Skip to content

build(deps): bump sha2 from 0.10.9 to 0.11.0#790

Merged
jdx merged 3 commits into
mainfrom
dependabot/cargo/sha2-0.11.0
May 31, 2026
Merged

build(deps): bump sha2 from 0.10.9 to 0.11.0#790
jdx merged 3 commits into
mainfrom
dependabot/cargo/sha2-0.11.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 26, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps sha2 from 0.10.9 to 0.11.0.

Commits

Summary by CodeRabbit

  • Chores

    • Updated workspace dependency versions (minor dependency updates).

  • Bug Fixes

    • Ensure published files on Linux get correct file permissions (readable after publish).

  • Tests

    • Made deploy and install tests more tolerant of varied timeout and error messages.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 26, 2026
@greptile-apps

greptile-apps Bot commented May 26, 2026

Copy link
Copy Markdown
Contributor

PR author is in the excluded authors list.

@jdx jdx enabled auto-merge (squash) May 29, 2026 06:13
@jdx jdx force-pushed the dependabot/cargo/sha2-0.11.0 branch 2 times, most recently from da0c166 to 517c80b Compare May 29, 2026 06:34
dependabot Bot and others added 3 commits May 31, 2026 15:10
@dependabot @jdx
build(deps): bump sha2 from 0.10.9 to 0.11.0
da9c1e5 
Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.11.0.
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

---
updated-dependencies:
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@jdx
test(deploy): relax non-empty target assertion
e9c254d
@jdx
fix(store): preserve cas file mode under umask
94b0d77
@jdx jdx force-pushed the dependabot/cargo/sha2-0.11.0 branch from 517c80b to 94b0d77 Compare May 31, 2026 15:17
@jdx

jdx commented May 31, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github May 31, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@jdx

jdx commented May 31, 2026

Copy link
Copy Markdown
Owner

@dependabot recreate

@dependabot dependabot Bot force-pushed the dependabot/cargo/sha2-0.11.0 branch from 94b0d77 to 73d5f65 Compare May 31, 2026 15:19
@coderabbitai

coderabbitai Bot commented May 31, 2026 •
edited
Loading

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

Pull request was closed or merged during review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: fabfeeaa-408c-44eb-a644-056d663f6165

📥 Commits

Reviewing files that changed from the base of the PR and between 73d5f65 and 94b0d77.

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing (7)
  • Cargo.toml
  • crates/aube-store/src/cas.rs
  • crates/aube-store/src/integrity.rs
  • crates/aube-store/src/lib.rs
  • crates/aube/src/commands/publish.rs
  • test/deploy.bats
  • test/pnpm_install_misc.bats
💤 Files with no reviewable changes (1)
  • crates/aube/src/commands/publish.rs
✅ Files skipped from review due to trivial changes (1)
  • test/deploy.bats
🚧 Files skipped from review as they are similar to previous changes (1)
  • Cargo.toml
📝 Walkthrough

Walkthrough

Workspace sha2 upgraded to 0.11; hashing imports adjusted (sha2 used for SHA-512, sha1 kept as type-only), CAS O_TMPFILE publishing now sets file permissions on Linux, and a few tests/comments broaden/clarify expected outputs.

Changes

Workspace, hashing, CAS, and tests

Layer / File(s) Summary
Workspace SHA2 version bump
Cargo.toml		 The sha2 workspace dependency is incremented from 0.10 to 0.11.
Hashing imports (sha1/sha2) update
crates/aube/src/commands/publish.rs, crates/aube-store/src/integrity.rs, crates/aube-store/src/lib.rs		 Replaced sha1::Digest/sha2::Digest imports so SHA-512 uses sha2::Digest/Sha512, and sha1 imports are reduced to Sha1 only.
CAS O_TMPFILE permission set on Linux
crates/aube-store/src/cas.rs		 After writing to the anonymous O_TMPFILE, call set_permissions(0o644) on Linux and map failures to OTmpfileFallback::Hard. Also add the PermissionsExt import.
Test assertions and comments updated
test/deploy.bats, test/pnpm_install_misc.bats		 Adjusted two test comments to prefer matching “not empty” and widened a timeout test’s expected error to accept multiple alternative failure messages.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Poem

🐰
I hopped through crates and tiny lines,
nudged sha2 up where version shines,
set file perms before the link,
and loosened tests that used to blink.
A munch of changes — tidy signs.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately summarizes the main change: upgrading the sha2 dependency from version 0.10.9 to 0.11.0, which is the primary purpose of the pull request.
Docstring Coverage ✅ Passed Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/cargo/sha2-0.11.0

Comment @coderabbitai help to get the list of available commands and usage tips.

@jdx jdx force-pushed the dependabot/cargo/sha2-0.11.0 branch from 73d5f65 to 94b0d77 Compare May 31, 2026 15:23
@jdx jdx merged commit 0b35aaf into main May 31, 2026
20 of 32 checks passed
@jdx jdx deleted the dependabot/cargo/sha2-0.11.0 branch May 31, 2026 15:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jdx