chore: ship v0.5.104 (version bump + supply-chain vet)#319
Merged
Conversation
The ship's `cargo update` advanced three transitive deps past their vetted versions. Real delta audits recorded: - libmimalloc-sys 0.1.48->0.1.49: zero vendored-C changes; build.rs unchanged; adds one v3-only FFI binding mi_stats_get_json (the C impl already existed upstream). No new capability. - mimalloc 0.1.51->0.1.52: v3-only stats_json() wrapper + StatsJson newtype over the new sys FFI; unsafe is standard allocator FFI (mi_stats_get_json / mi_free). - uuid 1.23.1->1.23.2: KodrAus patch (fmt/parser/serde); the lone unsafe is from_utf8_unchecked on uuid's own ASCII-only format buffer — sound zero-copy formatting, same pattern as vetted 1.23.1. `cargo vet` passes. Vet-Reviewed-Diff: libmimalloc-sys@0.1.48->0.1.49 Vet-Reviewed-Diff: mimalloc@0.1.51->0.1.52 Vet-Reviewed-Diff: uuid@1.23.1->1.23.2 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
just ship-freshbumped the workspace to v0.5.104 andcargo updateadvanced 3 transitive deps past their vetted versions. This PR carries the bump + the real delta audits. (Routed via PR because branch protection rejects the ship's direct push tomain.)Vetted deltas (real audits,
Vet-Reviewed-Diff:trailers)libmimalloc-sysmi_stats_get_json(C impl already upstream)mimallocstats_json()wrapper +StatsJsonnewtype;unsafe= standard allocator FFI (mi_stats_get_json/mi_free)uuidunsafeisfrom_utf8_uncheckedon uuid's own ASCII-only format buffer — sound zero-copy, same as vetted 1.23.1cargo vetpasses. Locallint-pre-pushgreen incl.vet✅,vet-audit-discipline✅, clippy Linux+Windows, tests.🤖 Generated with Claude Code