Skip to content

chore(deps): bump turso_core from 0.8.0-pre.14 to 0.8.0 #2496

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chaliy merged 4 commits into from
Oct 3, 2026
Merged

chore(deps): bump turso_core from 0.8.0-pre.14 to 0.8.0 #2496

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
58a7f21
chore(deps): bump turso_core from 0.8.0-pre.14 to 0.8.0
dependabot[bot] Oct 2, 2026
d922ac7
chore(deps): certify turso 0.8.1 for cargo-vet
chaliy Oct 3, 2026
c190107
Merge branch 'main' into dependabot/cargo/turso_core-0.8.0
chaliy Oct 3, 2026
ddc5587
Merge remote-tracking branch 'origin/main' into db-2496
chaliy Oct 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 8 additions & 8 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

24 changes: 24 additions & 0 deletions supply-chain/audits.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -525,6 +525,12 @@ criteria = "safe-to-deploy"
delta = "0.8.0-pre.7 -> 0.8.0-pre.8"
notes = "Reviewed production delta: unchecked UTF8 requires all-ASCII aggregate; unique uninitialized Arc chunk assembly checks every index and complete size before assume_init. IO children link before submission, builder token prevents premature callbacks, SeqCst completion fires once with owned buffers. Transaction retry/abandonment retains write ownership and releases writer leases. Attached database sync is explicit; FTS storage remains in memory with descriptor bounds. No new host filesystem, network or process access. Source safety review, not formal transactional proof."

[[audits.turso_core]]
who = "Mykhailo Chalyi <mike@chaliy.name>"
criteria = "safe-to-deploy"
delta = "0.8.0-pre.14 -> 0.8.1"
notes = "Reviewed the 0.8.0-pre.14 -> 0.8.1 delta: the published source trees are byte-identical. Every file except Cargo.toml, Cargo.lock and .cargo_vcs_info.json hashes the same across the two releases (295 files, 293 of them Rust), and the three that differ carry only version strings plus the upstream release commit sha. Nothing to review beyond the version stamp; this is the stable cut of the pre-release already in use."

[[audits.turso_ext]]
who = "Mykhailo Chalyi <mike@chaliy.name>"
criteria = "safe-to-deploy"
Expand All @@ -537,6 +543,12 @@ criteria = "safe-to-deploy"
delta = "0.8.0-pre.11 -> 0.8.0-pre.14"
notes = "Reviewed the complete package diff: package versions, the vendored commit id, and one build-script fix replacing a cfg!(target_os = ...) test, which reports the *host* in a build script, with the CARGO_CFG_TARGET_OS env var, which reports the target. Extension source is otherwise unchanged; no new runtime, unsafe, or ambient capability."

[[audits.turso_ext]]
who = "Mykhailo Chalyi <mike@chaliy.name>"
criteria = "safe-to-deploy"
delta = "0.8.0-pre.14 -> 0.8.1"
notes = "Reviewed the 0.8.0-pre.14 -> 0.8.1 delta: the published source trees are byte-identical. Every file except Cargo.toml, Cargo.lock and .cargo_vcs_info.json hashes the same across the two releases (8 files, 6 of them Rust), and the three that differ carry only version strings plus the upstream release commit sha. Nothing to review beyond the version stamp; this is the stable cut of the pre-release already in use."

[[audits.turso_macros]]
who = "Mykhailo Chalyi <mike@chaliy.name>"
criteria = "safe-to-deploy"
Expand All @@ -549,6 +561,12 @@ criteria = "safe-to-deploy"
delta = "0.8.0-pre.11 -> 0.8.0-pre.14"
notes = "Reviewed the complete package diff: only the package version and the vendored commit id change. Macro source is byte-identical. No runtime, unsafe, host access, or build-script changes."

[[audits.turso_macros]]
who = "Mykhailo Chalyi <mike@chaliy.name>"
criteria = "safe-to-deploy"
delta = "0.8.0-pre.14 -> 0.8.1"
notes = "Reviewed the 0.8.0-pre.14 -> 0.8.1 delta: the published source trees are byte-identical. Every file except Cargo.toml, Cargo.lock and .cargo_vcs_info.json hashes the same across the two releases (13 files, 12 of them Rust), and the three that differ carry only version strings plus the upstream release commit sha. Nothing to review beyond the version stamp; this is the stable cut of the pre-release already in use."

[[audits.turso_parser]]
who = "Mykhailo Chalyi <mike@chaliy.name>"
criteria = "safe-to-deploy"
Expand All @@ -561,6 +579,12 @@ criteria = "safe-to-deploy"
delta = "0.8.0-pre.11 -> 0.8.0-pre.14"
notes = "Reviewed the complete package diff. Adds GENERATED ALWAYS to the column-constraint AST and its formatter; adds blob_literal_bytes, which decodes already-validated hex with chunks_exact(2) so the pairing is bounded (its expect() calls rest on the parser's prior validation); quotes identifiers that begin with a digit, which previously round-tripped as invalid unquoted SQL; and makes an unrecognised STORED/VIRTUAL token a parse error instead of silently yielding None. All safe Rust, fail-closed, no new unsafe or host capability."

[[audits.turso_parser]]
who = "Mykhailo Chalyi <mike@chaliy.name>"
criteria = "safe-to-deploy"
delta = "0.8.0-pre.14 -> 0.8.1"
notes = "Reviewed the 0.8.0-pre.14 -> 0.8.1 delta: the published source trees are byte-identical. Every file except Cargo.toml, Cargo.lock and .cargo_vcs_info.json hashes the same across the two releases (11 files, 9 of them Rust), and the three that differ carry only version strings plus the upstream release commit sha. Nothing to review beyond the version stamp; this is the stable cut of the pre-release already in use."

[[audits.twox-hash]]
who = "Mykhailo Chalyi <mike@chaliy.name>"
criteria = "safe-to-deploy"
Expand Down
Loading