Skip to content

Update rust dependencies#4763

Merged
jpculp merged 1 commit intobottlerocket-os:developfrom
jpculp:20260211-deps
Feb 20, 2026
Merged

Update rust dependencies#4763
jpculp merged 1 commit intobottlerocket-os:developfrom
jpculp:20260211-deps

Conversation

@jpculp
Copy link
Member

@jpculp jpculp commented Feb 17, 2026

Description of changes:

Bumped cargo dependencies for packages under /sources.

Testing done:

Built and smoke tested Bottlerocket AMI.

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

Signed-off-by: Patrick J.P. Culp <jpculp@amazon.com>
@jpculp jpculp requested review from KCSesh, mgsharm and ytsssun February 17, 2026 22:11
snafu = "0.8"
tokio = { version = "~1.43", default-features = false }
tokio-tungstenite = { version = "0.20", default-features = false }
tokio = { version = "~1.47", default-features = false }
Copy link
Contributor

@KCSesh KCSesh Feb 20, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

From a quick grep - I am not actually seeing any tokio reference being used in any of the code. Can it be removed?

This error also seems unused.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Technically this is true, but by having it specified in the workspace cargo.toml allows us to more easily lock to the LTS as our other dependencies still require it and will just try to bump to the latest on cargo update.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I take that back. I thought we had other dependencies that still pulled it in, but maybe not.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let me split this into two PRs, one for bumping dependencies and another for pruning. I'd like to take a closer look at our packages.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This got me looking again - I noticed that we have these deps that are not used in BoB at all:

  • handlebars
  • tokio
  • shlex
    Not sure if that is something @jpculp you are tracking in the other separate PR.

@jpculp jpculp merged commit c94ceac into bottlerocket-os:develop Feb 20, 2026
2 checks passed
@jpculp jpculp deleted the 20260211-deps branch February 20, 2026 22:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants