build(deps): bump glib from 0.18.5 to 0.20.0 in the cargo group across 1 directory#1
build(deps): bump glib from 0.18.5 to 0.20.0 in the cargo group across 1 directory#1dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the cargo group with 1 update in the / directory: [glib](https://github.com/gtk-rs/gtk-rs-core). Updates `glib` from 0.18.5 to 0.20.0 - [Release notes](https://github.com/gtk-rs/gtk-rs-core/releases) - [Changelog](https://github.com/gtk-rs/gtk-rs-core/blob/main/CHANGELOG.md) - [Commits](gtk-rs/gtk-rs-core@0.18.5...0.20.0) --- updated-dependencies: - dependency-name: glib dependency-version: 0.20.0 dependency-type: direct:production dependency-group: cargo ... Signed-off-by: dependabot[bot] <support@github.com>
|
Closing — this bump breaks the build. Moving the whole gtk-rs ecosystem to the 0.20 series at once is a coordinated multi-crate bump (gtk4-rs, webkit2gtk-rs, soup3-rs) that we do not currently own. Closing for now; will add |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
Context: PR #1 from dependabot proposed bumping `glib` from 0.18 to 0.20. That breaks the build because our `gtk 0.18` + `webkit2gtk 2.0` + `soup3 0.5` chain transitively depends on `glib 0.18`, and `glib 0.20` needs `gobject-sys` built with the `v2_68` feature that our gtk chain disables: error[E0425]: cannot find value `G_SIGNAL_ACCUMULATOR_FIRST_RUN` note: gated behind the `v2_68` feature The gtk-rs ecosystem is version-locked — you have to bump gtk + glib + webkit2gtk + soup3 + friends together in a single coordinated step, not one at a time. This dependabot config tells GH to keep filing PRs for non-GUI cargo deps (tokio, reqwest, serde, etc.) but leave the GUI chain alone. Security advisories still come through as separate SUPPORT security-update PRs — dependabot cannot ignore those, which is the behaviour we want. github-actions ecosystem is also enabled for future CI.
Bumps the cargo group with 1 update in the / directory: glib.
Updates
glibfrom 0.18.5 to 0.20.0Release notes
Sourced from glib's releases.
... (truncated)
Commits
184abe8Update Cargo.lock673fd1fRegenerate with latest gir-filesa9d4e46Update gir-filesb2d7678Merge pull request #1454 from carlosmn/cmn/socket-listener-stream08b94begio: add SocketListenerExtManual to Gir.tomlc0c0de7gio: Add a method to get a stream of incoming connections to SocketListenera9c1b6aMerge pull request #1453 from sdroege/update-gir-files95036c8Update Cargo.lock1951c67Regenerate with latest gir / gir-filesf697f7cglib-sys: Add version forq_sort_array()Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.