Repository navigation
Combined Dependabot PRs 2026-07-02 - #334
Closed
code-search-bot wants to merge 12 commits into
Closed
code-search-bot wants to merge 12 commits into
code-search-bot wants to merge 12 commits into
Conversation
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [syn](https://github.com/dtolnay/syn) from 2.0.117 to 2.0.118. - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](dtolnay/syn@2.0.117...2.0.118) --- updated-dependencies: - dependency-name: syn dependency-version: 2.0.118 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [prost-build](https://github.com/tokio-rs/prost) from 0.14.3 to 0.14.4. - [Release notes](https://github.com/tokio-rs/prost/releases) - [Changelog](https://github.com/tokio-rs/prost/blob/master/CHANGELOG.md) - [Commits](tokio-rs/prost@v0.14.3...v0.14.4) --- updated-dependencies: - dependency-name: prost-build dependency-version: 0.14.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [quote](https://github.com/dtolnay/quote) from 1.0.45 to 1.0.46. - [Release notes](https://github.com/dtolnay/quote/releases) - [Commits](dtolnay/quote@1.0.45...1.0.46) --- updated-dependencies: - dependency-name: quote dependency-version: 1.0.46 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [http](https://github.com/hyperium/http) from 1.4.1 to 1.4.2. - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.4.1...v1.4.2) --- updated-dependencies: - dependency-name: http dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.102 to 1.0.103. - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.103) --- updated-dependencies: - dependency-name: anyhow dependency-version: 1.0.103 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
…ndabot-20260702-080048
Contributor
There was a problem hiding this comment.
Pull request overview
This PR consolidates multiple Dependabot updates, bumping several Rust crate dependencies in Cargo.lock and updating GitHub Actions workflows to use actions/checkout@v7.
Changes:
- Update GitHub Actions workflows to
actions/checkout@v7. - Update Rust dependencies in
Cargo.lock, includinganyhow,http,prost*,quote, andsyn(with associated lockfile graph changes).
Reviewed changes
Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| Cargo.lock | Updates resolved dependency versions/checksums and prunes/adjusts transitive dependencies accordingly. |
| .github/workflows/publish-release.yml | Bumps actions/checkout to v7 for release publishing workflow. |
| .github/workflows/create-release-pr.yml | Bumps actions/checkout to v7 for release PR creation workflow. |
| .github/workflows/ci.yml | Bumps actions/checkout to v7 for CI test and lint jobs. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR combines 6 Dependabot PRs.
ℹ️ Details from merged PRs:
Details from
Bump actions/checkout from 6 to 7Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
9c091bbupdate error wording (#2467)1044a6dgetting ready for checkout v7 release (#2464)f028218Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)d914b26upgrade module to esm and update dependencies (#2463)537c7efBump@actions/coreand@actions/tool-cacheand Remove uuid (#2459)130a169Bump js-yaml from 4.1.0 to 4.2.0 (#2461)7d09575Bump flatted from 3.3.1 to 3.4.2 (#2460)0f9f3aaBump actions/publish-immutable-action (#2458)f9e715ablock checking out fork pr for pull_request_target and workflow_run (#2454)Details from
Bump syn from 2.0.117 to 2.0.118Release notes
Sourced from syn's releases.
Commits
f033ef1Release 2.0.11845f65f7Wrap long lint attributesb3f9bf8Mirror PR 1975 from readme to crate-level rustdoc97dc117Wrap PR 1975 to 80 columns0085b7aLintrepr_transparent_non_zst_fieldshas been removed9fc1c9dUpdate test suite to nightly-2026-06-12504bcc7Update test suite to nightly-2026-06-09353d20bUpdate test suite to nightly-2026-06-06f257a16Update test suite to nightly-2026-05-25b706e6eUpdate test suite to nightly-2026-05-13Details from
Bump prost-build from 0.14.3 to 0.14.4Changelog
Sourced from prost-build's changelog.
Commits
13646cdchore: Release version 0.14.4 (#1437)dad79d5fix(prost-derive): return error for invalid enumeration default identifiers (...b0b6c93ci: Updatecargo clippyto 1.91 (#1435)32cfffbstyle: remove explicit.into_iter()(#1434)2710efdci: Updatecargo clippyto 1.89 (#1433)18ea4e4style: use variables directly informat!()(#1432)2821bd1build(deps): bump actions/upload-artifact from 6 to 7 (#1409)3ce3b39test(groups): Actually constructNestedGroup(#1363)8776405docs: Update changelog for version 0.14.3 (#1431)33d3ef1build: Grab binary path from cargo (#1429)Details from
Bump quote from 1.0.45 to 1.0.46Release notes
Sourced from quote's releases.
Commits
bc4caf2Release 1.0.46dc0e304Format with rustfmt712114cDrop arrow from syntax of quote_spanned_with_expanded_spanf93ab8aEliminate quote_spanned_with_expanded_span_as_expr macro1ff3951Eliminate __quote_spanned macro64e913aUnify quote_spanned definitions2978e8bWrap comment to 80 columns7f311a0Fix PR 329 fat arrow spacing313a8a2Remove unneeded get_span from PR 3290b33821Merge pull request #329 from Noratrieb/avoid-repeat-expandDetails from
Bump http from 1.4.1 to 1.4.2Changelog
Sourced from http's changelog.
Commits
82db5b8v1.4.2a9cdbf8fix(uri): reject DEL character (#842)df75ca3fix(uri): allow STAR paths with scheme/auth (#843)ec3f8cefeat(method): impl PartialOrd + Ord (#840)Details from
Bump anyhow from 1.0.102 to 1.0.103Release notes
Sourced from anyhow's releases.
Commits
5bdb0e2Release 1.0.103e621bd3Merge pull request #452 from dtolnay/downcast6e8c000Eliminate pointer->reference->pointer during downcast67c4abdAdd regression test for issue 451917a169Update actions/upload-artifact@v6 -> v7d9dc3faUpdate actions/checkout@v6 -> v7841522bRaise minimum tested compiler to rust 1.85