Skip to content

Bump serde_json from 1.0.145 to 1.0.149 - #16

Merged
aram356 merged 1 commit into
mainfrom
dependabot/cargo/serde_json-1.0.149
Jan 20, 2026
Merged

Bump serde_json from 1.0.145 to 1.0.149#16
aram356 merged 1 commit into
mainfrom
dependabot/cargo/serde_json-1.0.149

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJan 12, 2026

Copy link
Copy Markdown
Contributor

Bumps serde_json from 1.0.145 to 1.0.149.

Release notes

Sourced from serde_json's releases.

v1.0.149

  • Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

  • Update zmij dependency to 1.0

v1.0.147

  • Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.145 to 1.0.149.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.145...v1.0.149)
---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.149
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jan 12, 2026
@aram356
aram356 merged commit 5230866 into mainJan 20, 2026
2 checks passed
@aram356
aram356 deleted the dependabot/cargo/serde_json-1.0.149 branch January 20, 2026 20:19
aram356 added a commit that referenced this pull request Aug 19, 2026
…ects
Two P0 blockers (both live-verified):
- Spin build no longer TRUNCATES its own artifact. `refresh_declared_source`
compared lexical paths, so the default `source` (`../../target/.../x.wasm`,
a relative path with `..`) never matched the normalised artifact and
`fs::copy` copied the file onto itself -> 0 bytes. Now guarded by a
canonicalize-based same-file check (also for the conventional refresh), plus
containment (refuse a `source` resolving outside the workspace or through a
symlink) and single-component matching (#1, #5).
- Fresh Cloudflare scaffolds can build/serve/deploy. The synthesised
`wrangler.toml` now declares `[build] command = "worker-build --release"`
(main points at the worker-build-generated shim), and the adapter drops its
`[commands]` shell block so build/serve/deploy route through the registry
dispatch, which passes `--config <manifest>` (also fixes custom manifest
paths being ignored) (#2, #7).
Spin:
- `[adapters.spin.adapter].cloud = true` is the SOLE Fermyon Cloud selector;
the legacy deploy-command heuristic and its `manifest_adapter_deploy_cmd`
field are removed, and `config diff` threads the flag like `config push` (#3).
- `edgezero serve` forwards parent-shell `EDGEZERO__*` overrides to the guest
via `spin up --env` (highest precedence) so a shell override reaches the
sandboxed component (#4).
- deploy uses `spin cloud deploy` (bare `spin deploy` needs a plugin on
Spin 3+/4) (#6).
Cloudflare / Axum (via subagents):
- typed secret keys are validated for `.dev.vars` round-trip (empty/=/#/
newline/whitespace) (#16); local push refuses a `.wrangler` symlink escape
(#11); axum runtime honours `EDGEZERO_MANIFEST` when locating `.edgezero`
(#8).
Fastly:
- cloud provision now writes the per-store `__NAME` runtime mappings into
`edgezero_runtime_env` so a renamed cloud store is reachable (#10); the
dry-run preflight redacts malformed-manifest parse errors and models the
real writer's inline-toml rejection (#13).
Convergence (via subagent): reprovisioning converges managed `__NAME`
overlays across env_file + all four adapters via a new
`upsert_lines_with_header` (#9).
CLI:
- dry-run staging refuses a TMPDIR inside the project (self-recursive copy)
and no longer follows a symlinked live path into the diff output (#12);
- cloud provision preflights manifest writability before mutating the account,
so an unwritable manifest can't orphan a created resource (#15).
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filerustPull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@aram356