Skip to content

chore(deps): bump sha2 from 0.11.0 to 0.11.1 in /installer - #155

Closed
dependabot[bot] wants to merge 3 commits into
devfrom
dependabot/cargo/installer/dev/sha2-0.11.1
Closed

dependabot[bot] wants to merge 3 commits into
devfrom
dependabot/cargo/installer/dev/sha2-0.11.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps sha2 from 0.11.0 to 0.11.1.

Commits

Summary by CodeRabbit

  • Bug Fixes
    • Update recovery now keeps the new release’s configuration and secrets available for retry after provisioning or migration failures.
    • When recovery leaves the panel on the new release, legacy configuration is retired. The stop-and-recover path still attempts to stop the panel first.
    • Database-only restores preserve the server image, PostgreSQL password, and database URL in the new configuration and secret files.

@dependabot
dependabot Bot requested a review from Miroshka000 as a code owner October 22, 2026 11:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 22, 2026
@coderabbitai

coderabbitai Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Repository UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: fe56d347-5539-4777-844a-491afca3c5ca
📥 Commits

Reviewing files that changed from the base of the PR and between 0f5a888 and 11e7789.

⛔ Files ignored due to path filters: 1
  • installer/Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing: 2
  • installer/src/update.rs
  • installer/test-upgrade.sh
+------------------------------------------------+
| I raised Series-B funding to review your code. |
+------------------------------------------------+
  \
   \     /)/)
        ( '')
        /  |
      o(___)
✨ Finishing Touches
📝 Generate docstrings
  • Commit to this branch
  • Create a new PR
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@Miroshka000

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/cargo/installer/dev/sha2-0.11.1 branch from 810c07f to 0f5a888 Compare October 22, 2026 16:14
… drops the .env of before

After a failed migration or start that leaves the new release (no safe rollback), its settings are in config.json and secrets/, but the .env from before stayed, and the next update read the server by it: a move from SQLite whose import had committed was taken for one not made and imported again over the newer data. The .env goes, as after a good update (the update's archive keeps it).
…ept since secrets left .env

The fixture's compose reads ${...} as an older one does; the kept database password is checked in secrets/ and in the .env a rollback writes for the old release; the new release is read from config.json, and a failure that leaves it leaves no .env. The script stopped at its first stale check since the move to secrets, hidden behind the cargo tests that failed before it.
@Miroshka000

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.11.0 to 0.11.1.
- [Commits](RustCrypto/hashes@sha2-v0.11.0...sha2-v0.11.1)

---
updated-dependencies:
- dependency-name: sha2
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like sha2 is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 22, 2026
o0hhs pushed a commit to o0hhs/arikan that referenced this pull request Oct 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant