Skip to content

chore(deps): bump schemaui from 0.12.3 to 0.12.4 - #5695

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/schemaui-0.12.4
Open

chore(deps): bump schemaui from 0.12.3 to 0.12.4#5695
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/schemaui-0.12.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor

Bumps schemaui from 0.12.3 to 0.12.4.

Release notes

Sourced from schemaui's releases.

schemaui-v0.12.4

Bug Fixes

Documentation

Contributors

Changelog

Sourced from schemaui's changelog.

0.12.4 - 2026-08-13

Bug Fixes

Documentation

Contributors

Commits
  • cdcc7bc chore: sync README and CLI dependency to 0.12.4
  • c29d79b chore: release
  • 4b4c71b Merge pull request #163 from YuniqueUnic/fix/toml-preview-null
  • db4aa98 fix: omit object nulls in TOML preview
  • 6023bd6 build(deps): bump taiki-e/install-action from 2.82.5 to 2.85.2
  • 2e5fb59 build(deps): bump taiki-e/setup-cross-toolchain-action
  • 5a4f704 build(deps): bump actions-rust-lang/setup-rust-toolchain
  • 8a23e28 docs: clarify CLI/Web surfaces and add Web UI screenshot
  • f470ba6 chore: sync package manager manifests for schemaui-cli-v0.7.5
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 28, 2026
@dependabot
dependabot Bot requested a review from Hmbown as a code owner August 28, 2026 21:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 28, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Thanks @dependabot[bot] for taking the time to contribute.

This repository is observing a maintainer-managed PR intake gate in dry-run mode, so this pull request is staying open. This note helps maintainers prepare the allowlist before any enforcement is considered.

Please read CONTRIBUTING.md for the expected contribution shape. A maintainer can grant recurring PR access by commenting /lgtm on a pull request.

@codewhale-agent codewhale-agent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Codewhale review

This Dependabot PR updates the schemaui crate from 0.12.3 to 0.12.4 in Cargo.lock. The upstream release is a patch-level bug fix that omits null-valued objects in TOML preview output, plus documentation/CI housekeeping. No new dependencies are introduced and no code changes are included in the PR.

Findings

  • [INFO] Only Cargo.lock was updated; confirm manifest version constraint (Cargo.toml)
    The diff does not include a Cargo.toml change. If schemaui is a direct dependency, verify that its declared version requirement still permits 0.12.4 (e.g. "0.12" or "0.12.3" with caret semantics). If the project intentionally pins the exact version, Cargo.toml should also be updated.
  • [WARNING] TOML preview output may change
    schemaui 0.12.4 includes a bug fix that omits object nulls in TOML preview. If CodeWhale uses schemaui's preview functionality, rendered output may change for configurations that previously included null-valued objects. Existing snapshot or golden-file tests may need to be updated, and the new behavior should be verified as intended.

Suggestions

  • Run the full test suite, especially any tests covering schemaui or TOML preview snapshots, before merging this dependency bump.
  • Cargo.toml — If schemaui is a direct dependency, consider making the minimum version explicit by updating the requirement to "0.12.4" or "^0.12.4".
  • Add or update a regression test for TOML preview with null object fields to document the new omission behavior and prevent accidental regressions.

Assessment

Low-risk patch-level dependency bump. No blocking issues found, but the TOML preview behavior change should be verified against existing tests before merging.


Advisory review by Codewhale (codewhale review --pr 5695 --post, head c0139b0565a8a5c1d6beddb6db317853c58d4596). Line-specific findings are also posted as inline review comments. CODEOWNERS approval still governs merge.

@Hmbown

Hmbown commented Aug 29, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/cargo/schemaui-0.12.4 branch from c0139b0 to 6c3ccbd Compare August 29, 2026 18:09
@Hmbown

Hmbown commented Aug 29, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/cargo/schemaui-0.12.4 branch from 6c3ccbd to 9f3fca9 Compare August 29, 2026 19:22
@Hmbown

Hmbown commented Aug 30, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

Maintainer note: both reds on this PR (Test macos-latest and Test windows-latest, run 33270725867) are the six sandbox::read_guard tests plus root_parent_traversal_does_not_escape_above_root — the pre-#5724 baseline on 20e957406, not anything in this bump. #5724 (merge 8a3f14bf8) fixed exactly that set on main, and main's latest completed CI run (33324284899 on 977a647bd) has the full Test matrix green. The bump itself is Cargo.lock-only, and schemaui 0.12.4 still pins jsonschema ^0.46, so it stays in step with the workspace pin in Cargo.toml. Rebasing onto current main should clear both legs; will merge on green.

Bumps [schemaui](https://github.com/yuniqueunic/schemaui) from 0.12.3 to 0.12.4.
- [Release notes](https://github.com/yuniqueunic/schemaui/releases)
- [Changelog](https://github.com/YuniqueUnic/schemaui/blob/main/CHANGELOG.md)
- [Commits](YuniqueUnic/schemaui@schemaui-v0.12.3...schemaui-v0.12.4)

---
updated-dependencies:
- dependency-name: schemaui
  dependency-version: 0.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/schemaui-0.12.4 branch from 9f3fca9 to 3c5e1b0 Compare August 30, 2026 18:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant