Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 20, 2025

Bumps ignore from 0.4.23 to 0.4.24.

Commits
  • 70ae735 ignore-0.4.24
  • 19c2a6e deps: bump to globset 0.4.17
  • 064b36b globset-0.4.17
  • 72a5291 doc: update date in man page template
  • 63209ae printer: fix --stats for --json
  • b610d1c ignore: fix global gitignore bug that arises with absolute paths
  • 9ec0852 ignore/types: add lowercase R extensions
  • d4b77a8 searcher: fix a performance bug with -A/--after-context
  • 8c6595c searcher: fix performance bug with -A/--after-context when searching stdin
  • de2567a printer: fix panic in replacements in look-around corner case
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [ignore](https://github.com/BurntSushi/ripgrep) from 0.4.23 to 0.4.24.
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](BurntSushi/ripgrep@ignore-0.4.23...ignore-0.4.24)

---
updated-dependencies:
- dependency-name: ignore
  dependency-version: 0.4.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 20, 2025
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Greptile Overview

Summary

Automated dependency bump from Dependabot updating the ignore crate from 0.4.23 to 0.4.24 and its transitive dependency globset from 0.4.16 to 0.4.17.

Key changes in this update:

  • Fixed bug with global gitignore when using absolute paths
  • Added support for lowercase R file extensions
  • Performance improvements for context-based searching
  • Fixed stats output for JSON format
  • Fixed panic in replacement edge cases

Impact on yek:
The ignore crate is used extensively in src/parallel.rs for directory traversal and file filtering via GitignoreBuilder, WalkBuilder, and Gitignore.matched(). The bug fixes in this version, particularly the global gitignore fix with absolute paths, may improve reliability when processing repositories with complex ignore patterns.

Confidence Score: 5/5

  • This PR is safe to merge with minimal risk - standard patch version bump with bug fixes only
  • This is a minor version bump (0.4.23→0.4.24) from a well-maintained upstream crate (ripgrep/ignore) that only includes bug fixes and performance improvements. The changes are backwards compatible with no breaking API changes. The crate is used for gitignore pattern matching and directory traversal, and the fixes actually improve reliability (especially the global gitignore absolute path fix).
  • No files require special attention - this is a standard lock file update from Dependabot

Important Files Changed

File Analysis

Filename Score Overview
Cargo.lock 5/5 Dependency bump for ignore (0.4.23→0.4.24) and transitive globset (0.4.16→0.4.17) - bug fixes only, no breaking changes

Sequence Diagram

sequenceDiagram
    participant D as Dependabot
    participant C as Cargo.lock
    participant I as ignore crate
    participant G as globset crate
    participant Y as yek (parallel.rs)
    
    D->>C: Update ignore 0.4.23 → 0.4.24
    D->>C: Update globset 0.4.16 → 0.4.17 (transitive)
    
    Note over I,G: Bug fixes included:<br/>- Fix global gitignore with absolute paths<br/>- Add lowercase R extensions<br/>- Performance improvements for -A context
    
    Y->>I: Uses GitignoreBuilder
    Y->>I: Uses WalkBuilder
    Y->>I: Uses Gitignore.matched()
    
    I->>G: Depends on globset for patterns
    
    Note over Y: File filtering in directory traversal<br/>uses updated ignore functionality
Loading

No files reviewed, no comments

Edit Code Review Agent Settings | Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant