chore(deps): batch dependency updates (Aug 2026) - #432
Merged
Conversation
Bumps the actions-updates group with 5 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.83.3` | `2.85.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.4.0` | `4.5.0` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.6.0` | `0.6.1` | Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@9c091bb...3d3c42e) Updates `taiki-e/install-action` from 2.83.3 to 2.85.0 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@ed67fa3...7572810) Updates `docker/login-action` from 4.4.0 to 4.5.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@af1e73f...06fb636) Updates `github/codeql-action/upload-sarif` from 4.37.1 to 4.37.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@7188fc3...e4fba86) Updates `zizmorcore/zizmor-action` from 0.6.0 to 0.6.1 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@6599ee8...6fc4b00) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: taiki-e/install-action dependency-version: 2.85.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: docker/login-action dependency-version: 4.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the patch-updates group with 9 updates: | Package | From | To | | --- | --- | --- | | [pest](https://github.com/pest-parser/pest) | `2.8.7` | `2.8.8` | | [pest_derive](https://github.com/pest-parser/pest) | `2.8.7` | `2.8.8` | | [serde_json](https://github.com/serde-rs/json) | `1.0.150` | `1.0.151` | | [jsonpath-rust](https://github.com/besok/jsonpath-rust) | `1.0.5` | `1.0.6` | | [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.18` | `0.1.19` | | [time](https://github.com/time-rs/time) | `0.3.53` | `0.3.54` | | [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.48.1` | `0.48.5` | | [clap](https://github.com/clap-rs/clap) | `4.6.2` | `4.6.4` | | [rustls-pki-types](https://github.com/rustls/pki-types) | `1.15.0` | `1.15.1` | Updates `pest` from 2.8.7 to 2.8.8 - [Release notes](https://github.com/pest-parser/pest/releases) - [Commits](pest-parser/pest@v2.8.7...v2.8.8) Updates `pest_derive` from 2.8.7 to 2.8.8 - [Release notes](https://github.com/pest-parser/pest/releases) - [Commits](pest-parser/pest@v2.8.7...v2.8.8) Updates `serde_json` from 1.0.150 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.150...v1.0.151) Updates `jsonpath-rust` from 1.0.5 to 1.0.6 - [Changelog](https://github.com/besok/jsonpath-rust/blob/main/CHANGELOG.md) - [Commits](besok/jsonpath-rust@v1.0.5...v1.0.6) Updates `tokio-stream` from 0.1.18 to 0.1.19 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-stream-0.1.18...tokio-stream-0.1.19) Updates `time` from 0.3.53 to 0.3.54 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.53...v0.3.54) Updates `jsonschema` from 0.48.1 to 0.48.5 - [Release notes](https://github.com/Stranger6667/jsonschema/releases) - [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md) - [Commits](Stranger6667/jsonschema@ruby-v0.48.1...ruby-v0.48.5) Updates `clap` from 4.6.2 to 4.6.4 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.2...clap_complete-v4.6.4) Updates `rustls-pki-types` from 1.15.0 to 1.15.1 - [Release notes](https://github.com/rustls/pki-types/releases) - [Commits](rustls/pki-types@v/1.15.0...v/1.15.1) --- updated-dependencies: - dependency-name: pest dependency-version: 2.8.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: pest_derive dependency-version: 2.8.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: jsonpath-rust dependency-version: 1.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: tokio-stream dependency-version: 0.1.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: time dependency-version: 0.3.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: jsonschema dependency-version: 0.48.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: clap dependency-version: 4.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: rustls-pki-types dependency-version: 1.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [base64](https://github.com/marshallpierce/rust-base64) from 0.22.1 to 0.23.0. - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.0) --- updated-dependencies: - dependency-name: base64 dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [toml](https://github.com/toml-rs/toml) from 0.8.23 to 1.1.3+spec-1.1.0. - [Commits](toml-rs/toml@toml-v0.8.23...toml-v1.1.3) --- updated-dependencies: - dependency-name: toml dependency-version: 1.1.3+spec-1.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [tikv-jemallocator](https://github.com/tikv/jemallocator) from 0.6.1 to 0.7.0. - [Release notes](https://github.com/tikv/jemallocator/releases) - [Changelog](https://github.com/tikv/jemallocator/blob/main/CHANGELOG.md) - [Commits](tikv/jemallocator@0.6.1...0.7.0) --- updated-dependencies: - dependency-name: tikv-jemallocator dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
This reverts commit eb4f5bb.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
base640.23.0), and chore(deps): bump toml from 0.8.23 to 1.1.3+spec-1.1.0 #424 (toml1.1.3) into one merge, withci/wasm-smoke/Cargo.lockandfuzz/Cargo.locksynced so the wasm smoke--lockedbuild stays green after thebase64bump.rusqlite0.40.1 (chore(deps): bump rusqlite from 0.39.0 to 0.40.1 #234): still requires Rust 1.89 while the workspace MSRV is 1.88.tikv-jemallocator0.7.0 (chore(deps): bump tikv-jemallocator from 0.6.1 to 0.7.0 #425) after a musl artifact A/B. jemalloc moves from 5.3.0 to 5.3.1; on the pinnedraw_windows --logsource-routinglane viascripts/perf/image-compare.sh(Docker Desktop arm64, daemon cpus 0-5, load cpus 6-11, batch 512), medians were about 521k→500k events/s (0.96x, n=3×20s) and 532k→496k (0.93x, n=5×30s). The 0.7 image still scales (RAYON 1→6 ≈ 124k→497k, 4.00x), so the allocator still beats mallocng contention, but it is slower than 0.6.1 on this host. Leave chore(deps): bump tikv-jemallocator from 0.6.1 to 0.7.0 #425 open for a dedicatedrsigma-perf-*recheck before merging.Closes #421, closes #422, closes #423, closes #424.
Test plan
cargo fmt --all -- --checkcargo clippy --workspace --all-targets --all-features -- -D warningscargo doc --workspace --all-features --locked --no-depscargo build --release --target wasm32-unknown-unknown --manifest-path ci/wasm-smoke/Cargo.toml --lockedzizmor --pedantic .github/workflowsscripts/perf/image-compare.sh(held back on regression)cargo test --workspace --all-features: twocli_daemon_natscases failed once under parallel Docker load (daemon_nats_forward_replay_restores_state,daemon_nats_state_db_migration_stores_position); unrelated to these deps and already green on the source Dependabot PRs. Re-check in CI.