Skip to content

chore(deps): bump octocrab to 0.53.1#28

Open
mendral-app[bot] wants to merge 1 commit into
mainfrom
mendral/deps/octocrab-0.53.1
Open

chore(deps): bump octocrab to 0.53.1#28
mendral-app[bot] wants to merge 1 commit into
mainfrom
mendral/deps/octocrab-0.53.1

Conversation

@mendral-app

@mendral-app mendral-app Bot commented Jun 22, 2026

Copy link
Copy Markdown

Packages bumped

Crate Old New Published
octocrab 0.49.5 0.53.1 2026-06-10

⚠️ Reviewer attention

Risk level: Risky — 4-minor bump on a pre-1.0 crate (each 0.x minor is semver-breaking).

Breaking changes in 0.50–0.53 (from release notes):

  1. Removed either dependency (0.50.0) — replaced with custom enum for poll_once. We don't use poll_once or Either.
  2. Removed Option<> from PullRequest fields (0.50.0) — fields like node_id are now non-optional. We don't use octocrab::models::pulls::PullRequest directly; we deserialize webhooks into custom DTOs.
  3. pulls().list() returns SimplePullRequest (0.51.0) — type change on list results. We never call pulls().list().
  4. PullRequest generalized for SimplePullRequest payloads (0.52.0). Same as above — not affected.
  5. AutoMerge nullable properties corrected (0.53.0). We don't use AutoMerge.
  6. once_cell::sync::Lazystd::sync::LazyLock (0.53.1) — internal change.

Our usage (limited surface):

  • Octocrab::builder() + .app() + .installation_and_token()
  • pulls().get_diff(), .pr_commits(), .list_reviews(), .pull_number().reviews()
  • issues().add_labels(), .get_label(), .create_label()
  • search().issues_and_pull_requests()
  • Generic .get::<T>(endpoint, params)
  • Page<T>, ReviewAction, octocrab::Error (pattern-matched on Error::GitHub { source, .. })

What couldn't be verified:

  • Whether octocrab::Error enum variants changed signatures between 0.49 and 0.53
  • Whether .get_diff(), .pr_commits(), .list_reviews() return type changed
  • Whether Page<T> API remained stable

Suggested manual checks:

  • Verify PR diff retrieval still works
  • Verify label creation/application
  • Verify review submission
Per-package changelog & impact

octocrab 0.49.5 → 0.53.1

0.50.0:

  • Removed either crate dependency (custom enum replaces it)
  • Removed Option<> wrappers from PullRequest fields per GitHub API spec
  • Added sub-issues API support

0.51.0:

  • pulls().list() now returns SimplePullRequest (matches GitHub API response)

0.52.0:

  • Added GitHub SBOM API endpoints
  • Added pinned comments support
  • Added changes field to PullRequestWebhookEventPayload
  • PullRequest generalized for both full and simplified payloads

0.53.0:

  • Fixed AutoMerge nullable properties

0.53.1:

  • Replaced once_cell::sync::Lazy with std::sync::LazyLock
  • Added sub-issues support

Impact: Load-bearing crate for all GitHub API interactions (PR diffs, commits, reviews, labels, search). None of the 5 documented breaking changes touch our specific API surface, but undocumented changes to method signatures or error types could cause compilation failures. CI validates.

Files modified

  • Cargo.toml (version 0.49.50.53.1)
  • Cargo.lock
  • .github/workflows/ci.yml (pin actions to SHA — required by new org policy)
Skipped this ecosystem
Package Current Latest Reason
hmac 0.12.1 0.13.0 Breaking 0.x minor; must pair with sha2 upgrade (RustCrypto ecosystem)
sha2 0.10.9 0.11.0 Breaking 0.x minor; only used as type param but must pair with hmac
axum 0.8.8 0.8.9 Covered by open PR #26
chrono 0.4.44 0.4.45 Covered by open PR #26
rand 0.10.0 0.10.1 Covered by open PR #26
reqwest 0.13.2 0.13.4 Covered by open PR #26
rustls 0.23.37 0.23.40 Covered by open PR #26
http 1.4.0 1.4.2 Covered by open PR #23
jsonwebtoken 10.3.0 10.4.0 Covered by open PR #23
serde_json 1.0.149 1.0.150 Covered by open PR #23
tokio 1.49.0 1.52.3 Covered by open PR #23
tracing-subscriber 0.3.22 0.3.23 Covered by open PR #23
uuid 1.21.0 1.23.3 Covered by open PR #23
askama_escape 0.15.4 0.16.0 Covered by open PR #24

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

Upgrades octocrab from 0.49.5 to 0.53.1. None of the documented
breaking changes (Either removal, PullRequest Option field changes,
SimplePullRequest type, AutoMerge nullable fixes) affect our usage
pattern which is limited to: Octocrab builder, installation auth,
pulls().get_diff(), pr_commits(), list_reviews(), .reviews(),
issues() API, search(), and generic .get().
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying pratrol with  Cloudflare Pages  Cloudflare Pages

Latest commit: f5c8948
Status: ✅  Deploy successful!
Preview URL: https://28062168.pratrol.pages.dev
Branch Preview URL: https://mendral-deps-octocrab-0-53-1.pratrol.pages.dev

View logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants