Skip to content

chore(deps): consolidate cc, rand, and serde_json updates - #520

Merged
paolodamico merged 1 commit into
mainfrom
codex/consolidate-dependencies
Sep 9, 2026
Merged

paolodamico merged 1 commit into
mainfrom
codex/consolidate-dependencies

Conversation

@Dzejkop

@Dzejkop Dzejkop commented Sep 9, 2026 •

Copy link
Copy Markdown
Contributor

Consolidates the outstanding compatible dependency updates onto current main in one lockfile-only PR:

The source PR titles are stale: #498's actual diff contains cc 1.4.5, and #457's actual diff contains rand 0.8.8, not a migration to rand 0.10. This preserves all manifest constraints and RNG APIs. Unrelated lockfile churn from the older branches is excluded. The SQLite 0.5.5 update in #421 is already present on main via the SQLite work.

Validation: cargo metadata --locked --offline --format-version 1 resolves the complete dependency graph; git diff --check passes. All 22 checks pass on commit 1db5bb4: Rust tests on stable, nightly, and 1.94.1; formatting/Clippy/build; WASM; Kotlin build and foreign-binding tests; Swift build and foreign-binding tests on Xcode 26.2, 26.3, 26.4.1, 26.5, and 26.6; docs; dependency policy/advisories; and security scans. CI run.

No application code, toolchain, or dependency policy changes.

Closes #457
Closes #498
Closes #500


Note

Low Risk
Patch-level dependency resolution in the lockfile only; RNG and JSON APIs stay on the same major/minor lines with no code changes.

Overview
Lockfile-only refresh that rolls up three compatible crate updates into one graph: rand 0.8.6 → 0.8.8 (including walletkit, provekit, alloy, and crypto-related transitive users), cc 1.2.66 → 1.4.5 with find-msvc-tools 0.1.9 → 0.1.12, and serde_json 1.0.150 → 1.0.151.

No application source, manifest policy, or toolchain changes—only resolved versions and checksums in Cargo.lock. Intended to supersede separate PRs for the same bumps without unrelated lock churn.

Reviewed by Cursor Bugbot for commit 1db5bb4. Bugbot is set up for automated code reviews on this repo. Configure here.

@paolodamico
paolodamico merged commit 04b2d88 into main Sep 9, 2026
22 checks passed
@paolodamico
paolodamico deleted the codex/consolidate-dependencies branch September 9, 2026 16:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants