[dependabot]

Bumps parking_lot from 0.12.5 to 0.13.0.

Release notes

Sourced from parking_lot's releases.

parking_lot-v0.13.0

• Signficantly improved Mutex and RwLock performance under contention by deferring waking up parked threads until after the lock is released. (#545)
• Added per-acquisition state to lock_api raw locks. RawMutex::Guard replaces GuardMarker; rwlocks have separate SharedGuard, ExclusiveGuard, and UpgradableGuard types. Unlock operations consume this state, while upgrade and downgrade operations return replacement state. Bump and raw condition-variable waits borrow and update the state. Consuming operations must release their acquisition on unwind; borrowing operations must restore ownership and valid state, or abort if restoration fails. (#544)
• Raised the MSRV to Rust 1.95 and upgraded all crates to edition 2024. (#533)
• Removed the hardware-lock-elision feature. (#533)
• Removed automatic eventual fairness. Fair unlocking remains available through the explicit fair-unlock APIs. This removes UnparkResult::be_fair. (#533)
• Removed the no-op lock_api/nightly feature. (#533)
• Removed the legacy lock_api const_new methods and the redundant parking_lot const_* constructor functions; the corresponding new methods can be called in constant contexts. (#533)
• Replaced the recursive read methods on RwLock with a dedicated reader-biased RecursiveRwLock type. The RawRwLockRecursive and RawRwLockRecursiveTimed extension traits have been removed from lock_api. (#533)
• Added Once::new_completed for constructing a Once in the completed state. (#520)
• Added Once::{is_completed, wait, wait_force} and the corresponding OnceState query methods. (#533)
• Made additional lock, timeout, parking, and spin-wait accessors usable in constant contexts. (#533)
• Added into_inner_with_raw to lock_api's Mutex, RwLock, and ReentrantMutex. (#524)
• Added RawCondvar, RawCondvarTimed, and the generic Condvar wrapper to lock_api, and implemented parking_lot::Condvar using them. Custom raw condition variables may allow spurious wakeups; their notification methods must then return false or 0. parking_lot::Condvar still guarantees no spurious wakeups and exact notification counts. (#523) (#533)
• Corrected the Send and Sync bounds of lock guards in lock_api. (#533)
• Made RawMutex::is_locked and RawRwLock::{is_locked, is_locked_exclusive} required methods. (#533)
• Renamed MappedRwLockReadGuard::try_map_or_else to try_map_or_err. (#533)
• Clarified the safety requirements of raw lock implementations, including acquire/release synchronization, moving or dropping a locked raw lock, preserving the original lock mode on a failed upgrade, and stable thread IDs. Acquisitions may unwind without leaving a new acquisition held; consuming guard operations release their acquisition on unwind, while bump and wait operations must restore ownership or abort. (#533) (#544)
• Clarified the aliasing requirements of unsafe raw-access, force-unlock, and guard-construction APIs in lock_api. (#533)
• Guard unlocked and unlocked_fair operations now abort if re-locking panics. Default raw-lock bump implementations also abort if re-locking panics. (#533)
• Guard with_upgraded operations abort if raw upgrading or downgrading panics, preserving continuous lock ownership. (#544)
• Parking-lot operations in parking_lot_core are now guaranteed to never unwind. (#533)
• Documented that parking-lot-based synchronization primitives must not be used

... (truncated)

Changelog

Sourced from parking_lot's changelog.

0.13.0 (parking_lot), 0.10.0 (parking_lot_core), 0.5.0 (lock_api) - 2026-10-21

• Signficantly improved Mutex and RwLock performance under contention by deferring waking up parked threads until after the lock is released. (#545)
• Added per-acquisition state to lock_api raw locks. RawMutex::Guard replaces GuardMarker; rwlocks have separate SharedGuard, ExclusiveGuard, and UpgradableGuard types. Unlock operations consume this state, while upgrade and downgrade operations return replacement state. Bump and raw condition-variable waits borrow and update the state. Consuming operations must release their acquisition on unwind; borrowing operations must restore ownership and valid state, or abort if restoration fails. (#544)
• Raised the MSRV to Rust 1.95 and upgraded all crates to edition 2024. (#533)
• Removed the hardware-lock-elision feature. (#533)
• Removed automatic eventual fairness. Fair unlocking remains available through the explicit fair-unlock APIs. This removes UnparkResult::be_fair. (#533)
• Removed the no-op lock_api/nightly feature. (#533)
• Removed the legacy lock_api const_new methods and the redundant parking_lot const_* constructor functions; the corresponding new methods can be called in constant contexts. (#533)
• Replaced the recursive read methods on RwLock with a dedicated reader-biased RecursiveRwLock type. The RawRwLockRecursive and RawRwLockRecursiveTimed extension traits have been removed from lock_api. (#533)
• Added Once::new_completed for constructing a Once in the completed state. (#520)
• Added Once::{is_completed, wait, wait_force} and the corresponding OnceState query methods. (#533)
• Made additional lock, timeout, parking, and spin-wait accessors usable in constant contexts. (#533)
• Added into_inner_with_raw to lock_api's Mutex, RwLock, and ReentrantMutex. (#524)
• Added RawCondvar, RawCondvarTimed, and the generic Condvar wrapper to lock_api, and implemented parking_lot::Condvar using them. Custom raw condition variables may allow spurious wakeups; their notification methods must then return false or 0. parking_lot::Condvar still guarantees no spurious wakeups and exact notification counts. (#523) (#533)
• Corrected the Send and Sync bounds of lock guards in lock_api. (#533)
• Made RawMutex::is_locked and RawRwLock::{is_locked, is_locked_exclusive} required methods. (#533)
• Renamed MappedRwLockReadGuard::try_map_or_else to try_map_or_err. (#533)
• Clarified the safety requirements of raw lock implementations, including acquire/release synchronization, moving or dropping a locked raw lock, preserving the original lock mode on a failed upgrade, and stable thread IDs. Acquisitions may unwind without leaving a new acquisition held; consuming guard operations release their acquisition on unwind, while bump and wait operations must restore ownership or abort. (#533) (#544)
• Clarified the aliasing requirements of unsafe raw-access, force-unlock, and guard-construction APIs in lock_api. (#533)
• Guard unlocked and unlocked_fair operations now abort if re-locking panics. Default raw-lock bump implementations also abort if re-locking panics. (#533)
• Guard with_upgraded operations abort if raw upgrading or downgrading panics, preserving continuous lock ownership. (#544)
• Parking-lot operations in parking_lot_core are now guaranteed to never unwind. (#533)

... (truncated)

Commits

• 1a5c3dd Update changelog
• ec07063 chore: release
• f369d24 Merge pull request #538 from napi-rs/wasi-threads-parker
• 2f4103f Remove the WASI backend note from stable restrictions
• a3e8717 Reuse existing CI jobs for WASI coverage
• c2bfc7b Merge pull request #549 from Amanieu/fix-l4re-condvar-clock
• 696f28b Don't use pthread_condattr_setclock on L4RE
• 52941c0 Share the libc dependency between Unix and WASI
• 4fde6a7 Align the Rust setup action with existing workflows
• f0ce547 Reuse the pthread backend for WASI on stable
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​parking_lot@​0.13.0

View full report

[jatmn]

@pullfrog review

[pullfrog]

✅ No new issues found.

Reviewed changes Reviewed the complete dependency update, its resolved graph, and compatibility with the repository's synchronization usage and pinned Rust toolchain.

• Direct dependencies: Updates the shared library and bot to parking_lot 0.13; the removed APIs and features are not used by these consumers, and upstream's Rust 1.95 minimum is below the repository's 1.96 pin.
• Dependency graph: Adds lock_api 0.5.0 and parking_lot_core 0.10.0, while retaining the older versions required by existing transitive dependencies. Checked the upstream API and fairness changes against current lock usage without finding an actionable regression.

Validation: cargo check --locked -p jmodguard -p jmodguard-bot --all-targets and cargo check --locked -p jmodguard-api --no-default-features --all-targets both passed locally. The PR's CI checks, including the Rust, Dylint, supply-chain, and remote-database groups, are green. The full local preflight and runtime contention benchmarks were not rerun.

  ^{｜ View workflow run ｜ Using gpt-6.1-sol ｜ 𝕏}

[jatmn]

✅ LGTM on fd05622. Dependabot parking_lot 0.12.5 → 0.13.0 (Cargo.toml, crates/bot/Cargo.toml, Cargo.lock). The 0.13 bump builds and all CI checks pass, including Sourcery. — jatmn's PR Review agent

[jatmn]

@pullfrog review

[pullfrog]

✅ No new issues found.

Reviewed changes Reviewed all three changed files at fb16f76, the resolved dependency graph, and compatibility with current synchronization usage.

• Direct dependencies: Moves the shared library and bot to parking_lot 0.13. The removed APIs and features are not used, and the upstream Rust 1.95 minimum is compatible with the repository's Rust 1.96 pin. Checked the changed fairness behavior against existing lock consumers without finding a concrete regression.
• Lockfile resolution: Adds lock_api 0.5.0 and parking_lot_core 0.10.0, retaining the older synchronization stack for transitive consumers such as libSQL, Serenity, and sessions.

Validation passed locally: cargo check --locked -p jmodguard -p jmodguard-bot --all-targets, cargo check --locked -p jmodguard-api --no-default-features --all-targets, and bash scripts/check-service-boundaries.sh. Current-head CI is green, including Rust, Dylint, supply-chain, and remote-database checks. The full local preflight and contention benchmarks were not rerun; no live provider calls were made. The worktree is unchanged.

  ^{｜ View workflow run ｜ Using gpt-6.1-sol ｜ 𝕏}

[jatmn]

✅ LGTM on fb16f76. The main merge adds nothing new to this PR's diff: still the parking_lot 0.12.5 → 0.13.0 bump (Cargo.toml, crates/bot/Cargo.toml, Cargo.lock). All CI checks green, including Sourcery and Pullfrog. — jatmn's PR Review agent