Conversation
Bumps [js-sys](https://github.com/wasm-bindgen/wasm-bindgen) from 0.3.85 to 0.3.91. - [Release notes](https://github.com/wasm-bindgen/wasm-bindgen/releases) - [Changelog](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md) - [Commits](https://github.com/wasm-bindgen/wasm-bindgen/commits) --- updated-dependencies: - dependency-name: js-sys dependency-version: 0.3.91 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
Changed
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
| [target.'cfg(target_family="wasm")'.dependencies] | ||
| getrandom = { version = "0.2", features = ["js"] } | ||
| js-sys = "0.3.77" | ||
| js-sys = "0.3.91" |
There was a problem hiding this comment.
Dependency version conflict breaks wasm sub-project build
High Severity
Bumping js-sys to 0.3.91 in the root Cargo.toml introduces an irreconcilable dependency conflict with the wasm/ sub-project. js-sys 0.3.91 requires exactly wasm-bindgen = "=0.2.114", but wasm/Cargo.toml pins wasm-bindgen = "=0.2.100". Since wasm/Cargo.toml depends on chialisp via a path dependency, Cargo cannot satisfy both exact-version constraints simultaneously, causing the wasm/ sub-project to fail dependency resolution and be unbuildable.
Bumps js-sys from 0.3.85 to 0.3.91.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Low Risk
Dependency-only update limited to the WASM build; no application logic changes.
Overview
Bumps the WASM-only dependency
js-sysinCargo.tomlto0.3.91.Updates
Cargo.lockaccordingly, pulling injs-sys 0.3.91and newerwasm-bindgen/macro/shared crates (0.2.114).Written by Cursor Bugbot for commit abbe8c9. This will update automatically on new commits. Configure here.