Skip to content

ci: bump packageurl from 0.5.0 to 0.7.0 - #440

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/packageurl-0.7.0
Open

ci: bump packageurl from 0.5.0 to 0.7.0#440
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/packageurl-0.7.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor

Bumps packageurl from 0.5.0 to 0.7.0.

Release notes

Sourced from packageurl's releases.

0.7.0

v0.7.0 (2026-07-22)

Features

  • switch to trusted publishing for crates.io (d048a17)
  • add share button and sync URL bar with purl input (9c067d5)
  • drop logo, improve styling, add ?purl= URL pre-population (154a134)
  • add Leptos-based PackageURL validator web app (cfabd3d)
  • add Leptos-based PackageURL validator web app (e9a75aa)
  • mark Error as non_exhaustive (755b51c)
  • enforce the per-type rules from the purl-spec type definitions (76e0789)

Fixes

  • install trunk from prebuilt binary instead of compiling (e1a6329)
  • avoid let-chains to stay compatible with MSRV 1.85 (1aacea8)
  • collapse nested if-let to satisfy clippy (e2d7dec)
  • force-install trunk to avoid stale cache hit (1b0ea69)
  • split the version only at an '@' in the final path segment (2d6f5e3)
  • percent-encode '/' and ',' in canonical qualifier values (2367d1f)

0.6.0

v0.6.0 (2025-12-02)

Fixes

  • clippy (23f1aab)
  • #28 introduce 2nd encode set to handle encoded slashes in names (b87b37b)
  • Enforce namespace restrictions and error handling for specific package types (12e2e1d)

0.6.0-rc.1

v0.6.0-rc.1 (2025-09-08)

Fixes

  • Enforce namespace restrictions and error handling for specific package types (12e2e1d)
Commits
  • d048a17 feat: switch to trusted publishing for crates.io
  • 28ca4fc chore: use workspace version and edition for all crates
  • b61e5a0 chore: update upload-pages-artifact to v5
  • e1a6329 fix: install trunk from prebuilt binary instead of compiling
  • 877e50a style: apply cargo fmt
  • 1aacea8 fix: avoid let-chains to stay compatible with MSRV 1.85
  • e2d7dec fix: collapse nested if-let to satisfy clippy
  • 9c067d5 feat: add share button and sync URL bar with purl input
  • 1b0ea69 fix: force-install trunk to avoid stale cache hit
  • 154a134 feat: drop logo, improve styling, add ?purl= URL pre-population
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 22, 2026
@github-actions
github-actions Bot enabled auto-merge (rebase) July 22, 2026 14:43
@dependabot
dependabot Bot force-pushed the dependabot/cargo/packageurl-0.7.0 branch 2 times, most recently from e7f0ada to 9bb2362 Compare July 23, 2026 14:46
Bumps [packageurl](https://github.com/scm-rs/packageurl.rs) from 0.5.0 to 0.7.0.
- [Release notes](https://github.com/scm-rs/packageurl.rs/releases)
- [Commits](scm-rs/packageurl.rs@v0.5.0...v0.7.0)

---
updated-dependencies:
- dependency-name: packageurl
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/packageurl-0.7.0 branch from 9bb2362 to 560c79f Compare July 24, 2026 14:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants