Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 15, 2025

Bumps the patch-versions group with 1 update: reqwest.

Updates reqwest from 0.12.25 to 0.12.26

Release notes

Sourced from reqwest's releases.

v0.12.26

tl;dr

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

What's Changed

Full Changelog: seanmonstar/reqwest@v0.12.25...v0.12.26

Changelog

Sourced from reqwest's changelog.

v0.12.26

  • Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • Updated development dependencies for internal build tooling.

Note: This release contains no user-facing changes.

✏️ Tip: You can customize this high-level summary in your review settings.

Bumps the patch-versions group with 1 update: [reqwest](https://github.com/seanmonstar/reqwest).


Updates `reqwest` from 0.12.25 to 0.12.26
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.25...v0.12.26)

---
updated-dependencies:
- dependency-name: reqwest
  dependency-version: 0.12.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-versions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Dec 15, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 15, 2025 19:11
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 15, 2025
@dependabot dependabot bot requested review from LesnyRumcajs and removed request for a team December 15, 2025 19:11
@dependabot dependabot bot added the rust Pull requests that update Rust code label Dec 15, 2025
@dependabot dependabot bot requested a review from sudo-shashank December 15, 2025 19:11
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Dec 15, 2025

Walkthrough

The PR updates the ra_ap_syntax dev-dependency from version 0.0.309 to 0.0.310 in Cargo.toml. The version change appears in two locations within the manifest file.

Changes

Cohort / File(s) Summary
Dependency version bump
Cargo.toml
Updated ra_ap_syntax dev-dependency from 0.0.309 to 0.0.310 in two locations

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

  • Verify the version bump is intentional and aligns with project requirements
  • Confirm no breaking changes introduced by the patch version update

Possibly related PRs

Suggested reviewers

  • LesnyRumcajs
  • sudo-shashank

Pre-merge checks and finishing touches

❌ Failed checks (1 warning)
Check name Status Explanation Resolution
Title check ⚠️ Warning The PR title mentions bumping reqwest, but the actual change in the code is updating ra_ap_syntax from 0.0.309 to 0.0.310, making the title misleading. Update the title to reflect the actual change: 'chore(deps): bump ra_ap_syntax from 0.0.309 to 0.0.310' or similar to match the changeset.
✅ Passed checks (2 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/cargo/patch-versions-694c32ea1c

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 3e1e64d and 66c63da.

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • Cargo.toml (1 hunks)
🧰 Additional context used
🧠 Learnings (1)
📚 Learning: 2025-08-08T12:10:45.218Z
Learnt from: hanabi1224
Repo: ChainSafe/forest PR: 5867
File: src/ipld/util.rs:553-558
Timestamp: 2025-08-08T12:10:45.218Z
Learning: Forest pins Rust toolchain to 1.89.0 via rust-toolchain.toml; features stabilized in 1.88 (e.g., let-chains) are acceptable in this codebase.

Applied to files:

  • Cargo.toml
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (8)
  • GitHub Check: Build MacOS
  • GitHub Check: Build Ubuntu
  • GitHub Check: cargo-publish-dry-run
  • GitHub Check: Build forest binaries on Linux AMD64
  • GitHub Check: Coverage
  • GitHub Check: tests
  • GitHub Check: tests-release
  • GitHub Check: All lint checks
🔇 Additional comments (1)
Cargo.toml (1)

257-257: PR objectives do not match actual changes.

The PR title and description indicate a bump of reqwest from 0.12.25 to 0.12.26, but the actual change is a bump of ra_ap_syntax (a dev-dependency) from 0.0.309 to 0.0.310. The reqwest dependency at lines 177-181 appears unchanged.

Please verify this is the intended change and update the PR description accordingly, or check if the wrong commits were pushed.

The ra_ap_syntax dev-dependency bump itself is low-risk.


Comment @coderabbitai help to get the list of available commands and usage tips.

@sudo-shashank sudo-shashank added this pull request to the merge queue Dec 16, 2025
Merged via the queue into main with commit 051fb19 Dec 16, 2025
44 checks passed
@sudo-shashank sudo-shashank deleted the dependabot/cargo/patch-versions-694c32ea1c branch December 16, 2025 06:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants