[PR #265] [MERGED] chore(deps): bump proc-macro2 from 1.0.46 to 1.0.47 #831

New Issue

2026-01-05T14:53:07+01:00

adam commented

2026-01-05 14:53:07 +01:00

📋 Pull Request Information

Original PR: https://github.com/LGUG2Z/komorebi/pull/265
Author: @dependabot[bot]
Created: 10/17/2022
Status: ✅ Merged
Merged: 10/17/2022
Merged by: @LGUG2Z

Base: master ← Head: dependabot/cargo/proc-macro2-1.0.47

📝 Commits (1)

316f2f4 chore(deps): bump proc-macro2 from 1.0.46 to 1.0.47

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 Cargo.lock (+2 -2)

📄 Description

Bumps proc-macro2 from 1.0.46 to 1.0.47.

Release notes

Sourced from proc-macro2's releases.

1.0.47

Fix integer overflow when nesting depth of nested comments exceeds 4 billion (#357)

Commits

47c91c8 Release 1.0.47
c694208 Make i's inferred type explicit to be consistent with depth
46e9bd6 Merge pull request #358 from dtolnay/depth
5635f1b Fix integer overflow in nested comment parser
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/LGUG2Z/komorebi/pull/265 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 10/17/2022 **Status:** ✅ Merged **Merged:** 10/17/2022 **Merged by:** [@LGUG2Z](https://github.com/LGUG2Z) **Base:** `master` ← **Head:** `dependabot/cargo/proc-macro2-1.0.47` --- ### 📝 Commits (1) - [`316f2f4`](https://github.com/LGUG2Z/komorebi/commit/316f2f44304283d520f3f08be3c8cc230574ab71) chore(deps): bump proc-macro2 from 1.0.46 to 1.0.47 ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `Cargo.lock` (+2 -2) </details> ### 📄 Description Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.46 to 1.0.47. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/proc-macro2/releases">proc-macro2's releases</a>.</em></p> <blockquote> <h2>1.0.47</h2> <ul> <li>Fix integer overflow when nesting depth of nested comments exceeds 4 billion (<a href="https://github-redirect.dependabot.com/dtolnay/proc-macro2/issues/357">#357</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/proc-macro2/commit/47c91c8525088a055bbfec5df6ea4cd131d01504"><code>47c91c8</code></a> Release 1.0.47</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/c6942085ffd75b72ea119cdd318cb55f4db40c15"><code>c694208</code></a> Make i's inferred type explicit to be consistent with depth</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/46e9bd6b7ee5201acd9ebbe077cfe53f4adbfc74"><code>46e9bd6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dtolnay/proc-macro2/issues/358">#358</a> from dtolnay/depth</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/5635f1b0ad28651afd70b34599c4740e4d7ed438"><code>5635f1b</code></a> Fix integer overflow in nested comment parser</li> <li>See full diff in <a href="https://github.com/dtolnay/proc-macro2/compare/1.0.46...1.0.47">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=proc-macro2&package-manager=cargo&previous-version=1.0.46&new-version=1.0.47)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

adam added the pull-request label 2026-01-05 14:53:07 +01:00

adam closed this issue

2026-01-05 14:53:07 +01:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/komorebi#831