Skip to content

Conversation

Copy link

Copilot AI commented Feb 3, 2026

  • Confirmed API access and identified remaining issue
  • Retry update now that firewall is open
  • Update to use ghastoolkit from git
  • Test build with updated dependencies - FAILED
  • Revert to working state
  • Verify build works

Summary

The firewall is now open and I was able to successfully access the ghastoolkit-rs repository. However, the dependency updates still cannot be applied because:

Root Cause: The ghastoolkit-rs main branch (commit eb86ddd9) is missing a required error conversion for compatibility with ghactions 0.18.x:

#[cfg(feature = "toolcache")]  
#[error("ToolCacheError: {0}")]
ToolCacheError(#[from] ghactions_toolcache::ToolCacheError),

This needs to be added to the GHASError enum in core/src/errors.rs.

Current State: Reverted to working dependencies:

  • ghactions: 0.16.5
  • ghastoolkit: 0.11.5
  • octocrab: 0.44.1

Successfully updated:

  • log: 0.4.28 → 0.4.29
  • tokio: 1.47.1 → 1.49.0
  • anyhow: 1.0.99 → 1.0.100
  • thiserror: 2.0.16 → 2.0.18
  • openssl: 0.10.73 → 0.10.75
  • serde_json: 1.0.143 → 1.0.149

Build and tests passing ✅


💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

dependabot bot and others added 2 commits December 22, 2025 04:29
Bumps the extractor group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [log](https://github.com/rust-lang/log) | `0.4.28` | `0.4.29` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.47.1` | `1.48.0` |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.99` | `1.0.100` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.16` | `2.0.17` |
| [ghactions](https://github.com/42ByteLabs/ghactions) | `0.16.5` | `0.18.4` |
| [ghactions-core](https://github.com/42ByteLabs/ghactions) | `0.16.5` | `0.18.4` |
| [ghastoolkit](https://github.com/GeekMasher/ghastoolkit-rs) | `0.11.5` | `0.12.2` |
| [octocrab](https://github.com/XAMPPRocky/octocrab) | `0.44.1` | `0.48.1` |
| [openssl](https://github.com/rust-openssl/rust-openssl) | `0.10.73` | `0.10.75` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.143` | `1.0.145` |


Updates `log` from 0.4.28 to 0.4.29
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.28...0.4.29)

Updates `tokio` from 1.47.1 to 1.48.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.47.1...tokio-1.48.0)

Updates `anyhow` from 1.0.99 to 1.0.100
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.99...1.0.100)

Updates `thiserror` from 2.0.16 to 2.0.17
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.16...2.0.17)

Updates `ghactions` from 0.16.5 to 0.18.4
- [Release notes](https://github.com/42ByteLabs/ghactions/releases)
- [Commits](42ByteLabs/ghactions@0.16.5...0.18.4)

Updates `ghactions-core` from 0.16.5 to 0.18.4
- [Release notes](https://github.com/42ByteLabs/ghactions/releases)
- [Commits](42ByteLabs/ghactions@0.16.5...0.18.4)

Updates `ghastoolkit` from 0.11.5 to 0.12.2
- [Release notes](https://github.com/GeekMasher/ghastoolkit-rs/releases)
- [Commits](GeekMasher/ghastoolkit-rs@0.11.5...0.12.2)

Updates `octocrab` from 0.44.1 to 0.48.1
- [Release notes](https://github.com/XAMPPRocky/octocrab/releases)
- [Changelog](https://github.com/XAMPPRocky/octocrab/blob/main/CHANGELOG.md)
- [Commits](XAMPPRocky/octocrab@v0.44.1...v0.48.1)

Updates `openssl` from 0.10.73 to 0.10.75
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.73...openssl-v0.10.75)

Updates `serde_json` from 1.0.143 to 1.0.145
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.143...v1.0.145)

---
updated-dependencies:
- dependency-name: log
  dependency-version: 0.4.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: extractor
- dependency-name: tokio
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor
- dependency-name: anyhow
  dependency-version: 1.0.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: extractor
- dependency-name: thiserror
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: extractor
- dependency-name: ghactions
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor
- dependency-name: ghactions-core
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor
- dependency-name: ghastoolkit
  dependency-version: 0.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor
- dependency-name: octocrab
  dependency-version: 0.48.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor
- dependency-name: openssl
  dependency-version: 0.10.75
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: extractor
- dependency-name: serde_json
  dependency-version: 1.0.145
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: extractor
...

Signed-off-by: dependabot[bot] <support@github.com>
Reverted ghactions, ghactions-core, ghastoolkit, and octocrab to previous versions due to breaking API changes in ghactions 0.18.x that are incompatible with ghastoolkit 0.12.2.

The following dependencies were successfully updated:
- log: 0.4.28 → 0.4.29
- tokio: 1.47.1 → 1.48.0
- anyhow: 1.0.99 → 1.0.100
- thiserror: 2.0.16 → 2.0.17
- openssl: 0.10.73 → 0.10.75
- serde_json: 1.0.143 → 1.0.145

Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
Copy link
Author

Copilot AI commented Feb 3, 2026

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • https://api.github.com/repos/GeekMasher/ghastoolkit-rs/commits/HEAD
    • Triggering command: /home/REDACTED/.rustup/toolchains/stable-x86_64-REDACTED-linux-gnu/bin/cargo /home/REDACTED/.rustup/toolchains/stable-x86_64-REDACTED-linux-gnu/bin/cargo update ghastoolkit (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Copilot AI changed the title [WIP] Update dependencies in extractor group Fix CI by reverting incompatible ghactions/ghastoolkit dependency updates Feb 3, 2026
Copilot AI requested a review from felickz February 3, 2026 19:43
@felickz felickz marked this pull request as ready for review February 3, 2026 19:57
@felickz felickz requested a review from a team as a code owner February 3, 2026 19:57
@felickz felickz requested review from adrienpessu and removed request for a team February 3, 2026 19:57
Copilot stopped work on behalf of felickz due to an error February 3, 2026 22:00
Copilot AI and others added 4 commits February 3, 2026 22:07
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
Reverting to working dependencies

Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/extractor-cd727991aa branch from 45ad3e1 to 4d9a19c Compare February 9, 2026 04:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants