Skip to content

chore(deps): bump monty from 0.0.19 to 0.0.21 - #2297

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/monty-0.0.21
Open

chore(deps): bump monty from 0.0.19 to 0.0.21#2297
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/monty-0.0.21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor

Bumps monty from 0.0.19 to 0.0.21.

Release notes

Sourced from monty's releases.

v0.0.21 - 2026-08-09

What's Changed

Full Changelog: pydantic/monty@v0.0.20...v0.0.21

v0.0.20 - 2026-08-09

What's Changed

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [monty](https://github.com/pydantic/monty) from 0.0.19 to 0.0.21.
- [Release notes](https://github.com/pydantic/monty/releases)
- [Commits](pydantic/monty@v0.0.19...v0.0.21)

---
updated-dependencies:
- dependency-name: monty
  dependency-version: 0.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 13, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Aug 13, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
bashkit 206870a Commit Preview URL

Branch Preview URL
Aug 13 2026, 09:36 AM

@claude

claude Bot commented Aug 14, 2026

Copy link
Copy Markdown

Investigated this together with #2297. Two separate findings.

1. This PR cannot pass on its own. monty 0.0.19 depends on monty-types 0.0.19, so bumping only one of them leaves two monty-types versions in the graph and its result types stop unifying:

error[E0277]: the trait bound `monty_types::results::ExtFunctionResult:
              From<monty_types::ExtFunctionResult>` is not satisfied

That single cause is behind all ~22 failing checks here. monty and monty-types have to move together.

2. The combined bump is blocked by an upstream regression. I did the combined upgrade (#2298) and it compiles, but Monty 0.0.21 silently turns PythonLimits::max_memory into a no-op. max_memory is now evaluated from LIVE_MEMORY/BASELINE_MEMORY, which are only populated by monty-alloc installed as the process #[global_allocator]. Unarmed, probe_memory() is pinned at 0, so the limit can never fire — a 1M-item list allocation under a 2 MB cap exits 0 instead of being killed. The per-allocation on_grow/on_free hooks bashkit used to meter the VM were removed in the same change.

bashkit is a library and cannot install a global allocator on behalf of its embedders, so this is not fixable at our end. Evidence and options are in #2298.

Leaving this open rather than closing it so the upgrade isn't forgotten — but it should not be merged until the memory-enforcement question is resolved upstream, or an explicit decision is taken to narrow the guarantee.


Generated by Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants