Skip to content

Build(deps): bump serde-saphyr from 0.0.6 to 1.0.0 - #450

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/serde-saphyr-0.0.29
Open

Build(deps): bump serde-saphyr from 0.0.6 to 1.0.0#450
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/serde-saphyr-0.0.29

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps serde-saphyr from 0.0.6 to 1.0.0.

Release notes

Sourced from serde-saphyr's releases.

1.0.0 - first real release

From this release onward, we are adopting the 1.x.x semantic versioning (SemVer) scheme. This means that API changes will be clearly reflected in the version number: the major version indicates breaking changes, the minor version indicates backward-compatible additions, and the patch version indicates backward-compatible fixes. The current compatibility status is indicated by the accompanying badge.

This release adds some #[track_caller] and #[must_use] annotations where looks reasonable. There are not many other changes that is exactly the point: the crate seems serving community well enough.

1.0.0-rc.1 release preview

From this release onward, we are adopting the 1.x.x semantic versioning (SemVer) scheme. This means that API changes will be clearly reflected in the version number: the major version indicates breaking changes, the minor version indicates backward-compatible additions, and the patch version indicates backward-compatible fixes. The current compatibility status is indicated by the accompanying badge.

Some breaking changes were made at this point because this is the last good time to streamline the API. Please raise any issues you find with the API changes, or if you would like to propose something. The goal of the release preview is exactly not to go 2.x.x next week after release.

  • Options, SerializerOptions, Budget, and AliasLimits are now #[non_exhaustive]. Construct them with options!, ser_options!, budget!, and alias_limits!.
  • Removed the deprecated to_writer and to_writer_with_options APIs. Use to_fmt_writer* for fmt::Write or to_io_writer* for io::Write.
  • API compatibility check no guards compatibility with 1.0.0

Also

  • Fix core tag enforcement. In the previous version, !!str 42 is accepted as i32(42), and !!int true is accepted as bool(true). Core tag handling is now hardened, and such constructs no longer pass.
  • Fix: budget callbacks were sometimes not delivered on immediate breaches

0.0.29 Hardening release

  • Summarizing results of automated fuzzing and static analysis, robustness against malformed (bad intent) YAML input was further hardened.
  • Docker-compose, whose syntax serde-saphyr emulates, supports property nesting, so implemented nesting support for serde-saphyr as well. In the previous release, "${SET:-${B}}" with SET=value resolves to "value}".
  • Fixed incorrect acceptance on Rust's float grammar (inf/Infinity/nan). YAML 1.2 only recognizes the .inf/.nan forms.
  • Fixed caret misaligned in secondary snippet windows when line numbers exceed one digit
  • FoldStr wrapping now cares not to start a continuation line with a tab
  • Error reporting has been improved, showing location in some cases where previous versions were unable.
  • Remove base64 create from deserializer dependencies (faster build)
  • New version of (also hardened) granit-parser 0.0.7.

0.0.28 Property interpolation extensions and even faster builds

Significant extension of property interpolation ( @​CommanderStorm)

  • Added support for default property interpolation in plain scalars: ${NAME:-default} now resolves to default when NAME is unset or explicitly empty.
  • ${VAR}: Values that must be configured (DB URLs, API keys). An unset var is a misconfiguration, not something to paper over -> a loud error at parse time
  • ${VAR-fallback}: Empty value is meaningful and distinct from "not configured". F.ex. PREFIX="" -> "no prefix".
  • ${VAR:-fallback}: The "regular" default, so f.ex. ${PORT:-8080}
  • ${VAR+text}: F.ex. ${DEBUG+--verbose} emits the flag whenever DEBUG exists in the environment, regardless of value.
  • ${VAR:+text}: Same as above, but differentiating empty <-> null

Also

  • Fix #120 LastWins not honored when deserializing struct. This was implemented and well tested, but only with maps.
  • Reduced owning of comment strings (parsing very heavily commented YAML while discarding comments should be lighter on resources).
  • Fixed indentation enforcement (@​CommanderStorm), making sure it also works for multiline scalars.
  • Fixed tuple serialization (@​CommanderStorm)
  • New SingleQuoted<..> and DoubleQuoted<..> wrappers to emit quoted strings. SingleQuoted may provide additional safety, as control characters will be rejected (with error), rather than written as YAML escape sequences. NullableTilde<T> is like Option and emits tilde ( ~ ) rather than null.

Faster compilation times with serde_core

serde-saphyr now avoids compiling serde_derive by default. The crate core uses serde_core instead that allows building serde-saphyr in parallel with serde_derive. However this also means that we needed to drop the previously built-in (de)serialization support for some serde-saphyr own configuration and reporting types like Options. (De)serialization support for these types can be re-enabled with the new feature serde_derived_types:

serde-saphyr = { version = "...", features = ["serde_derived_types"] }
</tr></table> 

... (truncated)

Commits
  • 1b357a7 Prepare to release 1.0.0
  • ad5889e Move to .rc.2
  • cf58c9c Renived derived Debug from Error that is not very useful, forwarding to Displ...
  • d39ba62 Renived derived Debug from Error that is not very useful, forwarding to Displ...
  • eba8a51 Added #[track_caller] annotations
  • b3ce5a1 Added #[must_use] annotations
  • 808c8ea Update validator
  • 502a457 Simplify match
  • 48f188b Fix unnecessary wraps
  • e22174a Refactor MapSer
  • Additional commits viewable in compare view

@dependabot dependabot Bot added cargo Dependabot channel for Rust crate updates. dependencies Dependency updates, applied to every Dependabot pull request. labels Jul 28, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) July 28, 2026 00:34
codescene-access[bot]

This comment was marked as outdated.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/serde-saphyr-0.0.29 branch from dd1a939 to 253f305 Compare July 28, 2026 17:55
codescene-access[bot]

This comment was marked as outdated.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/serde-saphyr-0.0.29 branch from 253f305 to e4fb5a9 Compare July 30, 2026 03:34
codescene-access[bot]

This comment was marked as outdated.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/serde-saphyr-0.0.29 branch from e4fb5a9 to d25240c Compare August 5, 2026 22:21
codescene-access[bot]

This comment was marked as outdated.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/serde-saphyr-0.0.29 branch from d25240c to 2ba42f3 Compare August 13, 2026 23:41
codescene-access[bot]

This comment was marked as outdated.

Bumps [serde-saphyr](https://github.com/bourumir-wyngs/serde-saphyr) from 0.0.6 to 1.0.0.
- [Release notes](https://github.com/bourumir-wyngs/serde-saphyr/releases)
- [Changelog](https://github.com/bourumir-wyngs/serde-saphyr/blob/master/CHANGELOG.md)
- [Commits](bourumir-wyngs/serde-saphyr@0.0.6...1.0.0)

---
updated-dependencies:
- dependency-name: serde-saphyr
  dependency-version: 0.0.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Build(deps): bump serde-saphyr from 0.0.6 to 0.0.29 Build(deps): bump serde-saphyr from 0.0.6 to 1.0.0 Aug 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/serde-saphyr-0.0.29 branch from 2ba42f3 to 9336775 Compare August 16, 2026 02:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cargo Dependabot channel for Rust crate updates. dependencies Dependency updates, applied to every Dependabot pull request.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants