Skip to content

chore(deps): bump the cargo-minor-patch group in /packages/eql with 13 updates - #944

Merged
tobyhede merged 1 commit into
mainfrom
chore/deps-eql-cargo-minor-patch
Aug 26, 2026
Merged

chore(deps): bump the cargo-minor-patch group in /packages/eql with 13 updates#944
tobyhede merged 1 commit into
mainfrom
chore/deps-eql-cargo-minor-patch

Conversation

@tobyhede

Copy link
Copy Markdown
Contributor

Summary

Minor/patch bumps of 13 Rust crates in the EQL workspace (serde, serde_json, tokio, syn, quote, proc-macro2, minijinja, schemars, anyhow, jsonschema, chrono, rust_decimal, thiserror), lockfile only.

This is Dependabot's #932 re-opened from a maintainer branch. Dependabot-triggered workflows read the Dependabot secrets store, whose CipherStash credentials belong to a different keyset than the Actions store — the EQL SQLx suite's pinned SteVec selector tests therefore fail on every Dependabot PR regardless of the diff (the workflow-only #933 failed the identical tests). A maintainer branch runs CI with the normal Actions secrets.

Changes

Verification

  • Cherry-pick applied cleanly onto current main; lockfile only.
  • CI on this PR is the verification — the Dependabot run's PG17 shard failures were the selector drift guard firing, not the bumps.

Related

https://claude.ai/code/session_01PS9J6pu3FmmQvJHxwTVJUc

Bumps the cargo-minor-patch group in /packages/eql with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [minijinja](https://github.com/mitsuhiko/minijinja) | `2.20.0` | `2.24.0` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.145` | `1.0.151` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.18` | `2.0.20` |
| [quote](https://github.com/dtolnay/quote) | `1.0.41` | `1.0.47` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.102` | `1.0.107` |
| [syn](https://github.com/dtolnay/syn) | `2.0.108` | `2.0.119` |
| [schemars](https://github.com/GREsau/schemars) | `1.2.1` | `1.2.2` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.48.0` | `1.50.0` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.100` | `1.0.104` |
| [jsonschema](https://github.com/Stranger6667/jsonschema) | `0.46.4` | `0.46.10` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` |
| [rust_decimal](https://github.com/paupino/rust-decimal) | `1.42.0` | `1.42.1` |


Updates `minijinja` from 2.20.0 to 2.24.0
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/minijinja@minijinja-go/v2.20.0...minijinja-go/v2.24.0)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.145 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.151)

Updates `thiserror` from 2.0.18 to 2.0.20
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.20)

Updates `quote` from 1.0.41 to 1.0.47
- [Release notes](https://github.com/dtolnay/quote/releases)
- [Commits](dtolnay/quote@1.0.41...1.0.47)

Updates `proc-macro2` from 1.0.102 to 1.0.107
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.102...1.0.107)

Updates `syn` from 2.0.108 to 2.0.119
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.108...2.0.119)

Updates `schemars` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/GREsau/schemars/releases)
- [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md)
- [Commits](GREsau/schemars@v1.2.1...v1.2.2)

Updates `tokio` from 1.48.0 to 1.50.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.48.0...tokio-1.50.0)

Updates `anyhow` from 1.0.100 to 1.0.104
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.100...1.0.104)

Updates `jsonschema` from 0.46.4 to 0.46.10
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@cli-v0.46.4...ruby-v0.46.10)

Updates `chrono` from 0.4.44 to 0.4.45
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.44...v0.4.45)

Updates `rust_decimal` from 1.42.0 to 1.42.1
- [Release notes](https://github.com/paupino/rust-decimal/releases)
- [Changelog](https://github.com/paupino/rust-decimal/blob/master/CHANGELOG.md)
- [Commits](paupino/rust-decimal@1.42.0...1.42.1)

---
updated-dependencies:
- dependency-name: minijinja
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: thiserror
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: quote
  dependency-version: 1.0.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: proc-macro2
  dependency-version: 1.0.107
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: syn
  dependency-version: 2.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: schemars
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: tokio
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor-patch
- dependency-name: anyhow
  dependency-version: 1.0.104
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: jsonschema
  dependency-version: 0.46.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: chrono
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
- dependency-name: rust_decimal
  dependency-version: 1.42.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@changeset-bot

changeset-bot Bot commented Aug 25, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 1075833

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@tobyhede
tobyhede marked this pull request as ready for review August 26, 2026 00:29
@tobyhede
tobyhede requested a review from a team as a code owner August 26, 2026 00:29

@freshtonic freshtonic left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved: all 13 declared Cargo updates and their transitives are coherent, with no generated-artifact drift and all checks passing.

@tobyhede
tobyhede merged commit db8aba1 into main Aug 26, 2026
28 checks passed
@tobyhede
tobyhede deleted the chore/deps-eql-cargo-minor-patch branch August 26, 2026 01:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants