Skip to content

chore(deps): bump tree-sitter from 0.25.10 to 0.26.12 - #1016

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/tree-sitter-0.26.11
Open

chore(deps): bump tree-sitter from 0.25.10 to 0.26.12#1016
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/tree-sitter-0.26.11

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps tree-sitter from 0.25.10 to 0.26.12.

Release notes

Sourced from tree-sitter's releases.

v0.26.12

What's Changed

Full Changelog: tree-sitter/tree-sitter@v0.26.11...v0.26.12

v0.26.11

What's Changed

Full Changelog: tree-sitter/tree-sitter@v0.26.10...v0.26.11

v0.26.10

What's Changed

Full Changelog: tree-sitter/tree-sitter@v0.26.9...v0.26.10

v0.26.9

... (truncated)

Commits
  • 808e4b1 release v0.26.12
  • 7566ffa fix(lib): continue search for later named siblings in
  • 4b7e2c9 fix(generate): honor right associativity despite a lower-precedence shift
  • 3ee7c63 fix(parser): restart recovery for invalid tokens in the error state
  • fd0ccd6 fix(highlight): use std::sync::OnceCell for various loader fields
  • 8df22e6 fix(init): don't lowercase repository url
  • c02f324 fix(cli): init --update should not update setup.py after replacing it (#5...
  • f9b9b39 fix(templates): replace deprecated method in Package.swift
  • 0938423 fix(templates): add C source files to Python sdist
  • 5ccdbb6 fix(query): transfer a leading boundary anchor across a zero-matched quantifier
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@socket-security

socket-security Bot commented Aug 12, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcargo/​tree-sitter@​0.25.10 ⏵ 0.26.1258 +210093100100

View full report

@github-actions

Copy link
Copy Markdown
Contributor

This PR changes mirrored Maestro source files in the public repo, but it does not link the matching private source-of-truth PR.

Add one of these to the PR body, then re-run the check:

  • https://github.com/evalops/maestro-internal/pull/<number>
  • evalops/maestro-internal#<number>
  • maestro-internal#<number>

Mirrored files touched:

  • Cargo.lock
  • Cargo.toml

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a4f1a99975

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread Cargo.toml
x509-parser = "0.18"
zip = { version = "8", default-features = false, features = ["aes-crypto", "deflate64", "deflate", "lzma", "ppmd", "time", "zstd", "xz"] }
tree-sitter = "0.25"
tree-sitter = "0.26"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Migrate the parser timeout before upgrading tree-sitter

With this dependency bump, the lockfile resolves tree-sitter to 0.26.12, whose Rust Parser API no longer exposes set_timeout_micros; however packages/tui-rs/src/safety/bash_analyzer.rs still calls parser.set_timeout_micros(50_000). In any CI/job that compiles maestro-tui with the updated lockfile, such as the existing cargo clippy --workspace --all-targets --locked lanes, the workspace will fail to build until that call is migrated to ParseOptions/parse_with_options or the dependency stays on 0.25.

Useful? React with 👍 / 👎.

Comment thread Cargo.toml
x509-parser = "0.18"
zip = { version = "8", default-features = false, features = ["aes-crypto", "deflate64", "deflate", "lzma", "ppmd", "time", "zstd", "xz"] }
tree-sitter = "0.25"
tree-sitter = "0.26"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Move the dependency bump to the mirror source

This changes a source dependency directly in the generated public mirror. The repository guidance says public-facing source changes should originate in evalops/maestro-internal and arrive through the protected mirror workflow, so landing the bump here creates drift that can be overwritten and bypasses the source-of-truth validation path; please make this update in the internal repo and mirror it back.

Useful? React with 👍 / 👎.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/tree-sitter-0.26.11 branch from a4f1a99 to 4270b8e Compare August 12, 2026 17:57
@dependabot dependabot Bot changed the title chore(deps): bump tree-sitter from 0.25.10 to 0.26.11 chore(deps): bump tree-sitter from 0.25.10 to 0.26.12 Aug 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/tree-sitter-0.26.11 branch from 4270b8e to a191a2f Compare August 16, 2026 04:48
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/tree-sitter-0.26.11 branch from a191a2f to 8a5014f Compare August 16, 2026 06:39
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

Bumps [tree-sitter](https://github.com/tree-sitter/tree-sitter) from 0.25.10 to 0.26.12.
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](tree-sitter/tree-sitter@v0.25.10...v0.26.12)

---
updated-dependencies:
- dependency-name: tree-sitter
  dependency-version: 0.26.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/tree-sitter-0.26.11 branch from 8a5014f to dc4cfff Compare August 17, 2026 18:19
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants