Bump device-driver to 1.0.9#38
Merged
felipebalbi merged 1 commit intoApr 29, 2026
Merged
Conversation
felipebalbi
requested review from
RobertZ2011,
jerrysxie,
kurtjd and
williampMSFT
There was a problem hiding this comment.
Pull request overview
Updates the imxrt-rom library’s Rust dependency constraints to require a newer device-driver patch release, aligning the workspace with device-driver v1.0.9.
Changes:
- Bump
device-driverdependency from1.0to1.0.9inlibs/imxrt-rom/Cargo.toml.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
kurtjd
previously approved these changes
Apr 29, 2026
kurtjd
left a comment
kurtjd
left a comment
There was a problem hiding this comment.
Looks like cargo deny is running into the same bare-metal issue Matteo and I ran into.
Updates the `device-driver` dependency in `libs/imxrt-rom/Cargo.toml` from 1.0 to 1.0.9. Cargo.lock files are not tracked in this repo, so no lock update is committed; `cargo metadata` against the libs workspace confirms the new version resolves cleanly. No `supply-chain/` config in this repo, so no cargo-vet certification was needed. Assisted-by: Claude:claude-opus-4.7
felipebalbi
force-pushed
the
update-device-driver
branch
from
f2d8319 to
e0699b1
Compare
Contributor
Author
That's "expected". The crate was deprecated and a new cortex-m release will drop the dependency. Meanwhile we have to ignore that advisory. |
kurtjd
approved these changes
Apr 29, 2026
RobertZ2011
approved these changes
Apr 29, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps
device-driverfrom 1.0 to 1.0.9 inlibs/imxrt-rom/Cargo.toml.cargo metadataagainst the libs workspace confirms the new version resolves cleanly.supply-chain/config in this repo, so no cargo-vet certification was needed.deny.tomladvisory exception for RUSTSEC-2026-0110 (bare-metalis deprecated). Pulled in transitively; no safe upgrade path until upstream crates migrate. Note:heapless0.8 / 0.9.1 duplicate is also flagged but intentionally not addressed in this PR — it requires coordinated upstream updates and is out of scope for the device-driver bump.