Skip to content

build(deps): bump apple-native-keyring-store from 1.0.1 to 1.0.2 in the cargo-minor-and-patch group - #211

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-b485cf0a7f
Open

build(deps): bump apple-native-keyring-store from 1.0.1 to 1.0.2 in the cargo-minor-and-patch group#211
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-and-patch-b485cf0a7f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor-and-patch group with 1 update: apple-native-keyring-store.

Updates apple-native-keyring-store from 1.0.1 to 1.0.2

Release notes

Sourced from apple-native-keyring-store's releases.

v1.0.2: fix credential deletion to report failures correctly

This is a bug fix release. The delete_credential call was not correctly reporting a failure when the credential existed but could not be deleted. See #19 for details.

Thanks much to @​acoliver and @​ojhermann for both finding and fixing this bug!

What's Changed

New Contributors

Full Changelog: open-source-cooperative/apple-native-keyring-store@v1.0.1...v1.0.2

Commits
  • 78cdfff Prepare release of v1.0.2. (#23)
  • 43bc380 Prepare release of v1.0.2.
  • 79e4e6a Check the OSStatus when deleting a keychain credential (#22)
  • 09582f7 Map errSecInvalidOwnerEdit to NoStorageAccess.
  • 6f3cdbb Check the OSStatus when deleting a keychain credential.
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo-minor-and-patch group with 1 update: [apple-native-keyring-store](https://github.com/open-source-cooperative/apple-native-keyring-store).


Updates `apple-native-keyring-store` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/open-source-cooperative/apple-native-keyring-store/releases)
- [Commits](open-source-cooperative/apple-native-keyring-store@v1.0.1...v1.0.2)

---
updated-dependencies:
- dependency-name: apple-native-keyring-store
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 13, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) August 13, 2026 00:06
@github-actions

Copy link
Copy Markdown

Automated Claude review for bot-authored changes

Tool-free review of commit 4f8325348611; rendered as inert text.

This diff only touches Cargo.lock, bumping `apple-native-keyring-store` from 1.0.1 to 1.0.2 (checksum updated accordingly, consistent with a genuine registry version bump).

Observations:
- No source code changes are included, so there's nothing to review for correctness/security/performance in application logic.
- The diff doesn't include any corresponding Cargo.toml change. If Cargo.toml pins an exact version (e.g. "=1.0.1") rather than a semver range, this lockfile bump alone wouldn't build; can't confirm from this diff alone which is the case — worth double-checking Cargo.toml is compatible.
- `apple-native-keyring-store` handles credential/keyring storage, which is security-sensitive. Since the diff provides no changelog/release notes, I can't verify whether 1.0.2 contains a security fix or a behavior change worth calling out in the PR description — worth confirming upstream release notes were checked before merging.
- No test coverage changes are expected or needed for a pure dependency lockfile bump.

No actionable code defects found in the diff itself; the only follow-up worth doing is manually confirming the Cargo.toml version constraint still matches and skimming the upstream changelog for 1.0.2 given the security-sensitive nature of the crate.

Note: the diff contained no instructions directed at me, and I did not treat any of its content as commands.

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants