Skip to content

fix(deps): bump the non-major-version-updates group with 3 updates - #31

Merged
MarshallOfSound merged 1 commit into
mainfrom
dependabot/cargo/non-major-version-updates-45f0c93e69
Oct 29, 2026
Merged

MarshallOfSound merged 1 commit into
mainfrom
dependabot/cargo/non-major-version-updates-45f0c93e69

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the non-major-version-updates group with 3 updates: napi, napi-derive and zip.

Updates napi from 3.14.2 to 3.15.0

Release notes

Sourced from napi's releases.

napi-v3.15.0

Added

  • (napi) cancel a ReadableStream through its Reader, and fix ReadableStream::cancel (#3623)

Fixed

  • (napi) set the custom GC aborted flag before Node closes its tsfn (#3626)
  • (napi) TypedArray input leaks and compat buffer copies on wasm (#3612)
  • (napi) copy managed array inputs (#3607)
  • (napi) reject a value of another class on builds without type tags (#3610)
  • (napi) drop unadopted class value and reset factory flag on failed conversion (#3603)
  • (napi) join the Tokio runtime threads at env teardown (#3592)
  • (napi) keep borrowed class args alive across AsyncTask/AsyncBlock (#3584)

Other

  • (cli) cover FreeBSD arm64 (#3620)
  • (cli) record the design behind the threaded WASI heap sync (#3581)
Commits
  • d9cb526 chore: release (#3575)
  • d3d4536 chore(deps): update oxc-node to v1 (#3635)
  • ebdac4b chore: add emnapi version
  • 72eafbe chore(deps): update release-plz/action action to v0.5.144 (#3633)
  • bafc7db chore(release): publish
  • 8603be9 chore(deps): update dependency oxfmt to ^0.74.0 (#3629)
  • 3caf68e chore(deps): update dependency vite to v8.3.3 [security] (#3632)
  • 0ad70a7 fix(cli): take over the WASI flavor of a binding a postbuild fallback swaps i...
  • 5547cd4 fix(cli): resolve null when the incarnation probe's spawn throws synchronousl...
  • b3bb7a4 feat(napi): cancel a ReadableStream through its Reader, and fix ReadableStrea...
  • Additional commits viewable in compare view

Updates napi-derive from 3.6.12 to 3.6.13

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.6.13

Other

  • update Cargo.toml dependencies
Commits
  • d9cb526 chore: release (#3575)
  • d3d4536 chore(deps): update oxc-node to v1 (#3635)
  • ebdac4b chore: add emnapi version
  • 72eafbe chore(deps): update release-plz/action action to v0.5.144 (#3633)
  • bafc7db chore(release): publish
  • 8603be9 chore(deps): update dependency oxfmt to ^0.74.0 (#3629)
  • 3caf68e chore(deps): update dependency vite to v8.3.3 [security] (#3632)
  • 0ad70a7 fix(cli): take over the WASI flavor of a binding a postbuild fallback swaps i...
  • 5547cd4 fix(cli): resolve null when the incarnation probe's spawn throws synchronousl...
  • b3bb7a4 feat(napi): cancel a ReadableStream through its Reader, and fix ReadableStrea...
  • Additional commits viewable in compare view

Updates zip from 9.0.4 to 9.0.5

Release notes

Sourced from zip's releases.

v9.0.5

🐛 Bug Fixes

  • use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
  • (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

  • Enable release-plz on backport branches in future (#1079)
Changelog

Sourced from zip's changelog.

9.0.5 - 2026-10-17

🐛 Bug Fixes

  • use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
  • (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

  • Enable release-plz on backport branches in future (#1079)
Commits
  • 0123ed1 chore: release v9.0.5 (#1093)
  • 00cf82b docs: Repeal policy of yanking versions with known vulnerabilities, add menti...
  • 52165b9 chore: Enable release-plz on backport branches in future (#1079)
  • ca51e64 docs: Remove doc links that break when doc build doesn't enable all features ...
  • 6639687 fix: use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
  • 5e06fa8 fix(write): prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)
  • b6f9fb8 Merge commit from fork
  • ea2ccfe Merge commit from fork
  • 8068ab4 Merge commit from fork
  • 0b51128 doc: Clarifications to security policy (#1074)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the non-major-version-updates group with 3 updates: [napi](https://github.com/napi-rs/napi-rs), [napi-derive](https://github.com/napi-rs/napi-rs) and [zip](https://github.com/zip-rs/zip2).


Updates `napi` from 3.14.2 to 3.15.0
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](napi-rs/napi-rs@napi-v3.14.2...napi-v3.15.0)

Updates `napi-derive` from 3.6.12 to 3.6.13
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](napi-rs/napi-rs@napi-derive-v3.6.12...napi-derive-v3.6.13)

Updates `zip` from 9.0.4 to 9.0.5
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v9.0.4...v9.0.5)

---
updated-dependencies:
- dependency-name: napi
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-version-updates
- dependency-name: napi-derive
  dependency-version: 3.6.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-version-updates
- dependency-name: zip
  dependency-version: 9.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 29, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 29, 2026 07:25
@dependabot dependabot Bot added the rust Pull requests that update rust code label Oct 29, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcargo/​napi@​3.14.2 ⏵ 3.15.08110093100100
Updatedcargo/​napi-derive@​3.6.12 ⏵ 3.6.139910093100100
Updatedcargo/​zip@​9.0.4 ⏵ 9.0.5100100 +7599100100

View full report

@claude claude Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code review found no issues

No high-confidence issues detected in this change.

@MarshallOfSound
MarshallOfSound merged commit 275c293 into main Oct 29, 2026
23 checks passed
@MarshallOfSound
MarshallOfSound deleted the dependabot/cargo/non-major-version-updates-45f0c93e69 branch October 29, 2026 08:18
@electron-npm-package-publisher

Copy link
Copy Markdown

🎉 This PR is included in version 1.0.8 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file released rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant