Bump version-compare from 0.1.1 to 0.2.1

[dependabot]

Bumps version-compare from 0.1.1 to 0.2.1.

Changelog

Sourced from version-compare's changelog.

0.2.1 (2025-10-31)

• Hide cfg(tarpaulin) warning during compilation

0.2.0 (2024-03-16)

• Add manifest option to use GNU based ordering
• Implement from trait for ordering, deprecate from_ord
• Bump MSRV to 1.56.0
• Bump Rust edition to 2021

Commits

• 0c261ec Bump version to 0.2.1
• 21305cb Hide warning for tarpaulin cfg attribute in latest Rust version
• 52e754d Bump version number in README
• b789445 Bump version to 0.2.0
• d1be1b7 Bump MSRV to 1.56.0 with Rust edition 2021
• 4aa9ef9 Run CI on shared GitLab runners
• 548bd90 Make Manifest Copy
• 3f7fa15 GNU numbers are ordered differently, update GNU logic and test suite
• 896298d Disable cache in CI
• 7970fd1 Run Linux jobs on custom runner in GitLab CI
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[ev-vaultkeeper]

Dependabot review: version-compare 0.1.1 → 0.2.1

Verdict: safe to merge. No code changes required.

Usage in this repo

version-compare is used in exactly one place — crates/ev-enclave/src/docker/command.rs, in docker_buildkit_enabled() (which gates reproducible/buildx builds on docker buildkit ≥ 0.10.0):

use version_compare::Version;
let min_version  = Version::from("0.10.0").ok_or(CommandError::SemverParseError)?;
let user_version = Version::from(semver_match).ok_or(CommandError::SemverParseError)?;
Ok(user_version >= min_version)

The only API surface touched is Version::from(&str) -> Option<Version> and the PartialOrd (>=) impl on Version.

API compatibility (docs.rs 0.1.1 vs 0.2.1)

• Version::from is identical in both: pub fn from(version: &'a str) -> Option<Self>.
• PartialOrd for Version (providing >=) is present in both.
• No use of the parts of the API that changed (Cmp/CompOp, compare, compare_to, from_ord, manifests).

Changelog 0.1.1 → 0.2.1

• 0.2.0 — adds an opt-in GNU-ordering Manifest option (default ordering unchanged), implements From for ordering and deprecates from_ord (unused here), bumps MSRV to 1.56.0, and moves to Rust 2021 edition.
• 0.2.1 — hides a cfg(tarpaulin) compilation warning.

None of these affect the default comparison of plain semver strings used here. No security or performance concerns (MIT-licensed, small crate).

Build verification

cargo build -p ev-enclave and cargo build -p ev-enclave --tests both compile cleanly against 0.2.1 (only a pre-existing, unrelated pcr_signature cfg warning in the common crate). No changes were needed, so nothing was pushed to the branch.