Skip to content

chore(deps): bump the cargo group across 1 directory with 9 updates - #16

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-58d8f427e1
Closed

chore(deps): bump the cargo group across 1 directory with 9 updates#16
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-58d8f427e1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 9 updates in the / directory:

Package From To
rusqlite 0.32.1 0.40.1
sha2 0.10.9 0.11.0
jieba-rs 0.7.4 0.10.2
pdf-extract 0.7.12 0.12.0
regex 1.12.4 1.13.0
lopdf 0.34.0 0.42.0
oar-ocr 0.7.4 0.8.0
aes-gcm 0.10.3 0.11.0
rand 0.8.6 0.10.2

Updates rusqlite from 0.32.1 to 0.40.1

Release notes

Sourced from rusqlite's releases.

0.40.1

What's Changed

  • Fix clippy warnings #1852
  • Bump bundled SQLite version to 3.53.2 #1853
  • Bump hashlink version #1855
  • Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

0.40.0

What's Changed

  • Breaking changes: Replace VTab macros by constructors #1823
  • Breaking changes: Fix VTab::best_index #1824
  • Asserts on VTab::connect aux and args #1825
  • Breaking changes: Fix VTab::connect / create #1826
  • Breaking changes: Allow opting out of using sqlite-wasm-rs on wasm32-unknown-unknown #1828, #1829
  • Derive Default for SeriesTabCursor/ArrayTabCursor #1830
  • Update link to pre-update hook #1831
  • Breaking changes: Fix VTab::connect #1832
  • impl From for FromSqlError #1833
  • Breaking changes: Fix vtab::dequote #1835
  • Bump bundled SQLCipher to version 4.14.0 #1837
  • sqlite3_set_errmsg #1752
  • Bump sqlite3-parser version #1838
  • Fix UB in ToSqlOutput::from_rc #1839
  • Ensure miri doesn't complain #1840
  • Bump to actions/checkout@v6 #1842
  • Add support to UtcDateTime #1843, #1844
  • Bump bundled SQLite version to 3.53.1 #1848
  • Replace some cfg(not by cfg_select #1850

Full Changelog: rusqlite/rusqlite@v0.39.0...v0.40.0

0.39.0

What's Changed

  • Fix constraints on VTab Aux data #1778, #1771
  • Fix docs.rs generation #1779
  • Fix a small typo in rollback_hook docstring #1780
  • Fix some warnings from Intellij #1781
  • Minimal doc for features #1783
  • Clear hooks only for owning connections #1785, #1784
  • Fix link to SQLite C Interface, Prepare Flags #1787
  • Comment functions which are not usable from a loadable extension #1789
  • Factorize code #1792
  • Update getrandom to 0.4 #1798
  • Update Cargo.toml #1800
  • Fix appveyor #1807
  • Add support to unix timestamp for chrono, jiff and time #1808, #1803
  • fix(trace): check that the sql string pointer is not NULL #1805
  • Bump bundled SQLite version to 3.51.3 #1818

... (truncated)

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates jieba-rs from 0.7.4 to 0.10.2

Release notes

Sourced from jieba-rs's releases.

v0.10.2

What's Changed

Full Changelog: messense/jieba-rs@v0.10.1...v0.10.2

v0.10.1

What's Changed

Full Changelog: messense/jieba-rs@v0.10.0...v0.10.1

v0.10.0

What's Changed

New Contributors

Full Changelog: messense/jieba-rs@v0.9.0...v0.10.0

v0.9.0

What's Changed

New Contributors

... (truncated)

Commits

Updates pdf-extract from 0.7.12 to 0.12.0

Commits
  • b95bf9f chore: Release pdf-extract version 0.12.0
  • e5e79d7 Add some corpuses
  • f0e48b8 Bump to lopdf 0.42
  • bdd03f7 Don't evaluate arguments to dlog! when not debugging.
  • 16a08f3 Require type1-encoding-parser = "0.1.1"
  • 205c16f Avoid reparsing fonts for every page.
  • 33c2a06 Bump to lopdf 0.39
  • 1a5ea83 Added support for wasm compile
  • bbed9e3 Update to cff-parser 0.2.0
  • 8ea76f9 Switch 'falling back to encoding' messages to debug!
  • Additional commits viewable in compare view

Updates regex from 1.12.4 to 1.13.0

Changelog

Sourced from regex's changelog.

1.13.0 (2026-07-09)

This release includes a new API, a regex! macro, for lazy compilation of a regex from a string literal. If you use regexes a lot, it's likely you've already written one exactly like it. The new macro can be used like this:

use regex::regex;
fn is_match(line: &str) -> bool {
// The regex will be compiled approximately once and reused automatically.
// This avoids the footgun of using Regex::new here, which would
// guarantee that it would be compiled every time this routine is called.
// This would likely make this routine much slower than it needs to be.
regex!(r"bar|baz").is_match(line)
}
let hay = "
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";
let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

  • #709: Add a new regex! macro for efficient and automatic reuse of a compiled regex.
Commits
  • 926af2e 1.13.0
  • 7d941a9 regex-automata-0.4.15
  • e358341 api: add regex! macro for lazy compilation
  • c420333 automata: disable miri on a couple doc tests
  • b9d2cf7 github: add FUNDING link
  • 0858006 docs: add AI policy for contributors
  • 468fc64 automata: reject dense DFA start states that are match states
  • See full diff in compare view

Updates lopdf from 0.34.0 to 0.42.0

Release notes

Sourced from lopdf's releases.

0.39.0

What's Changed

Improvements

Fixes

Thanks a lot to the new contributors:

0.38.0

See CHANGELOG.md for details.

Thanks a lot to the new contributors:

0.37.0

See CHANGELOG.md for details.

Thanks a lot to the new contributors:

0.36.0

See CHANGELOG.md for details.

0.35.0

See CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from lopdf's changelog.

v0.42.0 (2026-06-23)

Feat

  • Add Content::decode_strict method for strict parsing

Fix

  • Limit array and dictionary nesting depth
  • Include subsequent ObjStm objects in xref stream range
  • Insert newline between concatenated content streams
  • Consume trailing comments in content streams

Test

  • Escape trailing whitespace in parser tests

v0.41.0 (2026-06-04)

Add

  • Add test to reproduce bug with replacing text in non-single character TJ Arrays
  • Add regression test PDF file
  • Add performance tests for document loading and page counting

Fix

  • Fix bug replacing text in non-single character TJ Arrays
  • fix clippy errors

Implement

  • Implement differences mapping

Release

  • Release 0.41

Removes

  • Removes nom_locate dependency to fix a performance regression introduced in v0.35.0.

v0.40.0 (2026-03-19)

Fix

... (truncated)

Commits
  • 2ffc4b4 Release 0.42.0
  • c755394 fix(parser): limit array and dictionary nesting depth
  • 762be26 fix(writer): include subsequent ObjStm objects in xref stream range
  • afb9f00 fix(document): insert newline between concatenated content streams
  • 162257d fix(parser): consume trailing comments in content streams
  • 3549a24 feat(parser): add Content::decode_strict method for strict parsing
  • 81202a2 test(parser): escape trailing whitespace in parser tests
  • fff5d1c Update CHANGELOG
  • cc9b63e Release 0.41
  • 681cc9f fix clippy errors
  • Additional commits viewable in compare view

Updates oar-ocr from 0.7.4 to 0.8.0

Release notes

Sourced from oar-ocr's releases.

v0.8.0

What's Changed

Full Changelog: GreatV/oar-ocr@v0.7.4...v0.8.0

Commits
  • 8b19b79 docs: add FAQ, document in-memory model loading; bump version to 0.8.0 (#154)
  • d881b2e feat: support loading models from memory (#37) (#153)
  • b34eca2 refactor(predictors): centralize auto-download path resolution (#152)
  • 6e6cbce fix: remove text recognition length limit (#150)
  • See full diff in compare view

Updates aes-gcm from 0.10.3 to 0.11.0

Commits

Updates rand from 0.8.6 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 9, 2026
This was referenced Jul 9, 2026
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
@dependabot dependabot Bot changed the title chore(deps): bump the cargo group with 9 updates chore(deps): bump the cargo group across 1 directory with 9 updates Jul 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-58d8f427e1 branch 3 times, most recently from c393545 to 7f577ce Compare July 9, 2026 23:34
@dependabot
chore(deps): bump the cargo group across 1 directory with 9 updates
15a9cba 
Bumps the cargo group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rusqlite](https://github.com/rusqlite/rusqlite) | `0.32.1` | `0.40.1` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [jieba-rs](https://github.com/messense/jieba-rs) | `0.7.4` | `0.10.2` |
| [pdf-extract](https://github.com/jrmuizel/pdf-extract) | `0.7.12` | `0.12.0` |
| [regex](https://github.com/rust-lang/regex) | `1.12.4` | `1.13.0` |
| [lopdf](https://github.com/J-F-Liu/lopdf) | `0.34.0` | `0.42.0` |
| [oar-ocr](https://github.com/greatv/oar-ocr) | `0.7.4` | `0.8.0` |
| [aes-gcm](https://github.com/RustCrypto/AEADs) | `0.10.3` | `0.11.0` |
| [rand](https://github.com/rust-random/rand) | `0.8.6` | `0.10.2` |



Updates `rusqlite` from 0.32.1 to 0.40.1
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.32.1...v0.40.1)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `jieba-rs` from 0.7.4 to 0.10.2
- [Release notes](https://github.com/messense/jieba-rs/releases)
- [Commits](messense/jieba-rs@v0.7.4...v0.10.2)

Updates `pdf-extract` from 0.7.12 to 0.12.0
- [Commits](jrmuizel/pdf-extract@v0.7.12...v0.12.0)

Updates `regex` from 1.12.4 to 1.13.0
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.12.4...1.13.0)

Updates `lopdf` from 0.34.0 to 0.42.0
- [Release notes](https://github.com/J-F-Liu/lopdf/releases)
- [Changelog](https://github.com/J-F-Liu/lopdf/blob/main/CHANGELOG.md)
- [Commits](J-F-Liu/lopdf@v0.34.0...v0.42.0)

Updates `oar-ocr` from 0.7.4 to 0.8.0
- [Release notes](https://github.com/greatv/oar-ocr/releases)
- [Commits](GreatV/oar-ocr@v0.7.4...v0.8.0)

Updates `aes-gcm` from 0.10.3 to 0.11.0
- [Commits](RustCrypto/AEADs@aes-gcm-v0.10.3...aes-gcm-v0.11.0)

Updates `rand` from 0.8.6 to 0.10.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.6...0.10.2)

---
updated-dependencies:
- dependency-name: aes-gcm
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: jieba-rs
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: lopdf
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: oar-ocr
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: pdf-extract
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: regex
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rusqlite
  dependency-version: 0.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/cargo-58d8f427e1 branch from 7f577ce to 15a9cba Compare July 10, 2026 02:04
@dependabot @github

dependabot Bot commented on behalf of github Jul 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 10, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-58d8f427e1 branch July 10, 2026 02:36
Chesterguan added a commit that referenced this pull request Aug 5, 2026
@Chesterguan
merge: 带 action 的提示永不消失(fix/stuck-snackbar)
4466c93 
## 根因是 Flutter SDK 的一个默认行为变更,不是我们的代码写错

`flutter/flutter#173084`(commit `264223d9879`,首次进入 3.37.0-0.0.pre;当前 SDK
3.44.6)。SDK 源码逐字:

    snack_bar.dart:303   persist = persist ?? action != null;   // 带 action 就默认永不消失
    scaffold.dart:622    _snackBarTimer = Timer(snackBar.duration, () {
                           if (snackBar.persist) { return; }    // 计时器照响,回调直接返回
                           hideCurrentSnackBar(reason: timeout);
                         });

`duration` 传了也没用。没有报错、没有 lint、没有 assert。同一个 commit 里旧的
`action != null && accessibleNavigationOf(context)` 守卫被删掉了 —— **所以这不再
依赖任何无障碍设置,人人中招**。`SnackBarThemeData` 没有 `persist` 字段,主题层
堵不住,只能在构造处堵。

## 我的假设是错的,被对照实验排掉了

我怀疑是五 tab 的 `IndexedStack` 关掉了非当前子树的 `TickerMode`,导致计时器不走。
实现者用同一棵树做了对照:**不带 action 的提示 4 秒正常消失**,只差一个 `action:`
的那条推 10 分钟仍在。A 组绿就把 ticker 假设判死了。记下来:猜根因要么验要么标成猜。

## 顺带修好第二个受害者,而且它更严重

`import_flow.dart:532` `_offerPlainCamera`:

    return await controller.closed == SnackBarClosedReason.action;

`closed` 永远不 resolve → 这个 `await` **永久挂住**。用户点拍照、扫描器没打开、
弹出「用普通相机」,他要是不点,整条导入就卡死在这一句,没有出路 —— 而这正是
当年 #16「安卓拍照打不开」那条路径。函数自己的文档还写着「8 秒自己消失」。

真机上那两个症状(推断,未实测):盖住的区域点不动 —— `Dismissible` 在
`margin == null && insetPadding == null` 时取 `HitTestBehavior.opaque`,而 theme
只设了 `behavior: floating`;横向划它没用 —— `dismissDirection` 默认只认向下。

## 改法:入口收成一个,再用测试焊死

新增 `widgets/app_snack_bar.dart` 作为全 App 唯一的 SnackBar 构造口,`persist: false`
写死。`lib/` 下 21 处构造全部改走它(12 个文件)。**没有用 `duration:`,也没有用
`hideCurrentSnackBar()`** —— 只补设置页那一处的话,下一个写 `SnackBar(` 的人还会
再踩。真正会中招的只有带 `action:` 的那 2 处,其余 19 处行为不变,一并改走是为了
让源码守卫立得住。

## 红→绿

摘掉 `persist: false` → 4 条里红 3 条,而**对照组仍绿**(判别力);
任一处改回裸 `SnackBar(` → 守卫测试红并报出 `文件:行号`。

flutter analyze 干净,flutter test **285 全绿**(基线 280 + 新增 5)。

## 留给产品的一条

带 action 的提示恢复成 4 秒(上游改动之前的行为)。Material 3 建议可操作提示
4–10 秒,「去看看」只有 4 秒可点可能偏短 —— 改时长是产品决策,没动。
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants