Skip to content
This repository was archived by the owner on Apr 13, 2026. It is now read-only.

chore(deps): (deps): bump insta from 1.43.1 to 1.43.2#84

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/insta-1.43.2
Open

chore(deps): (deps): bump insta from 1.43.1 to 1.43.2#84
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/insta-1.43.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Sep 8, 2025

Bumps insta from 1.43.1 to 1.43.2.

Release notes

Sourced from insta's releases.

1.43.2

Release Notes

  • Fix panics when cargo metadata fails to execute or parse (e.g., when cargo is not in PATH or returns invalid output). Now falls back to using the manifest directory as the workspace root. #798 (@​adriangb)
  • Fix clippy uninlined_format_args lint warnings. #801
  • Changed diff line numbers to 1-based indexing. #799
  • Preserve snapshot names with INSTA_GLOB_FILTER. #786
  • Bumped libc crate to 0.2.174, fixing building on musl targets, and increasing the MSRV of insta to 1.64.0 (released Sept 2022). #784
  • Fix clippy 1.88 errors. #783
  • Fix source path in snapshots for non-child workspaces. #778
  • Add lifetime to Selector in redaction iterator. #779

Install cargo-insta 1.43.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.43.2

File Platform Checksum
cargo-insta-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
cargo-insta-x86_64-apple-darwin.tar.xz Intel macOS checksum
cargo-insta-x86_64-pc-windows-msvc.zip x64 Windows checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum
Changelog

Sourced from insta's changelog.

1.43.2

  • Fix panics when cargo metadata fails to execute or parse (e.g., when cargo is not in PATH or returns invalid output). Now falls back to using the manifest directory as the workspace root. #798 (@​adriangb)
  • Fix clippy uninlined_format_args lint warnings. #801
  • Changed diff line numbers to 1-based indexing. #799
  • Preserve snapshot names with INSTA_GLOB_FILTER. #786
  • Bumped libc crate to 0.2.174, fixing building on musl targets, and increasing the MSRV of insta to 1.64.0 (released Sept 2022). #784
  • Fix clippy 1.88 errors. #783
  • Fix source path in snapshots for non-child workspaces. #778
  • Add lifetime to Selector in redaction iterator. #779
Commits
  • 01fc57f Fix Windows runner configuration for releases
  • 88c9a2f Prepare CHANGELOG for 1.43.2 release (#802)
  • d03c2a6 Improve error handling for cargo workspace detection (#800)
  • 55987ac Fix clippy uninlined_format_args lint warnings (#801)
  • ae26e81 Change diff line numbers to 1-based indexing (#799)
  • 26efb60 Release insta 1.43.2 (#791)
  • 7793782 Preserve snapshot names with INSTA_GLOB_FILTER (#786)
  • 1d6e0c7 chore: bump libc crate (#784)
  • 1a17ea9 chore: fix clippy 1.88 errors (#783)
  • 7d0de48 Fix source path in snapshots for non-child workspaces (#778)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [insta](https://github.com/mitsuhiko/insta) from 1.43.1 to 1.43.2.
- [Release notes](https://github.com/mitsuhiko/insta/releases)
- [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md)
- [Commits](mitsuhiko/insta@1.43.1...1.43.2)

---
updated-dependencies:
- dependency-name: insta
  dependency-version: 1.43.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies rust Auto-created for Rust migration labels Sep 8, 2025
@dependabot dependabot Bot requested a review from unclesp1d3r as a code owner September 8, 2025 06:49
@dependabot dependabot Bot added rust Auto-created for Rust migration dependencies labels Sep 8, 2025
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Sep 8, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@unclesp1d3r unclesp1d3r force-pushed the dependabot/cargo/insta-1.43.2 branch from a8f4140 to 9609648 Compare February 25, 2026 06:06
Comment thread .github/workflows/ci.yml
Comment on lines +16 to +43
if: github.event_name == 'pull_request'
name: Semantic PR Title
runs-on: ubuntu-latest
steps:
- uses: amannn/action-semantic-pull-request@v6
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
types: |
feat
fix
docs
style
refactor
perf
test
build
ci
chore
requireScope: false
subjectPattern: ^(?![A-Z]).+$
subjectPatternError: |
The subject "{subject}" found in the pull request title "{title}"
doesn't match the configured pattern. Please ensure that the subject
doesn't start with an uppercase character.

# Linting and security job
lint:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}
Comment thread .github/workflows/ci.yml
name: Semantic PR Title
runs-on: ubuntu-latest
steps:
- uses: amannn/action-semantic-pull-request@v6

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'CI' step
Uses Step
uses 'amannn/action-semantic-pull-request' with ref 'v6', not a pinned commit hash
Comment thread .github/workflows/ci.yml
Comment on lines +44 to +78
name: Lint and Security
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v5

- name: Setup Rust
uses: dtolnay/rust-toolchain@stable
with:
components: clippy, rustfmt

- name: Cache Rust dependencies
uses: Swatinem/rust-cache@v2
with:
key: lint-${{ hashFiles('**/Cargo.toml') }}

- name: Check formatting
run: cargo fmt --all -- --check

- name: Run clippy
run: cargo clippy --all-targets --all-features -- -D warnings

- name: Install cargo-audit
run: cargo install cargo-audit

- name: Run security audit
run: cargo audit

- name: Install cargo-deny
run: cargo install cargo-deny

- name: Run cargo-deny checks
run: cargo deny check

test-and-coverage:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
Comment thread .github/workflows/ci.yml
uses: actions/checkout@v5

- name: Setup Rust
uses: dtolnay/rust-toolchain@stable

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'CI' step
Uses Step
uses 'dtolnay/rust-toolchain' with ref 'stable', not a pinned commit hash
Comment thread .github/workflows/ci.yml
components: clippy, rustfmt

- name: Cache Rust dependencies
uses: Swatinem/rust-cache@v2

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'CI' step
Uses Step
uses 'Swatinem/rust-cache' with ref 'v2', not a pinned commit hash
Comment thread .github/workflows/ci.yml
retention-days: 30

- name: Upload coverage to Codecov
uses: codecov/codecov-action@v5

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'CI' step
Uses Step
uses 'codecov/codecov-action' with ref 'v5', not a pinned commit hash
Comment thread .github/workflows/ci.yml
Comment on lines +153 to +220
name: Benchmarks
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v5
with:
fetch-depth: 0

- name: Setup Rust
uses: dtolnay/rust-toolchain@stable

- name: Cache Rust dependencies
uses: Swatinem/rust-cache@v2
with:
key: bench-${{ hashFiles('**/Cargo.toml') }}

- name: Run benchmarks
run: cargo bench --benches --quiet
env:
CARGO_TERM_COLOR: never
TERM: dumb

# Note: Benchmark comparison removed due to cargo bench compatibility issues
# For PR benchmark comparison, use the HTML reports in artifacts

- name: Track benchmark performance (main/develop)
if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/develop')
uses: rhysd/github-action-benchmark@v1
with:
tool: "criterion"
output-file-path: "target/criterion/*/base/estimates.json"
github-token: ${{ secrets.GITHUB_TOKEN }}
auto-push: true
comment-on-alert: true
alert-threshold: "150%"
fail-on-alert: false
max-items-in-chart: 100

- name: Upload Criterion HTML reports as artifacts
uses: actions/upload-artifact@v4
if: always()
with:
name: criterion-html-reports-${{ github.sha }}
path: target/criterion/
retention-days: 30
if-no-files-found: warn

- name: Comment on PR with benchmark results
if: github.event_name == 'pull_request'
uses: actions/github-script@v7
with:
script: |
const comment = `## Benchmark Results

Benchmarks completed for commit \`${{ github.sha }}\`.

**Detailed HTML Reports**: Download the [criterion-html-reports-${{ github.sha }}](https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}) artifact and open \`target/criterion/report/index.html\` in your browser.

**Performance Analysis**: Review the HTML reports to compare performance with previous runs. The reports include statistical analysis and performance trends.

> **Note**: Artifacts are available for 30 days. For detailed performance comparison, download the HTML reports and review the statistical analysis.`;

github.rest.issues.createComment({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
body: comment
});

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
Comment thread .github/workflows/ci.yml
fetch-depth: 0

- name: Setup Rust
uses: dtolnay/rust-toolchain@stable

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'CI' step
Uses Step
uses 'dtolnay/rust-toolchain' with ref 'stable', not a pinned commit hash
Comment thread .github/workflows/ci.yml
uses: dtolnay/rust-toolchain@stable

- name: Cache Rust dependencies
uses: Swatinem/rust-cache@v2

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'CI' step
Uses Step
uses 'Swatinem/rust-cache' with ref 'v2', not a pinned commit hash
Comment thread .github/workflows/ci.yml

- name: Track benchmark performance (main/develop)
if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/develop')
uses: rhysd/github-action-benchmark@v1

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'CI' step
Uses Step
uses 'rhysd/github-action-benchmark' with ref 'v1', not a pinned commit hash
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies rust Auto-created for Rust migration

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant