Bump noyalib from 0.0.42 to 0.0.43

[dependabot]

Bumps noyalib from 0.0.42 to 0.0.43.

Release notes

Sourced from noyalib's releases.

noyalib v0.0.43

What's Changed

• chore(version): the branch carries 0.0.43 from the start (0d120de)

Checksums

55f03682003f288e23f94d8f6222de0dcf15c77329b5e42b2f37421243c1d373  ./noyalib-0.0.43.crate

Changelog

Sourced from noyalib's changelog.

[v0.0.43] - 2026-09-08

Changed

• Lockstep release for a hardening pass on the VS Code extension's publish step in noyalib-lsp. No core code change.

Commits

• a939aae Merge pull request #420 from sebastienrousseau/feat/v0.0.43
• 0d120de chore(version): the branch carries 0.0.43 from the start
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: df0df202-b01a-413b-9a86-4e95fde21612

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[gcomte]

Dependency upgrade assessment — commit 202c196d9affb5a0b27f50286c4e118b3ab555c8

Assessed noyalib 0.0.42 → 0.0.43 against the comparison base and official upstream sources. No application changes are needed: the published library source is identical. Build, formatting, Clippy, and all 60 tests pass. The current security audit fails on an unchanged rustls vulnerability also present in the base; address that separately. The input workspace is unchanged.

Findings:

• Scope: one Cargo package, with no additional workspaces. Only noyalib's manifest version, locked version, and checksum changed. default-features = false, features = ["std"], and all transitive dependency versions remain unchanged.
• Verified both published artifacts against their lockfile SHA-256 checksums. All 69 Rust source files and build.rs are identical; package differences are version metadata and README examples. Sources: https://static.crates.io/crates/noyalib/noyalib-0.0.42.crate and https://static.crates.io/crates/noyalib/noyalib-0.0.43.crate
• The versioned changelog and complete upstream comparison confirm a lockstep release for noyalib-lsp's VS Code extension publishing. That change does not apply to this Rust CLI. There are no new core features, removed APIs, changed defaults, or migration requirements in this interval. Sources: https://github.com/sebastienrousseau/noyalib/blob/v0.0.43/CHANGELOG.md and sebastienrousseau/noyalib@v0.0.42...v0.0.43
• src/defaults.rs uses ParserConfig::new().no_schema(true) and from_str_with_config to preserve legacy unquoted decimal amounts without f64 rounding. This remains a supported, necessary configuration. Existing coverage checks exact numeric/quoted/scientific inputs, invalid amounts, a noyalib-generated YAML round trip, and configured JSON output order. Template file creation uses home-config and is unaffected. Versioned API source: https://github.com/sebastienrousseau/noyalib/blob/v0.0.43/crates/noyalib/src/de/config.rs
• noyalib's declared Rust minimum remains 1.86.0, compatible with bitcoinvert's declared 1.95.0 minimum. Local validation used Rust 1.98.0; the minimum toolchain and nightly unused-dependency check were not independently rerun.
• Separate security follow-up: both lockfiles contain rustls 0.23.44 through reqwest, used for HTTPS ticker requests. Both audits reproduce medium-severity RUSTSEC-2026-0285, published September 14 after the earlier passing PR checks. Upgrade rustls to >=0.23.45 through separate dependency maintenance; this assessment leaves unrelated versions and audit enforcement unchanged. Source: https://rustsec.org/advisories/RUSTSEC-2026-0285

The session reported running checks. No independent validation was run for this result.