Skip to content

chore(deps): refresh compatible crate versions - #4

Merged
mpiton merged 2 commits into
mainfrom
chore/dependency-upgrades
Sep 3, 2026
Merged

chore(deps): refresh compatible crate versions#4
mpiton merged 2 commits into
mainfrom
chore/dependency-upgrades

Conversation

@mpiton

@mpiton mpiton commented Sep 3, 2026

Copy link
Copy Markdown
Owner

Summary

Refresh compatible Rust dependencies: serde 1.0.229, serde_json 1.0.151, thiserror 2.0.20, regex 1.13.1, extism-pdk 1.4.1, rstest 0.26.1, plus a Cargo.lock update.

Why

Keep crawler/hoster plugins on current patch/minor crates without crossing crypto or Extism major lines.

Testing

  • cargo test --lib (host target where .cargo/config.toml pins wasm32-wasip1)
  • cargo clippy --lib --bins -- -D warnings

Summary by CodeRabbit

  • Chores
    • Updated several underlying libraries and development tools to newer versions.
    • No user-facing features or behavior changes were introduced.

Summary by cubic

Refreshes compatible Rust dependencies so crawler/hoster plugins stay on current patch and minor crates without crossing crypto or Extism major lines.

Dependencies

  • Bumps serde to 1.0.229, serde_json to 1.0.151, thiserror to 2.0.20, regex to 1.13.1, and extism-pdk to 1.4.1.
  • Removes unused dev deps rstest and hex-literal; neither is referenced from src/ or tests/.
  • Refreshes Cargo.lock with transitive updates, including new syn 3.x, base64 0.23, and zlib-rs.

Written for commit b63c4bd. Summary will update on new commits.

Review in cubic

Bump serde, serde_json, thiserror, regex, extism-pdk, and rstest to the
latest compatible releases and refresh Cargo.lock.
@socket-security

socket-security Bot commented Sep 3, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedthiserror@​2.0.18 ⏵ 2.0.208010093100100
Updatedserde@​1.0.228 ⏵ 1.0.2298110093100100
Updatedserde_json@​1.0.150 ⏵ 1.0.1518210093100100

View full report

@coderabbitai

coderabbitai Bot commented Sep 3, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Essentials

Run ID: 7e5dec23-2afd-4a0d-be1b-6ab9409ecafc

📥 Commits

Reviewing files that changed from the base of the PR and between a6549ac and d4af09a.

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • Cargo.toml

Included review availability: 0 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 2 reviews per hour.


Important

Approval pending

CodeRabbit has no unresolved comments, but it could not review the latest commit because the review limit was reached. Follow the review guidance in this comment to continue.

📝 Walkthrough

Walkthrough

The pull request updates runtime dependency versions for five Rust crates and development dependency versions for two crates in Cargo.toml.

Changes

Dependency Updates

Layer / File(s) Summary
Dependency version requirements
Cargo.toml
Runtime dependencies extism-pdk, serde, serde_json, regex, and thiserror use newer pinned versions. Development dependencies rstest and hex-literal are also upgraded.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to d4af0

This updates compatible Rust dependency versions and their lockfile resolution. The supplied test and lint checks passed, and no merge-blocking risk is currently identified.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the main change: refreshing compatible Rust dependency versions.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)


Comment @coderabbitai help to get the list of available commands.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 2 files

Reply with feedback, questions, or to request a fix.

Re-trigger cubic

Comment thread Cargo.toml Outdated
Neither crate is referenced from src/ or tests/.
@mpiton
mpiton merged commit 54c4f30 into main Sep 3, 2026
7 checks passed
@mpiton
mpiton deleted the chore/dependency-upgrades branch September 3, 2026 10:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant