Skip to content

chore(deps)(deps): bump the production-dependencies group with 2 updates#299

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/production-dependencies-1f3a5b0515
Closed

chore(deps)(deps): bump the production-dependencies group with 2 updates#299
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/production-dependencies-1f3a5b0515

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 2 updates: cc and bytemuck.

Updates cc from 1.2.66 to 1.2.67

Release notes

Sourced from cc's releases.

cc-v1.2.67

Other

  • Fix clippy warning (#1788)
  • Regenerate target info (#1785)
  • Add support for aarch64-unknown-linux-pauthtest target (#1713)
  • Fix nightly compilation error (#1783)
Changelog

Sourced from cc's changelog.

1.2.67 - 2026-07-11

Other

  • Fix clippy warning (#1788)
  • Regenerate target info (#1785)
  • Add support for aarch64-unknown-linux-pauthtest target (#1713)
  • Fix nightly compilation error (#1783)
Commits

Updates bytemuck from 1.25.0 to 1.25.1

Changelog

Sourced from bytemuck's changelog.

1.25.1

1.25

1.24

1.23.2

  • bump derive minimum version.

1.23.1

  • Added a windows-only ZeroableInOption impl for "stdcall" functions.

1.23

  • impl_core_error crate feature adds core::error::Error impl.
  • More ZeroableInOption impls.

1.22

  • Add the pod_saturating feature, which adds Pod impls for Saturating<T> when T is already Pod.
  • A bump in the minimum bytemuck_derive dependency from 1.4.0 to 1.4.1 to avoid a bug if you have a truly ancient cargo.lock file sitting around.
  • Adds Send and Sync impls to BoxBytes.

1.21

  • Implement Pod and Zeroable for core::arch::{x86, x86_64}::__m512, __m512d and __m512i without nightly. Requires Rust 1.72, and is gated through the avx512_simd cargo feature.
  • Allow the use of must_cast_mut and must_cast_slice_mut in const contexts. Requires Rust 1.83, and is gated through the must_cast_extra cargo feature.
  • internal: introduced the maybe_const_fn macro that allows defining some function to be const depending upon some cfg predicate.

1.20

  • New functions to allocate zeroed Arc and Rc. Requires Rust 1.82
  • TransparentWrapper impls for core::cmp::Reverse and core::num::Saturating.

... (truncated)

Commits
  • cabc8e7 chore: Release bytemuck version 1.25.1
  • 2d4d8ca changelog
  • 946e7a9 chore: Release bytemuck_derive version 1.11.0
  • 8a8f7cf changelog derive
  • ee6742e changelog
  • e2d1c7f Don't impl core::error::Error on spirv (#348)
  • 7dd7174 make the note more terse
  • 24b1b71 Update Rust version in CI workflow to 1.71.0
  • f0dfc1b docs: note that an empty slice must still satisfy target alignment in cast_sl...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps)(deps): bump the production-dependencies group with 2 updates
2efe880 
Bumps the production-dependencies group with 2 updates: [cc](https://github.com/rust-lang/cc-rs) and [bytemuck](https://github.com/Lokathor/bytemuck).


Updates `cc` from 1.2.66 to 1.2.67
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.66...cc-v1.2.67)

Updates `bytemuck` from 1.25.0 to 1.25.1
- [Changelog](https://github.com/Lokathor/bytemuck/blob/main/changelog.md)
- [Commits](Lokathor/bytemuck@v1.25.0...v1.25.1)

---
updated-dependencies:
- dependency-name: cc
  dependency-version: 1.2.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bytemuck
  dependency-version: 1.25.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot requested a review from doublegate as a code owner July 13, 2026 10:11
@dependabot @github

dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@doublegate doublegate mentioned this pull request Jul 14, 2026
Merged
doublegate added a commit that referenced this pull request Jul 15, 2026
@doublegate @claude
chore(deps): consolidate 6 Dependabot bumps (pollster 1.0, wide 1.5, …
d6d3572 
…tungstenite 0.30, +patches) (#305)

* chore(deps): consolidate 6 Dependabot bumps (pollster 1.0, wide 1.5, tungstenite 0.30, +patches)

Consolidate every open Dependabot version bump into one reviewed change, with the
two major bumps (pollster, wide) and the coupled tungstenite pair verified against
the actual code and gates rather than merged blind. Every bump landed with ZERO
source changes required — each crate's public surface RustyNES uses is unchanged.

Bumps (closes #298, #299, #300, #301, #302, #303):
- pollster 0.4 -> 1.0 (#300): frontend, android, ios. Sole use is
  `pollster::block_on(...)` for the wgpu/Metal adapter+device init (3 call sites);
  the 1.0 API is unchanged there. Both 0.4 (transitive via wgpu) and 1.0 (our
  direct dep) coexist in the tree, which is fine.
- wide 0.7 -> 1.5 (#301): the desktop `wide::u32x8` SIMD palette-index -> RGBA
  blitter (`gfx_blit.rs::blit_simd`; native-only, never in the wasm bundle). Pulls
  safe_arch 0.7 -> 1.0. The blitter's byte-identity gate
  (`gfx_blit::tests::simd_equals_scalar_byte_identical`) still passes, so the SIMD
  path stays bit-for-bit equal to scalar.
- tungstenite 0.29 -> 0.30 + tokio-tungstenite 0.29 -> 0.30 (#302, #303): the
  netplay signaling WebSocket (blocking client + async server) and the mobile
  bridge's blocking server. Kept `default-features = false` +
  `handshake` + `rustls-tls-webpki-roots` (pure-rustls, no system OpenSSL, so
  aarch64-android cross-compile stays clean). The 0.30 API is unchanged for our
  usage, including the `MaybeTlsStream::Rustls(s).sock` internals access and
  `client_tls`/`IntoClientRequest`. New transitive TLS/nonce deps (chacha20 0.10,
  rand 0.10, const-oid 0.10) resolve cleanly; sha1 0.10.6 drops out.
- bytemuck 1.25.0 -> 1.25.1, cc 1.2.66 -> 1.2.67 (#299 production group): patch
  bumps, lockfile only.
- actions/setup-python v5 -> v6 (#298): the MkDocs step in web.yml.

Verification (all green):
- cargo check: frontend / netplay (netplay-client,signaling-server) / mobile.
- cargo clippy -D warnings: frontend / netplay / mobile all clean.
- cargo test: wide SIMD byte-identity (simd_equals_scalar_byte_identical) +
  the full netplay suite (81 + 16 + nat/relay loopbacks) all pass with 0.30.
- cargo deny check: advisories / bans / licenses / sources all ok (new
  transitive deps included).
- The `#![no_std]` core (cpu/ppu/apu/mappers) has none of these deps, so the
  deterministic engine and AccuracyCoin 141/141 are unaffected by construction.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* docs(deps): correct the pollster/bytemuck comment (review #305)

Adopt the copilot review note: the "both are free transitive deps of wgpu"
comment was inaccurate after the pollster 0.4 -> 1.0 bump. `bytemuck` is still a
free direct dep (matches the wgpu-resolved version), but `pollster 1.0` is a NEW
major distinct from the `pollster 0.4` that `rfd 0.17.2` still pulls transitively,
so the two coexist as a temporary duplicate until rfd bumps to pollster 1.x. The
comment now states the intentional 1.0 pin and the duplicate explicitly.

No dependency or code change (comment only).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
@doublegate

doublegate commented Jul 15, 2026

Copy link
Copy Markdown
Owner

Superseded by #305, which consolidated all 6 open Dependabot bumps into one reviewed change (merged to main as d6d3572). This exact bump landed there — verified with cargo check / clippy -D warnings / cargo deny / the wide SIMD byte-identity test / the full netplay tungstenite-0.30 suite. Closing as done.

@doublegate doublegate closed this Jul 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/cargo/production-dependencies-1f3a5b0515 branch July 15, 2026 00:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@doublegate doublegate Awaiting requested review from doublegate doublegate is a code owner

Assignees

@doublegate doublegate

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@doublegate