Skip to content

chore(deps): bump yanked yoke-derive 0.8.3 to 0.8.4 - #3682

Merged
trunk-io[bot] merged 1 commit into
mainfrom
claude/laughing-brown-y6wvr6-yanked-yoke
Oct 4, 2026
Merged

trunk-io[bot] merged 1 commit into
mainfrom
claude/laughing-brown-y6wvr6-yanked-yoke

Conversation

@phil-opp

@phil-opp phil-opp commented Oct 2, 2026

Copy link
Copy Markdown
Collaborator

Problem

The Audit (cargo-audit + cargo-deny) job now fails on every PR, whatever the PR changes:

error[yanked]: detected yanked crate (try `cargo update -p yoke-derive`)
  yoke-derive 0.8.3 → yoke → icu_* → idna → url → dora-core, …
advisories FAILED, bans ok, licenses ok, sources ok

yoke-derive 0.8.3 was yanked from crates.io. main's Cargo.lock still pins it, so the check is red on main as well.

Fix

Run cargo update -p yoke-derive, which moves it to 0.8.4. This is a lockfile-only change, and no other entry moves.

Validation

Class: A (lockfile-only dependency bump)

  • cargo deny check advisories: ✅ advisories ok (it failed with the error above before the bump).
  • make qa-lockfile: ✅.
  • cargo check --locked -p dora-core: ✅.

🤖 Machine-generated. This PR was written by Claude (Claude Code). Please review it as you would any external contribution.

🤖 Generated with Claude Code

https://claude.ai/code/session_01R8CSx6yQ4JbrB3dqSiU2ME


Generated by Claude Code

`cargo deny check advisories` fails every PR's Audit job with
`error[yanked]: detected yanked crate` for yoke-derive 0.8.3 (via
url -> idna -> icu). `cargo update -p yoke-derive` moves it to 0.8.4;
no other lock entry changes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01R8CSx6yQ4JbrB3dqSiU2ME
@trunk-io

trunk-io Bot commented Oct 2, 2026 •

Copy link
Copy Markdown
Contributor

😎 Merged successfully - details.

phil-opp pushed a commit that referenced this pull request Oct 2, 2026
Port of #3682: cargo-deny fails the Audit job on every PR because
yoke-derive 0.8.3 was yanked. No-op once #3682 lands on main.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016ZCEkLBowwvtAMhopshZwt
phil-opp pushed a commit that referenced this pull request Oct 2, 2026
Port of #3682: cargo-deny fails the Audit job on every PR because
yoke-derive 0.8.3 was yanked. No-op once #3682 lands on main.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016ZCEkLBowwvtAMhopshZwt

phil-opp commented Oct 2, 2026

Copy link
Copy Markdown
Collaborator Author

🤖 This is a fully automated review by Claude Code. No human has checked it.

No issues found.

  • crates.io shows yoke-derive 0.8.3 as yanked and 0.8.4 as not yanked.
  • The lock checksum matches the index entry for 0.8.4.
  • 0.8.4 has the same dependency requirements as 0.8.3.
  • cargo metadata --locked succeeds.

So the two-line Cargo.lock change is minimal and consistent. Several other open PRs (#3666–#3671, #3675–#3681, #3685, #3686) each carry the same bump.


Generated by Claude Code

@phil-opp phil-opp mentioned this pull request Oct 2, 2026
phil-opp pushed a commit that referenced this pull request Oct 3, 2026
Ported from #3682 so the audit gate passes; a no-op once main carries it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XCULPnVhb8i3xZ5s2Y3Fuz
phil-opp pushed a commit that referenced this pull request Oct 3, 2026
Ported from #3682 so the audit gate passes; a no-op once main carries it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XCULPnVhb8i3xZ5s2Y3Fuz
phil-opp pushed a commit that referenced this pull request Oct 4, 2026
Ported from #3682 so the Audit job passes on this branch; no-op once
main carries it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C8fqAAfFXg43xvKiALN99C
@trunk-io
trunk-io Bot merged commit 86327c1 into main Oct 4, 2026
19 checks passed
@trunk-io
trunk-io Bot deleted the claude/laughing-brown-y6wvr6-yanked-yoke branch October 4, 2026 17:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants