From e14de161d908ceb045b6ddcb59b1bd942f090f7c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 1 Jun 2026 03:56:32 +0000
Subject: [PATCH 01/34] chore(deps): Update pre-commit hook crate-ci/typos to
v1.47.0
---
.pre-commit-config.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 4b9311b5..c43d2f2f 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -10,7 +10,7 @@ repos:
- id: check-case-conflict
- id: detect-private-key
- repo: https://github.com/crate-ci/typos
- rev: v1.45.0
+ rev: v1.47.0
hooks:
- id: typos
- repo: https://github.com/crate-ci/committed
From 96e9da2db6afbaf1d575fb30e51f982a31dd1ea1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 4 Jun 2026 10:08:07 +0000
Subject: [PATCH 02/34] chore(deps): Update Prek to v0.4.4 (#77)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.3` β
`0.4.4` |
---
### Release Notes
j178/prek (prek)
###
[`v0.4.4`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#044)
[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.3...v0.4.4)
Released on 2026-06-04.
##### Highlights
0.4.4 makes `prek run` easier to watch and easier to slice.
Hook stream output now shows a small live preview under the running hook
in the
progress UI. Long-running hooks no longer look stuck while they are
producing
logs, and failed hooks are easier to diagnose because recent output is
already
visible before the final result.
The new group selector lets a single config support different workflows.
Tag
hooks with `groups`, then select or exclude those groups at run time:
```yaml
repos:
- repo: local
hooks:
- id: format
name: Format Python
language: system
entry: ruff format
groups: [format, ci]
- id: lint
name: Lint Python
language: system
entry: ruff check
groups: [lint, ci]
```
```bash
prek run --all-files --group ci
prek run --all-files --no-group format
```
This is useful when local development, CI, slow validation, or
project-specific
checks need different hook sets without splitting the config.
##### Enhancements
- Add hook group filters to `prek run`
([#2141](https://redirect.github.com/j178/prek/pull/2141))
- Delay hook output preview rendering
([#2140](https://redirect.github.com/j178/prek/pull/2140))
- Stream hook output in progress UI
([#2136](https://redirect.github.com/j178/prek/pull/2136))
##### Bug fixes
- Fix intent-to-add stash restore
([#2143](https://redirect.github.com/j178/prek/pull/2143))
##### Documentation
- Document hook stage file input
([#2147](https://redirect.github.com/j178/prek/pull/2147))
##### Contributors
- [@j178](https://redirect.github.com/j178)
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 168e6b9f..f5659eda 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
- name: prek
uses: j178/prek-action@bdca6f102f98e2b4c7029491a53dfd366469e33d # v2.0.4
with:
- prek-version: '0.4.3'
+ prek-version: '0.4.4'
From a83fe36fca1196cc50053f93ac03245c987d046d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 15 Jun 2026 13:00:16 +0000
Subject: [PATCH 03/34] chore(deps): Update Prek to v0.4.5 (#78)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.4` β
`0.4.5` |
---
### Release Notes
j178/prek (prek)
###
[`v0.4.5`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#045)
[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.4...v0.4.5)
Released on 2026-06-15.
##### β¨Highlights
0.4.5 completes `prek`'s pre-commit language coverage. With R, Conda,
Perl,
and coursier now supported, `prek` supports every language available in
pre-commit, plus `prek`-only modern languages such as Bun and Deno.
This is full feature parity with pre-commit. The last major
compatibility gap
is closed, and `prek` is now on the path to 1.0.
##### π Sponsorship
If `prek` saves time for you or your team, please consider sponsoring
the
project on [GitHub Sponsors](https://redirect.github.com/sponsors/j178).
It helps keep
new features, performance work, and maintenance moving.
##### Enhancements
- Add `Perl` language support
([#2201](https://redirect.github.com/j178/prek/pull/2201))
- Add `R` language support
([#2206](https://redirect.github.com/j178/prek/pull/2206))
- Add `Conda` language support
([#2203](https://redirect.github.com/j178/prek/pull/2203))
- Add `coursier` language support
([#2194](https://redirect.github.com/j178/prek/pull/2194))
- Add group filters to list
([#2152](https://redirect.github.com/j178/prek/pull/2152))
- Remove legacy repo path support
([#2150](https://redirect.github.com/j178/prek/pull/2150))
- Skip cloning fully filtered remote repos
([#2151](https://redirect.github.com/j178/prek/pull/2151))
##### Performance
- Avoid building JSON trees in syntax hooks
([#2156](https://redirect.github.com/j178/prek/pull/2156))
- Scan mixed line endings without line vector
([#2160](https://redirect.github.com/j178/prek/pull/2160))
- Skip file scan for always-run no-filename hooks
([#2155](https://redirect.github.com/j178/prek/pull/2155))
- Use fixed buffer for EOF scan
([#2163](https://redirect.github.com/j178/prek/pull/2163))
- Use fixed buffer for private key scan
([#2164](https://redirect.github.com/j178/prek/pull/2164))
##### Bug fixes
- Fix pretty-format-json CRLF handling
([#2210](https://redirect.github.com/j178/prek/pull/2210))
- Handle missing blobs in diff snapshots
([#2211](https://redirect.github.com/j178/prek/pull/2211))
- Ignore coursier channel from working repo
([#2202](https://redirect.github.com/j178/prek/pull/2202))
##### Contributors
- [@j178](https://redirect.github.com/j178)
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index f5659eda..4c3142d0 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
- name: prek
uses: j178/prek-action@bdca6f102f98e2b4c7029491a53dfd366469e33d # v2.0.4
with:
- prek-version: '0.4.4'
+ prek-version: '0.4.5'
From 01a5a7082138599450413e950af9364312348a16 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 1 Jul 2026 02:10:13 +0000
Subject: [PATCH 04/34] chore(deps): Update dtolnay/rust-toolchain digest to
4be7066
---
.github/workflows/ci.yml | 18 +++++++++---------
.github/workflows/rust-next.yml | 4 ++--
2 files changed, 11 insertions(+), 11 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index eb2d4ac2..4a69ed04 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -47,7 +47,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+ uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
toolchain: ${{ matrix.rust }}
- name: Initialize cache
@@ -72,7 +72,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+ uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
toolchain: stable
- name: Initialize cache
@@ -95,11 +95,11 @@ jobs:
with:
persist-credentials: false
- name: Install stable Rust
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+ uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
toolchain: stable
- name: Install nightly Rust
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+ uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
toolchain: nightly
- name: Downgrade dependencies to minimal versions
@@ -114,7 +114,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+ uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
toolchain: stable
- name: Initialize cache
@@ -130,7 +130,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+ uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
toolchain: "1.96" # STABLE
- name: Initialize cache
@@ -148,7 +148,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+ uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
toolchain: "1.96" # STABLE
components: rustfmt
@@ -167,7 +167,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+ uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
toolchain: "1.96" # STABLE
components: clippy
@@ -200,7 +200,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+ uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
toolchain: stable
- name: Initialize cache
diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml
index 1500fba3..1dba26a4 100644
--- a/.github/workflows/rust-next.yml
+++ b/.github/workflows/rust-next.yml
@@ -37,7 +37,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+ uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
toolchain: ${{ matrix.rust }}
- name: Initialize cache
@@ -64,7 +64,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+ uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
toolchain: stable
- name: Initialize cache
From 24ecf3ebb7fc421ae0cd43dc2521d8b6888530ee Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 1 Jul 2026 02:12:11 +0000
Subject: [PATCH 05/34] chore(deps): Update compatible (actions) (#80)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | patch | `v6.0.2` β `v6.0.3` |
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) | action
| minor | `v1.47.0` β `v1.48.0` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | patch | `v4.36.0` β `v4.36.2` |
| [j178/prek-action](https://redirect.github.com/j178/prek-action) |
action | patch | `v2.0.4` β `v2.0.5` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | minor | `v2.81.1` β `v2.82.7` |
|
[zizmorcore/zizmor-action](https://redirect.github.com/zizmorcore/zizmor-action)
| action | patch | `v0.5.6` β `v0.5.7` |
---
### Release Notes
actions/checkout (actions/checkout)
###
[`v6.0.3`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.0.2...v6.0.3)
- Fix checkout init for SHA-256 repositories by
[@yaananth](https://redirect.github.com/yaananth) in
[#2439](https://redirect.github.com/actions/checkout/pull/2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by
[@yaananth](https://redirect.github.com/yaananth) in
[#2414](https://redirect.github.com/actions/checkout/pull/2414)
crate-ci/typos (crate-ci/typos)
###
[`v1.48.0`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.48.0)
[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.47.2...v1.48.0)
#### \[1.48.0] - 2026-06-30
##### Features
- Updated the dictionary with the [June
2026](https://redirect.github.com/crate-ci/typos/issues/1562) changes
###
[`v1.47.2`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.47.2)
[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.47.1...v1.47.2)
#### \[1.47.2] - 2026-06-04
##### Fixes
- Don't correct `inferrable`
- Correct unused `inferible` variant
###
[`v1.47.1`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.47.1)
[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.47.0...v1.47.1)
#### \[1.47.1] - 2026-06-03
##### Fixes
- Don't correct `requestors`
github/codeql-action (github/codeql-action)
###
[`v4.36.2`](https://redirect.github.com/github/codeql-action/releases/tag/v4.36.2)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.36.1...v4.36.2)
- Cache CodeQL CLI version information across Actions steps.
[#3943](https://redirect.github.com/github/codeql-action/pull/3943)
- Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status.
[#3937](https://redirect.github.com/github/codeql-action/pull/3937)
- Update default CodeQL bundle version to
[2.25.6](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6).
[#3948](https://redirect.github.com/github/codeql-action/pull/3948)
###
[`v4.36.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.36.1)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.36.0...v4.36.1)
No user facing changes.
j178/prek-action (j178/prek-action)
###
[`v2.0.5`](https://redirect.github.com/j178/prek-action/releases/tag/v2.0.5)
[Compare
Source](https://redirect.github.com/j178/prek-action/compare/v2.0.4...v2.0.5)
#### What's Changed
- Add musl Linux target support by
[@j178](https://redirect.github.com/j178) in
[#156](https://redirect.github.com/j178/prek-action/pull/156)
- Update known versions for prek 0.4.1 by
[@j178](https://redirect.github.com/j178) in
[#138](https://redirect.github.com/j178/prek-action/pull/138)
- Update known versions for prek 0.4.2 by
[@j178](https://redirect.github.com/j178) in
[#139](https://redirect.github.com/j178/prek-action/pull/139)
- Update known versions for prek 0.4.3 by
[@j178](https://redirect.github.com/j178) in
[#140](https://redirect.github.com/j178/prek-action/pull/140)
- Update known versions for prek 0.4.4 by
[@j178](https://redirect.github.com/j178) in
[#145](https://redirect.github.com/j178/prek-action/pull/145)
- Update known versions for prek 0.4.5 by
[@j178](https://redirect.github.com/j178) in
[#152](https://redirect.github.com/j178/prek-action/pull/152)
**Full Changelog**:
taiki-e/install-action (taiki-e/install-action)
###
[`v2.82.7`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.7):
2.82.7
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.6...v2.82.7)
- Update `tombi@latest` to 1.1.6.
- Update `kingfisher@latest` to 1.105.0.
- Update `gungraun-runner@latest` to 0.19.3.
- Update `editorconfig-checker@latest` to 3.8.0.
- Update `dprint@latest` to 0.55.1.
- Update `cargo-tarpaulin@latest` to 0.36.0.
###
[`v2.82.6`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.6):
2.82.6
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.5...v2.82.6)
- Update `vacuum@latest` to 0.29.7.
- Update `uv@latest` to 0.11.25.
- Update `syft@latest` to 1.46.0.
- Update `dprint@latest` to 0.55.0.
- Update `cargo-auditable@latest` to 0.7.5.
###
[`v2.82.5`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.5):
2.82.5
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.4...v2.82.5)
- Update `wasmtime@latest` to 46.0.1.
- Update `wasm-bindgen@latest` to 0.2.126.
- Update `vacuum@latest` to 0.29.6.
- Update `mise@latest` to 2026.6.14.
- Update `cargo-rdme@latest` to 2.1.0.
###
[`v2.82.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.4):
2.82.4
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.3...v2.82.4)
- Update `uv@latest` to 0.11.24.
- Update `mise@latest` to 2026.6.13.
- Update `just@latest` to 1.54.0.
- Update `biome@latest` to 2.5.1.
###
[`v2.82.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.3):
2.82.3
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.2...v2.82.3)
- Update `zizmor@latest` to 1.26.1.
- Update `wasmtime@latest` to 46.0.0.
- Update `tombi@latest` to 1.1.5.
- Update `mise@latest` to 2026.6.12.
- Update `kingfisher@latest` to 1.104.0.
- Update `cargo-tarpaulin@latest` to 0.35.5.
- Update `cargo-nextest@latest` to 0.9.138.
- Update `cargo-crap@latest` to 0.3.0.
- Update `cargo-binstall@latest` to 1.20.1.
- Update `cargo-rdme@latest` to 2.0.1.
###
[`v2.82.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.2):
2.82.2
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.1...v2.82.2)
- Update `xh@latest` to 0.26.1.
- Update `uv@latest` to 0.11.23.
- Update `trivy@latest` to 0.71.2.
- Update `sccache@latest` to 0.16.0.
###
[`v2.82.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.1):
2.82.1
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.0...v2.82.1)
- Update `vacuum@latest` to 0.29.4.
- Update `uv@latest` to 0.11.22.
- Update `osv-scanner@latest` to 2.4.0.
- Update `mise@latest` to 2026.6.11.
- Update `martin@latest` to 1.11.0.
- Update `just@latest` to 1.53.0.
- Update `cargo-zigbuild@latest` to 0.23.0.
###
[`v2.82.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.0):
2.82.0
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.11...v2.82.0)
- Support `cargo-vet`.
([#1908](https://redirect.github.com/taiki-e/install-action/pull/1908),
thanks [@jakewimmer](https://redirect.github.com/jakewimmer))
- Support `cargo-crap`.
([#1905](https://redirect.github.com/taiki-e/install-action/pull/1905),
thanks
[@BartoszCiesla](https://redirect.github.com/BartoszCiesla))
- Support `cargo-leptos`.
([#1903](https://redirect.github.com/taiki-e/install-action/pull/1903),
thanks [@404Simon](https://redirect.github.com/404Simon))
- Update `kingfisher@latest` to 1.103.0.
- Update `cargo-xwin@latest` to 0.23.0.
- Update `wasmtime@latest` to 45.0.2.
- Update `cargo-deny@latest` to 0.19.9.
- Update `prek@latest` to 0.4.5.
- Update `trivy@latest` to 0.71.1.
- Update `mise@latest` to 2026.6.10.
###
[`v2.81.11`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.11):
2.81.11
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.10...v2.81.11)
- Update `wasm-tools@latest` to 1.252.0.
- Update `wasm-bindgen@latest` to 0.2.125.
- Update `uv@latest` to 0.11.21.
- Update `protoc@latest` to 3.35.1.
- Update `mise@latest` to 2026.6.9.
- Update `jaq@latest` to 3.1.0.
- Update `cargo-insta@latest` to 1.48.0.
- Update `biome@latest` to 2.5.0.
###
[`v2.81.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.10):
2.81.10
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.9...v2.81.10)
- Update `tombi@latest` to 1.1.3.
- Update `release-plz@latest` to 0.3.159.
- Update `cosign@latest` to 3.1.1.
###
[`v2.81.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.9):
2.81.9
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.8...v2.81.9)
- Update `wasm-bindgen@latest` to 0.2.123.
- Update `tombi@latest` to 1.1.2.
- Update `parse-changelog@latest` to 0.6.17.
- Update `just@latest` to 1.52.0.
- Update `gungraun-runner@latest` to 0.19.2.
- Update `cargo-binstall@latest` to 1.20.0.
###
[`v2.81.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.8):
2.81.8
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.7...v2.81.8)
- Update `vacuum@latest` to 0.29.2.
- Update `parse-dockerfile@latest` to 0.1.7.
- Update `mise@latest` to 2026.6.1.
- Update `cargo-shear@latest` to 1.13.1.
###
[`v2.81.7`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.7):
2.81.7
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.6...v2.81.7)
- Update `wasmtime@latest` to 45.0.1.
- Update `vacuum@latest` to 0.29.1.
- Update `syft@latest` to 1.45.1.
- Update `rclone@latest` to 1.74.3.
- Update `cargo-audit@latest` to 0.22.2.
###
[`v2.81.6`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.6):
2.81.6
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.5...v2.81.6)
- Update `prek@latest` to 0.4.4.
- Update `cargo-shear@latest` to 1.13.0.
###
[`v2.81.5`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.5):
2.81.5
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.4...v2.81.5)
- Update `vacuum@latest` to 0.29.0.
- Update `uv@latest` to 0.11.19.
- Update `typos@latest` to 1.47.2.
- Update `mise@latest` to 2026.6.0.
###
[`v2.81.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.4):
2.81.4
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.3...v2.81.4)
- Update `vacuum@latest` to 0.28.4.
- Update `typos@latest` to 1.47.1.
- Update `syft@latest` to 1.45.0.
- Update `cargo-neat@latest` to 0.4.0.
- Update `cargo-mutants@latest` to 27.1.0.
###
[`v2.81.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.3):
2.81.3
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.2...v2.81.3)
- Update `vacuum@latest` to 0.28.3.
- Update `uv@latest` to 0.11.18.
- Update `trivy@latest` to 0.71.0.
###
[`v2.81.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.81.2):
2.81.2
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.81.1...v2.81.2)
- Update `mise@latest` to 2026.5.18.
- Update `cargo-semver-checks@latest` to 0.48.0.
zizmorcore/zizmor-action (zizmorcore/zizmor-action)
###
[`v0.5.7`](https://redirect.github.com/zizmorcore/zizmor-action/releases/tag/v0.5.7)
[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-action/compare/v0.5.6...v0.5.7)
1.26.1 is now available via the action
1.26.1 is now the default version of zizmor used by the action
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- "before 5am on the first day of the month"
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π» **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/audit.yml | 8 ++++----
.github/workflows/ci.yml | 22 +++++++++++-----------
.github/workflows/committed.yml | 2 +-
.github/workflows/pre-commit.yml | 4 ++--
.github/workflows/rust-next.yml | 8 ++++----
.github/workflows/spelling.yml | 4 ++--
.github/workflows/template.yml | 2 +-
7 files changed, 25 insertions(+), 25 deletions(-)
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index 3365eb58..b1e0bb46 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -43,7 +43,7 @@ jobs:
- advisories
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Lint advisories
@@ -63,7 +63,7 @@ jobs:
- bans licenses sources
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Lint bans
@@ -80,8 +80,8 @@ jobs:
actions: read # only needed for private or internal repos
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Run zizmor
- uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
+ uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index eb2d4ac2..5c42916b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -43,7 +43,7 @@ jobs:
CARGO_PROFILE_DEV_DEBUG: line-tables-only
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Install Rust
@@ -53,7 +53,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@e49978b799e49ff429d162b7a30601a569ab6538 # v2.81.1
+ uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
with:
tool: cargo-hack
- name: Build
@@ -68,7 +68,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Install Rust
@@ -78,7 +78,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@e49978b799e49ff429d162b7a30601a569ab6538 # v2.81.1
+ uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
with:
tool: cargo-hack
- name: Default features
@@ -91,7 +91,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Install stable Rust
@@ -110,7 +110,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Install Rust
@@ -126,7 +126,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Install Rust
@@ -144,7 +144,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Install Rust
@@ -163,7 +163,7 @@ jobs:
security-events: write # to upload sarif results
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Install Rust
@@ -185,7 +185,7 @@ jobs:
| sarif-fmt
continue-on-error: true
- name: Upload
- uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
+ uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
with:
sarif_file: clippy-results.sarif
wait-for-processing: true
@@ -196,7 +196,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Install Rust
diff --git a/.github/workflows/committed.yml b/.github/workflows/committed.yml
index 188c58be..cb8222f9 100644
--- a/.github/workflows/committed.yml
+++ b/.github/workflows/committed.yml
@@ -21,7 +21,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
fetch-depth: 0
persist-credentials: false
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 4c3142d0..ff2e5a52 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -23,10 +23,10 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: prek
- uses: j178/prek-action@bdca6f102f98e2b4c7029491a53dfd366469e33d # v2.0.4
+ uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
with:
prek-version: '0.4.5'
diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml
index 1500fba3..15fc11fd 100644
--- a/.github/workflows/rust-next.yml
+++ b/.github/workflows/rust-next.yml
@@ -33,7 +33,7 @@ jobs:
CARGO_PROFILE_DEV_DEBUG: line-tables-only
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Install Rust
@@ -43,7 +43,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@e49978b799e49ff429d162b7a30601a569ab6538 # v2.81.1
+ uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
with:
tool: cargo-hack
- name: Build
@@ -60,7 +60,7 @@ jobs:
CARGO_RESOLVER_INCOMPATIBLE_RUST_VERSIONS: allow
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Install Rust
@@ -70,7 +70,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@e49978b799e49ff429d162b7a30601a569ab6538 # v2.81.1
+ uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
with:
tool: cargo-hack
- name: Update dependencies
diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
index ef111e11..366e7f84 100644
--- a/.github/workflows/spelling.yml
+++ b/.github/workflows/spelling.yml
@@ -20,8 +20,8 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout Actions Repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- name: Spell Check Repo
- uses: crate-ci/typos@f8a58b6b53f2279f71eb605f03a4ae4d10608f45 # v1.47.0
+ uses: crate-ci/typos@bee27e3a4fd1ea2111cf90ab89cd076c870fce14 # v1.48.0
diff --git a/.github/workflows/template.yml b/.github/workflows/template.yml
index 0ca8d2d5..36a9c000 100644
--- a/.github/workflows/template.yml
+++ b/.github/workflows/template.yml
@@ -28,7 +28,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
fetch-depth: 0
persist-credentials: true # to push the branch and create PR
From 425b5d6282e4c1b08a51ed7e1761a88caad522a0 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 1 Jul 2026 11:20:50 +0000
Subject: [PATCH 06/34] chore(deps): Update Prek to v0.4.6 (#81)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.5` β
`0.4.6` |
---
### Release Notes
j178/prek (prek)
###
[`v0.4.6`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#046)
[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.5...v0.4.6)
Released on 2026-07-01.
##### Enhancements
- Verify managed toolchain downloads before installation
([#2229](https://redirect.github.com/j178/prek/pull/2229))
- Add `PREK_DOCKER_NO_INIT` to opt-out Docker `--init`
([#2242](https://redirect.github.com/j178/prek/pull/2242))
- Improve subprocess error messages
([#2257](https://redirect.github.com/j178/prek/pull/2257))
- Split run concurrency knobs: `PREK_CONCURRENT_HOOKS` and
`PREK_CONCURRENT_BATCHES`
([#2276](https://redirect.github.com/j178/prek/pull/2276))
##### Performance
- Avoid allocating markdown extensions per file
([#2245](https://redirect.github.com/j178/prek/pull/2245))
- Avoid unchanged config tracking writes
([#2247](https://redirect.github.com/j178/prek/pull/2247))
- Delay trailing whitespace output buffer
([#2244](https://redirect.github.com/j178/prek/pull/2244))
- Prefilter VCS permalink lines
([#2253](https://redirect.github.com/j178/prek/pull/2253))
- Skip unnecessary submodule updates during hook repo clone
([#2255](https://redirect.github.com/j178/prek/pull/2255))
##### Documentation
- Document `language_version` inferring for Python and Go
([#2241](https://redirect.github.com/j178/prek/pull/2241))
##### Other changes
- Refactor env var handling
([#2277](https://redirect.github.com/j178/prek/pull/2277))
- Use `serde-saphyr` for YAML string quoting
([#2228](https://redirect.github.com/j178/prek/pull/2228))
##### Contributors
- [@shaanmajid](https://redirect.github.com/shaanmajid)
- [@j178](https://redirect.github.com/j178)
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index ff2e5a52..3ad75521 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
- name: prek
uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
with:
- prek-version: '0.4.5'
+ prek-version: '0.4.6'
From fa12fcbc623c9622b26b6cb9406e768109d4ed3d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 4 Jul 2026 13:54:38 +0000
Subject: [PATCH 07/34] chore(deps): Update Prek to v0.4.8 (#82)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.6` β
`0.4.8` |
---
### Release Notes
j178/prek (prek)
###
[`v0.4.8`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#048)
[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.6...v0.4.8)
Released on 2026-07-04.
##### Enhancements
- Add default\_env configuration
([#2288](https://redirect.github.com/j178/prek/pull/2288))
- Rename `auto-update` to `update`
([#2286](https://redirect.github.com/j178/prek/pull/2286))
##### Bug fixes
- Fix progress collapse ordering
([#2291](https://redirect.github.com/j178/prek/pull/2291))
- Fix progress insertion after collapsed rows
([#2292](https://redirect.github.com/j178/prek/pull/2292))
##### Contributors
- [@j178](https://redirect.github.com/j178)
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 3ad75521..82b2cb7a 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
- name: prek
uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
with:
- prek-version: '0.4.6'
+ prek-version: '0.4.8'
From fcc3bc8eae7eb7a19107c786592409f5e67afa85 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 9 Jul 2026 15:51:17 +0000
Subject: [PATCH 08/34] chore(deps): Update Rust Stable to v1.97 (#83)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [STABLE](https://redirect.github.com/rust-lang/rust) | minor | `1.96`
β `1.97` |
---
### Release Notes
rust-lang/rust (STABLE)
###
[`v1.97`](https://redirect.github.com/rust-lang/rust/blob/HEAD/RELEASES.md#Version-1970-2026-07-09)
[Compare
Source](https://redirect.github.com/rust-lang/rust/compare/1.96.0...1.97.0)
\==========================
## Language
- [Consider `Result` and `ControlFlow`
to be equivalent to `T` for must use
lint](https://redirect.github.com/rust-lang/rust/pull/148214)
- [Add allow-by-default `dead_code_pub_in_binary` lint for unused pub
items in binary
crates](https://redirect.github.com/rust-lang/rust/pull/149509)
- [Stabilize the `div32`, `lam-bh`, `lamcas`, `ld-seq-sa` and `scq`
target features](https://redirect.github.com/rust-lang/rust/pull/154510)
- [Stabilize
`cfg(target_has_atomic_primitive_alignment)`](https://redirect.github.com/rust-lang/rust/pull/155006)
- [Allow trailing `self` in imports in more
cases](https://redirect.github.com/rust-lang/rust/pull/155137)
## Platform Support
- [nvptx64-nvidia-cuda: drop support for old architectures and old
ISAs](https://redirect.github.com/rust-lang/rust/pull/152443)
Refer to Rust's [platform support page][platform-support-doc]
for more information on Rust's tiered platform support.
[platform-support-doc]:
https://doc.rust-lang.org/rustc/platform-support.html
## Stabilized APIs
- [`Default for
RepeatN`](https://doc.rust-lang.org/stable/std/iter/struct.RepeatN.html#impl-Default-for-RepeatN%3CA%3E)
- [`Copy for
ffi::FromBytesUntilNulError`](https://doc.rust-lang.org/stable/std/ffi/struct.FromBytesUntilNulError.html#impl-Copy-for-FromBytesUntilNulError)
- [`Send for std::fs::File` on
UEFI](https://redirect.github.com/rust-lang/rust/pull/154003)
-
[`<{integer}>::isolate_highest_one`](https://doc.rust-lang.org/stable/std/primitive.u32.html#method.isolate_highest_one)
-
[`<{integer}>::isolate_lowest_one`](https://doc.rust-lang.org/stable/std/primitive.u32.html#method.isolate_lowest_one)
-
[`<{integer}>::highest_one`](https://doc.rust-lang.org/stable/std/primitive.u32.html#method.highest_one)
-
[`<{integer}>::lowest_one`](https://doc.rust-lang.org/stable/std/primitive.u32.html#method.lowest_one)
-
[`<{integer}>::bit_width`](https://doc.rust-lang.org/stable/std/primitive.u32.html#method.bit_width)
-
[`NonZero<{integer}>::isolate_highest_one`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.isolate_highest_one)
-
[`NonZero<{integer}>::isolate_lowest_one`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.isolate_lowest_one)
-
[`NonZero<{integer}>::highest_one`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.highest_one)
-
[`NonZero<{integer}>::lowest_one`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.lowest_one)
-
[`NonZero<{integer}>::bit_width`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.bit_width)
These previously stable APIs are now stable in const contexts:
-
[`char::is_control`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.is_control)
## Cargo
- [Stabilize `build.warnings`
config.](https://redirect.github.com/rust-lang/cargo/pull/16796) This
controls how lint warnings from local packages are treated. Useful for
enforcing a warning-free build in CI, replacing `-Dwarnings`.
[docs](https://doc.rust-lang.org/nightly/cargo/reference/config.html#buildwarnings)
- [Stabilize `resolver.lockfile-path`
config.](https://redirect.github.com/rust-lang/cargo/pull/16694) This
allows specifying the path to the lockfile to use when resolving
dependencies. Useful when working with read-only source directories.
[docs](https://doc.rust-lang.org/nightly/cargo/reference/config.html#resolverlockfile-path)
- [cargo-clean: Error when `--target-dir` doesn't look like a Cargo
target
directory.](https://redirect.github.com/rust-lang/cargo/pull/16712) This
prevents accidental deletion of non-target directories.
- [Add `-m` shorthand for
`--manifest-path`](https://redirect.github.com/rust-lang/cargo/pull/16858)
- [Remove `curl` dependency from `crates-io`
crate](https://redirect.github.com/rust-lang/cargo/pull/16936)
## Rustdoc
- [Stabilize `--emit`
flag](https://redirect.github.com/rust-lang/rust/pull/146220)
- [Stabilize
`--remap-path-prefix`](https://redirect.github.com/rust-lang/rust/pull/155307)
## Compatibility Notes
- [Emit a future-compatibility warning when relying on `f32:
From<{float}>` to constrain
`{float}`](https://redirect.github.com/rust-lang/rust/pull/139087)
- [Rust will use the v0 symbol mangling scheme by
default.](https://redirect.github.com/rust-lang/rust/pull/151994) This
may cause some tools (such as debuggers or profilers, especially with
old versions) to fail to demangle symbols emitted by Rust. It may also
cause the formatting of text in backtraces to change.
- [Prevent deref coercions in `pin!`, in order to prevent
unsoundness.](https://redirect.github.com/rust-lang/rust/pull/153457)
The most likely case where this might impact users is: writing `pin!(x)`
where `x` has type `&mut T` will now always correctly produce a value of
type `Pin<&mut &mut T>`, instead of sometimes allowing a coercion that
produces a value of type `Pin<&mut T>`. This coercion was previously
incorrectly allowed since Rust 1.88.0.
- [Deprecate `std::char` constants and
functions](https://redirect.github.com/rust-lang/rust/pull/153873)
- [Warn on linker output by
default](https://redirect.github.com/rust-lang/rust/pull/153968)
- [Remove hidden `f64` methods which have been deprecated since
1.0](https://redirect.github.com/rust-lang/rust/pull/153975)
- [report the `varargs_without_pattern` lint in
deps](https://redirect.github.com/rust-lang/rust/pull/154599)
- [Forbid passing generic arguments to module path segments even if the
module reexports a generic enum
variant](https://redirect.github.com/rust-lang/rust/pull/154971)
- [Error on invalid macho `link_section`
specifier](https://redirect.github.com/rust-lang/rust/pull/155065)
- The encoding of certain `enum`s [have
changed](https://redirect.github.com/rust-lang/rust/pull/155473). This
is not a breaking change, as it only applies to `enum`s without layout
guarantees, but is noted here as we've seen people impacted from having
made assumptions about the layout algorithm.
- [Error on `#[export_name = "..."]` where the name is
empty](https://redirect.github.com/rust-lang/rust/pull/155515)
- [Syntactically reject tuple index shorthands in struct
patterns](https://redirect.github.com/rust-lang/rust/pull/155698)
- [validate `#[link_name = "..."]` & `#[link(name = "...")]`
parameters](https://redirect.github.com/rust-lang/rust/pull/155817)
- On Windows, after calling `shutdown` on a socket to shut down the
write side, attempting to write to the socket will now produce a
`BrokenPipe` error rather than `Other`. [Map `WSAESHUTDOWN` to
`io::ErrorKind::BrokenPipe`](https://redirect.github.com/rust-lang/rust/pull/156063)
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/ci.yml | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 61fdefa0..04683418 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -132,7 +132,7 @@ jobs:
- name: Install Rust
uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
- toolchain: "1.96" # STABLE
+ toolchain: "1.97" # STABLE
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Check documentation
@@ -150,7 +150,7 @@ jobs:
- name: Install Rust
uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
- toolchain: "1.96" # STABLE
+ toolchain: "1.97" # STABLE
components: rustfmt
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
@@ -169,7 +169,7 @@ jobs:
- name: Install Rust
uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with:
- toolchain: "1.96" # STABLE
+ toolchain: "1.97" # STABLE
components: clippy
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
From 0da98536e0bda2e216c0d7360a2eea8613fda31a Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Thu, 9 Jul 2026 16:57:22 -0500
Subject: [PATCH 09/34] chore(ci): Update lint list for new Rust release
---
Cargo.toml | 1 +
1 file changed, 1 insertion(+)
diff --git a/Cargo.toml b/Cargo.toml
index 42b21160..4a41143a 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -32,6 +32,7 @@ unused_qualifications = "warn"
allow_attributes_without_reason = "warn"
bool_assert_comparison = "allow"
branches_sharing_code = "allow"
+byte_char_slices = "allow" # sometimes explicit arrays are better
cast_possible_truncation = "warn"
cast_possible_wrap = "warn"
cast_sign_loss = "warn"
From 9e6f6e7745cfe5140e325452d3a3b2a9c5e34ce5 Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Fri, 10 Jul 2026 08:32:37 -0500
Subject: [PATCH 10/34] chore(ci): Leverage CARGO_BUILD_WARNINGS
---
.github/workflows/ci.yml | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 04683418..064cf8b3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -137,7 +137,7 @@ jobs:
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Check documentation
env:
- RUSTDOCFLAGS: -D warnings
+ CARGO_BUILD_WARNINGS: deny
run: cargo doc --workspace --all-features --no-deps --document-private-items --keep-going
rustfmt:
name: rustfmt
@@ -190,7 +190,9 @@ jobs:
sarif_file: clippy-results.sarif
wait-for-processing: true
- name: Report status
- run: cargo clippy --workspace --all-features --all-targets --keep-going -- -D warnings --allow deprecated
+ env:
+ CARGO_BUILD_WARNINGS: deny
+ run: cargo clippy --workspace --all-features --all-targets --keep-going -- --allow deprecated
coverage:
name: Coverage
runs-on: ubuntu-latest
From f15c1f60c91cffbbe6b9a810a2cde532368a18b2 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 11 Jul 2026 13:39:52 +0000
Subject: [PATCH 11/34] chore(deps): Update Prek to v0.4.9 (#84)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.8` β
`0.4.9` |
---
### Release Notes
j178/prek (prek)
###
[`v0.4.9`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#049)
[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.8...v0.4.9)
Released on 2026-07-11.
Note: This release changes the repository identity schema stored in
cached hook environments. Existing
hook environments will be invalidated, and prek will reinstall them
automatically when needed.
##### Enhancements
- Preserve additional dependency order
([#2311](https://redirect.github.com/j178/prek/pull/2311))
- Remove parallel Ruby gem installation
([#2307](https://redirect.github.com/j178/prek/pull/2307))
- Warn for missing update repositories
([#2316](https://redirect.github.com/j178/prek/pull/2316))
##### Bug fixes
- Fix mixed workspace selectors
([#2306](https://redirect.github.com/j178/prek/pull/2306))
- Fix try-repo local path resolution
([#2310](https://redirect.github.com/j178/prek/pull/2310))
- Use resolved gem executable
([#2308](https://redirect.github.com/j178/prek/pull/2308))
- Validate complete XML documents in check-xml
([#2312](https://redirect.github.com/j178/prek/pull/2312))
##### Contributors
- [@j178](https://redirect.github.com/j178)
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 82b2cb7a..7b8fe04c 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
- name: prek
uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
with:
- prek-version: '0.4.8'
+ prek-version: '0.4.9'
From 4b9061d62ad5f5f0734532054345956295bffaf0 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 16 Jul 2026 16:48:37 +0000
Subject: [PATCH 12/34] chore(deps): Update Prek to v0.4.10 (#85)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.9` β
`0.4.10` |
---
### Release Notes
j178/prek (prek)
###
[`v0.4.10`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#0410)
[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.9...v0.4.10)
Released on 2026-07-16.
##### Enhancements
- Add PHP language support
([#2314](https://redirect.github.com/j178/prek/pull/2314))
- Add freeze option to update settings
([#2323](https://redirect.github.com/j178/prek/pull/2323))
- Add tag filters to update configuration
([#2354](https://redirect.github.com/j178/prek/pull/2354))
- Identify 'mts' and 'cts' as TypeScript files
([#2209](https://redirect.github.com/j178/prek/pull/2209))
- Publish Alpine Docker images
([#2352](https://redirect.github.com/j178/prek/pull/2352))
- Support builtin and meta in try-repo
([#2350](https://redirect.github.com/j178/prek/pull/2350))
##### Bug fixes
- Fix Python discovery order
([#2348](https://redirect.github.com/j178/prek/pull/2348))
- Fix Windows progress rendering
([#2328](https://redirect.github.com/j178/prek/pull/2328))
- Preserve configured repo values for updates
([#2324](https://redirect.github.com/j178/prek/pull/2324))
- Scope synthetic `GIT_WORK_TREE` to git commands
([#2356](https://redirect.github.com/j178/prek/pull/2356))
##### Documentation
- Expand common workflows guide
([#2351](https://redirect.github.com/j178/prek/pull/2351))
##### Contributors
- [@j178](https://redirect.github.com/j178)
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 7b8fe04c..0e72febd 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
- name: prek
uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
with:
- prek-version: '0.4.9'
+ prek-version: '0.4.10'
From 6b2a60bd3ab154a5aa96d65fdc35ef8641be75ee Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Fri, 17 Jul 2026 19:48:19 -0500
Subject: [PATCH 13/34] chore(ci): Switch to github's coverage reporting
---
.github/workflows/ci.yml | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 064cf8b3..118b7086 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -196,6 +196,8 @@ jobs:
coverage:
name: Coverage
runs-on: ubuntu-latest
+ permissions:
+ code-quality: write
steps:
- name: Checkout repository
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
@@ -210,8 +212,10 @@ jobs:
- name: Install cargo-tarpaulin
run: cargo install cargo-tarpaulin
- name: Gather coverage
- run: cargo tarpaulin --output-dir coverage --out lcov
- - name: Publish to Coveralls
- uses: coverallsapp/github-action@09b709cf6a16e30b0808ba050c7a6e8a5ef13f8d # master
+ run: cargo tarpaulin --out xml
+ - name: Upload coverage report
+ if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
+ uses: actions/upload-code-coverage@a72ab75b4dee0e479386fb9bf33c8dcf64b9c772 # v1.4.0
with:
- github-token: ${{ secrets.GITHUB_TOKEN }}
+ file: cobertura.xml
+ language: Rust
From ec06cca391825fdca72bc4f1372c896454852afb Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 20 Jul 2026 21:36:03 +0000
Subject: [PATCH 14/34] chore(deps): Update pre-commit hook crate-ci/committed
to v1.1.11
---
.pre-commit-config.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index c43d2f2f..4eef4a84 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -14,7 +14,7 @@ repos:
hooks:
- id: typos
- repo: https://github.com/crate-ci/committed
- rev: v1.1.10
+ rev: v1.1.11
hooks:
- id: committed
- repo: https://github.com/zizmorcore/zizmor-pre-commit
From a52cd8ac45cac2f1600c6ba54e38049454e04184 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 24 Jul 2026 23:53:14 +0000
Subject: [PATCH 15/34] chore(deps): Update Prek to v0.4.11 (#86)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.10` β
`0.4.11` |
---
### Release Notes
j178/prek (prek)
###
[`v0.4.11`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#0411)
[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.10...v0.4.11)
Released on 2026-07-25.
##### Highlights
- This release adds two new builtin hooks, `deny-pattern` and
`require-pattern`,
as native alternatives for `pygrep` use cases. `deny-pattern` fails when
a
configured pattern is found, while `require-pattern` ensures every
selected
file contains a match. By matching natively without spawning a Python
subprocess, they run over 4x faster than `pygrep` in benchmarks. Note
that
they use
[Rust `regex` syntax](https://docs.rs/regex/latest/regex/#syntax), which
does
not support look-around features such as negative lookbehind.
- `prek run` now supports `--glob ` to run hooks on tracked
files
matching a glob. It can be repeated or combined with `--files` and
`--directory`.
- Hook priorities now support reusable aliases:
```toml
[priorities]
checks = 10
[[repos]]
repo = "builtin"
hooks = [
{ id = "check-json", priority = "checks" },
{ id = "check-yaml", priority = "checks" },
]
```
This makes parallel scheduling easier to read and maintain.
##### Enhancements
- Add `deny-pattern` and `require-pattern` builtin hooks
([#2359](https://redirect.github.com/j178/prek/pull/2359))
- Support `--glob` patterns in `prek run`
([#2381](https://redirect.github.com/j178/prek/pull/2381))
- Support reusable aliases for hook priorities
([#2331](https://redirect.github.com/j178/prek/pull/2331))
- Implement `requirements-txt-fixer` as a builtin hook
([#2390](https://redirect.github.com/j178/prek/pull/2390))
- Improve user-facing warnings and errors
([#2380](https://redirect.github.com/j178/prek/pull/2380))
- Install Node hooks through git url
([#2394](https://redirect.github.com/j178/prek/pull/2394))
##### Performance
- Reduce blocking-pool overhead in file hooks
([#2384](https://redirect.github.com/j178/prek/pull/2384))
- Speed up mixed-line-ending scans with memchr2
([#2391](https://redirect.github.com/j178/prek/pull/2391))
##### Bug fixes
- Honor filenames in builtin hook entry and args
([#2389](https://redirect.github.com/j178/prek/pull/2389))
- Match identify tags across filename parts
([#2399](https://redirect.github.com/j178/prek/pull/2399))
- Preserve hook output order with a shared pipe
([#2385](https://redirect.github.com/j178/prek/pull/2385))
- Preserve system download policy when applying metadata
([#2395](https://redirect.github.com/j178/prek/pull/2395))
##### Contributors
- [@j178](https://redirect.github.com/j178)
- [@chrisoro](https://redirect.github.com/chrisoro)
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 0e72febd..97a74e9c 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
- name: prek
uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
with:
- prek-version: '0.4.10'
+ prek-version: '0.4.11'
From 58030671344f2b87b09704e8df6eb0f2bfaf0723 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 01:38:27 +0000
Subject: [PATCH 16/34] chore(deps): Update dtolnay/rust-toolchain digest to
4cda84d
---
.github/workflows/ci.yml | 18 +++++++++---------
.github/workflows/rust-next.yml | 4 ++--
2 files changed, 11 insertions(+), 11 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 118b7086..e3bd3735 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -47,7 +47,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: ${{ matrix.rust }}
- name: Initialize cache
@@ -72,7 +72,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: stable
- name: Initialize cache
@@ -95,11 +95,11 @@ jobs:
with:
persist-credentials: false
- name: Install stable Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: stable
- name: Install nightly Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: nightly
- name: Downgrade dependencies to minimal versions
@@ -114,7 +114,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: stable
- name: Initialize cache
@@ -130,7 +130,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: "1.97" # STABLE
- name: Initialize cache
@@ -148,7 +148,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: "1.97" # STABLE
components: rustfmt
@@ -167,7 +167,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: "1.97" # STABLE
components: clippy
@@ -204,7 +204,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: stable
- name: Initialize cache
diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml
index a6545729..03201670 100644
--- a/.github/workflows/rust-next.yml
+++ b/.github/workflows/rust-next.yml
@@ -37,7 +37,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: ${{ matrix.rust }}
- name: Initialize cache
@@ -64,7 +64,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: stable
- name: Initialize cache
From bf018bb3575255ff638a1d01c8a466bbaa0ede80 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 01:40:14 +0000
Subject: [PATCH 17/34] chore(deps): Update compatible (actions) (#88)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[EmbarkStudios/cargo-deny-action](https://redirect.github.com/EmbarkStudios/cargo-deny-action)
| action | minor | `v2.0.20` β `v2.1.1` |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | minor | `v6.0.3` β `v6.1.0` |
|
[actions/upload-code-coverage](https://redirect.github.com/actions/upload-code-coverage)
| action | patch | `v1.4.0` β `v1.4.1` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v4.36.2` β `v4.37.4` |
| [j178/prek-action](https://redirect.github.com/j178/prek-action) |
action | patch | `v2.0.5` β `v2.0.6` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | minor | `v2.82.7` β `v2.85.5` |
|
[zizmorcore/zizmor-action](https://redirect.github.com/zizmorcore/zizmor-action)
| action | minor | `v0.5.7` β `v0.6.1` |
---
### Release Notes
EmbarkStudios/cargo-deny-action
(EmbarkStudios/cargo-deny-action)
###
[`v2.1.1`](https://redirect.github.com/EmbarkStudios/cargo-deny-action/releases/tag/v2.1.1):
Release 2.1.1 - cargo-deny 0.20.2
[Compare
Source](https://redirect.github.com/EmbarkStudios/cargo-deny-action/compare/v2.1.0...v2.1.1)
#### Fixed
-
[PR#116](https://redirect.github.com/EmbarkStudios/cargo-deny-action/pull/116)
fixed in issue introduced in the 2.1.0 release due the deprecation of
the `use-git-cli` argument. Thanks
[@Firestar99](https://redirect.github.com/Firestar99)!
###
[`v2.1.0`](https://redirect.github.com/EmbarkStudios/cargo-deny-action/releases/tag/v2.1.0):
Release 2.1.0 - cargo-deny 0.20.2
[Compare
Source](https://redirect.github.com/EmbarkStudios/cargo-deny-action/compare/v2.0.20...v2.1.0)
##### Changed
-
[PR#881](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/881)
refactored the CLI, moving some duplicated options/flags into the root
and removing several deprecated options/flags/values. See the PR for a
full list of changes.
##### Added
-
[PR#879](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/879)
resolved
[#873](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/873)
by adding a new
[`bans.std-replacements`](https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html#the-std-replacements-field-optional)
lint which checks the graph for crates.io sourced crates that have been
partially or fully replaced in `std` and/or `core`.
##### Fixed
-
[PR#880](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/880)
resolved
[#765](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/765)
by respecting non-default build script paths in manifests.
-
[PR#881](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/881)
resolved
[#874](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/874)
by cleaning up the CLI, deduplicating some options/flags that caused bug
in the `list` subcommand.
actions/checkout (actions/checkout)
###
[`v6.1.0`](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0)
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0)
actions/upload-code-coverage
(actions/upload-code-coverage)
###
[`v1.4.1`](https://redirect.github.com/actions/upload-code-coverage/compare/v1.4.0...v1.4.1)
[Compare
Source](https://redirect.github.com/actions/upload-code-coverage/compare/v1.4.0...v1.4.1)
github/codeql-action (github/codeql-action)
###
[`v4.37.4`](https://redirect.github.com/github/codeql-action/compare/v4.37.3...v4.37.4)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.3...v4.37.4)
###
[`v4.37.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.3)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.2...v4.37.3)
No user facing changes.
###
[`v4.37.2`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.2)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.1...v4.37.2)
- The new address format for the `config-file` input that was introduced
in CodeQL Action 4.37.0 is now enabled by default. In addition to the
format described there, the `remote=` prefix can now be used to
explicitly indicate that the input refers to a remote file. All previous
input formats continue to be accepted as well.
[#4023](https://redirect.github.com/github/codeql-action/pull/4023)
- The CodeQL Action can now make use of [configured private
registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries)
in Default Setup to retrieve CodeQL configuration files from remote
repositories that require authentication. This will allow customers to
store their CodeQL configuration in a single repository that can then be
referenced by Default Setup workflows in other repositories. We expect
to roll this and other, related changes out to everyone in July.
[#4007](https://redirect.github.com/github/codeql-action/pull/4007)
###
[`v4.37.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.1)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.0...v4.37.1)
- *Upcoming breaking change*: Add a deprecation warning for customers
using CodeQL version 2.20.6 and earlier. These versions of CodeQL were
discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and
will be unsupported by the next minor release of the CodeQL Action.
[#3956](https://redirect.github.com/github/codeql-action/pull/3956)
- Update default CodeQL bundle version to
[2.26.1](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1).
[#4019](https://redirect.github.com/github/codeql-action/pull/4019)
###
[`v4.37.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.0)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.36.3...v4.37.0)
- Update default CodeQL bundle version to
[2.26.0](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0).
[#3995](https://redirect.github.com/github/codeql-action/pull/3995)
- In addition to the existing input format, the `config-file` input for
the `codeql-action/init` step will soon support a new
`[owner/]repo[@ref][:path]` format. All components except the
repository name are optional. If omitted, `owner` defaults to the same
owner as the repository the analysis is running for, `ref` to `main`,
and `path` to `.github/codeql-action.yaml`. Support for this format
ships in this version of the CodeQL Action, but will only be enabled
over the coming weeks.
[#3973](https://redirect.github.com/github/codeql-action/pull/3973)
###
[`v4.36.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.36.3)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.36.2...v4.36.3)
No user facing changes.
j178/prek-action (j178/prek-action)
###
[`v2.0.6`](https://redirect.github.com/j178/prek-action/releases/tag/v2.0.6)
[Compare
Source](https://redirect.github.com/j178/prek-action/compare/v2.0.5...v2.0.6)
#### What's Changed
- Update known versions for prek 0.4.6 by
[@j178](https://redirect.github.com/j178) in
[#159](https://redirect.github.com/j178/prek-action/pull/159)
- Update known versions for prek 0.4.8 by
[@j178](https://redirect.github.com/j178) in
[#162](https://redirect.github.com/j178/prek-action/pull/162)
- Update known versions for prek 0.4.9 by
[@j178](https://redirect.github.com/j178) in
[#163](https://redirect.github.com/j178/prek-action/pull/163)
- Update known versions for prek 0.4.10 by
[@j178](https://redirect.github.com/j178) in
[#167](https://redirect.github.com/j178/prek-action/pull/167)
- Disable color in `prek cache dir` output by
[@KSmanis](https://redirect.github.com/KSmanis) in
[#168](https://redirect.github.com/j178/prek-action/pull/168)
#### New Contributors
- [@KSmanis](https://redirect.github.com/KSmanis) made their
first contribution in
[#168](https://redirect.github.com/j178/prek-action/pull/168)
**Full Changelog**:
taiki-e/install-action (taiki-e/install-action)
###
[`v2.85.5`](https://redirect.github.com/taiki-e/install-action/compare/v2.85.4...v2.85.5)
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.4...v2.85.5)
###
[`v2.85.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.4):
2.85.4
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.3...v2.85.4)
- Update `uv@latest` to 0.11.33.
- Update `mise@latest` to 2026.7.15.
- Update `biome@latest` to 2.5.6.
###
[`v2.85.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.3):
2.85.3
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.2...v2.85.3)
- Update `xh@latest` to 0.26.2.
- Update `ubi@latest` to 0.10.0.
- Update `mise@latest` to 2026.7.14.
- Update `martin@latest` to 1.13.0.
- Update `cargo-shear@latest` to 1.13.3.
- Update `cargo-binstall@latest` to 1.21.1.
###
[`v2.85.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.2):
2.85.2
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.1...v2.85.2)
- Update `prek@latest` to 0.4.11.
- Update `mise@latest` to 2026.7.13.
- Update `kingfisher@latest` to 1.109.0.
###
[`v2.85.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.1):
2.85.1
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.0...v2.85.1)
- Update `vacuum@latest` to 0.30.0.
- Update `uv@latest` to 0.11.32.
- Update `mise@latest` to 2026.7.12.
- Update `cyclonedx@latest` to 0.33.1.
- Update `cargo-neat@latest` to 0.5.2.
###
[`v2.85.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.0):
2.85.0
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.84.1...v2.85.0)
- Support `wild` (alias: `wild-linker`).
([#1949](https://redirect.github.com/taiki-e/install-action/pull/1949))
- Support `bpf-linker`.
([#1950](https://redirect.github.com/taiki-e/install-action/pull/1950))
- Support `rafn`.
([#1935](https://redirect.github.com/taiki-e/install-action/pull/1935),
thanks [@DarkWanderer](https://redirect.github.com/DarkWanderer))
- Update `cargo-neat@latest` to 0.5.1.
- Update `zizmor@latest` to 1.28.0.
- Update `wasmtime@latest` to 47.0.2.
- Update `uv@latest` to 0.11.31.
- Update `syft@latest` to 1.49.0.
###
[`v2.84.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.84.1):
2.84.1
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.84.0...v2.84.1)
- Update `wasmtime@latest` to 47.0.1.
- Update `wasm-tools@latest` to 1.254.0.
- Update `uv@latest` to 0.11.30.
- Update `mise@latest` to 2026.7.11.
- Update `cargo-neat@latest` to 0.5.0.
- Update `cargo-crap@latest` to 0.3.1.
- Update `biome@latest` to 2.5.5.
###
[`v2.84.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.84.0):
2.84.0
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.4...v2.84.0)
- Support `d2`.
([#1944](https://redirect.github.com/taiki-e/install-action/pull/1944))
- Support `protoc-gen-connect-openapi`.
([#1922](https://redirect.github.com/taiki-e/install-action/pull/1922),
thanks [@JasterV](https://redirect.github.com/JasterV))
- Update `convco@latest` to 0.7.0.
([#1941](https://redirect.github.com/taiki-e/install-action/pull/1941),
thanks [@graelo](https://redirect.github.com/graelo))
- Update `just@latest` to 1.57.0.
- Update `cargo-semver-checks@latest` to 0.49.0.
- Update `tombi@latest` to 1.2.4.
- Update `cosign@latest` to 3.1.2.
###
[`v2.83.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.4):
2.83.4
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.3...v2.83.4)
- Update `vacuum@latest` to 0.29.10.
- Update `uv@latest` to 0.11.29.
- Update `syft@latest` to 1.48.0.
- Update `prek@latest` to 0.4.10.
- Update `mise@latest` to 2026.7.7.
- Update `cargo-shear@latest` to 1.13.2.
###
[`v2.83.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.3):
2.83.3
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.2...v2.83.3)
- Update `release-plz@latest` to 0.3.160.
- Update `prek@latest` to 0.4.9.
- Update `mise@latest` to 2026.7.6.
- Update `dprint@latest` to 0.55.2.
- Update `cargo-dinghy@latest` to 0.8.5.
- Update `cargo-binstall@latest` to 1.21.0.
- Update `biome@latest` to 2.5.4.
###
[`v2.83.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.2):
2.83.2
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.1...v2.83.2)
- Update `parse-dockerfile@latest` to 0.1.8.
- Update `mise@latest` to 2026.7.5.
- Update `just@latest` to 1.56.0.
- Update `gungraun-runner@latest` to 0.19.4.
- Update `cargo-neat@latest` to 0.4.1.
###
[`v2.83.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.1):
2.83.1
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.0...v2.83.1)
- Update `rclone@latest` to 1.74.4.
- Update `mise@latest` to 2026.7.4.
- Update `cargo-deny@latest` to 0.20.2.
###
[`v2.83.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.0):
2.83.0
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.11...v2.83.0)
- Support `cargo-about`.
([#1924](https://redirect.github.com/taiki-e/install-action/pull/1924),
thanks [@ruffsl](https://redirect.github.com/ruffsl))
- Update `uv@latest` to 0.11.28.
- Update `martin@latest` to 1.12.0.
- Update `kingfisher@latest` to 1.106.0.
- Update `biome@latest` to 2.5.3.
###
[`v2.82.11`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.11):
2.82.11
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.10...v2.82.11)
- Update `wasm-tools@latest` to 1.253.0.
- Update `uv@latest` to 0.11.27.
- Update `mise@latest` to 2026.7.2.
- Update `mdbook@latest` to 0.5.4.
###
[`v2.82.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.10):
2.82.10
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.9...v2.82.10)
- Update `tombi@latest` to 1.2.0.
- Update `cargo-nextest@latest` to 0.9.140.
###
[`v2.82.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.9):
2.82.9
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.8...v2.82.9)
- Update `vacuum@latest` to 0.29.9.
- Update `prek@latest` to 0.4.8.
- Update `cargo-tarpaulin@latest` to 0.37.0.
- Update `cargo-leptos@latest` to 0.3.7.
###
[`v2.82.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.8):
2.82.8
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.7...v2.82.8)
- Update `vacuum@latest` to 0.29.8.
- Update `uv@latest` to 0.11.26.
- Update `typos@latest` to 1.48.0.
- Update `trivy@latest` to 0.72.0.
- Update `tombi@latest` to 1.1.7.
- Update `prek@latest` to 0.4.6.
- Update `mise@latest` to 2026.7.0.
- Update `just@latest` to 1.55.1.
- Update `biome@latest` to 2.5.2.
zizmorcore/zizmor-action (zizmorcore/zizmor-action)
###
[`v0.6.1`](https://redirect.github.com/zizmorcore/zizmor-action/releases/tag/v0.6.1)
[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-action/compare/v0.6.0...v0.6.1)
zizmor 1.28.0 is now the default version used by the action.
###
[`v0.6.0`](https://redirect.github.com/zizmorcore/zizmor-action/releases/tag/v0.6.0)
[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-action/compare/v0.5.7...v0.6.0)
zizmor 1.27.0 is now the default version used by the action.
#### What's Changed
- Fold Docker image pull output into a collapsed Actions log group by
[@woodruffw](https://redirect.github.com/woodruffw) with
[@Copilot](https://redirect.github.com/Copilot) in
[#132](https://redirect.github.com/zizmorcore/zizmor-action/pull/132)
- Readme: document missing inputs by
[@staabm](https://redirect.github.com/staabm) in
[#130](https://redirect.github.com/zizmorcore/zizmor-action/pull/130)
- ci: block version sync workflow on forks by
[@shaanmajid](https://redirect.github.com/shaanmajid) in
[#129](https://redirect.github.com/zizmorcore/zizmor-action/pull/129)
- Sync zizmor versions by
[@github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#137](https://redirect.github.com/zizmorcore/zizmor-action/pull/137)
- Add `collect` input by
[@woodruffw](https://redirect.github.com/woodruffw) in
[#139](https://redirect.github.com/zizmorcore/zizmor-action/pull/139)
#### New Contributors
- [@woodruffw](https://redirect.github.com/woodruffw) with
[@Copilot](https://redirect.github.com/Copilot) made their first
contribution in
[#132](https://redirect.github.com/zizmorcore/zizmor-action/pull/132)
- [@staabm](https://redirect.github.com/staabm) made their first
contribution in
[#130](https://redirect.github.com/zizmorcore/zizmor-action/pull/130)
- [@shaanmajid](https://redirect.github.com/shaanmajid) made
their first contribution in
[#129](https://redirect.github.com/zizmorcore/zizmor-action/pull/129)
**Full Changelog**:
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- "before 5am on the first day of the month"
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π» **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/audit.yml | 12 ++++++------
.github/workflows/ci.yml | 24 ++++++++++++------------
.github/workflows/committed.yml | 2 +-
.github/workflows/pre-commit.yml | 4 ++--
.github/workflows/rust-next.yml | 8 ++++----
.github/workflows/spelling.yml | 2 +-
.github/workflows/template.yml | 2 +-
7 files changed, 27 insertions(+), 27 deletions(-)
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index b1e0bb46..a89f6b59 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -43,11 +43,11 @@ jobs:
- advisories
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Lint advisories
- uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
+ uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1
with:
command: check ${{ matrix.checks }}
rust-version: stable
@@ -63,11 +63,11 @@ jobs:
- bans licenses sources
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Lint bans
- uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
+ uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1
with:
command: check ${{ matrix.checks }}
rust-version: stable
@@ -80,8 +80,8 @@ jobs:
actions: read # only needed for private or internal repos
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Run zizmor
- uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+ uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 118b7086..f361a1e6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -43,7 +43,7 @@ jobs:
CARGO_PROFILE_DEV_DEBUG: line-tables-only
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -53,7 +53,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
+ uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5
with:
tool: cargo-hack
- name: Build
@@ -68,7 +68,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -78,7 +78,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
+ uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5
with:
tool: cargo-hack
- name: Default features
@@ -91,7 +91,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install stable Rust
@@ -110,7 +110,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -126,7 +126,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -144,7 +144,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -163,7 +163,7 @@ jobs:
security-events: write # to upload sarif results
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -185,7 +185,7 @@ jobs:
| sarif-fmt
continue-on-error: true
- name: Upload
- uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+ uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
with:
sarif_file: clippy-results.sarif
wait-for-processing: true
@@ -200,7 +200,7 @@ jobs:
code-quality: write
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -215,7 +215,7 @@ jobs:
run: cargo tarpaulin --out xml
- name: Upload coverage report
if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
- uses: actions/upload-code-coverage@a72ab75b4dee0e479386fb9bf33c8dcf64b9c772 # v1.4.0
+ uses: actions/upload-code-coverage@1c15be36fc3733ba839b1dd643bd9556e4426dc1 # v1.4.1
with:
file: cobertura.xml
language: Rust
diff --git a/.github/workflows/committed.yml b/.github/workflows/committed.yml
index cb8222f9..509067f9 100644
--- a/.github/workflows/committed.yml
+++ b/.github/workflows/committed.yml
@@ -21,7 +21,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
fetch-depth: 0
persist-credentials: false
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 97a74e9c..d4b8842d 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -23,10 +23,10 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: prek
- uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
+ uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 # v2.0.6
with:
prek-version: '0.4.11'
diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml
index a6545729..ff253967 100644
--- a/.github/workflows/rust-next.yml
+++ b/.github/workflows/rust-next.yml
@@ -33,7 +33,7 @@ jobs:
CARGO_PROFILE_DEV_DEBUG: line-tables-only
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -43,7 +43,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
+ uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5
with:
tool: cargo-hack
- name: Build
@@ -60,7 +60,7 @@ jobs:
CARGO_RESOLVER_INCOMPATIBLE_RUST_VERSIONS: allow
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -70,7 +70,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
+ uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5
with:
tool: cargo-hack
- name: Update dependencies
diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
index 366e7f84..22fc8a3c 100644
--- a/.github/workflows/spelling.yml
+++ b/.github/workflows/spelling.yml
@@ -20,7 +20,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout Actions Repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Spell Check Repo
diff --git a/.github/workflows/template.yml b/.github/workflows/template.yml
index 36a9c000..755b8293 100644
--- a/.github/workflows/template.yml
+++ b/.github/workflows/template.yml
@@ -28,7 +28,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
fetch-depth: 0
persist-credentials: true # to push the branch and create PR
From 076ba2e5b79c965c811541ec952da7577980f574 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 14:01:03 +0000
Subject: [PATCH 18/34] chore(deps): Update Prek to v0.4.12 (#89)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.11` β
`0.4.12` |
---
### Release Notes
j178/prek (prek)
###
[`v0.4.12`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#0412)
[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.11...v0.4.12)
Released on 2026-08-03.
##### Enhancements
- Add `--require-group` for hook group intersections
([#2472](https://redirect.github.com/j178/prek/pull/2472))
- Align fast-path and builtin pre-commit hooks
([#2433](https://redirect.github.com/j178/prek/pull/2433))
- Do not shuffle file list for verbose output
([#2431](https://redirect.github.com/j178/prek/pull/2431))
- Improve top-level command descriptions
([#2429](https://redirect.github.com/j178/prek/pull/2429))
- Install `uv` from Astral CDN and drop source racing
([#2455](https://redirect.github.com/j178/prek/pull/2455))
- Make `prek install --force` bypass external hooks paths
([#2437](https://redirect.github.com/j178/prek/pull/2437))
- Show builtin hook flags in verbose list output
([#2427](https://redirect.github.com/j178/prek/pull/2427))
- Verify uv release archive checksums
([#2456](https://redirect.github.com/j178/prek/pull/2456))
##### Performance
- Precompute file tags in parallel
([#2440](https://redirect.github.com/j178/prek/pull/2440))
- Skip diffs after known hook modifications
([#2447](https://redirect.github.com/j178/prek/pull/2447))
- Skip worktree diffs for read-only languages
([#2432](https://redirect.github.com/j178/prek/pull/2432))
- Track builtin hook file changes directly
([#2404](https://redirect.github.com/j178/prek/pull/2404))
##### Bug fixes
- Use full object IDs in diff snapshots
([#2448](https://redirect.github.com/j178/prek/pull/2448))
##### Documentation
- Add a multi-repository configuration example
([#2434](https://redirect.github.com/j178/prek/pull/2434))
- Rewrite benchmark documentation
([#2469](https://redirect.github.com/j178/prek/pull/2469))
##### Contributors
- [@j178](https://redirect.github.com/j178)
- [@BitWeaverDev](https://redirect.github.com/BitWeaverDev)
- [@allanlewis](https://redirect.github.com/allanlewis)
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index d4b8842d..c0946196 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
- name: prek
uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 # v2.0.6
with:
- prek-version: '0.4.11'
+ prek-version: '0.4.12'
From a6e48641629fd0fe7193a7c11d60780d54308245 Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Mon, 3 Aug 2026 10:16:23 -0500
Subject: [PATCH 19/34] chore(ci): Don't update prek immediately
---
.github/renovate.json5 | 3 ---
1 file changed, 3 deletions(-)
diff --git a/.github/renovate.json5 b/.github/renovate.json5
index c02c2a6d..ef23c0d7 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -66,9 +66,6 @@
'prek',
],
extractVersion: '^v(?\\d+\\.\\d+\\.\\d+)',
- schedule: [
- '* * * * *',
- ],
automerge: true,
},
{
From bbc78aafa06dded898a6cc7d5ce41a3c0fad7237 Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Mon, 3 Aug 2026 10:25:00 -0500
Subject: [PATCH 20/34] chore(ci): Experiment with min-release-age
---
.github/renovate.json5 | 2 ++
1 file changed, 2 insertions(+)
diff --git a/.github/renovate.json5 b/.github/renovate.json5
index ef23c0d7..e11fcd55 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -3,6 +3,8 @@
schedule: [
'before 5am on the first day of the month',
],
+ minimumReleaseAge: "3 days",
+ internalChecksFilter: "strict",
semanticCommits: 'enabled',
commitMessageLowerCase: 'never',
configMigration: true,
From 3d30c8cc57fda434bf25e8e2ee801b8c44e92b76 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:30:34 +0000
Subject: [PATCH 21/34] chore(deps): Update pre-commit hook crate-ci/typos to
v1.48.0
---
.pre-commit-config.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 4eef4a84..1bf783d6 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -10,7 +10,7 @@ repos:
- id: check-case-conflict
- id: detect-private-key
- repo: https://github.com/crate-ci/typos
- rev: v1.47.0
+ rev: v1.48.0
hooks:
- id: typos
- repo: https://github.com/crate-ci/committed
From 9725108899fd524e435950876323fb9b33e246f1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:30:41 +0000
Subject: [PATCH 22/34] chore(deps): Update pre-commit hook
zizmorcore/zizmor-pre-commit to v1.28.0
---
.pre-commit-config.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 4eef4a84..80b94bf7 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -18,6 +18,6 @@ repos:
hooks:
- id: committed
- repo: https://github.com/zizmorcore/zizmor-pre-commit
- rev: v1.22.0
+ rev: v1.28.0
hooks:
- id: zizmor
From 51198499528e61a308baa1498e5eeffc1ad6bac9 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:30:49 +0000
Subject: [PATCH 23/34] chore(deps): Update actions/checkout action to v7
---
.github/workflows/audit.yml | 6 +++---
.github/workflows/ci.yml | 16 ++++++++--------
.github/workflows/committed.yml | 2 +-
.github/workflows/pre-commit.yml | 2 +-
.github/workflows/rust-next.yml | 4 ++--
.github/workflows/spelling.yml | 2 +-
.github/workflows/template.yml | 2 +-
7 files changed, 17 insertions(+), 17 deletions(-)
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index a89f6b59..426ad968 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -43,7 +43,7 @@ jobs:
- advisories
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Lint advisories
@@ -63,7 +63,7 @@ jobs:
- bans licenses sources
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Lint bans
@@ -80,7 +80,7 @@ jobs:
actions: read # only needed for private or internal repos
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Run zizmor
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e8e6af3e..b854c5fd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -43,7 +43,7 @@ jobs:
CARGO_PROFILE_DEV_DEBUG: line-tables-only
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -68,7 +68,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -91,7 +91,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install stable Rust
@@ -110,7 +110,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -126,7 +126,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -144,7 +144,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -163,7 +163,7 @@ jobs:
security-events: write # to upload sarif results
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -200,7 +200,7 @@ jobs:
code-quality: write
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
diff --git a/.github/workflows/committed.yml b/.github/workflows/committed.yml
index 509067f9..20b437c6 100644
--- a/.github/workflows/committed.yml
+++ b/.github/workflows/committed.yml
@@ -21,7 +21,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
persist-credentials: false
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index c0946196..744d40b4 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -23,7 +23,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: prek
diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml
index 724e6cc6..a9875b2d 100644
--- a/.github/workflows/rust-next.yml
+++ b/.github/workflows/rust-next.yml
@@ -33,7 +33,7 @@ jobs:
CARGO_PROFILE_DEV_DEBUG: line-tables-only
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -60,7 +60,7 @@ jobs:
CARGO_RESOLVER_INCOMPATIBLE_RUST_VERSIONS: allow
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
index 22fc8a3c..9049cf37 100644
--- a/.github/workflows/spelling.yml
+++ b/.github/workflows/spelling.yml
@@ -20,7 +20,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout Actions Repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Spell Check Repo
diff --git a/.github/workflows/template.yml b/.github/workflows/template.yml
index 755b8293..76121eef 100644
--- a/.github/workflows/template.yml
+++ b/.github/workflows/template.yml
@@ -28,7 +28,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
persist-credentials: true # to push the branch and create PR
From 70d0dca36c64f8f638bb34f69654c3938fa8b9c1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:30:56 +0000
Subject: [PATCH 24/34] chore(deps): Update j178/prek-action action to v3
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index c0946196..8dd41262 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -27,6 +27,6 @@ jobs:
with:
persist-credentials: false
- name: prek
- uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 # v2.0.6
+ uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
with:
prek-version: '0.4.12'
From f1016dff7859defa5950d5c8ff2d57f327e319c4 Mon Sep 17 00:00:00 2001
From: Scott Schafer
Date: Sat, 8 Aug 2026 20:19:00 -0600
Subject: [PATCH 25/34] fix: Remove lint config for
clippy::from_iter_instead_of_collect
---
Cargo.toml | 1 -
1 file changed, 1 deletion(-)
diff --git a/Cargo.toml b/Cargo.toml
index 4a41143a..882fb8a4 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -56,7 +56,6 @@ float_cmp = "warn"
float_cmp_const = "warn"
fn_params_excessive_bools = "warn"
fn_to_numeric_cast_any = "warn"
-from_iter_instead_of_collect = "warn"
if_same_then_else = "allow"
implicit_clone = "warn"
imprecise_flops = "warn"
From 059ebedc85d3d3d4dc6f980d7c9d59394143486a Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Mon, 10 Aug 2026 08:37:35 -0500
Subject: [PATCH 26/34] chore(ci): Remove dtolnay/rust-toolchain
This causes enough issues with zizmor
---
.github/workflows/ci.yml | 44 +++++++++++----------------------
.github/workflows/rust-next.yml | 9 +++----
.github/zizmor.yml | 4 ---
3 files changed, 18 insertions(+), 39 deletions(-)
delete mode 100644 .github/zizmor.yml
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b854c5fd..5cdca389 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,6 +13,8 @@ env:
RUST_BACKTRACE: 1
CARGO_TERM_COLOR: always
CLICOLOR: 1
+ CARGO_INCREMENTAL: 0
+ RUST_TOOLCHAIN_STABLE: "1.97" # STABLE
concurrency:
group: "${{ github.workflow }}-${{ github.ref }}"
@@ -47,9 +49,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: ${{ matrix.rust }}
+ run: rustup update --no-self-update ${{ matrix.rust }} && rustup default ${{ matrix.rust }}
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
@@ -72,9 +72,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: stable
+ run: rustup update --no-self-update stable && rustup default stable
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
@@ -95,13 +93,9 @@ jobs:
with:
persist-credentials: false
- name: Install stable Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: stable
+ run: rustup update --no-self-update stable && rustup default stable
- name: Install nightly Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: nightly
+ run: rustup update --no-self-update nightly && rustup default nightly
- name: Downgrade dependencies to minimal versions
run: cargo +nightly generate-lockfile -Z minimal-versions
- name: Compile with minimal versions
@@ -114,9 +108,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: stable
+ run: rustup update --no-self-update stable && rustup default stable
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: "Is lockfile updated?"
@@ -130,9 +122,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: "1.97" # STABLE
+ run: rustup update --no-self-update $RUST_TOOLCHAIN_STABLE && rustup default $RUST_TOOLCHAIN_STABLE
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Check documentation
@@ -148,10 +138,9 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: "1.97" # STABLE
- components: rustfmt
+ run: rustup update --no-self-update $RUST_TOOLCHAIN_STABLE && rustup default $RUST_TOOLCHAIN_STABLE
+ - name: Install rustfmt
+ run: rustup component add rustfmt
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Check formatting
@@ -167,10 +156,9 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: "1.97" # STABLE
- components: clippy
+ run: rustup update --no-self-update $RUST_TOOLCHAIN_STABLE && rustup default $RUST_TOOLCHAIN_STABLE
+ - name: Install clippy
+ run: rustup component add clippy
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install SARIF tools
@@ -204,9 +192,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: stable
+ run: rustup update --no-self-update stable && rustup default stable
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-tarpaulin
diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml
index a9875b2d..16c5b744 100644
--- a/.github/workflows/rust-next.yml
+++ b/.github/workflows/rust-next.yml
@@ -11,6 +11,7 @@ env:
RUST_BACKTRACE: 1
CARGO_TERM_COLOR: always
CLICOLOR: 1
+ CARGO_INCREMENTAL: 0
concurrency:
group: "${{ github.workflow }}-${{ github.ref }}"
@@ -37,9 +38,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: ${{ matrix.rust }}
+ run: rustup update --no-self-update ${{ matrix.rust }} && rustup default ${{ matrix.rust }}
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
@@ -64,9 +63,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: stable
+ run: rustup update --no-self-update stable && rustup default stable
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
deleted file mode 100644
index 45aa9c94..00000000
--- a/.github/zizmor.yml
+++ /dev/null
@@ -1,4 +0,0 @@
-rules:
- superfluous-actions:
- # https://github.com/zizmorcore/zizmor/issues/1817
- disable: true
From d016febe989a7db9900fd4c31296289fdac42b3b Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Wed, 12 Aug 2026 12:47:17 -0500
Subject: [PATCH 27/34] docs(ai): Start with regex's policy
---
AI_POLICY.md | 34 ++++++++++++++++++++++++++++++++++
1 file changed, 34 insertions(+)
create mode 100644 AI_POLICY.md
diff --git a/AI_POLICY.md b/AI_POLICY.md
new file mode 100644
index 00000000..9ce08834
--- /dev/null
+++ b/AI_POLICY.md
@@ -0,0 +1,34 @@
+# AI Policy
+
+Using AI (i.e., LLMs) as tools for coding is welcome.
+A high bar is held for all contributions to this project.
+Moreover, the project maintainers remain responsible for any code that is published as part of a release.
+Contributors are expected to be responsible for any code they publish.
+
+**AI should not be used to generate comments when communicating with maintainers**.
+Comments are expected to be written by humans.
+Comments that are believed to be written by AI may be hidden without notice.
+
+If you are opening an issue,
+you should be able to describe the problem in your own words.
+
+If you are opening a pull request,
+you are expected to be able to explain the proposed changes in your own words.
+This includes the pull request body and responses to questions.
+**Do not copy responses from the AI when replying to questions from maintainers.**
+
+This project requires a human in the loop who understands the work produced by AI.
+**Autonomous agents are not allowed to be used for contributing to our projects**.
+Pull requests that appear in violation of this will be closed,
+perhaps without notice.
+
+If you wish to include context from an interaction with AI in your comments,
+it must be in a quote block (e.g., using `>`) and disclosed as such.
+It must be accompanied by human commentary explaining the relevance and implications of the context.
+Do not share long snippets.
+
+AI is useful when communicating as a non-native English speaker.
+If you are using AI to edit your comments for this purpose,
+please take the time to ensure it reflects your own voice and ideas.
+If using AI for translation,
+we recommend writing in your native language and including the AI translation in a quote block.
From 516da22ea731aadec557d1d04152173a18835d99 Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Wed, 12 Aug 2026 13:14:30 -0500
Subject: [PATCH 28/34] docs(ai): Try out uv's policy
---
AI_POLICY.md | 28 +++++++++++++---------------
1 file changed, 13 insertions(+), 15 deletions(-)
diff --git a/AI_POLICY.md b/AI_POLICY.md
index 9ce08834..3c87dd29 100644
--- a/AI_POLICY.md
+++ b/AI_POLICY.md
@@ -1,34 +1,32 @@
# AI Policy
-Using AI (i.e., LLMs) as tools for coding is welcome.
-A high bar is held for all contributions to this project.
-Moreover, the project maintainers remain responsible for any code that is published as part of a release.
-Contributors are expected to be responsible for any code they publish.
+We support using AI (i.e., LLMs) as tools for coding.
+However, you remain responsible for any code you publish and we are responsible for any code we merge and release.
+We hold a high bar for all contributions to our projects.
**AI should not be used to generate comments when communicating with maintainers**.
-Comments are expected to be written by humans.
-Comments that are believed to be written by AI may be hidden without notice.
+We expect comments on our projects to be written by humans.
+We may hide any comments that we believe are AI generated.
If you are opening an issue,
-you should be able to describe the problem in your own words.
+we expect you to describe the problem in your own words.
If you are opening a pull request,
-you are expected to be able to explain the proposed changes in your own words.
+we expect you to be able to explain the proposed changes in your own words.
This includes the pull request body and responses to questions.
**Do not copy responses from the AI when replying to questions from maintainers.**
-This project requires a human in the loop who understands the work produced by AI.
-**Autonomous agents are not allowed to be used for contributing to our projects**.
-Pull requests that appear in violation of this will be closed,
-perhaps without notice.
+Due to the foundational nature of our projects,
+we require a human in the loop who understands the work produced by AI.
+**We do not allow autonomous agents to be used for contributing to our projects**.
+We will close any pull requests that we believe were created autonomously.
If you wish to include context from an interaction with AI in your comments,
it must be in a quote block (e.g., using `>`) and disclosed as such.
It must be accompanied by human commentary explaining the relevance and implications of the context.
Do not share long snippets.
-AI is useful when communicating as a non-native English speaker.
+We understand that AI is useful when communicating as a non-native English speaker.
If you are using AI to edit your comments for this purpose,
please take the time to ensure it reflects your own voice and ideas.
-If using AI for translation,
-we recommend writing in your native language and including the AI translation in a quote block.
+If using AI for translation, we recommend writing in your native language and including the AI translation in a quote block.
From 82c988371ded5215f838e18789b60513be38f123 Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Wed, 12 Aug 2026 15:14:35 -0500
Subject: [PATCH 29/34] docs(gh): Add a PR template
Goals
- Encourage having an issue approved first
- Encourage meaningful content (unlike most AI generated PR
descriptions)
---
.github/PULL_REQUEST_TEMPLATE.md | 14 ++++++++++++++
1 file changed, 14 insertions(+)
create mode 100644 .github/PULL_REQUEST_TEMPLATE.md
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
new file mode 100644
index 00000000..a5c0c228
--- /dev/null
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@@ -0,0 +1,14 @@
+
+
+### What does this PR try to solve?
+
+
+Closes #
+
+### Notes to reviewers
+
+
From 8b090d2eeb632be6f7b5e39e4be1d968306ef3e1 Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Wed, 12 Aug 2026 15:19:33 -0500
Subject: [PATCH 30/34] docs(ai): Solidify the policy
---
.github/PULL_REQUEST_TEMPLATE.md | 2 ++
AI_POLICY.md | 62 ++++++++++++++++++++++----------
2 files changed, 46 insertions(+), 18 deletions(-)
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
index a5c0c228..cc42102f 100644
--- a/.github/PULL_REQUEST_TEMPLATE.md
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@@ -12,3 +12,5 @@ Examples:
- Larger context this fits within
- Manual testing and why it wasn't automated
-->
+
+LLM involvement:
diff --git a/AI_POLICY.md b/AI_POLICY.md
index 3c87dd29..b2ad65fd 100644
--- a/AI_POLICY.md
+++ b/AI_POLICY.md
@@ -1,32 +1,58 @@
-# AI Policy
+# AI policy
-We support using AI (i.e., LLMs) as tools for coding.
-However, you remain responsible for any code you publish and we are responsible for any code we merge and release.
-We hold a high bar for all contributions to our projects.
+Project maintainers are responsible for any code that is published as part of a release.
+Contributors are responsible for their contributions, both in terms of communications and code.
+This responsibility is for both understanding of and the quality of their contributions.
-**AI should not be used to generate comments when communicating with maintainers**.
+## Personal use
+
+You are free to use an AI locally for your own purposes,
+including to answer your questions, analyze, distill, refine, check, suggest, and review.
+
+## Communication
+
+**AI should not be used to generate comments when communicating with maintainers.**
We expect comments on our projects to be written by humans.
-We may hide any comments that we believe are AI generated.
+We may hide or delete any comments where we believe AI generation was involved.
If you are opening an issue,
-we expect you to describe the problem in your own words.
+we expect you to have personally reproduced the problem and to describe it in your own words.
If you are opening a pull request,
we expect you to be able to explain the proposed changes in your own words.
This includes the pull request body and responses to questions.
-**Do not copy responses from the AI when replying to questions from maintainers.**
+**Do not copy responses from an AI when replying to questions from maintainers.**
+Do not run agents or bots on pull requests without first getting approval.
-Due to the foundational nature of our projects,
-we require a human in the loop who understands the work produced by AI.
-**We do not allow autonomous agents to be used for contributing to our projects**.
-We will close any pull requests that we believe were created autonomously.
+We understand that AI is useful when communicating as a non-native English speaker.
+If you are using AI to edit your comments for this purpose,
+please take the time to ensure it reflects your own voice and ideas.
+If using AI for translation, we recommend writing in your native language and including the AI translation in a [`` block].
If you wish to include context from an interaction with AI in your comments,
-it must be in a quote block (e.g., using `>`) and disclosed as such.
-It must be accompanied by human commentary explaining the relevance and implications of the context.
+it must be in a [`` block] and disclosed as such.
+The block must include human commentary explaining the relevance and implications of the context.
+The content of your comment must stand on its own even without the quoted content.
Do not share long snippets.
-We understand that AI is useful when communicating as a non-native English speaker.
-If you are using AI to edit your comments for this purpose,
-please take the time to ensure it reflects your own voice and ideas.
-If using AI for translation, we recommend writing in your native language and including the AI translation in a quote block.
+## Code
+
+Using AI as tools for coding requires receiving permission on the relevant issue before a PR is posted.
+
+This project requires a human in the loop who understands the work produced by AI.
+**We do not allow autonomous agents to be used for contributing to this project**.
+We will close any pull requests that we believe were created **without meaningful involvement** from the contributor.
+Contributions should not "read" as being written by an AI.
+
+Some areas require specific expertise or care when touching.
+AI generated code, even with human review, is prohibited for:
+- none
+
+We view AI as providing a way to improve quality and will hold AI-assisted contributions to a higher standard.
+We will be more free in asking for changes.
+
+The involvement of AI assistance must be disclosed in PRs.
+
+For documentation, including comments in code, see [Communication](#communication).
+
+[`` block]: https://docs.github.com/en/get-started/writing-on-github/working-with-advanced-formatting/organizing-information-with-collapsed-sections)
From d7a910fc83cdf3cf6a66d2316c7fb96ab288e40f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 23 Aug 2026 21:41:41 +0000
Subject: [PATCH 31/34] chore(deps): Update Rust Stable to v1.98 (#97)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [STABLE](https://redirect.github.com/rust-lang/rust) | minor | `1.97`
β `1.98` |
---
### Release Notes
rust-lang/rust (STABLE)
###
[`v1.98`](https://redirect.github.com/rust-lang/rust/blob/HEAD/RELEASES.md#Version-1980-2026-08-20)
[Compare
Source](https://redirect.github.com/rust-lang/rust/compare/1.97.0...1.98.0)
\==========================
## Language
- [Allow shortening lifetime of `&mut` when unsize-coercing, even in an
invariant
position.](https://redirect.github.com/rust-lang/rust/pull/149219) For
example, you can now coerce a `Cell<&'long mut i32>` to a `Cell<&'short
mut dyn Send>`. Such shortenings were already previously allowed when
coercing a `&mut` to a `&`, or coercing a `&` to a `&`.
- [Add deny-by-default `invalid_runtime_symbol_definitions` lint and
warn-by-default `suspicious_runtime_symbol_definitions`
lint](https://redirect.github.com/rust-lang/rust/pull/155521)
- The lints currently specifically targets `core` runtime symbols like
`memcmp`, `memset`, `strlen`, ... and is planned to be expanded in the
next few releases.
- [Add warn-by-default `c_void_returns` lint to check
`core::ffi::c_void` as a return
type](https://redirect.github.com/rust-lang/rust/pull/156379)
## Platform Support
- [Add `powerpc64-unknown-linux-gnuelfv2` as Tier
3](https://redirect.github.com/rust-lang/rust/pull/144220)
- [Add `aarch64-unknown-linux-pauthtest` as Tier 3
target](https://redirect.github.com/rust-lang/rust/pull/155722)
- [Promote `thumbv7a-none-eabi` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv7a-none-eabihf` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv7r-none-eabi` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv7r-none-eabihf` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv8r-none-eabihf` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
Refer to Rust's [platform support page][platform-support-doc]
for more information on Rust's tiered platform support.
[platform-support-doc]:
https://doc.rust-lang.org/rustc/platform-support.html
## Libraries
- [Change `Location<'_>` lifetime to `'static` in
`Panic[Hook]Info`](https://redirect.github.com/rust-lang/rust/pull/146561)
- [Document panic in
`RangeInclusive::from(legacy::RangeInclusive)`](https://redirect.github.com/rust-lang/rust/pull/155421)
- [Document that `ManuallyDrop`'s `Box` interaction has been
fixed](https://redirect.github.com/rust-lang/rust/pull/155750)
- [Stabilize LoongArch CRC
Intrinsics](https://redirect.github.com/rust-lang/rust/issues/156908)
- [The `derive` macro is available at
`{core,std}::derive`.](https://redirect.github.com/rust-lang/rust/issues/154645)
This was previously [unintentionally stabilized in
1.96](https://redirect.github.com/rust-lang/rust/issues/159856), but is
now [explicitly
accepted](https://redirect.github.com/rust-lang/rust/issues/154645) as a
stabilized API.
- Please note that the MSRV for `{core,std}::derive` will be 1.96, and
not 1.98.
## Stabilized APIs
-
[`str::substr_range`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.substr_range)
-
[`[T]::subslice_range`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.subslice_range)
-
[`core::fmt::NumBuffer`](https://doc.rust-lang.org/stable/core/fmt/struct.NumBuffer.html)
-
[`<{integer}>::format_into`](https://doc.rust-lang.org/stable/core/primitive.usize.html#method.format_into)
- [`Send/Sync for
std::process::CommandArgs`](https://doc.rust-lang.org/stable/std/process/struct.CommandArgs.html#impl-Send-for-CommandArgs%3C'a%3E)
-
[`{fN}::algebraic_add`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_add)
-
[`{fN}::algebraic_sub`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_sub)
-
[`{fN}::algebraic_mul`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_mul)
-
[`{fN}::algebraic_div`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_div)
-
[`{fN}::algebraic_rem`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_rem)
-
[`NonZero<{integer}>::from_str_radix`](https://doc.rust-lang.org/stable/core/num/struct.NonZero.html#method.from_str_radix-4)
-
[`String::from_utf16le`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16le)
-
[`String::from_utf16le_lossy`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16le_lossy)
-
[`String::from_utf16be`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16be)
-
[`String::from_utf16be_lossy`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16be_lossy)
-
[`[T]::strip_circumfix`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.strip_circumfix)
-
[`str::strip_circumfix`](https://doc.rust-lang.org/stable/core/primitive.str.html#method.strip_circumfix)
-
[`Atomic::from_mut`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.Atomic.html#method.from_mut)
-
[`Atomic::get_mut_slice`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.Atomic.html#method.get_mut_slice)
-
[`Atomic::from_mut_slice`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.Atomic.html#method.from_mut_slice)
-
[`std::range::legacy`](https://doc.rust-lang.org/stable/std/range/legacy/index.html)
## Compatibility Notes
- [If fully elided, lifetime bounds of trait object types may now
resolve differently or even get rejected in very specific niche
scenarios](https://redirect.github.com/rust-lang/rust/pull/129543)
- [Error in more cases of ambiguous
imports](https://redirect.github.com/rust-lang/rust/pull/145108)
- [Switch the destructors implementation for thread locals on Windows to
use Fiber Local Storage
(FLS)](https://redirect.github.com/rust-lang/rust/pull/148799)
- [Convert some cases of the `ambiguous_glob_imports` lint into a hard
error](https://redirect.github.com/rust-lang/rust/pull/149195)
- [Where-bounds of the form `Type = Type` and `Type == Type` are no
longer syntactically
allowed](https://redirect.github.com/rust-lang/rust/pull/153513)
- [Ensure Send/Sync is not implemented for
std::env::Vars{,Os}](https://redirect.github.com/rust-lang/rust/pull/155153)
- [Fix that in some attributes, arguments were not properly
rejected](https://redirect.github.com/rust-lang/rust/pull/155193)
- [`repr(transparent)` is now more strict about which fields have
"trivial" layout and hence can be ignored: `repr(C)` types, types with
private fields, and `#[non_exhaustive]` types are no longer considered
"trivial"](https://redirect.github.com/rust-lang/rust/pull/155299)
- [Correctly check whether types have equal size in `transmute()` when
some `repr` attributes are
involved.](https://redirect.github.com/rust-lang/rust/pull/155418)
- [More characters are escaped when printing strings and
chars](https://redirect.github.com/rust-lang/rust/pull/155527)
- [Implement fast path for `derive(PartialOrd)` when deriving
`Ord`](https://redirect.github.com/rust-lang/rust/pull/155598)
This can break crates in practice where a type's PartialOrd and Ord
impls were inconsistent with each other.
- [Add temporary scope to `assert_eq` and
`assert_ne`](https://redirect.github.com/rust-lang/rust/pull/155739)
- Closed a hole in the pattern matching [structural
equality](https://doc.rust-lang.org/reference/patterns.html#constant-patterns)
check, preventing cases where a match of a constant would be allowed,
despite disagreeing with a manually written `PartialEq` implementation,
when a `derive(PartialEq)` implementation for that type also exists.
- [On Emscripten the WASM exception handling ABI is now unconditionally
used](https://redirect.github.com/rust-lang/rust/pull/156928) The
`-Zemscripten-wasm-eh=false` flag to switch back to JS exceptions has
been removed.
- [The UNSAFE\_CODE lint is now consistently emitted for all unsafe
attributes](https://redirect.github.com/rust-lang/rust/pull/157201)
- [Solaris: remove `File::lock` implementation, it has the wrong
semantics (return "unsupported"
instead)](https://redirect.github.com/rust-lang/rust/pull/157509)
- [Windows-gnu targets now specify baseline tools
versions](https://redirect.github.com/rust-lang/rust/pull/158020)
- [rustfmt now discovers module files that are defined in
`cfg_select!`](https://redirect.github.com/rust-lang/rust/pull/158372)
This may cause more code to be formatted which was previously ignored.
---
### Configuration
π
**Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
π **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/ci.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5cdca389..6e69c012 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ env:
CARGO_TERM_COLOR: always
CLICOLOR: 1
CARGO_INCREMENTAL: 0
- RUST_TOOLCHAIN_STABLE: "1.97" # STABLE
+ RUST_TOOLCHAIN_STABLE: "1.98" # STABLE
concurrency:
group: "${{ github.workflow }}-${{ github.ref }}"
From 8d22eae6c462bc3b1d2702a35f77466a0ed02c8c Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Tue, 25 Aug 2026 12:44:36 -0500
Subject: [PATCH 32/34] chore(ci): Also allow renamed_and_removed_lints
---
.github/workflows/ci.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6e69c012..6de04da1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -180,7 +180,7 @@ jobs:
- name: Report status
env:
CARGO_BUILD_WARNINGS: deny
- run: cargo clippy --workspace --all-features --all-targets --keep-going -- --allow deprecated
+ run: cargo clippy --workspace --all-features --all-targets --keep-going -- --allow deprecated --allow renamed_and_removed_lints
coverage:
name: Coverage
runs-on: ubuntu-latest
From c2979d0bdd8293132c3efeddc2c5f3b1ceb0e17e Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Wed, 26 Aug 2026 13:33:06 -0500
Subject: [PATCH 33/34] docs: Remove license placeholder
---
LICENSE-APACHE | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/LICENSE-APACHE b/LICENSE-APACHE
index 8f71f43f..6aa81fe0 100644
--- a/LICENSE-APACHE
+++ b/LICENSE-APACHE
@@ -186,7 +186,7 @@
same "printed page" as the copyright notice for easier
identification within third-party archives.
- Copyright {yyyy} {name of copyright owner}
+ Copyright Individual contributors
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
From 90588dbb9517a7b3eb98f3f75a31e238eae84024 Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Thu, 27 Aug 2026 12:30:06 -0500
Subject: [PATCH 34/34] chore(ci): Reduce git checkout for committed
---
.github/workflows/committed.yml | 1 +
1 file changed, 1 insertion(+)
diff --git a/.github/workflows/committed.yml b/.github/workflows/committed.yml
index 20b437c6..773fcd01 100644
--- a/.github/workflows/committed.yml
+++ b/.github/workflows/committed.yml
@@ -24,6 +24,7 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
+ filter: "tree:0"
persist-credentials: false
- name: Lint Commits
uses: crate-ci/committed@faeed42f2e10c244533a01525f13c4d8b6ce383f # v1.1.11