Bump noyalib from 0.0.49 to 0.0.51

[dependabot]

Bumps noyalib from 0.0.49 to 0.0.51.

Release notes

Sourced from noyalib's releases.

noyalib v0.0.51

What's Changed

• docs: refresh v0.0.51 scorecard (63bca41)
• feat: add named parser profiles (8cd93ac)

Checksums

77d00fc12936a62c370ddaaba83218c753ba110b34a60ed6e278fd7b7389e350  ./noyalib-0.0.51.crate

noyalib v0.0.50

What's Changed

• docs: refresh v0.0.50 scorecard (baee5bd)
• feat: add backpressured async streams (9818692)

Checksums

b531a17559850e451513d968aae5806c3fd3b6a2283385ace509459d71709849  ./noyalib-0.0.50.crate

Changelog

Sourced from noyalib's changelog.

[v0.0.51] - 2026-09-22

Added

• Added stable Standard, Strict, and SerdeYaml parser profiles for explicit trust-boundary and compatibility configuration.
• Added ParserLimits extraction and replacement so callers can manage all resource budgets independently from YAML semantics and integrations.

Changed

• Derived default, strict, and serde-yaml compatibility budgets from one resource-limit abstraction while preserving existing constructors and public configuration fields.

[v0.0.50] - 2026-09-22

Added

• Added AsyncYamlStream constructors for backpressured Tokio document streams with default or caller-supplied parser configuration.

Fixed

• Applied YamlDecoder frame limits to each logical document instead of the aggregate read buffer, so several bounded documents delivered in one read are accepted and emitted in source order.

Commits

• c2646cd Merge pull request #458 from sebastienrousseau/feat/v0.0.51
• 63bca41 docs: refresh v0.0.51 scorecard
• 8cd93ac feat: add named parser profiles
• 3b219ed Merge pull request #457 from sebastienrousseau/feat/v0.0.50
• baee5bd docs: refresh v0.0.50 scorecard
• 9818692 feat: add backpressured async streams
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 37d510fa-65f4-4108-b0db-07849da3aecc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[gcomte]

Dependency upgrade assessment — commit 3ea94a76211e1be88709893daaca43c9d8b28442

Reviewed noyalib 0.0.49 → 0.0.51 against published source and the comparison base. No additional changes are needed: existing parsing preserves exact decimal amounts, and the new APIs do not improve this usage. All six configured validation commands passed. The input snapshot is unchanged; retain the Dependabot upgrade as proposed.

Findings:

• Cargo.toml and Cargo.lock contain the only dependency changes: noyalib 0.0.49 → 0.0.51. There is one package manifest, no additional workspaces, and no transitive version changes. Both downloaded crate checksums match their respective lockfiles.
• src/defaults.rs uses ParserConfig::new().no_schema(true) with from_str_with_config. Comparing published sources confirms unchanged defaults, resource budgets, and scalar parsing on this path. Retaining no_schema preserves legacy unquoted decimal amounts without f64 conversion. Existing tests cover exact amounts, invalid values, serialization round trips, configuration loading, and ordered JSON output.
• Version 0.0.51 adds ParserProfile and ParserLimits. Standard is equivalent to the existing constructor; adopting it would be cosmetic. Strict changes validation and budgets, while SerdeYaml changes compatibility semantics. Neither is justified for this upgrade. Source: https://github.com/sebastienrousseau/noyalib/blob/v0.0.51/src/de/config.rs
• Version 0.0.50 adds backpressured async streams and fixes per-document YamlDecoder frame limits. These do not apply: bitcoinvert parses a local YAML string synchronously, and its resolved noyalib feature set contains only std. Sources: https://github.com/sebastienrousseau/noyalib/blob/v0.0.51/CHANGELOG.md and https://github.com/sebastienrousseau/noyalib/blob/v0.0.51/src/tokio_async.rs
• No used API was removed or deprecated. Noyalib's declared Rust minimum remains 1.86.0, below bitcoinvert's 1.95.0 minimum. Published artifacts reviewed: https://static.crates.io/crates/noyalib/noyalib-0.0.49.crate and https://static.crates.io/crates/noyalib/noyalib-0.0.51.crate
• Validation used Rust 1.98.1; the exact minimum toolchain and nightly unused-dependency check were not rerun. Subagent startup failed, so source and security-path review were performed directly. No repository edits were made.

The session reported running checks. No independent validation was run for this result.