Skip to content

chore(deps): bump pinocchio from 0.10.2 to 0.11.2#623

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/pinocchio-0.11.2
Open

chore(deps): bump pinocchio from 0.10.2 to 0.11.2#623
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/pinocchio-0.11.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps pinocchio from 0.10.2 to 0.11.2.

Release notes

Sourced from pinocchio's releases.

pinocchio@v0.11.2

What's new

pinocchio@v0.11.1

What's new

pinocchio@v0.11.0

Important

This release includes two important breaking changes.

Mutable AccountView references

In previous versions, the Rust borrow checker could not provide much help when working with accounts because the API only required &self references, even though many methods mutated account data.

let [from, to, _system_program] = accounts else {
    return Err(ProgramError::NotEnoughAccountKeys);
};
// SAFETY: No other borrow of the account data exist.
let data = unsafe { to.borrow_unchecked_mut() };
CreateAccount {
from,
to,
lamports: 1_000_000_000,
space: 10,
owner: program_id,
}
.invoke()?;
// UB: The reference is not valid anymore since the CPI mutates
// the account data.
data[0] = 10;

The borrow checker can provide stronger guarantees if programs work with mutable AccountView references directly. To support this, the new version of solana-account-view now requires mutable AccountView references in APIs that mutate account state. For example, assign, close and try_borrow_mut now require &mut AccountView.

As a result, the signature of process_instruction must also change so that programs receive a mutable slice of AccountView values:

This change requires a modification on the signature of the process_instruction definition to specify that programs receive a mutable slice of AccountView values:

</tr></table> 

... (truncated)

Commits
  • 8758463 Bump version (#423)
  • e59da2b sdk: Cold error conversion (#422)
  • 25c6353 Add ATA-relevant ext structs (#416)
  • 32fbdc4 fix(token-2022): use extension types for account sizing (#418)
  • fc05684 sdk: Fix docs (#419)
  • dd5d812 token-2022: Add TLV extension state infrastructure and initial extension stru...
  • 03c8328 ci: show crate, version, and ref in release approval window (#414)
  • d6141aa build(deps): bump the github-actions group across 1 directory with 3 updates ...
  • ec5125d Publish pinocchio-system v0.6.1
  • 34baafd programs/system: Use invoke unchecked (#403)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pinocchio](https://github.com/anza-xyz/pinocchio) from 0.10.2 to 0.11.2.
- [Release notes](https://github.com/anza-xyz/pinocchio/releases)
- [Commits](https://github.com/anza-xyz/pinocchio/compare/pinocchio@v0.10.2...pinocchio@v0.11.2)

---
updated-dependencies:
- dependency-name: pinocchio
  dependency-version: 0.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jun 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants