Skip to content

deps(deps): bump alloy-trie from 0.9.1 to 0.9.5#2500

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-cargo-alloy-trie-0.9.5
Open

deps(deps): bump alloy-trie from 0.9.1 to 0.9.5#2500
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-cargo-alloy-trie-0.9.5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps alloy-trie from 0.9.1 to 0.9.5.

Changelog

Sourced from alloy-trie's changelog.

0.9.5 - 2026-03-09

Bug Fixes

  • [clippy] Use sort_unstable_by_key instead of sort_unstable_by (#122)

Dependencies

  • [deps] Bumps (#129)

Features

  • Add TrieMask::len (#130)
  • Add TrieMask::iter_set_bits for efficient bit iteration (#126)

Miscellaneous Tasks

  • Release 0.9.4 (#131)
  • Use thiserror for Error implementations (#127)
  • Update CODEOWNERS (#128)

Other

  • Update to tempoxyz (#120)

Performance

  • Rewrite RlpNode internals with manual u8 length + MaybeUninit buffer (#133)

0.9.3 - 2026-01-07

Features

  • Add bit ops to TrieMask (#117)

Miscellaneous Tasks

  • Release 0.9.3

0.9.2 - 2025-12-22

Features

  • Add ordered_trie_root_encoded for pre-encoded items (#115)

Miscellaneous Tasks

  • Release 0.9.2
  • Re-use alloy-primitives keccak empty (#113)
  • missing-const-for-fn lint back to "warn". (#112)
Commits

@dependabot dependabot Bot added dependabot dependencies Pull requests that update a dependency file rust labels May 4, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 4, 2026

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 1

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • alloy-trie 0.9.5 — Codex initialization unavailable or blocked; requires manual review.

Bumps [alloy-trie](https://github.com/alloy-rs/trie) from 0.9.1 to 0.9.5.
- [Release notes](https://github.com/alloy-rs/trie/releases)
- [Changelog](https://github.com/alloy-rs/trie/blob/main/CHANGELOG.md)
- [Commits](https://github.com/alloy-rs/trie/commits)

---
updated-dependencies:
- dependency-name: alloy-trie
  dependency-version: 0.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot-cargo-alloy-trie-0.9.5 branch from e68054e to ca49064 Compare May 6, 2026 17:06
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 6, 2026

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 1

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • alloy-trie 0.9.5 — Codex initialization unavailable or blocked; requires manual review.

Copy link
Copy Markdown

@cloudwalk-review-agent cloudwalk-review-agent Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency-only bump looks clean.

What changed

  • alloy-trie pinned from 0.9.10.9.5 in Cargo.toml and lockfile.
  • Lockfile shows expected transitive shifts for this upstream release (arrayvec no longer direct dep of alloy-trie, thiserror added).

Review notes

  • No application code, API surface, migrations, permission logic, or money-movement paths were modified in this PR.
  • No concrete regression is evident from the diff itself.
  • Upstream changelog items included are minor (sorting impl tweak, utility features, error impl migration), with no obvious breaking behavior signaled.

Given current evidence, I don’t see a blocking issue in this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies Pull requests that update a dependency file rust

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants