deps(deps): bump imbl from 7.0.1 to 7.0.2 - #286
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [imbl](https://github.com/jneem/imbl) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/jneem/imbl/releases) - [Changelog](https://github.com/jneem/imbl/blob/main/CHANGELOG.md) - [Commits](jneem/imbl@v7.0.1...v7.0.2) --- updated-dependencies: - dependency-name: imbl dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Up to standards ✅🟢 Issues
|
There was a problem hiding this comment.
Pull Request Overview
This PR intends to upgrade imbl from 7.0.1 to 7.0.2 to resolve security vulnerabilities (RUSTSEC-2026-0247, RUSTSEC-2025-0167) and iterator bug fixes. While Codacy analysis indicates the project remains up to standards, there is a critical implementation gap: the Cargo.toml file has not been updated in this PR. Without this change, the project will continue to use the vulnerable version. The merge should be blocked until the manifest update is included and verified against the test suite.
About this PR
- The update to
Cargo.tomlrequired to bump theimblversion to 7.0.2 is missing from the provided changes. To resolve the targeted security vulnerabilities (RUSTSEC-2026-0247 and RUSTSEC-2025-0167), the manifest must be updated to specify the new version.
Test suggestions
- Verify the project compiles and the test suite passes with
imblversion 7.0.2 to ensure no regressions from the dependency update.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify the project compiles and the test suite passes with `imbl` version 7.0.2 to ensure no regressions from the dependency update.
TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback
Bumps imbl from 7.0.1 to 7.0.2.
Changelog
Sourced from imbl's changelog.
Commits
834c67fRelease 7.0.2 (#178)37d3f63Fix OrdMap::diff dropping differences after shared nodes (#166)a3dba68AddCloneimpl for variousConsumingIters (#174)5c873bdord: fix OrdSet::ConsumingIter ExactSizeIterator::len panic (#176)1b0b983Drop the unmaintained bitmaps dependency (#175)d8f7018Fix 7 doc links that weren't displaying correctly.a7ad299Never mind, the ManuallyDrop does nothing812ec86Use ManuallyDrop to make some unsafe code clearer.cdb06afFix UB in vector iterators.396d4b9chore: Release imbl version 7.0.1Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)