Skip to content

chore(deps): Bump the cargo-major group across 1 directory with 3 updates - #2510

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/products/breg/wasm-handler-sdk/cargo-major-ee3bd0e524
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/products/breg/wasm-handler-sdk/cargo-major-ee3bd0e524

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the cargo-major group with 3 updates in the /products/breg/wasm-handler-sdk directory: miniz_oxide, pg_query and saphyr-parser.

Updates miniz_oxide from 0.8.5 to 0.9.1

Changelog

Sourced from miniz_oxide's changelog.

0.9.1 - 2026-03-13

Bug Fixes

  • reject incomplete Huffman trees with max code length > 1 (#190) - (c40992a) - Lilith River
  • bump simd_adler32 dependency version (needed for wasm issue fix) - (a9b3756) - oyvindln

Other

  • add wasmtime to workflow for running tests with wasip1 - (f70ad10) - oyvindln
  • box LZOxide.codes on wasm32 to reduce stack allocation (#189) - (d0f3e0c) - Fabrício Bracht

0.9.0 - 2026-01-12

Version bump due to a minor API break for having to add enum variants. Many enums have been made non_exhaustive to make it easier to avoid API breaks in the future. The minimum rust version is now 1.60.

Bug Fixes

  • (deflate) simplify stored compression, fixes to updating compresson level after start - (c5a7662) - oyvindln
  • (deflate) make more stuff non_exhaustive, reduce deflate stack usage a tiny bit - (cd2d14f) - oyvindln
  • (miniz_oxide) make tdeflflush and compressionstrategy non exhaustive - (130d51d) - oyvindln
  • fix flush test, make new simpler init function for compressoroxide and make flag creation function const - (3bb0d51) - oyvindln
  • make more funtions const and make tinflstatus non_exhaustive - (84a94e8) - oyvindln

Documentation

  • (inflate) add documentation and doctest for decompress_slice_iter_to_slice - (97465ca) - oyvindln

Features

  • feat(deflate): add window_bits feature for deflate, don't set wbits - (e70e395) - oyvindln

Other

  • Implement support for partial flushes (#179) - (2ede365) - Jonathan Behrens
  • Add decompress_with_limit to handle ring buffers (#183) - (bac1abe) - peckpeck
  • Flush improvements (#185) - (0d276ac) - Jim Peters
  • Fix flush_block to always insert zlib header correctly (#187) - (414d9b8) - Jim Peters

0.8.9 - 2025-06-09

Other

  • Remove compiler-builtins from rustc-dep-of-std dependencies (#173) - (025c06e) - Trevor Gross

0.8.8 - 2025-04-08

... (truncated)

Commits

Updates pg_query from 6.2.1 to 18.1.0

Changelog

Sourced from pg_query's changelog.

18.1.0 2026-10-27

  • Upgrade to Postgres 18.6 (libpg_query 18.1.0)
    • Performance: libpg_query now uses upb instead of protobuf-c for serialization, which is substantially faster thanks to its built-in arena allocation, resulting in 2x faster runtime.
    • Robustness: overly deep queries now return a "stack depth limit exceeded" error instead of crashing the process (#348), and the deparser strictly checks unexpected pointer values in input parse trees instead of crashing
    • Parser: comments are now ignored when parsing queries (they are only significant for scanning), fixing parse errors for tokens like NOT /* comment */ IN (#378); PL/pgSQL statements without bodies now return an error instead of crashing (#363)
    • Parser: PL/pgSQL parsing reworked to use proper type definitions (Postgres 18.0.0), replacing the previous ad-hoc approach
    • Deparser: parentheses are now added based on operator precedence, fixing cases where deparsed SQL changed meaning or was invalid (#371)
    • Deparser: comment handling reworked for Postgres 18 multi-statement strings: comments between statements are no longer attributed to the following statement (relevant for deparse_comments_for_query)
    • normalize: support NOTIFY statements (#340) and fix handling of U& special constants in DefElem nodes (#347)
    • summary: fix a relation going missing when a CTE shares its name (#367) and fix a memory leak when the tree walk throws an error
  • Breaking: parse, fingerprint and summary now require parser/fingerprint options arguments, corresponding to the C pg_query_parse_opts, pg_query_fingerprint_opts and pg_query_summary APIs. Options accept ParserOptions/FingerprintOptions constants or raw integers; pass 0 for the defaults:
    • parse(statement, parser_options)
    • fingerprint(statement, parser_options, fingerprint_options)
    • summary(statement, parser_options, truncate_limit)
  • Breaking: deparse now requires a DeparseOptions argument, and all deparse convenience methods (ParseResult::deparse, protobuf::ParseResult::deparse, Node::deparse, NodeEnum::deparse, NodeRef::deparse, NodeMut::deparse) likewise require it, mirroring the C PostgresDeparseOpts struct (comments, pretty_print, indent_size, max_line_length, trailing_newline, commas_start_of_line); pass Default::default() for the previous plain behavior
  • Fingerprint values changed: fingerprinting now follows Postgres 18 query ID behavior. In SELECT/DML statements the relation alias (if present) replaces the relation name and schema names are ignored; sequences of 2+ digits

... (truncated)

Commits

Updates saphyr-parser from 0.1.0 to 0.3.3

Commits
  • 9a60bea saphyr v0.3.3
  • eac3d1d CHANGELOG; update v0.3.3 release notes draft
  • 5d16228 Merge pull request #147 from wleeaf/fix/emitter-literal-cr-bom
  • abe2baf garden: add remote for @​wleeaf
  • 58916be fix(emitter): indent root literal blocks with document marker lines
  • af9a829 fix(emitter): keep trailing empty lines of multiline strings with |+
  • d629589 fix(emitter): don't write carriage returns or a BOM in literal blocks
  • eb0feb1 cargo: update clipboard-win to non-yanked version
  • 31fd871 saphyr v0.3.2
  • 2a3e03d Merge pull request #145 from spicysharkco/fix/emitter-quote-bom
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Rust implementation work. labels Oct 30, 2026
@dependabot
dependabot Bot requested a review from jeremi as a code owner October 30, 2026 14:33
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 30, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-04T04:08:09.553044Z e766859 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a286e0032a

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread Cargo.toml
napi-derive = { version = "3.6.2" }
p256 = { version = "0.14", features = ["ecdsa"] }
pg_query = { version = "=6.2.1", default-features = false }
pg_query = { version = "=18.1.0", default-features = false }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Commit the root lockfile for these version bumps

The root Cargo.lock still resolves pg_query 6.2.1, miniz_oxide 0.8.5, and saphyr-parser 0.1.0, while this commit changes their exact requirements and refreshes only the nested WASM SDK lockfile. Cargo defines --locked as asserting that Cargo.lock remains unchanged, so the root workspace's documented locked check and test commands cannot resolve this manifest and fail before compiling; regenerate and commit the root lockfile as part of the bump.

AGENTS.md reference: AGENTS.md:L292-L300

Useful? React with 👍 / 👎.

Comment thread Cargo.toml
napi-derive = { version = "3.6.2" }
p256 = { version = "0.14", features = ["ecdsa"] }
pg_query = { version = "=6.2.1", default-features = false }
pg_query = { version = "=18.1.0", default-features = false }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep reviewed SQL valid on PostgreSQL 17

Once the lockfile/build issues are corrected, this switches offline SQL validation to PostgreSQL 18.6 grammar even though BReg still supports PostgreSQL 17. validate_alter_table accepts AtAddConstraint without inspecting the new constraint options, so a reviewed step such as ALTER TABLE ... ADD CONSTRAINT ... CHECK (...) NOT ENFORCED can pass tooling validation and then fail with a syntax error during activation on a supported PostgreSQL 17 deployment. Pin validation to PostgreSQL 17 grammar or explicitly reject PostgreSQL 18-only options and add a PostgreSQL 17 migration test before taking this bump.

AGENTS.md reference: products/breg/AGENTS.md:L200-L208

Useful? React with 👍 / 👎.

Comment thread Cargo.toml
rustls-native-certs = { version = "0.8.4" }
ryu-js = { version = "=1.0.3" }
saphyr-parser = { version = "=0.1.0" }
saphyr-parser = { version = "=0.3.3" }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Refresh the YAML parser vetting for 0.3.3

The maintained crates/registry-platform-yaml/README.md:427-439 still says this dependency is pinned exactly to 0.1.0 and presents version-specific unsafe-code, source-size, dependency, event-suite, and cargo deny evidence for that release. Moving the parser trust boundary to 0.3.3 without updating this section leaves the current dependency described by evidence gathered for different source and makes the documented pin false; re-vet 0.3.3 and update the parser-choice evidence alongside the bump.

AGENTS.md reference: products/platform/AGENTS.md:L14-L17

Useful? React with 👍 / 👎.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/products/breg/wasm-handler-sdk/cargo-major-ee3bd0e524 branch 5 times, most recently from 5d3b442 to d736f6c Compare November 3, 2026 16:53
…ates

Bumps the cargo-major group with 3 updates in the /products/breg/wasm-handler-sdk directory: [miniz_oxide](https://github.com/Frommi/miniz_oxide), [pg_query](https://github.com/pganalyze/pg_query.rs) and [saphyr-parser](https://github.com/saphyr-rs/saphyr).


Updates `miniz_oxide` from 0.8.5 to 0.9.1
- [Changelog](https://github.com/Frommi/miniz_oxide/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Frommi/miniz_oxide/commits)

Updates `pg_query` from 6.2.1 to 18.1.0
- [Changelog](https://github.com/pganalyze/pg_query.rs/blob/main/CHANGELOG.md)
- [Commits](pganalyze/pg_query.rs@v6.2.1...v18.1.0)

Updates `saphyr-parser` from 0.1.0 to 0.3.3
- [Release notes](https://github.com/saphyr-rs/saphyr/releases)
- [Commits](saphyr-rs/saphyr@v0.1.0...v0.3.3)

---
updated-dependencies:
- dependency-name: miniz_oxide
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-major
- dependency-name: pg_query
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo-major
- dependency-name: saphyr-parser
  dependency-version: 0.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/products/breg/wasm-handler-sdk/cargo-major-ee3bd0e524 branch from d736f6c to e766859 Compare November 4, 2026 04:05
@dependabot @github

dependabot Bot commented on behalf of github Nov 7, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 7, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/products/breg/wasm-handler-sdk/cargo-major-ee3bd0e524 branch November 7, 2026 01:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Rust implementation work.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants