Skip to content

chore(deps): bump shlex from 1.3.0 to 2.0.1 - #1010

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/shlex-2.0.1
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/shlex-2.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps shlex from 1.3.0 to 2.0.1.

Changelog

Sourced from shlex's changelog.

2.0.1

  • Fixes a compile error when building the documentation.

2.0.0

  • Breaking: Items that were marked as deprecated in 1.x have been removed: join, quote, bytes::join, and bytes::quote.
  • Breaking: The DerefMut impl for Shlex has been removed since it was unsound. New unsafe APIs have been added in its place: Shlex::from_bytes, Shlex::as_bytes_mut.
Commits

@dependabot @github

dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 12, 2026
@github-actions

github-actions Bot commented Aug 12, 2026 •

Copy link
Copy Markdown
Contributor

This PR changes mirrored Maestro source files in the public repo, but it does not link the matching private source-of-truth PR.

Link the matching evalops/mono source PR (legacy maestro-internal links remain accepted), then re-run the check:

  • https://github.com/evalops/mono/pull/<number>
  • evalops/mono#<number>
  • maestro-internal#<number>

Mirrored files touched:

  • Cargo.lock
  • packages/tui-rs/Cargo.toml

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch 2 times, most recently from 3f4d3b7 to e3a50a4 Compare August 16, 2026 04:48
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from e3a50a4 to 3349413 Compare August 16, 2026 06:38
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from 3349413 to 4397222 Compare August 17, 2026 18:19
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from 4397222 to 8a935db Compare August 19, 2026 00:00
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from 8a935db to d117fa0 Compare August 19, 2026 07:25
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from d117fa0 to 3819c50 Compare August 20, 2026 14:44
@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from 3819c50 to 1cde50e Compare September 1, 2026 20:48
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from 1cde50e to 8819ac7 Compare September 2, 2026 00:37
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from 8819ac7 to 9538c89 Compare September 5, 2026 18:54

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 9538c89a6b

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".


# Shell escaping/unescaping
shlex = "1"
shlex = "2"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Route the dependency bump through the protected mirror

This manifest change is proposed directly against the generated public mirror, but repository policy requires public-facing source changes to originate in evalops/maestro-internal and arrive through the protected mirror workflow. Apply the bump in the internal repository and sync it instead; otherwise this public-only update violates source provenance and may be overwritten by the next mirror operation.

AGENTS.md reference: AGENTS.md:L7-L9

Useful? React with 👍 / 👎.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from 9538c89 to 1e969d7 Compare September 6, 2026 02:50
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from 1e969d7 to 18bda76 Compare September 6, 2026 06:52
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from 18bda76 to 1356c05 Compare September 6, 2026 09:05
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from 1356c05 to 9e573cf Compare September 7, 2026 09:30
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from 9e573cf to bdc3f4b Compare September 7, 2026 21:25
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

Bumps [shlex](https://github.com/comex/rust-shlex) from 1.3.0 to 2.0.1.
- [Changelog](https://github.com/comex/rust-shlex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/comex/rust-shlex/commits)

---
updated-dependencies:
- dependency-name: shlex
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/shlex-2.0.1 branch from bdc3f4b to 97c60d4 Compare September 8, 2026 00:27
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@haasonsaas

Copy link
Copy Markdown
Contributor

Superseded by dx-corp/mono#9724 — this bump now lives in the mono source of truth and reaches code via the public mirror sync, which this mirror PR can never satisfy (provenance policy). Closing.

@haasonsaas haasonsaas closed this Sep 19, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 19, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/cargo/shlex-2.0.1 branch September 19, 2026 04:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant