Skip to main content

max / makenotwork

Move the quasi pins to 0.59 quasi 0.59.0 adds Slot::revealed_by, a region saying which control and which value reveal it, which is a new public field on a struct with public fields. Forward-fixed in the same pass as the bump.
Author: Max Johnson <me@maxj.phd> · 2026-08-25 18:16 UTC
Signed with PGP, not checked
Commit: a813ee1d09567304eabc836ca5e37ceaa1d8d4fe
Parent: 2c6fa1d
1 file changed, +11 insertions, -7 deletions
M server/Cargo.toml +11 -7
@@ -150,6 +150,12 @@
150 150 # cannot drift apart the way their hand-written parsers did.
151 151 git-command = { path = "../shared/git-command" }
152 152
153 + # Custom Pages HTML/CSS sanitization. Extracted from `src/custom_pages/`
154 + # 2026-08-25 (infra `3e6154ea`) so its fuzz targets do not have to build the
155 + # whole server, which is what made them targets nobody ran. It imports nothing
156 + # from here: the policy goes in, sanitized output and rejections come out.
157 + custom-pages = { path = "../shared/custom-pages" }
158 +
153 159 # Shared theme palette + the bundled theme set (Tier 0 creator theming).
154 160 makeover = "3.0"
155 161
@@ -157,7 +163,7 @@
157 163 # through quasi beside its Askama equivalent, so the cost of describing a screen
158 164 # here is measured rather than argued. Not load-bearing for any shipped route.
159 165 # See wiki look-wave-2, tier G.
160 - quasi-router = { git = "https://makenot.work/git/max/quasi.git", version = "0.58" }
166 + quasi-router = { git = "https://makenot.work/git/max/quasi.git", version = "0.59" }
161 167 # The description vocabulary quasi's screen types are built from. Pinned here
162 168 # rather than reached through quasi-router's re-export because a described
163 169 # screen names FieldKind and Tone directly; it has to track what quasi-router
@@ -173,13 +179,13 @@
173 179 # For the request head the per-viewer state factory reads. axum re-exports it,
174 180 # but the factory's signature is quasi-axum's and names `http::request::Parts`.
175 181 http = "1.3.1"
176 - quasi-axum = { git = "https://makenot.work/git/max/quasi.git", version = "0.58" }
177 - quasi-webview = { git = "https://makenot.work/git/max/quasi.git", version = "0.58" }
182 + quasi-axum = { git = "https://makenot.work/git/max/quasi.git", version = "0.59" }
183 + quasi-webview = { git = "https://makenot.work/git/max/quasi.git", version = "0.59" }
178 184 # The first-party widget set. The carousel was proved here against three pages
179 185 # and then moved there; what is left in `quasi/widgets/carousel.rs` is the
180 186 # Askama glue. Not `makeover-basics`: a widget is an assembly of `Node`s, so it
181 187 # sits above quasi-router rather than inside the description suite.
182 - quasi-basics = { git = "https://makenot.work/git/max/quasi.git", version = "0.58" }
188 + quasi-basics = { git = "https://makenot.work/git/max/quasi.git", version = "0.59" }
183 189
184 190 # Git source browser
185 191 gix = { version = "0.86", default-features = false, features = ["blame", "mailmap", "revision", "sha1", "max-performance-safe"] }
@@ -228,8 +234,6 @@
228 234 x509-cert = "0.2.5"
229 235 const-oid = { version = "0.9", features = ["db"] }
230 236 object = { version = "0.39", features = ["pe"] }
231 - ammonia = "4"
232 - lightningcss = { version = "1.0.0-alpha.71", default-features = false, features = ["visitor"] }
233 237
234 238 [[bin]]
235 239 name = "mnw-admin"
@@ -273,7 +277,7 @@
273 277 # Written from the crate rather than copied into the repo for the reason the
274 278 # constants exist: a stale copy in a static directory is a silently dead bulk
275 279 # bar, and the version has to be the one the emitter agrees with.
276 - quasi-webview = { git = "https://makenot.work/git/max/quasi.git", version = "0.58" }
280 + quasi-webview = { git = "https://makenot.work/git/max/quasi.git", version = "0.59" }
277 281
278 282 [dev-dependencies]
279 283 tower = { version = "0.5.3", features = ["util"] }