Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 30, 2025

Bumps the cargo group with 3 updates: tracing-forest, hashbrown and sysinfo.

Updates tracing-forest from 0.1.6 to 0.2.0

Commits

Updates hashbrown from 0.15.5 to 0.16.0

Release notes

Sourced from hashbrown's releases.

v0.16.0

Added

  • Added Entry::or_default_entry and Entry::or_insert_entry.

Changed

  • Re-implemented likely/unlikely with #[cold]
Changelog

Sourced from hashbrown's changelog.

0.16.0 - 2025-08-28

Changed

  • Bump foldhash, the default hasher, to 0.2.0.
  • Replaced DefaultHashBuilder with a newtype wrapper around foldhash instead of re-exporting it directly.
Commits
  • 8d4def0 Merge pull request #643 from cuviper/newtype-hasher
  • e0f404c use feature(hasher_prefixfree_extras)
  • 95ffed3 Change DefaultHashBuilder to an opaque newtype
  • bf35a11 Merge pull request #641 from hoxxep/foldhash-0.2
  • e2a634b Merge pull request #642 from heiher/loong-simd-types
  • 88794e7 loongarch64: Use unified data types for SIMD intrinsics
  • b22dd85 perf: Bump foldhash to 0.2.0
  • fe72a08 Merge pull request #639 from gaujay/unbloat-get_inner-perf
  • 71f8f37 Merge pull request #637 from gaujay/add-benchmarks
  • f1c039c Un-bloat get_inner functions to restore lookup performance
  • Additional commits viewable in compare view

Updates sysinfo from 0.36.1 to 0.37.0

Changelog

Sourced from sysinfo's changelog.

0.37.0

  • Update minimum supported Rust version to 1.88 (for 2024 edition and if let chain feature).
  • Added Component::id API.
  • Linux: Greatly improve partial processes retrieval.
  • Linux: Simplify internal components retrieval code.
Commits
  • 317d873 Merge pull request #1569 from GuillaumeGomez/update-version
  • 65797c1 Update crate version to 0.37.0
  • 634f800 Update CHANGELOG for 0.37.0 version
  • 1862c57 Merge pull request #1568 from GuillaumeGomez/internal-improvement
  • 5d189e6 Rename PathHandler::join into PathHandler::replace_and_join to make it ea...
  • 833b3ba Improve process refresh on Linux (#1566)
  • af60d22 Merge pull request #1567 from GuillaumeGomez/msrv
  • 5fa1b50 Fix new clippy lints
  • 8ac5855 Update minimum supported rust version to 1.88
  • 14f55d3 Merge pull request #1561 from guillaumecl/id
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 3 updates: [tracing-forest](https://github.com/QnnOkabayashi/tracing-forest), [hashbrown](https://github.com/rust-lang/hashbrown) and [sysinfo](https://github.com/GuillaumeGomez/sysinfo).


Updates `tracing-forest` from 0.1.6 to 0.2.0
- [Commits](https://github.com/QnnOkabayashi/tracing-forest/commits)

Updates `hashbrown` from 0.15.5 to 0.16.0
- [Release notes](https://github.com/rust-lang/hashbrown/releases)
- [Changelog](https://github.com/rust-lang/hashbrown/blob/master/CHANGELOG.md)
- [Commits](rust-lang/hashbrown@v0.15.5...v0.16.0)

Updates `sysinfo` from 0.36.1 to 0.37.0
- [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/master/CHANGELOG.md)
- [Commits](GuillaumeGomez/sysinfo@v0.36.1...v0.37.0)

---
updated-dependencies:
- dependency-name: tracing-forest
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: hashbrown
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: sysinfo
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Aug 30, 2025
Copy link
Member

@EliahKagan EliahKagan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I wanted to test this now by manually triggering a Dependabot scan, because:

  • Scans have often been failing in my fork, possibly due to the additional processing time needed to generate and report the error discussed in #2092 and #2093, though I do not know if that is the reason.
  • When the scheduled scan occurs here, I don't know if I'll have time to work on it for a while if anything goes wrong or needs detailed examination.

This scan succeeded both here and in my fork (in EliahKagan#89). Possibly this was not a good test of the problem I've observed, since the scan may be simpler this time due to what appears to be a recent cargo update run in 888b763 (#2143).

CI is green here. The crates being updated here are SemVer-breaking, but it doesn't look like there will be any problem. The main reason to wait is to decrease churn. There are two things to possibly wait for:

  • The automated scan on the first of the month.
  • A change to dependabot.yml, which I may do in lieu of #2093 (or turn #2093 into) to temporarily hold back SemVer-breaking upgrades to getrandom so we don't get that error during Dependabot updates. Even if that error doesn't slow them down--I'm not sure if it does or not--it makes them hard to understand.

But if this PR is simply merged before either of those is done, then I think that would be fine too.

@Byron
Copy link
Member

Byron commented Aug 31, 2025

Thanks for the update!

Let's merge so that the next scan has less work to do - "green is green is good" is my simple motto (and one I just made up :D).

@Byron Byron merged commit 8d8dba2 into main Aug 31, 2025
26 checks passed
@dependabot dependabot bot deleted the dependabot/cargo/cargo-2a6d70b8ef branch August 31, 2025 06:14
@EliahKagan
Copy link
Member

"green is green is good" is my simple motto (and one I just made up :D).

Sometimes a new test should fail but wrongly passes due to a test bug, which green CI reveals, but other than that situation--which does not apply here--I agree with this motto.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants