chore(deps): bump rust-i18n-support from 4.2.1 to 4.2.2

[dependabot]

Bumps rust-i18n-support from 4.2.1 to 4.2.2.

Release notes

Sourced from rust-i18n-support's releases.

v4.2.2

What's Changed

• Bump serde-saphyr to 1.2 to fix smallvec version conflict by @​huacnlee in longbridge/rust-i18n#147

Full Changelog: longbridge/rust-i18n@v4.2.1...v4.2.2

Commits

• c47194d Version 4.2.2
• 96e1b61 Bump serde-saphyr to 1.2 to fix smallvec version conflict (#147)
• eed1f02 Update README.md (#145)
• See full diff in compare view

[github-actions]

Thanks @dependabot[bot] for taking the time to contribute.

This repository is observing a maintainer-managed PR intake gate in dry-run mode, so this pull request is staying open. This note helps maintainers prepare the allowlist before any enforcement is considered.

Please read CONTRIBUTING.md for the expected contribution shape. A maintainer can grant recurring PR access by commenting /lgtm on a pull request.

[Hmbown]

Brought this branch up to date with main (green since ccbef2c) so CI runs against a base that passes; the earlier red lanes were inherited from the red main this PR was opened on. Merging once the re-run is green.

---

Generated by Claude Code

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[claude]

Claude finished @Hmbown's task in 38s —— View job

---

Review: chore(deps): bump rust-i18n-support 4.2.1 → 4.2.2

• Gather context (diff, CLAUDE.md/AGENTS.md)
• Understand the request (dependabot bump review)
• Review Cargo.lock / Cargo.toml diff
• Check for correctness/provider-safety/security implications
• Post final review

Summary: This is a routine, mechanical dependency bump with no hand-written source changes — only crates/localization/Cargo.toml (pin bump) and the resulting Cargo.lock diff.

• crates/localization/Cargo.toml:19 — rust-i18n-support pinned exactly "=4.2.1" → "=4.2.2", consistent with the upstream release fixing a smallvec version conflict via serde-saphyr (per the linked release notes).
• Cargo.lock — the transitive resolution pulls serde-saphyr 0.0.29 → 1.3.0 and granit-parser 0.0.7 → 1.3.0 (both major version jumps, expected since serde-saphyr's own major bump is what fixes the smallvec conflict), plus a broad windows-sys consolidation onto 0.61.2 and getrandom 0.3.4 → 0.4.3 for tempfile. These are all standard resolver-driven transitive updates that ride along with the direct bump — nothing here is hand-edited or suspicious.

Findings by priority:

1. Correctness bugs: None — no source/logic changes, build-dependency version bump only.
2. Provider/model/route safety (EPIC v0.8.65 EPIC: Separate provider facts, model facts, offerings, and route resolution #2608): Not applicable — this PR touches only the localization build-dependency and lockfile, no provider/model/routing code.
3. Reuse/simplification: N/A, dependency-only change.
4. Tests: N/A, no behavior change; existing build/CI (cargo-deny, CI workflow) is the right gate here and is still pending/queued at review time.
5. Security: No CVE indicated by the upstream release notes (fixes a version-conflict build issue, not a security advisory). cargo-deny in CI will independently flag any advisory/license issue in the new transitive graph.

No changes requested — this looks safe to merge once CI (CI, cargo-deny, Security audit) finishes green.
· Branch: dependabot/cargo/rust-i18n-support-4.2.2

[codewhale-agent]

Codewhale review did not run

codewhale review --pr 6339 (provider: deepseek) could not reach the model: Review pass 1/1 request failed: Responses API request failed: LLM error: HTTP 402: Insufficient Balance; no partial review was accepted or posted; publication: n.
This is a provider funding/config problem, not a finding about this PR. The check stays advisory; a maintainer with secret access needs to fund or rotate the review key (see .github/workflows/codewhale-review.yml). Re-run the workflow after that.