Skip to content

build(deps): bump glib from 0.18.5 to 0.20.0 in the cargo group across 1 directory#1

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/cargo-4961290be0
Closed

build(deps): bump glib from 0.18.5 to 0.20.0 in the cargo group across 1 directory#1
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/cargo-4961290be0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 14, 2026

Bumps the cargo group with 1 update in the / directory: glib.

Updates glib from 0.18.5 to 0.20.0

Release notes

Sourced from glib's releases.

0.20.0

Bilal Elmoussaoui:
      cairo: Use workspaces
      cairo: Fix ffi glib crate name
      cairo: Add missing version
      Post release version bump
      ci/docs: Deploy 0.19 release
      chore: Drop no longer needed deny skips
      docs: Move metadata back to packages
      glib: Requires Upgrade on Downgrade::Weak type
      Update clone.rs
      glib: Mark GParamSpec types as manual
      glib: Don't use macros to generate ParamSpec structs
      Update gir/gir-files submodules
      Regenerate with latest gir/gir-files
      Revert "glib: Auto generate various win32 functions"
      glib/gio: Remove no longer used version/ignore
      glib: Ignore new unsafe functions
      Fix nightly clippy warnings
      gio: Stop re-exporting all the types in prelude
      gio: Move guards to trait definitions
      gio/socket: Replace c_int import with full qualifier
      gio/tests: Guard variable that is used on windows only builds
      typos: Ignore guid false-positive
      Regenerate with latest gir/gir-files
      pango: Mark Item.get_char_offset param as const
      pango: Re-export v1_54 feature
      ci: Bump pango feature
      pango: Downgrade require version for v1.54
      Fix various nightly clippy warnings
      Update gir submodule
      Regenerate with latest gir
      Adapt to no longer renamed ffi crates
      cairo: Add missing doc aliases
      gio/tests: Remove no longer useful guard
      Revert "build(deps): bump freetype-rs from 0.36.0 to 0.37.0"
      Update dependencies

Carlos Martín Nieto:
gio: Add a method to get a stream of incoming connections to SocketListener
gio: add SocketListenerExtManual to Gir.toml

DaKnig:
spell fix

Fabio Valentini:
glib: fix UB in VariantStrIter::impl_get

Fina Wilke:
</tr></table>

... (truncated)

Commits
  • 184abe8 Update Cargo.lock
  • 673fd1f Regenerate with latest gir-files
  • a9d4e46 Update gir-files
  • b2d7678 Merge pull request #1454 from carlosmn/cmn/socket-listener-stream
  • 08b94be gio: add SocketListenerExtManual to Gir.toml
  • c0c0de7 gio: Add a method to get a stream of incoming connections to SocketListener
  • a9c1b6a Merge pull request #1453 from sdroege/update-gir-files
  • 95036c8 Update Cargo.lock
  • 1951c67 Regenerate with latest gir / gir-files
  • f697f7c glib-sys: Add version for q_sort_array()
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the cargo group with 1 update in the / directory: [glib](https://github.com/gtk-rs/gtk-rs-core).


Updates `glib` from 0.18.5 to 0.20.0
- [Release notes](https://github.com/gtk-rs/gtk-rs-core/releases)
- [Changelog](https://github.com/gtk-rs/gtk-rs-core/blob/main/CHANGELOG.md)
- [Commits](gtk-rs/gtk-rs-core@0.18.5...0.20.0)

---
updated-dependencies:
- dependency-name: glib
  dependency-version: 0.20.0
  dependency-type: direct:production
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 14, 2026
@kyaky
Copy link
Copy Markdown
Owner

kyaky commented Apr 14, 2026

Closing — this bump breaks the build. glib 0.20 is incompatible with the rest of the GUI dep set we pin (gtk 0.18 + webkit2gtk 2.0 + soup3 0.5), which all transitively depend on glib 0.18. Cargo pulls in both glib 0.18 and glib 0.20 simultaneously, and glib 0.20 fails to compile against our gobject-sys version because it requires the v2_68 feature that the gtk 0.18 chain does not enable:

error[E0425]: cannot find value `G_SIGNAL_ACCUMULATOR_FIRST_RUN` in crate `crate::gobject_ffi`
   --> glib-0.20.0/src/gobject/auto/flags.rs:119:59
note: the item is gated behind the `v2_68` feature

Moving the whole gtk-rs ecosystem to the 0.20 series at once is a coordinated multi-crate bump (gtk4-rs, webkit2gtk-rs, soup3-rs) that we do not currently own. Closing for now; will add .github/dependabot.yml to ignore this dependency group so we do not get repeated PRs.

@kyaky kyaky closed this Apr 14, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Apr 14, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/cargo/cargo-4961290be0 branch April 14, 2026 23:17
kyaky added a commit that referenced this pull request Apr 14, 2026
Context: PR #1 from dependabot proposed bumping `glib` from
0.18 to 0.20. That breaks the build because our `gtk 0.18` +
`webkit2gtk 2.0` + `soup3 0.5` chain transitively depends on
`glib 0.18`, and `glib 0.20` needs `gobject-sys` built with
the `v2_68` feature that our gtk chain disables:

    error[E0425]: cannot find value `G_SIGNAL_ACCUMULATOR_FIRST_RUN`
    note: gated behind the `v2_68` feature

The gtk-rs ecosystem is version-locked — you have to bump
gtk + glib + webkit2gtk + soup3 + friends together in a
single coordinated step, not one at a time.

This dependabot config tells GH to keep filing PRs for
non-GUI cargo deps (tokio, reqwest, serde, etc.) but leave
the GUI chain alone. Security advisories still come through
as separate SUPPORT security-update PRs — dependabot cannot
ignore those, which is the behaviour we want.

github-actions ecosystem is also enabled for future CI.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant