Repository navigation
chore: merge main into next - #1283
Merged
Merged
Conversation
Addresses GHSA-2mjx-qc3c-rqvc (RUSTSEC-2026-0285) in all four Cargo.lock files. rustls 0.23.45 requires aws-lc-rs ^1.18 and rustls-webpki ^0.103.14, so those move too where needed.
Version parity. Both EQL workspace cipherstash-client pins move from =0.42.0 to =0.42.3, the version protect-ffi ships, and scripts/__tests__/cipherstash-client-parity.test.mjs fails whenever the two lockfiles resolve different versions. It runs in test:scripts on every PR, so a protect-ffi-only bump is caught even though test-eql.yml does not start for it. The bump changes no pinned selector or op term. The jsonb_entry matrix queries what customers write. ScalarType's column_expr is now async and resolved per test from the pool, so JsonbEntryInteger's statements embed the literal payload -> '<sel>'::text instead of a subquery, and a broken fixture fails with pick_one's candidate list. field_op_selector_subquery, its duplicate of the candidate query, and ScalarDomainSpec.column_expr are gone. The $.hello rule matches its documentation: the two op lengths must be one character apart (16 hex: op length is 16 * bytes + 20) and split 9/1 across rows, so a fixture edit cannot make it pick another leaf. selector_literal_guard catches a selector after a string escape (\n, \x, ...) or a 0x prefix, and in any case, and its threshold is pinned by a test. Its docs now say it scans .rs files only. Also: a redundant hello-selector test is removed, and AGENTS.md describes the new state. The *_expanded.rs macro snapshots are not regenerated here: that needs mise run test:matrix:expand on a pinned nightly. Only the non-blocking nightly macro-expand-eql.yml checks them.
…ectors The matrix macros now resolve `ScalarType::column_expr(&pool)` instead of reading `spec.column_expr`, so the three `*_expanded.rs` snapshots were stale and the nightly macro-expand drift check would fail. Regenerated with `mise run test:matrix:expand`. The selector literal guard skipped `0x<32 hex>u128`: the integer suffix read as a word byte after the run. A Rust integer suffix after a `0x` run is now a boundary, with test cases for `u128`, `_u128` and `i128`.
- Parity: compare cipherstash-config as well as cipherstash-client, the two crates that compute SteVec selectors, and say exactly that in AGENTS.md and the pin's comments. Primitive deps such as blake3 are not compared. - Matrix: the correctness, cross-shape and index arms pass the column_expr they already resolved to the new fetch_fixture_payload_at, so a jsonb_entry test no longer runs the selector scan twice. Expand snapshots regenerated. - The dead-pool column_expr unit test asserts PoolTimedOut rather than any error, with a 100ms acquire timeout (0.11s, was 2.03s). - Comments: HELLO_OP_RULE now says which clauses exclude $.accented, and the literal guard documents its actual lexical boundary rule.
The entry matrix arms read through ScalarType::column_expr, and nothing at the type level stops a future fixture-reading arm writing bare `payload` instead. What catches that today is the eql_v3_json_entry domain CHECK: a whole document has no `s` or `c` at its root, so the cast raises a check violation rather than comparing documents. jsonb_entry_integer_document_is_not_an_entry pins that net (SQLSTATE 23514), with the resolved entry read as its control.
- jsonb_entry_integer_fixture_shape checks NULL, validity, op and distinct op through JsonbEntryInteger::column_expr, the expression the matrix queries, instead of its own literal lookup. - Drop the uniqueness test's assertion that compared column_expr with the helper that builds it. - Document the selector guard's integer-suffix boundary (0x…u128) and that it does not catch a selector split into pieces, such as a [u8; 16] array.
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.48.0 to 0.49.0. - [Commits](golang/sys@v0.48.0...v0.49.0) --- updated-dependencies: - dependency-name: golang.org/x/sys dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…th 21 updates Bumps the cargo-minor-patch group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.3` | `1.8.7` | | [lazy_static](https://github.com/rust-lang-nursery/lazy-static.rs) | `1.5.0` | `1.5.1` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` | | [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` | | [tracing-subscriber](https://github.com/tokio-rs/tracing) | `0.3.22` | `0.3.23` | | [uuid](https://github.com/uuid-rs/uuid) | `1.20.0` | `1.27.0` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.1` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.1` | | [open](https://github.com/Byron/open-rs) | `5.3.3` | `5.4.4` | | [axum](https://github.com/tokio-rs/axum) | `0.8.8` | `0.8.9` | | [mocktail](https://github.com/IBM/mocktail) | `0.3.0` | `0.3.2` | | [proptest](https://github.com/proptest-rs/proptest) | `1.10.0` | `1.11.0` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.24.0` | `3.27.0` | | [trybuild](https://github.com/dtolnay/trybuild) | `1.0.115` | `1.0.122` | | [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.106` | `1.0.107` | | [quote](https://github.com/dtolnay/quote) | `1.0.44` | `1.0.47` | | [syn](https://github.com/dtolnay/syn) | `3.0.3` | `3.0.6` | | [napi-build](https://github.com/napi-rs/napi-rs) | `2.3.1` | `2.6.0` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.1` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.24.0` | `3.27.0` | | [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.20.0` | `1.28.0` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.1` | | [open](https://github.com/Byron/open-rs) | `5.3.3` | `5.4.4` | | [proptest](https://github.com/proptest-rs/proptest) | `1.10.0` | `1.11.0` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` | | [uuid](https://github.com/uuid-rs/uuid) | `1.20.0` | `1.28.0` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.1` | | [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.3` | `1.8.7` | | [lazy_static](https://github.com/rust-lang-nursery/lazy-static.rs) | `1.5.0` | `1.5.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` | | [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.1` | | [open](https://github.com/Byron/open-rs) | `5.3.3` | `5.4.4` | | [proptest](https://github.com/proptest-rs/proptest) | `1.10.0` | `1.11.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.20.0` | `1.28.0` | | [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.3` | `1.8.7` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` | | [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.1` | Bumps the cargo-minor-patch group with 3 updates in the /languages/golang/auth/guest directory: [tokio](https://github.com/tokio-rs/tokio), [uuid](https://github.com/uuid-rs/uuid) and [zeroize](https://github.com/RustCrypto/utils). Bumps the cargo-minor-patch group with 4 updates in the /languages/golang/encrypt/guest directory: [tokio](https://github.com/tokio-rs/tokio), [uuid](https://github.com/uuid-rs/uuid), [zeroize](https://github.com/RustCrypto/utils) and [open](https://github.com/Byron/open-rs). Bumps the cargo-minor-patch group with 7 updates in the /packages/stack-encrypt/fuzz directory: | Package | From | To | | --- | --- | --- | | [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.3` | `1.8.7` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` | | [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.20.0` | `1.27.0` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.1` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.154` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.1` | | [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.20.0` | `1.27.0` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.154` | | [uuid](https://github.com/uuid-rs/uuid) | `1.20.0` | `1.27.0` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.1` | | [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.3` | `1.8.7` | | [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` | | [arbitrary](https://github.com/rust-fuzz/arbitrary) | `1.4.2` | `1.5.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.20.0` | `1.27.0` | | [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.3` | `1.8.7` | | [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` | | [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.154` | | [tokio](https://github.com/tokio-rs/tokio) | `1.49.0` | `1.50.0` | | [zeroize](https://github.com/RustCrypto/utils) | `1.8.2` | `1.9.1` | Updates `blake3` from 1.8.3 to 1.8.7 - [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases) - [Commits](BLAKE3-team/BLAKE3@1.8.3...1.8.7) Updates `lazy_static` from 1.5.0 to 1.5.1 - [Release notes](https://github.com/rust-lang-nursery/lazy-static.rs/releases) - [Commits](https://github.com/rust-lang-nursery/lazy-static.rs/commits) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.149 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `tokio` from 1.49.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `tracing-subscriber` from 0.3.22 to 0.3.23 - [Release notes](https://github.com/tokio-rs/tracing/releases) - [Commits](tokio-rs/tracing@tracing-subscriber-0.3.22...tracing-subscriber-0.3.23) Updates `uuid` from 1.20.0 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `zeroize` from 1.8.2 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `bytes` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.1...v1.12.1) Updates `open` from 5.3.3 to 5.4.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.3.3...v5.4.4) Updates `axum` from 0.8.8 to 0.8.9 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.8.8...axum-v0.8.9) Updates `mocktail` from 0.3.0 to 0.3.2 - [Release notes](https://github.com/IBM/mocktail/releases) - [Commits](IBM/mocktail@0.3.0...0.3.2) Updates `proptest` from 1.10.0 to 1.11.0 - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md) - [Commits](proptest-rs/proptest@v1.10.0...v1.11.0) Updates `tempfile` from 3.24.0 to 3.27.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.24.0...v3.27.0) Updates `trybuild` from 1.0.115 to 1.0.122 - [Release notes](https://github.com/dtolnay/trybuild/releases) - [Commits](dtolnay/trybuild@1.0.115...1.0.122) Updates `proc-macro2` from 1.0.106 to 1.0.107 - [Release notes](https://github.com/dtolnay/proc-macro2/releases) - [Commits](dtolnay/proc-macro2@1.0.106...1.0.107) Updates `quote` from 1.0.44 to 1.0.47 - [Release notes](https://github.com/dtolnay/quote/releases) - [Commits](dtolnay/quote@1.0.44...1.0.47) Updates `syn` from 3.0.3 to 3.0.6 - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](dtolnay/syn@3.0.3...3.0.6) Updates `napi-build` from 2.3.1 to 2.6.0 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-build-v2.3.1...napi-build-v2.6.0) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.149 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `zeroize` from 1.8.2 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `tempfile` from 3.24.0 to 3.27.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.24.0...v3.27.0) Updates `tokio` from 1.49.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `uuid` from 1.20.0 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `bytes` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.1...v1.12.1) Updates `open` from 5.3.3 to 5.4.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.3.3...v5.4.4) Updates `proptest` from 1.10.0 to 1.11.0 - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md) - [Commits](proptest-rs/proptest@v1.10.0...v1.11.0) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.149 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `uuid` from 1.20.0 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `zeroize` from 1.8.2 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `blake3` from 1.8.3 to 1.8.7 - [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases) - [Commits](BLAKE3-team/BLAKE3@1.8.3...1.8.7) Updates `lazy_static` from 1.5.0 to 1.5.1 - [Release notes](https://github.com/rust-lang-nursery/lazy-static.rs/releases) - [Commits](https://github.com/rust-lang-nursery/lazy-static.rs/commits) Updates `tokio` from 1.49.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `bytes` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/tokio-rs/bytes/releases) - [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md) - [Commits](tokio-rs/bytes@v1.11.1...v1.12.1) Updates `open` from 5.3.3 to 5.4.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.3.3...v5.4.4) Updates `proptest` from 1.10.0 to 1.11.0 - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/main/CHANGELOG.md) - [Commits](proptest-rs/proptest@v1.10.0...v1.11.0) Updates `uuid` from 1.20.0 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `blake3` from 1.8.3 to 1.8.7 - [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases) - [Commits](BLAKE3-team/BLAKE3@1.8.3...1.8.7) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.149 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `tokio` from 1.49.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `zeroize` from 1.8.2 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `uuid` from 1.26.1 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `zeroize` from 1.9.0 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `zeroize` from 1.9.0 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `uuid` from 1.26.1 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `uuid` from 1.26.1 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `zeroize` from 1.9.0 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `uuid` from 1.26.1 to 1.28.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `zeroize` from 1.9.0 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `uuid` from 1.26.0 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `zeroize` from 1.9.0 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `open` from 5.4.2 to 5.4.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.3.3...v5.4.4) Updates `zeroize` from 1.9.0 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `uuid` from 1.26.0 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `open` from 5.4.2 to 5.4.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.3.3...v5.4.4) Updates `uuid` from 1.26.0 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `zeroize` from 1.9.0 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `open` from 5.4.2 to 5.4.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.3.3...v5.4.4) Updates `uuid` from 1.26.0 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `tokio` from 1.53.1 to 1.53.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `zeroize` from 1.9.0 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `blake3` from 1.8.3 to 1.8.7 - [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases) - [Commits](BLAKE3-team/BLAKE3@1.8.3...1.8.7) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.149 to 1.0.151 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `tokio` from 1.49.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `uuid` from 1.20.0 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `zeroize` from 1.8.2 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.149 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `zeroize` from 1.8.2 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `tokio` from 1.49.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `uuid` from 1.20.0 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.149 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `uuid` from 1.20.0 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `zeroize` from 1.8.2 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) Updates `blake3` from 1.8.3 to 1.8.7 - [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases) - [Commits](BLAKE3-team/BLAKE3@1.8.3...1.8.7) Updates `tokio` from 1.49.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `arbitrary` from 1.4.2 to 1.5.0 - [Changelog](https://github.com/rust-fuzz/arbitrary/blob/main/CHANGELOG.md) - [Commits](rust-fuzz/arbitrary@v1.4.2...v1.5.0) Updates `uuid` from 1.20.0 to 1.27.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.20.0...v1.27.0) Updates `blake3` from 1.8.3 to 1.8.7 - [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases) - [Commits](BLAKE3-team/BLAKE3@1.8.3...1.8.7) Updates `serde` from 1.0.228 to 1.0.229 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.228...v1.0.229) Updates `serde_json` from 1.0.149 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.151) Updates `tokio` from 1.49.0 to 1.50.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.49.0...tokio-1.50.0) Updates `zeroize` from 1.8.2 to 1.9.1 - [Commits](RustCrypto/utils@zeroize-v1.8.2...zeroize-v1.9.1) --- updated-dependencies: - dependency-name: blake3 dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: lazy_static dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tracing-subscriber dependency-version: 0.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: bytes dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: open dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: axum dependency-version: 0.8.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: mocktail dependency-version: 0.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: proptest dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tempfile dependency-version: 3.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: trybuild dependency-version: 1.0.122 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: proc-macro2 dependency-version: 1.0.107 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: quote dependency-version: 1.0.47 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: syn dependency-version: 3.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: napi-build dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tempfile dependency-version: 3.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: bytes dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: open dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: proptest dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: blake3 dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: lazy_static dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: bytes dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: open dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: proptest dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: blake3 dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: open dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: open dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: open dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.53.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: blake3 dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.151 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: blake3 dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: arbitrary dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: uuid dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: blake3 dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde dependency-version: 1.0.229 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-minor-patch - dependency-name: tokio dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch - dependency-name: zeroize dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Add patch changesets for @cipherstash/protect-ffi (and its six platform packages) and @cipherstash/auth, so the lockfile bump to rustls 0.23.45 (GHSA-2mjx-qc3c-rqvc) ships in its own release rather than depending on unrelated pending changesets. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FboWTTDJN1UFUDUzSzHzNH
… with 8 updates Bumps the production-minor-patch group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.3` | `0.45.4` | | [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.55.0` | `5.55.2` | | [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.64.2` | `4.64.5` | | [uuid](https://github.com/uuidjs/uuid) | `14.0.2` | `14.0.3` | | [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.293` | `0.3.296` | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.132.0` | `0.133.0` | | [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.9.12` | `7.9.14` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.3` | `8.3.4` | Updates `drizzle-orm` from 0.45.3 to 0.45.4 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](drizzle-team/drizzle-orm@0.45.3...0.45.4) Updates `posthog-node` from 5.55.0 to 5.55.2 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.55.2/packages/node) Updates `@rollup/rollup-linux-x64-gnu` from 4.64.2 to 4.64.5 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.64.2...v4.64.5) Updates `uuid` from 14.0.2 to 14.0.3 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v14.0.2...v14.0.3) Updates `@anthropic-ai/claude-agent-sdk` from 0.3.293 to 0.3.296 - [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/claude-agent-sdk-typescript@v0.3.293...v0.3.296) Updates `@anthropic-ai/sdk` from 0.132.0 to 0.133.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.132.0...sdk-v0.133.0) Updates `@clerk/nextjs` from 7.9.12 to 7.9.14 - [Release notes](https://github.com/clerk/javascript/releases) - [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md) - [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.9.14/packages/nextjs) Updates `vite` from 8.3.3 to 8.3.4 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite) --- updated-dependencies: - dependency-name: drizzle-orm dependency-version: 0.45.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: posthog-node dependency-version: 5.55.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: "@rollup/rollup-linux-x64-gnu" dependency-version: 4.64.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: uuid dependency-version: 14.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: "@anthropic-ai/claude-agent-sdk" dependency-version: 0.3.296 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.133.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@clerk/nextjs" dependency-version: 7.9.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: vite dependency-version: 8.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
…r-patch-2764191d86 chore(deps): bump the cargo-minor-patch group across 4 directories with 21 updates
…ages/golang/golang.org/x/sys-0.49.0 chore(deps): bump golang.org/x/sys from 0.48.0 to 0.49.0 in /languages/golang
…duction-minor-patch-de7b69c5f2 chore(deps): bump the production-minor-patch group across 1 directory with 8 updates
fix(deps): patch rustls to 0.23.45
- Parity test compares each crate's version, source and checksum, so a git source or patched fork that keeps the version number fails. - The candidate SQL lists op entries with no `s` key under MISSING_SELECTOR instead of dropping them from the join. - Restore the `column_expr == entry_column_expr(sel)` ensure in jsonb_entry_integer_field_selector_is_unique, and fix the doc comment that pointed at it. - The fixture-query unit test accepts any sqlx::Error, not only PoolTimedOut, so a host that forbids the connect does not fail it. - One is_word in the literal guard; the suffix check keys on the left boundary's HexPrefix instead of re-deriving it. - One shared OpSelectorCandidate test builder. - Drop review-finding IDs from source comments. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QtWTju13pniFvpYubNUEK4
Covers the undocumented helpers and tests CodeRabbit's docstring coverage check counted (79.63% against its 80% threshold). Comments only. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QtWTju13pniFvpYubNUEK4
…llowups test(eql): review follow-ups to the SteVec selector derivation
…-next # Conflicts: # Cargo.lock # languages/golang/go.mod # languages/golang/go.sum
🦋 Changeset detectedLatest commit: febb750 The changes in this PR will be included in the next version bump. This PR includes changesets to release 26 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
Contributor
Mutation testing (cargo-mutants,
|
coderdan
marked this pull request as ready for review
October 19, 2026 09:00
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
This was referenced Oct 19, 2026
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Brings
mainback intonext. The release-candidate PR that mergesnextintomain(#1229) shows as conflicting, which also marks every PR stacked onnextas part of a stack with conflicts. The conflicts are only dependency bumps that landed onmainafternextbranched, meeting the lockfile linesnexthad moved for its own crates.Changes
origin/main(fc591e3 and the 16 commits below it) intonext. Everything merged cleanly except the rootCargo.lockand the Go module'sgo.mod/go.sum.Cargo.lock: resolved by takingnext's lock and applying exactly the 38 version movesmainmade (the cargo minor/patch group bump, the rustls 0.23.45 patch from fix(deps): patch rustls to 0.23.45 #1158, plus the crates those pull along, such asprost0.14 andnapi-build2.6's newtarget-tuple), each withcargo update --precise. Nothing else in the lock moved; every remaining difference frommain's lock is a cratenextintroduced or already bumped (vitaminc 0.6.1, stack-encrypt 0.3.0, chacha20 0.10.2).go.mod/go.sum: no change againstnext.nextalready had thegolang.org/x/sys v0.49.0that chore(deps): bump golang.org/x/sys from 0.48.0 to 0.49.0 in /languages/golang #1224 brought tomain; the conflict wasmain's one-line bump sitting next to linesnexthad changed.go mod tidyleaves both files as they are.Verification
Cargo.lockin the tree passescargo metadata --locked(root, both Go guests, protect-ffi, EQL, stack-encrypt fuzz; the two fuzz locks that were already stale onnextare unchanged).cargo check --locked --workspace --all-targets --all-featurescompiles against the merged lock.go mod tidyleaves no diff;go list ./...resolves.mainhas no conflicts.Related
Refs #1229.