Skip to content

chore(deps): pin 11 dependency versions#7

Open
bagui-security-agent[bot] wants to merge 1 commit into
masterfrom
ananke-pin-deps-1778586969822
Open

chore(deps): pin 11 dependency versions#7
bagui-security-agent[bot] wants to merge 1 commit into
masterfrom
ananke-pin-deps-1778586969822

Conversation

@bagui-security-agent
Copy link
Copy Markdown

Supply Chain Fix

This PR was automatically generated by ananke to pin 11 unpinned dependencies to their latest stable versions.

Changes

File Dependency Before After Source
Cargo.toml Inflector 0.11.4 0.11.4 lockfile
Cargo.toml serde_json 1.0.94 1.0.107 lockfile
Cargo.toml tracing-core 0.1.22 0.1.31 lockfile
Cargo.toml thiserror 1.0.40 1.0.48 lockfile
Cargo.toml serde 1.0.193 1.0.193 lockfile
Cargo.toml time 0.3.30 0.3.30 lockfile
Cargo.toml tracing-subscriber 0.3.18 0.3.18 lockfile
Cargo.toml valuable 0.1.0 0.1.0 lockfile
Cargo.toml valuable-serde 0.1.0 0.1.0 lockfile
Cargo.toml tracing 0.1.34 0.1.37 lockfile
Cargo.toml time 0.3.30 0.3.30 lockfile

Generated by ananke — automated supply chain security

Auto-generated by ananke supply chain detector.
Copy link
Copy Markdown

@cloudwalk-review-agent cloudwalk-review-agent Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me.

This PR only tightens dependency constraints and bumps a few patch/minor versions (serde_json, tracing-core, thiserror, tracing) without touching runtime logic, auth flows, or permission boundaries in code.

I checked for concrete blockers and didn’t find any:

  • No API surface changes in this diff besides dependency resolution behavior.
  • No migration/data-loss/payment-path changes.
  • Pinning with = is consistent across deps/dev-deps and aligns with supply-chain reproducibility goals.

Minor note (non-blocking): pinning the crate’s own [package].version to =0.1.0 is unusual in Cargo manifests; if this was intentional for policy consistency, fine, otherwise you may want to revert just that line to avoid potential publishing/workflow friction.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants