build(deps): bump cpal from 0.15.3 to 0.17.3 in /codex-rs

[dependabot]

Bumps cpal from 0.15.3 to 0.17.3.

Release notes

Sourced from cpal's releases.

cpal 0.17.3

Changed

• Reverted SemVer-breaking DeviceBusy error variant addition.

Fixed

• ASIO: Fix linker errors.

cpal 0.17.2

This release was yanked.

Added

• DeviceBusy error variant for retriable device access errors (EBUSY, EAGAIN).
• ALSA: Debug implementations for Host, Device, Stream, and internal types.
• ALSA: Example demonstrating ALSA error suppression during enumeration.
• WASAPI: Enable as-necessary resampling in the WASAPI server process.

Changed

• Bump overall MSRV to 1.78.
• ALSA: Update alsa dependency to 0.11.
• ALSA: Bump MSRV to 1.82.
• CoreAudio: Update core-audio-rs dependency to 0.14.

Fixed

• ALSA: Enumerating input and output devices no longer interferes with each other.
• ALSA: Device handles are no longer exclusively held between operations.
• ALSA: Reduce Valgrind memory leak reports from ALSA global configuration cache.
• ALSA: Fix possible race condition on drop.
• ALSA: Fix audio callback stalling when start threshold is not met.

cpal 0.17.1

Added

• ALSA: Default implementation for Device (returns the ALSA "default" device).
• CI: Checks default/no-default/all feature sets with platform-dependent MSRV for JACK.

Fixed

• ALSA: Device enumeration now includes both hints and physical cards.
• JACK: No longer builds on iOS.
• WASM: WasmBindgen no longer crashes (regression from 0.17.0).

Changed

• ALSA: Devices now report direction from hint metadata and physical hardware probing.

... (truncated)

Changelog

Sourced from cpal's changelog.

[0.17.3] - 2026-02-18

Changed

• Reverted SemVer-breaking DeviceBusy error variant addition.

Fixed

• ASIO: Fix linker errors.

[0.17.2] - 2026-02-08 [YANKED]

Added

• DeviceBusy error variant for retriable device access errors (EBUSY, EAGAIN).
• ALSA: Debug implementations for Host, Device, Stream, and internal types.
• ALSA: Example demonstrating ALSA error suppression during enumeration.
• ALSA: Support for native DSD playback.
• WASAPI: Enable as-necessary resampling in the WASAPI server process.

Changed

• Bump overall MSRV to 1.78.
• ALSA: Update alsa dependency to 0.11.
• ALSA: Bump MSRV to 1.82.
• CoreAudio: Update core-audio-rs dependency to 0.14.

Fixed

• ALSA: Enumerating input and output devices no longer interferes with each other.
• ALSA: Device handles are no longer exclusively held between operations.
• ALSA: Reduce Valgrind memory leak reports from ALSA global configuration cache.
• ALSA: Fix possible race condition on drop.
• ALSA: Fix audio callback stalling when start threshold is not met.

[0.17.1] - 2026-01-04

Added

• ALSA: Default implementation for Device (returns the ALSA "default" device).
• CI: Checks default/no-default/all feature sets with platform-dependent MSRV for JACK.

Changed

• ALSA: Devices now report direction from hint metadata and physical hardware probing.

Fixed

• ALSA: Device enumeration now includes both hints and physical cards.
• JACK: No longer builds on iOS.

... (truncated)

Commits

• fd3b945 chore: update asio-sys v0.2.6 release date
• af2e2ec fix(asio): link with advapi32 and bump asio-sys to 0.2.6 (#1105)
• 51f0b85 chore: revert SemVer-breaking DeviceBusy error variant (#1102)
• 5cceb49 chore: prepare for v0.17.2 release
• 0bd7fce refactor: simplify asio check
• e7ac140 chore: update coreaudio-rs to 0.14
• 906f3ff refactor: fix clippy lints
• 0e0858e fix(alsa): stalling callbacks when start threshold is not met
• 6627959 feat(wasapi): enable resampling when necessary (#1097)
• 8cc1006 docs: update changelog
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[nuntius-review]

Vesper

Reviewed commits

Commit	Summary
f2e7ae2	build(deps): bump cpal from 0.15.3 to 0.17.3 in /codex-rs

An analysis of the dependency updates in Cargo.lock reveals several key improvements and potential compatibility considerations:

1. Performance & Build Times (macOS)

• Removal of bindgen: The update of coreaudio-rs (from 0.11.3 to 0.14.2) and cpal (from 0.15.3 to 0.17.3) replaces coreaudio-sys (which relied on bindgen to generate bindings at build time) with the modern objc2 ecosystem (objc2-core-audio, objc2-audio-toolbox, etc.).
• Impact: This is a major improvement. It eliminates the requirement for libclang to be installed on the host system during compilation, significantly speeding up build times and reducing build failures on macOS.

2. Correctness & API Compatibility

• Breaking Changes in cpal: Upgrading cpal from 0.15 to 0.17 spans two major version bumps. If the codebase directly interacts with cpal APIs (e.g., for audio input/output stream setup, device enumeration, or handling host IDs), you will likely encounter compilation errors that require updating the API usage to match cpal 0.17 specifications.

• Platform Updates:

  • Windows: Upgrades windows crate to 0.62.2.
  • Android: Upgrades ndk to 0.9.0 and ndk-sys to 0.6.0.
  • Linux: Upgrades alsa to 0.11.0.

  Ensure that any platform-specific code interacting with these low-level APIs is tested thoroughly.

Recommendation

Since Cargo.lock is an automatically generated file, no direct modifications to the diff are required. However, make sure to run cargo check and run your test suite to verify that the codebase compiles and functions correctly with the new major versions of cpal and alsa.