deps(deps): bump smallvec from 1.15.1 to 1.16.0 - #2656
Conversation
dependabot
Bot
added
dependabot
dependencies
![cloudwalk-review-agent[bot]](https://avatars.githubusercontent.com/u/6581007?s=60&v=4){kind=small}
There was a problem hiding this comment.
Summary
Dependency bump is scoped and consistent: smallvec was updated from 1.15.1 to 1.15.2 in both Cargo.toml and Cargo.lock, with lockfile checksum updated accordingly. No API surface, runtime logic, or config changes are introduced by this PR.
Given the upstream release notes include a fix for a use-after-free edge case, this is a low-risk, positive security/correctness update.
🧾 cargo-vet automated audit summary
CI did not commit anything. Review the patch locally and create the final signed commit yourself. Apply the patch locallyThe patch artifact is attached to this workflow run as a zip archive. Download it, extract Preferred: GitHub CLI git checkout <pr-branch>
gh run download 33389922902 -n dependabot-auto-vet-patch-pr-2656
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git pushFallback: direct artifact download git checkout <pr-branch>
curl -L \
-H "Authorization: Bearer <github-token>" \
-o auto-vet-artifact.zip \
https://github.com/cloudwalk/stratus/actions/runs/33389922902/artifacts/9757136764
unzip -p auto-vet-artifact.zip vet/auto-vet.patch > auto-vet.patch
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git push |
50f7d87 to
0e5321d
Compare
🧾 cargo-vet automated audit summary
CI did not commit anything. Review the patch locally and create the final signed commit yourself. Apply the patch locallyThe patch artifact is attached to this workflow run as a zip archive. Download it, extract Preferred: GitHub CLI git checkout <pr-branch>
gh run download 33400026386 -n dependabot-auto-vet-patch-pr-2656
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git pushFallback: direct artifact download git checkout <pr-branch>
curl -L \
-H "Authorization: Bearer <github-token>" \
-o auto-vet-artifact.zip \
https://github.com/cloudwalk/stratus/actions/runs/33400026386/artifacts/9761116927
unzip -p auto-vet-artifact.zip vet/auto-vet.patch > auto-vet.patch
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git push |
0e5321d to
935c09d
Compare
🧾 cargo-vet automated audit summary
CI did not commit anything. Review the patch locally and create the final signed commit yourself. Apply the patch locallyThe patch artifact is attached to this workflow run as a zip archive. Download it, extract Preferred: GitHub CLI git checkout <pr-branch>
gh run download 33663749147 -n dependabot-auto-vet-patch-pr-2656
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git pushFallback: direct artifact download git checkout <pr-branch>
curl -L \
-H "Authorization: Bearer <github-token>" \
-o auto-vet-artifact.zip \
https://github.com/cloudwalk/stratus/actions/runs/33663749147/artifacts/9860045591
unzip -p auto-vet-artifact.zip vet/auto-vet.patch > auto-vet.patch
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git push |
Bumps [smallvec](https://github.com/servo/rust-smallvec) from 1.15.1 to 1.16.0. - [Release notes](https://github.com/servo/rust-smallvec/releases) - [Commits](servo/rust-smallvec@v1.15.1...v1.16.0) --- updated-dependencies: - dependency-name: smallvec dependency-version: 1.15.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
2c9cccf
935c09d to
2c9cccf
Compare
There was a problem hiding this comment.
Summary
Dependency update is scoped and consistent: smallvec is bumped from 1.15.1 to 1.16.0 in both Cargo.toml and Cargo.lock, with the lockfile checksum updated accordingly. No application code, API surface, config, migration, or permission/auth logic changed in this PR.
Given the minimal blast radius and no concrete regressions visible in the diff, this looks safe to merge.
🧾 cargo-vet automated audit summary
CI did not commit anything. Review the patch locally and create the final signed commit yourself.
|
Bumps smallvec from 1.15.1 to 1.16.0.
Release notes
Sourced from smallvec's releases.
Commits
b3ceac4Merge pull request #436 from alejandro-vaz/better-cide02fc3fix: returned to LayoutErr10c5efafix: style check6833a58fix: deprecation warnings4d930f7fix: changed import granularity to preserve76528c7feat: added style check to CI && rustfmt.toml673b4f3fix: removed visualizer debugger tests from workflowa8e8695fix(debug_metadata): removed dir againef9bec5fix: added debug_metadata/ backebf7773feat: removed debugger visualizer + tests