deps(deps): bump smallvec from 1.15.1 to 1.15.2 - #2656
Conversation
dependabot
Bot
added
dependabot
dependencies
![cloudwalk-review-agent[bot]](https://avatars.githubusercontent.com/u/6581007?s=60&v=4){kind=small}
There was a problem hiding this comment.
Summary
Dependency bump is scoped and consistent: smallvec was updated from 1.15.1 to 1.15.2 in both Cargo.toml and Cargo.lock, with lockfile checksum updated accordingly. No API surface, runtime logic, or config changes are introduced by this PR.
Given the upstream release notes include a fix for a use-after-free edge case, this is a low-risk, positive security/correctness update.
🧾 cargo-vet automated audit summary
CI did not commit anything. Review the patch locally and create the final signed commit yourself. Apply the patch locallyThe patch artifact is attached to this workflow run as a zip archive. Download it, extract Preferred: GitHub CLI git checkout <pr-branch>
gh run download 33389922902 -n dependabot-auto-vet-patch-pr-2656
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git pushFallback: direct artifact download git checkout <pr-branch>
curl -L \
-H "Authorization: Bearer <github-token>" \
-o auto-vet-artifact.zip \
https://github.com/cloudwalk/stratus/actions/runs/33389922902/artifacts/9757136764
unzip -p auto-vet-artifact.zip vet/auto-vet.patch > auto-vet.patch
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git push |
50f7d87 to
0e5321d
Compare
🧾 cargo-vet automated audit summary
CI did not commit anything. Review the patch locally and create the final signed commit yourself. Apply the patch locallyThe patch artifact is attached to this workflow run as a zip archive. Download it, extract Preferred: GitHub CLI git checkout <pr-branch>
gh run download 33400026386 -n dependabot-auto-vet-patch-pr-2656
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git pushFallback: direct artifact download git checkout <pr-branch>
curl -L \
-H "Authorization: Bearer <github-token>" \
-o auto-vet-artifact.zip \
https://github.com/cloudwalk/stratus/actions/runs/33400026386/artifacts/9761116927
unzip -p auto-vet-artifact.zip vet/auto-vet.patch > auto-vet.patch
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git push |
Bumps [smallvec](https://github.com/servo/rust-smallvec) from 1.15.1 to 1.15.2. - [Release notes](https://github.com/servo/rust-smallvec/releases) - [Commits](servo/rust-smallvec@v1.15.1...v1.15.2) --- updated-dependencies: - dependency-name: smallvec dependency-version: 1.15.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
0e5321d to
935c09d
Compare
🧾 cargo-vet automated audit summary
CI did not commit anything. Review the patch locally and create the final signed commit yourself. Apply the patch locallyThe patch artifact is attached to this workflow run as a zip archive. Download it, extract Preferred: GitHub CLI git checkout <pr-branch>
gh run download 33663749147 -n dependabot-auto-vet-patch-pr-2656
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git pushFallback: direct artifact download git checkout <pr-branch>
curl -L \
-H "Authorization: Bearer <github-token>" \
-o auto-vet-artifact.zip \
https://github.com/cloudwalk/stratus/actions/runs/33663749147/artifacts/9860045591
unzip -p auto-vet-artifact.zip vet/auto-vet.patch > auto-vet.patch
git apply --index auto-vet.patch
git status
git commit -S -m "chore(vet): apply automated audits"
git push |
Bumps smallvec from 1.15.1 to 1.15.2.
Release notes
Sourced from smallvec's releases.
Commits
c469051Bump version.9fe422bFix Windows CI.51b965fWork around rustc 1.93 perf regression with MaybeUninit9da26a5Fix use-after-free in DrainFilter::keep_rest for zero-capacity SmallVecs79184f1Add Miri test for use-after-free in DrainFilter::keep_restf59fb36Merge pull request #397 from GiGainfosystems/exclude_scripts28b6ed7Exclude development script