Skip to content

build(deps): bump guppy from 0.17.26 to 0.18.0 - #28

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/guppy-0.18.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/guppy-0.18.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps guppy from 0.17.26 to 0.18.0.

Release notes

Sourced from guppy's releases.

guppy 0.18.0

Added

  • PlatformSpec::Platforms, a new variant holding a list of platforms (#438, #630), and PlatformSpec::platforms, a constructor that accepts any iterator of Platform or Arc<Platform>. A query against Platforms is enabled if it is enabled on at least one of the platforms. Platforms([]) is the union of no platforms: nothing is enabled on it, not even unconditional dependencies.

    Per-platform results are combined with the same Kleene K3 OR that guppy already uses to combine a dependency's target specs for a single platform: Enabled wins, then Unknown, then Disabled.

Changed

  • Queries and link visitors:
    • PackageQuery and FeatureQuery are now represented as a set of initial nodes plus a direction, sharing their internal bitset representation with PackageSet and FeatureSet (#609, #610).
      • PackageQuery::initials now returns a &PackageSet, and FeatureQuery::initials a &FeatureSet, rather than iterators over metadatas. To obtain the old iterators, use initials().packages(direction) and initials().features(direction).
      • PackageQuery::starts_from and FeatureQuery::starts_from are removed. Use initials().contains(id) instead, which returns the same Result<bool, Error>.
      • The Debug output of both query types now goes through the set types' Debug impls. PackageQuery's Debug no longer dumps the entire package graph, and FeatureQuery's now prints its initial packages with their features.
    • The package and feature "resolver" traits are renamed and now receive an opaque context (#497, #601, #602, #604):
      • PackageResolver is now PackageLinkVisitor, and FeatureResolver is now FeatureLinkVisitor. The "resolver" name was easily confused with the Cargo feature resolver, and the trait visits links rather than packages or features.
      • accept is now visit_link on both traits.
      • visit_link (and the closures passed to PackageQuery::resolve_with_fn and FeatureQuery::resolve_with_fn) takes a &PackageLinkContext or &FeatureLinkContext instead of a &PackageQuery or &FeatureQuery. The query is available via query(); the context also provides direction() and starts_from_initial(&link).
      • CargoSet::with_package_resolver is now CargoSet::with_cargo_link_visitor and takes a new CargoLinkVisitor trait (in guppy::graph::cargo). Its CargoLinkContext exposes which pass the link is being evaluated for (build_platform()), the platform specs in effect (platform_spec() and build_dep_platform_spec()), and whether dev and build dependencies are under consideration for the link

... (truncated)

Commits
  • c50ac63 [guppy] version 0.18.0
  • ed06a9e [guppy-summaries] version 0.8.0
  • f8402d7 [target-spec] version 3.7.0
  • 1ddf7e2 [meta] continue to prepare releases
  • 6532561 [meta] clean up changelogs
  • 5f03f9f [meta] update dependencies across the workspace (#632)
  • 2dca8e2 [hakari] stabilize hashing format for generated dependency names (#631)
  • 7eb65c9 [guppy] change PlatformSpec::Platform to Platforms (#630)
  • ae847ca [target-spec] hand-write PlatformSummary's deserializer (#629)
  • 9d2b6f5 [guppy] report which platform failed when rebuilding a summary (#628)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [guppy](https://github.com/guppy-rs/guppy) from 0.17.26 to 0.18.0.
- [Release notes](https://github.com/guppy-rs/guppy/releases)
- [Changelog](https://github.com/guppy-rs/guppy/blob/main/release.toml)
- [Commits](guppy-rs/guppy@guppy-0.17.26...guppy-0.18.0)

---
updated-dependencies:
- dependency-name: guppy
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants