Skip to content

chore(deps): bump toml from 0.8.23 to 0.9.12+spec-1.1.0 - #1009

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/toml-0.9.12spec-1.1.0
Open

chore(deps): bump toml from 0.8.23 to 0.9.12+spec-1.1.0#1009
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/toml-0.9.12spec-1.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps toml from 0.8.23 to 0.9.12+spec-1.1.0.

Commits
  • a26defd chore: Release
  • 6c45f8e docs: Update changelog
  • e3c7aa7 chore: Release
  • 2dabe11 docs: Update changelog
  • fb98198 fix(parser): Don't panic on bad hex characters (#1097)
  • 85761c4 fix(parser): Avoid panic
  • 5edb477 fix(parser): Don't panic on bad hex characters
  • cac04af test(parser): Show another assert case
  • d96417a fix(parser): Consistently assume spaces mean strings
  • 88b657f test(parser): Show assert case
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 12, 2026
@github-actions

Copy link
Copy Markdown
Contributor

This PR changes mirrored Maestro source files in the public repo, but it does not link the matching private source-of-truth PR.

Add one of these to the PR body, then re-run the check:

  • https://github.com/evalops/maestro-internal/pull/<number>
  • evalops/maestro-internal#<number>
  • maestro-internal#<number>

Mirrored files touched:

  • Cargo.lock
  • packages/tui-rs/Cargo.toml

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fd84a39520

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

dunce.workspace = true
fd-lock.workspace = true
toml = "0.8"
toml = "0.9"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Fix config document parsing before bumping toml

With toml = "0.9", toml::Value's FromStr parses a single TOML value rather than a document, but this crate still reads config files with content.parse::<toml::Value>() in paths like set_workspace_trust_in_global_config, config_cli::load_toml, and skill package config loading. For any existing config.toml containing ordinary document syntax such as model = "..." or [projects], those paths now fail to parse and either drop settings or reject trust/package updates, breaking the configured global/project config layers. Parse as toml::Table/toml::from_str and wrap it in Value::Table where a generic value is needed.

Useful? React with 👍 / 👎.

Bumps [toml](https://github.com/toml-rs/toml) from 0.8.23 to 0.9.12+spec-1.1.0.
- [Commits](toml-rs/toml@toml-v0.8.23...toml-v0.9.12)

---
updated-dependencies:
- dependency-name: toml
  dependency-version: 0.9.12+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/toml-0.9.12spec-1.1.0 branch from fd84a39 to 7b75e48 Compare August 12, 2026 17:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants