chore(deps): bump sha2 to 0.11 and notify to 8.2#85
Open
patrick-mns wants to merge 4 commits into
Open
Conversation
Bumps [notify](https://github.com/notify-rs/notify) from 7.0.0 to 8.2.0. - [Release notes](https://github.com/notify-rs/notify/releases) - [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.0/CHANGELOG.md) - [Commits](notify-rs/notify@notify-7.0.0...notify-8.2.0) --- updated-dependencies: - dependency-name: notify dependency-version: 8.2.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.11.0. - [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0) --- updated-dependencies: - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…to chore/deps-sha2-notify
…nto chore/deps-sha2-notify
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Brings in the two lowest-surface breaking Dependabot bumps, combined:
Both are major bumps, but neither required a code change — the crate compiles clean as is.
Their usage is narrow, which is why they were picked first:
sha2is used only insrc/backend/updater.rs(Digest/Sha256for checksum verification)notifyis used only insrc/backend/skill_watcher.rs(RecommendedWatcher,EventKind)Note:
sha20.10.9 still appears inCargo.lockalongside 0.11.0 — it is pulled transitively byoauth2 v5.0.0andtauri-codegen v2.6.3. Our own code is on 0.11. Nothing to do until those upstreams move.Verification
cargo fmt --check— passcargo check— pass, no warningscargo test— 160 passed, 3 ignored, 1 failedThe failing test is
backend::tools::terminal::tests::run_sandboxes_by_default_and_hints_on_denial, which fails identically before and after these bumps. It reads the developer's global config (~/.micelio/sandbox_terminal); when that toggle isfalse, thesandboxed: truemarker is never emitted and the assert fails. It is#[cfg(target_os = "macos")], so CI (Linux) never runs it.Notes
Branched off
devrather than committed to it directly, to keep #84 matching the 9 safe bumps its description covers.🤖 Generated with Claude Code