chore(deps): bump thiserror from 2.0.18 to 2.0.20 - #36
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [thiserror](https://github.com/dtolnay/thiserror) from 2.0.18 to 2.0.20. - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.18...2.0.20) --- updated-dependencies: - dependency-name: thiserror dependency-version: 2.0.20 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
|
| State | Detail |
|---|---|
| Interrupted | webhook restarted |
No review verdict was produced for this run. Trigger a fresh review on the current PR head if the PR is still open.
tangletools · #36 · model: kimi-for-coding · updated 2026-08-18T03:25:11Z
✅ No Blockers —
|
| opencode GLM 5.2 | opencode DeepSeek v4 Pro | opencode DeepSeek v4 Flash | aggregate | |
|---|---|---|---|---|
| Readiness | 92 | 95 | 95 | 92 |
| Confidence | 65 | 65 | 65 | 65 |
| Correctness | 92 | 95 | 95 | 92 |
| Security | 92 | 95 | 95 | 92 |
| Testing | 92 | 95 | 95 | 92 |
| Architecture | 92 | 95 | 95 | 92 |
Reviewer score is advisory once the run is complete and the verdict has no blockers.
Full multi-shot audit completed 1/1 planned shots over 1 changed files. Global verifier still owns final merge decision. | Full multi-shot audit completed 1/1 planned shots over 1 changed files. Global verifier still owns final merge decision. | Full multi-shot audit completed 1/1 planned shots over 1 changed files. Global verifier still owns final merge decision.
🟡 LOW Dep graph gains syn 3.0.3 as a second syn major — Cargo.lock
thiserror-impl 2.0.20 unconditionally requires syn ^3, so the graph now carries syn 2.0.118 AND syn 3.0.3 (Cargo.lock:450-469), marginally increasing build time and supply-chain surface. Checksum verified against crates.io (53e9bae...659a3, unyanked, same publisher dtolnay as syn 2.x), so this is informational only. No action required; if dedup is desired it would mean holding thiserror at 2.0.18, which trades a dep-bump for stale error-handling macros — not worth it.
tangletools · 2026-08-18T03:29:28Z · trace
tangletools
left a comment
There was a problem hiding this comment.
✅ Approved — 1 non-blocking finding — 17bdbdb0
Full multi-shot audit completed 1/1 planned shots over 1 changed files. Global verifier still owns final merge decision. | Full multi-shot audit completed 1/1 planned shots over 1 changed files. Global verifier still owns final merge decision. | Full multi-shot audit completed 1/1 planned shots over 1 changed files. Global verifier still owns final merge decision.
Full immutable report for this review: trace
Summary comment for this run: full summary
tangletools · 2026-08-18T03:29:28Z · immutable trace
Bumps thiserror from 2.0.18 to 2.0.20.
Release notes
Sourced from thiserror's releases.
Commits
b1d5db5Release 2.0.20c4c3ebdMerge pull request #454 from dtolnay/clippy2266152Suppress redundant_field_names clippy lint2901cfdRaise minimum tested compiler to rust 1.88aa9d91fUpdate ui tests for version 2.0.19e13a785Release 2.0.190a0e76cUpdate to syn 3ec42ea7Update actions/upload-artifact@v6 -> v74178c4aUpdate actions/checkout@v6 -> v77214e0eIgnore items_after_statements pedantic clippy lint in testYou can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)