chore(deps): Bump napi-derive from 2.16.13 to 3.5.6 in /src/code-validator/guest - #133
Merged
simongdavies merged 4 commits intoJun 3, 2026
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
dependabot
Bot
force-pushed
the
dependabot/cargo/src/code-validator/guest/napi-derive-3.5.6
branch
from
May 14, 2026 05:24
406ad02 to
36e09bc
Compare
Bumps [napi-derive](https://github.com/napi-rs/napi-rs) from 2.16.13 to 3.5.6. - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](https://github.com/napi-rs/napi-rs/compare/napi-derive@2.16.13...napi-derive-v3.5.6) --- updated-dependencies: - dependency-name: napi-derive dependency-version: 3.5.6 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bump napi-derive together with napi to v3 (they are version-coupled); napi-build stays at v2 (no v3 exists). No Rust code changes are needed — the 3.x API used by the host crate is source-compatible. napi-derive 3 makes `napi build` emit JSDoc into the generated src/code-validator/guest/host/index.d.ts, which is not Prettier-formatted. That file is a build artifact (the hand-written canonical types live in src/code-validator/guest/index.d.ts), so it is now gitignored and prettierignored, matching how other generated *.d.ts files are handled. Signed-off-by: Simon Davies <simongdavies@users.noreply.github.com>
simongdavies
force-pushed
the
dependabot/cargo/src/code-validator/guest/napi-derive-3.5.6
branch
from
June 1, 2026 16:27
36e09bc to
e79aa40
Compare
simongdavies
approved these changes
Jun 1, 2026
simongdavies
enabled auto-merge (squash)
June 1, 2026 16:28
…code-validator/guest/napi-derive-3.5.6
The host build script hashed the analysis-runtime binary at build-script runtime but embedded it via include_bytes! at crate-compile time -- two separate reads of a file in a shared target dir that clippy, napi's two-pass typedef build, and repeated `just build`/`just test` runs can rebuild. Because the guest binary is not bit-for-bit reproducible, the embedded bytes could drift from the stored hash, producing "Analysis runtime binary integrity check failed" at runtime. The napi-derive 3.x bump exposed this latent race by rebuilding the addon more aggressively. Snapshot the runtime into this crate's OUT_DIR and both hash and include_bytes! that single private copy, so the embedded bytes and the stored hash are always derived from the same in-memory buffer. Also ignore the napi-generated host/index.js and regenerate Cargo.lock (convert_case de-duplication) under napi-derive 3.5.6. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: Simon Davies <simongdavies@users.noreply.github.com>
dependabot
Bot
deleted the
dependabot/cargo/src/code-validator/guest/napi-derive-3.5.6
branch
June 3, 2026 09:55
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps napi-derive from 2.16.13 to 3.5.6.
Release notes
Sourced from napi-derive's releases.
... (truncated)
Commits
e9c50bbchore: release (#3272)a2744dafix(build): on openbsd, work around local thread storage destructor crash aft...3456efffeat(napi): addThreadsafeFunction::call_async_catchto handle errors in ca...5f70bd5chore(deps): upgrade typescript to v6 (#3292)16e48d1fix(napi): invalid TypeScript generic syntax for type aliases (#3289)159395bchore(deps): update dependency oxc-parser to ^0.130.0 (#3290)86381bcfeat(cli): opt-in runtime enum for #[napi(string_enum)] via --runtime-string-...66893f1chore(deps): update release-plz/action action to v0.5.129 (#3288)e3cc8e6build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 (#3285)0e6e5f6build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#3286)