Skip to content

chore(deps): update cranelift-isle requirement from 0.132 to 0.134 - #310

Merged
temper-pulseengine[bot] merged 1 commit into
mainfrom
dependabot/cargo/cranelift-isle-0.134
Aug 5, 2026
Merged

chore(deps): update cranelift-isle requirement from 0.132 to 0.134#310
temper-pulseengine[bot] merged 1 commit into
mainfrom
dependabot/cargo/cranelift-isle-0.134

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on cranelift-isle to permit the latest version.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [cranelift-isle](https://github.com/bytecodealliance/wasmtime) to permit the latest version.
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/main/RELEASES.md)
- [Commits](https://github.com/bytecodealliance/wasmtime/commits)

---
updated-dependencies:
- dependency-name: cranelift-isle
  dependency-version: 0.134.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates label Aug 5, 2026
@temper-pulseengine
temper-pulseengine Bot enabled auto-merge (squash) August 5, 2026 18:46
@temper-pulseengine
temper-pulseengine Bot merged commit 65d72f9 into main Aug 5, 2026
17 of 20 checks passed
@temper-pulseengine
temper-pulseengine Bot deleted the dependabot/cargo/cranelift-isle-0.134 branch August 5, 2026 18:46
avrabe added a commit that referenced this pull request Aug 7, 2026
Dependabot #310 widened the workspace cranelift-isle constraint from 0.132 back
to 0.134 — the second time this pin has been reverted by automation (#298 was
the first, fixed in #304). Both times the bump left the comment directly above
the constraint intact, a comment whose text explains exactly why not to widen
it. main's wasm32-wasip2 build is red again as a result, and because these PRs
auto-merge, no human saw the warning on either occasion.

A pin defended only by prose is not defended. Two changes:

- Re-pin to ^0.132 (0.133+ needs rustc 1.94.0, not stable on the CI image).
- Add a dependabot  for cranelift-isle on the root cargo ecosystem, so
  the bot cannot propose the change at all. The removal condition is written
  next to it: stable rustc 1.94, or the committed lockfile (#142).

This is the mechanical half of the same lesson as the release floor gate in this
branch — an invariant that only exists in a comment will be undone by something
that does not read comments.

Refs #142, #304, #311
avrabe added a commit that referenced this pull request Aug 7, 2026
Dependabot #310 widened the workspace cranelift-isle constraint from 0.132 back
to 0.134 — the second time this pin has been reverted by automation (#298 was
the first, fixed in #304). Both times the bump left the comment directly above
the constraint intact, a comment whose text explains exactly why not to widen
it. main's wasm32-wasip2 build is red again as a result, and because these PRs
auto-merge, no human saw the warning on either occasion.

A pin defended only by prose is not defended. Two changes:

- Re-pin to ^0.132 (0.133+ needs rustc 1.94.0, not stable on the CI image).
- Add a dependabot "ignore" entry for cranelift-isle on the root cargo
  ecosystem, so the bot cannot propose the change at all. The removal condition
  is written next to it: stable rustc 1.94, or the committed lockfile (#142).

This is the mechanical half of the same lesson as the release floor gate in this
branch — an invariant that only exists in a comment will be undone by something
that does not read comments.

Refs #142, #304, #311
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants