Skip to content

chore(deps): bump turso_core from 0.8.2 to 0.8.3-pre.1 - #2707

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/turso_core-0.8.3-pre.1
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/turso_core-0.8.3-pre.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps turso_core from 0.8.2 to 0.8.3-pre.1.

Release notes

Sourced from turso_core's releases.

v0.8.3-pre.1

Install turso_cli 0.8.3-pre.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.8.3-pre.1/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.8.3-pre.1/turso_cli-installer.ps1 | iex"

Download turso_cli 0.8.3-pre.1

File Platform Checksum
turso_cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
turso_cli-x86_64-apple-darwin.tar.xz Intel macOS checksum
turso_cli-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
turso_cli-x86_64-pc-windows-msvc.zip x64 Windows checksum
turso_cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
turso_cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
Commits
  • 9bd1362 Turso 0.8.3-pre.1
  • 124803b Merge 'sync: order replayed schema operations per-transaction' from Mikaël Fr...
  • 83eb652 Update CHANGELOG.md
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [turso_core](https://github.com/tursodatabase/turso) from 0.8.2 to 0.8.3-pre.1.
- [Release notes](https://github.com/tursodatabase/turso/releases)
- [Changelog](https://github.com/tursodatabase/turso/blob/main/CHANGELOG.md)
- [Commits](tursodatabase/turso@v0.8.2...v0.8.3-pre.1)

---
updated-dependencies:
- dependency-name: turso_core
  dependency-version: 0.8.3-pre.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 13, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
bashkit 8d60554 Commit Preview URL

Branch Preview URL
Oct 13 2026, 04:16 AM

chaliy commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

Superseded by #2717, which carries this exact lockfile change plus the supply-chain audits it needs.

Every rust job here was green except Audit, where cargo vet --locked reported the four turso crates unvetted at 0.8.3. Dependabot cannot write an audit, and the / cargo entry excludes turso_* from the aggregated group precisely so each bump is reviewed on its own — so the review was the work, not the bump.

#2717 records four 0.8.2 -> 0.8.3 delta audits from a diff of each published package. turso_ext, turso_macros and turso_parser have no Rust source change at all; turso_core changes nine files, with no new dependencies, no new unsafe and no new host access — an AUTOINCREMENT is_called fix, a leaked MVCC read transaction released, a cursor seek fast path narrowed, and a logical-log header no longer published before its write lands.

Closing this one once #2717 merges.


Generated by Claude Code

chaliy added a commit that referenced this pull request Oct 13, 2026
Carries the bump from #2707 plus the supply-chain delta audits it needed. Every rust job on that PR was green except Audit, where cargo vet --locked reported the four turso crates unvetted at 0.8.3; dependabot cannot write an audit, and the "/" cargo entry excludes turso_* from the group precisely so each bump is reviewed on its own.

turso_ext, turso_macros and turso_parser have no Rust source change at all - zero differing .rs files, only version strings and release metadata. turso_core changes nine files, with no new dependencies, no new unsafe and no new host access: the AUTOINCREMENT disk advance now reads is_called so an explicit rowid of 1 no longer leaves the next generated id at 1; an abandoned MVCC commit releases the connection read transaction and main-database transaction state it previously leaked; cursor seek reuse narrows to keys matching at most one row; and the logical-log header upgrade is adopted only after its write lands, so a failed write keeps the previous on-disk header and retries.

turso_core remains BETA behind the non-default sqlite feature.
@chaliy chaliy closed this Oct 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/cargo/turso_core-0.8.3-pre.1 branch October 13, 2026 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant