chore(deps): bump the rust-dependencies group with 4 updates#2117
Merged
Conversation
Bumps the rust-dependencies group with 4 updates: [getrandom](https://github.com/rust-random/getrandom), [napi](https://github.com/napi-rs/napi-rs), [syn](https://github.com/dtolnay/syn) and [quote](https://github.com/dtolnay/quote). Updates `getrandom` from 0.4.2 to 0.4.3 - [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md) - [Commits](rust-random/getrandom@v0.4.2...v0.4.3) Updates `napi` from 3.9.2 to 3.9.3 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-v3.9.2...napi-v3.9.3) Updates `syn` from 2.0.117 to 2.0.118 - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](dtolnay/syn@2.0.117...2.0.118) Updates `quote` from 1.0.45 to 1.0.46 - [Release notes](https://github.com/dtolnay/quote/releases) - [Commits](dtolnay/quote@1.0.45...1.0.46) --- updated-dependencies: - dependency-name: getrandom dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: napi dependency-version: 3.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: syn dependency-version: 2.0.118 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: quote dependency-version: 1.0.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
bashkit | 2755b14 | Commit Preview URL Branch Preview URL |
Jun 22 2026, 07:58 PM |
getrandom 0.4.3, napi 3.9.3, syn 2.0.118, quote 1.0.46 — update the existing safe-to-deploy exemptions to the new versions so cargo vet passes for the rust-dependencies group bump.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the rust-dependencies group with 4 updates: getrandom, napi, syn and quote.
Updates
getrandomfrom 0.4.2 to 0.4.3Changelog
Sourced from getrandom's changelog.
Commits
5e7cd57Release v0.4.3 (#853)1ea268aUse manual bindings for WASIp2/3 (#830)f7290b0Update Cargo.lock (#852)16ce801Update Cargo.lock (#850)e5adfcaAddwasm64-unknown-unknownsupport forwasm_jsbackend (#848)626df8dUpdate Cargo.lock (#846)4a01cb2Update Cargo.lock (#841)f87bf39Update Cargo.lock (#836)eadb879ci: re-enable build job for x86_64-pc-cygwin (#832)d715d73CI: Reduce the number of packages that are updated for wasip2 MSRV test (#825)Updates
napifrom 3.9.2 to 3.9.3Release notes
Sourced from napi's releases.
Commits
ee58383chore(napi): release v3.9.3 (#3335)c787276fix(napi): sync referred flag when creating a weak ThreadsafeFunction (#3337)d4276cachore(deps): update dependency oxc-parser to ^0.137.0 (#3336)a0b1831perf(napi): outline non-generic core of ThreadsafeFunction::create (#3334)3759d7bchore(deps): update rust-lang/crates-io-auth-action action to v1.0.5 (#3333)dd41eebbuild(deps): bump protobufjs from 7.6.2 to 7.6.4 (#3332)cdd48b3chore(deps): update dependency oxc-parser to ^0.136.0 (#3314)e98762dchore(deps): update yarn monorepo to v4.17.0 (#3330)Updates
synfrom 2.0.117 to 2.0.118Release notes
Sourced from syn's releases.
Commits
f033ef1Release 2.0.11845f65f7Wrap long lint attributesb3f9bf8Mirror PR 1975 from readme to crate-level rustdoc97dc117Wrap PR 1975 to 80 columns0085b7aLintrepr_transparent_non_zst_fieldshas been removed9fc1c9dUpdate test suite to nightly-2026-06-12504bcc7Update test suite to nightly-2026-06-09353d20bUpdate test suite to nightly-2026-06-06f257a16Update test suite to nightly-2026-05-25b706e6eUpdate test suite to nightly-2026-05-13Updates
quotefrom 1.0.45 to 1.0.46Release notes
Sourced from quote's releases.
Commits
bc4caf2Release 1.0.46dc0e304Format with rustfmt712114cDrop arrow from syntax of quote_spanned_with_expanded_spanf93ab8aEliminate quote_spanned_with_expanded_span_as_expr macro1ff3951Eliminate __quote_spanned macro64e913aUnify quote_spanned definitions2978e8bWrap comment to 80 columns7f311a0Fix PR 329 fat arrow spacing313a8a2Remove unneeded get_span from PR 3290b33821Merge pull request #329 from Noratrieb/avoid-repeat-expandDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions