Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 27, 2025

Bumps goblin from 0.9.3 to 0.10.0.

Changelog

Sourced from goblin's changelog.

[0.10.0] - 2025-5-25

Breaking

build: use rust 2024 edition; bump MSRV to 1.85 pe: fix address size incompatibility on 32-bit builds, thanks @​kkent030315: m4b/goblin#441 pe: fix fail on malformed certificate table parsing, thanks @​ideeockus: m4b/goblin#417 pe: remove use of generics for is_32bit, thanks @​kkent030315: m4b/goblin#435 pe: Support multiple debug directories and VCFeature, Repro, ExDllCharacteristics, POGO parsers, thanks @​kkent030315: m4b/goblin#403

Added

elf: add Loongarch macros and name mapping, thanks @​000lbh: m4b/goblin#446 pe: Add base relocation parser thanks @​kkent030315: m4b/goblin#444

Fixed

pe.header: fix parse without rich header, thanks @​ideeockus: m4b/goblin#451 pe.header: fix parse header with no dos stub, thanks @​ideeockus: m4b/goblin#456 pe.imports: ignore malformed imports in ParseMode::Permissive, thanks @​ideeockus: m4b/goblin#442 pe: Change Section Table Real Name Handling, thanks @​prettyroseslover: m4b/goblin#438 pe.tls: tlsdata.parse_with_opts - integer overflow + out of bound, thanks @​BinFlip: m4b/goblin#448 pe.debug: POGOInfo.parse_with_opts - integer overflow + out of bound, thanks @​BinFlip: m4b/goblin#449 archive: fix subtract with overflow in archive parser, thanks @​kkent030315: m4b/goblin#454 te: fix subtract with overflow in TE header parser, thanks @​kkent030315: m4b/goblin#452 archive: fix size overflow in name index parser, thanks @​kkent030315: m4b/goblin#455 coff: fix subtract with overflow in COFF header parser, thanks @​kkent030315: m4b/goblin#453

Commits
  • c077bc6 build: cargo fmt for 2024 edition
  • d04e589 build: bump version to 0.10.0; update changelog; update CI to use MSRV
  • 8764abe pe.section_table: add explicit elided lifetime as 'a for Cow
  • accd94c build: update unsafe blocks to new 2024 requirements
  • 2941655 pe.tests: add missing test annotation on test which 2024 edition caught
  • b83da6f build: bump version to 0.10.0; update to rust 2024 edition; set MSRV=1.85
  • 097a174 docs: update CHANGELOG in prep for 0.10; update readme to add 3 new contribut...
  • bc33409 PE: Add base relocation parser (#444)
  • f06b768 COFF: fix subtract with overflow in COFF header parser (#453)
  • 9c9ded7 archive: fix size overflow in name index parser (#455)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the kind/dependencies For PRs that update dependencies or related components label May 27, 2025
@simongdavies
Copy link
Contributor

@dependabot rebase

Bumps [goblin](https://github.com/m4b/goblin) from 0.9.3 to 0.10.0.
- [Changelog](https://github.com/m4b/goblin/blob/master/CHANGELOG.md)
- [Commits](m4b/goblin@0.9.3...0.10.0)

---
updated-dependencies:
- dependency-name: goblin
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/cargo/goblin-0.10.0 branch from a81e1a3 to 438483c Compare May 29, 2025 10:49
@simongdavies
Copy link
Contributor

@dependabot rebase

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 29, 2025

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

Copy link
Contributor

@jprendes jprendes left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jprendes jprendes merged commit f94e7a7 into main May 29, 2025
43 of 71 checks passed
@jprendes jprendes deleted the dependabot/cargo/goblin-0.10.0 branch May 29, 2025 15:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/dependencies For PRs that update dependencies or related components

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants