Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 15, 2025

Bumps rhai from 1.21.0 to 1.23.4.

Release notes

Sourced from rhai's releases.

Version 1.22.0

Bug fixes

  • (Fuzzing) An integer-overflow bug from an inclusive range in get_bits is fixed (#963).
  • (Fuzzing) Nested functions marked private now properly cause compilation errors (#993).
  • Passing function as a function pointer into a function in an imported module now correctly encapsulates the current environment into the generated function pointer (thanks @dcihlar #976). The same for passing a closure (thanks again, @dcihlar #979).
  • Revised epsilon-based floating-point comparisons (thanks @HactarCE #981).
  • Unneeded optional dependencies are no longer pulled in with features (thanks @HactarCE #987).
  • Engine::collect_fn_metadata now properly includes the namespaces of functions in static modules (thanks @therealprof and @elkowar #992).

Enhancements

  • Improve display of function call errors by displaying the caller function's source together with line number info (thanks @rhizoome and @HactarCE #988).
  • source and position in NativeCallContext are now fn_source and call_position. A new method call_source is added to return the source (if any) of the caller function (thanks @rhizoome and @HactarCE #989).
  • The &&, || and ?? operators are optimized to allow efficient chaining (#994).
Changelog

Sourced from rhai's changelog.

Rhai Release Notes

Version 1.23.0

Bug fixes

  • (Fuzzing) Fixed crash when using ..= in arrays, BLOB's, bit-fields and iterators (#1004).
  • Modules loaded within a ModuleResolversCollection now properly enable access to the scope etc.
  • Registered functions for comparison operators with only one operand being a custom type now works properly (thanks @mkeeter #1003).
  • NativeCallContext::fn_source now correctly returns the source of the function (usually None). The missing NativeCallContext::call_source is added to return the source of caller (thanks @FlashSystems #1013).
  • Engine::collect_fn_metadata now properly includes functions registered into the global namespace (thanks @therealprof and @matthiasbeyer #1017).

Enhancements

  • build.rs no longer writes to the source tree but OUT_DIR instead (thanks @matthiasbeyer #1018)
  • CustomType derive macro now supports generic types (thanks @ProphetOSpam #999). The rhai_codegen crate dependency is bumped to 3.0.0 or later.
  • CustomType derive macro now handles Option fields (thanks @agersant #1011).
  • Engine::eval_fn_call is added to make a generic function call.
  • Engine::eval_binary_op is added to quickly compare two Dynamic values.
  • Better handling for 32-bit architectures and enhanced safety by replacing casts with try_from (thanks @therealprof #1009).
  • The new symbol types $token$, $inner$, and $raw$ can now be used in custom syntax definitions (#1023).
  • Engine::register_custom_syntax_without_look_ahead_raw is added to allow the use of $raw$ in custom syntax, which returns the script text character-by-character without processing, by-passing the tokenizer. This in turn allows for parsing arbitrary syntax. (#1022)
  • CallFnOptions::in_all_namespaces is added to allow calling functions in all namespaces, instead of only scripted Rhai functions in the AST.

Version 1.22.2

This version removes the version restriction on ahash which may break code for no-std builds.

Version 1.22.1

Bug fixes

  • Do not mask out version 0.8.11 for ahash.

Version 1.22.0

Bug fixes

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rhai](https://github.com/rhaiscript/rhai) from 1.21.0 to 1.23.4.
- [Release notes](https://github.com/rhaiscript/rhai/releases)
- [Changelog](https://github.com/rhaiscript/rhai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rhaiscript/rhai/commits)

---
updated-dependencies:
- dependency-name: rhai
  dependency-version: 1.23.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Sep 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant