Skip to content

chore(deps): update all dependencies to latest#97

Merged
bryantbiggs merged 4 commits into
mainfrom
chore/update-deps-2026-06-01
Jun 1, 2026
Merged

chore(deps): update all dependencies to latest#97
bryantbiggs merged 4 commits into
mainfrom
chore/update-deps-2026-06-01

Conversation

@bryantbiggs

@bryantbiggs bryantbiggs commented Jun 1, 2026

Copy link
Copy Markdown
Member

Bumps to latest including majors. All CI gates green locally.

  • schemars 0.8 → 1.2
  • reqwest git pin → 0.13.4 (crates.io)
  • @astrojs/sitemap 3.7.2 → 3.7.3
  • astro 6.3.3 → 6.4.2
  • EmbarkStudios/cargo-deny-action v2.0.18 → v2.0.20
  • aws-actions/configure-aws-credentials v6.1.1 → v6.1.3

schemars 1.x dropped the schemars::schema::* module and tightened a few signatures, so the manual JsonSchema impl for RemovedSemverPrerelease in src/cli/config.rs was rewritten — schema_name now returns Cow<'static, str>, SchemaGenerator moved to the crate root, and Schema::Bool(false) became json_schema!(false). The std feature is now opt-in for HashMap/Vec JsonSchema impls, so it was added alongside derive. The committed docs/public/config.schema.json was regenerated via the existing update_json_schema --ignored helper; the new output uses $defs (draft 2020-12) instead of definitions (draft-07).

reqwest 0.13.3 closed out the rustls-platform-verifier 0.7 jni-dup fix that originally motivated the git pin; with 0.13.4 published on crates.io we drop the git URL from [workspace.dependencies], remove the [patch.crates-io] redirect, and delete the allow-git exception in deny.toml.

One new transitive-duplicate skip in deny.toml: shlex@1 — pulled in by bindgen (build-dep of aws-lc-fips-sys) at 1.3 while cc 1.2 has moved to shlex 2.0. Same pattern as the existing skip-list entries.

The anonymous_auth_distinct_scopes_fetch_concurrently test in crates/ocync-distribution/src/auth/anonymous.rs was a wall-clock flake on slower CI runners. Switched it to assert on request-arrival-diff at the wiremock server (parallel arrives in ~ms, serialized would be ~300ms apart) so the property no longer depends on total elapsed wall-clock.

Dockerfile uses floating :latest/:latest-dev Chainguard tags; no SHA pins to bump. gcc-13 stays pinned per the in-file comment about the aws-lc-fips-sys delocator (aws/aws-lc-rs#569).

Supersedes #96.

The rustls-platform-verifier 0.7 jni-dup fix that motivated the pin
landed in 0.13.3 (and we are now on 0.13.4), so the patch.crates-io
redirect and the deny.toml allow-git exception are no longer needed.
Three sibling tests of the per-scope TokenCache coalescing contract
were wall-clock based; c5eb6fe fixed only anonymous.rs. Apply the same
arrival-diff rewrite to basic.rs and docker.rs so all three providers
verify wiring with the same CI-jitter-resistant assertion. Convert the
engine blob-concurrency test to span-of-arrivals (~100ms parallel,
~700ms sequential) for the same reason.

Astro 6.4 deprecated markdown.remarkPlugins/rehypePlugins in favour of
markdown.processor: unified({...}) from @astrojs/markdown-remark. The
dep bump in this branch introduced the warning; migrate the config so
the docs build is clean.
@bryantbiggs bryantbiggs merged commit 4f5cd34 into main Jun 1, 2026
16 checks passed
@bryantbiggs bryantbiggs deleted the chore/update-deps-2026-06-01 branch June 1, 2026 15:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant