ci(rust): bump async-trait from 0.1.89 to 0.1.91#72
Conversation
Bumps [async-trait](https://github.com/dtolnay/async-trait) from 0.1.89 to 0.1.91. - [Release notes](https://github.com/dtolnay/async-trait/releases) - [Commits](dtolnay/async-trait@0.1.89...0.1.91) --- updated-dependencies: - dependency-name: async-trait dependency-version: 0.1.91 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
|
@strandly-the-agent safe to merge? |
strandly-the-agent
left a comment
There was a problem hiding this comment.
TL;DR: ✅ Safe to merge at 3dd9826097444ef4bfc02917ba346a23cf9dc534; no actionable findings.
- ✅ Exact head: 1,749 workspace/all-target tests passed; docs passed with warnings denied.
- ✅ Current-main merge (
825b382): conflict-free; 1,749 tests and docs passed again. - ✅ Cargo 1.85 regenerated the lock byte-for-byte; selected crates are non-yanked, checksums/provenance match, and their Rust 1.71 MSRV is compatible.
- ✅ Exact-head GitHub matrix and CI Gate are green across Rust, Python, Node, and security.
Per-pass evidence and residual caveats
Correctness/safety — approve, no findings. Only Cargo.lock changes. async-trait 0.1.91 alone selects syn 3.0.2; the existing async-trait = "0.1" requirement remains compatible. Focused Cargo 1.85 receiver/object-safety probes passed.
Adversarial — no blocker. An independent pass reproduced both the PR lock and synthetic current-main merge lock byte-for-byte, verified fresh crate hashes/upstream provenance, passed 143 focused locked tests on each tree, and compiled the changed dependency pattern for native and wasm32-wasip2. The advanced-tier runner was unavailable, so this pass completed on the default tier.
Residual caveats. Full local suites ran on Linux/aarch64; GitHub supplies macOS/Windows and binding coverage. A full repository WASM build was unavailable without wasi-sdk/Clang, but the focused changed-dependency WASM probe passed.
API/DevX, test-quality, LLM-context, and docs passes were skipped because this PR changes no source, public API, tests, model-facing content, or documentation.
Bumps async-trait from 0.1.89 to 0.1.91.
Release notes
Sourced from async-trait's releases.
Commits
d049ee0Release 0.1.917a0961fMerge pull request #301 from dtolnay/mutability740f86fIgnore mut_mut pedantic clippy lint in test4699cd3Fix mutability for by-reference receivers6dd3573Add regression test for issue 3002371797Release 0.1.90d03f075Merge pull request #299 from dtolnay/syn36cf42c1Update to syn 3b9daabaIgnore match_same_arms pedantic clippy lintaa706d1Update actions/upload-artifact@v6 -> v7Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)