chore(deps): bump the rust-minor group with 2 updates by dependabot[bot] · Pull Request #93 · hyperpolymath/panic-attack

dependabot · 2026-05-31T10:57:34Z

Bumps the rust-minor group with 2 updates: log and eframe.

Updates log from 0.4.29 to 0.4.30

Release notes

0.4.30

What's Changed

Support capturing of std::net types by @KodrAus in rust-lang/log#724

New Contributors

@V0ldek made their first contribution in rust-lang/log#720

@woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

MSRV is bumped to 1.71.0 in rust-lang/log#723

Changelog

Sourced from log's changelog.

[0.4.30] - 2026-05-21

What's Changed

Support capturing of std::net types by @KodrAus in rust-lang/log#724

New Contributors

@V0ldek made their first contribution in rust-lang/log#720

@woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

MSRV is bumped to 1.71.0 in rust-lang/log#723

Commits

9c55760 Merge pull request #725 from rust-lang/cargo/0.4.30
d1acb05 update docs on current MSRV and note latest bump in changelog
5068293 prepare for 0.4.30 release
7ccd873 Merge pull request #724 from rust-lang/feat/net-to-value
923dfaa fix up test cfgs
ecb7de8 gate net value impls on std
67bb4f6 run fmt
25f49fe rework net type capturing
7087dcb feat: impl ToValue for core::net types
67bc7e3 Merge pull request #723 from woodruffw-forks/ww/ci
Additional commits viewable in compare view

Updates eframe from 0.34.2 to 0.34.3

Release notes

Sourced from eframe's releases.

0.34.3: wgpu surface lifecycle fixes

egui is an easy-to-use immediate mode GUI for Rust that runs on both web and native.

Try it now: https://www.egui.rs/

egui development is sponsored by Rerun, a startup building an SDK for visualizing streams of multimodal data.

⭐ Added

Add winit window access to eframe::Frame and CreationContext #8205 by @emilk

🐛 Fixed

Fix random hangs by improving wgpu::Surface lifecycle handling #8171 by @grtlr

Fix ScrollArea::scroll_to_* calls when stick_to_bottom is Active #8033 by @AmmarAbouZor

🔧 Changed

Default app_id to app_name on native #8172 by @grtlr

Changelog

Sourced from eframe's changelog.

0.34.3 - 2026-05-27

Fix ScrollArea::scroll_to_* calls when stick_to_bottom is Active #8033 by @AmmarAbouZor

Commits

65cb282 Bump version to 0.34.3 and update changelogs
8725878 Fix ScrollArea::scroll_to_* calls when stick_to_bottom is Active (#8033)
dd72bda Improve UiBuilder docs (#8132)
9e10d4c Add winit window access to eframe::Frame and CreationContext (#8205)
cbb5a26 Default app_id to app_name on native (#8172)
c86de57 Fix random hangs by improving wgpu::Surface lifecycle handling (#8171)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-minor group with 2 updates: [log](https://github.com/rust-lang/log) and [eframe](https://github.com/emilk/egui). Updates `log` from 0.4.29 to 0.4.30 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.29...0.4.30) Updates `eframe` from 0.34.2 to 0.34.3 - [Release notes](https://github.com/emilk/egui/releases) - [Changelog](https://github.com/emilk/egui/blob/main/CHANGELOG.md) - [Commits](emilk/egui@0.34.2...0.34.3) --- updated-dependencies: - dependency-name: log dependency-version: 0.4.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor - dependency-name: eframe dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-31T14:03:52Z

🔍 Hypatia Security Scan

Findings: 98 issues detected

Severity	Count
🔴 Critical	5
🟠 High	12
🟡 Medium	81

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f5599 needs attention",
    "type": "unpinned_action",
    "file": "e2e.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action es: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb needs attention",
    "type": "unpinned_action",
    "file": "e2e.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in cargo-audit.yml",
    "type": "missing_timeout_minutes",
    "file": "cargo-audit.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in chapel-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "chapel-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in chapel-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "chapel-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in chapel-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "chapel-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

…L / Governance Trusted-base / Secret Scanner rust-secrets) (#94) ## Summary Three pre-existing main-branch required-check failures (red since 2026-05-27) all root-caused to self-flag false positives in the assail scanner's own source — the analyzer file IS the scanner, and contains the detector pattern data the estate-wide checks scan foreign code for. | Check | Hits | Root cause | Fix | |---|---|---|---| | Dogfood Gate / Validate A2ML manifests | 1 error + 2 warnings on `docs/campaigns/2026-05-26.a2ml` | a2ml-validate (PR#26, 2026-06-01) requires `{agent-id\|name\|project}` + `{version\|schema_version}` at the top form root; existing file had only nested `(metadata ...)` | Add `(name ...)`, `(project ...)`, `(version ...)` at `(campaign-report ...)` top level | | Governance / Trusted-base reduction policy | 7 `unsafePerformIO` / `unsafeCoerce` hits, all in `src/assail/analyzer.rs` | Detector pattern data flagged as soundness-relevant escape hatches | New `.trusted-base-ignore` with whole-file exemption per [TRUSTED-BASE-REDUCTION-POLICY.adoc](https://github.com/hyperpolymath/standards/blob/main/docs/TRUSTED-BASE-REDUCTION-POLICY.adoc) `.trusted-base-ignore` § | | Secret Scanner / scan/rust-secrets | 1 hit on `src/assail/analyzer.rs:4816` | `RE_HARDCODED_SECRET` regex string contained `password\s*[=:]\s*"` contiguously; grep self-matched | Split detector keywords (`password`, `passwd`) via `concat!` across multiple source-line tokens; compiled regex byte-identical | ## Test plan Verified locally before push: - [x] `cargo check` clean (regex refactor preserves semantics) - [x] `bash standards/scripts/check-trusted-base.sh` — `[OK] All 7 escape hatch(es) handled (entirely via .trusted-base-ignore exemption)` - [x] `grep -E 'password.*=.*"[^"]+"' src/assail/analyzer.rs` — empty - [x] A2ML structure matches working pattern in `0-AI-MANIFEST.a2ml` (top-form name/project/version) ## Unblocks - PR #93 (dependabot rust-minor bump) — currently auto-merge armed but BLOCKED on these three required checks. Should land naturally once this PR clears main. - All future PRs to panic-attack — main has been baseline-red for ~5 days, masking real signal. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

github-actions · 2026-06-01T19:19:33Z

🔍 Hypatia Security Scan

Findings: 96 issues detected

Severity	Count
🔴 Critical	5
🟠 High	10
🟡 Medium	81

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f5599 needs attention",
    "type": "unpinned_action",
    "file": "e2e.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action es: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb needs attention",
    "type": "unpinned_action",
    "file": "e2e.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in cargo-audit.yml",
    "type": "missing_timeout_minutes",
    "file": "cargo-audit.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in chapel-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "chapel-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in chapel-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "chapel-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in chapel-ci.yml",
    "type": "missing_timeout_minutes",
    "file": "chapel-ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

…98) ## Summary - **CHANGELOG.md**: new `### Fixed (2026-06-01)` + `### Changed (2026-06-01)` entries for PRs #93/#94/#96/#97 - **A2ML manifests**: rename `panic-attacker` → `panic-attack` in identity-claim fields (STATE, META, ECOSYSTEM, CLADE, ANCHOR); historical references in CHANGELOG/audit/campaign records intentionally untouched - **STATE.a2ml**: `last-updated` 2026-04-12 → 2026-06-01; new `[session-2026-06-01]` block; refreshed `[next-priorities]` against current ROADMAP.adoc - **0-AI-MANIFEST.a2ml**: `README.md` → `README.adoc`, `ROADMAP.md` → `ROADMAP.adoc` (actual file extensions); added `(explainme "EXPLAINME.adoc")` entry ## Test plan - [x] All edits are metadata only — no source/code/workflow files touched - [x] A2ML files retain valid s-expression/TOML structure - [x] Historical record left intact (CHANGELOG rename note line 300, audit reports, campaign docs)

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 31, 2026

hyperpolymath enabled auto-merge (squash) June 1, 2026 18:05

hyperpolymath mentioned this pull request Jun 1, 2026

fix: clear 3 baseline-red required checks at source (Dogfood Gate A2ML / Governance Trusted-base / Secret Scanner rust-secrets) #94

Merged

4 tasks

Merge branch 'main' into dependabot/cargo/rust-minor-db98d1cc6f

88ef418

hyperpolymath merged commit 1de4bd4 into main Jun 1, 2026
33 checks passed

hyperpolymath deleted the dependabot/cargo/rust-minor-db98d1cc6f branch June 1, 2026 19:29

hyperpolymath mentioned this pull request Jun 1, 2026

docs+manifest: record 2026-06-01 cleanup + tidy stale identity drift #98

Merged

3 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the rust-minor group with 2 updates#93

chore(deps): bump the rust-minor group with 2 updates#93
hyperpolymath merged 2 commits into
mainfrom
dependabot/cargo/rust-minor-db98d1cc6f

dependabot Bot commented on behalf of github May 31, 2026

Uh oh!

github-actions Bot commented May 31, 2026

Uh oh!

github-actions Bot commented Jun 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 31, 2026

0.4.30

What's Changed

New Contributors

Notable Changes

[0.4.30] - 2026-05-21

What's Changed

New Contributors

Notable Changes

0.34.3: wgpu surface lifecycle fixes

⭐ Added

🐛 Fixed

🔧 Changed

0.34.3 - 2026-05-27

Uh oh!

github-actions Bot commented May 31, 2026

🔍 Hypatia Security Scan

Uh oh!

github-actions Bot commented Jun 1, 2026

🔍 Hypatia Security Scan

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant