Skip to content

deps(deps): bump const-hex from 1.17.0 to 1.19.0#2501

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-cargo-const-hex-1.19.0
Open

deps(deps): bump const-hex from 1.17.0 to 1.19.0#2501
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-cargo-const-hex-1.19.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps const-hex from 1.17.0 to 1.19.0.

Commits
  • 5f2a3cb chore: Release const-hex version 1.19.0
  • 9ec02cf chore: allow unused portable_simd
  • 8b0eb94 feat: allow upper case prefix 0X (#49)
  • 1143588 chore: Release const-hex version 1.18.1
  • 6155cbd perf: branch only once in decode_maybe_check (#46)
  • c326e35 feat: add SIMD decode for wasm32 and portable-simd (#45)
  • 18736fe chore: remove cfg!(miri) NEON skips on aarch64 (#44)
  • 271dda6 perf: add NEON SIMD decode for aarch64 (#43)
  • 22291dc perf: single-pass AVX2 decode with validation (#41)
  • eab3daf perf: optimize SIMD check and encode implementations (#39)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependabot dependencies Pull requests that update a dependency file rust labels May 4, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 4, 2026

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 1

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • const-hex 1.19.0 — Codex initialization unavailable or blocked; requires manual review.

Bumps [const-hex](https://github.com/danipopes/const-hex) from 1.17.0 to 1.19.0.
- [Commits](DaniPopes/const-hex@v1.17.0...v1.19.0)

---
updated-dependencies:
- dependency-name: const-hex
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot-cargo-const-hex-1.19.0 branch from 1e8109e to 7c459bd Compare May 6, 2026 17:05
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 6, 2026

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 1

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • const-hex 1.19.0 — Codex initialization unavailable or blocked; requires manual review.

Copy link
Copy Markdown

@cloudwalk-review-agent cloudwalk-review-agent Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency-only bump (const-hex 1.17.0 → 1.19.0) in both runtime and build deps, with matching lockfile update.

I don’t see a concrete blocking issue in this PR itself:

  • No application code paths changed.
  • No migration/state/permission/payment logic touched.
  • Lockfile checksum and version move are consistent.

Given upstream notes include parsing behavior change (accepting 0X prefix), the only practical risk is behavior broadening if your code intentionally rejected uppercase prefix inputs. That appears non-blocking from this diff, but worth keeping in mind for any strict input-validation assumptions.

LGTM for merge.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies Pull requests that update a dependency file rust

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants