chore(deps): cleanup version policy, parquet 59, unvendor whois#71
Merged
Conversation
…or whois Normalize Cargo.toml reqs to ^X.Y (no patch pins), bump arrow/parquet to ^59 (removes thrift), switch whois-service to crates.io ^0.3, refresh lockfile minors, and reconcile Dependabot/audit/deny/supply-chain docs. Co-authored-by: Cursor <cursoragent@cursor.com>
|
Bugbot is not enabled for your account, so this pull request was not reviewed. Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs. |
Codecov Report❌ Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #71 +/- ##
==========================================
+ Coverage 73.59% 79.04% +5.44%
==========================================
Files 150 137 -13
Lines 9445 8217 -1228
==========================================
- Hits 6951 6495 -456
+ Misses 2494 1722 -772 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Tighten gitleaks overrides for common web false positives, persist body_truncated and external_script scan counts, and replace zero-signal tests with behavioral regressions for the new paths. Co-authored-by: Cursor <cursoragent@cursor.com>
CI Lint failed on formatting from the secrets commit; clippy doc_markdown would have failed next. Format/docs fixed, and pre-commit now runs the same fmt-check and clippy -D warnings as CI. Co-authored-by: Cursor <cursoragent@cursor.com>
Make the invalid log-path test use a file-as-parent so create_dir_all cannot succeed on Windows, and serialize regex-cache clear/inspect tests to stop parallel invalidate_all races on macOS CI. Co-authored-by: Cursor <cursoragent@cursor.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
^X.Y(no patch pins); document policy indocs/SUPPLY_CHAIN_POSTURE.md.arrow/parquet58 → 59— thrift removed from the lockfile; drop Dependabot thrift ignore.whois-service(0.2.1patch → crates.io^0.3; norustls-pemfile).murmur3 ^0.1,reqwest ^0.12,config ^0.14(deferred).RUSTSEC-2023-0071(rsa via sqlx-mysql in lock); deny keep paste via parquet.Dependency matrix (resolved)
Test plan
cargo fmt/cargo clippy -D warningscargo test --all-features --all-targets --lockedcargo audit(rsa ignored; paste warn via deny)cargo deny check advisories bans sourcesMade with Cursor