Skip to content

build(deps): bump all dependencies to latest versions#1247

Open
ffedoroff wants to merge 11 commits into
mozilla:masterfrom
ffedoroff:patch/update-tree-sitter-0.26.8
Open

build(deps): bump all dependencies to latest versions#1247
ffedoroff wants to merge 11 commits into
mozilla:masterfrom
ffedoroff:patch/update-tree-sitter-0.26.8

Conversation

@ffedoroff
Copy link
Copy Markdown

@ffedoroff ffedoroff commented May 22, 2026

Summary

Consolidates all pending Dependabot PRs and brings every dependency up to its latest published version. Verified to compile cleanly.

tree-sitter ecosystem

Package Before After
tree-sitter 0.25.3 0.26.9
tree-sitter-rust 0.23.2 0.23.2 (unchanged, see note below)
tree-sitter-javascript 0.23.1 0.25.0
tree-sitter-python 0.23.6 0.25.0

Updated in: main Cargo.toml, enums/, tree-sitter-ccomment/, tree-sitter-mozcpp/, tree-sitter-mozjs/, tree-sitter-preproc/.

API fix: tree-sitter 0.26.x changed Node::child() to accept u32 instead of usize. Added a cast in src/node.rs to keep the wrapper's public signature unchanged.

Note on tree-sitter-rust: Bumping to 0.24.2 silently breaks all Rust function-level metrics because language_rust.rs has hardcoded node IDs (e.g. FunctionItem = 186) generated from the 0.23.2 grammar. The enums/ tool needs to regenerate language_rust.rs from the 0.24.2 grammar before that bump can land. Left at 0.23.2 until then.

Other dependencies

Package Before After
clap ^4.0 ^4.6
actix-web ^4.2 ^4.13
actix-rt ^2.6 ^2.11
toml ^0.9 ^1.1
insta 1.29 1.47
aho-corasick ^1.0 ^1.1
regex ^1.7 ^1.12

serde_yaml → serde_yml

serde_yaml is officially deprecated by its author. Replaced with the maintained fork serde_yml 0.0.12 in rust-code-analysis-cli. The API is compatible — only two call sites in formats.rs needed updating.

Test plan

  • cargo build in repo root passes
  • metrics() returns correct function-level FuncSpace entries for Rust source (verified with tree-sitter-rust 0.23.2)
  • Existing test suite passes

dependabot Bot and others added 10 commits March 30, 2026 23:09
Updates the requirements on [tree-sitter-rust](https://github.com/tree-sitter/tree-sitter-rust) to permit the latest version.
- [Release notes](https://github.com/tree-sitter/tree-sitter-rust/releases)
- [Commits](tree-sitter/tree-sitter-rust@v0.23.2...v0.24.2)

---
updated-dependencies:
- dependency-name: tree-sitter-rust
  dependency-version: 0.24.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [tree-sitter](https://github.com/tree-sitter/tree-sitter) to permit the latest version.
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.25.3...v0.26.8)

---
updated-dependencies:
- dependency-name: tree-sitter
  dependency-version: 0.26.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [tree-sitter](https://github.com/tree-sitter/tree-sitter) to permit the latest version.
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.25.3...v0.26.8)

---
updated-dependencies:
- dependency-name: tree-sitter
  dependency-version: 0.26.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [tree-sitter](https://github.com/tree-sitter/tree-sitter) to permit the latest version.
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.25.3...v0.26.8)

---
updated-dependencies:
- dependency-name: tree-sitter
  dependency-version: 0.26.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [tree-sitter](https://github.com/tree-sitter/tree-sitter) to permit the latest version.
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.25.3...v0.26.8)

---
updated-dependencies:
- dependency-name: tree-sitter
  dependency-version: 0.26.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [tree-sitter](https://github.com/tree-sitter/tree-sitter) to permit the latest version.
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.25.3...v0.26.8)

---
updated-dependencies:
- dependency-name: tree-sitter
  dependency-version: 0.26.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…tter-eq-0.26.8', 'origin/dependabot/cargo/tree-sitter-ccomment/tree-sitter-eq-0.26.8', 'origin/dependabot/cargo/tree-sitter-mozcpp/tree-sitter-eq-0.26.8', 'origin/dependabot/cargo/tree-sitter-mozjs/tree-sitter-eq-0.26.8', 'origin/dependabot/cargo/tree-sitter-preproc/tree-sitter-eq-0.26.8' and 'origin/dependabot/cargo/tree-sitter-rust-eq-0.24.2' into patch/update-tree-sitter-0.26.8
Bumps tree-sitter from 0.25.3 → 0.26.8 in the main library and all
sub-crates (enums, tree-sitter-ccomment, tree-sitter-mozcpp,
tree-sitter-mozjs, tree-sitter-preproc), and tree-sitter-rust from
0.23.2 → 0.24.2.

Also fixes the one API break introduced in tree-sitter 0.26.x:
`Node::child()` now takes `u32` instead of `usize`; added a cast in
src/node.rs to keep the wrapper's public signature unchanged.
- tree-sitter 0.25.3 → 0.26.9
- tree-sitter-rust 0.23.2 → 0.24.2
- tree-sitter-javascript 0.23.1 → 0.25.0
- tree-sitter-python 0.23.6 → 0.25.0
- clap ^4.0 → ^4.6, actix-web ^4.2 → ^4.13, actix-rt ^2.6 → ^2.11
- toml ^0.9 → ^1.1, insta 1.29 → 1.47, various patch bumps

Applied to all workspace members and sub-crates. Verified clean build.
@ffedoroff ffedoroff changed the title build(deps): update tree-sitter to 0.26.8 across all crates build(deps): bump all dependencies to latest versions May 22, 2026
…ated for 0.24.2

Node IDs in language_rust.rs (e.g. FunctionItem=186) were generated from
the 0.23.2 grammar. Updating to 0.24.2 without regenerating the file via
the enums/ tool causes all Rust function nodes to be misidentified,
making metrics() return no function-level spaces.

Revert to 0.23.2 until the enum file is regenerated from the new grammar.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant