Skip to content

chore(deps): bump pinocchio from 0.10.2 to 0.11.1#575

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/pinocchio-0.11.1
Open

chore(deps): bump pinocchio from 0.10.2 to 0.11.1#575
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/pinocchio-0.11.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps pinocchio from 0.10.2 to 0.11.1.

Release notes

Sourced from pinocchio's releases.

pinocchio@v0.11.1

What's new

pinocchio@v0.11.0

Important

This release includes two important breaking changes.

Mutable AccountView references

In previous versions, the Rust borrow checker could not provide much help when working with accounts because the API only required &self references, even though many methods mutated account data.

let [from, to, _system_program] = accounts else {
    return Err(ProgramError::NotEnoughAccountKeys);
};
// SAFETY: No other borrow of the account data exist.
let data = unsafe { to.borrow_unchecked_mut() };
CreateAccount {
from,
to,
lamports: 1_000_000_000,
space: 10,
owner: program_id,
}
.invoke()?;
// UB: The reference is not valid anymore since the CPI mutates
// the account data.
data[0] = 10;

The borrow checker can provide stronger guarantees if programs work with mutable AccountView references directly. To support this, the new version of solana-account-view now requires mutable AccountView references in APIs that mutate account state. For example, assign, close and try_borrow_mut now require &mut AccountView.

As a result, the signature of process_instruction must also change so that programs receive a mutable slice of AccountView values:

This change requires a modification on the signature of the process_instruction definition to specify that programs receive a mutable slice of AccountView values:

pub fn process_instruction(
  program_id: &Address,
  accounts: &mut [AccountView], // changed from `&[AccountView]`
  instruction_data: &[u8],
) -> ProgramResult {
</tr></table> 

... (truncated)

Commits
  • a2ba652 Publish pinocchio v0.11.1
  • db561ef sdk: Enable default features (#402)
  • 3a3a1a6 Publish pinocchio-associated-token-account v0.4.0
  • 8ba3a05 Publish pinocchio-memo v0.4.0
  • ef16a3a Publish pinocchio-system v0.6.0
  • 2a0c858 Publish pinocchio-token-2022 v0.3.0
  • cc937fe Publish pinocchio-token v0.6.0
  • eb22a63 Publish pinocchio v0.11.0
  • 9691848 programs/token: Add batch header data length helper (#398)
  • 5dea221 programs/token-2022: Add missing discriminator to ScaledUiAmount extension ...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels May 4, 2026
Bumps [pinocchio](https://github.com/anza-xyz/pinocchio) from 0.10.2 to 0.11.1.
- [Release notes](https://github.com/anza-xyz/pinocchio/releases)
- [Commits](https://github.com/anza-xyz/pinocchio/compare/pinocchio@v0.10.2...pinocchio@v0.11.1)

---
updated-dependencies:
- dependency-name: pinocchio
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/pinocchio-0.11.1 branch from 9266ca8 to 9821772 Compare May 6, 2026 03:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants