[PR #265] [MERGED] chore(deps): bump proc-macro2 from 1.0.46 to 1.0.47 #831

Closed
opened 2026-01-05 14:53:07 +01:00 by adam · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/LGUG2Z/komorebi/pull/265
Author: @dependabot[bot]
Created: 10/17/2022
Status: Merged
Merged: 10/17/2022
Merged by: @LGUG2Z

Base: masterHead: dependabot/cargo/proc-macro2-1.0.47


📝 Commits (1)

  • 316f2f4 chore(deps): bump proc-macro2 from 1.0.46 to 1.0.47

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 Cargo.lock (+2 -2)

📄 Description

Bumps proc-macro2 from 1.0.46 to 1.0.47.

Release notes

Sourced from proc-macro2's releases.

1.0.47

  • Fix integer overflow when nesting depth of nested comments exceeds 4 billion (#357)
Commits
  • 47c91c8 Release 1.0.47
  • c694208 Make i's inferred type explicit to be consistent with depth
  • 46e9bd6 Merge pull request #358 from dtolnay/depth
  • 5635f1b Fix integer overflow in nested comment parser
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/LGUG2Z/komorebi/pull/265 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 10/17/2022 **Status:** ✅ Merged **Merged:** 10/17/2022 **Merged by:** [@LGUG2Z](https://github.com/LGUG2Z) **Base:** `master` ← **Head:** `dependabot/cargo/proc-macro2-1.0.47` --- ### 📝 Commits (1) - [`316f2f4`](https://github.com/LGUG2Z/komorebi/commit/316f2f44304283d520f3f08be3c8cc230574ab71) chore(deps): bump proc-macro2 from 1.0.46 to 1.0.47 ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `Cargo.lock` (+2 -2) </details> ### 📄 Description Bumps [proc-macro2](https://github.com/dtolnay/proc-macro2) from 1.0.46 to 1.0.47. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/proc-macro2/releases">proc-macro2's releases</a>.</em></p> <blockquote> <h2>1.0.47</h2> <ul> <li>Fix integer overflow when nesting depth of nested comments exceeds 4 billion (<a href="https://github-redirect.dependabot.com/dtolnay/proc-macro2/issues/357">#357</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/proc-macro2/commit/47c91c8525088a055bbfec5df6ea4cd131d01504"><code>47c91c8</code></a> Release 1.0.47</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/c6942085ffd75b72ea119cdd318cb55f4db40c15"><code>c694208</code></a> Make i's inferred type explicit to be consistent with depth</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/46e9bd6b7ee5201acd9ebbe077cfe53f4adbfc74"><code>46e9bd6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dtolnay/proc-macro2/issues/358">#358</a> from dtolnay/depth</li> <li><a href="https://github.com/dtolnay/proc-macro2/commit/5635f1b0ad28651afd70b34599c4740e4d7ed438"><code>5635f1b</code></a> Fix integer overflow in nested comment parser</li> <li>See full diff in <a href="https://github.com/dtolnay/proc-macro2/compare/1.0.46...1.0.47">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=proc-macro2&package-manager=cargo&previous-version=1.0.46&new-version=1.0.47)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
adam added the pull-request label 2026-01-05 14:53:07 +01:00
adam closed this issue 2026-01-05 14:53:07 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/komorebi#831