Skip to content

Bump the patch group with 2 updates - #1452

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/patch-c5224a82bb
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/patch-c5224a82bb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the patch group with 2 updates: cxx and serde_json.

Updates cxx from 1.0.202 to 1.0.204

Release notes

Sourced from cxx's releases.

1.0.204

  • Fix cross-language aliasing UB flagged by BorrowSanitizer in rust::String::c_str (#1764, #1765)

1.0.203

  • Find target dir from OUT_DIR when CARGO_TARGET_DIR is relative (#1763, thanks @​akashchamp)
Commits
  • c2413dc Release 1.0.204
  • 8f422a5 Lockfile update
  • 940cdca Merge pull request #1765 from dtolnay/data
  • ff695ed Add non-const data() for Vec<T> that goes through Rust exclusive ref
  • 01d04c9 Merge pull request #1764 from dtolnay/data
  • af17f39 Add non-const data() for String that goes through Rust exclusive ref
  • 7e86a38 Release 1.0.203
  • 001911c Lockfile update
  • f6abfe9 Generate http_archive size_bytes
  • 35b2b5d Merge pull request #1763 from akashchamp/fix-relative-target-dir
  • Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.152

Release notes

Sourced from serde_json's releases.

v1.0.152

Commits
  • c9f1e3b Release 1.0.152
  • 854fc70 Touch up PR 1347
  • 80a5406 Merge pull request #1347 from yuxi-liu-wired/pr/partialeq-f32
  • 76e44e2 Merge pull request 1346 from yuxi-liu-wired/pr/ap-negative-zero
  • d8bbd39 Value == f32 is false for numbers outside the range of f32
  • 65a38ed Keep the sign of -0 in Value with arbitrary_precision
  • afdf6fc Ignore clone_on_copy clippy lint in test
  • 577729e Resolve deprecated f64 constants warning
  • a3e9758 Merge pull request #1334 from xtqqczze/authors
  • 99edc94 Remove deprecated package authors field from Cargo.toml
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch group with 2 updates: [cxx](https://github.com/dtolnay/cxx) and [serde_json](https://github.com/serde-rs/json).


Updates `cxx` from 1.0.202 to 1.0.204
- [Release notes](https://github.com/dtolnay/cxx/releases)
- [Commits](dtolnay/cxx@1.0.202...1.0.204)

Updates `serde_json` from 1.0.151 to 1.0.152
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.151...v1.0.152)

---
updated-dependencies:
- dependency-name: cxx
  dependency-version: 1.0.204
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: serde_json
  dependency-version: 1.0.152
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Oct 17, 2026
@codecov

codecov Bot commented Oct 17, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (main@06902b9). Learn more about missing BASE report.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1452   +/-   ##
=======================================
  Coverage        ?   36.11%           
=======================================
  Files           ?       32           
  Lines           ?     1736           
  Branches        ?        0           
=======================================
  Hits            ?      627           
  Misses          ?     1109           
  Partials        ?        0           
Flag Coverage Δ
unittests 36.11% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #1455.

@dependabot dependabot Bot closed this Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/patch-c5224a82bb branch October 19, 2026 21:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants