chore(deps): bump serde_json from 1.0.149 to 1.0.150 - #15
Closed
dependabot[bot] wants to merge 5 commits into
Closed
dependabot[bot] wants to merge 5 commits into
dependabot[bot] wants to merge 5 commits into
Conversation
dependabot
Bot
added
dependencies
- Shared: RunCommandResponse fields for truncated/timed_out/duration_ms - Agent: bounded capture with PGID tracking and output limit - Server: RunCommand-based API exec with output collection
bump server: sanitize command string before writing to audit log. Strip control characters, truncate to 512 chars to prevent log injection.
Require explicit trusted-proxy configuration, remove the example administrator login, and build the Kubernetes agent from the committed workspace lock. Helm now refuses implicit default service accounts and drops unused ConfigMap privileges. Update component pointers and prune vulnerable or unmaintained dependency paths.
dependabot
Bot
force-pushed
the
dependabot/cargo/serde_json-1.0.150
branch
from
June 30, 2026 18:13
30df629 to
49d4b48
Compare
Use the default GitHub token for public recursive submodules so Dependabot pull requests can run without repository secrets. Include the server workspace member in the Kubernetes agent image checkout and trigger paths because its manifest is required by the hardened Docker build.
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.149 to 1.0.150. - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.149...v1.0.150) --- updated-dependencies: - dependency-name: serde_json dependency-version: 1.0.150 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
sppidy
force-pushed
the
dependabot/cargo/serde_json-1.0.150
branch
from
June 30, 2026 23:44
49d4b48 to
53f447d
Compare
sppidy
force-pushed
the
main
branch
2 times, most recently
from
July 3, 2026 18:28
5c59612 to
ef35864
Compare
Contributor
Author
|
A newer version of serde_json exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
Owner
|
Superseded by #38, which includes this update and passed the consolidated validation suite. |
Contributor
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps serde_json from 1.0.149 to 1.0.150.
Release notes
Sourced from serde_json's releases.
Commits
a1ae73aRelease 1.0.1501a360b0Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys2037b63Reject non-string enum object keys5d30df6Resolve manual_assert_eq pedantic clippy lintdc8003aRaise required compiler for preserve_order feature to 1.85a42fa98Unpin CI miri toolchain684a60ePin CI miri to nightly-2026-02-117c7da33Raise required compiler to Rust 1.71acf4850Simplify Number::is_f646b8ceabResolve unnecessary_map_or clippy lint