Skip to content

chore(deps): bump rusqlite from 0.31.0 to 0.40.1#18

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rusqlite-0.40.1
Closed

chore(deps): bump rusqlite from 0.31.0 to 0.40.1#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rusqlite-0.40.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps rusqlite from 0.31.0 to 0.40.1.

Release notes

Sourced from rusqlite's releases.

0.40.1

What's Changed

  • Fix clippy warnings #1852
  • Bump bundled SQLite version to 3.53.2 #1853
  • Bump hashlink version #1855
  • Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

0.40.0

What's Changed

  • Breaking changes: Replace VTab macros by constructors #1823
  • Breaking changes: Fix VTab::best_index #1824
  • Asserts on VTab::connect aux and args #1825
  • Breaking changes: Fix VTab::connect / create #1826
  • Breaking changes: Allow opting out of using sqlite-wasm-rs on wasm32-unknown-unknown #1828, #1829
  • Derive Default for SeriesTabCursor/ArrayTabCursor #1830
  • Update link to pre-update hook #1831
  • Breaking changes: Fix VTab::connect #1832
  • impl From for FromSqlError #1833
  • Breaking changes: Fix vtab::dequote #1835
  • Bump bundled SQLCipher to version 4.14.0 #1837
  • sqlite3_set_errmsg #1752
  • Bump sqlite3-parser version #1838
  • Fix UB in ToSqlOutput::from_rc #1839
  • Ensure miri doesn't complain #1840
  • Bump to actions/checkout@v6 #1842
  • Add support to UtcDateTime #1843, #1844
  • Bump bundled SQLite version to 3.53.1 #1848
  • Replace some cfg(not by cfg_select #1850

Full Changelog: rusqlite/rusqlite@v0.39.0...v0.40.0

0.39.0

What's Changed

  • Fix constraints on VTab Aux data #1778, #1771
  • Fix docs.rs generation #1779
  • Fix a small typo in rollback_hook docstring #1780
  • Fix some warnings from Intellij #1781
  • Minimal doc for features #1783
  • Clear hooks only for owning connections #1785, #1784
  • Fix link to SQLite C Interface, Prepare Flags #1787
  • Comment functions which are not usable from a loadable extension #1789
  • Factorize code #1792
  • Update getrandom to 0.4 #1798
  • Update Cargo.toml #1800
  • Fix appveyor #1807
  • Add support to unix timestamp for chrono, jiff and time #1808, #1803
  • fix(trace): check that the sql string pointer is not NULL #1805
  • Bump bundled SQLite version to 3.51.3 #1818

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 19, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs		 opentimstdf-docs 6b770cd Jul 21 2026, 12:41 AM

@dependabot
chore(deps): bump rusqlite from 0.31.0 to 0.40.1
6b770cd 
Bumps [rusqlite](https://github.com/rusqlite/rusqlite) from 0.31.0 to 0.40.1.
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.31.0...v0.40.1)

---
updated-dependencies:
- dependency-name: rusqlite
  dependency-version: 0.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rusqlite-0.40.1 branch from b303060 to 6b770cd Compare July 20, 2026 23:45
@Nathan-D-R

Nathan-D-R commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

Merged manually in 7ae1f71 (branch + --no-ff merge at 3b335d4 — commit-workflow, not a PR merge, per how we're closing out this repo's Dependabot backlog).

Bumped rusqlite to 0.40.1 as proposed (Cargo.lock diff matches this PR's exactly). This spans nine minor releases (0.32-0.40), so I went through each release's breaking-change notes before merging:

  • 0.32.0: SQLITE_OPEN_EXRESCODE on by default (extended result codes) — we never match on the inner SQLite error code, only wrap rusqlite::Error with #[from], so unaffected.
  • 0.35.0: prepare()/execute() now reject multi-statement SQL — all our queries are single-statement, unaffected.
  • 0.38.0: u64/usize ToSql/FromSql impls disabled by default — we only ever bind/read u32 (frame_id, target_id, precursor_id) and cast through i64 in codec::frame_from_row, never u64/usize directly, so unaffected. Statement cache made optional, but we never use prepare_cached.
  • 0.40.0: VTab macro breakage — we don't use virtual tables.

No source changes were needed. Verified before merging: cargo build/clippy (workspace, all-targets, -D warnings matching CI's RUSTFLAGS)/test/fmt --check all pass, including the roundtrip tests that exercise Reader against real PRIDE-sourced bundles through the Mutex path. cargo audit clean too.

@Nathan-D-R Nathan-D-R closed this Jul 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/cargo/rusqlite-0.40.1 branch July 21, 2026 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Nathan-D-R