Skip to content

build(deps): bump ulid from 1.2.1 to 3.0.0 - #187

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/ulid-3.0.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/ulid-3.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps ulid from 1.2.1 to 3.0.0.

Commits
  • 90992f5 Bump version to v3.0.0
  • 1d6ad4e Enable warn(keyword_idents) and replace gen usages
  • 82c545a Fix wasm32 build
  • a30176c Cleanup in prep for release
  • 1af7ec8 bump version to v2.0.0
  • 13b3614 Cleanup clippy warnings
  • ce49f86 Add the ability for Generator to overflow
  • 5fe66d5 Remove deprecated method
  • 4ac1cf7 Rename Ulid::new -> Ulid::gen; add Ulid::max
  • 926ebfa Update rand to v0.10
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [ulid](https://github.com/dylanhart/ulid-rs) from 1.2.1 to 3.0.0.
- [Commits](dylanhart/ulid-rs@v1.2.1...v3.0.0)

---
updated-dependencies:
- dependency-name: ulid
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 29, 2026
@coderabbitai

coderabbitai Bot commented Oct 29, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 758c87cd-d141-4905-90ce-4b53f107cca7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@M3gA-Mind

Copy link
Copy Markdown
Collaborator

This bump doesn't compile as is: ulid 3 drops Ulid::new() here, and tinyflows-storage/src/key.rs:119 and :127 use it (CI: E0599 on both jobs).
It needs a code change that dependabot can't make. We'll either do the bump by hand with the call sites moved to Ulid::generate() and a check that ids keep their sortable format, or close this and ignore ulid 3 for now.

M3gA-Mind added a commit that referenced this pull request Nov 11, 2026
ulid 3 drops Ulid::new() in favour of Ulid::generate(), which produces the
same 26-character, time-ordered ids. Key::ulid and Key::ulid_at switch to
it; Key::ulid_at still keeps the caller's timestamp and only takes the
random part from a fresh id. No public type exposes ulid::Ulid, so the
bump is internal to tinyflows-storage.

The lockfile carries ulid 3.0.0 next to 1.2.1 until the tinystoragedrivers
crates pinned here move to ulid 3 as well.

Supersedes #187 (dependabot).
@dependabot @github

dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor Author

Looks like ulid is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 11, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/ulid-3.0.0 branch November 11, 2026 11:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant