1
0
mirror of https://github.com/j178/prek.git synced 2026-04-25 02:11:36 +02:00
Commit Graph

337 Commits

Author SHA1 Message Date
Jo e78ee78947 Use stable repo keys without breaking cached clones (#1995)
Closes #1994
2026-04-23 21:12:23 +08:00
dependabot[bot] 41f1d098fd Bump rustls-webpki from 0.103.10 to 0.103.13 (#1987)
Bumps [rustls-webpki](https://github.com/rustls/webpki) from 0.103.10 to
0.103.13.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rustls/webpki/releases">rustls-webpki's
releases</a>.</em></p>
<blockquote>
<h2>0.103.13</h2>
<ul>
<li><strong>Fix reachable panic in parsing a CRL</strong>. This was
reported to us as <a
href="https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8">GHSA-82j2-j2ch-gfr8</a>.
Users who don't use CRLs are not affected.</li>
<li>For name constraints on URI names, we incorrectly processed excluded
subtrees in a way which inverted the desired meaning. See <a
href="https://redirect.github.com/rustls/webpki/pull/471">rustls/webpki#471</a>.
This was a case missing in the fix for <a
href="https://github.com/advisories/GHSA-965h-392x-2mh5">https://github.com/advisories/GHSA-965h-392x-2mh5</a>.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Actually fail closed for URI matching against excluded subtrees by
<a href="https://github.com/djc"><code>@​djc</code></a> in <a
href="https://redirect.github.com/rustls/webpki/pull/473">rustls/webpki#473</a></li>
<li>Prepare 0.103.13 by <a
href="https://github.com/ctz"><code>@​ctz</code></a> in <a
href="https://redirect.github.com/rustls/webpki/pull/474">rustls/webpki#474</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rustls/webpki/compare/v/0.103.12...v/0.103.13">https://github.com/rustls/webpki/compare/v/0.103.12...v/0.103.13</a></p>
<h2>0.103.12</h2>
<p>This release fixes two bugs in name constraint enforcement:</p>
<ul>
<li><strong>GHSA-965h-392x-2mh5</strong>: name constraints for URI names
were ignored and therefore accepted. URI name constraints are now
rejected unconditionally. Note this library does not provide an API for
asserting URI names, and URI name constraints are otherwise not
implemented.</li>
<li><strong>GHSA-xgp8-3hg3-c2mh</strong>: permitted subtree name
constraints for DNS names were accepted for certificates asserting a
wildcard name. This was incorrect because, given a name constraint of
<code>accept.example.com</code>, <code>*.example.com</code> could
feasibly allow a name of <code>reject.example.com</code> which is
outside the constraint. This is very similar to <a
href="https://go.dev/issue/76442">CVE-2025-61727</a>.</li>
</ul>
<p>Since name constraints are restrictions on otherwise properly-issued
certificates, these bugs are reachable only after signature verification
and require misissuance to exploit.</p>
<h2>What's Changed</h2>
<ul>
<li>Prepare 0.103.12 by <a
href="https://github.com/djc"><code>@​djc</code></a> in <a
href="https://redirect.github.com/rustls/webpki/pull/470">rustls/webpki#470</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rustls/webpki/compare/v/0.103.11...v/0.103.12">https://github.com/rustls/webpki/compare/v/0.103.11...v/0.103.12</a></p>
<h2>0.103.11</h2>
<p>In response to <a
href="https://redirect.github.com/rustls/webpki/issues/464">#464</a>,
we've slightly relaxed requirements for
<code>anchor_from_trust_cert()</code> to ignore unknown extensions even
if they're marked as critical. This only affects parsing a
<code>TrustAnchor</code> from DER, for which most extensions are ignored
anyway.</p>
<h2>What's Changed</h2>
<ul>
<li>Backport parsing trust anchors with unknown critical extensions to
0.103 by <a href="https://github.com/djc"><code>@​djc</code></a> in <a
href="https://redirect.github.com/rustls/webpki/pull/466">rustls/webpki#466</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rustls/webpki/commit/2879b2ce7a476181ac3050f73fe0835f04728e86"><code>2879b2c</code></a>
Prepare 0.103.13</li>
<li><a
href="https://github.com/rustls/webpki/commit/2c49773d823f48c87db30db7a66c25993c847007"><code>2c49773</code></a>
Improve tests for padding of <code>BitStringFlags</code></li>
<li><a
href="https://github.com/rustls/webpki/commit/4e3c0b393a7bfb9cbe6dcdc8309cbadf8ee00c51"><code>4e3c0b3</code></a>
Correct validation of BIT STRING constraints</li>
<li><a
href="https://github.com/rustls/webpki/commit/39c91d2525a542a7f651a1a62c3462e8115cc39e"><code>39c91d2</code></a>
Actually fail closed for URI matching against excluded subtrees</li>
<li><a
href="https://github.com/rustls/webpki/commit/27131d476e2b68a537e629d6d012bef8dad6efd3"><code>27131d4</code></a>
Bump version to 0.103.12</li>
<li><a
href="https://github.com/rustls/webpki/commit/6ecb8769cde2246e761e058709421c14a7dee6b1"><code>6ecb876</code></a>
Clean up stuttery enum variant names</li>
<li><a
href="https://github.com/rustls/webpki/commit/318b3e6e03ca2bc21600ca6bb0d0c6439b9e6aeb"><code>318b3e6</code></a>
Ignore wildcard labels when matching name constraints</li>
<li><a
href="https://github.com/rustls/webpki/commit/12196229a327d3d670798688254bd3ea24aba24b"><code>1219622</code></a>
Rewrite constraint matching to avoid permissive catch-all branch</li>
<li><a
href="https://github.com/rustls/webpki/commit/57bc62ce538c2d0d31d44b3eb8c58e6a0a764b47"><code>57bc62c</code></a>
Bump version to 0.103.11</li>
<li><a
href="https://github.com/rustls/webpki/commit/d0fa01ee0a76b7585c13ec43de5854955146ffef"><code>d0fa01e</code></a>
Allow parsing trust anchors with unknown criticial extensions</li>
<li>See full diff in <a
href="https://github.com/rustls/webpki/compare/v/0.103.10...v/0.103.13">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls-webpki&package-manager=cargo&previous-version=0.103.10&new-version=0.103.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/j178/prek/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 14:40:54 +08:00
Jo 1981c51f59 Bump version to 0.3.10 2026-04-21 19:12:54 +08:00
renovate[bot] 6ca0443ecc Update Rust crate annotate-snippets to v0.12.15 (#1955)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[annotate-snippets](https://redirect.github.com/rust-lang/annotate-snippets-rs)
| workspace.dependencies | patch | `0.12.14` → `0.12.15` |

---

### Release Notes

<details>
<summary>rust-lang/annotate-snippets-rs (annotate-snippets)</summary>

###
[`v0.12.15`](https://redirect.github.com/rust-lang/annotate-snippets-rs/blob/HEAD/CHANGELOG.md#01215---2026-04-06)

[Compare
Source](https://redirect.github.com/rust-lang/annotate-snippets-rs/compare/0.12.14...0.12.15)

##### Fixed

- Source highlighting no longer misaligns when source contains
zero-width or multi-width characters
[#&#8203;400](https://redirect.github.com/rust-lang/annotate-snippets-rs/pull/400)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/j178/prek).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImludGVybmFsIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-20 10:44:32 +08:00
renovate[bot] 776277e104 Update Rust crate tokio to v1.51.1 (#1957)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [tokio](https://tokio.rs)
([source](https://redirect.github.com/tokio-rs/tokio)) |
workspace.dependencies | patch | `1.51.0` → `1.51.1` | `1.52.1` (+1) |

---

### Release Notes

<details>
<summary>tokio-rs/tokio (tokio)</summary>

###
[`v1.51.1`](https://redirect.github.com/tokio-rs/tokio/releases/tag/tokio-1.51.1):
Tokio v1.51.1

[Compare
Source](https://redirect.github.com/tokio-rs/tokio/compare/tokio-1.51.0...tokio-1.51.1)

##### 1.51.1 (April 8th, 2026)

##### Fixed

- sync: fix semaphore reopens after forget ([#&#8203;8021])
- net: surface errors from `SO_ERROR` on `recv` for UDP sockets on Linux
([#&#8203;8001])

##### Fixed (unstable)

- metrics: fix `worker_local_schedule_count` test ([#&#8203;8008])
- rt: do not leak fd when cancelling io\_uring open operation
([#&#8203;7983])

[#&#8203;7983]: https://redirect.github.com/tokio-rs/tokio/pull/7983

[#&#8203;8001]: https://redirect.github.com/tokio-rs/tokio/pull/8001

[#&#8203;8008]: https://redirect.github.com/tokio-rs/tokio/pull/8008

[#&#8203;8021]: https://redirect.github.com/tokio-rs/tokio/pull/8021

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/j178/prek).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImludGVybmFsIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-20 10:44:22 +08:00
renovate[bot] c2b445a722 Update Rust crate toml_edit to v0.25.11 (#1958)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [toml_edit](https://redirect.github.com/toml-rs/toml) |
workspace.dependencies | patch | `0.25.10+spec-1.1.0` → `0.25.11` |

---

### Release Notes

<details>
<summary>toml-rs/toml (toml_edit)</summary>

###
[`v0.25.11`](https://redirect.github.com/toml-rs/toml/compare/v0.25.10...v0.25.11)

[Compare
Source](https://redirect.github.com/toml-rs/toml/compare/v0.25.10...v0.25.11)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/j178/prek).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImludGVybmFsIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-20 10:42:47 +08:00
renovate[bot] 1df03e9671 Update Rust crate clap_complete to v4.6.1 (#1956)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [clap_complete](https://redirect.github.com/clap-rs/clap) |
workspace.dependencies | patch | `4.6.0` → `4.6.1` | `4.6.2` |

---

### Release Notes

<details>
<summary>clap-rs/clap (clap_complete)</summary>

###
[`v4.6.1`](https://redirect.github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#461---2026-04-15)

[Compare
Source](https://redirect.github.com/clap-rs/clap/compare/clap_complete-v4.6.0...clap_complete-v4.6.1)

##### Fixes

- *(derive)* Ensure rebuilds happen when an read env variable is changed

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/j178/prek).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImludGVybmFsIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-20 10:39:43 +08:00
renovate[bot] 6fd9dd3a92 Update Rust crate similar to v3 (#1931) 2026-04-19 07:27:20 +08:00
renovate[bot] e19a2e7ef5 Update Rust crate rand to v0.10.1 [SECURITY] (#1939)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [rand](https://rust-random.github.io/book)
([source](https://redirect.github.com/rust-random/rand)) |
workspace.dependencies | patch | `0.10.0` → `0.10.1` |

### GitHub Vulnerability Alerts

####
[GHSA-cq8v-f236-94qc](https://redirect.github.com/rust-random/rand/pull/1763)

It has been reported (by @&#8203;lopopolo) that the `rand` library is
[unsound](https://rust-lang.github.io/unsafe-code-guidelines/glossary.html#soundness-of-code--of-a-library)
(i.e. that safe code using the public API can cause Undefined Behaviour)
when all the following conditions are met:

- The `log` and `thread_rng` features are enabled
- A [custom
logger](https://docs.rs/log/latest/log/#implementing-a-logger) is
defined
- The custom logger accesses `rand::rng()` (previously
`rand::thread_rng()`) and calls any `TryRng` (previously `RngCore`)
methods on `ThreadRng`
- The `ThreadRng` (attempts to) reseed while called from the custom
logger (this happens every 64 kB of generated data)
- Trace-level logging is enabled or warn-level logging is enabled and
the random source (the `getrandom` crate) is unable to provide a new
seed

`TryRng` (previously `RngCore`) methods for `ThreadRng` use `unsafe`
code to cast `*mut BlockRng<ReseedingCore>` to `&mut
BlockRng<ReseedingCore>`. When all the above conditions are met this
results in an aliased mutable reference, violating the Stacked Borrows
rules. Miri is able to detect this violation in sample code. Since
construction of [aliased mutable references is Undefined
Behaviour](https://doc.rust-lang.org/stable/nomicon/references.html),
the behaviour of optimized builds is hard to predict.

Affected versions of `rand` are `>= 0.7, < 0.9.3` and `0.10.0`.

---

### Release Notes

<details>
<summary>rust-random/rand (rand)</summary>

###
[`v0.10.1`](https://redirect.github.com/rust-random/rand/blob/HEAD/CHANGELOG.md#0101--2026-02-11)

[Compare
Source](https://redirect.github.com/rust-random/rand/compare/0.10.0...0.10.1)

This release includes a fix for a soundness bug; see [#&#8203;1763].

##### Changes

- Document panic behavior of `make_rng` and add `#[track_caller]`
([#&#8203;1761])
- Deprecate feature `log` ([#&#8203;1763])

[#&#8203;1761]: https://redirect.github.com/rust-random/rand/pull/1761

[#&#8203;1763]: https://redirect.github.com/rust-random/rand/pull/1763

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - ""
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/j178/prek).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImludGVybmFsIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-14 11:12:30 +08:00
Jo 501d1db943 Bump version to 0.3.9 (#1934) 2026-04-13 17:33:35 +08:00
Jo 90046cee4f Check and sync frozen comments during auto-update (#1896)
## Summary

`auto-update` now validates existing `# frozen:` comments against the
commit pinned in `rev`.

If the frozen comment is stale:
- in normal update mode, `auto-update` updates it to a matching ref when
possible, or removes it if no ref points to the pinned commit
- in `--dry-run`, it only reports the mismatch and does not modify the
config file
- in `--check`, it behaves like `--dry-run` and exits with status 1 if
updates would be made

This keeps frozen comments consistent with pinned SHA revisions without
adding a separate command.

## Example
```console
❯ cargo run -- auto-update --check                                                                                                                                                                                                                                                                                        
warning: [https://github.com/crate-ci/typos] frozen ref `v1.0` does not match `1111111111111111111111111111111111111111`
  --> .pre-commit-config.yaml:18:63
   |
18 |     rev: '1111111111111111111111111111111111111111' # frozen: v1.0
   |                                                               ^^^^ `v1.0` could not be resolved
   |
   = note: pinned commit `1111111111111111111111111111111111111111` does not exist in the repo
```
Closes #1864
2026-04-08 16:24:56 +08:00
renovate[bot] f61031a51c Update Rust crate serde-saphyr to 0.0.23 (#1912)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[serde-saphyr](https://redirect.github.com/bourumir-wyngs/serde-saphyr)
| workspace.dependencies | patch | `0.0.22` → `0.0.23` |

---

### Release Notes

<details>
<summary>bourumir-wyngs/serde-saphyr (serde-saphyr)</summary>

###
[`v0.0.23`](https://redirect.github.com/bourumir-wyngs/serde-saphyr/releases/tag/0.0.23):
- compile faster

[Compare
Source](https://redirect.github.com/bourumir-wyngs/serde-saphyr/compare/0.0.22...0.0.23)

- Added first-class feature gating for `serialize` and `deserialize`,
both of which are now enabled by default. Consumers can now build a
lighter dependency set by enabling only the side they need. Public
re-exports in `src/lib.rs` are now conditionally exposed based on
enabled features:

```toml
serde-saphyr = { version = "0.0.23", default-features = false, features = ["deserialize"] }
```

or

```toml
serde-saphyr = { version = "0.0.23", default-features = false, features = ["serialize"] }
```

Enabling neither feature is now rejected at compile time. This may
happen for projects that previously used `default-features = false,
features=[]`. Simple integrations that only specify the version remain
backward-compatible.

- This release also fixes serialization of empty `Vec` at root structure
level
([#&#8203;95](https://redirect.github.com/bourumir-wyngs/serde-saphyr/issues/95))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/j178/prek).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-07 14:59:18 +08:00
renovate[bot] e91a0de3e3 Lock file maintenance (#1911) 2026-04-06 22:08:29 +08:00
renovate[bot] 5b9cbb7dd0 Update Rust crate insta to v1.47.1 (#1906) 2026-04-06 20:10:21 +08:00
renovate[bot] edd64ae570 Update Rust crate rustc-hash to v2.1.2 (#1905) 2026-04-06 20:03:09 +08:00
renovate[bot] abfb744f64 Update Rust crate toml_edit to v0.25.8 (#1882) 2026-04-02 09:57:12 +08:00
renovate[bot] 9ce41ccd92 Update Rust crate tracing-subscriber to v0.3.23 (#1883) 2026-04-02 09:38:12 +08:00
renovate[bot] e2a1150d46 Update Rust crate toml to v1.1.0 2026-04-02 09:37:17 +08:00
renovate[bot] 35b696e09f Update Rust crate serde-saphyr to 0.0.22 (#1881) 2026-04-02 05:38:53 +08:00
Jo bb412c0808 Bump version to 0.3.8 (#1858)
Republish 0.3.7 due to a publish process failure.
2026-03-23 16:08:10 +08:00
Jo 1dbec0c329 Bump version to 0.3.7 (#1856) 2026-03-23 15:26:12 +08:00
Felix Blom ba62c04078 Add pretty_format_json as builtin hook (#915)
## Description

Following the information provided in
[880](https://github.com/j178/prek/issues/880). This is an
implementation of the `pretty-format-json` hook.

The
[pretty-format-json](https://grep.app/search?f.path.pattern=.pre-commit-config.yaml&q=pretty-format-json)
has 1k grep.app hits. It's the final unimplemented hook used by
`airflow` as mentioned in [this
comment](https://github.com/j178/prek/issues/880#issuecomment-3405716137).

----

##  Notes

- **Preserve JSON Order**  
- Added the `preserve_order` feature to `serde_json`. This prevents
`serde` from automatically ordering JSON data, which is important for
comparisons with older implementations.
  - This change does not appear to affect other tests/features.  
- By default, `serde` uses a `BTreeMap` for `Object`. Enabling
`preserve_order` switches it to `IndexMap`.
  - This keeps the sorting logic within the `sort-keys` argument.

- **Git-Style Diff with `similar`**  
  - Added the `similar` library to perform git-style diff checks.  
  - Binary size increase is minimal.  
- Useful as a general utility and could be leveraged in other parts of
the project, maybe needed to be relocated?
- Added color highlighting to the diffs, improving readability compared
to original `pre-commit`.


```bash
cargo clean
cargo build --release 
```
- Master branch:  **8.49 MB**
- Feature branch: **8.55 MB**
- **+66,176 bytes** (**+0.74%**) increase from master to feature branch

_Q: why is my size so much smaller than both sizes mentioned
[here](https://github.com/j178/prek/pull/884#issuecomment-3406885242)?_

-----

### Performance

Ran these commands on the `airflow` repository:
```bash
# old
pre-commit run pretty-format-json --all-files --verbose
Format JSON files........................................................Passed
- hook id: pretty-format-json
- duration: 0.03s

# Old prek implementation (python)
prek run pretty-format-json --all-files --verbose
Format JSON files........................................................Passed
- hook id: pretty-format-json
- duration: 0.03s

# New implementation (rust)
prek run pretty-format-json --all-files --verbose
Format JSON files........................................................Passed
- hook id: pretty-format-json
- duration: 0.00s
```

## Output
Old pre-commit:
<img width="601" height="376" alt="image"
src="https://github.com/user-attachments/assets/f0553015-24cf-4d23-98e8-2759f912c9b3"
/>

New:
<img width="707" height="430" alt="image"
src="https://github.com/user-attachments/assets/fa7ce303-caa9-4139-9e77-6e58db5f0725"
/>

Where both would autofix to the same:
<img width="349" height="304" alt="image"
src="https://github.com/user-attachments/assets/67baf526-787b-4aa6-a0fe-7859a2a5fb8b"
/>

---------

Co-authored-by: Felix Blom <70511386+Felix-Blom@users.noreply.github.com>
Co-authored-by: Jo <10510431+j178@users.noreply.github.com>
2026-03-23 14:58:11 +08:00
dependabot[bot] c88372cc1f Bump rustls-webpki from 0.103.9 to 0.103.10 (#1845)
Bumps [rustls-webpki](https://github.com/rustls/webpki) from 0.103.9 to
0.103.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rustls/webpki/releases">rustls-webpki's
releases</a>.</em></p>
<blockquote>
<h2>0.103.10</h2>
<p><strong>Correct selection of candidate CRLs by Distribution Point and
Issuing Distribution Point</strong>. If a certificate had more than one
<code>distributionPoint</code>, then only the first
<code>distributionPoint</code> would be considered against each CRL's
<code>IssuingDistributionPoint</code> <code>distributionPoint</code>,
and then the certificate's subsequent <code>distributionPoint</code>s
would be ignored.</p>
<p>The impact was that correct provided CRLs would not be consulted to
check revocation. With <code>UnknownStatusPolicy::Deny</code> (the
default) this would lead to incorrect but safe
<code>Error::UnknownRevocationStatus</code>. With
<code>UnknownStatusPolicy::Allow</code> this would lead to inappropriate
acceptance of revoked certificates.</p>
<p>This vulnerability is thought to be of limited impact. This is
because both the certificate and CRL are signed -- an attacker would
need to compromise a trusted issuing authority to trigger this bug. An
attacker with such capabilities could likely bypass revocation checking
through other more impactful means (such as publishing a valid, empty
CRL.)</p>
<p>More likely, this bug would be latent in normal use, and an attacker
could leverage faulty revocation checking to continue using a revoked
credential.</p>
<p>This vulnerability is identified by <a
href="https://github.com/rustls/webpki/security/advisories/GHSA-pwjx-qhcg-rvj4">GHSA-pwjx-qhcg-rvj4</a>.
Thank you to <a href="https://github.com/1seal"><code>@​1seal</code></a>
for the report.</p>
<h2>What's Changed</h2>
<ul>
<li>Freshen up rel-0.103 by <a
href="https://github.com/ctz"><code>@​ctz</code></a> in <a
href="https://redirect.github.com/rustls/webpki/pull/455">rustls/webpki#455</a></li>
<li>Prepare 0.103.10 by <a
href="https://github.com/ctz"><code>@​ctz</code></a> in <a
href="https://redirect.github.com/rustls/webpki/pull/458">rustls/webpki#458</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rustls/webpki/compare/v/0.103.9...v/0.103.10">https://github.com/rustls/webpki/compare/v/0.103.9...v/0.103.10</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rustls/webpki/commit/348ce01c01cf8ce21199090c98853992c9c047a8"><code>348ce01</code></a>
Prepare 0.103.10</li>
<li><a
href="https://github.com/rustls/webpki/commit/dbde5921164c6e3ea0928654de8cb7d5de8c2b33"><code>dbde592</code></a>
crl: fix authoritative_for() support for multiple URIs</li>
<li><a
href="https://github.com/rustls/webpki/commit/9c4838e6129a544a0f7f5d26ac7517860a22992c"><code>9c4838e</code></a>
avoid std::prelude imports</li>
<li><a
href="https://github.com/rustls/webpki/commit/009ef667e3bb0544808c39b64e9b6db0d626b117"><code>009ef66</code></a>
fix rust 1.94 ambiguous panic macro warnings</li>
<li><a
href="https://github.com/rustls/webpki/commit/c41360d095f9f48e14679a078afd10c2d61716fe"><code>c41360d</code></a>
build(deps): bump taiki-e/cache-cargo-install-action from 2 to 3</li>
<li><a
href="https://github.com/rustls/webpki/commit/e401d0083d9cf91d0209bae1db465267d7290233"><code>e401d00</code></a>
generate.py: reformat for black 2026.1.0</li>
<li><a
href="https://github.com/rustls/webpki/commit/06cedecbf6af88cad40b2ae2cc4a474f1429ddb6"><code>06cedec</code></a>
Take semver-compatible deps</li>
<li>See full diff in <a
href="https://github.com/rustls/webpki/compare/v/0.103.9...v/0.103.10">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls-webpki&package-manager=cargo&previous-version=0.103.9&new-version=0.103.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/j178/prek/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-21 21:09:32 +08:00
Jo 9328863e03 Upgrade aws-lc-sys to 0.39.0 (#1840) 2026-03-21 14:53:55 +08:00
renovate[bot] 1b5181abe7 Update Rust crate tempfile to v3.27.0 (#1821)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [tempfile](https://stebalien.com/projects/tempfile-rs/)
([source](https://redirect.github.com/Stebalien/tempfile)) |
workspace.dependencies | minor | `3.26.0` → `3.27.0` |

---

### Release Notes

<details>
<summary>Stebalien/tempfile (tempfile)</summary>

###
[`v3.27.0`](https://redirect.github.com/Stebalien/tempfile/blob/HEAD/CHANGELOG.md#3270)

[Compare
Source](https://redirect.github.com/Stebalien/tempfile/compare/v3.26.0...v3.27.0)

This release adds `TempPath::try_from_path` and deprecates
`TempPath::from_path`.

Prior to this release, `TempPath::from_path` made no attempts to convert
relative paths into absolute paths. The following code would have
deleted the wrong file:

```rust
let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);
```

Now:

1. `TempPath::from_path` will attempt to convert relative paths into
absolute paths. However, this isn't always possible as we need to call
`std::env::current_dir`, which can fail. If we fail to convert the
relative path to an absolute path, we simply keep the relative path.
2. The `TempPath::try_from_path` behaves exactly like
`TempPath::from_path`, except that it returns an error if we fail to
convert a relative path into an absolute path (or if the passed path is
empty).

Neither function attempt to verify the existence of the file in
question.

Thanks to [@&#8203;meng-xu-cs](https://redirect.github.com/meng-xu-cs)
for reporting this issue.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 01:00 AM and 03:59 AM, only on
Monday ( * 1-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/j178/prek).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-18 18:02:29 +08:00
renovate[bot] 464749d435 Update Rust crate tokio-tar to 0.6.0 [SECURITY] (#1818) 2026-03-18 12:26:22 +08:00
Jo dd53c3d715 Bump version to 0.3.6 (#1811) 2026-03-16 16:18:06 +08:00
renovate[bot] 5c268afebb Update Rust crate toml to v1.0.6 (#1803)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [toml](https://redirect.github.com/toml-rs/toml) |
workspace.dependencies | patch | `1.0.3+spec-1.1.0` → `1.0.6` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/169) for more information.

---

### Release Notes

<details>
<summary>toml-rs/toml (toml)</summary>

###
[`v1.0.6`](https://redirect.github.com/toml-rs/toml/compare/toml-v1.0.5...toml-v1.0.6)

[Compare
Source](https://redirect.github.com/toml-rs/toml/compare/toml-v1.0.5...toml-v1.0.6)

###
[`v1.0.5`](https://redirect.github.com/toml-rs/toml/compare/toml-v1.0.4...toml-v1.0.5)

[Compare
Source](https://redirect.github.com/toml-rs/toml/compare/toml-v1.0.4...toml-v1.0.5)

###
[`v1.0.4`](https://redirect.github.com/toml-rs/toml/compare/toml-v1.0.3...toml-v1.0.4)

[Compare
Source](https://redirect.github.com/toml-rs/toml/compare/toml-v1.0.3...toml-v1.0.4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 01:00 AM and 03:59 AM, only on
Monday ( * 1-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/j178/prek).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-16 11:10:53 +08:00
renovate[bot] 88c8de2f44 Update Rust crate toml_edit to v0.25.4 (#1804)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [toml_edit](https://redirect.github.com/toml-rs/toml) |
workspace.dependencies | patch | `0.25.3+spec-1.1.0` → `0.25.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/169) for more information.

---

### Release Notes

<details>
<summary>toml-rs/toml (toml_edit)</summary>

###
[`v0.25.4`](https://redirect.github.com/toml-rs/toml/compare/v0.25.3...v0.25.4)

[Compare
Source](https://redirect.github.com/toml-rs/toml/compare/v0.25.3...v0.25.4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 01:00 AM and 03:59 AM, only on
Monday ( * 1-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/j178/prek).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-16 11:09:39 +08:00
renovate[bot] e4792d1b1a Update Rust crate libc to v0.2.183 (#1802)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [libc](https://redirect.github.com/rust-lang/libc) |
workspace.dependencies | patch | `0.2.182` → `0.2.183` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/169) for more information.

---

### Release Notes

<details>
<summary>rust-lang/libc (libc)</summary>

###
[`v0.2.183`](https://redirect.github.com/rust-lang/libc/releases/tag/0.2.183)

[Compare
Source](https://redirect.github.com/rust-lang/libc/compare/0.2.182...0.2.183)

##### Added

- ESP-IDF: Add `SOMAXCONN`
([#&#8203;4993](https://redirect.github.com/rust-lang/libc/pull/4993))
- Linux: Add `name_to_handle_at` and `open_by_handle_at`
([#&#8203;4988](https://redirect.github.com/rust-lang/libc/pull/4988))
- NetBSD: Add `kinfo_file`, `kinfo_pcb`, and related constants
([#&#8203;4985](https://redirect.github.com/rust-lang/libc/pull/4985))
- OpenBSD: Add `kinfo_file` and related constants
([#&#8203;4991](https://redirect.github.com/rust-lang/libc/pull/4991))
- VxWorks: Add additional structs and defines
([#&#8203;5003](https://redirect.github.com/rust-lang/libc/pull/5003))
- Various: Implement `Default` for `timeval` and `timespec`
([#&#8203;4976](https://redirect.github.com/rust-lang/libc/pull/4976))

##### Fixed

- Hexagon musl: Enable unstable 64-bit `time_t` support and
`musl_v1_2_3`
([#&#8203;4992](https://redirect.github.com/rust-lang/libc/pull/4992))
- Nintendo Switch: Fix target support
([#&#8203;4982](https://redirect.github.com/rust-lang/libc/pull/4982))
- OpenBSD: Wrap an unused field in `Padding`
([#&#8203;4997](https://redirect.github.com/rust-lang/libc/pull/4997))
- Redox: Change `sigaction.sa_flags` to `c_int`
([#&#8203;4986](https://redirect.github.com/rust-lang/libc/pull/4986))
- Redox: Fix `blkcnt_t` type
([#&#8203;4994](https://redirect.github.com/rust-lang/libc/pull/4994))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 01:00 AM and 03:59 AM, only on
Monday ( * 1-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/j178/prek).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-16 10:56:41 +08:00
renovate[bot] 40e88589d2 Update Rust crate which to v8.0.2 (#1805)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [which](https://redirect.github.com/harryfei/which-rs) |
workspace.dependencies | patch | `8.0.0` → `8.0.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/169) for more information.

---

### Release Notes

<details>
<summary>harryfei/which-rs (which)</summary>

###
[`v8.0.2`](https://redirect.github.com/harryfei/which-rs/blob/HEAD/CHANGELOG.md#802)

[Compare
Source](https://redirect.github.com/harryfei/which-rs/compare/8.0.1...8.0.2)

- Dependency on `home_env` removed, the implementation found in rust
1.85.0 for a home directory has been fixed.
Thanks,
\[[@&#8203;madsmtm](https://redirect.github.com/madsmtm)],(<https://github.com/madsmtm>)
for this contribution to which!
- Dependency on `winsafe` removed, code for Windows API is now
handwritten.
- Dependency on `rustix` removed, we now depend on `libc` directly to
reduce compile times.

###
[`v8.0.1`](https://redirect.github.com/harryfei/which-rs/blob/HEAD/CHANGELOG.md#801)

[Compare
Source](https://redirect.github.com/harryfei/which-rs/compare/8.0.0...8.0.1)

- Fix Windows bug reported in [#&#8203;108
(comment)](https://redirect.github.com/harryfei/which-rs/issues/108#issuecomment-3998654328)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 01:00 AM and 03:59 AM, only on
Monday ( * 1-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/j178/prek).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-16 10:56:12 +08:00
Jo 71a91034c4 Bump deps (#1793) 2026-03-15 17:56:57 +08:00
Jo 090ca39def Optimize detect_private_key by chunked reading and using aho-corasick
Benchmark `detect-private-key` in hyperfine script
2026-03-15 17:27:56 +08:00
dependabot[bot] d8a6388a77 Bump quinn-proto from 0.11.13 to 0.11.14 (#1778) 2026-03-11 14:30:34 +08:00
Jo 46cb7bad13 Bump version to 0.3.5 (#1760) 2026-03-09 18:17:03 +08:00
Jo 73a55a40c3 Don't use native TLS backend (#1754)
This actually aligns with how the previous version behaved.
2026-03-08 20:29:03 +08:00
Jo 7b43263a64 Enable system-proxy feature on reqwest (#1738) 2026-03-04 13:36:57 +08:00
renovate[bot] 3fa7871185 Update Rust crate rand to 0.10.0 (#1646) 2026-03-04 13:07:49 +08:00
Jo 83704e8074 Upgrade reqwest to 0.13.2 (#1687)
Mostly inspired by https://github.com/astral-sh/uv/pull/17543
2026-03-04 11:46:53 +08:00
renovate[bot] d6d3617795 Update Rust crate rustix to v1.1.4 (#1728) 2026-03-02 09:10:23 +08:00
renovate[bot] a5152d7f2e Update Rust crate owo-colors to v4.3.0 (#1729) 2026-03-02 09:09:09 +08:00
renovate[bot] d09f456b9a Update Rust crate strum to 0.28.0 2026-03-02 06:28:54 +08:00
renovate[bot] 31263fbe8a Update Rust crate toml to v1.0.3 (#1717) 2026-03-01 10:45:25 +08:00
renovate[bot] 604f8baa64 Update Rust crate toml_edit to v0.25.3 2026-03-01 10:39:58 +08:00
renovate[bot] 550d46bcb7 Update Rust crate liblzma to v0.4.6 (#1714) 2026-03-01 10:23:43 +08:00
renovate[bot] 6c02e11e48 Update Rust crate clap to v4.5.60 (#1712) 2026-03-01 10:23:02 +08:00
renovate[bot] f4d4cb7df7 Update Rust crate futures to v0.3.32 2026-03-01 10:22:08 +08:00
renovate[bot] 67a66f1d79 Update Rust crate target-lexicon to v0.13.5 (#1716) 2026-03-01 10:17:57 +08:00
renovate[bot] d0d75eec2c Update Rust crate quick-xml to v0.39.2 (#1715) 2026-03-01 10:06:03 +08:00
renovate[bot] 08e90fd48c Update Rust crate async-compression to v0.4.40 (#1711) 2026-03-01 10:05:38 +08:00