Skip to content

ci(fuzz): fix self-cancelling concurrency in fuzzer autofix#8203

Merged
joseph-isaacs merged 1 commit into
developfrom
ji/fix-fuzzer-autofix-concurrency
Jun 2, 2026
Merged

ci(fuzz): fix self-cancelling concurrency in fuzzer autofix#8203
joseph-isaacs merged 1 commit into
developfrom
ji/fix-fuzzer-autofix-concurrency

Conversation

@joseph-isaacs
Copy link
Copy Markdown
Contributor

@joseph-isaacs joseph-isaacs commented Jun 1, 2026

Problem

Filing/labeling a fuzzer issue triggers fuzzer-issue-autofix.yml, which calls the reusable fuzzer-fix-automation.yml. Both used the same concurrency group name, fuzzer-fix-<issue>:

  • caller fuzzer-issue-autofix.yml: group: fuzzer-fix-${{ github.event.issue.number }}
  • callee fuzzer-fix-automation.yml: group: fuzzer-fix-${{ inputs.issue_number || github.run_id }}

A reusable workflow runs inside its caller's run. When the caller's autofix job invoked the reusable workflow, the callee entered the identical group with cancel-in-progress: true and cancelled its own parent run.

@codspeed-hq
Copy link
Copy Markdown

codspeed-hq Bot commented Jun 1, 2026

Merging this PR will not alter performance

⚠️ Unknown Walltime execution environment detected

Using the Walltime instrument on standard Hosted Runners will lead to inconsistent data.

For the most accurate results, we recommend using CodSpeed Macro Runners: bare-metal machines fine-tuned for performance measurement consistency.

⚡ 1 improved benchmark
❌ 1 regressed benchmark
✅ 1273 untouched benchmarks

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

Mode Benchmark BASE HEAD Efficiency
Simulation chunked_varbinview_canonical_into[(1000, 10)] 162.1 µs 198 µs -18.12%
Simulation chunked_varbinview_canonical_into[(100, 100)] 309.2 µs 273.2 µs +13.16%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.


Comparing ji/fix-fuzzer-autofix-concurrency (2a4d715) with develop (326b475)

Open in CodSpeed

fuzzer-issue-autofix.yml (the issues-triggered caller) uses concurrency
group `fuzzer-fix-<issue>` to collapse the duplicate opened+labeled events
GitHub emits. The reusable fuzzer-fix-automation.yml used the *same* group
name. Because a reusable workflow runs inside its caller's run, entering the
identical group with cancel-in-progress made the fixer cancel its own parent:
the run failed after the gate job with no fix job ever starting, and no fix
PR was produced for issues filed via the label trigger.

Namespace the reusable workflow's group as `fuzzer-fix-automation-<issue>`
so it no longer collides with the caller. Direct workflow_dispatch
invocations are still deduped per issue.

Signed-off-by: Joe Isaacs <joe.isaacs@live.co.uk>
@joseph-isaacs joseph-isaacs force-pushed the ji/fix-fuzzer-autofix-concurrency branch from d1c8662 to 2a4d715 Compare June 1, 2026 18:02
@joseph-isaacs joseph-isaacs enabled auto-merge (squash) June 2, 2026 11:39
@joseph-isaacs joseph-isaacs merged commit ff5c197 into develop Jun 2, 2026
75 of 79 checks passed
@joseph-isaacs joseph-isaacs deleted the ji/fix-fuzzer-autofix-concurrency branch June 2, 2026 11:39
mwlon pushed a commit to mwlon/vortex that referenced this pull request Jun 2, 2026
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@tanstack/react-virtual](https://tanstack.com/virtual)
([source](https://redirect.github.com/TanStack/virtual/tree/HEAD/packages/react-virtual))
| [`3.13.25` →
`3.13.26`](https://renovatebot.com/diffs/npm/@tanstack%2freact-virtual/3.13.25/3.13.26)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@tanstack%2freact-virtual/3.13.26?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@tanstack%2freact-virtual/3.13.25/3.13.26?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](..vortex-data/issues/357) for more information.

---

### Release Notes

<details>
<summary>TanStack/virtual (@&vortex-data#8203;tanstack/react-virtual)</summary>

###
[`v3.13.26`](https://redirect.github.com/TanStack/virtual/blob/HEAD/packages/react-virtual/CHANGELOG.md#31326)

[Compare
Source](https://redirect.github.com/TanStack/virtual/compare/@tanstack/react-virtual@3.13.25...@tanstack/react-virtual@3.13.26)

##### Patch Changes

- Updated dependencies
\[[`fc992ab`](https://redirect.github.com/TanStack/virtual/commit/fc992ab00a15166311b79bd7580736cf01e8cc1a)]:
-
[@&vortex-data#8203;tanstack/virtual-core](https://redirect.github.com/tanstack/virtual-core)@&#8203;3.16.0

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJjaGFuZ2Vsb2cvY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
mwlon pushed a commit to mwlon/vortex that referenced this pull request Jun 2, 2026
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [lucide-react](https://lucide.dev)
([source](https://redirect.github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react))
| [`1.16.0` →
`1.17.0`](https://renovatebot.com/diffs/npm/lucide-react/1.16.0/1.17.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/lucide-react/1.17.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/lucide-react/1.16.0/1.17.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](..vortex-data/issues/357) for more information.

---

### Release Notes

<details>
<summary>lucide-icons/lucide (lucide-react)</summary>

###
[`v1.17.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/1.17.0):
Version 1.17.0

[Compare
Source](https://redirect.github.com/lucide-icons/lucide/compare/1.16.0...1.17.0)

##### What's Changed

- chore(lucide-vue-next|lucide-svelte|lucide-angular): Remove deprecated
packages by [@&vortex-data#8203;ericfennis](https://redirect.github.com/ericfennis)
in
[#&vortex-data#8203;4376](https://redirect.github.com/lucide-icons/lucide/pull/4376)
- chore(repo): Update issue templates and documentation for package ren…
by [@&vortex-data#8203;ericfennis](https://redirect.github.com/ericfennis) in
[#&vortex-data#8203;4379](https://redirect.github.com/lucide-icons/lucide/pull/4379)
- feat(site): Adds survey overlay to website by
[@&vortex-data#8203;ericfennis](https://redirect.github.com/ericfennis) in
[#&vortex-data#8203;4380](https://redirect.github.com/lucide-icons/lucide/pull/4380)
- feat(site): Certificate dev links by
[@&vortex-data#8203;ericfennis](https://redirect.github.com/ericfennis) in
[#&vortex-data#8203;4390](https://redirect.github.com/lucide-icons/lucide/pull/4390)
- fix(icons): changed `martini` icon by
[@&vortex-data#8203;jamiemlaw](https://redirect.github.com/jamiemlaw) in
[#&vortex-data#8203;4335](https://redirect.github.com/lucide-icons/lucide/pull/4335)
- chore(deps): bump brace-expansion from 1.1.11 to 5.0.6 by
[@&vortex-data#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&vortex-data#8203;4386](https://redirect.github.com/lucide-icons/lucide/pull/4386)
- chore(deps): bump
[@&vortex-data#8203;tootallnate/once](https://redirect.github.com/tootallnate/once)
from 2.0.0 to 2.0.1 by
[@&vortex-data#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&vortex-data#8203;4404](https://redirect.github.com/lucide-icons/lucide/pull/4404)
- chore(deps): bump devalue from 5.8.0 to 5.8.1 by
[@&vortex-data#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&vortex-data#8203;4391](https://redirect.github.com/lucide-icons/lucide/pull/4391)
- chore(deps): bump ws from 8.18.0 to 8.20.1 by
[@&vortex-data#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&vortex-data#8203;4392](https://redirect.github.com/lucide-icons/lucide/pull/4392)
- fix(gh-icon): limit icon size to a maximum of 256 pixels by
[@&vortex-data#8203;jguddas](https://redirect.github.com/jguddas) in
[#&vortex-data#8203;4398](https://redirect.github.com/lucide-icons/lucide/pull/4398)
- chore(dependencies): Update dependencies by
[@&vortex-data#8203;ericfennis](https://redirect.github.com/ericfennis) in
[#&vortex-data#8203;4377](https://redirect.github.com/lucide-icons/lucide/pull/4377)
- feat(copilot): Adding copilot instructions by
[@&vortex-data#8203;ericfennis](https://redirect.github.com/ericfennis) in
[#&vortex-data#8203;4407](https://redirect.github.com/lucide-icons/lucide/pull/4407)
- feat(icons): add `globe-check` by
[@&vortex-data#8203;Barakudum](https://redirect.github.com/Barakudum) in
[#&vortex-data#8203;4342](https://redirect.github.com/lucide-icons/lucide/pull/4342)
- feat(metadata): Require use-cases in meta json by
[@&vortex-data#8203;ericfennis](https://redirect.github.com/ericfennis) in
[#&vortex-data#8203;4321](https://redirect.github.com/lucide-icons/lucide/pull/4321)
- feat(icons): added `parasol` icon by
[@&vortex-data#8203;karsa-mistmere](https://redirect.github.com/karsa-mistmere) in
[#&vortex-data#8203;4347](https://redirect.github.com/lucide-icons/lucide/pull/4347)

**Full Changelog**:
<lucide-icons/lucide@1.16.0...1.17.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJjaGFuZ2Vsb2cvY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
mwlon pushed a commit to mwlon/vortex that referenced this pull request Jun 2, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [serial_test](https://redirect.github.com/palfrey/serial_test) |
dev-dependencies | minor | `3.4.0` → `3.5.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](..vortex-data/issues/357) for more information.

---

### Release Notes

<details>
<summary>palfrey/serial_test (serial_test)</summary>

###
[`v3.5.0`](https://redirect.github.com/palfrey/serial_test/releases/tag/v3.5.0)

[Compare
Source](https://redirect.github.com/palfrey/serial_test/compare/v3.4.0...v3.5.0)

#### What's Changed

- Replace scc/sdd with std::sync::Mutex for Miri strict provenance
compatibility by
[@&vortex-data#8203;justanotheranonymoususer](https://redirect.github.com/justanotheranonymoususer)
in
[#&vortex-data#8203;157](https://redirect.github.com/palfrey/serial_test/pull/157)

#### New Contributors

-
[@&vortex-data#8203;justanotheranonymoususer](https://redirect.github.com/justanotheranonymoususer)
made their first contribution in
[#&vortex-data#8203;157](https://redirect.github.com/palfrey/serial_test/pull/157)

**Full Changelog**:
<palfrey/serial_test@v3.4.0...v3.5.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJjaGFuZ2Vsb2cvY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
mwlon pushed a commit to mwlon/vortex that referenced this pull request Jun 2, 2026
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[concurrently](https://redirect.github.com/open-cli-tools/concurrently)
| [`^9.2.1` →
`^10.0.0`](https://renovatebot.com/diffs/npm/concurrently/9.2.1/10.0.1)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/concurrently/10.0.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/concurrently/9.2.1/10.0.1?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](..vortex-data/issues/357) for more information.

---

### Release Notes

<details>
<summary>open-cli-tools/concurrently (concurrently)</summary>

###
[`v10.0.1`](https://redirect.github.com/open-cli-tools/concurrently/releases/tag/v10.0.1)

[Compare
Source](https://redirect.github.com/open-cli-tools/concurrently/compare/v10.0.0...v10.0.1)

- Ensure `FlowController` type is exported -
[#&vortex-data#8203;594](https://redirect.github.com/open-cli-tools/concurrently/issues/594)

**Full Changelog**:
<open-cli-tools/concurrently@v10.0.0...v10.0.1>

###
[`v10.0.0`](https://redirect.github.com/open-cli-tools/concurrently/releases/tag/v10.0.0)

[Compare
Source](https://redirect.github.com/open-cli-tools/concurrently/compare/v9.2.1...v10.0.0)

#### 💥 Breaking Changes

- **Dropped support for Node.js <22.0.0.**
Older Node.js version have reached end-of-life, and certain features
require new-ish JS APIs.
- **concurrently is now ESM-only.**
It's now possible to `require(esm)`. See [here for
interoperability](https://socket.dev/blog/require-esm-backported-to-node-js-20).
- **Prefix colors now default to automatic** -
[#&vortex-data#8203;581](https://redirect.github.com/open-cli-tools/concurrently/issues/581)
The colors used to default to `reset` (which does nothing). Concurrently
now automatically selects a color, out of the box.
The list of colors used is not jarring nor carries semantic meaning, and
reads well in both dark and light terminal backgrounds.
- **Removed deprecated flags and options**
  - CLI flag `--name-separator`: use commas instead.
  - API option `killOthers`: use `killOthersOn` instead.

#### ✨ New Features

- Support applying modifiers to hex prefix colors (e.g. `#ff0000.bold`)
-
[#&vortex-data#8203;450](https://redirect.github.com/open-cli-tools/concurrently/issues/450)
- Support chalk's color functions in prefixes (e.g. `rgb()`, `hex()`,
`bgRgb()`, etc) -
[#&vortex-data#8203;578](https://redirect.github.com/open-cli-tools/concurrently/issues/578)
- Set prefix background color via `bg#RRGGBB` -
[#&vortex-data#8203;578](https://redirect.github.com/open-cli-tools/concurrently/issues/578)
- Allow shell override via `--shell` CLI flag/`shell` API option -
[#&vortex-data#8203;288](https://redirect.github.com/open-cli-tools/concurrently/issues/288),
[#&vortex-data#8203;589](https://redirect.github.com/open-cli-tools/concurrently/issues/589),
[#&vortex-data#8203;556](https://redirect.github.com/open-cli-tools/concurrently/issues/556)
concurrently distinguishes between cmd.exe, powershell, and POSIX-based
shells.
- Manual prefix coloring in templates e.g. `[{color}{name}{/color}]` -
[#&vortex-data#8203;583](https://redirect.github.com/open-cli-tools/concurrently/issues/583),
[#&vortex-data#8203;587](https://redirect.github.com/open-cli-tools/concurrently/issues/587)

#### 🐛 Bug fixes

- Scope quote normalization to CLI input -
[#&vortex-data#8203;582](https://redirect.github.com/open-cli-tools/concurrently/issues/582),
[#&vortex-data#8203;585](https://redirect.github.com/open-cli-tools/concurrently/issues/585)
It should now also be possible to run commands like `"/some/command" foo
bar"`
- Don't throw when color doesn't exist -
[#&vortex-data#8203;580](https://redirect.github.com/open-cli-tools/concurrently/issues/580)

#### 🔐 Security

- Address [vulnerability in
`shellquote`](https://app.snyk.io/vuln/SNYK-JS-SHELLQUOTE-16799355) -
[#&vortex-data#8203;591](https://redirect.github.com/open-cli-tools/concurrently/issues/591)

#### Other changes

- Warn about running on Snap -
[#&vortex-data#8203;584](https://redirect.github.com/open-cli-tools/concurrently/issues/584)

#### New Contributors

- [@&vortex-data#8203;philfreo](https://redirect.github.com/philfreo) made their
first contribution in
[#&vortex-data#8203;566](https://redirect.github.com/open-cli-tools/concurrently/pull/566)
- [@&vortex-data#8203;garretmh](https://redirect.github.com/garretmh) made their
first contribution in
[#&vortex-data#8203;450](https://redirect.github.com/open-cli-tools/concurrently/pull/450)
- [@&vortex-data#8203;CodeF53](https://redirect.github.com/CodeF53) made their
first contribution in
[#&vortex-data#8203;574](https://redirect.github.com/open-cli-tools/concurrently/pull/574)
- [@&vortex-data#8203;nkappler](https://redirect.github.com/nkappler) made their
first contribution in
[#&vortex-data#8203;577](https://redirect.github.com/open-cli-tools/concurrently/pull/577)
- [@&vortex-data#8203;stephanschubert](https://redirect.github.com/stephanschubert)
made their first contribution in
[#&vortex-data#8203;578](https://redirect.github.com/open-cli-tools/concurrently/pull/578)
- [@&vortex-data#8203;GermanJablo](https://redirect.github.com/GermanJablo) made
their first contribution in
[#&vortex-data#8203;581](https://redirect.github.com/open-cli-tools/concurrently/pull/581)
- [@&vortex-data#8203;y-nk](https://redirect.github.com/y-nk) made their first
contribution in
[#&vortex-data#8203;587](https://redirect.github.com/open-cli-tools/concurrently/pull/587)
- [@&vortex-data#8203;samchungy](https://redirect.github.com/samchungy) made their
first contribution in
[#&vortex-data#8203;591](https://redirect.github.com/open-cli-tools/concurrently/pull/591)
- [@&vortex-data#8203;saito-netartz](https://redirect.github.com/saito-netartz)
made their first contribution in
[#&vortex-data#8203;590](https://redirect.github.com/open-cli-tools/concurrently/pull/590)
- [@&vortex-data#8203;jeffrey-takuma](https://redirect.github.com/jeffrey-takuma)
made their first contribution in
[#&vortex-data#8203;585](https://redirect.github.com/open-cli-tools/concurrently/pull/585)

**Full Changelog**:
<open-cli-tools/concurrently@v9.2.1...v10.0.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJjaGFuZ2Vsb2cvY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
mwlon pushed a commit to mwlon/vortex that referenced this pull request Jun 2, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[opentelemetry_sdk](https://redirect.github.com/open-telemetry/opentelemetry-rust/tree/main/opentelemetry-sdk)
([source](https://redirect.github.com/open-telemetry/opentelemetry-rust/tree/HEAD/opentelemetry-sdk))
| workspace.dependencies | patch | `0.32.0` → `0.32.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](..vortex-data/issues/357) for more information.

---

### Release Notes

<details>
<summary>open-telemetry/opentelemetry-rust (opentelemetry_sdk)</summary>

###
[`v0.32.1`](https://redirect.github.com/open-telemetry/opentelemetry-rust/blob/HEAD/opentelemetry-sdk/CHANGELOG.md#0321)

Released 2026-May-23

- `BaggagePropagator` now enforces the W3C Baggage maximum header length
(8192 bytes) and maximum list-member count (64) when extracting an
inbound
  `baggage` header. Headers exceeding 8192 bytes are dropped at the
  propagator boundary; headers with more than 64 list members are
truncated to the first 64 entries. The change keeps the propagator from
parsing attacker-controlled input beyond the W3C limits instead of doing
per-entry parse, decode, and allocation work only to discard the excess
  on `Baggage` insert. See <https://www.w3.org/TR/baggage/#limits>.
- Reverted the `SimpleSpanProcessor` telemetry suppression added in
0.32.0
(see
[#&vortex-data#8203;3494](https://redirect.github.com/open-telemetry/opentelemetry-rust/issues/3494)),
which caused a `RefCell already borrowed` panic when a span
was started and dropped inside a `get_active_span` (or
`Context::map_current`)
closure. Tracked in
[#&vortex-data#8203;3510](https://redirect.github.com/open-telemetry/opentelemetry-rust/issues/3510).
A proper fix for the underlying
`Context::map_current` re-entrancy will be investigated separately,
after
  which the suppression can be safely re-applied.
- View-provided metric stream `name` (set via
`Stream::builder().with_name(...)`)
  is no longer validated against the instrument name syntax, per
[spec
clarification](https://redirect.github.com/open-telemetry/opentelemetry-specification/pull/5094).
  `unit` and other stream parameters continue to be validated.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJjaGFuZ2Vsb2cvY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
mwlon pushed a commit to mwlon/vortex that referenced this pull request Jun 2, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [brotli](https://redirect.github.com/dropbox/rust-brotli) |
dependencies | patch | `8.0.2` → `8.0.3` |
![age](https://developer.mend.io/api/mc/badges/age/crate/brotli/8.0.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/brotli/8.0.2/8.0.3?slim=true)
|
| [cbindgen](https://redirect.github.com/mozilla/cbindgen) |
workspace.dependencies | patch | `0.29.2` → `0.29.3` |
![age](https://developer.mend.io/api/mc/badges/age/crate/cbindgen/0.29.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/cbindgen/0.29.2/0.29.3?slim=true)
|
| [cc](https://redirect.github.com/rust-lang/cc-rs) |
workspace.dependencies | patch | `1.2.62` → `1.2.63` |
![age](https://developer.mend.io/api/mc/badges/age/crate/cc/1.2.63?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/cc/1.2.62/1.2.63?slim=true)
|
| [jiff](https://redirect.github.com/BurntSushi/jiff) |
workspace.dependencies | patch | `0.2.27` → `0.2.28` |
![age](https://developer.mend.io/api/mc/badges/age/crate/jiff/0.2.28?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/jiff/0.2.27/0.2.28?slim=true)
|
| [memchr](https://redirect.github.com/BurntSushi/memchr) |
workspace.dependencies | patch | `2.8.0` → `2.8.1` |
![age](https://developer.mend.io/api/mc/badges/age/crate/memchr/2.8.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/memchr/2.8.0/2.8.1?slim=true)
|
| [uuid](https://redirect.github.com/uuid-rs/uuid) |
workspace.dependencies | patch | `1.23.1` → `1.23.2` |
![age](https://developer.mend.io/api/mc/badges/age/crate/uuid/1.23.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/uuid/1.23.1/1.23.2?slim=true)
|
| [vite](https://vite.dev)
([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite))
| devDependencies | patch | [`8.0.14` →
`8.0.16`](https://renovatebot.com/diffs/npm/vite/8.0.14/8.0.16) |
![age](https://developer.mend.io/api/mc/badges/age/npm/vite/8.0.16?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vite/8.0.14/8.0.16?slim=true)
|
| com.gradleup.shadow | plugin | patch | `9.4.1` → `9.4.2` |
![age](https://developer.mend.io/api/mc/badges/age/maven/com.gradleup.shadow:com.gradleup.shadow.gradle.plugin/9.4.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.gradleup.shadow:com.gradleup.shadow.gradle.plugin/9.4.1/9.4.2?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](..vortex-data/issues/357) for more information.

---

### Release Notes

<details>
<summary>mozilla/cbindgen (cbindgen)</summary>

###
[`v0.29.3`](https://redirect.github.com/mozilla/cbindgen/blob/HEAD/CHANGES#0293)

[Compare
Source](https://redirect.github.com/mozilla/cbindgen/compare/0.29.2...v0.29.3)

- Expose the line\_endings config option to use with the builder
  \* Fix doc attribute parsing to properly handle block comments
  \* Check for CMSE ABI's as well
  \* ci: Add a meta job to block the merge queue on it.
  \* Allow `pub` access to `ReprType` fields
  \* In C23 mode, define sized enums as enums rather than typedefs.

</details>

<details>
<summary>rust-lang/cc-rs (cc)</summary>

###
[`v1.2.63`](https://redirect.github.com/rust-lang/cc-rs/blob/HEAD/CHANGELOG.md#1263---2026-05-29)

[Compare
Source](https://redirect.github.com/rust-lang/cc-rs/compare/cc-v1.2.62...cc-v1.2.63)

##### Other

- Update shlex requirement from 1.3.0 to 2.0.1
([#&vortex-data#8203;1736](https://redirect.github.com/rust-lang/cc-rs/pull/1736))

</details>

<details>
<summary>BurntSushi/jiff (jiff)</summary>

###
[`v0.2.28`](https://redirect.github.com/BurntSushi/jiff/blob/HEAD/CHANGELOG.md#0228-2026-05-28)

\===================
This is a small release with a fix for test failures on 32-bit targets
in
`no-alloc` environments.

Bug fixes:

- [#&vortex-data#8203;573](https://redirect.github.com/BurntSushi/jiff/issues/573):
  Fix test failure on 32-bit targets in `no-alloc` environments.

</details>

<details>
<summary>BurntSushi/memchr (memchr)</summary>

###
[`v2.8.1`](https://redirect.github.com/BurntSushi/memchr/compare/2.8.0...2.8.1)

[Compare
Source](https://redirect.github.com/BurntSushi/memchr/compare/2.8.0...2.8.1)

</details>

<details>
<summary>uuid-rs/uuid (uuid)</summary>

###
[`v1.23.2`](https://redirect.github.com/uuid-rs/uuid/releases/tag/v1.23.2)

[Compare
Source](https://redirect.github.com/uuid-rs/uuid/compare/v1.23.1...v1.23.2)

#### What's Changed

- Improve error messages for ambiguous formats by
[@&vortex-data#8203;KodrAus](https://redirect.github.com/KodrAus) in
[#&vortex-data#8203;882](https://redirect.github.com/uuid-rs/uuid/pull/882)
- Prepare for 1.23.2 release by
[@&vortex-data#8203;KodrAus](https://redirect.github.com/KodrAus) in
[#&vortex-data#8203;883](https://redirect.github.com/uuid-rs/uuid/pull/883)

**Full Changelog**:
<uuid-rs/uuid@v1.23.1...v1.23.2>

</details>

<details>
<summary>vitejs/vite (vite)</summary>

###
[`v8.0.16`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-8016-2026-06-01-small)

##### Bug Fixes

- **deps:** reject UNC paths for launch-editor-middleware
([#&vortex-data#8203;22571](https://redirect.github.com/vitejs/vite/issues/22571))
([50b9512](https://redirect.github.com/vitejs/vite/commit/50b951225bbf6151eb84a3ad5a454908ab4a76c9))
- reject windows alternate paths
([#&vortex-data#8203;22572](https://redirect.github.com/vitejs/vite/issues/22572))
([dc245c7](https://redirect.github.com/vitejs/vite/commit/dc245c71e5007ea4d891a025e2d69ac96c736546))

###
[`v8.0.15`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-8015-2026-06-01-small)

[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v8.0.14...v8.0.15)

##### Features

- send 408 on request timeout
([#&vortex-data#8203;22476](https://redirect.github.com/vitejs/vite/issues/22476))
([c85c9ee](https://redirect.github.com/vitejs/vite/commit/c85c9eeb9aaf41f477b48b057146887bd5620797))
- update rolldown to 1.0.3
([#&vortex-data#8203;22538](https://redirect.github.com/vitejs/vite/issues/22538))
([646dbed](https://redirect.github.com/vitejs/vite/commit/646dbedd2870f8ec48df0321177d8aa64bbd1575))

##### Bug Fixes

- capitalize error messages and remove spurious space in parse error
([#&vortex-data#8203;22488](https://redirect.github.com/vitejs/vite/issues/22488))
([85a0eff](https://redirect.github.com/vitejs/vite/commit/85a0eff1c82bbb7c99a0fe8e63704316578a40d3))
- **deps:** update all non-major dependencies
([#&vortex-data#8203;22511](https://redirect.github.com/vitejs/vite/issues/22511))
([2686d7d](https://redirect.github.com/vitejs/vite/commit/2686d7d0b722402204d3bcc687a87adea1bcf9fa))
- **dev:** fix html-proxy cache key mismatch for /@&vortex-data#8203;fs/ HTML paths
([#&vortex-data#8203;21762](https://redirect.github.com/vitejs/vite/issues/21762))
([47c4213](https://redirect.github.com/vitejs/vite/commit/47c4213f134f562c41ed7c031e4788510cf7e31e))
- **glob:** error on relative glob in virtual module when no files match
([#&vortex-data#8203;22497](https://redirect.github.com/vitejs/vite/issues/22497))
([5c8e98f](https://redirect.github.com/vitejs/vite/commit/5c8e98f8b584ac5d42f0f9b8580c49792213b13c))
- **optimizer:** close the rolldown bundle when write() rejects
([#&vortex-data#8203;22528](https://redirect.github.com/vitejs/vite/issues/22528))
([e3cfb9d](https://redirect.github.com/vitejs/vite/commit/e3cfb9deecff563550fa1b8abd27656b8b292815))
- **resolve:** provide onWarn for viteResolvePlugin in JS plugin
containers
([#&vortex-data#8203;22509](https://redirect.github.com/vitejs/vite/issues/22509))
([40985f1](https://redirect.github.com/vitejs/vite/commit/40985f1c09b7696e594e6c5695fbc315d2da2c83))

##### Miscellaneous Chores

- **deps:** update rolldown-related dependencies
([#&vortex-data#8203;22566](https://redirect.github.com/vitejs/vite/issues/22566))
([3052a67](https://redirect.github.com/vitejs/vite/commit/3052a67d9350f4c5076ab1c222c4a21a589cbcdd))

##### Code Refactoring

- correct logic in `collectAllModules` function
([#&vortex-data#8203;22562](https://redirect.github.com/vitejs/vite/issues/22562))
([6978a9c](https://redirect.github.com/vitejs/vite/commit/6978a9ceb942c4f5e211d52b8a1e569f8a65c80c))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJjaGFuZ2Vsb2cvY2hvcmUiXX0=-->

---------

Signed-off-by: Robert Kruszewski <github@robertk.io>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Robert Kruszewski <github@robertk.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants