Skip to content

chore(deps): bump shapefile from 0.8.0 to 0.9.0 - #10

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/shapefile-0.9.0
Open

chore(deps): bump shapefile from 0.8.0 to 0.9.0#10
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/shapefile-0.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026

Copy link
Copy Markdown
Contributor

Bumps shapefile from 0.8.0 to 0.9.0.

Changelog

Sourced from shapefile's changelog.

0.9.0

  • Hardened the reader against malformed or malicious files: 'Safe' allocation method try_reserve is used to avoid panics if the file makes the crate do a big allocation, the new Error::AllocationLimitExceeded variant, is returned when it happens
  • Fixed integer-overflow panics (in builds with overflow checks) when reading, rejected with Error::InvalidShapeRecordSize.
  • Bumped dbase to 0.8.0, which also hardens against panics on bad input.
  • Bumped byteorder to 1.5.
Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github

dependabot Bot commented on behalf of github Jul 10, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@Wolren

Wolren commented Jul 19, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with master! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shapefile-0.9.0 branch 7 times, most recently from 7155e95 to e8a6234 Compare August 7, 2026 12:13
Bumps [shapefile](https://github.com/tmontaigu/shapefile-rs) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/tmontaigu/shapefile-rs/releases)
- [Changelog](https://github.com/tmontaigu/shapefile-rs/blob/master/CHANGELOG.md)
- [Commits](tmontaigu/shapefile-rs@0.8.0...0.9.0)

---
updated-dependencies:
- dependency-name: shapefile
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/shapefile-0.9.0 branch from e8a6234 to e39d0d8 Compare August 8, 2026 10:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant