Skip to content

chore(deps): Bump the cargo-major group across 1 directory with 5 updates - #2579

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/products/breg/wasm-handler-sdk/cargo-major-75429cdda6
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/products/breg/wasm-handler-sdk/cargo-major-75429cdda6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 7, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the cargo-major group with 5 updates in the /products/breg/wasm-handler-sdk directory:

Package From To
der 0.7.10 0.8.2
miniz_oxide 0.8.5 0.9.1
pg_query 6.2.1 18.1.0
pkcs1 0.7.5 0.8.0
saphyr-parser 0.1.0 0.3.3

Updates der from 0.7.10 to 0.8.2

Commits

Updates miniz_oxide from 0.8.5 to 0.9.1

Changelog

Sourced from miniz_oxide's changelog.

0.9.1 - 2026-03-13

Bug Fixes

  • reject incomplete Huffman trees with max code length > 1 (#190) - (c40992a) - Lilith River
  • bump simd_adler32 dependency version (needed for wasm issue fix) - (a9b3756) - oyvindln

Other

  • add wasmtime to workflow for running tests with wasip1 - (f70ad10) - oyvindln
  • box LZOxide.codes on wasm32 to reduce stack allocation (#189) - (d0f3e0c) - Fabrício Bracht

0.9.0 - 2026-01-12

Version bump due to a minor API break for having to add enum variants. Many enums have been made non_exhaustive to make it easier to avoid API breaks in the future. The minimum rust version is now 1.60.

Bug Fixes

  • (deflate) simplify stored compression, fixes to updating compresson level after start - (c5a7662) - oyvindln
  • (deflate) make more stuff non_exhaustive, reduce deflate stack usage a tiny bit - (cd2d14f) - oyvindln
  • (miniz_oxide) make tdeflflush and compressionstrategy non exhaustive - (130d51d) - oyvindln
  • fix flush test, make new simpler init function for compressoroxide and make flag creation function const - (3bb0d51) - oyvindln
  • make more funtions const and make tinflstatus non_exhaustive - (84a94e8) - oyvindln

Documentation

  • (inflate) add documentation and doctest for decompress_slice_iter_to_slice - (97465ca) - oyvindln

Features

  • feat(deflate): add window_bits feature for deflate, don't set wbits - (e70e395) - oyvindln

Other

  • Implement support for partial flushes (#179) - (2ede365) - Jonathan Behrens
  • Add decompress_with_limit to handle ring buffers (#183) - (bac1abe) - peckpeck
  • Flush improvements (#185) - (0d276ac) - Jim Peters
  • Fix flush_block to always insert zlib header correctly (#187) - (414d9b8) - Jim Peters

0.8.9 - 2025-06-09

Other

  • Remove compiler-builtins from rustc-dep-of-std dependencies (#173) - (025c06e) - Trevor Gross

0.8.8 - 2025-04-08

... (truncated)

Commits

Updates pg_query from 6.2.1 to 18.1.0

Changelog

Sourced from pg_query's changelog.

18.1.0 2026-10-27

  • Upgrade to Postgres 18.6 (libpg_query 18.1.0)
    • Performance: libpg_query now uses upb instead of protobuf-c for serialization, which is substantially faster thanks to its built-in arena allocation, resulting in 2x faster runtime.
    • Robustness: overly deep queries now return a "stack depth limit exceeded" error instead of crashing the process (#348), and the deparser strictly checks unexpected pointer values in input parse trees instead of crashing
    • Parser: comments are now ignored when parsing queries (they are only significant for scanning), fixing parse errors for tokens like NOT /* comment */ IN (#378); PL/pgSQL statements without bodies now return an error instead of crashing (#363)
    • Parser: PL/pgSQL parsing reworked to use proper type definitions (Postgres 18.0.0), replacing the previous ad-hoc approach
    • Deparser: parentheses are now added based on operator precedence, fixing cases where deparsed SQL changed meaning or was invalid (#371)
    • Deparser: comment handling reworked for Postgres 18 multi-statement strings: comments between statements are no longer attributed to the following statement (relevant for deparse_comments_for_query)
    • normalize: support NOTIFY statements (#340) and fix handling of U& special constants in DefElem nodes (#347)
    • summary: fix a relation going missing when a CTE shares its name (#367) and fix a memory leak when the tree walk throws an error
  • Breaking: parse, fingerprint and summary now require parser/fingerprint options arguments, corresponding to the C pg_query_parse_opts, pg_query_fingerprint_opts and pg_query_summary APIs. Options accept ParserOptions/FingerprintOptions constants or raw integers; pass 0 for the defaults:
    • parse(statement, parser_options)
    • fingerprint(statement, parser_options, fingerprint_options)
    • summary(statement, parser_options, truncate_limit)
  • Breaking: deparse now requires a DeparseOptions argument, and all deparse convenience methods (ParseResult::deparse, protobuf::ParseResult::deparse, Node::deparse, NodeEnum::deparse, NodeRef::deparse, NodeMut::deparse) likewise require it, mirroring the C PostgresDeparseOpts struct (comments, pretty_print, indent_size, max_line_length, trailing_newline, commas_start_of_line); pass Default::default() for the previous plain behavior
  • Fingerprint values changed: fingerprinting now follows Postgres 18 query ID behavior. In SELECT/DML statements the relation alias (if present) replaces the relation name and schema names are ignored; sequences of 2+ digits

... (truncated)

Commits

Updates pkcs1 from 0.7.5 to 0.8.0

Commits

Updates saphyr-parser from 0.1.0 to 0.3.3

Commits
  • 9a60bea saphyr v0.3.3
  • eac3d1d CHANGELOG; update v0.3.3 release notes draft
  • 5d16228 Merge pull request #147 from wleeaf/fix/emitter-literal-cr-bom
  • abe2baf garden: add remote for @​wleeaf
  • 58916be fix(emitter): indent root literal blocks with document marker lines
  • af9a829 fix(emitter): keep trailing empty lines of multiline strings with |+
  • d629589 fix(emitter): don't write carriage returns or a BOM in literal blocks
  • eb0feb1 cargo: update clipboard-win to non-yanked version
  • 31fd871 saphyr v0.3.2
  • 2a3e03d Merge pull request #145 from spicysharkco/fix/emitter-quote-bom
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the cargo-major group with 5 updates in the /products/breg/wasm-handler-sdk directory:

| Package | From | To |
| --- | --- | --- |
| [der](https://github.com/RustCrypto/formats) | `0.7.10` | `0.8.2` |
| [miniz_oxide](https://github.com/Frommi/miniz_oxide) | `0.8.5` | `0.9.1` |
| [pg_query](https://github.com/pganalyze/pg_query.rs) | `6.2.1` | `18.1.0` |
| [pkcs1](https://github.com/RustCrypto/formats) | `0.7.5` | `0.8.0` |
| [saphyr-parser](https://github.com/saphyr-rs/saphyr) | `0.1.0` | `0.3.3` |



Updates `der` from 0.7.10 to 0.8.2
- [Commits](RustCrypto/formats@der/v0.7.10...der/v0.8.2)

Updates `miniz_oxide` from 0.8.5 to 0.9.1
- [Changelog](https://github.com/Frommi/miniz_oxide/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Frommi/miniz_oxide/commits)

Updates `pg_query` from 6.2.1 to 18.1.0
- [Changelog](https://github.com/pganalyze/pg_query.rs/blob/main/CHANGELOG.md)
- [Commits](pganalyze/pg_query.rs@v6.2.1...v18.1.0)

Updates `pkcs1` from 0.7.5 to 0.8.0
- [Commits](RustCrypto/formats@pkcs1/v0.7.5...pkcs1/v0.8.0)

Updates `saphyr-parser` from 0.1.0 to 0.3.3
- [Release notes](https://github.com/saphyr-rs/saphyr/releases)
- [Commits](saphyr-rs/saphyr@v0.1.0...v0.3.3)

---
updated-dependencies:
- dependency-name: der
  dependency-version: 0.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-major
- dependency-name: miniz_oxide
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-major
- dependency-name: pg_query
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-major
- dependency-name: pkcs1
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-major
- dependency-name: saphyr-parser
  dependency-version: 0.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from jeremi as a code owner November 7, 2026 01:22
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Rust implementation work. labels Nov 7, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Nov 7, 2026 •

Copy link
Copy Markdown
Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-07T01:25:43.259218Z b0baef4 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b0baef484d

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread Cargo.toml
# its own templates need, and states why in its manifest.
minijinja = { version = "2.24", default-features = false }
miniz_oxide = "=0.8.5"
miniz_oxide = "=0.9.1"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Update the root lockfile with the workspace dependency bumps

The root Cargo.lock still resolves miniz_oxide 0.8.5 (and likewise pg_query 6.2.1, pkcs1 0.7.5, and saphyr-parser 0.1.0); only the excluded WASM SDK lockfile was regenerated. Consequently, the root CI command cargo check --locked --workspace --all-targets must change the root lockfile to satisfy these new exact constraints, which --locked refuses, so the Rust gate cannot build this commit. Regenerate and commit the root Cargo.lock as well.

AGENTS.md reference: AGENTS.md:L333-L343

Useful? React with 👍 / 👎.

@dependabot @github

dependabot Bot commented on behalf of github Nov 7, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 7, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/products/breg/wasm-handler-sdk/cargo-major-75429cdda6 branch November 7, 2026 06:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Rust implementation work.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants