Skip to content

chore(deps): bump thiserror from 2.0.18 to 2.0.19 - #278

Merged
arnavk23 merged 1 commit into
mainfrom
dependabot/cargo/thiserror-2.0.19
Jul 22, 2026
Merged

chore(deps): bump thiserror from 2.0.18 to 2.0.19#278
arnavk23 merged 1 commit into
mainfrom
dependabot/cargo/thiserror-2.0.19

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps thiserror from 2.0.18 to 2.0.19.

Release notes

Sourced from thiserror's releases.

2.0.19

  • Update to syn 3
Commits
  • e13a785 Release 2.0.19
  • 0a0e76c Update to syn 3
  • ec42ea7 Update actions/upload-artifact@v6 -> v7
  • 4178c4a Update actions/checkout@v6 -> v7
  • 7214e0e Ignore items_after_statements pedantic clippy lint in test
  • febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
  • c50e387 chore: improve thiserror maintenance path
  • d4a2507 Raise minimum tested compiler to rust 1.85
  • 99e8a6c Unpin CI miri toolchain
  • 9ac165c Pin CI miri to nightly-2026-02-11
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 20, 2026
@entelligence-ai-pr-reviews

entelligence-ai-pr-reviews Bot commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

EntelligenceAI PR Summary

This PR performs a dependency update to thiserror 2.0.19 in the Cargo lock file.

  • Updated thiserror from 2.0.182.0.19
  • Updated thiserror-impl from 2.0.182.0.19
  • Upgraded transitive syn dependency from 2.0.1193.0.1
  • Lock file entries updated for rust_annie and the sysinfo-related crate to reflect new versions

Confidence Score: 5/5 - Safe to Merge

Safe to merge — this is a routine automated dependency bump updating thiserror and thiserror-impl from 2.0.18 to 2.0.19, with the only non-trivial change being a transitive upgrade of the syn proc-macro crate from 2.0.119 to 3.0.1. The PR touches only Cargo.lock (and possibly Cargo.toml) with no changes to application logic, business rules, or runtime behavior. No review comments were generated and heuristic analysis found zero issues at any severity level.

Key Findings:

  • The thiserror 2.0.18 → 2.0.19 bump is a patch-level update to a widely-used, well-maintained error-derivation crate with a strong track record of safe releases, presenting negligible regression risk.
  • The transitive syn upgrade from 2.0.119 to 3.0.1 is a major version bump in a proc-macro parsing library; while this is only used at compile time (not runtime), it warrants a note — however, since thiserror-impl explicitly depends on it and the crate published a compatible release, this is expected and safe.
  • Only Cargo.lock entries are affected, meaning no source code, API surfaces, or runtime dependencies changed — the application binary behavior is identical post-merge.
Files requiring special attention
  • Cargo.lock

Bumps [thiserror](https://github.com/dtolnay/thiserror) from 2.0.18 to 2.0.19.
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.18...2.0.19)

---
updated-dependencies:
- dependency-name: thiserror
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/thiserror-2.0.19 branch from bb2c30d to f8a252c Compare July 20, 2026 23:09
@arnavk23
arnavk23 merged commit b44be08 into main Jul 22, 2026
17 checks passed
@arnavk23
arnavk23 deleted the dependabot/cargo/thiserror-2.0.19 branch July 22, 2026 22:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant