Skip to content

build(deps): Bump anyhow from 1.0.102 to 1.0.103 in /app#34

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/app/anyhow-1.0.103
Closed

build(deps): Bump anyhow from 1.0.102 to 1.0.103 in /app#34
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/app/anyhow-1.0.103

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 27, 2026

Copy link
Copy Markdown
Contributor

Bumps anyhow from 1.0.102 to 1.0.103.

Release notes

Sourced from anyhow's releases.

1.0.103

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)
Commits
  • 5bdb0e2 Release 1.0.103
  • e621bd3 Merge pull request #452 from dtolnay/downcast
  • 6e8c000 Eliminate pointer->reference->pointer during downcast
  • 67c4abd Add regression test for issue 451
  • 917a169 Update actions/upload-artifact@v6 -> v7
  • d9dc3fa Update actions/checkout@v6 -> v7
  • 841522b Raise minimum tested compiler to rust 1.85
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.102 to 1.0.103.
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.102...1.0.103)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.103
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 27, 2026
laconc added a commit that referenced this pull request Jul 1, 2026
Consolidates the seven open Dependabot PRs (#32#38) into one, and adds
two transitive crate bumps Dependabot doesn't open PRs for (it only
files for direct deps). Closing this obviates all seven.

## GitHub Actions (SHA re-pinned, version comment preserved)
| Action | From | To | Dependabot |
|---|---|---|---|
| `taiki-e/install-action` | `8b3c737` (v2) | `bffeee2` (v2) | #35 |
| `actions/attest-build-provenance` | v4.1.0 | v4.1.1 | #36 |
| `actions/cache/restore` | v5.0.5 | v6.1.0 | #37 |
| `actions/cache/save` | v5.0.5 | v6.1.0 | #38 |

## Cargo.lock (patch floats under the workspace's major pins)
| Crate | From | To | Dependabot |
|---|---|---|---|
| `anyhow` | 1.0.102 | 1.0.103 | #34 |
| `quote` | 1.0.45 | 1.0.46 | #33 |
| `trybuild` | 1.0.116 | 1.0.117 | #32 |
| `arrayvec` | 0.7.6 | 0.7.7 | — (transitive) |
| `cc` | 1.2.64 | 1.2.65 | — (transitive) |

The three Cargo PRs were lock-only already (the workspace pins majors —
`anyhow="1"`, `quote="1"`, `trybuild="1"` — and lets patch float), so no
`Cargo.toml` change is needed. The remaining pinned actions (`checkout`,
`rust-cache`, `upload/download-artifact`, `release-plz`,
`crates-io-auth-action`, `rust-toolchain`) are already current per
Dependabot's scan.

## Verification
- `make test` (`--workspace --all-features`) — all green
- `cargo deny check` — advisories / bans / licenses / sources ok

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like anyhow is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 1, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/app/anyhow-1.0.103 branch July 1, 2026 03:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants