Skip to content

deps: bump libloading from 0.8.9 to 0.9.0 - #4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/libloading-0.9.0
Open

deps: bump libloading from 0.8.9 to 0.9.0#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/libloading-0.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown

Bumps libloading from 0.8.9 to 0.9.0.

Commits

@dependabot @github

dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Ttimmahlax pushed a commit that referenced this pull request Aug 20, 2026
…code

#3 bounds-check audit — DONE, and the headline is that there is nothing to fix
on the hot path: 39 panic_bounds_check sites lib-wide, ZERO reachable from the
shipped malloc / free / calloc fast paths (confirmed on the override .so). All
39 are on slow/cold paths (segment alloc/free, visitors, arena, teardown, and 2
on the malloc_generic refill). The safe-Rust allocator pays no bounds-check tax
where it matters. The 2 refill checks resisted a min(MAX_NORMAL_BIN) clamp on
bin (count unchanged) and sit on a cold path — not worth chasing, recorded so
the dead end is not re-explored.

#4 update_direct recompute — ASSESSED, premise false. bin_size(bin) for the
common bin <= 8 is bin << 3 (a shift), and bin_size(bin-1) runs only for
bin > 8. There is no costly recompute on the hot path, and replacing the shift
with a table/stored load would reintroduce a panic_bounds_check (bin from
bins::bin is unbounded to LLVM) that costs more than it saves. Left as-is.

Both are honest negative results with the evidence attached, which is the point
of the register: they stop the next person re-attempting a dead end. The Tier-2
win that DID land is #5 (calloc -20.62 Ir/op), committed separately.

Co-Authored-By: Claude Fable 5 (1M context) <noreply@anthropic.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/libloading-0.9.0 branch from 3666437 to 05fc645 Compare August 20, 2026 22:57
Bumps [libloading](https://github.com/nagisa/rust_libloading) from 0.8.9 to 0.9.0.
- [Commits](nagisa/rust_libloading@0.8.9...0.9.0)

---
updated-dependencies:
- dependency-name: libloading
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/libloading-0.9.0 branch from 05fc645 to 70f12ec Compare August 22, 2026 17:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants