024273a81ce02b6d69a8f0bd0f7f70abc1f9"><code>de42024</code></a> Fix shallow_size_of for inline arrays.</li> <li>See full diff in <a href="https://github.com/mozilla/thin-vec/compare/v0.2.18...v0.2.19">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…oa-dev#5465) ## Summary Fixes the CLI exiting with code 0 when an uncaught runtime exception occurs. Syntax errors already returned non-zero; this extends the same behavior to runtime errors. ## Changes - ****: Added after printing uncaught errors in (3 paths: job errors, evaluation errors, parsing errors) and (1 path). - ****: New integration tests verifying non-zero exit codes for stdin, `-e` expression, and file execution uncaught errors. ## Before/After 127 127 Fixes boa-dev#4962 Closes boa-dev#4964 (supersedes stalled PR) --------- Signed-off-by: Mustafa Senoglu <mmustafasenoglu0@gmail.com>
…#5471) Bumps the rust-dependencies group with 9 updates: | Package | From | To | | --- | --- | --- | | [base64](https://github.com/marshallpierce/rust-base64) | `0.23.0` | `0.23.1` | | [clap](https://github.com/clap-rs/clap) | `4.6.4` | `4.6.5` | | [http](https://github.com/hyperium/http) | `1.4.2` | `1.5.0` | | [rustls](https://github.com/rustls/rustls) | `0.23.42` | `0.23.43` | | [time](https://github.com/time-rs/time) | `0.3.54` | `0.3.55` | | [trybuild](https://github.com/dtolnay/trybuild) | `1.0.118` | `1.0.120` | | [intrusive-collections](https://github.com/Amanieu/intrusive-rs) | `0.10.2` | `0.10.3` | | [timezone_provider](https://github.com/boa-dev/temporal) | `0.2.4` | `0.2.5` | | [temporal_rs](https://github.com/boa-dev/temporal) | `0.2.4` | `0.2.5` | Updates `base64` from 0.23.0 to 0.23.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md">base64's changelog</a>.</em></p> <blockquote> <h1>0.23.1</h1> <ul> <li>Make the tests build again on non-SIMD architectures</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/marshallpierce/rust-base64/commit/069bf7067b949f5c0a92b6ceb82492920502f2c2"><code>069bf70</code></a> v0.23.1</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/6ab1fb0a5843013557a52c45c84b91f5d1bb87af"><code>6ab1fb0</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/310">#310</a> from musicinmybrain/test-on-non-simd-arches</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/7cffce6f971acdf48f83112cbdd63bd61125ba06"><code>7cffce6</code></a> Fix testing on architectures without unsafe SIMD support</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/e34f9a08c5c89a4641350ac22033f3fa4f5d4d97"><code>e34f9a0</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/308">#308</a> from atouchet/com</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/e9240c9a01e0a4934c5619e74740caa6d1f67ce9"><code>e9240c9</code></a> Remove outdated comment</li> <li>See full diff in <a href="https://github.com/marshallpierce/rust-base64/compare/v0.23.0...v0.23.1">compare view</a></li> </ul> </details> <br /> Updates `clap` from 4.6.4 to 4.6.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/clap-rs/clap/releases">clap's releases</a>.</em></p> <blockquote> <h2>v4.6.5</h2> <h2>[4.6.5] - 2026-07-31</h2> <h3>Fixes</h3> <ul> <li><em>(help)</em> Correctly mark which <code>value_names</code> are optional with <code>num_args</code></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/clap-rs/clap/blob/master/CHANGELOG.md">clap's changelog</a>.</em></p> <blockquote> <h2>[4.6.5] - 2026-07-31</h2> <h3>Fixes</h3> <ul> <li><em>(help)</em> Correctly mark which <code>value_names</code> are optional with <code>num_args</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/clap-rs/clap/commit/c8c935504a3f1a015470199ae82c3cb124b5b1d5"><code>c8c9355</code></a> chore: Release</li> <li><a href="https://github.com/clap-rs/clap/commit/af74def7141738c51ace956f58eb32dd94e998ab"><code>af74def</code></a> docs: Update changelog</li> <li><a href="https://github.com/clap-rs/clap/commit/c96f222c35c4ef4bd3ab9927809b2724532a8f6e"><code>c96f222</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/6368">#6368</a> from truffle-dev/fix/fish-env-escaping</li> <li><a href="https://github.com/clap-rs/clap/commit/49a05cdc99c2151cdd48d5ec4c974151d21c026e"><code>49a05cd</code></a> fix(complete): Two-pass quote fish env-completer</li> <li><a href="https://github.com/clap-rs/clap/commit/e791004a5bbbfe5418fe573a4db777df24d72490"><code>e791004</code></a> test(complete): Snapshot fish env quoting cases</li> <li>See full diff in <a href="https://github.com/clap-rs/clap/compare/clap_complete-v4.6.4...clap_complete-v4.6.5">compare view</a></li> </ul> </details> <br /> Updates `http` from 1.4.2 to 1.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hyperium/http/releases">http's releases</a>.</em></p> <blockquote> <h2>v1.5.0</h2> <h2>What's Changed</h2> <ul> <li>feat(method): add QUERY method by <a href="https://github.com/seanmonstar"><code>@seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/http/pull/798">hyperium/http#798</a></li> <li>fix(uri): allow empty paths in uri::Builder by <a href="https://github.com/seanmonstar"><code>@seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/http/pull/853">hyperium/http#853</a></li> <li>perf(header,uri): faster value validation, URI parse/format, map inserts by <a href="https://github.com/geeknoid"><code>@geeknoid</code></a> in <a href="https://redirect.github.com/hyperium/http/pull/852">hyperium/http#852</a></li> <li>fix(uri): enforce max length in PathAndQuery by <a href="https://github.com/seanmonstar"><code>@seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/http/pull/856">hyperium/http#856</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/geeknoid"><code>@geeknoid</code></a> made their first contribution in <a href="https://redirect.github.com/hyperium/http/pull/852">hyperium/http#852</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/hyperium/http/compare/v1.4.2...v1.5.0">https://github.com/hyperium/http/compare/v1.4.2...v1.5.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/hyperium/http/blob/master/CHANGELOG.md">http's changelog</a>.</em></p> <blockquote> <h1>1.5.0 (July 29, 2026)</h1> <ul> <li>Add <code>Method::QUERY</code> constant for the new QUERY method defined in RFC 10008.</li> <li>Fix <code>uri::Builder::path_and_query()</code> to allow empty strings to mean no path.</li> <li>Fix <code>uri::PathAndQuery</code> parsing to enforce URI max length.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hyperium/http/commit/16fc9a7b840c2181e7f8b37397c107b0ffcd050d"><code>16fc9a7</code></a> v1.5.0</li> <li><a href="https://github.com/hyperium/http/commit/e559023f67e3fad6ecc3ee91307be178e0f13626"><code>e559023</code></a> fix(uri): enforce max length in PathAndQuery (<a href="https://redirect.github.com/hyperium/http/issues/856">#856</a>)</li> <li><a href="https://github.com/hyperium/http/commit/2178e175c4e247a33ba5f6ca3503afb1afbaabba"><code>2178e17</code></a> perf(header,uri): faster value validation, URI parse/format, map inserts (<a href="https://redirect.github.com/hyperium/http/issues/852">#852</a>)</li> <li><a href="https://github.com/hyperium/http/commit/03c8cd7faeddfad00873b4d58a45ecdf74ebebe6"><code>03c8cd7</code></a> fix(uri): allow empty paths in uri::Builder (<a href="https://redirect.github.com/hyperium/http/issues/853">#853</a>)</li> <li><a href="https://github.com/hyperium/http/commit/bb8705b25cdb6e29081edf9ade2ea124f6783e18"><code>bb8705b</code></a> feat(method): add QUERY method (<a href="https://redirect.github.com/hyperium/http/issues/798">#798</a>)</li> <li>See full diff in <a href="https://github.com/hyperium/http/compare/v1.4.2...v1.5.0">compare view</a></li> </ul> </details> <br /> Updates `rustls` from 0.23.42 to 0.23.43 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rustls/rustls/commit/fcf61cdbba30913cfd5b40aefa83989c6233812d"><code>fcf61cd</code></a> Prepare 0.23.43</li> <li><a href="https://github.com/rustls/rustls/commit/f0dad4c57112955eb1f4fa2f076458329b4221b3"><code>f0dad4c</code></a> Check server's proposed suite against actual offer</li> <li><a href="https://github.com/rustls/rustls/commit/b480cc674c5229cbd56d0551d1fc0e32839e5fdd"><code>b480cc6</code></a> Test for server choosing a non-QUIC TLS1.3 suite</li> <li><a href="https://github.com/rustls/rustls/commit/883a44d45aa3e8fd6db56b3429c3156cc28d737b"><code>883a44d</code></a> Consider <code>Protocol</code> in <code>ServerConfig::supports_version</code></li> <li><a href="https://github.com/rustls/rustls/commit/c2f1fd9c38e53f2c902a2481f4f78ae8aaa37e64"><code>c2f1fd9</code></a> Check suitability of server version in QUIC client</li> <li><a href="https://github.com/rustls/rustls/commit/d98e1b9ea10138f6dddfe48f5440dc0aa95e22cc"><code>d98e1b9</code></a> Add test for server <code>Tls13RequiredForQuic</code></li> <li><a href="https://github.com/rustls/rustls/commit/e63d9bf2c0c8f67932a0941890d36845329f7abe"><code>e63d9bf</code></a> Bound ticket age calculation</li> <li><a href="https://github.com/rustls/rustls/commit/79cd46294ccb50f6a5faac9a67857e3201ddba2a"><code>79cd462</code></a> Defensiveness improvement for binder suffix arithmetic</li> <li><a href="https://github.com/rustls/rustls/commit/4a9f025d50e6b98ebaa0ccb35c416998f51776d0"><code>4a9f025</code></a> use checked_sub for the mac tag offset in Rfc5077Ticketer::decrypt</li> <li><a href="https://github.com/rustls/rustls/commit/3131e5c307591c0627cd670ec2585657661093d9"><code>3131e5c</code></a> Accept that libcrux deps are vulnerable</li> <li>Additional commits viewable in <a href="https://github.com/rustls/rustls/compare/v/0.23.42...v/0.23.43">compare view</a></li> </ul> </details> <br /> Updates `time` from 0.3.54 to 0.3.55 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/time-rs/time/releases">time's releases</a>.</em></p> <blockquote> <h2>v0.3.55</h2> <p>See the <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">changelog</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">time's changelog</a>.</em></p> <blockquote> <h2>0.3.55 [2026-08-01]</h2> <h3>Fixed</h3> <ul> <li>Avoid underflow in <code>DateIter::nth</code>, ensuring correct behavior.</li> <li>Avoid overflow when deserializing timestamps.</li> <li>Handle out-of-bounds data when deserializing.</li> <li>Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.</li> <li>No longer silence errors when deserializing <code>UtcOffset</code>.</li> <li><code>OffsetDateTime::from_unix_timestamp_nanos</code> and <code>UtcDateTime::from_unix_timestamp_nanos</code> correctly return <code>None</code> for all out-of-range values, rather than unexpectedly panicking in some situations.</li> <li><code>OffsetDateTime::checked_to_offset</code> and <code>UtcDateTime::checked_to_offset</code> correctly return <code>None</code> for all out-of-range values, rather than unexpectedly panicking in some situations.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/time-rs/time/commit/857d9c404c5b6f6cb64d1bfa604c695be3369e12"><code>857d9c4</code></a> v0.3.55 release</li> <li><a href="https://github.com/time-rs/time/commit/2b72fcd4b245a032521a5d4a1684404a83a3e11b"><code>2b72fcd</code></a> Precise feature gating for macro</li> <li><a href="https://github.com/time-rs/time/commit/c1089eb4beec9f8ad129177060a1936b8d598a07"><code>c1089eb</code></a> Run check-targets, miri in parallel</li> <li><a href="https://github.com/time-rs/time/commit/f377fad42ab9f12ccba27a15b340cae3ba1b6e54"><code>f377fad</code></a> Avoid range-validated ordinal => year in <code>cascade</code></li> <li><a href="https://github.com/time-rs/time/commit/2eacb0a95d1bb87f4aadee0805818759e76f2bd5"><code>2eacb0a</code></a> Report miscellaneous tasks, overall status</li> <li><a href="https://github.com/time-rs/time/commit/29621acf88b4813235296c6441667aa415b201d7"><code>29621ac</code></a> Speed up CI</li> <li><a href="https://github.com/time-rs/time/commit/08de7ba79ae109cffbc61b646f6e8df6eb423c67"><code>08de7ba</code></a> Fix nano-timestamp validation</li> <li><a href="https://github.com/time-rs/time/commit/3c3f0462fb9da1605ec0c73125db71fc8604841b"><code>3c3f046</code></a> Fix copy-paste error</li> <li><a href="https://github.com/time-rs/time/commit/3c0c81ccbb78a806c9b40181c612026cfb53cdd4"><code>3c0c81c</code></a> Cascade errors when deserializing <code>UtcOffset</code></li> <li><a href="https://github.com/time-rs/time/commit/c21acd52a788b9b74c2d262933faa2675ae17f16"><code>c21acd5</code></a> Handle more deserializations of <code>SignedDuration</code></li> <li>Additional commits viewable in <a href="https://github.com/time-rs/time/compare/v0.3.54...v0.3.55">compare view</a></li> </ul> </details> <br /> Updates `trybuild` from 1.0.118 to 1.0.120 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/trybuild/releases">trybuild's releases</a>.</em></p> <blockquote> <h2>1.0.120</h2> <ul> <li>Collect more path dependencies from dev deps and target deps (<a href="https://redirect.github.com/dtolnay/trybuild/issues/340">#340</a>)</li> <li>Prefer longest match in path dependency search (<a href="https://redirect.github.com/dtolnay/trybuild/issues/341">#341</a>, <a href="https://redirect.github.com/dtolnay/trybuild/issues/342">#342</a>)</li> </ul> <h2>1.0.119</h2> <ul> <li>Fix detection of crate features in new Cargo build-dir layout (<a href="https://redirect.github.com/dtolnay/trybuild/issues/338">#338</a>, thanks <a href="https://github.com/ranger-ross"><code>@ranger-ross</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/trybuild/commit/2adc26560dba1d8eaeb596c5625f854e5d6c68b2"><code>2adc265</code></a> Release 1.0.120</li> <li><a href="https://github.com/dtolnay/trybuild/commit/bc87f59473021b19b945da5c9e9a91da2d3d4cfe"><code>bc87f59</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/trybuild/issues/342">#342</a> from dtolnay/longestdep</li> <li><a href="https://github.com/dtolnay/trybuild/commit/85d74ec1f314eb7deeba8ac06d7909c7b51c459c"><code>85d74ec</code></a> Accept snapshots with original path dep behavior</li> <li><a href="https://github.com/dtolnay/trybuild/commit/a20999d65f3ab3acae0ce9c264e8d5410a9745d0"><code>a20999d</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/trybuild/issues/341">#341</a> from dtolnay/longestdep</li> <li><a href="https://github.com/dtolnay/trybuild/commit/cf672ed568f92a72c6592407c630f539ecdea224"><code>cf672ed</code></a> Prefer longest match in path dependency search</li> <li><a href="https://github.com/dtolnay/trybuild/commit/8661abcfdf64bb3d678d8df19b2c2dd9ac7d1ed8"><code>8661abc</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/trybuild/issues/340">#340</a> from dtolnay/morepathdep</li> <li><a href="https://github.com/dtolnay/trybuild/commit/527ecc9557b726fcf5f2ba4505a97436196fb436"><code>527ecc9</code></a> Accept old snapshots without more path dependencies</li> <li><a href="https://github.com/dtolnay/trybuild/commit/de08a762e551c281d7d40b743bbda89923744ebb"><code>de08a76</code></a> Collect more path dependencies from dev deps and target deps</li> <li><a href="https://github.com/dtolnay/trybuild/commit/3ce9ec5712f9810461ca527afffb3576f5c7ebd0"><code>3ce9ec5</code></a> Raise required compiler to Rust 1.88</li> <li><a href="https://github.com/dtolnay/trybuild/commit/a065cd46cf958b2967bbc846abd2413d9cb512f0"><code>a065cd4</code></a> Release 1.0.119</li> <li>Additional commits viewable in <a href="https://github.com/dtolnay/trybuild/compare/1.0.118...1.0.120">compare view</a></li> </ul> </details> <br /> Updates `intrusive-collections` from 0.10.2 to 0.10.3 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/Amanieu/intrusive-rs/commits">compare view</a></li> </ul> </details> <br /> Updates `timezone_provider` from 0.2.4 to 0.2.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/boa-dev/temporal/releases">timezone_provider's releases</a>.</em></p> <blockquote> <h2>v0.2.5 release</h2> <h2>What's Changed in v0.2.5</h2> <ul> <li>Update to Diplomat 0.16 by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/738">#738</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/boa-dev/temporal/compare/v0.2.4...v0.2.5">https://github.com/boa-dev/temporal/compare/v0.2.4...v0.2.5</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/boa-dev/temporal/blob/main/CHANGELOG.md">timezone_provider's changelog</a>.</em></p> <blockquote> <h2>What's Changed in v0.2.5</h2> <ul> <li>Update to Diplomat 0.16 by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/738">#738</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/boa-dev/temporal/compare/v0.2.4...v0.2.5">https://github.com/boa-dev/temporal/compare/v0.2.4...v0.2.5</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/boa-dev/temporal/commit/edaac0858c438488feb5f17022cbc95f771ee632"><code>edaac08</code></a> Release 0.2.5 (<a href="https://redirect.github.com/boa-dev/temporal/issues/739">#739</a>)</li> <li><a href="https://github.com/boa-dev/temporal/commit/7495193530b19153b13d46f6d6acfeb13c93c3bd"><code>7495193</code></a> Update to Diplomat 0.16 (<a href="https://redirect.github.com/boa-dev/temporal/issues/738">#738</a>)</li> <li><a href="https://github.com/boa-dev/temporal/commit/2251db9b304669d73d27d4de259f7a98829c24f3"><code>2251db9</code></a> chore(dependabot): bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/boa-dev/temporal/issues/729">#729</a>)</li> <li>See full diff in <a href="https://github.com/boa-dev/temporal/compare/v0.2.4...v0.2.5">compare view</a></li> </ul> </details> <br /> Updates `temporal_rs` from 0.2.4 to 0.2.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/boa-dev/temporal/releases">temporal_rs's releases</a>.</em></p> <blockquote> <h2>v0.2.5 release</h2> <h2>What's Changed in v0.2.5</h2> <ul> <li>Update to Diplomat 0.16 by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/738">#738</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/boa-dev/temporal/compare/v0.2.4...v0.2.5">https://github.com/boa-dev/temporal/compare/v0.2.4...v0.2.5</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/boa-dev/temporal/blob/main/CHANGELOG.md">temporal_rs's changelog</a>.</em></p> <blockquote> <h2>What's Changed in v0.2.5</h2> <ul> <li>Update to Diplomat 0.16 by <a href="https://github.com/Manishearth"><code>@Manishearth</code></a> in <a href="https://redirect.github.com/boa-dev/temporal/pull/738">#738</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/boa-dev/temporal/compare/v0.2.4...v0.2.5">https://github.com/boa-dev/temporal/compare/v0.2.4...v0.2.5</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/boa-dev/temporal/commit/edaac0858c438488feb5f17022cbc95f771ee632"><code>edaac08</code></a> Release 0.2.5 (<a href="https://redirect.github.com/boa-dev/temporal/issues/739">#739</a>)</li> <li><a href="https://github.com/boa-dev/temporal/commit/7495193530b19153b13d46f6d6acfeb13c93c3bd"><code>7495193</code></a> Update to Diplomat 0.16 (<a href="https://redirect.github.com/boa-dev/temporal/issues/738">#738</a>)</li> <li><a href="https://github.com/boa-dev/temporal/commit/2251db9b304669d73d27d4de259f7a98829c24f3"><code>2251db9</code></a> chore(dependabot): bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/boa-dev/temporal/issues/729">#729</a>)</li> <li>See full diff in <a href="https://github.com/boa-dev/temporal/compare/v0.2.4...v0.2.5">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Small refactor for nicer code
shruti2522
marked this pull request as ready for review
August 31, 2026 06:47
shruti2522
requested review from
jasonwilliams,
jedel1043 and
nekevss
as code owners
August 31, 2026 06:47
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
It introduces high-impact default feature flips and still contains a couple of GC-context threading inconsistencies/unsafe usage that should be corrected before approval.
Once you've addressed the issues Copilot identified, you can request another Copilot review.
Pull request overview
This PR continues the oscars GC integration work by threading an explicit GC collector / mutation context through object allocation paths, adding support for the oscars::mark_sweep_branded backend, and removing reliance on implicit global GC state in many engine subsystems.
Changes:
- Introduces a
GcContextonContextand wiresgc_collector()/alloc()through core allocation-heavy paths (VM, bytecompiler, intrinsics/builtins, modules). - Adds an
oscars_backendfeature path (including shims like an oscarsWeakMap) and updates GC/string crates to integrate with oscarsTrace/Finalize. - Updates tests, examples, CLI utilities, and workflows to compile and run with the new APIs and feature gating.
File summaries
| File | Description |
|---|---|
| tests/wpt/src/lib.rs | Update native function conversion to pass GC collector. |
| tests/tester/src/exec/mod.rs | Pass GC collector into FunctionObjectBuilder. |
| tests/macros/tests/gcd_callback.rs | Update macro tests for new GC APIs / allow lint. |
| tests/macros/tests/fibonacci.rs | Update macro tests for new to_js_function signature. |
| tests/macros/tests/class.rs | Update test object creation to use a mutation context. |
| tests/fuzz/Cargo.toml | Add patch override for boa_string path in fuzz crate. |
| examples/src/bin/synthetic.rs | Pass GC collector into function builders. |
| examples/src/bin/modules.rs | Update callbacks to pass GC collector. |
| examples/src/bin/modulehandler.rs | Update JsObject::default call with GC collector. |
| examples/src/bin/jstypedarray.rs | Update allocations/builders for new GC APIs. |
| examples/src/bin/jspromise.rs | Update promise callbacks to pass GC collector. |
| examples/src/bin/jsarray.rs | Update array example callbacks to pass GC collector. |
| examples/src/bin/derive.rs | Silence dead-code lint in example. |
| examples/src/bin/closures.rs | Update object creation and function builder for GC collector. |
| core/string/src/tests.rs | Use assert_eq! for clearer capacity assertions. |
| core/string/src/lib.rs | Add oscars Trace/Finalize impls for JsString behind feature. |
| core/string/src/builder.rs | Formatting/lint adjustments in string builder conversion. |
| core/string/Cargo.toml | Add optional oscars dependency + oscars_backend feature. |
| core/runtime/src/test262.rs | Update object creation to pass mutation context; minor refactor. |
| core/runtime/src/store/to.rs | Update object creation to pass GC collector. |
| core/runtime/src/process/mod.rs | Update env object creation to pass GC collector. |
| core/runtime/src/microtask/tests.rs | Adjust borrow/clone pattern for oscars GcRef behavior. |
| core/runtime/src/fetch/mod.rs | Pass GC collector into iterator function builder. |
| core/runtime/src/fetch/headers_iterator.rs | Update iterator object creation with mutation context. |
| core/runtime/src/console/tests.rs | Adjust borrow/clone + stabilize table output assertions. |
| core/runtime/src/console/mod.rs | Update console object creation with GC collector. |
| core/runtime/src/abort/mod.rs | Adjust borrow/clone pattern for oscars GcRef behavior. |
| core/macros/src/module.rs | Update macro-generated functions to pass GC collector. |
| core/macros/src/lib.rs | Refactor Trace derive generation to avoid borrow issues. |
| core/macros/src/class.rs | Update accessor generation to pass GC collector. |
| core/interner/src/sym.rs | Derive Trace and use #[unsafe_ignore_trace] field attr. |
| core/gc/src/trace.rs | Wrap custom trace bodies in an unsafe block for linting. |
| core/gc/src/test/weak.rs | Adjust test type usage for branded Gc lifetimes. |
| core/gc/src/pointers/weak_map.rs | Add get_value helper (clone-out value). |
| core/gc/src/pointers/mutation_context.rs | Make dummy() const; add global() polyfill. |
| core/gc/src/oscars_weak_map.rs | Add oscars-backend WeakMap shim. |
| core/gc/src/context.rs | Introduce GcContext abstraction and gc_collector() accessor. |
| core/gc/src/cell.rs | Improve assertions with assert_eq!/assert_ne!. |
| core/gc/Cargo.toml | Switch defaults/features to support oscars backend and deps. |
| core/engine/src/vm/tests.rs | Gate GC-stress test under non-oscars backend. |
| core/engine/src/vm/opcode/set/property.rs | Inline cache ops now require GC collector for weak shapes. |
| core/engine/src/vm/opcode/set/class_prototype.rs | Pass GC collector into shared-shape object creation. |
| core/engine/src/vm/opcode/push/object.rs | Thread GC collector into template object creation. |
| core/engine/src/vm/opcode/push/environment.rs | Thread GC collector into environment stack + allocations. |
| core/engine/src/vm/opcode/push/class/mod.rs | Thread GC collector into set_prototype. |
| core/engine/src/vm/opcode/push/array.rs | Thread GC collector into template array creation. |
| core/engine/src/vm/opcode/meta/mod.rs | with_null_proto now requires GC collector. |
| core/engine/src/vm/opcode/iteration/iterator.rs | Iterator records now take GC collector. |
| core/engine/src/vm/opcode/iteration/for_in.rs | Iterator records now take GC collector. |
| core/engine/src/vm/opcode/get/property.rs | Inline cache lookup/update now requires GC collector. |
| core/engine/src/vm/opcode/get/name.rs | Inline cache lookup/update now requires GC collector. |
| core/engine/src/vm/opcode/generator/mod.rs | Pass GC collector into shared-shape generator objects. |
| core/engine/src/vm/opcode/function.rs | Adjust map_or_else closure typing for borrow behavior. |
| core/engine/src/vm/opcode/call/mod.rs | Thread GC collector into async import closures. |
| core/engine/src/vm/opcode/await/mod.rs | Use context.alloc for captures + pass GC collector to builders. |
| core/engine/src/vm/mod.rs | VM construction now takes a mutation context for allocations. |
| core/engine/src/vm/inline_cache/tests.rs | Update template creation and weak upgrade calls with GC collector. |
| core/engine/src/vm/inline_cache/mod.rs | Store weak shapes requiring MC; adjust display formatting. |
| core/engine/src/vm/code_block.rs | Thread GC collector through function object creation/templates. |
| core/engine/src/value/tests.rs | Update object creation to pass GC collector / mutation context. |
| core/engine/src/value/integer.rs | Use assert_eq!/assert_ne! in tests. |
| core/engine/src/value/inner/nan_boxed.rs | Adjust raw pointer handling for oscars backend; lint allow. |
| core/engine/src/value/inner/legacy.rs | Update Trace impl to avoid as_object path. |
| core/engine/src/value/equality.rs | Use debug_assert_eq!. |
| core/engine/src/value/conversions/serde_json.rs | Thread GC collector into object/property insertion. |
| core/engine/src/symbol.rs | Adjust deny list and pass GC collector into object creation. |
| core/engine/src/script.rs | Use context.alloc and thread MC into ByteCompiler. |
| core/engine/src/realm.rs | Realm creation/init now requires mutation context. |
| core/engine/src/object/shape/shared_shape/tests.rs | Update root/transition APIs to accept mutation context. |
| core/engine/src/object/shape/shared_shape/forward_transition.rs | Require MC for weak transitions; gate tests under non-oscars. |
| core/engine/src/object/shape/root_shape.rs | Replace Default with RootShape::new(mc). |
| core/engine/src/object/property_map.rs | Thread MC through shape transitions and property insert/remove. |
| core/engine/src/object/internal_methods/mod.rs | Thread MC into property descriptor application and removals. |
| core/engine/src/object/datatypes.rs | Update docs/examples to pass GC collector. |
| core/engine/src/object/builtins/jsweakset.rs | Pass GC collector into shared-shape object + weak set creation. |
| core/engine/src/object/builtins/jsweakmap.rs | Pass GC collector into shared-shape object + weak map creation. |
| core/engine/src/object/builtins/jstypedarray.rs | Update docs and capture allocation to use context.alloc. |
| core/engine/src/object/builtins/jssharedarraybuffer.rs | Thread GC collector into object creation. |
| core/engine/src/object/builtins/jsset.rs | Thread GC collector into set object creation. |
| core/engine/src/object/builtins/jsmap.rs | Thread GC collector into map object creation/docs. |
| core/engine/src/object/builtins/jsfunction.rs | Add empty_intrinsic_function_in(mc, ...) helper. |
| core/engine/src/object/builtins/jsdate.rs | Thread GC collector into date object creation. |
| core/engine/src/object/builtins/jsdataview.rs | Thread GC collector into dataview object creation. |
| core/engine/src/object/builtins/jsarraybuffer.rs | Thread GC collector into arraybuffer object creation. |
| core/engine/src/native_function/mod.rs | Update closure allocation + to_js_function(realm, mc) signature. |
| core/engine/src/native_function/continuation.rs | Update coroutine allocation for oscars backend types. |
| core/engine/src/module/synthetic.rs | Thread MC into compiler; environment creation updated. |
| core/engine/src/module/source.rs | Thread MC into compiler and module env creation. |
| core/engine/src/module/namespace.rs | Thread GC collector into namespace object creation. |
| core/engine/src/module/mod.rs | Use context.alloc and update exports callbacks to pass GC collector. |
| core/engine/src/module/loader/mod.rs | Make module cache key traceable/finalizable. |
| core/engine/src/lib.rs | Add lint allowances for oscars backend copy/clone behavior. |
| core/engine/src/host_defined.rs | Relax Finalize bound to T: ?Sized. |
| core/engine/src/error/mod.rs | Handle oscars GcRef downcast/clone patterns + thread GC collector. |
| core/engine/src/environments/runtime/mod.rs | Thread MC through environment node allocations. |
| core/engine/src/context/mod.rs | Add GcContext to Context + expose alloc/gc_collector. |
| core/engine/src/context/hooks.rs | Hook for global object creation now receives MC. |
| core/engine/src/class.rs | Thread GC collector into class instance construction. |
| core/engine/src/bytecompiler/mod.rs | Add MC wrapper field; thread MC through compiler construction. |
| core/engine/src/bytecompiler/function.rs | Thread MC into function compilation allocations. |
| core/engine/src/bytecompiler/declarations.rs | Thread MC into nested function compilation. |
| core/engine/src/bytecompiler/class.rs | Thread MC into class compilation allocations. |
| core/engine/src/builtins/weak/weak_ref.rs | Thread MC into built-in initialization + weak upgrades. |
| core/engine/src/builtins/weak_set/mod.rs | Thread MC into built-in initialization; gate tests. |
| core/engine/src/builtins/uri/mod.rs | Add uninit_in(mc) initialization for intrinsic functions. |
| core/engine/src/builtins/typed_array/mod.rs | Thread MC into typed array intrinsic initialization. |
| core/engine/src/builtins/typed_array/builtin.rs | Thread MC into typed array intrinsic init + object creation. |
| core/engine/src/builtins/temporal/plain_month_day/mod.rs | Thread MC into options/object creation. |
| core/engine/src/builtins/temporal/now.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/temporal/mod.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/temporal/instant/mod.rs | Thread MC into options/object creation. |
| core/engine/src/builtins/symbol/mod.rs | Thread MC into symbol intrinsic init. |
| core/engine/src/builtins/string/string_iterator.rs | Thread MC into intrinsic init + iterator object creation. |
| core/engine/src/builtins/string/mod.rs | Thread MC into intrinsic init + string object creation. |
| core/engine/src/builtins/set/set_iterator.rs | Thread MC into intrinsic init + iterator object creation. |
| core/engine/src/builtins/set/ordered_set.rs | Minor rename in trace loop for clarity. |
| core/engine/src/builtins/set/mod.rs | Thread MC into intrinsic init + set object creation. |
| core/engine/src/builtins/regexp/regexp_string_iterator.rs | Thread MC into intrinsic init + iterator object creation. |
| core/engine/src/builtins/regexp/mod.rs | Thread MC into intrinsic init + regexp object creation. |
| core/engine/src/builtins/reflect/mod.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/proxy/mod.rs | Thread MC into intrinsic init + object creation/callbacks. |
| core/engine/src/builtins/options.rs | get_options_object now requires MC for object creation. |
| core/engine/src/builtins/object/mod.rs | Thread MC into intrinsic init + object creation; doc tweak. |
| core/engine/src/builtins/object/for_in_iterator.rs | Thread MC into iterator creation + next method function builder. |
| core/engine/src/builtins/number/mod.rs | Thread MC into intrinsic init + object creation. |
| core/engine/src/builtins/number/globals.rs | Thread MC into intrinsic init for global number fns. |
| core/engine/src/builtins/math/mod.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/map/mod.rs | Thread MC into intrinsic init + map object creation. |
| core/engine/src/builtins/map/map_iterator.rs | Thread MC into intrinsic init + iterator object creation. |
| core/engine/src/builtins/json/mod.rs | Thread MC into intrinsic init + parser/compiler allocations. |
| core/engine/src/builtins/iterable/wrap_for_valid_iterator.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/iterable/mod.rs | Add uninit_in(mc) for iterator prototypes; thread MC into records. |
| core/engine/src/builtins/iterable/iterator_helper/mod.rs | Thread MC into intrinsic init + helper object creation. |
| core/engine/src/builtins/iterable/iterator_constructor.rs | Thread MC into intrinsic init + iterator wrapper creation. |
| core/engine/src/builtins/iterable/async_from_sync_iterator.rs | Thread MC into intrinsic init + closure builders. |
| core/engine/src/builtins/intl/segmenter/segments.rs | Thread MC into intrinsic init + segments object creation. |
| core/engine/src/builtins/intl/segmenter/mod.rs | Thread MC into intrinsic init + options/object creation. |
| core/engine/src/builtins/intl/segmenter/iterator.rs | Thread MC into intrinsic init + iterator object creation. |
| core/engine/src/builtins/intl/plural_rules/mod.rs | Thread MC into intrinsic init + object creation. |
| core/engine/src/builtins/intl/options.rs | Thread MC into default options object creation. |
| core/engine/src/builtins/intl/number_format/mod.rs | Thread MC into intrinsic init + bound function creation. |
| core/engine/src/builtins/intl/mod.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/intl/locale/utils.rs | Adjust clone behavior for oscars GcRef downcasts. |
| core/engine/src/builtins/intl/list_format/mod.rs | Thread MC into options/object creation + assert style. |
| core/engine/src/builtins/intl/date_time_format/mod.rs | Thread MC into intrinsic init + object creation. |
| core/engine/src/builtins/intl/collator/mod.rs | Thread MC into intrinsic init + bound function creation. |
| core/engine/src/builtins/generator/mod.rs | Thread MC into intrinsic init; adjust trace match pattern. |
| core/engine/src/builtins/generator_function/mod.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/function/tests.rs | Update object creation + function builder for MC. |
| core/engine/src/builtins/function/mod.rs | Thread MC into intrinsic init, environments, and compilation. |
| core/engine/src/builtins/function/bound.rs | Thread MC into bound function object creation. |
| core/engine/src/builtins/function/arguments.rs | Thread MC into mapped/unmapped arguments creation. |
| core/engine/src/builtins/finalization_registry/tests.rs | Gate tests under non-oscars backend. |
| core/engine/src/builtins/finalization_registry/mod.rs | Thread MC into weak refs/ephemerons + registry object creation. |
| core/engine/src/builtins/eval/mod.rs | Thread MC into compiler allocations + env stack push. |
| core/engine/src/builtins/escape/mod.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/error/uri.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/error/type.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/error/syntax.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/error/reference.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/error/range.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/error/mod.rs | Thread MC into intrinsic init + error object creation. |
| core/engine/src/builtins/error/eval.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/error/aggregate.rs | Thread MC into intrinsic init + aggregate error creation. |
| core/engine/src/builtins/date/mod.rs | Thread MC into intrinsic init + date object creation. |
| core/engine/src/builtins/dataview/mod.rs | Thread MC into intrinsic init + dataview object creation. |
| core/engine/src/builtins/boolean/mod.rs | Thread MC into intrinsic init + boolean object creation. |
| core/engine/src/builtins/bigint/mod.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/atomics/mod.rs | Thread MC into intrinsic init + wait_async result creation. |
| core/engine/src/builtins/async_generator/mod.rs | Thread MC into intrinsic init + closure builders. |
| core/engine/src/builtins/async_generator_function/mod.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/async_function/mod.rs | Thread MC into intrinsic init. |
| core/engine/src/builtins/array/array_iterator.rs | Thread MC into intrinsic init + iterator object creation. |
| core/engine/src/builtins/array_buffer/shared.rs | Thread MC into intrinsic init + shared buffer object creation. |
| core/engine/src/builtins/array_buffer/mod.rs | Thread MC into intrinsic init + arraybuffer object creation. |
| core/engine/Cargo.toml | Enable oscars backend feature and adjust defaults. |
| core/engine/benches/full.rs | Update bench to pass MC into realm creation. |
| cli/src/debug/optimizer.rs | Thread GC collector into debug function builders. |
| cli/src/debug/limits.rs | Thread GC collector into debug function builders. |
| Cargo.toml | Add typeid and workspace patch for boa_string. |
| Cargo.lock | Lockfile updates for oscars + new deps. |
| .github/workflows/webassembly.yml | Add dev branch trigger. |
| .github/workflows/test262.yml | Add dev branch trigger; skip job on that base branch. |
| .github/workflows/rust.yml | Add dev branch trigger. |
| .github/workflows/pull_request.yml | Add dev branch trigger. |
Review details
- Files reviewed: 208/209 changed files
- Comments generated: 5
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Comment on lines
14
to
16
| [features] | ||
| default = ["float16", "xsum", "temporal"] | ||
| default = ["float16", "xsum", "temporal", "oscars_backend"] | ||
|
|
Comment on lines
+23
to
27
| arrayvec = ["dep:arrayvec", "oscars?/arrayvec"] | ||
| default = ["oscars_backend"] | ||
| boa_gc_backend = [] | ||
| oscars_backend = ["dep:oscars"] | ||
| oscars_backend = ["dep:oscars", "dep:typeid", "oscars?/std", "boa_string?/oscars_backend"] | ||
|
|
Comment on lines
1839
to
1842
| // 8. Let moduleContext be a new ECMAScript code execution context. | ||
| let mut envs = EnvironmentStack::new(); | ||
| envs.push_module(source.scope().clone()); | ||
| envs.push_module(source.scope().clone(), unsafe { context.gc_collector() }); | ||
| drop(status); |
Comment on lines
+344
to
348
| let cb = context.alloc(finished); | ||
|
|
||
| let mut envs = EnvironmentStack::new(); | ||
| envs.push_module(module_scope); | ||
| envs.push_module(module_scope, &unsafe { boa_gc::MutationContext::global() }); | ||
|
|
Comment on lines
+444
to
446
| /// `Object.create( context.gc_collector(), proto, [propertiesObject] )` | ||
| /// | ||
| /// Creates a new object from the provided prototype. |
…a-dev#4946) Implements the TC39 Joint Iteration proposal (boa-dev#4564). Adds Iterator.zip and Iterator.zipKeyed static methods with support for "shortest", "longest", and "strict" modes. Includes a new ZipIterator backing object with proper iterator protocol handling. --------- Co-authored-by: yush-1018 <yush1018@gmail.com> Co-authored-by: jedel1043 <jedel@startmail.com>
github-actions
Bot
added
C-Parser
nekevss
approved these changes
Sep 1, 2026
nekevss
left a comment
nekevss
left a comment
Member
There was a problem hiding this comment.
Broadly going to say LGTM and go ahead and merge this. This passes all lints that I'm aware of.
There may be some issues with the general integration, but I'd prefer to fix that in follow up as the diff on this has just become some monstrous.
github-actions
Bot
removed
the
Waiting On Review
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
follow up to #5479