From 36943c2332ac2046f018aa98a53c34ead987c96c Mon Sep 17 00:00:00 2001 From: M3gA-Mind Date: Wed, 11 Nov 2026 17:34:00 +0530 Subject: [PATCH 1/2] deps: tinystoragedrivers v2.1.3 and tinybus v0.3.12 The storage, drivers, module and adaptive crates move to tinystoragedrivers v2.1.3 (rusqlite 0.41 for RUSTSEC-2026-0459, rustix 1.1.6 and xattr 1.7.0 for RUSTSEC-2026-0486, and a busproxy upload race fixed), and tinybus to v0.3.12, the rev those crates pin, so tinybus::Connection stays one type with their busproxy. rusqlite 0.41 needs Rust 1.89, so those four crates move to 1.89. The engine and the crates that do not depend on tinystoragedrivers keep 1.88; the CI MSRV job checks the workspace on 1.89 and those crates on 1.88. --- .github/workflows/ci.yml | 10 +- CHANGELOG.md | 9 ++ Cargo.lock | 156 +++++++++++++++------------ Cargo.toml | 4 +- crates/tinyflows-adaptive/Cargo.toml | 14 +-- crates/tinyflows-drivers/Cargo.toml | 10 +- crates/tinyflows-drivers/README.md | 2 +- crates/tinyflows-module/Cargo.toml | 8 +- crates/tinyflows-storage/Cargo.toml | 12 +-- 9 files changed, 129 insertions(+), 96 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 33dcc84a..10658272 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,11 +20,19 @@ jobs: with: persist-credentials: false - - uses: dtolnay/rust-toolchain@1.88.0 + - uses: dtolnay/rust-toolchain@1.89.0 - name: Check the workspace at its declared minimum compiler version run: cargo check --locked --workspace --all-features + # The tinystoragedrivers crates need 1.89; the engine and the crates that + # do not depend on them keep their own, lower minimum. + - name: Check the storage-free crates at their minimum compiler version + run: | + rustup toolchain install 1.88.0 --profile minimal + cargo +1.88.0 check --locked --all-features \ + -p tinyflows -p tinyflows-bus -p tinyflows-catalog -p tinyflows-copilot -p tinyflows-schedule + rust-sdk: name: Rust SDK runs-on: ubuntu-latest diff --git a/CHANGELOG.md b/CHANGELOG.md index f5f7c142..0dc3c4ca 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +### tinystoragedrivers 2.1.3 + +- **Changed** the tinystoragedrivers dependency of `tinyflows-storage`, + `tinyflows-drivers`, `tinyflows-module` and `tinyflows-adaptive` to v2.1.3 + (rusqlite 0.41 for RUSTSEC-2026-0459, rustix 1.1.6 for RUSTSEC-2026-0486, and + a busproxy upload race fixed), and tinybus to v0.3.12, the rev those crates + pin. These four crates now need Rust 1.89; the engine and the crates that do + not depend on tinystoragedrivers keep Rust 1.88. + ### Run event outcomes - **Added** the engine output to `Runs.PollRun` parked and finished event diff --git a/Cargo.lock b/Cargo.lock index 333cc74f..53a37ea6 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -775,6 +775,28 @@ dependencies = [ "cc", ] +[[package]] +name = "icu_casemap" +version = "2.3.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f2edfd120d8445de853cf53a1abec916f638f933a70a6f4bf8f7e2d7b7f884e9" +dependencies = [ + "icu_casemap_data", + "icu_collections", + "icu_locale_core", + "icu_properties", + "icu_provider", + "potential_utf", + "writeable", + "zerovec", +] + +[[package]] +name = "icu_casemap_data" +version = "2.3.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "059fcda0fc8d33effc6633a8cf0d8a3c17caf7d7c91918fba9918744f501e4e8" + [[package]] name = "icu_collections" version = "2.3.0" @@ -783,6 +805,7 @@ checksum = "fa68d21081c4a05d5a901a1c62add574c77048b6a1c67be3b50ce0b60d4ca513" dependencies = [ "displaydoc", "potential_utf", + "serde", "utf8_iter", "yoke", "zerofrom", @@ -797,6 +820,7 @@ checksum = "d56e28588da92eee5c3201a6eff33fabdd49b62269c8938d4ff050ce4d900deb" dependencies = [ "displaydoc", "litemap", + "serde", "tinystr", "writeable", "zerovec", @@ -851,6 +875,8 @@ checksum = "d27bbb9d3abbefac45d55f647c9de1d44aafcd1186eb91879afef17c396c3e73" dependencies = [ "displaydoc", "icu_locale_core", + "serde", + "stable_deref_trait", "writeable", "yoke", "zerofrom", @@ -1035,9 +1061,9 @@ checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2" [[package]] name = "libsqlite3-sys" -version = "0.38.2" +version = "0.39.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f1d20bef17f513b9b3004532233187769cd072d790971f4e4da0e346eb6401e8" +checksum = "14a5f01b87b92705d07b433c06f96cbc764637d81a0bffb5734ce17cf0f9a2b3" dependencies = [ "cc", "pkg-config", @@ -1115,18 +1141,6 @@ dependencies = [ "pxfm", ] -[[package]] -name = "nix" -version = "0.31.3" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d" -dependencies = [ - "bitflags", - "cfg-if", - "cfg_aliases", - "libc", -] - [[package]] name = "num-bigint" version = "0.4.8" @@ -1264,6 +1278,8 @@ version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d83eb9bc6d8e5cf568e7a1101d60ee05e81ed50ea106026f3d18deeb046d7661" dependencies = [ + "serde_core", + "writeable", "zerovec", ] @@ -1483,6 +1499,12 @@ dependencies = [ "rand_core 0.10.1", ] +[[package]] +name = "rawzip" +version = "0.5.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "ac9999039f74cd73c03158cddfe4362991703c74efe5ce5c8073026f80a5e48c" + [[package]] name = "regex-automata" version = "0.4.18" @@ -1558,9 +1580,9 @@ dependencies = [ [[package]] name = "rusqlite" -version = "0.40.2" +version = "0.41.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "23f2a97da3e3873c73cb2a2e71b35c40ff95e0b1eefa8d72d8499a6928c3b5b3" +checksum = "da9bba6f3506135e120a6586df05be18b48d18896600646a4bec8f993d91a594" dependencies = [ "bitflags", "fallible-iterator", @@ -1588,15 +1610,15 @@ dependencies = [ [[package]] name = "rustix" -version = "1.1.5" +version = "1.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d" +checksum = "e5e76742e5294153d4dde1207dbec5bdd81eef6fabdc0d2118babadabfd858aa" dependencies = [ "bitflags", "errno", "libc", "linux-raw-sys", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -2005,12 +2027,14 @@ dependencies = [ [[package]] name = "tinybus" -version = "0.3.6" -source = "git+https://github.com/tinyhumansai/tinybus?rev=6ce06bc674e4f4d718aa51e643ef62c1f372e270#6ce06bc674e4f4d718aa51e643ef62c1f372e270" +version = "0.3.12" +source = "git+https://github.com/tinyhumansai/tinybus?rev=106eda127f8a40c0ba401efc0074667e43d4c52e#106eda127f8a40c0ba401efc0074667e43d4c52e" dependencies = [ "async-trait", "flate2", + "icu_casemap", "libc", + "rawzip", "serde", "serde_json", "sha2 0.10.9", @@ -2021,14 +2045,14 @@ dependencies = [ "tokio", "toml", "tracing", + "unicode-normalization", "ureq", - "zip", ] [[package]] name = "tinybus-macros" -version = "0.3.6" -source = "git+https://github.com/tinyhumansai/tinybus?rev=6ce06bc674e4f4d718aa51e643ef62c1f372e270#6ce06bc674e4f4d718aa51e643ef62c1f372e270" +version = "0.3.12" +source = "git+https://github.com/tinyhumansai/tinybus?rev=106eda127f8a40c0ba401efc0074667e43d4c52e#106eda127f8a40c0ba401efc0074667e43d4c52e" dependencies = [ "proc-macro2", "quote", @@ -2037,8 +2061,8 @@ dependencies = [ [[package]] name = "tinybus-module" -version = "0.3.6" -source = "git+https://github.com/tinyhumansai/tinybus?rev=6ce06bc674e4f4d718aa51e643ef62c1f372e270#6ce06bc674e4f4d718aa51e643ef62c1f372e270" +version = "0.3.12" +source = "git+https://github.com/tinyhumansai/tinybus?rev=106eda127f8a40c0ba401efc0074667e43d4c52e#106eda127f8a40c0ba401efc0074667e43d4c52e" dependencies = [ "async-trait", "serde", @@ -2220,8 +2244,8 @@ dependencies = [ [[package]] name = "tinystoragedrivers-api" -version = "2.1.2" -source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=6226b9484c8bd01c58741718cd89ba90a13a36bb#6226b9484c8bd01c58741718cd89ba90a13a36bb" +version = "2.1.3" +source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=f5a33025b9feaa36fea522cce764fe8c796e5139#f5a33025b9feaa36fea522cce764fe8c796e5139" dependencies = [ "async-trait", "bytes", @@ -2234,8 +2258,8 @@ dependencies = [ [[package]] name = "tinystoragedrivers-blob" -version = "2.1.2" -source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=6226b9484c8bd01c58741718cd89ba90a13a36bb#6226b9484c8bd01c58741718cd89ba90a13a36bb" +version = "2.1.3" +source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=f5a33025b9feaa36fea522cce764fe8c796e5139#f5a33025b9feaa36fea522cce764fe8c796e5139" dependencies = [ "async-trait", "bytes", @@ -2248,8 +2272,8 @@ dependencies = [ [[package]] name = "tinystoragedrivers-bus" -version = "2.1.2" -source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=6226b9484c8bd01c58741718cd89ba90a13a36bb#6226b9484c8bd01c58741718cd89ba90a13a36bb" +version = "2.1.3" +source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=f5a33025b9feaa36fea522cce764fe8c796e5139#f5a33025b9feaa36fea522cce764fe8c796e5139" dependencies = [ "serde", "serde_json", @@ -2259,8 +2283,8 @@ dependencies = [ [[package]] name = "tinystoragedrivers-busproxy" -version = "2.1.2" -source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=6226b9484c8bd01c58741718cd89ba90a13a36bb#6226b9484c8bd01c58741718cd89ba90a13a36bb" +version = "2.1.3" +source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=f5a33025b9feaa36fea522cce764fe8c796e5139#f5a33025b9feaa36fea522cce764fe8c796e5139" dependencies = [ "async-trait", "bytes", @@ -2277,8 +2301,8 @@ dependencies = [ [[package]] name = "tinystoragedrivers-connect" -version = "2.1.2" -source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=6226b9484c8bd01c58741718cd89ba90a13a36bb#6226b9484c8bd01c58741718cd89ba90a13a36bb" +version = "2.1.3" +source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=f5a33025b9feaa36fea522cce764fe8c796e5139#f5a33025b9feaa36fea522cce764fe8c796e5139" dependencies = [ "rusqlite", "serde_json", @@ -2289,8 +2313,8 @@ dependencies = [ [[package]] name = "tinystoragedrivers-document" -version = "2.1.2" -source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=6226b9484c8bd01c58741718cd89ba90a13a36bb#6226b9484c8bd01c58741718cd89ba90a13a36bb" +version = "2.1.3" +source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=f5a33025b9feaa36fea522cce764fe8c796e5139#f5a33025b9feaa36fea522cce764fe8c796e5139" dependencies = [ "async-trait", "data-encoding", @@ -2307,8 +2331,8 @@ dependencies = [ [[package]] name = "tinystoragedrivers-kv" -version = "2.1.2" -source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=6226b9484c8bd01c58741718cd89ba90a13a36bb#6226b9484c8bd01c58741718cd89ba90a13a36bb" +version = "2.1.3" +source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=f5a33025b9feaa36fea522cce764fe8c796e5139#f5a33025b9feaa36fea522cce764fe8c796e5139" dependencies = [ "async-trait", "serde", @@ -2319,8 +2343,8 @@ dependencies = [ [[package]] name = "tinystoragedrivers-queue" -version = "2.1.2" -source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=6226b9484c8bd01c58741718cd89ba90a13a36bb#6226b9484c8bd01c58741718cd89ba90a13a36bb" +version = "2.1.3" +source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=f5a33025b9feaa36fea522cce764fe8c796e5139#f5a33025b9feaa36fea522cce764fe8c796e5139" dependencies = [ "async-trait", "data-encoding", @@ -2335,8 +2359,8 @@ dependencies = [ [[package]] name = "tinystoragedrivers-secrets" -version = "2.1.2" -source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=6226b9484c8bd01c58741718cd89ba90a13a36bb#6226b9484c8bd01c58741718cd89ba90a13a36bb" +version = "2.1.3" +source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=f5a33025b9feaa36fea522cce764fe8c796e5139#f5a33025b9feaa36fea522cce764fe8c796e5139" dependencies = [ "async-trait", "tinystoragedrivers-api", @@ -2346,8 +2370,8 @@ dependencies = [ [[package]] name = "tinystoragedrivers-testkit" -version = "2.1.2" -source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=6226b9484c8bd01c58741718cd89ba90a13a36bb#6226b9484c8bd01c58741718cd89ba90a13a36bb" +version = "2.1.3" +source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=f5a33025b9feaa36fea522cce764fe8c796e5139#f5a33025b9feaa36fea522cce764fe8c796e5139" dependencies = [ "async-trait", "bytes", @@ -2367,8 +2391,8 @@ dependencies = [ [[package]] name = "tinystoragedrivers-types" -version = "2.1.2" -source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=6226b9484c8bd01c58741718cd89ba90a13a36bb#6226b9484c8bd01c58741718cd89ba90a13a36bb" +version = "2.1.3" +source = "git+https://github.com/tinyhumansai/tinystoragedrivers?rev=f5a33025b9feaa36fea522cce764fe8c796e5139#f5a33025b9feaa36fea522cce764fe8c796e5139" dependencies = [ "serde", "serde_json", @@ -2382,6 +2406,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b1e27c91459209c2986af3dcf603a5a74a4368754ce37414f59acc971167f643" dependencies = [ "displaydoc", + "serde_core", "zerovec", ] @@ -2591,12 +2616,6 @@ version = "2.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6af6ae20167a9ece4bcb41af5b80f8a1f1df981f6391189ce00fd257af04126a" -[[package]] -name = "typed-path" -version = "0.12.4" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "54ec2755506471f54baf5e4bb5499d8e510cc1caf271270e778a736bd2d7336c" - [[package]] name = "typenum" version = "1.20.1" @@ -2635,6 +2654,15 @@ version = "1.0.26" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d245f478577f809a851594d02313b640fb437e0bb33866753cff937863096954" +[[package]] +name = "unicode-normalization" +version = "0.1.26" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "75cd3fb03d5288b3ba9a1ee103ac7e9cbb59f0b03d64f8ddfcc04dd42758a85d" +dependencies = [ + "tinyvec", +] + [[package]] name = "untrusted" version = "0.9.0" @@ -3037,9 +3065,9 @@ checksum = "3ad82d2a33cdc9674dc7465672f271e096168fcdbe0f799d9e6db8c5892679dc" [[package]] name = "xattr" -version = "1.6.1" +version = "1.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "32e45ad4206f6d2479085147f02bc2ef834ac85886624a23575ae137c8aa8156" +checksum = "963d6fab92d5504b971dc8bd90ca743c2575e590bc8071ea5bc571598667ae08" dependencies = [ "libc", "rustix", @@ -3124,6 +3152,7 @@ dependencies = [ "displaydoc", "yoke", "zerofrom", + "zerovec", ] [[package]] @@ -3132,6 +3161,7 @@ version = "0.11.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bb0464e17806c1d976d5cba29399c7f08e516e279e2ba493f63123b5fca67dd8" dependencies = [ + "serde", "yoke", "zerofrom", "zerovec-derive", @@ -3148,20 +3178,6 @@ dependencies = [ "syn 3.0.6", ] -[[package]] -name = "zip" -version = "9.0.5" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6e04976da629d3b04204ba8105b396a193af8ad2583b2c79bfb3ab8af580a11e" -dependencies = [ - "crc32fast", - "flate2", - "indexmap", - "memchr", - "nix", - "typed-path", -] - [[package]] name = "zlib-rs" version = "0.6.8" diff --git a/Cargo.toml b/Cargo.toml index 22742b06..31ccdd11 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -19,8 +19,8 @@ exclude = ["worktrees", "vendor/tinybus"] # Pin unpublished module APIs to a source available in non-recursive clones and archives. [patch.crates-io] -tinybus = { git = "https://github.com/tinyhumansai/tinybus", rev = "6ce06bc674e4f4d718aa51e643ef62c1f372e270" } -tinybus-module = { git = "https://github.com/tinyhumansai/tinybus", rev = "6ce06bc674e4f4d718aa51e643ef62c1f372e270" } +tinybus = { git = "https://github.com/tinyhumansai/tinybus", rev = "106eda127f8a40c0ba401efc0074667e43d4c52e" } +tinybus-module = { git = "https://github.com/tinyhumansai/tinybus", rev = "106eda127f8a40c0ba401efc0074667e43d4c52e" } [workspace.package] edition = "2024" diff --git a/crates/tinyflows-adaptive/Cargo.toml b/crates/tinyflows-adaptive/Cargo.toml index 06ecfd53..108189ce 100644 --- a/crates/tinyflows-adaptive/Cargo.toml +++ b/crates/tinyflows-adaptive/Cargo.toml @@ -2,7 +2,7 @@ name = "tinyflows-adaptive" version = "0.1.0" edition = "2024" -rust-version = "1.88" +rust-version = "1.89" license = "GPL-3.0-or-later" description = "An adaptive loop over the tinyflows engine: select or author a workflow, run it, judge it, learn." # Source the public storage ports and TinyFlows-owned helpers from the host's @@ -19,8 +19,8 @@ thiserror = "2" # revision so a host that vendors tinystoragedrivers once can `[patch]` it; chrono # turns the RFC 3339 instants of the records into the stored `*_ms`; tokio's # `OnceCell` for one-time collection setup. -tinystoragedrivers-api = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb", optional = true } -tinystoragedrivers-types = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb", optional = true } +tinystoragedrivers-api = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139", optional = true } +tinystoragedrivers-types = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139", optional = true } tinyflows-storage = { path = "../tinyflows-storage", optional = true } chrono = { version = "0.4", default-features = false, features = ["std"], optional = true } tracing = { version = "0.1", default-features = false, features = ["std"], optional = true } @@ -33,7 +33,7 @@ tokio = { version = "1", features = ["sync"], optional = true } default = [] # The ledger and vault on a `tinystoragedrivers` document port # (`Storage::from_documents`), so the host's storage backend (SQLite, MongoDB, -# memory) holds them alongside everything else. Needs Rust 1.88. +# memory) holds them alongside everything else. Needs Rust 1.89. storage-drivers = ["dep:tinystoragedrivers-api", "dep:tinystoragedrivers-types", "dep:tinyflows-storage", "dep:chrono", "dep:tokio", "dep:tracing"] [dev-dependencies] @@ -41,9 +41,9 @@ tinyflows = { path = "../tinyflows", features = ["store", "mock"] } # The engine's `WorkflowStore` on an in-memory storage backend, for tests and # the eval example. tinyflows-drivers = { path = "../tinyflows-drivers", default-features = false, features = ["store"] } -tinystoragedrivers-api = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } -tinystoragedrivers-types = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } -tinystoragedrivers-testkit = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } +tinystoragedrivers-api = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } +tinystoragedrivers-types = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } +tinystoragedrivers-testkit = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } tokio = { version = "1", features = ["macros", "rt", "rt-multi-thread", "sync", "time"] } [lints.rust] diff --git a/crates/tinyflows-drivers/Cargo.toml b/crates/tinyflows-drivers/Cargo.toml index 71800d27..23540b1c 100644 --- a/crates/tinyflows-drivers/Cargo.toml +++ b/crates/tinyflows-drivers/Cargo.toml @@ -4,13 +4,13 @@ # are git dependencies (OpenHuman vendors them once and `[patch]`es the URL), # and the published `tinyflows` package cannot carry a git dependency, even an # optional one. It also keeps the engine's MSRV where it is; this crate needs -# the storage crates' 1.88. +# the storage crates' 1.89. [package] name = "tinyflows-drivers" version = "0.1.0" description = "tinyflows StateStore and graph Checkpointer over tinystoragedrivers document ports" edition.workspace = true -rust-version = "1.88" +rust-version = "1.89" license.workspace = true repository.workspace = true homepage.workspace = true @@ -51,8 +51,8 @@ store = [ test-fixtures = ["catalog"] [dependencies] -tinystoragedrivers-api = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } -tinystoragedrivers-types = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } +tinystoragedrivers-api = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } +tinystoragedrivers-types = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } tinyflows-storage = { path = "../tinyflows-storage" } serde = { workspace = true } serde_json = { workspace = true } @@ -72,4 +72,4 @@ uuid = { workspace = true, optional = true } [dev-dependencies] async-trait = { workspace = true } tokio = { workspace = true } -tinystoragedrivers-testkit = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } +tinystoragedrivers-testkit = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } diff --git a/crates/tinyflows-drivers/README.md b/crates/tinyflows-drivers/README.md index a2cab2c5..795c86ee 100644 --- a/crates/tinyflows-drivers/README.md +++ b/crates/tinyflows-drivers/README.md @@ -280,7 +280,7 @@ TinyAgents) and points the URL at that copy with exactly one `DocumentStore` trait in its graph. The published `tinyflows` package cannot carry a git dependency, so these adapters live here (`publish = false`). The engine stays dependency-free and keeps its MSRV; this -crate needs Rust 1.88, the storage crates' MSRV. +crate needs Rust 1.89, the storage crates' MSRV. The split is a recorded decision, with what would end it, in [`docs/storage-crate-split.md`](../../docs/storage-crate-split.md). diff --git a/crates/tinyflows-module/Cargo.toml b/crates/tinyflows-module/Cargo.toml index b570a036..0bbc763a 100644 --- a/crates/tinyflows-module/Cargo.toml +++ b/crates/tinyflows-module/Cargo.toml @@ -2,7 +2,7 @@ name = "tinyflows-module" version = "0.1.0" edition.workspace = true -rust-version = "1.88" +rust-version = "1.89" license.workspace = true repository.workspace = true publish = false @@ -14,8 +14,8 @@ crate-type = ["rlib", "cdylib"] [dependencies] tinyflows-drivers = { path = "../tinyflows-drivers", default-features = false, features = ["catalog", "engine", "schedule"] } tinyflows-catalog = { path = "../tinyflows-catalog" } -tinystoragedrivers-api = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } -tinystoragedrivers-types = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } +tinystoragedrivers-api = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } +tinystoragedrivers-types = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } tinyflows-storage = { path = "../tinyflows-storage" } tinyflows-schedule = { path = "../tinyflows-schedule" } anyhow = "1" @@ -42,4 +42,4 @@ static-link = [] [dev-dependencies] tempfile = "3" tokio = { workspace = true, features = ["test-util"] } -tinystoragedrivers-testkit = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } +tinystoragedrivers-testkit = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } diff --git a/crates/tinyflows-storage/Cargo.toml b/crates/tinyflows-storage/Cargo.toml index 1201c87b..6190a6aa 100644 --- a/crates/tinyflows-storage/Cargo.toml +++ b/crates/tinyflows-storage/Cargo.toml @@ -2,15 +2,15 @@ name = "tinyflows-storage" version = "0.1.0" edition.workspace = true -rust-version = "1.88" +rust-version = "1.89" license.workspace = true repository.workspace = true publish = false description = "TinyFlows-owned generic document persistence helpers" [dependencies] -tinystoragedrivers-api = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } -tinystoragedrivers-types = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } +tinystoragedrivers-api = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } +tinystoragedrivers-types = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } serde = { workspace = true } serde_json = { workspace = true } async-trait = { workspace = true } @@ -20,7 +20,7 @@ ulid = "3" data-encoding = "2" [dev-dependencies] -tinystoragedrivers-testkit = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } -tinystoragedrivers-busproxy = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.2", rev = "6226b9484c8bd01c58741718cd89ba90a13a36bb" } +tinystoragedrivers-testkit = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } +tinystoragedrivers-busproxy = { git = "https://github.com/tinyhumansai/tinystoragedrivers", version = "2.1.3", rev = "f5a33025b9feaa36fea522cce764fe8c796e5139" } # Keep this on the rev tinystoragedrivers pins so `tinybus::Connection` is one type with its busproxy. -tinybus-sdk = { package = "tinybus", git = "https://github.com/tinyhumansai/tinybus", rev = "6ce06bc674e4f4d718aa51e643ef62c1f372e270", default-features = false } +tinybus-sdk = { package = "tinybus", git = "https://github.com/tinyhumansai/tinybus", rev = "106eda127f8a40c0ba401efc0074667e43d4c52e", default-features = false } From 8a85f4c902f5c8e24e61df063ac5afb626660178 Mon Sep 17 00:00:00 2001 From: M3gA-Mind Date: Wed, 11 Nov 2026 17:34:00 +0530 Subject: [PATCH 2/2] deps: rustls-webpki 0.103.16 and webpki-root-certs 1.0.12 Clears RUSTSEC-2026-0382 (rustls-webpki may accept distrusted intermediates) and RUSTSEC-2026-0383 (webpki-root-certs bundles distrusted emSign intermediates). Both were already on main. The lockfile changes only these two crates. --- Cargo.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 53a37ea6..5a44b818 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1688,9 +1688,9 @@ checksum = "eec689c0bc40ff2458a5977b6619cb718087084a18e02a131c599b62d05e1a5f" [[package]] name = "rustls-webpki" -version = "0.103.15" +version = "0.103.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2" +checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281" dependencies = [ "aws-lc-rs", "ring", @@ -2867,9 +2867,9 @@ dependencies = [ [[package]] name = "webpki-root-certs" -version = "1.0.9" +version = "1.0.12" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b96554aa2acc8ccdb7e1c9a58a7a68dd5d13bccc69cd124cb09406db612a1c9b" +checksum = "293198dcebfb821155b5092ab94b5a82ff180eddd7241df3bd6e66a4ffd1a585" dependencies = [ "rustls-pki-types", ]