chore(deps): bump the rust-minor group with 3 updates by dependabot[bot] · Pull Request #509 · hyperpolymath/hypatia

dependabot · 2026-06-17T21:07:50Z

Bumps the rust-minor group with 3 updates: time, config and redis.

Updates time from 0.3.47 to 0.3.49

Release notes

v0.3.49

See the changelog for details.

v0.3.48

See the changelog for details.

Changelog

0.3.49 [2026-06-13]

Fixed

Due to a long-standing bug in the Rust compiler, v0.3.48 caused a number of crates to stop compiling. A patch has been added that avoids triggering the bug.

0.3.48 [2026-06-12] [YANKED]

Security

The number of digits parsed by [subsecond digits:1+] is capped at 32 to avoid parsing unbounded user input. Digits after the 9th have no semantic meaning.

Explicitly specify #[repr] for Weekday. The value of the variants is relied upon in multiple locations for soundness. The practical effect of this change is nothing, as Rust has always mapped C-like enums to 0..N in memory.

Compatibility

Non-UTF-8 formatting and parsing is deprecated without replacement. It is recommended to only format and parse valid UTF-8.

format_description::parse is deprecated. It is recommended to use format_description::parse_borrowed::<3> or format_description::parse_owned::<3>.

Added

All types in the unit module have a generic parameter, though this is currently not used for much. Usage will be expanded in the future.

Comparisons between types in the unit module and the generic Unit type are permitted.

Support for rand 0.10

Version 3 format descriptions

Only UTF-8 is supported. As a side effect of this, [ignore] requires that the remaining input not begin mid-codepoint.

Representation is deliberately opaque to allow for arbitrary changes going forward.

format:false is supported on [optional] components. This is not possible in version 1 and version 2 format descriptions due to API compatibility.

The time::serde::format_description! macro uses a new, clearer syntax for version 3.

time::serde::format_description!(mod foo [Date] = "[year]-[month]-[day]");

Unlike version 1 and version 2 format descriptions, the type is not automatically brought into scope. You must import it yourself.

Nonsensical combinations of modifiers are rejected. For example, you cannot specify case-sensitivity when parsing a numerical month.

[year] defaults to range:standard

Components and modifiers are case sensitive (and always lowercase).

Changed

The convert module has been renamed to unit.

Fixed

... (truncated)

Commits

ff8683c v0.3.49 release
f189886 fix: resolve E0119 trait coherence error in rustc >= 1.95.0
5d8737c v0.3.48 release
1bfca87 Use widen instead of extend in sys code
c57284f fix: return error instead of panicking on truncated strftime padding modifier
a74f35f Use v3 format descriptions for serde defaults
96ff36c Allow eliding serde format description version
edc58b1 Permit duplicates in v1/v2 in permit_modifiers!
a838f69 Bump codecov action
f2f99f8 Fix unused warning
Additional commits viewable in compare view

Updates config from 0.15.23 to 0.15.24

Changelog

Sourced from config's changelog.

[0.15.24] - 2026-06-16

Fixes

(json) Support u64, and not just i64

Commits

6314dde chore: Release config version 0.15.24
edd5da5 docs: Update changelog
13c188b fix: support u64 for parse json file (#758)
be51260 chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0 (#760)
1de84e0 chore(deps): Update compatible (dev) (#759)
8c27a5b chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
895c66d fix: support u64 for parse json file
fc956b2 chore(deps): Update Rust Stable to v1.96 (#756)
See full diff in compare view

Updates redis from 1.2.2 to 1.2.3

Release notes

Sourced from redis's releases.

redis-1.2.3

Changes & Bug fixes

Only stop EntraIdCredentialsProvider task on last Arc instance drop (#2084 by @hgzimmerman)

docs: Straighten out documentation of InfoType (#2121 by @somechris)

CI & operational improvements

ci: Bump Redis patch versions (#2093 by @somechris)

tests: Stop inflating dimensions during vector set dimension reduction (#2099 by @somechris)

ci: Bump Redis 8.6.2 to Redis 8.8.0 (#2100 by @somechris)

ci: Bump Valkey to 7.2.13, 8.0.9, and 9.0.4 (#2102 by @somechris)

Bump rand from 0.9.3 to 0.10.1 (#2101 by @somechris)

ci: Use targets from Makefile instead of duplicating commands (#2103 by @somechris)

Makefile: Drop noop e from module test selector (#2116 by @somechris)

Makefile: Add fix target to fix automatically fixable linting issues (#2122 by @somechris)

CI: Lock windows build to windows-2022 runner (#2127 by @somechris)

tests: Clean up getting versions (#2123 by @somechris)

doc: Add some coding conventions (#2129 by @somechris)

Add logs for mock cluster calls. (#2133 by @nihohit)

New Contributors

@hgzimmerman made their first contribution in redis-rs/redis-rs#2084

Full Changelog: redis-rs/redis-rs@redis-1.2.2...redis-1.2.3

Commits

0a7c73d Prepare version (#2137)
bb3fba5 Add logs for mock cluster calls. (#2133)
d8099ac doc: Add some coding conventions (#2129)
9ae7f5d tests: Clean up getting versions (#2123)
a480972 CI: Lock windows build to windows-2022 runner (#2127)
9660180 Makefile: Add fix target to fix automatically fixable linting issues (#2122)
63c3398 docs: Straighten out documentation of InfoType (#2121)
063a675 Makefile: Drop noop e from module test selector (#2116)
d67a8fc build(deps): bump lru from 0.16.3 to 0.18.0 (#2112)
3a5a4a5 Only stop EntraIdCredentialsProvider task on last Arc instance drop (#2084)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-minor group with 3 updates: [time](https://github.com/time-rs/time), [config](https://github.com/rust-cli/config-rs) and [redis](https://github.com/redis-rs/redis-rs). Updates `time` from 0.3.47 to 0.3.49 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.47...v0.3.49) Updates `config` from 0.15.23 to 0.15.24 - [Changelog](https://github.com/rust-cli/config-rs/blob/main/CHANGELOG.md) - [Commits](rust-cli/config-rs@v0.15.23...v0.15.24) Updates `redis` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/redis-rs/redis-rs/releases) - [Commits](redis-rs/redis-rs@redis-1.2.2...redis-1.2.3) --- updated-dependencies: - dependency-name: time dependency-version: 0.3.49 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: config dependency-version: 0.15.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: redis dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-06-17T21:08:54Z

🔍 Hypatia Security Scan

Findings: 42 issues detected

Severity	Count
🔴 Critical	0
🟠 High	0
🟡 Medium	42

View findings

[
  {
    "reason": "Repository has 7 non-main remote branch(es). Policy: single main branch only.",
    "type": "GS007",
    "file": ".",
    "action": "delete_remote_branches",
    "rule_module": "git_state",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "src/ui/gossamer/README.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "scripts/ci-tools/Cargo.toml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "scripts/bench-tools/Cargo.toml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "ffi/zig/README.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "docs/reports/audit/audit-2026-04-15-post.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/github-registry.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/github-registry.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/a2ml-k9.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "docs/architecture/system-integration.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

github-actions · 2026-06-17T21:12:59Z

🔍 Hypatia Security Scan

Findings: 42 issues detected

Severity	Count
🔴 Critical	0
🟠 High	0
🟡 Medium	42

View findings

[
  {
    "reason": "Repository has 5 non-main remote branch(es). Policy: single main branch only.",
    "type": "GS007",
    "file": ".",
    "action": "delete_remote_branches",
    "rule_module": "git_state",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "src/ui/gossamer/README.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "scripts/ci-tools/Cargo.toml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "scripts/bench-tools/Cargo.toml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "ffi/zig/README.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "docs/reports/audit/audit-2026-04-15-post.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/github-registry.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/github-registry.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/a2ml-k9.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 15 day(s) old",
    "type": "CSA001",
    "file": "docs/architecture/system-integration.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 17, 2026

Merge branch 'main' into dependabot/cargo/rust-minor-66c9bb5ff9

43328a4

hyperpolymath merged commit 03f0890 into main Jun 17, 2026

hyperpolymath deleted the dependabot/cargo/rust-minor-66c9bb5ff9 branch June 17, 2026 21:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the rust-minor group with 3 updates - #509

chore(deps): bump the rust-minor group with 3 updates#509
hyperpolymath merged 2 commits into
mainfrom
dependabot/cargo/rust-minor-66c9bb5ff9

dependabot Bot commented on behalf of github Jun 17, 2026

Uh oh!

github-actions Bot commented Jun 17, 2026

Uh oh!

github-actions Bot commented Jun 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 17, 2026

v0.3.49

v0.3.48

0.3.49 [2026-06-13]

Fixed

0.3.48 [2026-06-12] [YANKED]

Security

Compatibility

Added

Changed

Fixed

[0.15.24] - 2026-06-16

Fixes

redis-1.2.3

Changes & Bug fixes

CI & operational improvements

New Contributors

Uh oh!

github-actions Bot commented Jun 17, 2026

🔍 Hypatia Security Scan

Uh oh!

github-actions Bot commented Jun 17, 2026

🔍 Hypatia Security Scan

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant