Skip to content

deps(rust): bump rusqlite from 0.39.0 to 0.40.0 in /dependi-lsp#339

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/dependi-lsp/rusqlite-0.40.0
Closed

deps(rust): bump rusqlite from 0.39.0 to 0.40.0 in /dependi-lsp#339
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/dependi-lsp/rusqlite-0.40.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 30, 2026

Copy link
Copy Markdown
Contributor

Bumps rusqlite from 0.39.0 to 0.40.0.

Release notes

Sourced from rusqlite's releases.

0.40.0

What's Changed

  • Breaking changes: Replace VTab macros by constructors #1823
  • Breaking changes: Fix VTab::best_index #1824
  • Asserts on VTab::connect aux and args #1825
  • Breaking changes: Fix VTab::connect / create #1826
  • Breaking changes: Allow opting out of using sqlite-wasm-rs on wasm32-unknown-unknown #1828, #1829
  • Derive Default for SeriesTabCursor/ArrayTabCursor #1830
  • Update link to pre-update hook #1831
  • Breaking changes: Fix VTab::connect #1832
  • impl From for FromSqlError #1833
  • Breaking changes: Fix vtab::dequote #1835
  • Bump bundled SQLCipher to version 4.14.0 #1837
  • sqlite3_set_errmsg #1752
  • Bump sqlite3-parser version #1838
  • Fix UB in ToSqlOutput::from_rc #1839
  • Ensure miri doesn't complain #1840
  • Bump to actions/checkout@v6 #1842
  • Add support to UtcDateTime #1843, #1844
  • Bump bundled SQLite version to 3.53.1 #1848
  • Replace some cfg(not by cfg_select #1850

Full Changelog: rusqlite/rusqlite@v0.39.0...v0.40.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrade rusqlite to 0.40 in dependi-lsp to pick up the latest SQLite and fixes. This also updates the bundled SQLite via libsqlite3-sys.

  • Dependencies

    • rusqlite 0.39 -> 0.40 (bundled)
    • Transitive: libsqlite3-sys 0.38.0; bundled SQLite 3.53.1
  • Migration

    • No changes expected. If we use virtual tables, replace VTab macros with constructors per 0.40.

Written for commit fb93588. Summary will update on new commits.

Review in cubic

Bumps [rusqlite](https://github.com/rusqlite/rusqlite) from 0.39.0 to 0.40.0.
- [Release notes](https://github.com/rusqlite/rusqlite/releases)
- [Changelog](https://github.com/rusqlite/rusqlite/blob/master/Changelog.md)
- [Commits](rusqlite/rusqlite@v0.39.0...v0.40.0)

---
updated-dependencies:
- dependency-name: rusqlite
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 30, 2026

@sovri sovri Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency Upgrade Review: rusqlite 0.39.0 → 0.40.0

This pull request upgrades rusqlite from version 0.39.0 to 0.40.0 in the dependi-lsp crate. Below are key considerations and action items:

Breaking Changes

The release notes for rusqlite 0.40.0 highlight several breaking changes, particularly around virtual table (VTab) functionality:

  • Replacement of VTab macros with constructors (#1823).
  • Fixes to VTab::best_index, VTab::connect, and VTab::create (#1824, #1826, #1832).
  • Changes to vtab::dequote (#1835).

Action Required:

  • Review any code in dependi-lsp that uses rusqlite's virtual table functionality. Ensure compatibility with the new constructors and fixed methods.
  • Test the application thoroughly, focusing on database interactions involving virtual tables.

Other Notable Changes

  • SQLite Version: The bundled SQLite version has been upgraded to 3.53.1, which may include performance improvements and bug fixes.
  • New Features: Support for UtcDateTime has been added (#1843, #1844). If your code deals with time zones, consider leveraging this feature.

Dependency Tree

The upgrade also updates libsqlite3-sys to 0.38.0, ensuring compatibility with the new rusqlite version. The Cargo.lock file has been updated to reflect these changes.

Testing Recommendations

  1. Unit Tests: Run existing unit tests to ensure no regressions.
  2. Integration Tests: Focus on database operations, particularly those involving virtual tables or custom SQL functions.
  3. Manual Testing: If applicable, manually test features that interact with SQLite to verify expected behavior.

Compatibility

Dependabot's compatibility score indicates a high likelihood of success, but the breaking changes warrant careful review. If conflicts arise, Dependabot can rebase the PR upon request (@dependabot rebase).

Comment thread dependi-lsp/Cargo.toml
anyhow = "1.0.102"
thiserror = "2.0.18"
rusqlite = { version = "0.39", features = ["bundled"] }
rusqlite = { version = "0.40", features = ["bundled"] }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Breaking changes in rusqlite 0.40.0 may affect compatibility

The upgrade to rusqlite 0.40.0 includes multiple breaking changes, particularly around VTab macros and constructors (e.g., #1823, #1824, #1826, #1832, #1835). These changes could require updates to code using rusqlite's virtual table functionality.

🔍 Audit Reference: SOVRI-MT-F980-8B49

Comment thread dependi-lsp/Cargo.toml
anyhow = "1.0.102"
thiserror = "2.0.18"
rusqlite = { version = "0.39", features = ["bundled"] }
rusqlite = { version = "0.40", features = ["bundled"] }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bundled SQLite version upgraded to 3.53.1

The bundled SQLite version has been upgraded to 3.53.1, which may include performance improvements and bug fixes. No action is required unless specific SQLite features are relied upon.

🔍 Audit Reference: SOVRI-PF-8790-C05F

@codspeed-hq

codspeed-hq Bot commented May 30, 2026

Copy link
Copy Markdown
Contributor

Merging this PR will improve performance by 48.54%

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 1 improved benchmark
✅ 48 untouched benchmarks

Performance Changes

Benchmark BASE HEAD Efficiency
insert[100] 16.4 µs 11.1 µs +48.54%

Tip

Curious why this is faster? Comment @codspeedbot explain why this is faster on this PR, or directly use the CodSpeed MCP with your agent.


Comparing dependabot/cargo/dependi-lsp/rusqlite-0.40.0 (fb93588) with main (bf6a128)

Open in CodSpeed

@dependabot @github

dependabot Bot commented on behalf of github Jun 6, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #343.

@dependabot dependabot Bot closed this Jun 6, 2026
@dependabot dependabot Bot deleted the dependabot/cargo/dependi-lsp/rusqlite-0.40.0 branch June 6, 2026 20:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants