Skip to content

chore(deps): batch-bump 8 deps + migrate core-foundation 0.10 / security-framework 3.x - #78

Merged
blackaxgit merged 1 commit into
mainfrom
chore/deps-batch-2
Aug 1, 2026
Merged

chore(deps): batch-bump 8 deps + migrate core-foundation 0.10 / security-framework 3.x#78
blackaxgit merged 1 commit into
mainfrom
chore/deps-batch-2

Conversation

@blackaxgit

Copy link
Copy Markdown
Owner

Summary

Consolidates 8 Dependabot bumps that mutually conflict on Cargo.lock if merged separately, and migrates the one real breaking change. Supersedes #69, #70, #71, #72, #73, #74, #75, #76.

Bumps: indicatif 0.17β†’0.18.6 Β· thiserror 1.0β†’2.0.19 Β· dirs 5β†’6.0 Β· colored 2β†’3.1.1 Β· shlex 1.3β†’2.0.1 Β· crossterm 0.28β†’0.29 Β· core-foundation 0.9β†’0.10.1 Β· security-framework 2.11β†’3.7.0.

Breaking-change migration

core-foundation 0.10 reorganized TCFType, removing the as_CFTypeRef().cast_mut() path used by the macOS keychain-ACL FFI. Now uses the typed as_concrete_TypeRef().cast() (SecKeychainItemRef β†’ *mut c_void). This also aligns the direct security-framework dep with keyring 3.x (single dependency tree, no duplicate). The other seven bumps needed no code changes.

Division of labor

Implemented by Cursor (the coding worker, via agent-hub); Claude validated β€” caught and fixed one E0308 type-mismatch (--all-features-gated FFI path) that Cursor's build (default features) hadn't surfaced.

Verification

  • cargo build --workspace βœ…
  • cargo clippy --workspace --all-targets --all-features -- -D warnings βœ…
  • cargo test --workspace βœ… (no failures)
  • cargo fmt --all -- --check βœ…
  • gitleaks pre-push gate: clean

…ity-framework 3.x

Consolidates 8 Dependabot bumps that mutually conflict on Cargo.lock if
merged separately (supersedes #69–#76):
- indicatif 0.17β†’0.18.6, thiserror 1.0β†’2.0.19, dirs 5β†’6.0, colored 2β†’3.1.1,
  shlex 1.3β†’2.0.1, crossterm 0.28β†’0.29, core-foundation 0.9β†’0.10.1,
  security-framework 2.11β†’3.7.0.

core-foundation 0.10 reorganized TCFType, so the macOS keychain-ACL FFI now
uses `as_concrete_TypeRef().cast()` (typed SecKeychainItemRef β†’ *mut c_void)
instead of the removed `as_CFTypeRef().cast_mut()` path. Aligns the direct
security-framework dep with keyring 3.x (single tree, no duplicate).

Verified: build, clippy --all-features -D warnings, cargo test --workspace,
and cargo fmt --check all clean.
@blackaxgit
blackaxgit merged commit ff24d15 into main Aug 1, 2026
2 of 3 checks passed
@blackaxgit
blackaxgit deleted the chore/deps-batch-2 branch August 1, 2026 23:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant