Skip to content

chore(deps): bump mlua from 0.10.5 to 0.12.1 - #1012

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/mlua-0.12.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/mlua-0.12.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps mlua from 0.10.5 to 0.12.1.

Release notes

Sourced from mlua's releases.

v0.12.1

What's Changed

  • Lua 5.5 updated to 5.5.1
  • Luau updated to 0.736
  • Allow #[mlua::userdata_impl] to be used in a different module from #[derive(UserData)] (#726)
  • Fix coroutine stack handling after yielding from hooks (#723)

Full Changelog: mlua-rs/mlua@v0.12.0...v0.12.1

v0.12.0

Highlights

More ergonomic UserData building blocks

  • Declaratively implement UserData with #[derive(UserData)] and register methods/fields with the new #[mlua::userdata_impl] attribute macro.
  • UserDataOwned<T> wrapper takes ownership of userdata and implements FromLua
  • UserDataMethods::add_method_once/add_async_method_once
  • __todebugstring metamethod for pretty-printing userdata when debugging
  • MaybeSync trait for userdata under the send feature

Reorganized public API

Types are now grouped into focused modules: chunk, debug, error, function, table, string, state, thread, userdata and luau.

Thread lifecycle callbacks

Hook into coroutine create/resume/yield events across all Lua versions (when using mlua API).

Luau improvements

Latest Luau with extended require-by-string support and JIT options.

Garbage-collector interface refactor

Lua::gc_inc / Lua::gc_gen are replaced by a Lua::gc_set_mode, with GcIncParams/GcGenParams for fine-grained tuning.

What's Changed (since v0.12.0-rc.2)

  • Crate root re-exports are refactored (only essentials are re-exported, the rest is in the new submodules)
  • Added ThreadStatus::Normal and Thread::is_normal (mimic coroutine.status)
  • Added Lua::set_jit_options with support of Luau JIT inliner (Luau)
  • Added Value::as_vector/Value::is_vector (Luau)
  • Added Table::remove
  • serde: tables with the array metatable are always encoded as arrays (incl. detect_mixed_tables option)
  • impl Hash for BorrowedStr/BorrowedBytes
  • Lua::current_thread resolves implicit async threads to their root owner (#706)
  • Bugfixes and improvements

Full Changelog: mlua-rs/mlua@v0.11.6...v0.12.0

... (truncated)

Changelog

Sourced from mlua's changelog.

v0.12.1 (Aug 29, 2026)

  • Lua 5.5 updated to 5.5.1
  • Luau updated to 0.736
  • Allow #[mlua::userdata_impl] to be used in a different module from #[derive(UserData)] (#726)
  • Fix coroutine stack handling after yielding from hooks (#723)

v0.12.0 (Jul 05, 2026)

Changes since v0.12.0-rc.2

  • Create root re-exports are refactored (only essentials are re-exported, the rest is in the new submodules)
  • Added ThreadStatus::Normal and Thread::is_normal (mimic coroutine.status)
  • Added Lua::set_jit_options with support of Luau JIT inliner (Luau)
  • Added Value::as_vector/Value::is_vector (Luau)
  • Added Table::remove
  • serde: tables with the array metatable are always encoded as arrays (incl. detect_mixed_tables option)
  • impl Hash for BorrowedStr/BorrowedBytes
  • Lua::current_thread resolves implicit async threads to their root owner (#706)
  • Bugfixes and improvements

v0.12.0-rc.2 (Jun 06, 2026)

  • Add #[derive(UserData)] and #[mlua::userdata_impl] macros
  • Support thread create/resume/yield callbacks for all Lua versions (including Luau)
  • Support to_alias_override/to_alias_fallback in Require trait (Luau)
  • Prevent XRc overflow when dropping RawLua with foreign Lua state
  • implement Not for StdLib (#699)
  • Fix String::to_pointer return NULL in Lua <5.4

v0.12.0-rc.1 (Apr 21, 2026)

  • Rust 2024 edition
  • Removed Error::ToLuaConversionError variant as it was unused (and not practically useful)
  • New modules to group data types: chunk, debug, error, function, table, string, state, thread, userdata, luau
  • Support __todebugstring metamethod for pretty formatting userdata value (for debugging)
  • New MaybeSync trait that is required for userdata types
  • Removed lifetime from BorrowedStr and BorrowedBytes
  • New Thread methods: is_resumable, is_running, is_finished, is_error
  • Added Thread::state to get raw Lua state pointer
  • Luau TextRequirer is renamed to FsRequirer
  • GC interface refactor: Lua::gc_inc/Lua::gc_gen is replaced with gc_set_mode
  • Added GcIncParams and GcGenParams for GC tuning
  • New UserDataMethods::add_method_once and UserDataMethods::add_async_method_once
  • Initial Luau integer64 type support
  • Changed interface of Function::wrap/wrap_mut/wrap_async to support any Error type
  • Changed AnyUserData::type_name to return LuaString instead
  • Added UserDataOwned<T> wrapper to take ownership of userdata T and implements FromLua

v0.11.6 (Jan 27, 2026)

... (truncated)

Commits
  • 4fd87af v0.12.1
  • 983c384 mlua-sys: v0.12.0
  • 0224864 mlua_derive: v0.12.1
  • aca3bb3 Update CHANGELOG
  • 8ceeceb Create C closures under lua_cpcall so an allocation failure doesn't escape ...
  • 4bca98f clippy
  • 87dc0c1 mlua_derive: Make userdata_impl independent from module where UserData is d...
  • 7539003 mlua-sys: Bump luau-src to v0.21 (Luau 0.736)
  • e9b9844 mlua-sys: bump luau-src to 551+
  • 66b9f08 Fix coroutine stack handling after hook yields
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Aug 12, 2026 •

Copy link
Copy Markdown
Contributor

This PR changes mirrored Maestro source files in the public repo, but it does not link the matching private source-of-truth PR.

Link the matching evalops/mono source PR (legacy maestro-internal links remain accepted), then re-run the check:

  • https://github.com/evalops/mono/pull/<number>
  • evalops/mono#<number>
  • maestro-internal#<number>

Mirrored files touched:

  • Cargo.lock
  • packages/tui-rs/Cargo.toml

@socket-security

socket-security Bot commented Aug 12, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcargo/​mlua@​0.10.5 ⏵ 0.12.196 +110093100100

View full report

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 903236cdfd

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

# Uses vendored Lua to avoid system dependency
# "send" feature makes Lua thread-safe (uses Arc instead of Rc)
mlua = { version = "0.10", features = ["lua54", "serialize", "vendored", "send"], optional = true }
mlua = { version = "0.12", features = ["lua54", "serialize", "vendored", "send"], optional = true }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Move the dependency bump to the internal mirror source

This repository's root instructions say public-facing source changes must originate in evalops/maestro-internal and arrive through the protected mirror workflow, not be edited directly in this public tree. Bumping mlua here (and regenerating Cargo.lock) changes mirrored source in this repo and bypasses that workflow, so please make the dependency update in the internal source and let the mirror sync it.

Useful? React with 👍 / 👎.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch 2 times, most recently from 140870e to 3d7694f Compare August 16, 2026 04:48
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from 3d7694f to c3ee878 Compare August 16, 2026 06:38
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from c3ee878 to 8cbc290 Compare August 17, 2026 18:16
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from 8cbc290 to 2916362 Compare August 19, 2026 00:00
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from 2916362 to b308a0a Compare August 19, 2026 07:25
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from b308a0a to a4ae3f1 Compare August 20, 2026 14:44
@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from a4ae3f1 to b1f15d7 Compare September 1, 2026 20:48
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from b1f15d7 to b98d2b9 Compare September 2, 2026 00:37
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from b98d2b9 to b47b1f4 Compare September 5, 2026 18:54
@dependabot dependabot Bot changed the title chore(deps): bump mlua from 0.10.5 to 0.12.0 chore(deps): bump mlua from 0.10.5 to 0.12.1 Sep 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from b47b1f4 to 9af46a1 Compare September 6, 2026 02:50
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from 9af46a1 to 2cd8ca7 Compare September 6, 2026 06:52
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from 2cd8ca7 to 1be43d8 Compare September 6, 2026 09:05
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from 1be43d8 to e8ceaf7 Compare September 7, 2026 09:30
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from e8ceaf7 to 6cc9731 Compare September 7, 2026 21:25
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

Bumps [mlua](https://github.com/mlua-rs/mlua) from 0.10.5 to 0.12.1.
- [Release notes](https://github.com/mlua-rs/mlua/releases)
- [Changelog](https://github.com/mlua-rs/mlua/blob/main/CHANGELOG.md)
- [Commits](mlua-rs/mlua@v0.10.5...v0.12.1)

---
updated-dependencies:
- dependency-name: mlua
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/mlua-0.12.0 branch from 6cc9731 to ed342fc Compare September 8, 2026 00:27
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@haasonsaas

Copy link
Copy Markdown
Contributor

Superseded by dx-corp/mono#9724 — this bump now lives in the mono source of truth and reaches code via the public mirror sync, which this mirror PR can never satisfy (provenance policy). Closing.

@haasonsaas haasonsaas closed this Sep 19, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 19, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/cargo/mlua-0.12.0 branch September 19, 2026 04:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant