Skip to content

deps(deps): bump soroban-sdk from 25.3.1 to 26.1.0 in /smart-contract in the rust-dependencies group#371

Closed
dependabot[bot] wants to merge 451 commits into
mainfrom
dependabot/cargo/smart-contract/rust-dependencies-4eab7366fe
Closed

deps(deps): bump soroban-sdk from 25.3.1 to 26.1.0 in /smart-contract in the rust-dependencies group#371
dependabot[bot] wants to merge 451 commits into
mainfrom
dependabot/cargo/smart-contract/rust-dependencies-4eab7366fe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group in /smart-contract with 1 update: soroban-sdk.

Updates soroban-sdk from 25.3.1 to 26.1.0

Release notes

Sourced from soroban-sdk's releases.

26.1.0

What's Changed

Deprecations

  • Deprecate and ignore export for spec generation in spec shaking v2 — When experimental_spec_shaking_v2 is enabled, the export argument on contracttype, contracterror, and contractevent is ignored. A deprecation warning is emitted if used. (stellar/rs-soroban-sdk#1876)

Improvements

  • Fix cfg handling for contracttrait and contractimpl blocks#[contractimpl] methods with cfg attributes now correctly gate their generated args helpers and testutils registration. cfg-gated override methods in #[contractimpl(contracttrait)] blocks are also properly supported. Both cfg and cfg_attr result in compiler errors when used on #[contracttrait] default functions. (stellar/rs-soroban-sdk#1871)

All Changes

Full Changelog: stellar/rs-soroban-sdk@v26.0.1...v26.1.0

26.0.1

What's Changed

Improvements

All Changes

New Contributors

Full Changelog: stellar/rs-soroban-sdk@v26.0.0...v26.0.1

v26.0.0

What's Changed

Breaking Changes

  • Renamed assert_in_contract to debug_assert_in_contract — The assert_in_contract macro has been renamed to debug_assert_in_contract and hidden from public documentation, as it is intended for internal use only. The old name has been deprecated. (#1806)

  • Removed deprecated token event format from soroban-token-sdk — The deprecated TokenUtils::events() helper, the legacy event module, and the Events wrapper have been removed. These were originally deprecated in v23. (#1822)

  • Removed #[macro_export] from internal impl_bytesn_repr macro — This macro was only intended as an internal helper. Its public export has been removed. (#1829)

Deprecations

... (truncated)

Commits
  • 175aa41 chore: for CI cargo update use precise version
  • 67c90dc chore: run cargo update for patched crates in ci
  • d3978e6 chore: make and make expand-tests
  • 1eb4551 Fix failing OpenZeppelin CI jobs (#1884)
  • 18f288e Fix cfg handling for contracttrait and contractimpl blocks (#1871)
  • be46eb9 Deprecate export for spec generation in spec shaking v2 (#1876)
  • 14fd094 Update fuzz Cargo.lock for 26.1.0
  • 892fb2b Bump version to 26.1.0
  • f52b6aa Bump version to 26.0.1 (#1877)
  • 0dd79fe Zero-copy improvement for U256 and I256 (#1867)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Abidoyesimze and others added 30 commits March 25, 2026 16:41
Finalize contract test coverage and timeline integration; pass CI
feat(frontend): input sanitization, a11y, error handling, event validation
Fix #129, #120, #137, #123, #21AH: implemented frontend and backend i…
…ad-more

Add paginated timeline loading and fix frontend CI deps
EbukaMoses and others added 23 commits May 2, 2026 01:41
…warnings

- Switch from @tailwindcss/postcss to standard tailwindcss + autoprefixer
- Fix all React hooks ESLint errors by using setTimeout to avoid synchronous setState
- Remove unused variables and fix accessibility warnings
- Update package-lock.json with correct dependencies
…tion

- Revert to @tailwindcss/postcss plugin to fix PostCSS configuration
- Add @rollup/rollup-linux-x64-gnu to overrides for Linux CI
- Fix vitest config to exclude both e2e/ and tests/e2e/ directories
- Unit tests now pass with 14 test files and 94 tests
- Add @rollup/rollup-linux-x64-gnu to overrides for Rollup native module
- Add lightningcss-linux-x64-gnu to overrides for TailwindCSS Lightning CSS
- Revert to standard TailwindCSS + autoprefixer setup
- Unit tests now pass with 14 test files and 94 tests
- Add @rollup/rollup-linux-x64-gnu as npm alias in overrides
- Add lightningcss-linux-x64-gnu as npm alias in overrides
- Revert to @tailwindcss/postcss plugin for better CI compatibility
- Unit tests now pass with 14 test files and 94 tests
- Add step to install @rollup/rollup-linux-x64-gnu in CI workflow
- Add step to install lightningcss-linux-x64-gnu in CI workflow
- Remove npm aliases from package.json overrides
- This approach directly installs missing native modules in CI environment
- Unit tests pass with 14 test files and 94 tests
- Switch back to standard tailwindcss + autoprefixer PostCSS configuration
- Update CI workflow to install tailwindcss-linux-x64-gnu instead of lightningcss
- This approach avoids Lightning CSS native module issues in E2E tests
- Unit tests pass with 14 test files and 94 tests
- Switch from npm ci to npm install --include=optional in CI workflow
- This approach should install optional dependencies like @rollup/rollup-linux-x64-gnu
- Remove separate native module installation steps
- Test if this resolves the Rollup native module issue
- Fix tailwindcss-linux-x64-gnu to lightningcss-linux-x64-gnu in CI workflow
- The correct package name for TailwindCSS native modules is lightningcss-linux-x64-gnu
- This package exists and will be available in the Linux CI environment
- Rollup Linux package installation is working correctly
- Switch back to @tailwindcss/postcss plugin as required by the error message
- Update PostCSS configuration to use @tailwindcss/postcss instead of standard tailwindcss
- Update package.json to use @tailwindcss/postcss dependency
- CI workflow remains the same since we still need Lightning CSS Linux package
- Unit tests pass with 14 test files and 94 tests
Smart Contract Security: Emergency Stop Mechanism
Bumps the rust-dependencies group in /smart-contract with 1 update: [soroban-sdk](https://github.com/stellar/rs-soroban-sdk).


Updates `soroban-sdk` from 25.3.1 to 26.1.0
- [Release notes](https://github.com/stellar/rs-soroban-sdk/releases)
- [Commits](stellar/rs-soroban-sdk@v25.3.1...v26.1.0)

---
updated-dependencies:
- dependency-name: soroban-sdk
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: your-username. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Jun 15, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
chain-logistics Ready Ready Preview, Comment Jun 15, 2026 9:21am

@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/cargo/smart-contract/rust-dependencies-4eab7366fe branch June 15, 2026 11:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.