dep: bump a bunch of dependencies and set some as workspace-wide #607
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Using the magic of workspace-scoped dependencies we now keep some shared deps like `log` and the internal crates synced across the workspace. This is bundled with a mass-update of deps and fix of a clippy lint that was preventing dependabot from updating the crate for a few weeks now. - Bump clap from 4.5.21 to 4.5.23 - Remove `nom` as a direct dependency of `rsonpath-lib`
seems that dependency-review hits more endpoints for egress now, switching the policy to audit to see what's changed and update the policy later
whitelisted the two additional APIs used by dependency-review
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Short description
Using the magic of workspace-scoped dependencies we now keep some shared deps like
logand the internal crates synced across the workspace. This is bundled with a mass-update of deps and fix of a clippy lint that was preventing dependabot from updating the crate for a few weeks now.nomas a direct dependency ofrsonpath-libChecklist
All of these should be ticked off before you submit the PR.
just verifylocally and it succeeded.