Skip to content

Bump yaml-rust2 from 0.9.0 to 0.12.0 - #786

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/yaml-rust2-0.12.0
Open

Bump yaml-rust2 from 0.9.0 to 0.12.0#786
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/yaml-rust2-0.12.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps yaml-rust2 from 0.9.0 to 0.12.0.

Release notes

Sourced from yaml-rust2's releases.

v0.10.4

  • Parse True, TRUE, False and FALSE as bools instead of strings. This is in line with the core schema.
  • Fixed build with --no-default-features (#60)

v0.10.3

Changes

  • Exclude yaml-test-suite from the Cargo package. This reverts the license changes from last version.
  • 399f481: Bump libtest-mimic from dev-dependencies

v0.10.2

Bug fixes

  • Parse (?i)[+-]?(?:inf|infinity|nan) as strings instead of floats

Changes

  • Merge license files and respect yaml-test-suite MIT license. This means we now correctly state that this crate can not be licensed under only the Apache-2.0 license.

Please review your license requirement following this release.

v0.10.1

Bug fixes

  • Parse .NaN as float instead of NaN.

v0.10.0

Breaking Changes

  • Update dependencies. hashlink had a bogus requirement of >= 0.8, < 0.10, sorry. As mentioned here, range requirements shouldn't be used and I haven't been vigilant enough when reviewing. The requirement is now set to 0.10.

Changes

  • Force quotes on y and n to appease the YAML 1.1 lords.
Changelog

Sourced from yaml-rust2's changelog.

v0.12.0

Changes:

  • The minimum supported Rust version is now v1.85.0.
  • hashlink was upgraded to v0.12.1.
  • quickcheck (dev-only dependency) was upgraded to v1.1.0.
  • toml (dev-only dependency) was upgraded to v1.1.4.
  • (#79) corrected the documentation for Marker::index.

v0.11.1

Changes:

  • (#78) Fix parsing short YAML documents to avoid infinite loops.

v0.11.0

Changes:

  • The actions/checkout github actions dependency was updated.
  • The hashlink dependency was updated to v0.11.

v0.10.4

Bug fixes:

  • Parse True, TRUE, False and FALSE as bools instead of strings. This is in line with the core schema.

v0.10.3

Changes:

  • Exclude yaml-test-suite from the Cargo package. This reverts the license changes from last version.
  • 399f481: Bump libtest-mimic from dev-dependencies

v0.10.2

Bug fixes:

  • Parse (?i)[+-]?(?:inf|infinity|nan) as strings instead of floats

Changes:

  • Merge license files and respect yaml-test-suite MIT license. This means we now correctly state that this crate can not be licensed under only the Apache-2.0 license.

v0.10.1

Bug fixes:

  • Parse .NaN as float instead of NaN.

... (truncated)

Commits
  • 0ed0fc7 yaml-rust v0.12.0
  • 0534dad scanner: correct the docstring that referenced chars
  • 3088af9 Merge pull request #77 from renovate/actions-checkout-7.x
  • 37d313f deps: upgrade hashlink to v0.12.1
  • 5cbacee bench_compare: update toml to v1.1.4
  • 1fc3b71 cargo: update quickcheck to v1.1.0
  • 69a602d scanner: apply clippy fixes
  • fd9acf6 cargo: bump the MSRV to 1.74.0
  • 8316be6 yaml-rust2 v0.11.1
  • 4d61e99 CHANGELOG: update for v0.11.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [yaml-rust2](https://github.com/Ethiraric/yaml-rust2) from 0.9.0 to 0.12.0.
- [Release notes](https://github.com/Ethiraric/yaml-rust2/releases)
- [Changelog](https://github.com/Ethiraric/yaml-rust2/blob/master/CHANGELOG.md)
- [Commits](Ethiraric/yaml-rust2@v0.9.0...v0.12.0)

---
updated-dependencies:
- dependency-name: yaml-rust2
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

Copy link
Copy Markdown

Benchmark comparison (master → PR)

no benchmark comparisons to show

Threshold: p95 regression ≥ +10% fails this check.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants