Skip to content

Bump the cargo-dependencies group across 1 directory with 3 updates - #2

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-93717a68f1
Closed

Bump the cargo-dependencies group across 1 directory with 3 updates#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-dependencies-93717a68f1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on prettyplease, syn and heapless to permit the latest version.
Updates prettyplease to 0.3.0

Release notes

Sourced from prettyplease's releases.

0.3.0

Commits
  • 49e5089 Release 0.3.0
  • fcbf4d3 Merge pull request #128 from dtolnay/syn3
  • 3bcd9d9 Update to syn 3
  • 1a89d07 Format with rustfmt
  • daa39f5 Update actions/upload-artifact@v6 -> v7
  • 44d4c3d Update actions/checkout@v6 -> v7
  • 87d1c22 Update examples to nightly-2026-02-09
  • 50a7042 Raise required compiler to Rust 1.71
  • ae76ee8 Resolve unnecessary_map_or clippy lint
  • 938b756 Raise required compiler to Rust 1.70
  • Additional commits viewable in compare view

Updates syn to 3.0.3

Release notes

Sourced from syn's releases.

3.0.3

  • Documentation improvements
Commits
  • 23dbaab Release 3.0.3
  • 16aad4e Merge pull request #2071 from dtolnay/compatibility
  • 42181b8 Add explanation of compatibility strategy
  • f3af08e Update test suite to nightly-2026-07-21
  • 88ee7be Release 3.0.2
  • 587bc20 Merge pull request #2070 from dtolnay/emptyrange
  • 96801f7 Allow Error::new_range at empty cursor range
  • 9dc16c9 Merge pull request #2069 from dtolnay/prevspan
  • 1db76b7 Align on using impl trait across all Error constructors
  • bfa1ebf Make Cursor::prev_span public
  • Additional commits viewable in compare view

Updates heapless to 0.9.3

Release notes

Sourced from heapless's releases.

0.9.3

See the full changelog here: https://github.com/rust-embedded/heapless/blob/v0.9.3/CHANGELOG.md#v093-2025-04-15

Changelog

Sourced from heapless's changelog.

[v0.9.3] 2025-04-15

  • Fixed unsoundness in Deque::clear, HistoryBuf::clear and IndexMap::clear in the context of panicking drop implementations.
  • Added from_bytes_truncating_at_nul to CString
  • Added CString::{into_bytes, into_bytes_with_nul, into_string}
  • Added pop_front_if and pop_back_if to Deque
  • Made Vec::from_array const.
  • Fixed long division being instroduced by the const-erasure in spsc
  • spsc: Fix integer overflow in iterators when N > usize::MAX/2 and the queue loops.
  • spsc: Fix integer overflow leading to a panic in len when N == usize::MAX and debug assertions are enabled.

[v0.9.2] 2025-11-12

  • Added from_bytes_truncating_at_nul to CString
  • Added missing ?Sized bounds in PartialEq implementations
  • Make PartialEq implementation for DequeInner and HistoryBufInner generic over the storage of the RHS
  • Minor fixes to module docs.
  • Make MSRV of 1.87.0 explicit.
  • Implement Default for CapacityError.
  • Implement defmt::Format for CapacityError.
  • Implement TryFrom for Deque from array.
  • Switch from serde to serde_core for enabling faster compilations.
  • Implement Zeroize trait for all data structures with the zeroize feature to securely clear sensitive data from memory.
  • Added truncate to Deque
  • Added retain to Deque
  • Added retain_mut to Deque
  • Added into_raw to Box
  • Added from_raw to Box
  • Added FusedIterator to vec::IntoIter, deque::IntoIter, index_map::IntoIter and linear_map::IntoIter.
  • Added ExactSizeIterator to vec::IntoIter, deque::IntoIter, index_map::IntoIter and linear_map::IntoIter.
  • Added DoubleEndedIterator to vec::IntoIter and deque::IntoIter.
  • Deprecate mpmc (see #583)
  • Fixed initialization of the ArcBlock<T> and BoxBlock<T> types, fixing possible Undefined Behavior

[v0.9.1] - 2025-08-19

Added

  • Added String::insert and String::insert_str.

Added

  • Added optional embedded_io::Write impl for Vec.

Changed

  • bytes::BufMut is now implemented on VecInner.
  • Removed generic from history_buf::OldestOrdered.
  • Made LenType opt-in.
  • Minor fixes to pool::boxed docs.

... (truncated)

Commits
  • ca95c4b Merge pull request #656 from sgued/release-093
  • c3d2061 Prepare release 0.9.3
  • fba1da4 Merge pull request #644 from tower120/const_vec_from_array
  • 6bb5909 Fix clippy lints
  • 666a0ac Vec::from_array now const
  • 0db1fb3 Add IDEA files to gitignore
  • be8628a Merge pull request #647 from sgued/646-clear-use-after-free
  • e458255 Fix possible use after free in clear functions
  • 45a1f11 Merge pull request #641 from sgued/deque-pop-front-if
  • 8d95d99 deque: Add pop_front_if and pop_back_if
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 5, 2026
Updates the requirements on [prettyplease](https://github.com/dtolnay/prettyplease), [syn](https://github.com/dtolnay/syn) and [heapless](https://github.com/rust-embedded/heapless) to permit the latest version.

Updates `prettyplease` to 0.3.0
- [Release notes](https://github.com/dtolnay/prettyplease/releases)
- [Commits](dtolnay/prettyplease@0.2.0...0.3.0)

Updates `syn` to 3.0.3
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.0...3.0.3)

Updates `heapless` to 0.9.3
- [Release notes](https://github.com/rust-embedded/heapless/releases)
- [Changelog](https://github.com/rust-embedded/heapless/blob/main/CHANGELOG.md)
- [Commits](rust-embedded/heapless@v0.8.0...v0.9.3)

---
updated-dependencies:
- dependency-name: heapless
  dependency-version: 0.9.3
  dependency-type: direct:production
  dependency-group: cargo-dependencies
- dependency-name: prettyplease
  dependency-version: 0.3.0
  dependency-type: direct:production
  dependency-group: cargo-dependencies
- dependency-name: syn
  dependency-version: 3.0.3
  dependency-type: direct:production
  dependency-group: cargo-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the cargo-dependencies group with 3 updates Bump the cargo-dependencies group across 1 directory with 3 updates Aug 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-dependencies-93717a68f1 branch from 2e608cf to c5163b5 Compare August 5, 2026 15:44
@dependabot
dependabot Bot requested a review from Joatin as a code owner August 5, 2026 15:44
Joatin added a commit that referenced this pull request Aug 5, 2026
…#3)

Dependabot proposed all three (#2). The two dev-time ones are safe to take:
ocpp-codegen isn't published, and prettyplease 0.3's output is byte-identical
on every generated file, so the drift check passes untouched.

heapless 0.9 is deliberately left out. serde-json-core 0.6 -- the latest --
still depends on heapless 0.8, so taking 0.9 would compile *two* copies of
heapless into any downstream binary that enables the `serde` feature. That's
a real size cost for a crate whose selling point is embedded/no-alloc, and no
heapless type crosses this crate's public API to justify it. The pin carries a
comment saying when to revisit.

heapless 0.9 does change `String::try_from`'s error from `()` to
`CapacityError`, which is what broke the Dependabot branch: IdTag and
MessageId both declare `type Error = ()` and forwarded that result directly.
They now map the error away, so the wrapper's own error type stays `()` --
this crate's public API, not something that should track a dependency's
internals -- and the eventual 0.9 bump becomes a one-liner. Both types get a
test asserting the associated type via a `TryFrom<&str, Error = ()>` bound,
so a future bump can't silently change it.


Claude-Session: https://claude.ai/code/session_01NHWdX2XtxE3iJNo5XbLCwC

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
@Joatin Joatin closed this in #3 Aug 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-dependencies-93717a68f1 branch August 5, 2026 22:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants