Skip to content

build(deps): bump rustix from 1.1.5 to 1.1.6 - #207

Merged
flyingrobots merged 1 commit into
mainfrom
dependabot/cargo/rustix-1.1.6
Nov 3, 2026
Merged

flyingrobots merged 1 commit into
mainfrom
dependabot/cargo/rustix-1.1.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps rustix from 1.1.5 to 1.1.6.

Commits
  • 4a563ad chore: Release rustix version 1.1.6
  • 8e6aaa6 Merge commit from fork
  • 4686873 fix: expose additional termios output mode flags (#1709)
  • c9ad9d3 fix(net): don't trust cmsg_len past the end of a truncated control buffer (...
  • 98358af Avoid constructing a zero Pid in tcgetpgrp on non-Linux targets (#1710)
  • 664aeae fix(net): use IPPROTO_IPV6 for IPV6_MULTICAST_HOPS (#1692)
  • bf78ee6 freebsd: Fix cfg gates for FreeBSD 12 (#1707)
  • b3d81bd Fix fallocate on Apple platforms. (#1708)
  • 915ab6f fix(fs): Set proper inotify WatchFlags values on libc backend (#1714)
  • 52d5db7 Use 32-bit UID/GID syscalls on arm, sparc, and x86 (#1716)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rustix](https://github.com/bytecodealliance/rustix) from 1.1.5 to 1.1.6.
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGES.md)
- [Commits](bytecodealliance/rustix@v1.1.5...v1.1.6)

---
updated-dependencies:
- dependency-name: rustix
  dependency-version: 1.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency and supply-chain maintenance label Nov 1, 2026
@dependabot
dependabot Bot requested a review from flyingrobots as a code owner November 1, 2026 04:25
@coderabbitai

coderabbitai Bot commented Nov 1, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 1b9bb135-2e16-4794-962d-0c04699eaf0e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

flyingrobots added a commit that referenced this pull request Nov 3, 2026
Baker Street found the pins and digests exact but the written reasoning wrong:
statx is an operation Keep invokes, the runtime libc requirement did not move,
and the Rustix license and Rust floor were stale. The re2js acceptance leaned on
"repository-authored" Markdown, which CI's pull_request trigger contradicts.

Rest that acceptance on the opt-in LOOKBEHINDS flag markdownlint never sets,
state the advisory's high severity, and record the braces advisory's withdrawal.
No code, pin or digest changes.
flyingrobots added a commit that referenced this pull request Nov 3, 2026
…207, #188)

Rustix 1.1.6 replaces the derivation of StatVfsMountFlags::RDONLY with a literal,
and Keep's refusal laws use the same symbol as the predicate, so no law would
notice a change to the value admission depends on.

Also disclose the high-severity Rustix advisory this update fixes, record what
was reviewed and run and on which targets, mark corrections to earlier text, and
give the re2js acceptance its own section with the removed advisories' ratings.
@flyingrobots
flyingrobots merged commit be0faa7 into main Nov 3, 2026
4 of 5 checks passed
flyingrobots added a commit that referenced this pull request Nov 3, 2026
Integrate backlog step 1: dependency bumps (#206, #207, #189, #188)
@flyingrobots
flyingrobots deleted the dependabot/cargo/rustix-1.1.6 branch November 3, 2026 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency and supply-chain maintenance

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant