Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Bumps toml from 0.9.5 to 0.9.8.

Commits
  • 93e9146 chore: Release
  • 7de1b4e docs: Update changelog
  • 1b579c3 feat(serde): Support integer, bools, and chars as keys (#1050)
  • ac1e077 feat(serde): Support chars as keys
  • f3dec32 feat(serde): Support bools as keys
  • 139b30a feat(serde): Support integer keys
  • 2d65a88 test(serde): Show existing key behavior
  • 80217f8 chore(deps): Update actions/checkout action to v5 (#1047)
  • b36e351 chore(deps): Update actions/checkout action to v5
  • 7d2c649 chore(deps): Update actions/setup-python action to v6 (#1048)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [toml](https://github.com/toml-rs/toml) from 0.9.5 to 0.9.8.
- [Commits](toml-rs/toml@toml-v0.9.5...toml-v0.9.8)

---
updated-dependencies:
- dependency-name: toml
  dependency-version: 0.9.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 13, 2025
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Greptile Overview

Summary

Updates the toml dependency from 0.9.5 to 0.9.8, a minor version bump with additive features and performance improvements.

Key Changes

  • toml 0.9.8: Adds support for char, bool, and integer types as map keys in serde serialization/deserialization
  • toml 0.9.7: Updated MSRV to 1.76
  • toml 0.9.6: Switched from serde to serde_core for better build parallelism

Transitive Updates

  • indexmap: 2.11.1 → 2.11.4
  • serde_spanned: 1.0.0 → 1.0.3 (now uses serde_core)
  • toml_datetime: 0.7.0 → 0.7.3 (now uses serde_core)
  • toml_parser: 1.0.2 → 1.0.4
  • toml_writer: 1.0.3 → 1.0.4

Impact Assessment

This is a low-risk dependency update. The changes are additive features and performance improvements with no breaking changes for existing functionality. The project uses toml through the config crate for configuration file parsing and has explicit toml = "0.9" in Cargo.toml, which is satisfied by 0.9.8.

Confidence Score: 5/5

  • This PR is safe to merge with minimal risk - it's a routine dependency update with additive features only.
  • Score reflects the low-risk nature of this dependency update: (1) Minor version bump within semver-compatible range specified in Cargo.toml (0.9.x), (2) Only additive features (char/bool/integer key support) with no breaking changes to existing functionality, (3) Performance improvements via serde_core switch, (4) Project uses toml indirectly through the config crate with no direct API usage that could be affected, (5) Standard Dependabot-generated update with proper versioning.
  • No files require special attention - this is a lockfile-only update.

Important Files Changed

File Analysis

Filename Score Overview
Cargo.lock 5/5 Updates toml from 0.9.5 to 0.9.8, adding support for char/bool/integer keys and switching to serde_core for better build parallelism. Also updates transitive dependencies (indexmap, serde_spanned, toml_datetime, toml_parser, toml_writer).

Sequence Diagram

sequenceDiagram
    participant Dependabot
    participant CargoLock as Cargo.lock
    participant TomlCrate as toml crate
    participant Deps as Transitive Dependencies
    participant ConfigCrate as config crate
    participant YekApp as yek application

    Dependabot->>CargoLock: Update toml 0.9.5 → 0.9.8
    CargoLock->>TomlCrate: Resolve new version
    TomlCrate->>Deps: Update indexmap 2.11.1 → 2.11.4
    TomlCrate->>Deps: Update serde_spanned 1.0.0 → 1.0.3
    TomlCrate->>Deps: Update toml_datetime 0.7.0 → 0.7.3
    TomlCrate->>Deps: Update toml_parser 1.0.2 → 1.0.4
    TomlCrate->>Deps: Update toml_writer 1.0.3 → 1.0.4
    Deps->>TomlCrate: Switch serde → serde_core
    Note over TomlCrate: New features:<br/>- char/bool/int keys<br/>- Better build parallelism
    ConfigCrate->>TomlCrate: Uses for config parsing
    YekApp->>ConfigCrate: Reads yek.toml/yaml/json
    Note over YekApp: No breaking changes<br/>Backward compatible
Loading

No files reviewed, no comments

Edit Code Review Agent Settings | Greptile

@mohsen1 mohsen1 closed this Oct 17, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 17, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/cargo/toml-0.9.8 branch October 17, 2025 06:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants