Skip to content

chore(deps): bump the rust-dependencies group with 8 updates - #2758

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-d100c2ce75
Closed

chore(deps): bump the rust-dependencies group with 8 updates#2758
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-d100c2ce75

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the rust-dependencies group with 8 updates:

Package From To
tokio 1.53.2 1.53.3
sha2 0.11.0 0.11.1
oxc_parser 0.117.0 0.154.0
oxc_ast 0.117.0 0.154.0
oxc_allocator 0.117.0 0.154.0
oxc_span 0.117.0 0.154.0
oxc_syntax 0.117.0 0.154.0
syn 3.0.8 3.0.9

Updates tokio from 1.53.2 to 1.53.3

Release notes

Sourced from tokio's releases.

Tokio v1.53.3

1.53.3 (October 13th, 2026)

Added

  • io: add AsyncFd::register and AsyncFd::register_with_interest (#8587)

Changed

  • io: deprecate AsyncFd::{new, with_interest, try_new, try_with_interest} (#8587)

Fixed

  • io: wake and drop DuplexStream wakers outside the lock (#8618)
  • macros: avoid unreachable_code in join! and try_join! for Infallible (#8518)
  • runtime: fix paused time auto-advancing when I/O wakes a task on current_thread (#8595)
  • sync: wake waiters outside the lock when closing a semaphore (#8529)
  • test: fix several flaky tests (#8196, #8427, #8609)

Fixed (unstable)

  • rt: keep io_uring op alive when submission fails after push (#8185)

#8185: tokio-rs/tokio#8185 #8196: tokio-rs/tokio#8196 #8427: tokio-rs/tokio#8427 #8518: tokio-rs/tokio#8518 #8529: tokio-rs/tokio#8529 #8587: tokio-rs/tokio#8587 #8595: tokio-rs/tokio#8595 #8609: tokio-rs/tokio#8609 #8618: tokio-rs/tokio#8618

Commits
  • a85c3f5 chore: prepare Tokio v1.53.3 (#8639)
  • df4443e Merge 'tokio-1.51.6' into 'tokio-1.53.x' (#8638)
  • f00b2e6 chore: prepare Tokio v1.51.6 (#8637)
  • 482eadd runtime: record time wake when unparking tasks on current thread (#8595)
  • 55fbab7 io: wake and drop DuplexStream wakers outside the lock (#8618)
  • c5e4d9e runtime: keep io_uring op alive when submission fails after push (#8185)
  • 0448618 sync: make tracing_sync tests synchronous (#8427)
  • 2bc1146 net: accept ConnectionReset in shutdown_after_tcp_reset test (#8196)
  • bb28a94 Merge 'tokio-1.51.x' into 'tokio-1.53.x' (#8624)
  • 6b97913 macros: avoid unreachable_code in join! and try_join! for Infallible ...
  • Additional commits viewable in compare view

Updates sha2 from 0.11.0 to 0.11.1

Commits

Updates oxc_parser from 0.117.0 to 0.154.0

Release notes

Sourced from oxc_parser's releases.

oxc crates_v0.154.0

💥 BREAKING CHANGES

  • 7730e14 ast: [BREAKING] Refactor comment attachment storage (#27512) (camc314)
  • c904b61 ast: [BREAKING] Add comment attachment storage (#27393) (camc314)
  • b5e8eff parser: [BREAKING] Assign node IDs during parsing (#27411) (camc314)

🚀 Features

  • 3d00bbd minifier: Add folding of delete expression (#27522) (Armano)

🐛 Bug Fixes

  • 760b60b codegen, packages/codegen: Remove extraneous space before RestElement in ArrayPattern (#27613) (overlookmotel)
  • 0353d37 packages/codegen: Support printing V8IntrinsicExpressions (#27597) (overlookmotel)
  • 1e4c6ee minifier: Preserve parameter writes through mapped arguments (#27494) (Dunqing)
  • f8e9a50 semantic: Stop arguments resolution at ordinary functions (#26929) (camc314)
  • 4b75662 transformer_plugins: Preserve optional chains through non-null assertions (#27526) (Dunqing)
  • 72bf06f crates/oxc_semantic: Decline to evaluate unary ops on strings in enum initializers (#27447) (Brooooooklyn)
  • c57d9c7 parser: Apply no-side-effects annotations after export (#27504) (camc314)
  • 02577b1 minifier: Preserve delete semantic when folding non-finite numbers (#27466) (Armano)
  • f14ead5 minifier: Eliminate unused IIFE calls with constant arguments (#27434) (Dunqing)
  • aec14bc transformer: Avoid synthetic private fields for static blocks (#27300) (Kuroda Kayn)
  • 558a890 semantic: Mark delete of optional members as MemberWriteTarget (#27430) (Bartok)
  • f50257e codegen: Avoid extra indent before empty do-while bodies (#27407) (camc314)
  • 82bfc5f codegen: Fix printing negative BigIntLiteral after - (#27378) (overlookmotel)
  • 5461c1a packages/codegen: Fix printing negative BigIntLiteral after - (#27377) (overlookmotel)
  • bebef88 packages/codegen: Fix debug assert fail printing TSJSDocNonNullableType (#27373) (overlookmotel)
  • 7e6a050 semantic: Visit TSMethodSignature computed method keys in enclosing scope (#27357) (camc314)

⚡ Performance

  • e1c97f8 packages/codegen: Remove all printSpaceBeforeIdentifier calls (#27620) (overlookmotel)
  • 70ecfdd packages/codegen: Skip redundant printSpaceBeforeIdentifier call (#27619) (overlookmotel)
  • 3c289f3 packages/codegen: Remove branches from loops printing arrays (#27614) (overlookmotel)
  • 27f5b45 packages/codegen: Remove branch printing RestElement in ArrayPattern (#27608) (overlookmotel)
  • adc90ed packages/codegen: Reduce branches in printArguments (#27607) (overlookmotel)
  • 262dd21 packages/codegen: Remove unnecessary printSpaceBeforeIdentifier calls (#27606) (overlookmotel)
  • 4bb9722 packages/codegen: Print SpreadElement arguments via printExpression (#27599) (overlookmotel)
  • 0c98dc5 packages/codegen: Reduce megamorphic type reads in printParams (#27595) (overlookmotel)
  • e3780b5 packages/codegen: Reduce writes in printForOfStatement (#27594) (overlookmotel)
  • 8d0ba20 packages/codegen: Reduce megamorphic type reads in printForOfStatement (#27593) (overlookmotel)
  • b29f35e packages/codegen: Reduce megamorphic type reads in printDirectivesAndStatements (#27592) (overlookmotel)
  • 256259d packages/codegen: Reduce megamorphic type reads in printConditionalExpression (#27591) (overlookmotel)
  • a9bd942 packages/codegen: Reduce megamorphic type reads in printObjectProperty (#27590) (overlookmotel)
  • 0a386ff packages/codegen: Ensure shorthand var is always a boolean (#27589) (overlookmotel)
  • 8d4c633 packages/codegen: Reduce branches in printObjectProperty (#27588) (overlookmotel)
  • b4c8c04 packages/codegen: Reduce megamorphic type reads in printMemberExpression (#27587) (overlookmotel)
  • ff5eae8 packages/codegen: Reduce megamorphic type reads (#27586) (overlookmotel)
  • 5487247 ast: Generate derive for CloneIn on Comment (#27542) (overlookmotel)

... (truncated)

Commits
  • d47efe5 release(crates): oxc v0.154.0 (#27644)
  • 5ffddba feat(lexer): NEON classify for aarch64 (#27642)
  • 76ec31b fix(formatter_css): support css-in-js placeholders in property names and cond...
  • 4f28e20 chore(ci): bump oxc-project/security-action to v1.0.10 (#27641)
  • 99bb268 fix(formatter_css): keep css-in-js placeholder as media type (#27639)
  • 372849e fix(formatter): fix crash on css-in-js comment containing interpolation (#27638)
  • da692b8 fix(formatter): wrap export default class|function consistently (#27628)
  • 1be9503 refactor(formatter): unify LHS lookup for statement start parens (#27627)
  • 21dee96 fix(formatter): keep parens around TSInstantiationExpression before ! and e...
  • 82ecc43 fix(linter/sort-keys): compare natural order like ESLint (#27579)
  • Additional commits viewable in compare view

Updates oxc_ast from 0.117.0 to 0.154.0

Release notes

Sourced from oxc_ast's releases.

oxc crates_v0.154.0

💥 BREAKING CHANGES

  • 7730e14 ast: [BREAKING] Refactor comment attachment storage (#27512) (camc314)
  • c904b61 ast: [BREAKING] Add comment attachment storage (#27393) (camc314)
  • b5e8eff parser: [BREAKING] Assign node IDs during parsing (#27411) (camc314)

🚀 Features

  • 3d00bbd minifier: Add folding of delete expression (#27522) (Armano)

🐛 Bug Fixes

  • 760b60b codegen, packages/codegen: Remove extraneous space before RestElement in ArrayPattern (#27613) (overlookmotel)
  • 0353d37 packages/codegen: Support printing V8IntrinsicExpressions (#27597) (overlookmotel)
  • 1e4c6ee minifier: Preserve parameter writes through mapped arguments (#27494) (Dunqing)
  • f8e9a50 semantic: Stop arguments resolution at ordinary functions (#26929) (camc314)
  • 4b75662 transformer_plugins: Preserve optional chains through non-null assertions (#27526) (Dunqing)
  • 72bf06f crates/oxc_semantic: Decline to evaluate unary ops on strings in enum initializers (#27447) (Brooooooklyn)
  • c57d9c7 parser: Apply no-side-effects annotations after export (#27504) (camc314)
  • 02577b1 minifier: Preserve delete semantic when folding non-finite numbers (#27466) (Armano)
  • f14ead5 minifier: Eliminate unused IIFE calls with constant arguments (#27434) (Dunqing)
  • aec14bc transformer: Avoid synthetic private fields for static blocks (#27300) (Kuroda Kayn)
  • 558a890 semantic: Mark delete of optional members as MemberWriteTarget (#27430) (Bartok)
  • f50257e codegen: Avoid extra indent before empty do-while bodies (#27407) (camc314)
  • 82bfc5f codegen: Fix printing negative BigIntLiteral after - (#27378) (overlookmotel)
  • 5461c1a packages/codegen: Fix printing negative BigIntLiteral after - (#27377) (overlookmotel)
  • bebef88 packages/codegen: Fix debug assert fail printing TSJSDocNonNullableType (#27373) (overlookmotel)
  • 7e6a050 semantic: Visit TSMethodSignature computed method keys in enclosing scope (#27357) (camc314)

⚡ Performance

  • e1c97f8 packages/codegen: Remove all printSpaceBeforeIdentifier calls (#27620) (overlookmotel)
  • 70ecfdd packages/codegen: Skip redundant printSpaceBeforeIdentifier call (#27619) (overlookmotel)
  • 3c289f3 packages/codegen: Remove branches from loops printing arrays (#27614) (overlookmotel)
  • 27f5b45 packages/codegen: Remove branch printing RestElement in ArrayPattern (#27608) (overlookmotel)
  • adc90ed packages/codegen: Reduce branches in printArguments (#27607) (overlookmotel)
  • 262dd21 packages/codegen: Remove unnecessary printSpaceBeforeIdentifier calls (#27606) (overlookmotel)
  • 4bb9722 packages/codegen: Print SpreadElement arguments via printExpression (#27599) (overlookmotel)
  • 0c98dc5 packages/codegen: Reduce megamorphic type reads in printParams (#27595) (overlookmotel)
  • e3780b5 packages/codegen: Reduce writes in printForOfStatement (#27594) (overlookmotel)
  • 8d0ba20 packages/codegen: Reduce megamorphic type reads in printForOfStatement (#27593) (overlookmotel)
  • b29f35e packages/codegen: Reduce megamorphic type reads in printDirectivesAndStatements (#27592) (overlookmotel)
  • 256259d packages/codegen: Reduce megamorphic type reads in printConditionalExpression (#27591) (overlookmotel)
  • a9bd942 packages/codegen: Reduce megamorphic type reads in printObjectProperty (#27590) (overlookmotel)
  • 0a386ff packages/codegen: Ensure shorthand var is always a boolean (#27589) (overlookmotel)
  • 8d4c633 packages/codegen: Reduce branches in printObjectProperty (#27588) (overlookmotel)
  • b4c8c04 packages/codegen: Reduce megamorphic type reads in printMemberExpression (#27587) (overlookmotel)
  • ff5eae8 packages/codegen: Reduce megamorphic type reads (#27586) (overlookmotel)
  • 5487247 ast: Generate derive for CloneIn on Comment (#27542) (overlookmotel)

... (truncated)

Commits
  • d47efe5 release(crates): oxc v0.154.0 (#27644)
  • 5ffddba feat(lexer): NEON classify for aarch64 (#27642)
  • 76ec31b fix(formatter_css): support css-in-js placeholders in property names and cond...
  • 4f28e20 chore(ci): bump oxc-project/security-action to v1.0.10 (#27641)
  • 99bb268 fix(formatter_css): keep css-in-js placeholder as media type (#27639)
  • 372849e fix(formatter): fix crash on css-in-js comment containing interpolation (#27638)
  • da692b8 fix(formatter): wrap export default class|function consistently (#27628)
  • 1be9503 refactor(formatter): unify LHS lookup for statement start parens (#27627)
  • 21dee96 fix(formatter): keep parens around TSInstantiationExpression before ! and e...
  • 82ecc43 fix(linter/sort-keys): compare natural order like ESLint (#27579)
  • Additional commits viewable in compare view

Updates oxc_allocator from 0.117.0 to 0.154.0

Release notes

Sourced from oxc_allocator's releases.

oxc crates_v0.154.0

💥 BREAKING CHANGES

  • 7730e14 ast: [BREAKING] Refactor comment attachment storage (#27512) (camc314)
  • c904b61 ast: [BREAKING] Add comment attachment storage (#27393) (camc314)
  • b5e8eff parser: [BREAKING] Assign node IDs during parsing (#27411) (camc314)

🚀 Features

  • 3d00bbd minifier: Add folding of delete expression (#27522) (Armano)

🐛 Bug Fixes

  • 760b60b codegen, packages/codegen: Remove extraneous space before RestElement in ArrayPattern (#27613) (overlookmotel)
  • 0353d37 packages/codegen: Support printing V8IntrinsicExpressions (#27597) (overlookmotel)
  • 1e4c6ee minifier: Preserve parameter writes through mapped arguments (#27494) (Dunqing)
  • f8e9a50 semantic: Stop arguments resolution at ordinary functions (#26929) (camc314)
  • 4b75662 transformer_plugins: Preserve optional chains through non-null assertions (#27526) (Dunqing)
  • 72bf06f crates/oxc_semantic: Decline to evaluate unary ops on strings in enum initializers (#27447) (Brooooooklyn)
  • c57d9c7 parser: Apply no-side-effects annotations after export (#27504) (camc314)
  • 02577b1 minifier: Preserve delete semantic when folding non-finite numbers (#27466) (Armano)
  • f14ead5 minifier: Eliminate unused IIFE calls with constant arguments (#27434) (Dunqing)
  • aec14bc transformer: Avoid synthetic private fields for static blocks (#27300) (Kuroda Kayn)
  • 558a890 semantic: Mark delete of optional members as MemberWriteTarget (#27430) (Bartok)
  • f50257e codegen: Avoid extra indent before empty do-while bodies (#27407) (camc314)
  • 82bfc5f codegen: Fix printing negative BigIntLiteral after - (#27378) (overlookmotel)
  • 5461c1a packages/codegen: Fix printing negative BigIntLiteral after - (#27377) (overlookmotel)
  • bebef88 packages/codegen: Fix debug assert fail printing TSJSDocNonNullableType (#27373) (overlookmotel)
  • 7e6a050 semantic: Visit TSMethodSignature computed method keys in enclosing scope (#27357) (camc314)

⚡ Performance

  • e1c97f8 packages/codegen: Remove all printSpaceBeforeIdentifier calls (#27620) (overlookmotel)
  • 70ecfdd packages/codegen: Skip redundant printSpaceBeforeIdentifier call (#27619) (overlookmotel)
  • 3c289f3 packages/codegen: Remove branches from loops printing arrays (#27614) (overlookmotel)
  • 27f5b45 packages/codegen: Remove branch printing RestElement in ArrayPattern (#27608) (overlookmotel)
  • adc90ed packages/codegen: Reduce branches in printArguments (#27607) (overlookmotel)
  • 262dd21 packages/codegen: Remove unnecessary printSpaceBeforeIdentifier calls (#27606) (overlookmotel)
  • 4bb9722 packages/codegen: Print SpreadElement arguments via printExpression (#27599) (overlookmotel)
  • 0c98dc5 packages/codegen: Reduce megamorphic type reads in printParams (#27595) (overlookmotel)
  • e3780b5 packages/codegen: Reduce writes in printForOfStatement (#27594) (overlookmotel)
  • 8d0ba20 packages/codegen: Reduce megamorphic type reads in printForOfStatement (#27593) (overlookmotel)
  • b29f35e packages/codegen: Reduce megamorphic type reads in printDirectivesAndStatements (#27592) (overlookmotel)
  • 256259d packages/codegen: Reduce megamorphic type reads in printConditionalExpression (#27591) (overlookmotel)
  • a9bd942 packages/codegen: Reduce megamorphic type reads in printObjectProperty (#27590) (overlookmotel)
  • 0a386ff packages/codegen: Ensure shorthand var is always a boolean (#27589) (overlookmotel)
  • 8d4c633 packages/codegen: Reduce branches in printObjectProperty (#27588) (overlookmotel)
  • b4c8c04 packages/codegen: Reduce megamorphic type reads in printMemberExpression (#27587) (overlookmotel)
  • ff5eae8 packages/codegen: Reduce megamorphic type reads (#27586) (overlookmotel)
  • 5487247 ast: Generate derive for CloneIn on Comment (#27542) (overlookmotel)

... (truncated)

Commits
  • d47efe5 release(crates): oxc v0.154.0 (#27644)
  • 5ffddba feat(lexer): NEON classify for aarch64 (#27642)
  • 76ec31b fix(formatter_css): support css-in-js placeholders in property names and cond...
  • 4f28e20 chore(ci): bump oxc-project/security-action to v1.0.10 (#27641)
  • 99bb268 fix(formatter_css): keep css-in-js placeholder as media type (#27639)
  • 372849e fix(formatter): fix crash on css-in-js comment containing interpolation (#27638)
  • da692b8 fix(formatter): wrap export default class|function consistently (#27628)
  • 1be9503 refactor(formatter): unify LHS lookup for statement start parens (#27627)
  • 21dee96 fix(formatter): keep parens around TSInstantiationExpression before ! and e...
  • 82ecc43 fix(linter/sort-keys): compare natural order like ESLint (#27579)
  • Additional commits viewable in compare view

Updates oxc_span from 0.117.0 to 0.154.0

Release notes

Sourced from oxc_span's releases.

oxc crates_v0.154.0

💥 BREAKING CHANGES

  • 7730e14 ast: [BREAKING] Refactor comment attachment storage (#27512) (camc314)
  • c904b61 ast: [BREAKING] Add comment attachment storage (#27393) (camc314)
  • b5e8eff parser: [BREAKING] Assign node IDs during parsing (#27411) (camc314)

🚀 Features

  • 3d00bbd minifier: Add folding of delete expression (#27522) (Armano)

🐛 Bug Fixes

  • 760b60b codegen, packages/codegen: Remove extraneous space before RestElement in ArrayPattern (#27613) (overlookmotel)
  • 0353d37 packages/codegen: Support printing V8IntrinsicExpressions (#27597) (overlookmotel)
  • 1e4c6ee minifier: Preserve parameter writes through mapped arguments (#27494) (Dunqing)
  • f8e9a50 semantic: Stop arguments resolution at ordinary functions (#26929) (camc314)
  • 4b75662 transformer_plugins: Preserve optional chains through non-null assertions (#27526) (Dunqing)
  • 72bf06f crates/oxc_semantic: Decline to evaluate unary ops on strings in enum initializers (#27447) (Brooooooklyn)
  • c57d9c7 parser: Apply no-side-effects annotations after export (#27504) (camc314)
  • 02577b1 minifier: Preserve delete semantic when folding non-finite numbers (#27466) (Armano)
  • f14ead5 minifier: Eliminate unused IIFE calls with constant arguments (#27434) (Dunqing)
  • aec14bc transformer: Avoid synthetic private fields for static blocks (#27300) (Kuroda Kayn)
  • 558a890 semantic: Mark delete of optional members as MemberWriteTarget (#27430) (Bartok)
  • f50257e codegen: Avoid extra indent before empty do-while bodies (#27407) (camc314)
  • 82bfc5f codegen: Fix printing negative BigIntLiteral after - (#27378) (overlookmotel)
  • 5461c1a packages/codegen: Fix printing negative BigIntLiteral after - (#27377) (overlookmotel)
  • bebef88 packages/codegen: Fix debug assert fail printing TSJSDocNonNullableType (#27373) (overlookmotel)
  • 7e6a050 semantic: Visit TSMethodSignature computed method keys in enclosing scope (#27357) (camc314)

⚡ Performance

  • e1c97f8 packages/codegen: Remove all printSpaceBeforeIdentifier calls (#27620) (overlookmotel)
  • 70ecfdd packages/codegen: Skip redundant printSpaceBeforeIdentifier call (#27619) (overlookmotel)
  • 3c289f3 packages/codegen: Remove branches from loops printing arrays (#27614) (overlookmotel)
  • 27f5b45 packages/codegen: Remove branch printing RestElement in ArrayPattern (#27608) (overlookmotel)
  • adc90ed packages/codegen: Reduce branches in printArguments (#27607) (overlookmotel)
  • 262dd21 packages/codegen: Remove unnecessary printSpaceBeforeIdentifier calls (#27606) (overlookmotel)
  • 4bb9722 packages/codegen: Print SpreadElement arguments via printExpression (#27599) (overlookmotel)
  • 0c98dc5 packages/codegen: Reduce megamorphic type reads in printParams (#27595) (overlookmotel)
  • e3780b5 packages/codegen: Reduce writes in printForOfStatement (#27594) (overlookmotel)
  • 8d0ba20 packages/codegen: Reduce megamorphic type reads in printForOfStatement (#27593) (overlookmotel)
  • b29f35e packages/codegen: Reduce megamorphic type reads in printDirectivesAndStatements (#27592) (overlookmotel)
  • 256259d packages/codegen: Reduce megamorphic type reads in printConditionalExpression (#27591) (overlookmotel)
  • a9bd942 packages/codegen: Reduce megamorphic type reads in printObjectProperty (#27590) (overlookmotel)
  • 0a386ff packages/codegen: Ensure shorthand var is always a boolean (#27589) (overlookmotel)
  • 8d4c633 packages/codegen: Reduce branches in printObjectProperty (#27588) (overlookmotel)
  • b4c8c04 packages/codegen: Reduce megamorphic type reads in printMemberExpression (#27587) (overlookmotel)
  • ff5eae8 packages/codegen: Reduce megamorphic type reads (#27586) (overlookmotel)
  • 5487247 ast: Generate derive for CloneIn on Comment (#27542) (overlookmotel)

... (truncated)

Commits
  • d47efe5 release(crates): oxc v0.154.0 (#27644)
  • 5ffddba feat(lexer): NEON classify for aarch64 (#27642)
  • 76ec31b fix(formatter_css): support css-in-js placeholders in property names and cond...
  • 4f28e20 chore(ci): bump oxc-project/security-action to v1.0.10 (#27641)
  • 99bb268 fix(formatter_css): keep css-in-js placeholder as media type (#27639)
  • 372849e fix(formatter): fix crash on css-in-js comment containing interpolation (#27638)
  • da692b8 fix(formatter): wrap export default class|function consistently (#27628)
  • 1be9503 refactor(formatter): unify LHS lookup for statement start parens (#27627)
  • 21dee96 fix(formatter): keep parens around TSInstantiationExpression before ! and e...
  • 82ecc43 fix(linter/sort-keys): compare natural order like ESLint (#27579)
  • Additional commits viewable in compare view

Updates oxc_syntax from 0.117.0 to 0.154.0

Release notes

Sourced from oxc_syntax's releases.

oxc crates_v0.154.0

💥 BREAKING CHANGES

  • 7730e14 ast: [BREAKING] Refactor comment attachment storage (#27512) (camc314)
  • c904b61 ast: [BREAKING] Add comment attachment storage (#27393) (camc314)
  • b5e8eff parser: [BREAKING] Assign node IDs during parsing (#27411) (camc314)

🚀 Features

  • 3d00bbd minifier: Add folding of delete expression (#27522) (Armano)

🐛 Bug Fixes

  • 760b60b codegen, packages/codegen: Remove extraneous space before RestElement in ArrayPattern (#27613) (overlookmotel)
  • 0353d37 packages/codegen: Support printing V8IntrinsicExpressions (#27597) (overlookmotel)
  • 1e4c6ee minifier: Preserve parameter writes through mapped arguments (#27494) (Dunqing)
  • f8e9a50 semantic: Stop arguments resolution at ordinary functions (#26929) (camc314)
  • 4b75662 transformer_plugins: Preserve optional chains through non-null assertions (#27526) (Dunqing)
  • 72bf06f crates/oxc_semantic: Decline to evaluate unary ops on strings in enum initializers (#27447) (Brooooooklyn)
  • c57d9c7 parser: Apply no-side-effects annotations after export (#27504) (camc314)
  • 02577b1 minifier: Preserve delete semantic when folding non-finite numbers (#27466) (Armano)
  • f14ead5 minifier: Eliminate unused IIFE calls with constant arguments (#27434) (Dunqing)
  • aec14bc transformer: Avoid synthetic private fields for static blocks (#27300) (Kuroda Kayn)
  • 558a890 semantic: Mark delete of optional members as MemberWriteTarget (#27430) (Bartok)
  • f50257e codegen: Avoid extra indent before empty do-while bodies (#27407) (camc314)
  • 82bfc5f codegen: Fix printing negative BigIntLiteral after - (#27378) (overlookmotel)
  • 5461c1a packages/codegen: Fix printing negative BigIntLiteral after - (#27377) (overlookmotel)
  • bebef88 packages/codegen: Fix debug assert fail printing TSJSDocNonNullableType (#27373) (overlookmotel)
  • 7e6a050 semantic: Visit TSMethodSignature computed method keys in enclosing scope (#27357) (camc314)

⚡ Performance

  • e1c97f8 packages/codegen: Remove all printSpaceBeforeIdentifier calls (#27620) (overlookmotel)
  • 70ecfdd packages/codegen: Skip redundant printSpaceBeforeIdentifier call (#27619) (overlookmotel)
  • 3c289f3 packages/codegen: Remove branches from loops printing arrays (#27614) (overlookmotel)
  • 27f5b45 packages/codegen: Remove branch printing RestElement in ArrayPattern (#27608) (overlookmotel)
  • adc90ed packages/codegen: Reduce branches in printArguments (#27607) (overlookmotel)
  • 262dd21 packages/codegen: Remove unnecessary printSpaceBeforeIdentifier calls (#27606) (overlookmotel)
  • 4bb9722 packages/codegen: Print SpreadElement arguments via printExpression (#27599) (overlookmotel)
  • 0c98dc5 packages/codegen: Reduce megamorphic type reads in printParams (#27595) (overlookmotel)
  • e3780b5 packages/codegen: Reduce writes in printForOfStatement (#27594) (overlookmotel)
  • 8d0ba20 packages/codegen: Reduce megamorphic type reads in printForOfStatement (#27593) (overlookmotel)
  • b29f35e packages/codegen: Reduce megamorphic type reads in printDirectivesAndStatements (#27592) (overlookmotel)
  • 256259d packages/codegen: Reduce megamorphic type reads in printConditionalExpression (#27591) (overlookmotel)
  • a9bd942 packages/codegen: Reduce megamorphic type reads in printObjectProperty (#27590) (overlookmotel)
  • 0a386ff packages/codegen: Ensure shorthand var is always a boolean (#27589) (overlookmotel)
  • 8d4c633 packages/codegen: Reduce branches in printObjectProperty (#27588) (overlookmotel)
  • b4c8c04 packages/codegen: Reduce megamorphic type reads in printMemberExpression (#27587) (overlookmotel)
  • ff5eae8 packages/codegen: Reduce megamorphic type reads (#27586) (overlookmotel)
  • 5487247 ast: Generate derive for CloneIn on Comment (#27542) (overlookmotel)

... (truncated)

Commits
  • d47efe5 release(crates): oxc v0.154.0 (#27644)
  • 5ffddba feat(lexer): NEON classify for aarch64 (#27642)
  • 76ec31b fix(formatter_css): support css-in-js placeholders in property names and cond...
  • 4f28e20 chore(ci): bump oxc-project/security-action to v1.0.10 (#27641)
  • 99bb268 fix(formatter_css): keep css-in-js placeholder as media type (#27639)
  • 372849e fix(formatter): fix crash on css-in-js comment containing interpolation (#27638)
  • da692b8 fix(formatter): wrap export default class|function consistently (#27628)
  • 1be9503 refactor(formatter): unify LHS lookup for statement start parens (#27627)
  • 21dee96 fix(formatter): keep parens around TSInstantiationExpression before ! and e...
  • 82ecc43 fix(linter/sort-keys): compare natural order like ESLint (#27579)
  • Additional commits viewable in compare view

Updates syn from 3.0.8 to 3.0.9

Release notes

Sourced from syn's releases.

3.0.9

  • Add Punctuated::retain (#2088)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the rust-dependencies group with 8 updates
007c4cd 
Bumps the rust-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.2` | `1.53.3` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.11.0` | `0.11.1` |
| [oxc_parser](https://github.com/oxc-project/oxc) | `0.117.0` | `0.154.0` |
| [oxc_ast](https://github.com/oxc-project/oxc) | `0.117.0` | `0.154.0` |
| [oxc_allocator](https://github.com/oxc-project/oxc) | `0.117.0` | `0.154.0` |
| [oxc_span](https://github.com/oxc-project/oxc) | `0.117.0` | `0.154.0` |
| [oxc_syntax](https://github.com/oxc-project/oxc) | `0.117.0` | `0.154.0` |
| [syn](https://github.com/dtolnay/syn) | `3.0.8` | `3.0.9` |


Updates `tokio` from 1.53.2 to 1.53.3
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.2...tokio-1.53.3)

Updates `sha2` from 0.11.0 to 0.11.1
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

Updates `oxc_parser` from 0.117.0 to 0.154.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/CHANGELOG.md)
- [Commits](oxc-project/oxc@crates_v0.117.0...crates_v0.154.0)

Updates `oxc_ast` from 0.117.0 to 0.154.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/CHANGELOG.md)
- [Commits](oxc-project/oxc@crates_v0.117.0...crates_v0.154.0)

Updates `oxc_allocator` from 0.117.0 to 0.154.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/CHANGELOG.md)
- [Commits](oxc-project/oxc@crates_v0.117.0...crates_v0.154.0)

Updates `oxc_span` from 0.117.0 to 0.154.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/CHANGELOG.md)
- [Commits](oxc-project/oxc@crates_v0.117.0...crates_v0.154.0)

Updates `oxc_syntax` from 0.117.0 to 0.154.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/CHANGELOG.md)
- [Commits](oxc-project/oxc@crates_v0.117.0...crates_v0.154.0)

Updates `syn` from 3.0.8 to 3.0.9
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@3.0.8...3.0.9)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.53.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: oxc_parser
  dependency-version: 0.154.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: oxc_ast
  dependency-version: 0.154.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: oxc_allocator
  dependency-version: 0.154.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: oxc_span
  dependency-version: 0.154.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: oxc_syntax
  dependency-version: 0.154.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: syn
  dependency-version: 3.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 19, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 19, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs		 bashkit 007c4cd Commit Preview URL

Branch Preview URL		 Oct 19 2026, 09:46 AM

@chaliy Claude

chaliy commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

Reviewed this one. The group splits cleanly into three patch bumps that should land and an oxc jump that cannot, so it needs to be recreated without oxc rather than merged or retried.

Safe (should land): sha2 0.11.0 → 0.11.1, syn 3.0.8 → 3.0.9, tokio 1.53.2 → 1.53.3. Lockfile-only, and cargo build --workspace is clean with just these three applied on top of current main. The first two already landed in the fuzz lockfile via #2755.

Blocked: oxc_* 0.117.0 → 0.154.0 (and its compact_str 0.10, phf 0.14, oxc_index 5.0 fallout). Three independent reasons:

  1. MSRV. oxc 0.154 requires rustc 1.97.0; rust-toolchain.toml pins 1.95.0. This is what reddened WASM web package here:

    error: rustc 1.95.0 is not supported by the following packages:
  oxc_allocator@0.154.0 requires rustc 1.97.0
  ... 12 more oxc crates

    Same shape as the wasmtime 49.x breakage in chore(deps): bump the fuzz-dependencies group in /crates/bashkit/fuzz with 2 updates #2708, which is why wasmtime is already in ignore.

  2. It splits the oxc graph in two. zapcode-core 1.5.1 requires oxc ^0.117, so it does not move with this bump — the new lockfile carries both trees side by side:

    oxc_parser    ['0.117.0', '0.154.0']
oxc_ast       ['0.117.0', '0.154.0']
oxc_allocator ['0.117.0', '0.154.0']
... 10 more doubled

    crates/bashkit/Cargo.toml says these versions exist to match upstream ZapCode ("Vendored browser ZapCode uses the same parser/codec versions as upstream"), and zapcode_browser/parser walks the oxc AST directly. Moving bashkit's copy 37 minors ahead of the one zapcode-core builds against breaks that invariant and, in all likelihood, the vendored parser with it. The right order is a zapcode-core release that moves to 0.154 first, then this bump.

  3. Supply chain. It adds 19 unvetted crates, which is the rest of the Audit failure (21 total, the other 2 being sha2/syn; tokio makes 3). Doubling the vendored oxc surface is not a cost worth paying for a bump that cannot build anyway.

Taking the toolchain bump to clear (1) would mean moving the pinned rustc across ~30 dtolnay/rust-toolchain refs plus rust-toolchain.toml, and would still leave (2) — so it is a deliberate project, not a dependency bump, and not something to do inside an aggregated chore(deps) PR.

I'm adding an ignore entry for oxc_* with this rationale, mirroring the existing wasmtime / get-size2 / branches entries, so the group stops reopening a PR that cannot land every week. Once that is on main this PR wants an ·@·d·ependabot r·ecreate; the three patch bumps then need their cargo vet exemptions moved to the new versions, which I'll carry in the same change.

Generated by Claude Code

@chaliy chaliy mentioned this pull request Oct 20, 2026
Merged
2 tasks done
chaliy added a commit that referenced this pull request Oct 20, 2026
@chaliy
chore(deps): land the safe rust-dependencies bumps and hold oxc at 0.…
c6cd38e 
…117.x (#2761)

This week's aggregated `chore(deps)` group (#2758) could not merge as one unit:
three patch bumps are fine, and the `oxc_*` 0.117 -> 0.154 jump in the same PR
cannot land at all.

Landed here: sha2 0.11.0 -> 0.11.1, syn 3.0.8 -> 3.0.9, tokio 1.53.2 -> 1.53.3.
Lockfile-only; `cargo build --workspace` is clean. The first two already went in
through the fuzz lockfile in #2755.

`cargo vet` needed no new exemptions for them. Refreshing `imports.lock` picks
up upstream mozilla/bytecodealliance audits that already cover all three, and it
retires seven exemptions those imports now subsume (bit-set, bit-vec,
core_detect, futures-core, pastey, pkg-config, tracing-core), so the audited
share of the graph goes up rather than down.

`oxc_*` is added to dependabot's `ignore` list. bashkit declares five oxc crates
for the wasm32-unknown-unknown TypeScript path, where `zapcode_browser/parser`
walks the oxc AST directly, and the versions exist to match what upstream
ZapCode vendors. `zapcode-core` 1.5.1 requires `oxc ^0.117` and does not move
with them, so the bump resolved a second copy of all 13 oxc crates and put the
two sides of one parser pipeline 37 minor versions apart. oxc 0.154 also
requires rustc 1.97.0 against the 1.95.0 pin, which is what reddened the
`WASM web package` job, and it pulled in 19 unvetted crates.

Ignored outright rather than by update-type: every release past 0.117.x splits
the graph the same way, so there is no version to bump to until `zapcode-core`
moves upstream. Lifting it then means bumping the pinned toolchain and porting
the vendored parser together, a deliberate change rather than an aggregated
`chore(deps)` PR. Without the entry dependabot reopens the same unlandable PR
every week. Rationale recorded in knowledge/operations/dependencies.md.
@dependabot @github

dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 20, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/rust-dependencies-d100c2ce75 branch October 20, 2026 10:51
@chaliy Claude

chaliy commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

Resolved by #2761, which is now on main as c6cd38e. Closing this one: there is nothing left in the group for it to propose.

  • The three patch bumps landed — sha2 0.11.1, syn 3.0.9, tokio 1.53.3 are on main.
  • cargo vet needed no new exemptions. Refreshing imports.lock picked up upstream mozilla/bytecodealliance audits covering all three, and retired seven exemptions those imports now subsume (bit-set, bit-vec, core_detect, futures-core, pastey, pkg-config, tracing-core). Vetting Succeeded (98 fully audited, 83 partially audited, 495 exempted) — a better outcome than the hand-written exemptions I expected to need.
  • oxc_* is now in dependabot's ignore list, with the rationale in knowledge/operations/dependencies.md, so the group will not bundle an unlandable oxc bump again.

I'm closing rather than running ·@·d·ependabot r·ecreate as I said earlier: with the three bumps merged and oxc_* ignored, a recreate would have nothing to put in the PR. Note that closing this does not add any ignore rule of its own — only the explicit oxc_* entry in .github/dependabot.yml does that, and everything else in the group stays watched as before.

To lift the oxc hold later: it waits on a zapcode-core release built against a newer oxc, and then wants the pinned toolchain bump and the vendored-parser port done together in their own PR.

Generated by Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chaliy