Skip to content

chore: bump ic-canister-runtime to 0.2.3 to unblock canhttp on ic-cdk 0.20 - #11073

Open
claude[bot] wants to merge 4 commits into
masterfrom
bump-ic-canister-runtime-0.2.3
Open

chore: bump ic-canister-runtime to 0.2.3 to unblock canhttp on ic-cdk 0.20#11073
claude[bot] wants to merge 4 commits into
masterfrom
bump-ic-canister-runtime-0.2.3

Conversation

@claude

@claude claude Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

Requested by Nicolas Mattia, Mathias Björkqvist · Slack thread

Summary

Bump the ic-canister-runtime pin in the root Cargo.toml from 0.2.0 to 0.2.3 so that canhttp (and anything depending on it) stops pulling in ic-cdk 0.19 transitively.

Before: ic-canister-runtime = "0.2.0" (resolves to 0.2.1 in Cargo.lock), which depends on ic-cdk 0.19.0. canhttp's latest release already moved to ic-cdk 0.20 + ic-canister-runtime, but because ic-canister-runtime itself was pinned to an old version here, that path kept resolving back down to ic-cdk 0.19.

After: ic-canister-runtime = "0.2.3" (the latest version on crates.io as of this PR), which depends on ic-cdk ^0.20.1. This lets canhttp and its dependents resolve onto ic-cdk 0.20 instead of 0.19.

Related/context:

Changes

  • Cargo.toml: ic-canister-runtime = "0.2.0""0.2.3"
  • bazel/rust.MODULE.bazel: matching crate.spec(package = "ic-canister-runtime", version = "^0.2.0")"^0.2.3"

Known limitation / what still needs to happen in CI

Cargo.lock and the Bazel crate-index lockfiles (Cargo.Bazel.json.lock / Cargo.Bazel.toml.lock) are not regenerated in this PR. Regenerating them (cargo update, ./bin/bazel-pin.sh) requires fetching workspace git dependencies (e.g. dfinity-lab/build-info, used elsewhere in the workspace) that this sandbox environment cannot reach, and bazel itself is not available in the sandbox. I expect CI's lockfile-autofix job to regenerate both lockfiles against this Cargo.toml/MODULE.bazel change.

How Verified

Confirmed on crates.io that ic-canister-runtime 0.2.3 is the latest published version and its Cargo.toml depends on ic-cdk ^0.20.1 (not 0.19). Could not run cargo check / bazel build locally for the reason above — please rely on CI for the actual lockfile regeneration and build/test verification.

The pinned ic-canister-runtime 0.2.0 (resolving to 0.2.1 in Cargo.lock)
still depends on ic-cdk 0.19, so canhttp and everything that depends on
it stayed stuck on ic-cdk 0.19 even after other direct dependents moved
to 0.20. ic-canister-runtime 0.2.3 (latest on crates.io) depends on
ic-cdk ^0.20.1, so bumping the pin here lets those crates resolve onto
ic-cdk 0.20.

Cargo.lock is not regenerated in this commit: doing so requires
network access to fetch git dependencies (e.g. dfinity-lab/build-info)
that this sandbox cannot reach. Cargo.lock and the Bazel crate index
lockfiles are expected to be regenerated by CI's lockfile-autofix job.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WGJa83RwZsAEkJK5YRtef1
@github-actions github-actions Bot added the chore label Aug 7, 2026
@claude
claude Bot marked this pull request as ready for review August 7, 2026 14:38
@claude
claude Bot requested a review from a team as a code owner August 7, 2026 14:38
@github-actions github-actions Bot added the @idx label Aug 7, 2026
@claude
claude Bot enabled auto-merge August 7, 2026 14:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant