Bump the cargo group across 1 directory with 34 updates by dependabot[bot] · Pull Request #34 · kloudlite/rustic-git

dependabot · 2026-10-04T22:02:16Z

Bumps the cargo group with 34 updates in the / directory:

Package	From	To
opentelemetry	`0.32.0`	`0.33.0`
opentelemetry_sdk	`0.32.1`	`0.33.0`
opentelemetry-otlp	`0.32.0`	`0.33.0`
opentelemetry-http	`0.32.0`	`0.33.0`
tracing-opentelemetry	`0.33.0`	`0.34.0`
slatedb	`0.15.0`	`0.17.0`
russh	`0.62.6`	`0.63.3`
gix-odb	`0.84.0`	`0.85.0`
gix-pack	`0.74.2`	`0.75.0`
gix-object	`0.64.1`	`0.65.0`
gix-hash	`0.26.2`	`0.27.0`
gix-traverse	`0.61.0`	`0.62.0`
gix-features	`0.49.1`	`0.50.0`
gix-actor	`0.42.0`	`0.43.0`
flate2	`1.1.9`	`1.1.10`
rand	`0.8.7`	`0.10.2`
base64	`0.22.1`	`0.23.1`
sha2	`0.10.9`	`0.11.0`
reqwest	`0.13.4`	`0.13.5`
imara-diff	`0.1.8`	`0.2.0`
redis	`0.27.6`	`1.6.0`
mongodb	`3.8.0`	`3.9.1`
jsonwebtoken	`11.0.0`	`11.1.0`
tower-http	`0.6.11`	`0.7.1`
slatedb-common	`0.15.0`	`0.17.0`
notify	`7.0.0`	`8.2.0`
object_store	`0.14.1`	`0.14.2`
tokio-tungstenite	`0.29.0`	`0.30.0`
clap	`4.6.6`	`4.6.7`
socket2	`0.5.10`	`0.6.5`
hyper-util	`0.1.20`	`0.1.21`
gix	`0.87.1`	`0.88.0`
dirs	`6.0.0`	`7.0.0`
open	`5.4.2`	`5.4.4`

Updates opentelemetry from 0.32.0 to 0.33.0

Release notes

Sourced from opentelemetry's releases.

0.33.0

See the 0.33.0 release notes and migration guidance.

The OTLP exporters for Logs and Metrics remain release candidates. We plan to declare them stable in 0.33.1 after approximately two weeks of validation, provided no issues requiring breaking API changes arise. The Logs and Metrics API and SDK remain stable; Distributed Tracing remains pre-stable.

opentelemetry-semantic-conventions-0.32.1

See the CHANGELOG for details.

Changelog

Sourced from opentelemetry's changelog.

Release Notes 0.33

The OTLP exporters for Logs and Metrics remain in release-candidate (RC) status in OpenTelemetry Rust 0.33.0. We intend to declare them stable in 0.33.1, approximately two weeks after this release, provided the RC period does not uncover any issues requiring breaking API changes. During this period, we expect only compatible fixes, documentation updates, and low-risk internal optimisations.

OpenTelemetry Rust 0.33.0 brings OTLP retries on by default and completes the stabilisation cleanups that began in 0.32. The Logs and Metrics API and SDK remain stable with no breaking changes. The Distributed Tracing API, SDK, and OTLP exporter remain pre-stable, and this release includes intentional breaking changes in that area to continue preparing it for stabilisation.

For detailed changelogs of individual crates, refer to their respective changelog files. This document summarises the key changes.

Key Changes

OTLP Exporters for Logs and Metrics (RC)

Version 0.33.0 keeps the OTLP exporters for Logs and Metrics in RC for a final validation period. If no issues requiring breaking API changes are identified, we intend to declare them stable in 0.33.1 approximately two weeks after this release.

Retries enabled by default

OTLP/HTTP and OTLP/gRPC retries are now enabled by default with exponential backoff, jitter, and up to 3 retries (4 attempts total). Use .with_retry_policy(RetryPolicy::disabled()) to opt out, or provide a custom RetryPolicy.

Users of the experimental retry feature flags (experimental-grpc-retry and experimental-http-retry) should remove them from Cargo.toml. The retry and retry_classification modules are now crate-private; replace opentelemetry_otlp::retry imports with opentelemetry_otlp::RetryPolicy and use its with_* methods instead of struct literals.

Stabilisation cleanups

Breaking for callers matching or constructing removed build-error variants: ExporterBuildError now has two exhaustive variants, InvalidConfiguration(String) and InternalFailure(String). Update uses of removed variants. Normal exporter builder calls and propagation of build errors with ? need no changes. See the OTLP changelog for migration examples.

Breaking Protocol and Compression are now #[non_exhaustive]. Exhaustive matches must add a wildcard arm.

Breaking Protocol::from_env() is now crate-private. Builders resolve OTEL_EXPORTER_OTLP_PROTOCOL automatically; read the env var directly if needed.

Invalid OTLP endpoint environment variables (HTTP and gRPC) now produce a

... (truncated)

Commits

1983384 docs: clarify OTLP 0.33 migration guidance (#3747)
dacfeda chore: Prepare for release v0.33.0 (RC) (#3712)
996ac1e refactor(http)!: make ResponseBodyTooLarge extensible (#3736)
d328c65 fix(proto): preserve scope metadata when grouping OTLP logs (#3740)
e652efd refactor(otlp): finalize exporter build error API (#3692)
8809c42 refactor(otlp)!: separate configuration parsing errors (#3742)
cc1c374 feat(otlp): Allow to provide http client wrapped in Arc for user (#3468)
e085c61 ci: use supported Debian image for benchmarks (#3744)
6c5fd58 fix(proto): accept omitted partial success fields (#3739)
51b36a7 fix(otlp): handle enum environment values consistently (#3730)
Additional commits viewable in compare view

Updates opentelemetry_sdk from 0.32.1 to 0.33.0

Changelog

Sourced from opentelemetry_sdk's changelog.

Release Notes 0.33

The OTLP exporters for Logs and Metrics remain in release-candidate (RC) status in OpenTelemetry Rust 0.33.0. We intend to declare them stable in 0.33.1, approximately two weeks after this release, provided the RC period does not uncover any issues requiring breaking API changes. During this period, we expect only compatible fixes, documentation updates, and low-risk internal optimisations.

OpenTelemetry Rust 0.33.0 brings OTLP retries on by default and completes the stabilisation cleanups that began in 0.32. The Logs and Metrics API and SDK remain stable with no breaking changes. The Distributed Tracing API, SDK, and OTLP exporter remain pre-stable, and this release includes intentional breaking changes in that area to continue preparing it for stabilisation.

For detailed changelogs of individual crates, refer to their respective changelog files. This document summarises the key changes.

Key Changes

OTLP Exporters for Logs and Metrics (RC)

Version 0.33.0 keeps the OTLP exporters for Logs and Metrics in RC for a final validation period. If no issues requiring breaking API changes are identified, we intend to declare them stable in 0.33.1 approximately two weeks after this release.

Retries enabled by default

OTLP/HTTP and OTLP/gRPC retries are now enabled by default with exponential backoff, jitter, and up to 3 retries (4 attempts total). Use .with_retry_policy(RetryPolicy::disabled()) to opt out, or provide a custom RetryPolicy.

Users of the experimental retry feature flags (experimental-grpc-retry and experimental-http-retry) should remove them from Cargo.toml. The retry and retry_classification modules are now crate-private; replace opentelemetry_otlp::retry imports with opentelemetry_otlp::RetryPolicy and use its with_* methods instead of struct literals.

Stabilisation cleanups

Breaking for callers matching or constructing removed build-error variants: ExporterBuildError now has two exhaustive variants, InvalidConfiguration(String) and InternalFailure(String). Update uses of removed variants. Normal exporter builder calls and propagation of build errors with ? need no changes. See the OTLP changelog for migration examples.

Breaking Protocol and Compression are now #[non_exhaustive]. Exhaustive matches must add a wildcard arm.

Breaking Protocol::from_env() is now crate-private. Builders resolve OTEL_EXPORTER_OTLP_PROTOCOL automatically; read the env var directly if needed.

Invalid OTLP endpoint environment variables (HTTP and gRPC) now produce a

... (truncated)

Commits

1983384 docs: clarify OTLP 0.33 migration guidance (#3747)
dacfeda chore: Prepare for release v0.33.0 (RC) (#3712)
996ac1e refactor(http)!: make ResponseBodyTooLarge extensible (#3736)
d328c65 fix(proto): preserve scope metadata when grouping OTLP logs (#3740)
e652efd refactor(otlp): finalize exporter build error API (#3692)
8809c42 refactor(otlp)!: separate configuration parsing errors (#3742)
cc1c374 feat(otlp): Allow to provide http client wrapped in Arc for user (#3468)
e085c61 ci: use supported Debian image for benchmarks (#3744)
6c5fd58 fix(proto): accept omitted partial success fields (#3739)
51b36a7 fix(otlp): handle enum environment values consistently (#3730)
Additional commits viewable in compare view

Updates opentelemetry-otlp from 0.32.0 to 0.33.0

Changelog

Sourced from opentelemetry-otlp's changelog.

Release Notes 0.33

The OTLP exporters for Logs and Metrics remain in release-candidate (RC) status in OpenTelemetry Rust 0.33.0. We intend to declare them stable in 0.33.1, approximately two weeks after this release, provided the RC period does not uncover any issues requiring breaking API changes. During this period, we expect only compatible fixes, documentation updates, and low-risk internal optimisations.

OpenTelemetry Rust 0.33.0 brings OTLP retries on by default and completes the stabilisation cleanups that began in 0.32. The Logs and Metrics API and SDK remain stable with no breaking changes. The Distributed Tracing API, SDK, and OTLP exporter remain pre-stable, and this release includes intentional breaking changes in that area to continue preparing it for stabilisation.

For detailed changelogs of individual crates, refer to their respective changelog files. This document summarises the key changes.

Key Changes

OTLP Exporters for Logs and Metrics (RC)

Version 0.33.0 keeps the OTLP exporters for Logs and Metrics in RC for a final validation period. If no issues requiring breaking API changes are identified, we intend to declare them stable in 0.33.1 approximately two weeks after this release.

Retries enabled by default

OTLP/HTTP and OTLP/gRPC retries are now enabled by default with exponential backoff, jitter, and up to 3 retries (4 attempts total). Use .with_retry_policy(RetryPolicy::disabled()) to opt out, or provide a custom RetryPolicy.

Users of the experimental retry feature flags (experimental-grpc-retry and experimental-http-retry) should remove them from Cargo.toml. The retry and retry_classification modules are now crate-private; replace opentelemetry_otlp::retry imports with opentelemetry_otlp::RetryPolicy and use its with_* methods instead of struct literals.

Stabilisation cleanups

Breaking for callers matching or constructing removed build-error variants: ExporterBuildError now has two exhaustive variants, InvalidConfiguration(String) and InternalFailure(String). Update uses of removed variants. Normal exporter builder calls and propagation of build errors with ? need no changes. See the OTLP changelog for migration examples.

Breaking Protocol and Compression are now #[non_exhaustive]. Exhaustive matches must add a wildcard arm.

Breaking Protocol::from_env() is now crate-private. Builders resolve OTEL_EXPORTER_OTLP_PROTOCOL automatically; read the env var directly if needed.

Invalid OTLP endpoint environment variables (HTTP and gRPC) now produce a

... (truncated)

Commits

1983384 docs: clarify OTLP 0.33 migration guidance (#3747)
dacfeda chore: Prepare for release v0.33.0 (RC) (#3712)
996ac1e refactor(http)!: make ResponseBodyTooLarge extensible (#3736)
d328c65 fix(proto): preserve scope metadata when grouping OTLP logs (#3740)
e652efd refactor(otlp): finalize exporter build error API (#3692)
8809c42 refactor(otlp)!: separate configuration parsing errors (#3742)
cc1c374 feat(otlp): Allow to provide http client wrapped in Arc for user (#3468)
e085c61 ci: use supported Debian image for benchmarks (#3744)
6c5fd58 fix(proto): accept omitted partial success fields (#3739)
51b36a7 fix(otlp): handle enum environment values consistently (#3730)
Additional commits viewable in compare view

Updates opentelemetry-http from 0.32.0 to 0.33.0

Release notes

Sourced from opentelemetry-http's releases.

0.33.0

See the 0.33.0 release notes and migration guidance.

The OTLP exporters for Logs and Metrics remain release candidates. We plan to declare them stable in 0.33.1 after approximately two weeks of validation, provided no issues requiring breaking API changes arise. The Logs and Metrics API and SDK remain stable; Distributed Tracing remains pre-stable.

opentelemetry-semantic-conventions-0.32.1

See the CHANGELOG for details.

Changelog

Sourced from opentelemetry-http's changelog.

Release Notes 0.33

The OTLP exporters for Logs and Metrics remain in release-candidate (RC) status in OpenTelemetry Rust 0.33.0. We intend to declare them stable in 0.33.1, approximately two weeks after this release, provided the RC period does not uncover any issues requiring breaking API changes. During this period, we expect only compatible fixes, documentation updates, and low-risk internal optimisations.

OpenTelemetry Rust 0.33.0 brings OTLP retries on by default and completes the stabilisation cleanups that began in 0.32. The Logs and Metrics API and SDK remain stable with no breaking changes. The Distributed Tracing API, SDK, and OTLP exporter remain pre-stable, and this release includes intentional breaking changes in that area to continue preparing it for stabilisation.

For detailed changelogs of individual crates, refer to their respective changelog files. This document summarises the key changes.

Key Changes

OTLP Exporters for Logs and Metrics (RC)

Version 0.33.0 keeps the OTLP exporters for Logs and Metrics in RC for a final validation period. If no issues requiring breaking API changes are identified, we intend to declare them stable in 0.33.1 approximately two weeks after this release.

Retries enabled by default

OTLP/HTTP and OTLP/gRPC retries are now enabled by default with exponential backoff, jitter, and up to 3 retries (4 attempts total). Use .with_retry_policy(RetryPolicy::disabled()) to opt out, or provide a custom RetryPolicy.

Users of the experimental retry feature flags (experimental-grpc-retry and experimental-http-retry) should remove them from Cargo.toml. The retry and retry_classification modules are now crate-private; replace opentelemetry_otlp::retry imports with opentelemetry_otlp::RetryPolicy and use its with_* methods instead of struct literals.

Stabilisation cleanups

Breaking for callers matching or constructing removed build-error variants: ExporterBuildError now has two exhaustive variants, InvalidConfiguration(String) and InternalFailure(String). Update uses of removed variants. Normal exporter builder calls and propagation of build errors with ? need no changes. See the OTLP changelog for migration examples.

Breaking Protocol and Compression are now #[non_exhaustive]. Exhaustive matches must add a wildcard arm.

Breaking Protocol::from_env() is now crate-private. Builders resolve OTEL_EXPORTER_OTLP_PROTOCOL automatically; read the env var directly if needed.

Invalid OTLP endpoint environment variables (HTTP and gRPC) now produce a

... (truncated)

Commits

1983384 docs: clarify OTLP 0.33 migration guidance (#3747)
dacfeda chore: Prepare for release v0.33.0 (RC) (#3712)
996ac1e refactor(http)!: make ResponseBodyTooLarge extensible (#3736)
d328c65 fix(proto): preserve scope metadata when grouping OTLP logs (#3740)
e652efd refactor(otlp): finalize exporter build error API (#3692)
8809c42 refactor(otlp)!: separate configuration parsing errors (#3742)
cc1c374 feat(otlp): Allow to provide http client wrapped in Arc for user (#3468)
e085c61 ci: use supported Debian image for benchmarks (#3744)
6c5fd58 fix(proto): accept omitted partial success fields (#3739)
51b36a7 fix(otlp): handle enum environment values consistently (#3730)
Additional commits viewable in compare view

Updates tracing-opentelemetry from 0.33.0 to 0.34.0

Changelog

Sourced from tracing-opentelemetry's changelog.

0.34.0 - 2026-09-20

Other

Upgrade to OpenTelemetry 0.33, see upstream changelog for details (#268)

Commits

See full diff in compare view

Updates slatedb from 0.15.0 to 0.17.0

Release notes

Sourced from slatedb's releases.

v0.17.0

What's Changed

Scale SsTableView::estimate_size by the visible_range fraction by @geeknarrator in slatedb/slatedb#2043

RFC-0033: Rewrite CachedObjectStore by @criccomini in slatedb/slatedb#2031

docs: renumber local object mirroring RFC to 0034 by @criccomini in slatedb/slatedb#2062

refactor(sst): remove WAL-specific table handling by @rodesai in slatedb/slatedb#2058

feat(compactor): configure checkpoint lifetime by @criccomini in slatedb/slatedb#2063

chore(foyer): bump to foyer v0.22.4 by @geeknarrator in slatedb/slatedb#2066

Add Triplox to the list of adopters by @FiV0 in slatedb/slatedb#2075

feat(uniffi): expose with_db_cache and with_db_cache_disabled on DbReaderBuilder by @flexorRegev in slatedb/slatedb#2070

add tracing spans slatedb.read and slatedb.read.memtable by @cadonna in slatedb/slatedb#2048

Add per-Db block-cache evacuation to disk for shared Foyer hybrid caches by @geeknarrator in slatedb/slatedb#2034

Add repository-wide Simple English guidance by @criccomini in slatedb/slatedb#2077

Add ObjectStoreBuilder in Uniffi Binding by @LGouellec in slatedb/slatedb#2068

Add AI disclosure and enum guidance by @criccomini in slatedb/slatedb#2078

Probe point-lookup sources concurrently instead of one at a time by @hawkaa in slatedb/slatedb#2039

feat: tag object store calls with segments by @criccomini in slatedb/slatedb#2074

feat(manifest): enforce the L0 ULID cutoff invariant by @geeknarrator in slatedb/slatedb#2079

[2021] Add DbBuilder::with_write_runtime to place the batch-writer on the caller's runtime by @1996fanrui in slatedb/slatedb#2082

Enable filters in range scans by @yiming-fang in slatedb/slatedb#2076

Return cache hit or miss results from DbCache fetch methods by @cadonna in slatedb/slatedb#2083

Stream L0 flush blocks instead of building the whole SST in memory by @geeknarrator in slatedb/slatedb#2064

chore(foyer): bump to foyer v0.22.6 by @yiming-fang in slatedb/slatedb#2087

Fix pause ordering in writer fencing test by @criccomini in slatedb/slatedb#2088

fix clippy issues when no cache feature enabled by @cadonna in slatedb/slatedb#2090

add tracing spans slatedb.read.read_filters and slatedb.read.evaluate_filters by @cadonna in slatedb/slatedb#2054

perf(wal): pipeline replay reads with shared limits by @rodesai in slatedb/slatedb#2059

Fix descending scan behavior in the sorted run iterator by @nomiero in slatedb/slatedb#2067

feat(compactions): enforce RFC 0029 ULID invariants by @geeknarrator in slatedb/slatedb#2081

Retry multipart parts with object_store 0.14.2 by @criccomini in slatedb/slatedb#2094

Snapshot DST filesystem listings before yielding by @criccomini in slatedb/slatedb#2095

Let applications evict the cache entries of retired SSTs by @yiming-fang in slatedb/slatedb#2092

add tracing spans slatedb.read.read_index by @cadonna in slatedb/slatedb#2093

Raise the key size limit to u32::MAX by @agavra in slatedb/slatedb#2099

fix: refresh GC version gauges before boundary updates by @RanaPriyansh in slatedb/slatedb#2100

Fix clock inheritance in union clones by @geeknarrator in slatedb/slatedb#2107

Add Tasklet to adopters by @rockwotj in slatedb/slatedb#2114

fix(clone): don't carry inherited external dbs that hold no SSTs by @sinbad-io in slatedb/slatedb#2113

feat(uniffi): expose Admin::delete_db by @sinbad-io in slatedb/slatedb#2116

Add an optional sorted-run count trigger for compaction by @geeknarrator in slatedb/slatedb#2108

New Contributors

@LGouellec made their first contribution in slatedb/slatedb#2068

@yiming-fang made their first contribution in slatedb/slatedb#2076

@RanaPriyansh made their first contribution in slatedb/slatedb#2100

@sinbad-io made their first contribution in slatedb/slatedb#2113

Full Changelog: slatedb/slatedb@v0.16.0...v0.17.0

v0.16.0

... (truncated)

Commits

c1e36fc Bump version to 0.17.0
052b1af Add an optional sorted-run count trigger for compaction (#2108)
c4868b7 feat(uniffi): expose Admin::delete_db (#2116)
a644322 fix(clone): don't carry inherited external dbs that hold no SSTs (#2113)
b24c488 Add Tasklet to adopters (#2114)
2866a35 Fix clock inheritance in union clones (#2107)
0fb3680 fix: refresh GC version gauges before boundary updates (#2100)
8519986 Raise the key size limit to u32::MAX (#2099)
3c67092 add tracing spans slatedb.read.read_index (#2093)
a04b941 Let applications evict the cache entries of retired SSTs (#2092)
Additional commits viewable in compare view

Updates russh from 0.62.6 to 0.63.3

Release notes

Sourced from russh's releases.

v0.63.3

Fixes

c13b259: enforce inactivity timeout even during stalled writes (Eugene)

v0.63.2

Security fixes

GHSA-g4mp-vgx3-xrvm - out-of-bounds read in pageant

A malicious Pageant agent could cause an out-of-bounds read / oversized allocation in the pageant library user.

GHSA-35g8-35p8-c8fw - unbounded memory allocation in server

An authenticated client could trigger unbounded memory allocation during rekey phase

Fixes

client: encode the negotiated hash algorithm for RSA certificates (#764) #764 (Jeongkyu Shin)

4206815: Fix pty-req terminal modes: deliver them unpadded, encode the right l… (#755) (tluyben) #755

b1d3893: fixed #762 - redact sensitive data from debug logging (Eugene)

66789f4: fixed #761 - data write split across a kex breaks (Eugene)

a04e1b5: fixed #758 - fail RSA signing explicitly when RSA feature is not enabled (Eugene)

422123c: dedup zlib compress loop into compress_into (Eugene)

v0.63.1

Security fixes

GHSA-47hw-gvq5-r2gm - client-side Handler callbacks reachable with invalid channel IDs

A mirror of GHSA-m65r-rprj-r5rg for the client side - Handler per-channel callbacks are called even when the server supplies an invalid (never opened) channel ID. Depending on what the handler does this can lead to a vulnerability.

GHSA-p8qx-h547-fjw9 - MAC-requiring block cipher can be negotiated without MAC and panic

Two peers disagreeing on supported MACs can end up negotiating none MAC for a cipher that requires one, which leads to the session task panicking.

v0.63.0

Features

09f6582: Support host certificates on the client side (#752) (@biao29) #752

This changes the signature of Handler::check_server_key to take a new PublicKeyOrCertificate enum instead of &PublicKey

d7601ae: Support host certificates on the server side (#641) (Georg von Zengen) #641

Adds a Config::certificates that functions similarly to Config::keys

Fixes

f2354c7: improve strict kex checks (Eugene)

0363fde: fixed PKCS#8 parsing panicking on incorrect contents (Eugene)

46c927a: use constant-time comparison for agent unlock (Eugene)

8da8967: sanitize Curve25519 params (Eugene)

Full Changelog: Eugeny/russh@v0.62.7...v0.63.0

... (truncated)

Commits

f33baf4 v0.63.3
c13b259 enforce inactivity timeout if even during stalled writes
8a51a0d v0.63.2
422123c dedup zlib compress loop into compress_into
a04e1b5 fixed #758 - fail RSA signing explicitly when RSA feature is not enabled
af91598 fmt
b1d3893 fixed #762 - redact sensitive data from debug logging
a282af3 fix rekey message queueing
5d56698 fix read bounds in pageant
675b631 bump num-bigint
Additional commits viewable in compare view

Updates gix-odb from 0.84.0 to 0.85.0

Release notes

Sourced from gix-odb's releases.

gix-odb v0.85.0

Changed (BREAKING)

replace forwarding errors with metadata contexts

looked at the diff in detail, but went through quickly. Enough to give it my name, but really barely so. Some refactoring done as well, but nothing major.

Return canonical Exn errors for loose and dynamic object lookup, alternate resolution, prefix lookup and integrity verification. Preserve original I/O, decoder, allocation, persistence and custom reader sources instead of forwarding them through operation-specific error enums.

Use documented scalar Metadata contexts for native paths, object IDs, sizes, pack counts and recursion limits. Keep alternate::Cycle with its discovered directory chain, and preserve explicit retryability for interrupted verification or concurrent disk changes. An absent delta base remains not found, while a recursion limit alone implies neither absence nor corruption. Empty loose files are now classified as corruption.

Remove empty error namespaces and redundant conversions in porcelain and CLI callers. Keep the genuine I/O boundary for store initialization and pack loading, using the existing adapter to retain both the I/O kind and the complete cause.

Replace wrapper-construction tests with actual custom-reader, malformed-object, missing-delta and depth-limit failures. Validate metadata and classifications after conversion, including native path values and retained cycle details.

migrate errors to gix-error

rubberstamp, but looked at it more to understand why it's more code. Answer: downstream relies on better error classification. However, I think this can also be reduced a bit.

raise MSRV to Rust 1.88

The newly published dua-core 3.3 release used by linked-worktree removal requires Rust 1.88, so raise every workspace crate and the advertised badge together.

Keep the MSRV checks buildable by selecting the latest sysinfo and rusqlite release lines that support Rust 1.88.

Performance

avoid redundant in-memory object copies gix_object::Write::write() serialized an object into the trait buffer, then write_stream() copied that buffer again. Override it in the memory proxy so

... (truncated)

Commits

37860b3 Release gix-error v0.4.0, gix-date v0.17.0, gix-actor v0.43.0, gix-trace v0.2...
7f69d07 chore: add cargo smart-release incantation to justfile
e11a4c2 report proofing
9f1a6cc report September 2026
591380a Merge pull request #3019 from GitoxideLabs/mailmap-perf
b9b3d42 chore(gix-mailmap): modernize integration test layout
4163b89 fix(gix-mailmap): build snapshots without quadratic insertion
6356013 Merge pull request #2847 from GitoxideLabs/gix-error-completion
da0f21d change(gix-error)!: unify diagnostics as Message and preserve causes
f79ab74 Exclude Rust tests and examples from CodeQL analysis
Additional commits viewable in compare view

Updates gix-pack from 0.74.2 to 0.75.0

Release notes

Sourced from gix-pack's releases.

gix-pack v0.75.0

New Features

expose the pack header size

The 12-byte pack header length was repeated in readers, offset validation, and tests, leaving the first-entry boundary expressed as a magic number.

Expose data::header::SIZE, derive it from the fixed header fields, and use it wherever code needs the first valid pack-entry offset.

Bug Fixes

reject delta instructions that exceed the result size

rubber stamp, looked at diff

Writing to a byte slice may succeed with a short write. Delta application ignored that byte count, so oversized copy and insert instructions silently truncated their output instead of reporting corrupt data.

Split off an output slice of exactly the required size before copying. This also removes two mappings of I/O failures that slice writes cannot produce. A regression covers both copy and insert instructions; all gix-pack tests pass.

avoid aborts in remaining capacity hints

A follow-up audit for GHSA-x862-c2wj-4mwr found that the shared exact_vec() optimization still used infallible reservation at four other call sites, multi-index writing reserved from index counts infallibly, and doubled thin-pack size hints could overflow on 32-bit targets.

Treat exact preallocation as best-effort, propagate multi-index reservation failure, and saturate the thin-pack upper bound. Regression tests cover failed exact preallocation and size-hint overflow without making large allocations.

make delta-tree allocation fallible

GHSA-x862-c2wj-4mwr identified that delta-tree capacity derived from pack metadata used an infallible exact reservation. A rejected allocation could therefore terminate the process instead of returning through the existing indexing error path.

Use fallible exact reservations, reject capacity arithmetic overflow, and apply the existing per-allocation limit to both initial tree vectors. The regression covers allocator rejection and explicit zero limits; bundle and index tests verify the propagated error.

Git reference: builtin/index-pack.c reads the advertised object count in

... (truncated)

Commits

37860b3 Release gix-error v0.4.0, gix-date v0.17.0, gix-actor v0.43.0, gix-trace v0.2...
7f69d07 chore: add cargo smart-release incantation to justfile
e11a4c2 report proofing
9f1a6cc report September 2026
591380a Merge pull request #3019 from GitoxideLabs/mailmap-perf
b9b3d42 chore(gix-mailmap): modernize integration test layout
4163b89 fix(gix-mailmap): build snapshots without quadratic insertion
6356013 Merge pull request #2847 from GitoxideLabs/gix-error-completion
da0f21d change(gix-error)!: unify diagnostics as Message and preserve causes
f79ab74 Exclude Rust tests and examples from CodeQL analysis
Additional commits viewable in compare view

Updates gix-object from 0.64.1 to 0.65.0

Release notes

Sourced from gix-object's releases.

gix-object v0.65.0

New Features

add Never::panic_on_access() to forbid object access

Tests that must avoid object database access can use Never::panic_on_access() instead of implementing their own panicking stores. The returned PanicAlways type panics on reads, existence checks, and writes, while preserving the existing Never unit struct and its behavior.

Replace the custom panicking stores in the null-ID tests in gix-diff and gix-merge, and cover every object-access method. Validated the object, diff, and merge integration test suites and cargo fmt --all -- --check.

Keep rustdoc links aligned with the constructor name. CI's test and lint jobs build documentation with warnings denied, and the old Never::fail_always() links failed to resolve. The failure was reproduced locally; RUSTDOCFLAGS='-D warnings' cargo doc -p gix-object --no-deps --features sha1 passes with the corrected links.

Bug Fixes

Keep rust workspace tests inside disposable repositories and isolated environments

Direct Git launches inherited repository selectors and user configuration even when tests supplied a fixture working directory. Tests of default-environment APIs and local Git transports also shared the runner's environment. A few journey tests wrote beneath source directories or used the source checkout as the repository under test.

Use the shared gix-testtools Git command builder for subprocess setup, isolated repository options for fixtures, and isolated child processes where the real environment-reading API must be exercised. Scope CWD changes, copy the fixture used by an object-write test, and run shell journeys through jtt run. Keep journey worktrees and example output within their disposable sandboxes and replace the attributes checkout test with a representative fixture repository. Prompt examples also run in isolated children and must build successfully; the old tests could ignore build failures and execute stale cached binaries.

The affected Rust crate suites, internal test-tool build, and max-pure journey suite pass from a source copy without Git metadata. Signing and Git-daemon checks use only disposable keys, repositories, and local sockets.

omit the final newline from bodyless commit titles An ordinary commit created with git commit -m "initial commit" exposes "initial commit\n" as MessageRef::title because the no-separator path returns the entire message. Exclude a final LF or CRLF in that shared parser path, preserving other whitespace, interior newlines, and raw bytes.

Correct the existing LF and CRLF expectations, add boundary cases for empty and multiline titles, whitespace, lone CR, and non-UTF-8 bytes, and update

... (truncated)

Commits

37860b3 Release gix-error v0.4.0, gix-date v0.17.0, gix-actor v0.43.0, gix-trace v0.2...
7f69d07 chore: add cargo smart-release incantation to justfile
e11a4c2 report proofing
9f1a6cc report September 2026
591380a Merge pull request #3019 from GitoxideLabs/mailmap-perf
b9b3d42 chore(gix-mailmap): modernize integration test layout
4163b89 fix(gix-mailmap): build snapshots without quadratic insertion
6356013 Merge pull request #2847 from GitoxideLabs/gix-error-completion

Bumps the cargo group with 34 updates in the / directory: | Package | From | To | | --- | --- | --- | | [opentelemetry](https://github.com/open-telemetry/opentelemetry-rust) | `0.32.0` | `0.33.0` | | [opentelemetry_sdk](https://github.com/open-telemetry/opentelemetry-rust) | `0.32.1` | `0.33.0` | | [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) | `0.32.0` | `0.33.0` | | [opentelemetry-http](https://github.com/open-telemetry/opentelemetry-rust) | `0.32.0` | `0.33.0` | | [tracing-opentelemetry](https://github.com/tokio-rs/tracing-opentelemetry) | `0.33.0` | `0.34.0` | | [slatedb](https://github.com/slatedb/slatedb) | `0.15.0` | `0.17.0` | | [russh](https://github.com/warp-tech/russh) | `0.62.6` | `0.63.3` | | [gix-odb](https://github.com/GitoxideLabs/gitoxide) | `0.84.0` | `0.85.0` | | [gix-pack](https://github.com/GitoxideLabs/gitoxide) | `0.74.2` | `0.75.0` | | [gix-object](https://github.com/GitoxideLabs/gitoxide) | `0.64.1` | `0.65.0` | | [gix-hash](https://github.com/GitoxideLabs/gitoxide) | `0.26.2` | `0.27.0` | | [gix-traverse](https://github.com/GitoxideLabs/gitoxide) | `0.61.0` | `0.62.0` | | [gix-features](https://github.com/GitoxideLabs/gitoxide) | `0.49.1` | `0.50.0` | | [gix-actor](https://github.com/GitoxideLabs/gitoxide) | `0.42.0` | `0.43.0` | | [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` | | [rand](https://github.com/rust-random/rand) | `0.8.7` | `0.10.2` | | [base64](https://github.com/marshallpierce/rust-base64) | `0.22.1` | `0.23.1` | | [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.13.4` | `0.13.5` | | [imara-diff](https://github.com/pascalkuthe/imara-diff) | `0.1.8` | `0.2.0` | | [redis](https://github.com/redis-rs/redis-rs) | `0.27.6` | `1.6.0` | | [mongodb](https://github.com/mongodb/mongo-rust-driver) | `3.8.0` | `3.9.1` | | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `11.0.0` | `11.1.0` | | [tower-http](https://github.com/tower-rs/tower-http) | `0.6.11` | `0.7.1` | | [slatedb-common](https://github.com/slatedb/slatedb) | `0.15.0` | `0.17.0` | | [notify](https://github.com/notify-rs/notify) | `7.0.0` | `8.2.0` | | [object_store](https://github.com/apache/arrow-rs-object-store) | `0.14.1` | `0.14.2` | | [tokio-tungstenite](https://github.com/snapview/tokio-tungstenite) | `0.29.0` | `0.30.0` | | [clap](https://github.com/clap-rs/clap) | `4.6.6` | `4.6.7` | | [socket2](https://github.com/rust-lang/socket2) | `0.5.10` | `0.6.5` | | [hyper-util](https://github.com/hyperium/hyper-util) | `0.1.20` | `0.1.21` | | [gix](https://github.com/GitoxideLabs/gitoxide) | `0.87.1` | `0.88.0` | | dirs | `6.0.0` | `7.0.0` | | [open](https://github.com/Byron/open-rs) | `5.4.2` | `5.4.4` | Updates `opentelemetry` from 0.32.0 to 0.33.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/opentelemetry-0.33.0/docs/release_0.33.md) - [Commits](open-telemetry/opentelemetry-rust@opentelemetry-0.32.0...opentelemetry-0.33.0) Updates `opentelemetry_sdk` from 0.32.1 to 0.33.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/opentelemetry_sdk-0.33.0/docs/release_0.33.md) - [Commits](open-telemetry/opentelemetry-rust@opentelemetry-semantic-conventions-0.32.1...opentelemetry_sdk-0.33.0) Updates `opentelemetry-otlp` from 0.32.0 to 0.33.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/opentelemetry-otlp-0.33.0/docs/release_0.33.md) - [Commits](open-telemetry/opentelemetry-rust@opentelemetry-otlp-0.32.0...opentelemetry-otlp-0.33.0) Updates `opentelemetry-http` from 0.32.0 to 0.33.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/opentelemetry-http-0.33.0/docs/release_0.33.md) - [Commits](open-telemetry/opentelemetry-rust@opentelemetry-http-0.32.0...opentelemetry-http-0.33.0) Updates `tracing-opentelemetry` from 0.33.0 to 0.34.0 - [Release notes](https://github.com/tokio-rs/tracing-opentelemetry/releases) - [Changelog](https://github.com/tokio-rs/tracing-opentelemetry/blob/v0.1.x/CHANGELOG.md) - [Commits](https://github.com/tokio-rs/tracing-opentelemetry/commits) Updates `slatedb` from 0.15.0 to 0.17.0 - [Release notes](https://github.com/slatedb/slatedb/releases) - [Changelog](https://github.com/slatedb/slatedb/blob/main/RELEASE.md) - [Commits](slatedb/slatedb@v0.15.0...v0.17.0) Updates `russh` from 0.62.6 to 0.63.3 - [Release notes](https://github.com/warp-tech/russh/releases) - [Commits](Eugeny/russh@v0.62.6...v0.63.3) Updates `gix-odb` from 0.84.0 to 0.85.0 - [Release notes](https://github.com/GitoxideLabs/gitoxide/releases) - [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md) - [Commits](GitoxideLabs/gitoxide@gix-odb-v0.84.0...gix-odb-v0.85.0) Updates `gix-pack` from 0.74.2 to 0.75.0 - [Release notes](https://github.com/GitoxideLabs/gitoxide/releases) - [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md) - [Commits](GitoxideLabs/gitoxide@gix-pack-v0.74.2...gix-pack-v0.75.0) Updates `gix-object` from 0.64.1 to 0.65.0 - [Release notes](https://github.com/GitoxideLabs/gitoxide/releases) - [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md) - [Commits](GitoxideLabs/gitoxide@gix-object-v0.64.1...gix-object-v0.65.0) Updates `gix-hash` from 0.26.2 to 0.27.0 - [Release notes](https://github.com/GitoxideLabs/gitoxide/releases) - [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md) - [Commits](GitoxideLabs/gitoxide@gix-hash-v0.26.2...gix-hash-v0.27.0) Updates `gix-traverse` from 0.61.0 to 0.62.0 - [Release notes](https://github.com/GitoxideLabs/gitoxide/releases) - [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md) - [Commits](GitoxideLabs/gitoxide@gix-traverse-v0.61.0...gix-traverse-v0.62.0) Updates `gix-features` from 0.49.1 to 0.50.0 - [Release notes](https://github.com/GitoxideLabs/gitoxide/releases) - [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md) - [Commits](GitoxideLabs/gitoxide@gix-features-v0.49.1...gix-features-v0.50.0) Updates `gix-actor` from 0.42.0 to 0.43.0 - [Release notes](https://github.com/GitoxideLabs/gitoxide/releases) - [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md) - [Commits](GitoxideLabs/gitoxide@gix-actor-v0.42.0...gix-actor-v0.43.0) Updates `flate2` from 1.1.9 to 1.1.10 - [Release notes](https://github.com/rust-lang/flate2-rs/releases) - [Commits](rust-lang/flate2-rs@1.1.9...1.1.10) Updates `rand` from 0.8.7 to 0.10.2 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.8.7...0.10.2) Updates `base64` from 0.22.1 to 0.23.1 - [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md) - [Commits](marshallpierce/rust-base64@v0.22.1...v0.23.1) Updates `sha2` from 0.10.9 to 0.11.0 - [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0) Updates `reqwest` from 0.13.4 to 0.13.5 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) Updates `imara-diff` from 0.1.8 to 0.2.0 - [Release notes](https://github.com/pascalkuthe/imara-diff/releases) - [Changelog](https://github.com/pascalkuthe/imara-diff/blob/master/CHANGELOG.md) - [Commits](pascalkuthe/imara-diff@v0.1.8...v0.2.0) Updates `redis` from 0.27.6 to 1.6.0 - [Release notes](https://github.com/redis-rs/redis-rs/releases) - [Commits](redis-rs/redis-rs@redis-0.27.6...redis-1.6.0) Updates `mongodb` from 3.8.0 to 3.9.1 - [Release notes](https://github.com/mongodb/mongo-rust-driver/releases) - [Commits](mongodb/mongo-rust-driver@v3.8.0...v3.9.1) Updates `jsonwebtoken` from 11.0.0 to 11.1.0 - [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](Keats/jsonwebtoken@v11.0.0...v11.1.0) Updates `tower-http` from 0.6.11 to 0.7.1 - [Release notes](https://github.com/tower-rs/tower-http/releases) - [Commits](tower-rs/tower-http@tower-http-0.6.11...tower-http-0.7.1) Updates `slatedb-common` from 0.15.0 to 0.17.0 - [Release notes](https://github.com/slatedb/slatedb/releases) - [Changelog](https://github.com/slatedb/slatedb/blob/main/RELEASE.md) - [Commits](slatedb/slatedb@v0.15.0...v0.17.0) Updates `notify` from 7.0.0 to 8.2.0 - [Release notes](https://github.com/notify-rs/notify/releases) - [Changelog](https://github.com/notify-rs/notify/blob/notify-8.2.0/CHANGELOG.md) - [Commits](notify-rs/notify@notify-7.0.0...notify-8.2.0) Updates `object_store` from 0.14.1 to 0.14.2 - [Release notes](https://github.com/apache/arrow-rs-object-store/releases) - [Changelog](https://github.com/apache/arrow-rs-object-store/blob/main/CHANGELOG-old.md) - [Commits](apache/arrow-rs-object-store@v0.14.1...v0.14.2) Updates `tokio-tungstenite` from 0.29.0 to 0.30.0 - [Changelog](https://github.com/snapview/tokio-tungstenite/blob/master/CHANGELOG.md) - [Commits](snapview/tokio-tungstenite@v0.29.0...v0.30.0) Updates `clap` from 4.6.6 to 4.6.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.6.6...clap_complete-v4.6.7) Updates `socket2` from 0.5.10 to 0.6.5 - [Release notes](https://github.com/rust-lang/socket2/releases) - [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-lang/socket2/commits/v0.6.5) Updates `hyper-util` from 0.1.20 to 0.1.21 - [Release notes](https://github.com/hyperium/hyper-util/releases) - [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper-util@v0.1.20...v0.1.21) Updates `gix` from 0.87.1 to 0.88.0 - [Release notes](https://github.com/GitoxideLabs/gitoxide/releases) - [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md) - [Commits](GitoxideLabs/gitoxide@gix-v0.87.1...gix-v0.88.0) Updates `dirs` from 6.0.0 to 7.0.0 Updates `open` from 5.4.2 to 5.4.4 - [Release notes](https://github.com/Byron/open-rs/releases) - [Changelog](https://github.com/Byron/open-rs/blob/main/changelog.md) - [Commits](Byron/open-rs@v5.4.2...v5.4.4) --- updated-dependencies: - dependency-name: opentelemetry dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: opentelemetry_sdk dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: opentelemetry-otlp dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: opentelemetry-http dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tracing-opentelemetry dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: slatedb dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: russh dependency-version: 0.63.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: gix-odb dependency-version: 0.85.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: gix-pack dependency-version: 0.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: gix-object dependency-version: 0.65.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: gix-hash dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: gix-traverse dependency-version: 0.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: gix-features dependency-version: 0.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: gix-actor dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: flate2 dependency-version: 1.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: rand dependency-version: 0.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: base64 dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: imara-diff dependency-version: 0.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: redis dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo - dependency-name: mongodb dependency-version: 3.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: jsonwebtoken dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tower-http dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: slatedb-common dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: notify dependency-version: 8.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo - dependency-name: object_store dependency-version: 0.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio-tungstenite dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: clap dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: socket2 dependency-version: 0.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: hyper-util dependency-version: 0.1.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: gix dependency-version: 0.88.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: dirs dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo - dependency-name: open dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-04T22:02:25Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults
Review profile: CHILL
Plan: Advanced
Run ID: 828ac0df-9d82-467b-b601-ce9b32d0a024

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot · 2026-10-06T13:48:14Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 4, 2026

dependabot Bot closed this Oct 6, 2026

dependabot Bot deleted the dependabot/cargo/cargo-4371270624 branch October 6, 2026 13:48

Navigation Menu

Repository navigation

Bump the cargo group across 1 directory with 34 updates - #34

Bump the cargo group across 1 directory with 34 updates#34
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/cargo-4371270624

dependabot Bot commented on behalf of github Oct 4, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 4, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.33.0

opentelemetry-semantic-conventions-0.32.1

Release Notes 0.33

Key Changes

OTLP Exporters for Logs and Metrics (RC)

Retries enabled by default

Stabilisation cleanups

Release Notes 0.33

Key Changes

OTLP Exporters for Logs and Metrics (RC)

Retries enabled by default

Stabilisation cleanups

Release Notes 0.33

Key Changes

OTLP Exporters for Logs and Metrics (RC)

Retries enabled by default

Stabilisation cleanups

0.33.0

opentelemetry-semantic-conventions-0.32.1

Release Notes 0.33

Key Changes

OTLP Exporters for Logs and Metrics (RC)

Retries enabled by default

Stabilisation cleanups

0.34.0 - 2026-09-20

Other

v0.17.0

What's Changed

New Contributors

v0.16.0

v0.63.3

Fixes

v0.63.2

Security fixes

GHSA-g4mp-vgx3-xrvm - out-of-bounds read in pageant

GHSA-35g8-35p8-c8fw - unbounded memory allocation in server

Fixes

v0.63.1

Security fixes

GHSA-47hw-gvq5-r2gm - client-side Handler callbacks reachable with invalid channel IDs

GHSA-p8qx-h547-fjw9 - MAC-requiring block cipher can be negotiated without MAC and panic

v0.63.0

Features

Fixes

gix-odb v0.85.0

Changed (BREAKING)

Performance

gix-pack v0.75.0

New Features

Bug Fixes

gix-object v0.65.0

New Features

Bug Fixes

Uh oh!

coderabbitai Bot commented Oct 4, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 4, 2026 •

edited

Loading

GHSA-g4mp-vgx3-xrvm - out-of-bounds read in `pageant`