Repository navigation
build(deps): Automatic dependency updates for 2026-10-06 - #164
Merged
Merged
Conversation
This was referenced Oct 6, 2026
fxrdhan
added a commit
that referenced
this pull request
Oct 6, 2026
Since #159 turned the sandbox on, no fixed-output derivation can start. Nix mounts ssl-cert-file at /etc/ssl/certs/ca-certificates.crt for each of them, and extra-sandbox-paths has already mounted the host's /etc/ssl/certs, which holds that file, so creating the mount point fails: error: creating regular file "…/etc/ssl/certs/ca-certificates.crt": File exists No pull request has shown it, because the crate downloads they needed all came from Cachix. The dependency bump in #164 is the first to need new ones. The cold canary, which builds every crate download without Cachix, would fail on Monday: its last green run predates #159, and built them unsandboxed. Drop the extra sandbox path from both. The crate downloads still get the CA bundle through ssl-cert-file, and nothing else in the sandbox has a network to need one. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Updating crates.io index
Updating base64 v0.22.1 -> v0.23.1
Updating bitflags v2.13.1 -> v2.13.2
Updating cc v1.4.4 -> v1.6.0
Updating cfg-if v1.0.4 -> v1.0.5
Updating clap v4.6.6 -> v4.6.7
Updating clap_builder v4.6.6 -> v4.6.7
Updating clap_derive v4.6.4 -> v4.6.7
Updating clap_lex v1.1.0 -> v1.1.1
Updating crossbeam-deque v0.8.7 -> v0.8.8
Updating crossbeam-epoch v0.9.20 -> v0.9.21
Updating crossbeam-utils v0.8.22 -> v0.8.23
Updating find-msvc-tools v0.1.11 -> v0.1.14
Updating indexmap v2.14.1 -> v2.14.2
Updating js-sys v0.3.104 -> v0.3.106
Updating libc v0.2.189 -> v0.2.190
Updating libredox v0.1.23 -> v0.1.25
Updating plist v1.10.0 -> v1.10.1
Updating powerfmt v0.2.0 -> v0.2.1
Updating quick-xml v0.41.0 -> v0.42.0
Updating redox_users v0.5.2 -> v0.5.3
Updating rustix v1.1.4 -> v1.1.5
Updating siphasher v1.0.3 -> v1.0.4
Updating smallvec v1.16.0 -> v1.16.2
Updating syn v3.0.4 -> v3.0.6
Updating synstructure v0.13.2 -> v0.14.0
Updating thiserror v2.0.20 -> v2.0.21
Updating thiserror-impl v2.0.20 -> v2.0.21
Updating toml v1.1.5+spec-1.1.0 -> v1.1.6+spec-1.1.0
Updating toml_edit v0.25.13+spec-1.1.0 -> v0.25.15+spec-1.1.0
Updating unicode-ident v1.0.24 -> v1.0.26
Updating wasm-bindgen v0.2.127 -> v0.2.129
Updating wasm-bindgen-macro v0.2.127 -> v0.2.129
Updating wasm-bindgen-macro-support v0.2.127 -> v0.2.129
Updating wasm-bindgen-shared v0.2.127 -> v0.2.129
Updating web-sys v0.3.104 -> v0.3.106
Updating yoke-derive v0.8.2 -> v0.8.4
Updating zerocopy v0.8.56 -> v0.8.60
Updating zerocopy-derive v0.8.56 -> v0.8.60
Updating zerofrom-derive v0.1.7 -> v0.1.8
• Updated input 'advisory-db':
'github:rustsec/advisory-db/117edb3bed98e9be112f277b7615eea3252e7c43?narHash=sha256-cKcBBqQBMwk5gDDFHb1x7MDjaBb4Vhy2/w4YyIesbQ4%3D' (2026-10-02)
→ 'github:rustsec/advisory-db/ef6173cbc5c50ec8166f9a5b28f07834144373ee?narHash=sha256-fSs/HUa87mK3O5wV26zZdUU0WvJ3pbeE5WGNPpepZeI%3D' (2026-10-03)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/b6c8664de9b6cc07fe5666a29f91884ba81197c4?narHash=sha256-641r7xrlSOHYoktL9/aArPIYNgZJ9eM5URzSEOtPJDY%3D' (2026-09-29)
→ 'github:NixOS/nixpkgs/aa48d347080940b8a2b8d2f48228674e280a3514?narHash=sha256-i8KuaINOYLvB2oQikGvtRmdZRxATRxsI9Yad2pp7dEA%3D' (2026-10-05)
• Updated input 'rust-overlay':
'github:oxalica/rust-overlay/368fee9beaab04ca6fe7af28db63caa9badb22fa?narHash=sha256-5r3MN/Rx7N9tLapCBmUq6/zCc3C9J7gNif1HybD1fJQ%3D' (2026-10-02)
→ 'github:oxalica/rust-overlay/e60029353d0c48d216bc4b065168ccd4079c166f?narHash=sha256-Y8eN7ki0Urx4Ojf4w1xSpWg8uk/3lJqK%2BE0Oth77rH0%3D' (2026-10-05)
• Updated input 'systems':
'github:nix-systems/default/da67096a3b9bf56a91d16901293e51ba5b49a27e?narHash=sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768%3D' (2023-04-09)
→ 'github:nix-systems/default/d36eeed142f88b5a636f2e3856a53c61654cf29b?narHash=sha256-uuanbkFk8a313Zfrxdcz8Us/yQtaxNnKJtX8v0ZPpd8%3D' (2026-10-05)
• Updated input 'treefmt-nix':
'github:numtide/treefmt-nix/27b3b12a8e6375f28ebe122f07d230ca5459bbfa?narHash=sha256-WSFCsDSE5ffgD2MqzkM2CYjeFiKhRF/dJUN8uedb6YE%3D' (2026-08-16)
→ 'github:numtide/treefmt-nix/03d8ee1bcbc8f9638907bb79edb9673151d0e22b?narHash=sha256-vuzVwvjeucSnwKwMBpyP8r5IzdrMKCHEdwTrRFwUN7I%3D' (2026-10-05)
github-actions
Bot
force-pushed
the
deps_update_2026-10-06
branch
from
October 6, 2026 07:21
b988811 to
19c6367
Compare
This was referenced Oct 6, 2026
fxrdhan
added a commit
that referenced
this pull request
Oct 6, 2026
…176) Since June 2026, GitHub holds every workflow run on a pull request that GITHUB_TOKEN opens or updates until someone with write access approves it, and no setting turns that off. #164 sat blocked: its own CI, Fuzz Canary and Dependency Advisories runs waited for approval. The CI run this workflow dispatched passed on the same commit, but GitHub does not tie a workflow_dispatch run's checks to a pull request, so the dev ruleset never saw its `CI result`. Push the branch and open the pull request with DEPENDENCY_BUMP_TOKEN, a fine-grained personal access token, when that secret is set, so CI starts on its own and the ruleset sees it. Without the secret, GITHUB_TOKEN carries on as before. The dispatch helped in neither case, and goes, with the actions permission it needed. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR was automatically generated by a GitHub Action to update crate and flake dependencies. Please review the changes and merge.