chore(deps): update rust crate regorus to 0.13 #48

Open
renovate wants to merge 1 commit from renovate/regorus-0.x into main
Collaborator

This PR contains the following updates:

Package Type Update Change
regorus dependencies minor 0.11 → 0.13

Release Notes

microsoft/regorus (regorus)

v0.13.0

Compare Source

Changed
  • Package and import paths are now limited to 32 components. Previously accepted longer paths are rejected, making this a breaking release for the 0.12.x compatibility line.
  • Rule lookups and compilation entrypoints use canonical paths that preserve literal namespace components. For package graph["1.0.0"], use data.graph["1.0.0"].deny, not the flattened package-metadata string data.graph.1.0.0.deny.
Added
  • Add source-scoped, nonexecuting rule-declaration detection through HasDeclaredRuleRootedAt in Rust, FFI, and C#, including dotted-prefix matching and load-time parser context preservation (#​826)
  • expose lossless package components (#​834)
  • (sprintf) support Go-compatible %q for strings (#​809)
  • (csharp) expose RVM instruction budget setter (#​811)
  • (compiler) FFI and C# bindings for RVM, incl. host-await built-ins (#​672)
Fixed
  • preserve literal namespace components across evaluation paths (#​827)
  • (rego) schedule comprehensions in rule outputs (#​825)
  • disambiguate prior rule file labels (#​824)
  • keep prior rule locations in concise conflict diagnostics (#​820)
  • Rule-conflict diagnostics now retain the current source envelope and identify the previous rule by file, line, and column without nesting a second diagnostic; literal percent, CR, and LF characters in the previous file label are percent-encoded. RVM conflict result semantics are unchanged.
Other
  • (deps) bump the github-actions group across 1 directory with 5 updates (#​828)
  • (deps) bump the rust-dependencies group across 6 directories with 13 updates (#​832)
  • (deps) bump the github-actions group with 3 updates (#​822)
  • (deps) bump the github-actions group with 5 updates (#​818)
  • (deps) bump the rust-dependencies group across 5 directories with 5 updates (#​813)
  • (deps) bump MarcoIeni/release-plz-action in the github-actions group (#​814)
  • (deps) bump the github-actions group with 4 updates (#​807)
  • (deps) bump the rust-dependencies group across 5 directories with 9 updates (#​808)

v0.12.0

Compare Source

Added
  • (value) Frozen object storage (boxed-slice) for compact parsed objects (#​787)
  • json.patch builtin with Rego set support + partial-rule multi-body fix (picks up #​442) (#​776)
  • Support Verus verification (#​759)
Fixed
  • Prevent panic by Number::modulo (#​773)
  • Handle i64::MIN / -1 special case
  • (interpreter,rvm) resolve function calls through import aliases (#​769)
Other
  • Add per-execution memory budgets to RVM (#​792)
  • Verify Number with Verus (#​774)
  • (deps) bump the github-actions group with 3 updates (#​793)
  • Fix potential underflow in bigint_to_scientific (#​791)
  • (deps) migrate from serde_yaml to yaml_serde (#​790)
  • (value) migrate Array storage abstraction (#​785)
  • (deps) bump the github-actions group across 1 directory with 4 updates (#​783)
  • Pin GitHub Actions to full-length commit SHAs (#​777)
  • (value) migrate Value::Set to Set storage abstraction (#​778)
  • (deps) bump the rust-dependencies group across 5 directories with 10 updates (#​784)
  • (deps) bump the github-actions group with 4 updates (#​779)
  • (deps) bump the github-actions group across 1 directory with 11 updates (#​763)
  • (deps) bump the rust-dependencies group across 6 directories with 6 updates (#​768)
  • Handle i32::MIN in Number::two_pow and Number::ten_pow (#​771)
Added
  • (rvm) add opt-in per-execution memory budgets for run-to-completion evaluation, including typed Rust and binding errors (#​792)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [regorus](https://github.com/microsoft/regorus) | dependencies | minor | `0.11` → `0.13` | --- ### Release Notes <details> <summary>microsoft/regorus (regorus)</summary> ### [`v0.13.0`](https://github.com/microsoft/regorus/blob/HEAD/CHANGELOG.md#0130---2026-10-14) [Compare Source](https://github.com/microsoft/regorus/compare/regorus-v0.12.0...regorus-v0.13.0) ##### Changed - Package and import paths are now limited to 32 components. Previously accepted longer paths are rejected, making this a breaking release for the `0.12.x` compatibility line. - Rule lookups and compilation entrypoints use canonical paths that preserve literal namespace components. For `package graph["1.0.0"]`, use `data.graph["1.0.0"].deny`, not the flattened package-metadata string `data.graph.1.0.0.deny`. ##### Added - Add source-scoped, nonexecuting rule-declaration detection through `HasDeclaredRuleRootedAt` in Rust, FFI, and C#, including dotted-prefix matching and load-time parser context preservation ([#&#8203;826](https://github.com/microsoft/regorus/pull/826)) - expose lossless package components ([#&#8203;834](https://github.com/microsoft/regorus/pull/834)) - *(sprintf)* support Go-compatible %q for strings ([#&#8203;809](https://github.com/microsoft/regorus/pull/809)) - *(csharp)* expose RVM instruction budget setter ([#&#8203;811](https://github.com/microsoft/regorus/pull/811)) - *(compiler)* FFI and C# bindings for RVM, incl. host-await built-ins ([#&#8203;672](https://github.com/microsoft/regorus/pull/672)) ##### Fixed - preserve literal namespace components across evaluation paths ([#&#8203;827](https://github.com/microsoft/regorus/pull/827)) - *(rego)* schedule comprehensions in rule outputs ([#&#8203;825](https://github.com/microsoft/regorus/pull/825)) - disambiguate prior rule file labels ([#&#8203;824](https://github.com/microsoft/regorus/pull/824)) - keep prior rule locations in concise conflict diagnostics ([#&#8203;820](https://github.com/microsoft/regorus/pull/820)) - Rule-conflict diagnostics now retain the current source envelope and identify the previous rule by file, line, and column without nesting a second diagnostic; literal percent, CR, and LF characters in the previous file label are percent-encoded. RVM conflict result semantics are unchanged. ##### Other - *(deps)* bump the github-actions group across 1 directory with 5 updates ([#&#8203;828](https://github.com/microsoft/regorus/pull/828)) - *(deps)* bump the rust-dependencies group across 6 directories with 13 updates ([#&#8203;832](https://github.com/microsoft/regorus/pull/832)) - *(deps)* bump the github-actions group with 3 updates ([#&#8203;822](https://github.com/microsoft/regorus/pull/822)) - *(deps)* bump the github-actions group with 5 updates ([#&#8203;818](https://github.com/microsoft/regorus/pull/818)) - *(deps)* bump the rust-dependencies group across 5 directories with 5 updates ([#&#8203;813](https://github.com/microsoft/regorus/pull/813)) - *(deps)* bump MarcoIeni/release-plz-action in the github-actions group ([#&#8203;814](https://github.com/microsoft/regorus/pull/814)) - *(deps)* bump the github-actions group with 4 updates ([#&#8203;807](https://github.com/microsoft/regorus/pull/807)) - *(deps)* bump the rust-dependencies group across 5 directories with 9 updates ([#&#8203;808](https://github.com/microsoft/regorus/pull/808)) ### [`v0.12.0`](https://github.com/microsoft/regorus/blob/HEAD/CHANGELOG.md#0120---2026-09-01) [Compare Source](https://github.com/microsoft/regorus/compare/regorus-v0.11.0...regorus-v0.12.0) ##### Added - *(value)* Frozen object storage (boxed-slice) for compact parsed objects ([#&#8203;787](https://github.com/microsoft/regorus/pull/787)) - json.patch builtin with Rego set support + partial-rule multi-body fix (picks up [#&#8203;442](https://github.com/microsoft/regorus/issues/442)) ([#&#8203;776](https://github.com/microsoft/regorus/pull/776)) - Support Verus verification ([#&#8203;759](https://github.com/microsoft/regorus/pull/759)) ##### Fixed - Prevent panic by `Number::modulo` ([#&#8203;773](https://github.com/microsoft/regorus/pull/773)) - Handle i64::MIN / -1 special case - *(interpreter,rvm)* resolve function calls through import aliases ([#&#8203;769](https://github.com/microsoft/regorus/pull/769)) ##### Other - Add per-execution memory budgets to RVM ([#&#8203;792](https://github.com/microsoft/regorus/pull/792)) - Verify `Number` with Verus ([#&#8203;774](https://github.com/microsoft/regorus/pull/774)) - *(deps)* bump the github-actions group with 3 updates ([#&#8203;793](https://github.com/microsoft/regorus/pull/793)) - Fix potential underflow in bigint\_to\_scientific ([#&#8203;791](https://github.com/microsoft/regorus/pull/791)) - *(deps)* migrate from serde\_yaml to yaml\_serde ([#&#8203;790](https://github.com/microsoft/regorus/pull/790)) - *(value)* migrate Array storage abstraction ([#&#8203;785](https://github.com/microsoft/regorus/pull/785)) - *(deps)* bump the github-actions group across 1 directory with 4 updates ([#&#8203;783](https://github.com/microsoft/regorus/pull/783)) - Pin GitHub Actions to full-length commit SHAs ([#&#8203;777](https://github.com/microsoft/regorus/pull/777)) - *(value)* migrate Value::Set to Set storage abstraction ([#&#8203;778](https://github.com/microsoft/regorus/pull/778)) - *(deps)* bump the rust-dependencies group across 5 directories with 10 updates ([#&#8203;784](https://github.com/microsoft/regorus/pull/784)) - *(deps)* bump the github-actions group with 4 updates ([#&#8203;779](https://github.com/microsoft/regorus/pull/779)) - *(deps)* bump the github-actions group across 1 directory with 11 updates ([#&#8203;763](https://github.com/microsoft/regorus/pull/763)) - *(deps)* bump the rust-dependencies group across 6 directories with 6 updates ([#&#8203;768](https://github.com/microsoft/regorus/pull/768)) - Handle `i32::MIN` in `Number::two_pow` and `Number::ten_pow` ([#&#8203;771](https://github.com/microsoft/regorus/pull/771)) ##### Added - *(rvm)* add opt-in per-execution memory budgets for run-to-completion evaluation, including typed Rust and binding errors ([#&#8203;792](https://github.com/microsoft/regorus/pull/792)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zMC4yIiwidXBkYXRlZEluVmVyIjoiNDQuMzAuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate force-pushed renovate/regorus-0.x from 7a5c526831 to f5966ae80a 2026-09-15 12:07:42 +00:00 Compare
renovate force-pushed renovate/regorus-0.x from f5966ae80a to ffbcc64feb 2026-09-30 23:09:01 +00:00 Compare
renovate force-pushed renovate/regorus-0.x from ffbcc64feb to 9ba0a0f9cf 2026-10-11 04:08:16 +00:00 Compare
renovate force-pushed renovate/regorus-0.x from 9ba0a0f9cf to 68c5ec5624 2026-10-14 17:09:57 +00:00 Compare
renovate changed title from chore(deps): update rust crate regorus to 0.12 to chore(deps): update rust crate regorus to 0.13 2026-10-14 17:09:59 +00:00
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/regorus-0.x:renovate/regorus-0.x
git switch renovate/regorus-0.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/regorus-0.x
git switch renovate/regorus-0.x
git rebase main
git switch main
git merge --ff-only renovate/regorus-0.x
git switch renovate/regorus-0.x
git rebase main
git switch main
git merge --no-ff renovate/regorus-0.x
git switch main
git merge --squash renovate/regorus-0.x
git switch main
git merge --ff-only renovate/regorus-0.x
git switch main
git merge renovate/regorus-0.x
git push origin main
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
jmarya/terrarium!48
No description provided.