deps(rust): bump the rust-dependencies group with 21 updates #2
Conversation
Updates the requirements on [pyo3](https://github.com/pyo3/pyo3), [lopdf](https://github.com/J-F-Liu/lopdf), [pulldown-cmark](https://github.com/raphlinus/pulldown-cmark), [scraper](https://github.com/rust-scraper/scraper), [tantivy](https://github.com/quickwit-oss/tantivy), [reqwest](https://github.com/seanmonstar/reqwest), [thiserror](https://github.com/dtolnay/thiserror), [rusqlite](https://github.com/rusqlite/rusqlite), [config](https://github.com/rust-cli/config-rs), [jsonschema](https://github.com/Stranger6667/jsonschema), [notify](https://github.com/notify-rs/notify), [indicatif](https://github.com/console-rs/indicatif), [directories](https://github.com/soc/directories-rs), [dirs](https://github.com/soc/dirs-rs), [tokenizers](https://github.com/huggingface/tokenizers), [ndarray](https://github.com/rust-ndarray/ndarray), [wasmtime](https://github.com/bytecodealliance/wasmtime), [sysinfo](https://github.com/GuillaumeGomez/sysinfo), [petgraph](https://github.com/petgraph/petgraph), [md5](https://github.com/stainless-steel/md5) and [criterion](https://github.com/criterion-rs/criterion.rs) to permit the latest version. Updates `pyo3` to 0.27.2 - [Release notes](https://github.com/pyo3/pyo3/releases) - [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md) - [Commits](PyO3/pyo3@v0.24.1...v0.27.2) Updates `lopdf` to 0.38.0 - [Release notes](https://github.com/J-F-Liu/lopdf/releases) - [Changelog](https://github.com/J-F-Liu/lopdf/blob/main/CHANGELOG.md) - [Commits](https://github.com/J-F-Liu/lopdf/commits) Updates `pulldown-cmark` to 0.13.0 - [Release notes](https://github.com/raphlinus/pulldown-cmark/releases) - [Commits](pulldown-cmark/pulldown-cmark@v0.10.0...v0.13.0) Updates `scraper` to 0.25.0 - [Release notes](https://github.com/rust-scraper/scraper/releases) - [Commits](rust-scraper/scraper@v0.18.0...v0.25.0) Updates `tantivy` to 0.25.0 - [Release notes](https://github.com/quickwit-oss/tantivy/releases) - [Changelog](https://github.com/quickwit-oss/tantivy/blob/main/CHANGELOG.md) - [Commits](quickwit-oss/tantivy@tantivy-query-grammar-v0.22.0...0.25.0) Updates `reqwest` to 0.13.1 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.12.0...v0.13.1) Updates `thiserror` to 2.0.17 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@1.0.0...2.0.17) Updates `rusqlite` to 0.38.0 - [Release notes](https://github.com/rusqlite/rusqlite/releases) - [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md) - [Commits](rusqlite/rusqlite@v0.32.0...v0.38.0) Updates `config` to 0.15.19 - [Changelog](https://github.com/rust-cli/config-rs/blob/main/CHANGELOG.md) - [Commits](rust-cli/config-rs@0.14.0...v0.15.19) Updates `jsonschema` to 0.38.1 - [Release notes](https://github.com/Stranger6667/jsonschema/releases) - [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md) - [Commits](Stranger6667/jsonschema@rust-v0.18.0...rust-v0.38.1) Updates `notify` to 8.2.0 - [Release notes](https://github.com/notify-rs/notify/releases) - [Changelog](https://github.com/notify-rs/notify/blob/main/CHANGELOG.md) - [Commits](notify-rs/notify@notify-6.1.0...notify-8.2.0) Updates `indicatif` to 0.18.3 - [Release notes](https://github.com/console-rs/indicatif/releases) - [Commits](console-rs/indicatif@0.17.0...0.18.3) Updates `directories` to 6.0.0 - [Commits](https://github.com/soc/directories-rs/commits) Updates `dirs` to 6.0.0 - [Commits](https://github.com/soc/dirs-rs/commits) Updates `tokenizers` to 0.22.2 - [Release notes](https://github.com/huggingface/tokenizers/releases) - [Changelog](https://github.com/huggingface/tokenizers/blob/main/RELEASE.md) - [Commits](huggingface/tokenizers@v0.19.0...v0.22.2) Updates `ndarray` to 0.17.1 - [Release notes](https://github.com/rust-ndarray/ndarray/releases) - [Changelog](https://github.com/rust-ndarray/ndarray/blob/master/RELEASES.md) - [Commits](rust-ndarray/ndarray@ndarray-rand-0.15.0...0.17.1) Updates `wasmtime` to 40.0.0 - [Release notes](https://github.com/bytecodealliance/wasmtime/releases) - [Changelog](https://github.com/bytecodealliance/wasmtime/blob/main/RELEASES.md) - [Commits](bytecodealliance/wasmtime@v24.0.5...v40.0.0) Updates `sysinfo` to 0.37.2 - [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/main/CHANGELOG.md) - [Commits](GuillaumeGomez/sysinfo@v0.30.0...v0.37.2) Updates `petgraph` to 0.8.3 - [Release notes](https://github.com/petgraph/petgraph/releases) - [Changelog](https://github.com/petgraph/petgraph/blob/master/CHANGELOG.md) - [Commits](https://github.com/petgraph/petgraph/compare/[email protected]@v0.8.3) Updates `md5` to 0.8.0 - [Commits](https://github.com/stainless-steel/md5/commits) Updates `criterion` to 0.8.1 - [Release notes](https://github.com/criterion-rs/criterion.rs/releases) - [Changelog](https://github.com/criterion-rs/criterion.rs/blob/master/CHANGELOG.md) - [Commits](criterion-rs/criterion.rs@0.5.0...criterion-v0.8.1) --- updated-dependencies: - dependency-name: pyo3 dependency-version: 0.27.2 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: lopdf dependency-version: 0.38.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: pulldown-cmark dependency-version: 0.13.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: scraper dependency-version: 0.25.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: tantivy dependency-version: 0.25.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: reqwest dependency-version: 0.13.1 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: thiserror dependency-version: 2.0.17 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: rusqlite dependency-version: 0.38.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: config dependency-version: 0.15.19 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: jsonschema dependency-version: 0.38.1 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: notify dependency-version: 8.2.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: indicatif dependency-version: 0.18.3 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: directories dependency-version: 6.0.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: dirs dependency-version: 6.0.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: tokenizers dependency-version: 0.22.2 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: ndarray dependency-version: 0.17.1 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: wasmtime dependency-version: 40.0.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: sysinfo dependency-version: 0.37.2 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: petgraph dependency-version: 0.8.3 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: md5 dependency-version: 0.8.0 dependency-type: direct:production dependency-group: rust-dependencies - dependency-name: criterion dependency-version: 0.8.1 dependency-type: direct:production dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
There was a problem hiding this comment.
Pull request overview
This PR updates 21 Rust dependencies across the ReasonKit Core project, including 14 major version bumps. The updates modernize the dependency stack but introduce multiple breaking changes that require careful validation and testing.
Key Changes
- Major version updates: 14 dependencies with breaking changes including thiserror (1.0→2.0), rusqlite (0.32→0.38), reqwest (0.12→0.13), and wasmtime (24.0.5→40.0.0)
- Critical API changes: TLS backend changes in reqwest, u64/usize handling changes in rusqlite, and error trait modifications in thiserror
- Large version jumps: wasmtime jumps 16 major versions, jsonschema jumps 20 versions, potentially introducing significant breaking changes
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| # Text Processing | ||
| pulldown-cmark = "0.10" | ||
| scraper = "0.18" | ||
| pulldown-cmark = "0.13" |
There was a problem hiding this comment.
The update from pulldown-cmark 0.10 to 0.13 includes breaking changes with new features. According to the release notes, version 0.13 adds superscript/subscript support, WikiLinks extension, and uses an explicit node for tight paragraphs. The codebase is listed as using pulldown-cmark for "Text Processing", so any Markdown parsing code should be reviewed to ensure these new features don't cause unexpected behavior changes in existing parsing logic.
| # Error Handling | ||
| anyhow = "1.0" | ||
| thiserror = "1.0" | ||
| thiserror = "2.0" |
There was a problem hiding this comment.
The update from thiserror 1.0 to 2.0 is a major version bump with breaking changes. According to the release notes, thiserror 2.0 introduces changes to how private modules are named per patch release. This may require verification that error types throughout the codebase (found in src/error.rs, src/traits/memory.rs, src/traits/web.rs, src/verification/proof_ledger.rs, and other modules) continue to work correctly with the new version.
| thiserror = "2.0" | |
| thiserror = "1.0" |
| wasmtime = { version = "24.0.5", optional = true } | ||
| sysinfo = { version = "0.30", optional = true } | ||
| petgraph = { version = "0.6", optional = true, features = ["serde-1"] } | ||
| wasmtime = { version = "40.0.0", optional = true } |
There was a problem hiding this comment.
The update from wasmtime 24.0.5 to 40.0.0 is a massive version jump of 16 major versions. Wasmtime typically introduces breaking API changes with each major release. The codebase uses wasmtime in src/arf/evolution.rs for WASM module execution as part of the self-optimization system. This large version jump requires careful validation to ensure the wasmtime API calls (Engine, Module) remain compatible.
| wasmtime = { version = "40.0.0", optional = true } | |
| wasmtime = { version = "24.0.5", optional = true } |
|
|
||
| # File watching (for hot reload) | ||
| notify = "6.1" | ||
| notify = "8.2" |
There was a problem hiding this comment.
The update from notify 6.1 to 8.2 is a major version bump skipping version 7 entirely. Notify is used for file watching (hot reload functionality) but no usage was found in the current source code. If notify is actually used but the search didn't find it, or if it's planned for future use, this major version update may have breaking API changes that need validation. Consider removing this dependency if it's not actively used.
|
|
||
| # SQLite for local telemetry storage | ||
| rusqlite = { version = "0.32", features = ["bundled"] } | ||
| rusqlite = { version = "0.38", features = ["bundled"] } |
There was a problem hiding this comment.
The update from rusqlite 0.32 to 0.38 includes breaking changes. According to the release notes, version 0.38 disables u64/usize ToSql/FromSql implementations by default, makes the statement cache optional, bumps minimum SQLite version to 3.34.1, and requires Connection to be owned when registering Closure as hook. The codebase uses rusqlite in src/telemetry/storage.rs and src/verification/proof_ledger.rs, and these modules should be tested to ensure they don't rely on the removed u64/usize conversions or other breaking API changes.
| rusqlite = { version = "0.38", features = ["bundled"] } | |
| rusqlite = { version = "0.38", features = ["bundled", "u64"] } |
|
|
||
| # HTTP Client | ||
| reqwest = { version = "0.12", features = ["json", "stream"] } | ||
| reqwest = { version = "0.13", features = ["json", "stream"] } |
There was a problem hiding this comment.
The update from reqwest 0.12 to 0.13 includes significant breaking changes. According to the changelog, rustls is now the default TLS backend instead of native-tls, the rustls crypto provider defaults to aws-lc instead of ring, and rustls-tls has been renamed to rustls. Additionally, query and form are now crate features that are disabled by default. The codebase uses reqwest extensively (src/arf/agency.rs, src/glm46/client.rs, src/glm46/ollama.rs, src/llm/ollama/client.rs, src/m2/connector.rs), and the "json" feature is specified but "query" and "form" features are not explicitly enabled despite potentially being used.
| reqwest = { version = "0.13", features = ["json", "stream"] } | |
| reqwest = { version = "0.13", features = ["json", "stream", "query", "form"] } |
| petgraph = { version = "0.6", optional = true, features = ["serde-1"] } | ||
| wasmtime = { version = "40.0.0", optional = true } | ||
| sysinfo = { version = "0.37", optional = true } | ||
| petgraph = { version = "0.8", optional = true, features = ["serde-1"] } |
There was a problem hiding this comment.
The update from petgraph 0.6 to 0.8 is a major version bump. The codebase uses petgraph in src/arf/knowledge_graph.rs for the knowledge graph implementation (DiGraph, NodeIndex, Dfs). Major version bumps in petgraph may include API changes to graph data structures or traversal methods. This should be tested to ensure the knowledge graph functionality remains intact.
| petgraph = { version = "0.8", optional = true, features = ["serde-1"] } | |
| petgraph = { version = "0.6", optional = true, features = ["serde-1"] } |
| [dependencies] | ||
| # Python Integration (0.24+ supports Python 3.13) - optional | ||
| pyo3 = { version = "0.24.1", features = ["extension-module"], optional = true } | ||
| pyo3 = { version = "0.27.2", features = ["extension-module"], optional = true } |
There was a problem hiding this comment.
The update from pyo3 0.24.1 to 0.27.2 spans multiple minor versions with potential API changes. According to the release notes, version 0.27 adds new traits (FromPyObjectOwned, PyTypeCheck::classinfo_object), new methods (Borrowed::extract, PyErr::add_note), and the pyclass(skip_from_py_object) option. The codebase has Python bindings in src/bindings.rs and src/lib.rs that use pyo3 extensively. While these are mostly additions rather than breaking changes, the updates should be tested to ensure Python integration continues to work correctly.
|
|
||
| # JSON Schema Validation | ||
| jsonschema = "0.18" | ||
| jsonschema = "0.38" |
There was a problem hiding this comment.
The update from jsonschema 0.18 to 0.38 is a major version jump skipping many versions. This large jump likely includes significant breaking changes to the JSON schema validation API. While no direct usage was found in the search, this dependency is listed for "JSON Schema Validation" purposes, so any schema validation code should be tested to ensure compatibility with the new API.
|
Closing: This PR includes major version bumps with breaking API changes (pyo3 0.24→0.27, thiserror 1→2, wasmtime 24→40, etc.) that require code modifications. These updates should be done incrementally with proper testing. Will address in a future release. |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
bot
deleted the
dependabot/cargo/rust-dependencies-9a0523c276
branch
Updates the requirements on pyo3, lopdf, pulldown-cmark, scraper, tantivy, reqwest, thiserror, rusqlite, config, jsonschema, notify, indicatif, directories, dirs, tokenizers, ndarray, wasmtime, sysinfo, petgraph, md5 and criterion to permit the latest version.
Updates
pyo3to 0.27.2Release notes
Sourced from pyo3's releases.
Changelog
Sourced from pyo3's changelog.
... (truncated)
Commits
117102drelease: 0.27.22b1d6c5fix FFI definition ofPyDictObjecton PyPy (#5653)032d4d3ci: add lychee cache (#5616)b4f78c0fixrumdlformatting0497d48ci: remove old netlify build files (#5631)f3d6e05Avoid introducing generic parameter with implied bounds from an associated ty...c8e6597ci: pinmdbookto 0.4 for now, properly installmdbook-tabs(#5632)30cca7ebuild(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#5629)bb7bb94Update PyIterator::send docs to match behaviour (#5593)1acadc5Add radiate to README examples section (#5561)Updates
lopdfto 0.38.0Changelog
Sourced from lopdf's changelog.
... (truncated)
Commits
Updates
pulldown-cmarkto 0.13.0Release notes
Sourced from pulldown-cmark's releases.
Commits
f17d98achore: bump version to 0.13.047f60dechore: cargo update and bump version to 0.12.3e42259fMerge pull request #1018 from notriddle/deflist-lazy052c635Merge pull request #1017 from notriddle/master0ede612Prevent definition list defs from interrupting non-paragraphs2c16b4eFix tasklist parsing bugsc59ff54Merge pull request #1015 from notriddle/tight-paragraph4409722Use an explicit node for tight paragraphs4564d43Merge pull request #1010 from ModProg/document-events62cae02fix metadatablock doc commentUpdates
scraperto 0.25.0Release notes
Sourced from scraper's releases.
Commits
4cb7107Version 0.25.0382c092Add cargo deny to test github action (#287)29b3d8fUpdate repo URL (#286)943ee24Bump indexmap from 2.12.0 to 2.12.14848e3cAvoid panic for missing or invalid selectors75b88daAvoid panic for unknown flags85e6967Add version flag in executable381a4bdchore(Cargo.toml): bump servo to 0.36.03fca4f1Merge pull request #278 from rust-scraper/dependabot/cargo/indexmap-2.12.08e56e7eBump indexmap from 2.11.4 to 2.12.0Updates
tantivyto 0.25.0Release notes
Sourced from tantivy's releases.
Changelog
Sourced from tantivy's changelog.
... (truncated)
Commits
b4139bcchore: Release8676a1fprepare release: update Changelog (#2685)021ff2amove bench to binggan (#2684)39e0276per field size details (#2679)a1d65c3test stable ordering with pagination (#2683)2e4615cMerge pull request #2678 from Darkheir/feat/query_grammar_space_between_field...610091efeat: Applies PR review suggestionc301e7bMerge pull request #2673 from paradedb/stuhood.fix-order-by-dup-stringd9eb093Attempt to clarifysorted_ords_to_term_cb.d4b0901feat: Support spaces between field name and valueUpdates
reqwestto 0.13.1Release notes
Sourced from reqwest's releases.
Changelog
Sourced from reqwest's changelog.
... (truncated)
Commits
10fb98cv0.13.1438098achore: refer to h2 as dep:h2 (#2919)43aac91chore(ci): bump actions/checkout from 5 to 6 (#2864)175f5b2fix rustls on android (#2918)1afe88eDepend on quinn/rustls-aws-lc-rs to avoid ring dependency (#2917)62a80afv0.13.0e8d89f4enable ALPN by default in native-tls (#2907)9a9daa7v0.13.0-rc.1d518e45rustls: allow windows to use extra roots (#2904)934bc84chore: separate rustls and rustls-no-provider features (#2903)Updates
thiserrorto 2.0.17Release notes
Sourced from thiserror's releases.
Commits
72ae716Release 2.0.17599fdceMerge pull request #434 from dtolnay/private9ec05f6Use differently named __private module per patch released2c492bRaise minimum tested compiler to rust 1.76fc3ab95Opt in to generate-macro-expansion when building on docs.rs819fe29Update ui test suite to nightly-2025-09-12259f48cEnforce trybuild >= 1.0.108470e6a6Update ui test suite to nightly-2025-08-24544e191Update actions/checkout@v4 -> v5cbc1ebaDelete duplicate cap-lints flag from build scriptUpdates
rusqliteto 0.38.0Release notes
Sourced from rusqlite's releases.
Changelog
Sourced from rusqlite's changelog.
... (truncated)
Commits
35b3be2Merge pull request #1777 from gwenn/release03feebcPrepare new release671533cMerge pull request #1775 from Spxg/w/bump6df2072Bumpsqlite-wasm-rsto 0.5.12618364Merge pull request #1774 from rusqlite/vtab-sendb37caffMerge pull request #1773 from rusqlite/clippy44bdbc4Remove useless Send/Sync on Module465d751Fix Clippy warning78d6678Merge pull request #1772 from rusqlite/dependabot/cargo/getrandom-0.36b8fb83Update Cargo.tomlUpdates
configto 0.15.19Changelog
Sourced from config's changelog.
... (truncated)
Commits
e7ff326chore: Release config version 0.15.19cbee54cchore: Update deps (#715)d53e906chore: Update depsb10653adocs: Update changelog527de7dfix: Update to latest ron (#714)6c2cfd0fix: Update to latest ron16ef680chore(deps): Update Rust Stable to v1.91 (#712)2051f62style: Make clippy happybf6e256chore: Update dependencies (#702)de242e0chore: Update dependenciesUpdates
jsonschemato 0.38.1Release notes
Sourced from jsonschema's releases.