Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 20, 2025

Bumps regex from 1.11.2 to 1.12.2.

Changelog

Sourced from regex's changelog.

1.12.2 (2025-10-13)

This release fixes a cargo doc breakage on nightly when --cfg docsrs is enabled. This caused documentation to fail to build on docs.rs.

Bug fixes:

1.12.1 (2025-10-10)

This release makes a bug fix in the new regex::Captures::get_match API introduced in 1.12.0. There was an oversight with the lifetime parameter for the Match returned. This is technically a breaking change, but given that it was caught almost immediately and I've yanked the 1.12.0 release, I think this is fine.

1.12.0 (2025-10-10)

This release contains a smattering of bug fixes, a fix for excessive memory consumption in some cases and a new regex::Captures::get_match API.

Improvements:

Bug fixes:

1.11.3 (2025-09-25)

This is a small patch release with an improvement in memory usage in some cases.

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [regex](https://github.com/rust-lang/regex) from 1.11.2 to 1.12.2.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.11.2...1.12.2)

---
updated-dependencies:
- dependency-name: regex
  dependency-version: 1.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 20, 2025
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Greptile Overview

Summary

This PR updates the regex crate from 1.11.2 to 1.12.2, along with its sub-dependency regex-automata from 0.4.10 to 0.4.13.

Key improvements in this update:

  • Fixed memory usage regression for large regexes (introduced in regex 1.9)
  • Fixed panic in lazy DFA for especially large regexes
  • Fixed universal start states in sparse DFA
  • Fixed panic when deserializing corrupted dense DFA
  • Fixed cargo doc breakage on nightly with --cfg docsrs

The codebase uses regex in three locations (priority.rs, pipeline.rs, parallel.rs) for pattern matching in priority rules. All usages follow safe patterns with Regex::new() wrapped in error handling (if let Ok(...)), making this update safe.

Confidence Score: 5/5

  • This PR is safe to merge with no risk
  • This is a standard dependency update from Dependabot that includes only bug fixes and performance improvements. The update addresses memory usage issues and prevents panics in edge cases. The codebase uses regex safely with proper error handling around all Regex::new() calls. No breaking API changes were introduced in this minor version bump.
  • No files require special attention

Important Files Changed

File Analysis

Filename Score Overview
Cargo.toml 5/5 Updated regex dependency from 1.11.1 to 1.12.2, a minor version bump with bug fixes and improvements
Cargo.lock 5/5 Updated regex to 1.12.2 and regex-automata to 0.4.13 with corresponding checksum updates

Sequence Diagram

sequenceDiagram
    participant D as Dependabot
    participant CT as Cargo.toml
    participant CL as Cargo.lock
    participant R as regex crate
    participant RA as regex-automata
    
    D->>CT: Update regex: 1.11.1 → 1.12.2
    D->>CL: Update regex: 1.11.2 → 1.12.2
    D->>CL: Update regex-automata: 0.4.10 → 0.4.13
    
    Note over R,RA: Bug fixes & improvements
    Note over R: - Fixed memory regression
    Note over R: - Fixed DFA panics
    Note over R: - Fixed docs.rs builds
    
    R->>RA: Uses updated regex-automata
    
    Note over CT,CL: No breaking changes
    Note over CT,CL: Safe to merge
Loading

1 file reviewed, no comments

Edit Code Review Agent Settings | Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant