Skip to content

chore(deps): bump time from 0.3.44 to 0.3.47 in /apps/desktop/src-tauri in the cargo group across 1 directory#953

Merged
tobeycodes merged 1 commit intomainfrom
dependabot/cargo/apps/desktop/src-tauri/cargo-19d6922b9f
Feb 6, 2026
Merged

chore(deps): bump time from 0.3.44 to 0.3.47 in /apps/desktop/src-tauri in the cargo group across 1 directory#953
tobeycodes merged 1 commit intomainfrom
dependabot/cargo/apps/desktop/src-tauri/cargo-19d6922b9f

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 6, 2026

Bumps the cargo group with 1 update in the /apps/desktop/src-tauri directory: time.

Updates time from 0.3.44 to 0.3.47

Release notes

Sourced from time's releases.

v0.3.47

See the changelog for details.

v0.3.46

See the changelog for details.

v0.3.45

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.47 [2026-02-05]

Security

  • The possibility of a stack exhaustion denial of service attack when parsing RFC 2822 has been eliminated. Previously, it was possible to craft input that would cause unbounded recursion. Now, the depth of the recursion is tracked, causing an error to be returned if it exceeds a reasonable limit.

    This attack vector requires parsing user-provided input, with any type, using the RFC 2822 format.

Compatibility

  • Attempting to format a value with a well-known format (i.e. RFC 3339, RFC 2822, or ISO 8601) will error at compile time if the type being formatted does not provide sufficient information. This would previously fail at runtime. Similarly, attempting to format a value with ISO 8601 that is only configured for parsing (i.e. Iso8601::PARSING) will error at compile time.

Added

  • Builder methods for format description modifiers, eliminating the need for verbose initialization when done manually.
  • date!(2026-W01-2) is now supported. Previously, a space was required between W and 01.
  • [end] now has a trailing_input modifier which can either be prohibit (the default) or discard. When it is discard, all remaining input is ignored. Note that if there are components after [end], they will still attempt to be parsed, likely resulting in an error.

Changed

  • More performance gains when parsing.

Fixed

  • If manually formatting a value, the number of bytes written was one short for some components. This has been fixed such that the number of bytes written is always correct.
  • The possibility of integer overflow when parsing an owned format description has been effectively eliminated. This would previously wrap when overflow checks were disabled. Instead of storing the depth as u8, it is stored as u32. This would require multiple gigabytes of nested input to overflow, at which point we've got other problems and trivial mitigations are available by downstream users.

0.3.46 [2026-01-23]

Added

  • All possible panics are now documented for the relevant methods.
  • The need to use #[serde(default)] when using custom serde formats is documented. This applies only when deserializing an Option<T>.
  • Duration::nanoseconds_i128 has been made public, mirroring std::time::Duration::from_nanos_u128.

... (truncated)

Commits
  • d5144cd v0.3.47 release
  • f6206b0 Guard against integer overflow in release mode
  • 1c63dc7 Avoid denial of service when parsing Rfc2822
  • 5940df6 Add builder methods to avoid verbose construction
  • 00881a4 Manually format macros everywhere
  • bb723b6 Add trailing_input modifier to end
  • 31c4f8e Permit W12 in date! macro
  • 490a17b Mark error paths in well-known formats as cold
  • 6cb1896 Optimize Rfc2822 parsing
  • 6d264d5 Remove erroneous #[inline(never)] attributes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Important

Bumps time from 0.3.44 to 0.3.47 in Cargo.lock, addressing security vulnerabilities and improving performance.

  • Dependency Update:
    • Bumps time from 0.3.44 to 0.3.47 in Cargo.lock.
    • Addresses stack exhaustion denial of service vulnerability when parsing RFC 2822.
    • Ensures compile-time error for insufficient information in well-known formats.
  • Performance:
    • Improves parsing performance and fixes byte count in manual formatting.
    • Prevents integer overflow by changing depth storage from u8 to u32.

This description was created by Ellipsis for bf6b7c5. You can customize this summary. It will automatically update as commits are pushed.

Bumps the cargo group with 1 update in the /apps/desktop/src-tauri directory: [time](https://github.com/time-rs/time).


Updates `time` from 0.3.44 to 0.3.47
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.44...v0.3.47)

---
updated-dependencies:
- dependency-name: time
  dependency-version: 0.3.47
  dependency-type: indirect
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Feb 6, 2026
Copy link

@ellipsis-dev ellipsis-dev bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Important

Looks good to me! 👍

Reviewed everything up to bf6b7c5 in 16 seconds. Click for details.
  • Reviewed 54 lines of code in 1 files
  • Skipped 0 files when reviewing.
  • Skipped posting 0 draft comments. View those below.
  • Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.

Workflow ID: wflow_VR7zpe5q4YqFkpES

You can customize Ellipsis by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.

@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Feb 6, 2026

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
samui-wallet-api bf6b7c5 Commit Preview URL

Branch Preview URL
Feb 06 2026, 04:11 AM

@bundlemon
Copy link

bundlemon bot commented Feb 6, 2026

BundleMon

Unchanged files (98)
Status Path Size Limits
apps/web/dist/assets/index-(hash).js
281.36KB -
apps/extension/.output/chrome-mv3/chunks/clie
nt-(hash).js
256.16KB -
apps/desktop/dist/assets/index-(hash).js
253.32KB -
apps/extension/.output/chrome-mv3/chunks/deri
ve-(hash).js
23.43KB -
apps/desktop/dist/assets/derive-(hash).js
23.42KB -
apps/web/dist/assets/derive-(hash).js
23.42KB -
apps/web/dist/assets/settings-(hash).js
21.84KB -
apps/extension/.output/chrome-mv3/chunks/sett
ings-(hash).js
21.83KB -
apps/desktop/dist/assets/settings-(hash).js
21.83KB -
apps/extension/.output/chrome-mv3/chunks/form
-(hash).js
12.32KB -
apps/desktop/dist/assets/form-(hash).js
12.31KB -
apps/web/dist/assets/form-(hash).js
12.31KB -
apps/extension/.output/chrome-mv3/chunks/sele
ct-(hash).js
8.08KB -
apps/desktop/dist/assets/select-(hash).js
8.08KB -
apps/web/dist/assets/select-(hash).js
8.08KB -
apps/extension/.output/chrome-mv3/chunks/elli
psify-(hash).js
6.55KB -
apps/web/dist/assets/ellipsify-(hash).js
6.55KB -
apps/desktop/dist/assets/ellipsify-(hash).js
6.55KB -
apps/desktop/dist/assets/index.browser-(hash)
.js
4.86KB -
apps/extension/.output/chrome-mv3/chunks/onbo
arding-(hash).js
4.45KB -
apps/web/dist/assets/onboarding-(hash).js
4.44KB -
apps/desktop/dist/assets/onboarding-(hash).js
4.44KB -
apps/extension/.output/chrome-mv3/chunks/crea
te-(hash).js
4.23KB -
apps/desktop/dist/assets/create-(hash).js
4.23KB -
apps/web/dist/assets/create-(hash).js
4.22KB -
apps/desktop/dist/assets/use-(hash).js
3.21KB -
apps/extension/.output/chrome-mv3/chunks/use-
(hash).js
3.2KB -
apps/web/dist/assets/use-(hash).js
3.2KB -
apps/extension/.output/chrome-mv3/chunks/cons
tants-(hash).js
3.19KB -
apps/web/dist/assets/constants-(hash).js
3.19KB -
apps/desktop/dist/assets/constants-(hash).js
3.18KB -
apps/desktop/dist/assets/vanity-(hash).js
2.78KB -
apps/web/dist/assets/vanity-(hash).js
2.78KB -
apps/extension/.output/chrome-mv3/chunks/togg
le-(hash).js
2.59KB -
apps/desktop/dist/assets/toggle-(hash).js
2.58KB -
apps/web/dist/assets/toggle-(hash).js
2.58KB -
apps/web/dist/assets/portfolio-(hash).js
2.38KB -
apps/desktop/dist/assets/portfolio-(hash).js
2.38KB -
apps/extension/.output/chrome-mv3/chunks/port
folio-(hash).js
2.37KB -
apps/extension/.output/chrome-mv3/chunks/drop
down-(hash).js
2.16KB -
apps/desktop/dist/assets/dropdown-(hash).js
2.16KB -
apps/web/dist/assets/dropdown-(hash).js
2.16KB -
apps/desktop/dist/assets/field-(hash).js
1.95KB -
apps/extension/.output/chrome-mv3/chunks/fiel
d-(hash).js
1.95KB -
apps/web/dist/assets/field-(hash).js
1.94KB -
apps/extension/.output/chrome-mv3/chunks/chec
kbox-(hash).js
1.89KB -
apps/extension/.output/chrome-mv3/chunks/badg
e-(hash).js
1.89KB -
apps/desktop/dist/assets/badge-(hash).js
1.89KB -
apps/web/dist/assets/badge-(hash).js
1.88KB -
apps/desktop/dist/assets/checkbox-(hash).js
1.88KB -
apps/web/dist/assets/checkbox-(hash).js
1.88KB -
apps/extension/.output/chrome-mv3/chunks/requ
est-(hash).js
1.85KB -
apps/desktop/dist/assets/request-(hash).js
1.85KB -
apps/web/dist/assets/request-(hash).js
1.77KB -
apps/extension/.output/chrome-mv3/chunks/expl
orer-(hash).js
1.52KB -
apps/desktop/dist/assets/explorer-(hash).js
1.52KB -
apps/web/dist/assets/explorer-(hash).js
1.52KB -
apps/extension/.output/chrome-mv3/chunks/inde
x.browser-(hash).js
1.35KB -
apps/extension/.output/chrome-mv3/chunks/item
-(hash).js
1.22KB -
apps/desktop/dist/assets/item-(hash).js
1.22KB -
apps/web/dist/assets/item-(hash).js
1.21KB -
apps/extension/.output/chrome-mv3/chunks/tool
s-(hash).js
1.13KB -
apps/desktop/dist/assets/tools-(hash).js
1.13KB -
apps/web/dist/assets/tools-(hash).js
1.12KB -
apps/web/dist/assets/index.browser-(hash).js
975B -
apps/extension/.output/chrome-mv3/chunks/zod-
(hash).js
764B -
apps/web/dist/assets/zod-(hash).js
763B -
apps/desktop/dist/assets/zod-(hash).js
762B -
apps/web/dist/assets/standard-(hash).js
650B -
apps/desktop/dist/assets/standard-(hash).js
649B -
apps/extension/.output/chrome-mv3/chunks/stan
dard-(hash).js
648B -
apps/web/dist/assets/format-(hash).js
585B -
apps/desktop/dist/assets/format-(hash).js
583B -
apps/extension/.output/chrome-mv3/chunks/form
at-(hash).js
581B -
apps/desktop/dist/assets/button-(hash).js
579B -
apps/extension/.output/chrome-mv3/chunks/butt
on-(hash).js
578B -
apps/extension/.output/chrome-mv3/chunks/inpu
t-(hash).js
578B -
apps/web/dist/assets/button-(hash).js
577B -
apps/desktop/dist/assets/input-(hash).js
574B -
apps/web/dist/assets/input-(hash).js
573B -
apps/extension/.output/chrome-mv3/chunks/ui-(
hash).js
528B -
apps/desktop/dist/assets/ui-(hash).js
527B -
apps/web/dist/assets/ui-(hash).js
523B -
apps/extension/.output/chrome-mv3/chunks/labe
l-(hash).js
517B -
apps/desktop/dist/assets/label-(hash).js
516B -
apps/web/dist/assets/label-(hash).js
513B -
apps/extension/.output/chrome-mv3/chunks/conv
ert-(hash).js
425B -
apps/desktop/dist/assets/convert-(hash).js
421B -
apps/web/dist/assets/convert-(hash).js
420B -
apps/desktop/dist/assets/dev-(hash).js
278B -
apps/extension/.output/chrome-mv3/chunks/dev-
(hash).js
276B -
apps/web/dist/assets/dev-(hash).js
276B -
apps/extension/.output/chrome-mv3/chunks/side
panel-(hash).js
203B -
apps/extension/.output/chrome-mv3/chunks/popu
p-(hash).js
201B -
apps/extension/.output/chrome-mv3/chunks/inde
x-(hash).js
175B -
apps/desktop/dist/assets/network-(hash).js
121B -
apps/extension/.output/chrome-mv3/chunks/netw
ork-(hash).js
121B -
apps/web/dist/assets/network-(hash).js
121B -

No change in files bundle size

Unchanged groups (3)
Status Path Size Limits
apps/web/dist/**/*-.js
472.36KB -
apps/desktop/dist/**/*-.js
446.02KB -
apps/extension/.output/chrome-mv3/**/*-
.js
444.07KB -

Final result: ✅

View report in BundleMon website ➡️


Current branch size history | Target branch size history

@tobeycodes tobeycodes merged commit e1e1aa2 into main Feb 6, 2026
18 checks passed
@tobeycodes tobeycodes deleted the dependabot/cargo/apps/desktop/src-tauri/cargo-19d6922b9f branch February 6, 2026 04:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant