An open index of dependabot pull requests across open source projects.

build(deps): bump prost from 0.14.1 to 0.14.3

Closed
Number: #1334
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: January 10, 2026 at 07:55 PM UTC
(5 months ago)
Updated: February 04, 2026 at 01:56 PM UTC
(4 months ago)
Closed: February 04, 2026 at 01:56 PM UTC
(4 months ago)
Time to Close: 25 days
Labels:
dependencies rust
Description:

Bumps prost from 0.14.1 to 0.14.3.

Changelog

Sourced from prost's changelog.

Prost version 0.14.2

PROST! is a Protocol Buffers implementation for the Rust Language. prost generates simple, idiomatic Rust code from proto2 and proto3 files.

⚠️ Heads-up

  • Increase MSRV to 1.82 (#1356)

  • Update maintenance status to Passively Maintained (#1359)

    This excerpt is from the readme:

    The current maintainer is not contributing new features and doesn't have the time to review new features. Bug fixes and small improvements are welcome. Feel free to contribute small and easily reviewable PRs.

    Bug fixes are still important, and security fixes will be released as soon as possible. Contact the #prost channel in Tokio discord if you feel a bug or security fix is not getting enough attention.

    The maintainer expects the official protobuf project to release their rust library soon and expects it to be as fully featured as the C++ library. See their source code and crate for more information.

🚀 Features

  • Configure prost path via prost_build::Config or #[(prost(prost_path = "::prost")] (#1274)
  • Support for deprecated enum and oneof fields (#1316)

🐛 Bug Fixes

  • (prost-build) Resolve OneOf type name conflict with embedded message (#1294)
  • (prost-build) Avoid OneOf type collision with enums and keyword names (#1341)

💼 Dependencies

  • Use trait Error from core (#1179)
  • (deps) Update protobuf to v25.8 (#1323)
  • (deps) Update criterion requirement from 0.6 to 0.7 (#1308)
  • (deps) Update petgraph to 0.8 (#1327)
  • (deps) Bump actions/upload-artifact from 4 to 5 (#1351)
  • (deps) Bump actions/checkout from 5 to 6 (#1370)
  • Bump actions/checkout to v5 (#1312)
  • Update clippy to version 1.87 (#1292)
  • Replace once_cell dependency by std lib (#1119)

📚 Documentation

  • Update outdated link is test documentation (#1289)
  • Describe use of encoding module (#1322)
  • Update the readme MSRV to the actual number (#1331)
  • Update URLs after manual review (#1336)
  • Answer why fields are wrapped in option (#1358)

🎨 Styling

  • Add spaces to derive arguments in generated code (#1290)
  • Use variables directly in the format! string (#1293)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Package:
prost
Ecosystem:
cargo
Version Change:
0.14.1 → 0.14.3
Update Type:
Patch
Technical Details
ID: 13509866
UUID: 3800276037
Node ID: PR_kwDOHsDKY868f1xU
Host: GitHub
Repository: apache/datafusion-python