Skip to content

Bump cached from 0.59.0 to 4.0.3 - #60

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cached-4.0.3
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cached-4.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown

Bumps cached from 0.59.0 to 4.0.3.

Release notes

Sourced from cached's releases.

cached_proc_macro-v3.0.1

What's Changed

Full Changelog: jaemk/cached@v3.1.1...cached_proc_macro-v3.0.1

cached_proc_macro-v3.0.0

What's Changed

Full Changelog: jaemk/cached@v3.0.0-rc.9...cached_proc_macro-v3.0.0

cached_proc_macro_types-v3.0.0

What's Changed

... (truncated)

Changelog

Sourced from cached's changelog.

[4.0.3] - 2026-10-18

Changed

  • Raise the minimum redis version to 1.2.3, the first release on lru 0.18. Earlier 1.x releases depend on lru 0.16, which is affected by RUSTSEC-2026-0253 (use-after-free in LruCache::pop() when a key's Drop panics), fixed in lru 0.18.2.

Added

  • CI runs cargo audit against the RustSec advisory database on every push and pull request, and weekly so new advisories surface without a code change.

[4.0.2] - 2026-10-12

Fixed

  • Fix two unit tests that failed on 32-bit targets (#330). The ExpiringCache layout test checks field types instead of comparing size_of against UnboundCache, and the LruCache::pop_raw_with_hash wrong-hash test asserts only that the cache stays consistent. No change to the published crates' behavior.

Added

  • make tests/32bit runs the test suite on i686-unknown-linux-gnu, and CI runs it. make tests/32bit/docker runs the same target in a container, with no local 32-bit toolchain needed.

[4.0.1] - 2026-10-01

Changed

  • Replace the unmaintained smartstring dev-dependency with compact_str. The macro tests still cover a third-party small-string key and value type. No change to the published crates.

[4.0.0 / cached_proc_macro 3.0.1] - 2026-09-05

Breaking Changes

  • Argument-inference breakage on the six sharded stores' inherent lookup methods (ShardedUnboundCache, ShardedLruCache, ShardedTtlCache, ShardedLruTtlCache, ShardedExpiringCache, ShardedExpiringLruCache): get, remove, remove_entry, delete, contains, and peek are all generic over the looked-up key form Q. cache.get(&k) where k: &K (for example, for k in &keys { cache.get(&k) }) previously compiled through deref coercion. It no longer does: Q unifies to &K first, and the call fails with the trait bound `String: Borrow<&String>` is not satisfied; same for k: &Box<K> and k: &Arc<K>, and the same shape applies to remove, remove_entry, delete, contains, and peek. Migration: drop the extra & (cache.get(k)), or deref explicitly (cache.get(&**boxed)). Single-owner Cached methods (e.g. LruCache::cache_get) are unchanged.
  • ShardHasher<K>'s key parameter is relaxed to ShardHasher<K: ?Sized>. Existing impls compile

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [cached](https://github.com/jaemk/cached) from 0.59.0 to 4.0.3.
- [Release notes](https://github.com/jaemk/cached/releases)
- [Changelog](https://github.com/jaemk/cached/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jaemk/cached/commits/v4.0.3)

---
updated-dependencies:
- dependency-name: cached
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 4, 2026

Copy link
Copy Markdown
Author

Superseded by #66.

@dependabot dependabot Bot closed this Nov 4, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cached-4.0.3 branch November 4, 2026 17:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants