Skip to content

deps(deps): bump bcrypt from 0.15.1 to 0.17.1 - #728

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/bcrypt-0.17.1
Closed

deps(deps): bump bcrypt from 0.15.1 to 0.17.1#728
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/bcrypt-0.17.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 13, 2026

Copy link
Copy Markdown
Contributor

Bumps bcrypt from 0.15.1 to 0.17.1.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/bcrypt-0.17.1 branch from 8e16ed1 to 955a592 Compare May 13, 2026 02:38
@dependabot
dependabot Bot force-pushed the dependabot/cargo/bcrypt-0.17.1 branch from 955a592 to 755f2dc Compare May 13, 2026 04:19
Bumps [bcrypt](https://github.com/Keats/rust-bcrypt) from 0.15.1 to 0.17.1.
- [Commits](Keats/rust-bcrypt@v0.15.1...v0.17.1)

---
updated-dependencies:
- dependency-name: bcrypt
  dependency-version: 0.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/bcrypt-0.17.1 branch from 755f2dc to a0c49af Compare May 13, 2026 05:11
proggeramlug added a commit that referenced this pull request May 13, 2026
Bundles seven green dependabot bumps into a single commit instead of
seven round-trips through the PR queue.

Renumbered from v0.5.892 to v0.5.893 after rebasing on main — #734
landed v0.5.892 while this batch was in review.

Cargo crates:
- scraper 0.19.1 → 0.27.0 (#731) — perry-ext-cheerio, perry-stdlib
- gstreamer 0.23.7 → 0.25.2 (#730) — perry-ui-gtk4
- bcrypt 0.15 → 0.17 (#728) — perry-stdlib (aligns with perry-ext-bcrypt
  which already pinned 0.17, so the workspace now resolves a single
  bcrypt version)

GitHub Actions:
- actions/download-artifact v4 → v8 (#724)
- actions/setup-node v4 → v6 (#725)
- actions/cache v4 → v5 (#726)
  (test.yml line 110's comment referencing v4 is left as-is — it is
  documenting historical state, not configuring a step.)

NPM test fixture:
- drizzle-orm ^0.36.0 → ^0.45.2 (#723) in
  tests/release/packages/drizzle-sqlite/

PR #723 had a stale security-audit FAILURE from a transient advisory-db
hit on May 12; main's subsequent run against the unchanged Cargo.lock
passed on May 13. The PR only touches npm test fixtures so the audit
result was unrelated to its diff.

Skipped (real breakage, not safe — being addressed separately):
- toml 0.8.23 → 1.1.2+spec-1.1.0 (#727) — major version breaks
  well_known_bindings.toml parsing; 7 cargo tests + 31 compile-smoke
  failures.
- deno_core 0.311.0 → 0.400.0 (#729) — 89-patch jump, parity +
  compile-smoke failures from API-breaking changes.
proggeramlug added a commit that referenced this pull request May 13, 2026
Bundles seven green dependabot bumps into a single commit instead of
seven round-trips through the PR queue.

Cargo crates:
- scraper 0.19.1 → 0.27.0 (#731) — perry-ext-cheerio, perry-stdlib
- gstreamer 0.23.7 → 0.25.2 (#730) — perry-ui-gtk4
- bcrypt 0.15 → 0.17 (#728) — perry-stdlib (aligns with perry-ext-bcrypt
  which already pinned 0.17, so the workspace now resolves a single
  bcrypt version)

GitHub Actions:
- actions/download-artifact v4 → v8 (#724)
- actions/setup-node v4 → v6 (#725)
- actions/cache v4 → v5 (#726)
  (test.yml line 110's comment referencing v4 is left as-is — it is
  documenting historical state, not configuring a step.)

NPM test fixture:
- drizzle-orm ^0.36.0 → ^0.45.2 (#723) in
  tests/release/packages/drizzle-sqlite/

PR #723 had a stale security-audit FAILURE from a transient advisory-db
hit on May 12; main's subsequent run against the unchanged Cargo.lock
passed on May 13. The PR only touches npm test fixtures so the audit
result was unrelated to its diff.

Skipped (real breakage, not safe):
- toml 0.8.23 → 1.1.2+spec-1.1.0 (#727) — major version breaks
  well_known_bindings.toml parsing; 7 cargo tests + 31 compile-smoke
  failures.
- deno_core 0.311.0 → 0.400.0 (#729) — 89-patch jump, parity +
  compile-smoke failures from API-breaking changes.

Rebased onto main at e8c4a95 (HarmonyOS Chart + TreeView shipped as
v0.5.893 after #734 shipped as v0.5.892); this commit moves the batch
roll-up to v0.5.894 to avoid the patch-version collision.
proggeramlug added a commit that referenced this pull request May 13, 2026
Bundles seven green dependabot bumps into a single commit instead of
seven round-trips through the PR queue.

Cargo crates:
- scraper 0.19.1 → 0.27.0 (#731) — perry-ext-cheerio, perry-stdlib
- gstreamer 0.23.7 → 0.25.2 (#730) — perry-ui-gtk4
- bcrypt 0.15 → 0.17 (#728) — perry-stdlib (aligns with perry-ext-bcrypt
  which already pinned 0.17, so the workspace now resolves a single
  bcrypt version)

GitHub Actions:
- actions/download-artifact v4 → v8 (#724)
- actions/setup-node v4 → v6 (#725)
- actions/cache v4 → v5 (#726)
  (test.yml line 110's comment referencing v4 is left as-is — it is
  documenting historical state, not configuring a step.)

NPM test fixture:
- drizzle-orm ^0.36.0 → ^0.45.2 (#723) in
  tests/release/packages/drizzle-sqlite/

PR #723 had a stale security-audit FAILURE from a transient advisory-db
hit on May 12; main's subsequent run against the unchanged Cargo.lock
passed on May 13. The PR only touches npm test fixtures so the audit
result was unrelated to its diff.

Skipped (real breakage, not safe):
- toml 0.8.23 → 1.1.2+spec-1.1.0 (#727) — major version breaks
  well_known_bindings.toml parsing; 7 cargo tests + 31 compile-smoke
  failures.
- deno_core 0.311.0 → 0.400.0 (#729) — 89-patch jump, parity +
  compile-smoke failures from API-breaking changes.

Rebased onto main at e8c4a95 (HarmonyOS Chart + TreeView shipped as
v0.5.893 after #734 shipped as v0.5.892); this commit moves the batch
roll-up to v0.5.894 to avoid the patch-version collision.
@dependabot @github

dependabot Bot commented on behalf of github May 13, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/cargo/bcrypt-0.17.1 branch May 13, 2026 05:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants