Skip to content

chore(deps): refresh compatible crate versions - #1

Merged
mpiton merged 1 commit into
mainfrom
chore/dependency-upgrades
Sep 3, 2026
Merged

mpiton merged 1 commit into
mainfrom
chore/dependency-upgrades

Conversation

@mpiton

@mpiton mpiton commented Sep 3, 2026 •

Copy link
Copy Markdown
Owner

Summary

Refresh compatible Rust dependencies: serde 1.0.229, serde_json 1.0.151, thiserror 2.0.20, regex 1.13.1, extism-pdk 1.4.1, rstest 0.26.1, plus a Cargo.lock update.

Why

Keep crawler/hoster plugins on current patch/minor crates without crossing crypto or Extism major lines.

Testing

  • cargo test --lib (host target where .cargo/config.toml pins wasm32-wasip1)
  • cargo clippy --lib --bins -- -D warnings

Summary by cubic

Refreshes compatible Rust dependencies for crawler and hoster plugins to stay current without crossing major version lines.

extism-pdk moves to 1.4.1, serde to 1.0.229, serde_json to 1.0.151, and thiserror to 2.0.20. Cargo.lock also picks up transitive patch and minor updates, including splitting base64 into 0.22.1 and 0.23.1.

Validation

  • cargo test --lib passes on the host target.
  • cargo clippy --lib --bins -- -D warnings passes.

Written for commit cd609e4. Summary will update on new commits.

Review in cubic

Summary by CodeRabbit

  • Chores
    • Updated several underlying library dependencies to newer compatible versions.

Bump serde, serde_json, thiserror, regex, extism-pdk, and rstest to the
latest compatible releases and refresh Cargo.lock.
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedthiserror@​2.0.19 ⏵ 2.0.208010093100100

View full report

@coderabbitai

coderabbitai Bot commented Sep 3, 2026 •

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Essentials

Run ID: df644e37-4e34-45e6-95bf-69dc0cc1d5d8

📥 Commits

Reviewing files that changed from the base of the PR and between 7c02830 and cd609e4.

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • Cargo.toml

Included review availability: 0 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 2 reviews per hour.


📝 Walkthrough

Walkthrough

The project manifest updates the required versions of extism-pdk, serde, serde_json, and thiserror.

Changes

Dependency Updates

Layer / File(s) Summary
Update dependency requirements
Cargo.toml
The manifest updates four dependency versions: extism-pdk to 1.4.1, serde to 1.0.229, serde_json to 1.0.151, and thiserror to 2.0.20.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to cd609

This updates compatible Rust dependency releases and refreshes the lockfile. No current merge-blocking risk is identified.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the dependency version updates in the pull request.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)


Comment @coderabbitai help to get the list of available commands.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Re-trigger cubic

@mpiton
mpiton merged commit db70fca into main Sep 3, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant