Merge eligible Dependabot updates and repair failing Cargo updates - #168

1 suppressed

Restore lockfile conflicts using package records

scripts/dependency-repair.sh:543

Suppressed: cites a line the named construct does not sit on.

Severity error, confidence 0.99.

The prepare stage records only the conflicted lockfile path, but this loop reads each record as a package name and version. For a recorded Cargo.lock, version is empty, so the validation at the next lines skips every restoration and the candidate retains the main branch's lockfile instead of the planned dependency updates. Record package/version pairs when preparing the conflict, or iterate the plan's updates directly and verify that every planned update is restored.