Skip to content

build(deps): bump bytemuck from 1.12.1 to 1.12.2#630

Merged
bors[bot] merged 1 commit into
masterfrom
dependabot/cargo/bytemuck-1.12.2
Nov 1, 2022
Merged

build(deps): bump bytemuck from 1.12.1 to 1.12.2#630
bors[bot] merged 1 commit into
masterfrom
dependabot/cargo/bytemuck-1.12.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2022

Copy link
Copy Markdown
Contributor

Bumps bytemuck from 1.12.1 to 1.12.2.

Changelog

Sourced from bytemuck's changelog.

1.12.2

  • Fixes try_pod_read_unaligned bug that made it always fail unless the target type was exactly pointer sized in which case UB could happen. The CheckedBitPattern::is_valid_bit_pattern was being asked to check that a reference to the pod value was a valid bit pattern, rather than the actual bit pattern itself, and so the check could in some cases be illegally bypassed.
Commits
  • 7b67524 (cargo-release) version 1.12.2
  • 579950f changelog
  • 12f5bfd clippy you are often a pain in my butt
  • f157151 fix try_pod_read_unaligned... never having worked correctly (#138)
  • 09dd2ff Add cast_{arc,rc} (and slice and try), and {wrap,peel}_{arc,rc}. (#132)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [bytemuck](https://github.com/Lokathor/bytemuck) from 1.12.1 to 1.12.2.
- [Release notes](https://github.com/Lokathor/bytemuck/releases)
- [Changelog](https://github.com/Lokathor/bytemuck/blob/main/changelog.md)
- [Commits](Lokathor/bytemuck@v1.12.1...v1.12.2)

---
updated-dependencies:
- dependency-name: bytemuck
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 31, 2022
@jordens

jordens commented Oct 31, 2022

Copy link
Copy Markdown
Member

Bors r+

bors Bot added a commit that referenced this pull request Oct 31, 2022
630: build(deps): bump bytemuck from 1.12.1 to 1.12.2 r=jordens a=dependabot[bot]

Bumps [bytemuck](https://github.com/Lokathor/bytemuck) from 1.12.1 to 1.12.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Lokathor/bytemuck/blob/main/changelog.md">bytemuck's changelog</a>.</em></p>
<blockquote>
<h2>1.12.2</h2>
<ul>
<li>Fixes <code>try_pod_read_unaligned</code> bug that made it always fail unless the target
type was exactly pointer sized in which case UB <em>could</em> happen. The
<code>CheckedBitPattern::is_valid_bit_pattern</code> was being asked to check that a
<em>reference</em> to the <code>pod</code> value was a valid bit pattern, rather than the actual
bit pattern itself, and so the check could in some cases be illegally
bypassed.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/Lokathor/bytemuck/commit/7b67524a43aeee8c8e07ad8f4486cfe81e51591c"><code>7b67524</code></a> (cargo-release) version 1.12.2</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/579950fdb52586884237c3b8c9b5584f1f3d0b1d"><code>579950f</code></a> changelog</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/12f5bfd62ecfa8b0d4b8f22080cff0685fbdfb64"><code>12f5bfd</code></a> clippy you are often a pain in my butt</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/f1571512d2f1e730f360ca7f6a2cbc9ab3c3ebef"><code>f157151</code></a> fix <code>try_pod_read_unaligned</code>... never having worked correctly (<a href="https://github-redirect.dependabot.com/Lokathor/bytemuck/issues/138">#138</a>)</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/09dd2ffd682182294a09d5874b0e255d699d833f"><code>09dd2ff</code></a> Add <code>cast_{arc,rc}</code> (and slice and try), and <code>{wrap,peel}_{arc,rc}</code>. (<a href="https://github-redirect.dependabot.com/Lokathor/bytemuck/issues/132">#132</a>)</li>
<li>See full diff in <a href="https://github.com/Lokathor/bytemuck/compare/v1.12.1...v1.12.2">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bytemuck&package-manager=cargo&previous-version=1.12.1&new-version=1.12.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@bors

bors Bot commented Oct 31, 2022

Copy link
Copy Markdown
Contributor

Build failed:

@jordens

jordens commented Oct 31, 2022

Copy link
Copy Markdown
Member

bors retry

bors Bot added a commit that referenced this pull request Oct 31, 2022
630: build(deps): bump bytemuck from 1.12.1 to 1.12.2 r=jordens a=dependabot[bot]

Bumps [bytemuck](https://github.com/Lokathor/bytemuck) from 1.12.1 to 1.12.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Lokathor/bytemuck/blob/main/changelog.md">bytemuck's changelog</a>.</em></p>
<blockquote>
<h2>1.12.2</h2>
<ul>
<li>Fixes <code>try_pod_read_unaligned</code> bug that made it always fail unless the target
type was exactly pointer sized in which case UB <em>could</em> happen. The
<code>CheckedBitPattern::is_valid_bit_pattern</code> was being asked to check that a
<em>reference</em> to the <code>pod</code> value was a valid bit pattern, rather than the actual
bit pattern itself, and so the check could in some cases be illegally
bypassed.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/Lokathor/bytemuck/commit/7b67524a43aeee8c8e07ad8f4486cfe81e51591c"><code>7b67524</code></a> (cargo-release) version 1.12.2</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/579950fdb52586884237c3b8c9b5584f1f3d0b1d"><code>579950f</code></a> changelog</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/12f5bfd62ecfa8b0d4b8f22080cff0685fbdfb64"><code>12f5bfd</code></a> clippy you are often a pain in my butt</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/f1571512d2f1e730f360ca7f6a2cbc9ab3c3ebef"><code>f157151</code></a> fix <code>try_pod_read_unaligned</code>... never having worked correctly (<a href="https://github-redirect.dependabot.com/Lokathor/bytemuck/issues/138">#138</a>)</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/09dd2ffd682182294a09d5874b0e255d699d833f"><code>09dd2ff</code></a> Add <code>cast_{arc,rc}</code> (and slice and try), and <code>{wrap,peel}_{arc,rc}</code>. (<a href="https://github-redirect.dependabot.com/Lokathor/bytemuck/issues/132">#132</a>)</li>
<li>See full diff in <a href="https://github.com/Lokathor/bytemuck/compare/v1.12.1...v1.12.2">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bytemuck&package-manager=cargo&previous-version=1.12.1&new-version=1.12.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@bors

bors Bot commented Oct 31, 2022

Copy link
Copy Markdown
Contributor

Build failed:

@jordens

jordens commented Oct 31, 2022

Copy link
Copy Markdown
Member

bors retry

bors Bot added a commit that referenced this pull request Oct 31, 2022
630: build(deps): bump bytemuck from 1.12.1 to 1.12.2 r=jordens a=dependabot[bot]

Bumps [bytemuck](https://github.com/Lokathor/bytemuck) from 1.12.1 to 1.12.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Lokathor/bytemuck/blob/main/changelog.md">bytemuck's changelog</a>.</em></p>
<blockquote>
<h2>1.12.2</h2>
<ul>
<li>Fixes <code>try_pod_read_unaligned</code> bug that made it always fail unless the target
type was exactly pointer sized in which case UB <em>could</em> happen. The
<code>CheckedBitPattern::is_valid_bit_pattern</code> was being asked to check that a
<em>reference</em> to the <code>pod</code> value was a valid bit pattern, rather than the actual
bit pattern itself, and so the check could in some cases be illegally
bypassed.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/Lokathor/bytemuck/commit/7b67524a43aeee8c8e07ad8f4486cfe81e51591c"><code>7b67524</code></a> (cargo-release) version 1.12.2</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/579950fdb52586884237c3b8c9b5584f1f3d0b1d"><code>579950f</code></a> changelog</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/12f5bfd62ecfa8b0d4b8f22080cff0685fbdfb64"><code>12f5bfd</code></a> clippy you are often a pain in my butt</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/f1571512d2f1e730f360ca7f6a2cbc9ab3c3ebef"><code>f157151</code></a> fix <code>try_pod_read_unaligned</code>... never having worked correctly (<a href="https://github-redirect.dependabot.com/Lokathor/bytemuck/issues/138">#138</a>)</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/09dd2ffd682182294a09d5874b0e255d699d833f"><code>09dd2ff</code></a> Add <code>cast_{arc,rc}</code> (and slice and try), and <code>{wrap,peel}_{arc,rc}</code>. (<a href="https://github-redirect.dependabot.com/Lokathor/bytemuck/issues/132">#132</a>)</li>
<li>See full diff in <a href="https://github.com/Lokathor/bytemuck/compare/v1.12.1...v1.12.2">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bytemuck&package-manager=cargo&previous-version=1.12.1&new-version=1.12.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@jordens

jordens commented Oct 31, 2022

Copy link
Copy Markdown
Member

bors cancel
bors retry

@bors

bors Bot commented Oct 31, 2022

Copy link
Copy Markdown
Contributor

Canceled.

bors Bot added a commit that referenced this pull request Oct 31, 2022
630: build(deps): bump bytemuck from 1.12.1 to 1.12.2 r=jordens a=dependabot[bot]

Bumps [bytemuck](https://github.com/Lokathor/bytemuck) from 1.12.1 to 1.12.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Lokathor/bytemuck/blob/main/changelog.md">bytemuck's changelog</a>.</em></p>
<blockquote>
<h2>1.12.2</h2>
<ul>
<li>Fixes <code>try_pod_read_unaligned</code> bug that made it always fail unless the target
type was exactly pointer sized in which case UB <em>could</em> happen. The
<code>CheckedBitPattern::is_valid_bit_pattern</code> was being asked to check that a
<em>reference</em> to the <code>pod</code> value was a valid bit pattern, rather than the actual
bit pattern itself, and so the check could in some cases be illegally
bypassed.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/Lokathor/bytemuck/commit/7b67524a43aeee8c8e07ad8f4486cfe81e51591c"><code>7b67524</code></a> (cargo-release) version 1.12.2</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/579950fdb52586884237c3b8c9b5584f1f3d0b1d"><code>579950f</code></a> changelog</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/12f5bfd62ecfa8b0d4b8f22080cff0685fbdfb64"><code>12f5bfd</code></a> clippy you are often a pain in my butt</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/f1571512d2f1e730f360ca7f6a2cbc9ab3c3ebef"><code>f157151</code></a> fix <code>try_pod_read_unaligned</code>... never having worked correctly (<a href="https://github-redirect.dependabot.com/Lokathor/bytemuck/issues/138">#138</a>)</li>
<li><a href="https://github.com/Lokathor/bytemuck/commit/09dd2ffd682182294a09d5874b0e255d699d833f"><code>09dd2ff</code></a> Add <code>cast_{arc,rc}</code> (and slice and try), and <code>{wrap,peel}_{arc,rc}</code>. (<a href="https://github-redirect.dependabot.com/Lokathor/bytemuck/issues/132">#132</a>)</li>
<li>See full diff in <a href="https://github.com/Lokathor/bytemuck/compare/v1.12.1...v1.12.2">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bytemuck&package-manager=cargo&previous-version=1.12.1&new-version=1.12.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@bors

bors Bot commented Oct 31, 2022

Copy link
Copy Markdown
Contributor

Build failed:

@jordens

jordens commented Oct 31, 2022

Copy link
Copy Markdown
Member

bors retry

@jordens

jordens commented Oct 31, 2022

Copy link
Copy Markdown
Member

bors cancel
bors retry

@jordens

jordens commented Oct 31, 2022

Copy link
Copy Markdown
Member

Bors retry

@jordens

jordens commented Nov 1, 2022

Copy link
Copy Markdown
Member

bors r+

@bors

bors Bot commented Nov 1, 2022

Copy link
Copy Markdown
Contributor

Build succeeded:

@bors
bors Bot merged commit eda3a33 into master Nov 1, 2022
@bors
bors Bot deleted the dependabot/cargo/bytemuck-1.12.2 branch November 1, 2022 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant