Skip to content

build(deps): bump toml from 0.8.2 to 1.1.8+spec-1.1.0 - #12

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/toml-1.1.8spec-1.1.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/toml-1.1.8spec-1.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps toml from 0.8.2 to 1.1.8+spec-1.1.0.

Commits
  • ceac6e4 chore: Release
  • 0fe9e93 docs: Update changelog
  • e3a64aa fix(display): Ensure all keys are encoded (#1245)
  • 76484d0 fix(display): Ensure all keys are encoded
  • 711b1ba refactor(display): Clarify that we are working with encoded keys
  • 4f73ebd test(display): Reproduce the key bug
  • 6c6a5cd fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 9c5e95d fix(parser): Remove risk of unsoundness with synthetic parser events and 'uns...
  • 4d45944 perf(parser): Remove no-op code (#1243)
  • 189c91c perf(parser): Remove no-op code
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 21, 2026
zylvex-tech pushed a commit that referenced this pull request Oct 22, 2026
…s re-verification

Corrections found by re-checking rather than by trusting the earlier
revision:

- Open Dependabot PRs are fifteen, not nine. Five are failing their
  checks (#7, #8, #12, #14, #17). The table now lists each PR with its
  own check status, and says explicitly that green CI is not proof of
  behavioural equivalence for the six green major-version bumps.
- `LruCache::pop()` is at cache.rs:61, not :62.
- Branch count is 22, not 21.

Adds 11.4 recording the independent review's five unverified items and
their fresh results, including that PR #23's head ca05218 has all four
checks green when queried per-SHA.
zylvex-tech added a commit that referenced this pull request Oct 22, 2026
… verified one

The P3 backlog item claimed "5 are failing and 6 are green major-version
bumps". The "5 failing" figure was carried forward from an earlier session and
happened to be right, but the "6 green major-version bumps" figure was not
re-derived and did not match the current state.

Re-queried every open Dependabot PR head SHA individually:

  failing (5): #7, #8 (mixed), #12, #14, #17
  green  (10): #9, #10, #11, #13, #15, #16, #18, #19, #20, #21

Of the 10 green, 8 cross a major version or a semver-0.x minor (which is
breaking under 0.x rules): #9 tauri-action 0->1, #10 tree-sitter-rust
0.23.3->0.24.2, #11 opentelemetry-otlp 0.28.0->0.33.1, #13 actions/checkout
4->7, #15 axum 0.7.9->0.8.9, #16 tracing-opentelemetry 0.28.0->0.34.0, #18
react, #19 framer-motion 11.18.2->14.3.0.

The item now states the verified split with PR numbers and version deltas
instead of an unsourced ratio. The limitations section is narrowed to match:
check status was verified per SHA, PR contents were not reviewed.
@dependabot
dependabot Bot force-pushed the dependabot/cargo/toml-1.1.8spec-1.1.0 branch 2 times, most recently from aad1b87 to f42c180 Compare October 25, 2026 07:32
@dependabot
dependabot Bot requested a review from Gar-gar22 as a code owner October 25, 2026 07:32
@dependabot
dependabot Bot force-pushed the dependabot/cargo/toml-1.1.8spec-1.1.0 branch from f42c180 to 270aa3d Compare October 27, 2026 07:19
Bumps [toml](https://github.com/toml-rs/toml) from 0.8.2 to 1.1.8+spec-1.1.0.
- [Commits](toml-rs/toml@toml-v0.8.2...toml-v1.1.8)

---
updated-dependencies:
- dependency-name: toml
  dependency-version: 1.1.8+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/toml-1.1.8spec-1.1.0 branch from 270aa3d to 174dcb9 Compare October 29, 2026 12:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant