Skip to content

chore(deps): bump tree-sitter from 0.25.10 to 0.26.11 - #1016

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/tree-sitter-0.26.11
Open

chore(deps): bump tree-sitter from 0.25.10 to 0.26.11#1016
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/tree-sitter-0.26.11

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps tree-sitter from 0.25.10 to 0.26.11.

Release notes

Sourced from tree-sitter's releases.

v0.26.11

What's Changed

Full Changelog: tree-sitter/tree-sitter@v0.26.10...v0.26.11

v0.26.10

What's Changed

Full Changelog: tree-sitter/tree-sitter@v0.26.9...v0.26.10

v0.26.9

What's Changed

... (truncated)

Commits
  • 64402de release v0.26.11
  • 2194ac1 fix(ci): re-set executable permission on release artifacts before zipping
  • a2b8369 fix(generate): strip non-ASCII case folds
  • 1ae3cc5 fix(rust): address new clippy lints
  • 90dd1a0 fix(templates): generated array macros do not compile with C++
  • fa6222a docs(queries): clarify behavior of first child anchor example
  • 77b741b docs(queries): specify anchor behavior with quantifiers and groups
  • 1c21ff3 fix(query): apply a trailing anchor when its optional node is skipped
  • 5756ced fix(query): make an anchor after a zero-matched quantifier vacuous
  • eca86a7 fix(query): forbid an anchor at the end of a group
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@socket-security

socket-security Bot commented Aug 12, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcargo/​tree-sitter@​0.25.10 ⏵ 0.26.1258 +210093100100

View full report

@github-actions

Copy link
Copy Markdown
Contributor

This PR changes mirrored Maestro source files in the public repo, but it does not link the matching private source-of-truth PR.

Add one of these to the PR body, then re-run the check:

  • https://github.com/evalops/maestro-internal/pull/<number>
  • evalops/maestro-internal#<number>
  • maestro-internal#<number>

Mirrored files touched:

  • Cargo.lock
  • Cargo.toml

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a4f1a99975

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread Cargo.toml
x509-parser = "0.18"
zip = { version = "8", default-features = false, features = ["aes-crypto", "deflate64", "deflate", "lzma", "ppmd", "time", "zstd", "xz"] }
tree-sitter = "0.25"
tree-sitter = "0.26"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Migrate the parser timeout before upgrading tree-sitter

With this dependency bump, the lockfile resolves tree-sitter to 0.26.12, whose Rust Parser API no longer exposes set_timeout_micros; however packages/tui-rs/src/safety/bash_analyzer.rs still calls parser.set_timeout_micros(50_000). In any CI/job that compiles maestro-tui with the updated lockfile, such as the existing cargo clippy --workspace --all-targets --locked lanes, the workspace will fail to build until that call is migrated to ParseOptions/parse_with_options or the dependency stays on 0.25.

Useful? React with 👍 / 👎.

Comment thread Cargo.toml
x509-parser = "0.18"
zip = { version = "8", default-features = false, features = ["aes-crypto", "deflate64", "deflate", "lzma", "ppmd", "time", "zstd", "xz"] }
tree-sitter = "0.25"
tree-sitter = "0.26"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Move the dependency bump to the mirror source

This changes a source dependency directly in the generated public mirror. The repository guidance says public-facing source changes should originate in evalops/maestro-internal and arrive through the protected mirror workflow, so landing the bump here creates drift that can be overwritten and bypasses the source-of-truth validation path; please make this update in the internal repo and mirror it back.

Useful? React with 👍 / 👎.

Bumps [tree-sitter](https://github.com/tree-sitter/tree-sitter) from 0.25.10 to 0.26.11.
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.25.10...v0.26.11)

---
updated-dependencies:
- dependency-name: tree-sitter
  dependency-version: 0.26.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/tree-sitter-0.26.11 branch from a4f1a99 to 4270b8e Compare August 12, 2026 17:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants