Bump noyalib from 0.0.32 to 0.0.34

[dependabot]

Bumps noyalib from 0.0.32 to 0.0.34.

Release notes

Sourced from noyalib's releases.

noyalib v0.0.34

What's Changed

• chore(release): date the v0.0.34 CHANGELOG heading (8ebd901)
• ci(dependabot): drop the orphaned docker tail and the removed npm wrapper block (8aa1bcc)
• deps(docker)(deps): bump taiki-e/install-action (5920db3)
• chore(vet): exemptions for the dependabot bumps (e9cb5cc)
• deps(docker)(deps): bump the actions group with 2 updates (7025157)
• deps(cargo): bump indexmap to 2.14.1 (dependabot #401) (d312658)
• deps(cargo): bump jsonschema to 0.52.1 (dependabot #400) (5ce18a6)
• deps(cargo): bump smallvec to 1.16.0 (dependabot #399) (b25aa89)
• deps(cargo): bump sval to 2.22.0 (dependabot #398) (a7b68d9)
• deps(cargo)(deps): bump serde-saphyr in the serde group (03bcec7)
• ci: add the shared yaml-test-suite conformance workflow for the family (4b0b9f5)
• ci(miri): restore the required check's exact job name (39d43aa)
• ci(security): the targeted scan can upload against a pull-request ref (d4a2e06)
• ci(security): dispatch CodeQL at a named commit (be45083)
• ci(gates): doc links on every push; the version gate reads docs/ snippets (a1a2c8e)
• docs(ecosystem): the layout contract covers the family files; a table of where each crate is published (1226a7a)
• chore(pkg): drop the dead CLI Dockerfile; the image lives with noya-cli (2715692)
• ci(miri): no alloc-only leg; REUSE covers the alloc-only regressions (41ddc29)
• docs(ecosystem): scorecard snapshot for the v0.0.33 family (bac51b7)
• ci(security): CodeQL on feat/** pushes and pull requests (472455b)
• feat(value): arbitrary feature with Arbitrary for the public value types (edd1608)
• test(reliability): property tests, structure-aware and alloc-only fuzzing, Miri legs (80fa51d)
• fix(parser): an unterminated verbatim tag is refused (88741cb)
• chore(version): the branch carries 0.0.34 from the start (7256b35)

Checksums

64fc9f369704e59c61974317ffb158d47b25108e4d1c541dcd66c52263dcf44d  ./noyalib-0.0.34.crate

noyalib v0.0.33

What's Changed

• docs(migration): refresh the seven per-crate guides against crates.io and docs.rs today (69dce89)
• test(conformance): the report scores streams through load_all_as; the suite gates at zero failures (9ecf558)
• docs(ecosystem): five satellites, not four (406b90f)
• docs(migration): lead with the noyalib-serde-yaml rename; refresh the crate table (c3fd2d2)
• ci(scorecard): cargo-vet from source, lockstep N/A until the core is tagged (2a396a8)
• ci(scorecard): measure the matching satellite branch, show failing probe logs (940b712)
• perf(loader): stop the key-collision check allocating per key and per mapping (22950ee)
• ci(gates): beta in the test matrix, a scorecard workflow, README Requirements (352dba7)
• docs(layout): docs/ is the single documentation root (36424b4)
• chore(release): date the v0.0.33 CHANGELOG heading (ab0123d)
• test(error): match the located duplicate-key and collision variants (d65f82a)
• chore(version): CITATION.cff to 0.0.33 (6d7f01d)
• chore(version): the branch carries its own version from the start (ebe8c30)
• feat(error): locate duplicate keys and key collisions with their path (47daa3a)

... (truncated)

Changelog

Sourced from noyalib's changelog.

[v0.0.34] - 2026-09-05

Added (family)

• The official YAML test suite runs through every companion crate's own entry point. A shared yaml-test-suite workflow checks the vendored suite out at the pinned core commit and runs each satellite's tests/yaml_test_suite.rs: the CLI's exit code, the language server's diagnostics, the MCP tool result, the serde_yaml shim and the WebAssembly JSON model. Its first run found and fixed two defects (a false "more than one document" error in noyalib-lsp, an implicit-null value reported as missing by noyalib-mcp).
• Dependabot bumps folded in: serde-saphyr 1.2.0, sval 2.22.0, smallvec 1.16.0, jsonschema 0.52.1, indexmap 2.14.1 and the pinned actions groups, with cargo-vet exemptions regenerated.

Changed

• Two regression gates run on every push in every family repo. The shared docs-lint workflow checks that every relative documentation link resolves (it ran only in the Pages deploy on main before, so a link that resolved on a maintainer's disk merged and broke a deploy), and scripts/verify-release-versions.sh reads the install snippets under docs/ as well as the READMEs (three pages carried snippets the gate never read).
• The family layout contract covers the community files, the citation record, the agent invariants, the devcontainer, the manual, the version gate, and the seed corpus. Every satellite carries them since 2026-09-05; docs/ECOSYSTEM.md gains a table of where each crate is published (crates.io, npm, ghcr.io).

Removed

• pkg/docker/Dockerfile.full. It built the CLI binaries from monorepo paths that no longer exist, and the noyafmt and noyalib images it once produced (last built at v0.0.8) are deleted from GHCR. The CLI image is published by noya-cli as ghcr.io/sebastienrousseau/noya-cli; the MCP image by noyalib-mcp.

Fixed

• The Dependabot configuration was broken in two ways: the docker block's trailer had survived the Dockerfile removal and, as a duplicate key, relabelled every github-actions PR deps(docker); the npm block pointed at pkg/npm-mcp-wrapper, which lives in noyalib-mcp now, so every Dependabot run errored. Both removed.
• CodeQL runs on feat/** pushes and pull requests, not only on main, so a commit that reaches main through a release branch is scanned; OpenSSF Scorecard's SAST check had flagged commits merged into feat/v0.0.33 as unscanned.

... (truncated)

Commits

• ba78405 Merge pull request #406 from sebastienrousseau/feat/v0.0.34
• 8ebd901 chore(release): date the v0.0.34 CHANGELOG heading
• c28cba2 Merge pull request #404 from sebastienrousseau/feat/v0.0.34
• 8aa1bcc ci(dependabot): drop the orphaned docker tail and the removed npm wrapper block
• 5920db3 deps(docker)(deps): bump taiki-e/install-action
• e9cb5cc chore(vet): exemptions for the dependabot bumps
• 7025157 deps(docker)(deps): bump the actions group with 2 updates
• d312658 deps(cargo): bump indexmap to 2.14.1 (dependabot #401)
• 5ce18a6 deps(cargo): bump jsonschema to 0.52.1 (dependabot #400)
• b25aa89 deps(cargo): bump smallvec to 1.16.0 (dependabot #399)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #551.