Skip to content

build(deps): update serde-saphyr requirement from 0.0.21 to 0.0.22#1078

Merged
Stranger6667 merged 1 commit intomasterfrom
dependabot/cargo/serde-saphyr-0.0.22
Mar 21, 2026
Merged

build(deps): update serde-saphyr requirement from 0.0.21 to 0.0.22#1078
Stranger6667 merged 1 commit intomasterfrom
dependabot/cargo/serde-saphyr-0.0.22

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 19, 2026

Updates the requirements on serde-saphyr to permit the latest version.

Release notes

Sourced from serde-saphyr's releases.

0.0.22 - !include and properties

This release introduces support for !include. While not a standard YAML, multiple existing implementations show the need for this capability.

serde-saphyr now can resolve !include tags through a custom resolver configured via Options. The !include functionality is gated behind the include feature and must also be explicitly enabled by providing a resolver. For convenience, a safety-hardened filesystem-based resolver is available as an additional optional feature (include-fs).

This library also now supports properties, implemented in a Docker Compose-like style:

  database_password: ${DATABASE_PASSWORD}

Properties are implemented to prevent their values from being checked into the repository or from leaking via error snippets or other messages in logs. Tests were written to ensure that the value is never printed on error (please supply the security report if it is). Property values are provided via a custom-supplied HashMap, so up to the user how to store them safely, or maybe even generate them.

Other improvements

  • Full support for JSON-style Unicode surrogate pairs in quoted strings. serde-saphyr now correctly decodes valid UTF-16 surrogate pair escapes such as \uD834\uDD1E into a single Unicode scalar, matching the equivalent YAML \U form. We also expanded the JSON compatibility test coverage with dedicated cases for objects, arrays, URLs, Unicode escapes, numbers, booleans, and null, and the full related test suite now passes.
  • Indentation checking. Adding or removing a single space in YAML indentation may result in a document that is still syntactically correct but semantically wrong. To mitigate such issues, serde-saphyr can enforce indentation rules during deserialization via RequireIndent.
  • Support options for to_string_multiple, #87. Thanks, Eirik A @​clux)
  • Fixed merge key expansion that bypassed duplicate-key enforcement. Now, merge keys also require all keys to be unique. However, if you rely heavily on overriding key values during merge, you can set DuplicateKeyPolicy in Options to
Commits
  • c6696cd Last small README improvement
  • 09ebb6e Last small README improvement
  • 043c702 Documenting with_include_resolver
  • fa7a68b Merge remote-tracking branch 'origin/master'
  • 80ca14e Snal formatting
  • 892d52e Switching to saphyr-parser-bw crates.io version 0.0.610, setting release to 0...
  • 0eaba66 Merge remote-tracking branch 'origin/master'
  • a16aa36 Adding SOOS badge
  • 0ac01e5 Saphyr parser bw update
  • 932da62 Persistent tag directives can taint later documents
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [serde-saphyr](https://github.com/bourumir-wyngs/serde-saphyr) to permit the latest version.
- [Release notes](https://github.com/bourumir-wyngs/serde-saphyr/releases)
- [Commits](bourumir-wyngs/serde-saphyr@0.0.21...0.0.22)

---
updated-dependencies:
- dependency-name: serde-saphyr
  dependency-version: 0.0.22
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Mar 19, 2026
@codecov
Copy link
Copy Markdown

codecov bot commented Mar 19, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.49%. Comparing base (bf78920) to head (d59519e).
⚠️ Report is 2 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #1078   +/-   ##
=======================================
  Coverage   94.49%   94.49%           
=======================================
  Files          81       81           
  Lines       22610    22610           
=======================================
  Hits        21366    21366           
  Misses       1244     1244           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@codspeed-hq
Copy link
Copy Markdown

codspeed-hq bot commented Mar 19, 2026

Merging this PR will not alter performance

✅ 68 untouched benchmarks


Comparing dependabot/cargo/serde-saphyr-0.0.22 (d59519e) with master (bf78920)

Open in CodSpeed

@Stranger6667 Stranger6667 merged commit 0d1aba1 into master Mar 21, 2026
75 checks passed
@Stranger6667 Stranger6667 deleted the dependabot/cargo/serde-saphyr-0.0.22 branch March 21, 2026 10:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant