From 74f8aec5d79b20db23e19c5117633d780551554b Mon Sep 17 00:00:00 2001
From: Mykhailo Chalyi <mike@chaliy.name>
Date: Tue, 20 Oct 2026 11:27:22 +0000
Subject: [PATCH] chore(deps): bump rustyline to 19.0.0 and carry its vet
 exemption
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Dependabot proposed rustyline 18.0.1 -> 19.0.0 (#2765) but cannot edit
`supply-chain/config.toml`, so its `Audit` job fails on the new version with
nothing it can do about it. Carrying the bump and the exemption together is the
only shape that lands green.

A major bump, but no API migration: `bashkit-cli`'s `interactive` feature
compiles unchanged against 19.0.0, so the `Editor`/`Helper` surface
`src/interactive.rs` uses is unaffected.

The lockfile cascade is the larger part of the diff — rustyline 19 drops its
`cfg-if` edge and pulls `windows-sys` 0.52.0 -> 0.61.2 across the crates that
share it (`clipboard-win`, `rustix`, `rustls-native-certs`, `tempfile`,
`socket2`-adjacent shims) plus `getrandom` 0.3.4 -> 0.4.3 under `tempfile`.
`cargo vet` already covers every one of those, so rustyline itself is the only
unvetted crate, and its exemption moves 18.0.1 -> 19.0.0 rather than granting
trust to something new.

Verified on the pinned toolchain (1.95.0):
- `cargo build -p bashkit-cli` (default features, so `interactive` on) clean
- `cargo test -p bashkit-cli` 67/67 pass
- `cargo vet --locked` succeeds
- REPL smoke test through the real rustyline read loop:
  `printf 'echo hello-from-repl\nexit\n' | bashkit` prints `hello-from-repl`
  and exits 0
---
 Cargo.lock                    | 19 +++++++++----------
 crates/bashkit-cli/Cargo.toml |  2 +-
 supply-chain/config.toml      |  2 +-
 3 files changed, 11 insertions(+), 12 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 0c957da92..32a0c92e7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1029,7 +1029,7 @@ version = "3.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "faf9468729b8cbcea668e36183cb69d317348c2e08e994829fb56ebfdfbaac34"
 dependencies = [
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1779,7 +1779,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -4867,7 +4867,7 @@ dependencies = [
  "errno",
  "libc",
  "linux-raw-sys",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -4925,7 +4925,7 @@ dependencies = [
  "security-framework",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -4966,12 +4966,11 @@ dependencies = [
 
 [[package]]
 name = "rustyline"
-version = "18.0.1"
+version = "19.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "53f6a737db68eb1a8ccff86b584b2fc13eca6a7bb6f78ebc7c529547e3ab9684"
+checksum = "56e1d6bd81c2d5feafd2419138df9183c45a10a492c4e873b8b0acb8eb2b549e"
 dependencies = [
  "bitflags 2.13.2",
- "cfg-if",
  "clipboard-win",
  "home",
  "libc",
@@ -5667,10 +5666,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
 dependencies = [
  "fastrand",
- "getrandom 0.3.4",
+ "getrandom 0.4.3",
  "once_cell",
  "rustix",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -6769,7 +6768,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
diff --git a/crates/bashkit-cli/Cargo.toml b/crates/bashkit-cli/Cargo.toml
index 7dc458e93..a8967167a 100644
--- a/crates/bashkit-cli/Cargo.toml
+++ b/crates/bashkit-cli/Cargo.toml
@@ -43,7 +43,7 @@ bashkit = { path = "../bashkit", version = "0.19.0", default-features = false, f
 tokio = { workspace = true, features = ["macros", "net", "rt", "rt-multi-thread", "time", "io-std"] }
 clap.workspace = true
 anyhow.workspace = true
-rustyline = { version = "18", optional = true }
+rustyline = { version = "19", optional = true }
 terminal_size = { version = "0.4", optional = true }
 signal-hook = { version = "0.4", optional = true }
 
diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index f71744dd7..94c7631a0 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -1664,7 +1664,7 @@ version = "0.3.1"
 criteria = "safe-to-run"
 
 [[exemptions.rustyline]]
-version = "18.0.1"
+version = "19.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.ryu]]