CVS commit: pkgsrc/devel/sem

["pin" <pin%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   pin
Date:           Sat Oct 24 17:12:48 UTC 2026

Modified Files:
        pkgsrc/devel/sem: Makefile cargo-depends.mk distinfo

Log Message:
devel/sem: update to 0.28.1

## [0.28.1] - 2026-10-19

### Added

- **Bazel and Buck2 build files.** `BUILD`, `BUCK`, `WORKSPACE`, `PACKAGE` and files ending in `.bzl`, `.bazel`, `.bxl` or `.star` now parse as Starlark with the Python grammar. Each `rule(name = 
"...")` call in a build file is a `target` entity named after its target, so `sem diff` reports which targets changed, and functions in `.bzl` files are entities as in Python (#519).

### Fixed

- **The macOS binary no longer needs Homebrew's OpenSSL.** libgit2 was built with its HTTPS and SSH transports, which linked `/opt/homebrew/opt/openssl@3`, so `sem` aborted at launch on Macs without 
it. sem only reads local repositories, so `git2` now builds without those transports and the binary links only system libraries (#520).

## [0.28.0] - 2026-10-19

### Added

- Preview authenticated, loopback-only Streamable HTTP MCP via `sem mcp --http`, exposing read-only `sem_find` and `sem_grep` with shared repository caches. See `docs/mcp-http.md` for setup and 
deployment limits.
- **`sem_find` reads whole files, so an agent never needs Read, `cat` or `sed` to look at code or config.** With mode `context` and no query, it reads `files: [...]` (or the file in `in`) in one 
call, in parallel, numbered like `cat -n`, with an optional `lines` range. A file the session already read answers in one line when it is unchanged, and with a line diff against the version the agent 
saw when it changed; `fresh: true` resends it whole.
- **`sem check --run '<cmd>'` runs one build or test command the way an agent should see it.** The command runs in its own process group under a watchdog that stops it after `--idle` seconds without 
output (default 180, `0` turns it off), so a hung test costs minutes, not the shell's whole timeout; the answer is the lines that say what went wrong plus the last 40 lines, not the whole log. In 
long benchmark sessions builds and tests were about 90% of the time, and one hung test alone took 600 of a session's 1,480 seconds.
- **`sem check --run` names the scoped build when a whole-project build follows a small change.** For Maven, Gradle and Cargo, when at most half the modules changed it prints the command that builds 
only those (`-pl a,b`, `:a:build`, `-p a`). On an HBase task it was 5 of 55 modules, where each full `mvn install` took about eight minutes.
- **`sem check --run '<cmd>' --at base` answers "did this already fail before my change?" without stash and rebuild.** The command runs on the base revision in a side checkout that persists between 
calls, with build directories that start as copy-on-write clones of the working tree's, so the working tree and its build are never touched and the base build is incremental; answers are cached per 
base commit and command. Benchmark sessions spent up to ten minutes stashing, rebuilding and unstashing to learn this.
- **The prompt hook prefetches the code a prompt names again.** `sem hook prompt-submit` (installed by `sem setup`) looks up the identifiers a prompt mentions in the query index, in parallel and 
within two seconds, retrying an ambiguous name inside any file the prompt names, and hands their code, callers and callees to the agent before its first turn. It had been a no-op since the resident 
server it queried was removed.
- **Every entity `sem_find` shows carries its version (`v:…`, a hash of its source).** Pass it to weave's `weave_edit` as `expect` and the edit is refused if someone changed that entity since the 
read, so agents working in parallel never overwrite each other's version of a function.
- **`sem_grep` takes `in` (a directory, file or glob) and `bodies: true`**, which also returns each function, method or class around a hit, once, so one call finds and reads.
- **`sem_find` reads whenever it is given `files` or `lines`, and context lookups accept a kind prefix (`method Text.count`).** Both used to cost agents a retry.
- Added an optional portable agent plugin with Sem code-navigation and diff-review skills plus Weave merge-preview guidance, without changing default tools or installing binaries.

- **`sem check` covers every major language.** New checkers for Python (pyright or mypy), pytest, C and C++ (every unit in `compile_commands.json`), Gradle or Maven, dotnet and SwiftPM join 
TypeScript, lint, JS tests, Go and Cargo. Each still gives the verdict the full tool would.
  - **Python** rechecks only the files whose imports can reach a change and carries every other file's errors from the base, so a project that already has errors still checks incrementally. On rich 
(213 files), an edit inside a widely imported annotated function rechecks 1 file in 0.9s instead of 3.5s, with the same 336 diagnostics as the full run.
  - **pytest** reruns only the test files that can load a changed file and carries the rest, failures included.
  - **C and C++** recompile only the units that include a changed header. On zlib, a broken `zutil.h` recompiles 18 of 34 units and reports the same errors as a full build.
  - **Every build-system checker** (Cargo, Gradle or Maven, dotnet, SwiftPM) is skipped when no file it reads changed since the base passed. Docs edits and other languages' sources do not count, 
unless the build can read them (a Rust build script, a procedural macro or `include_str!`).
  - **Configured commands** take `inputs`, and are skipped when none changed since they passed.

### Fixed

- Removed redundant homepage metadata from the Rust packages where it duplicated the repository URL, avoiding Cargo's `redundant_homepage` warning (#510).

### Changed

- `sem cloud list` is now a hidden alias of `sem cloud repos`, which already showed the same account repos plus local caches (#511).
- **Warm graph rebuilds no longer re-parse unchanged Rust, Go and Python files.** These languages resolve calls through a pipeline that kept nothing between builds, so every rebuild re-read and 
re-parsed all of their files. The session now keeps each file's parsed call facts and reuses them while the file is unchanged. A no-change rebuild of quiver went from 164ms to 86ms, and of sem itself 
from 397ms to 322ms, with the graph still identical to a full build (#514).
- **Windows CI runs the test suite against release builds and reports every failure.** The wall-time and scale tests are calibrated for optimized binaries, so the debug build on the Windows runner 
overran them and failed main on four pushes in a row, each time on a different test because `cargo test` stopped at the first failing binary. Tests now build in release on the same target as the 
build step, and `--no-fail-fast` shows all failures at once.
- **The CLI golden tests pass in every timezone and on Windows.** The fixture committed with a bare Unix timestamp, so git stamped the machine's local timezone into each commit and the SHAs in the 
goldens only matched machines set to +0530; the fixture now pins that offset. The comparison also ignores the CRLF line endings a Windows checkout gives the golden files. The 50k-file memory-bound 
test runs only on Unix, since it reads peak memory with `ps`, which Windows does not have.

- TS/JS import edits preserve exact UTF-8 byte ranges and surrounding same-line code. Duplicate detection uses parsed declarations, and unavailable/invalid parsing refuses edits without changing the 
file rather than falling back to text matching.

- **`sem.addImport` now locates imports with the tree-sitter parser instead of scanning lines.** A new internal `sem imports` command returns a file's real top-level import statements by position, 
and `addImport` uses it for TypeScript/JavaScript files to supersede and place imports. Strings, comments and nested declarations are not import targets. Multi-line and non-leading imports are 
supported. With no imports, insertion appends a top-level declaration to preserve directive prologues and shebangs. Other languages retain their existing behavior.


To generate a diff of this commit:
cvs rdiff -u -r1.10 -r1.11 pkgsrc/devel/sem/Makefile \
    pkgsrc/devel/sem/distinfo
cvs rdiff -u -r1.4 -r1.5 pkgsrc/devel/sem/cargo-depends.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/sem/Makefile
diff -u pkgsrc/devel/sem/Makefile:1.10 pkgsrc/devel/sem/Makefile:1.11
--- pkgsrc/devel/sem/Makefile:1.10      Mon Oct  5 10:13:56 2026
+++ pkgsrc/devel/sem/Makefile   Sat Oct 24 17:12:48 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.10 2026/10/05 10:13:56 pin Exp $
+# $NetBSD: Makefile,v 1.11 2026/10/24 17:12:48 pin Exp $
 
-DISTNAME=      sem-0.27.0
+DISTNAME=      sem-0.28.1
 CATEGORIES=    devel
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=Ataraxy-Labs/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}
@@ -14,9 +14,9 @@ USE_TOOLS+=   pkg-config
 
 WRKSRC=                ${WRKDIR}/${DISTNAME}/crates/sem-cli
 
-#RUST_REQ=     1.100.0-beta.2
+#RUST_REQ=     1.100.0-beta.5
 #Upstream does not state the required MSRV.
-#This package is confirmed to build with Rust 1.100.0-beta.2 on amd64
+#This package is confirmed to build with Rust 1.100.0-beta.5 on amd64
 
 RUSTFLAGS+=    -C link-arg=${COMPILER_RPATH_FLAG}${SSLBASE}/lib
 
Index: pkgsrc/devel/sem/distinfo
diff -u pkgsrc/devel/sem/distinfo:1.10 pkgsrc/devel/sem/distinfo:1.11
--- pkgsrc/devel/sem/distinfo:1.10      Mon Oct  5 10:13:56 2026
+++ pkgsrc/devel/sem/distinfo   Sat Oct 24 17:12:48 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.10 2026/10/05 10:13:56 pin Exp $
+$NetBSD: distinfo,v 1.11 2026/10/24 17:12:48 pin Exp $
 
 BLAKE2s (adler2-2.0.1.crate) = 4d391e0fcde91c7435ee9a5503fee4a5346f549f1b45e482ce3e1e151d90f8f5
 SHA512 (adler2-2.0.1.crate) = 555b2b7ba6f8116acccd0bcd16ed34cc78162c81023cff31a8566ffcd456c03832089fca2d5b668ceaac4fe8f922d31aa9c487f226a36cace294ff4a219bd91d
@@ -81,6 +81,9 @@ Size (cc-1.2.62.crate) = 97212 bytes
 BLAKE2s (cfg-if-1.0.4.crate) = 517b7cff4f133f9b02492c0db281822fd02c24941a7aa4f9b1502895dc5e58d9
 SHA512 (cfg-if-1.0.4.crate) = 176e04df7ba783b7143bb84397b777f5c5a1305c08a5c3a218d4a66830620be89ed68992ba27686165bcd3fb2f34b2daf80b2a1d4b481ecc267c988e84d28e9d
 Size (cfg-if-1.0.4.crate) = 9360 bytes
+BLAKE2s (chacha20-0.10.2.crate) = 2c05644930908c5c92d9186e9d9ff3acd28a4fcc0ef6063d7b2c6cb0ecc9f749
+SHA512 (chacha20-0.10.2.crate) = 520fdd68425ad8dcc11e385ac4f5343294f9d78b962aa5d4f6cd34e40bd6258631d25fe0f03218a3913bf6cde1ba83d7db16359f1c5b9d0d299cc9b088157002
+Size (chacha20-0.10.2.crate) = 38197 bytes
 BLAKE2s (chrono-0.4.44.crate) = 48c6b840b300bbb2bee8ae415cdeb6c63a61272e19232453162be5bf0432c772
 SHA512 (chrono-0.4.44.crate) = 0b1a83885724e9180e71ee9fed146d070d88620d46b74970a67f4af04f583dddc0285e7d09574b99507786568ac7fb3f06a5dfbd25c51490c8d444c145bdee21
 Size (chrono-0.4.44.crate) = 240549 bytes
@@ -132,6 +135,9 @@ Size (core-foundation-sys-0.8.7.crate) =
 BLAKE2s (cow-utils-0.1.3.crate) = 751a505f2c5fed125b575d7d511bf0afe6c1f5888797fb01b01c988351141d6c
 SHA512 (cow-utils-0.1.3.crate) = 2e886218a2a575fc62e151c49c3ecf704a9cb55d2821788de19e347ba8191d52343a5d6a8be639f6b8fdaf588248d44f1917277a11c9fb18ac68b9996c88b7d8
 Size (cow-utils-0.1.3.crate) = 5796 bytes
+BLAKE2s (cpufeatures-0.3.1.crate) = 0a0ea5553e1d95e24ce6af32087a549301a3d83f4e3a2c43903b4d5e5dbca1a8
+SHA512 (cpufeatures-0.3.1.crate) = b3ebdc87dc7c7315fcea3e4d4ea1b712a671c058d0c1731343bb3313d6df6a0ec0b000fd2bcf141b0410014054901f9aa7f78bd12348fdfff2bf2fdf79a41b04
+Size (cpufeatures-0.3.1.crate) = 14272 bytes
 BLAKE2s (crc32fast-1.5.0.crate) = 6e59f675b6404c35e422facb545e38c3e519f2a1268066914b7111ffc2ed6409
 SHA512 (crc32fast-1.5.0.crate) = 80d473960f004148e14e5fe2f23aa0d1b8c36e96237f49a6765ef713030e8326dbc0250a561afcfc49d8733f5a6d4f9f4677451cc13e2426ffed61f8c00cd81e
 Size (crc32fast-1.5.0.crate) = 40723 bytes
@@ -399,9 +405,6 @@ Size (libmimalloc-sys-0.1.49.crate) = 50
 BLAKE2s (libsqlite3-sys-0.30.1.crate) = a4b1a390e752aa5d62e0a66fada5f57086f8387fb24e213827dc5fea23929f50
 SHA512 (libsqlite3-sys-0.30.1.crate) = 6ffb2a23a78f3221ac8f6c9260713741970e522bebc1ec7f3e1d7405f25dac9024ebe3a73d76a6ed74dc7109a8333d6936ad1c64a0a7c75d6d81f97c3524e952
 Size (libsqlite3-sys-0.30.1.crate) = 5122296 bytes
-BLAKE2s (libssh2-sys-0.3.1.crate) = 021edc22add2fc47511f93e23e91e87c5c2e6b92f8039c668af4d567a1148451
-SHA512 (libssh2-sys-0.3.1.crate) = f322f9559f7d81f7d50a9aabdefb394cb8589e6e7654dae1d1bf1527dcb2b999654fe5b49a3eb2b817665617f370d1ffbd443766d47effbc5b20d43872208488
-Size (libssh2-sys-0.3.1.crate) = 582851 bytes
 BLAKE2s (libz-sys-1.1.28.crate) = daca95b6613bb56b9a85693d875364f0ced7b7607ec34585e02633ee21ab61a3
 SHA512 (libz-sys-1.1.28.crate) = cd05a528feebf38351bc8e3817a3b554436ec4872c367dcb166f542a7ed5025dad396dea32c3046d2354cc9641716824e8985ea37a02d989e7c9a6c33401bfe8
 Size (libz-sys-1.1.28.crate) = 880536 bytes
@@ -483,9 +486,6 @@ Size (openssl-0.10.80.crate) = 307341 by
 BLAKE2s (openssl-macros-0.1.1.crate) = edb78e0a672af6601a8a2fb10b3d9064caa4059b92688e022ff5354bfa59cac3
 SHA512 (openssl-macros-0.1.1.crate) = 57e75c84f78fb83f884eeaedb0dd135ecb40192dad2facd908e6a575c9b65b38a2c93bca4630e09ea5a82c77d8bc8364cb2f5778cbfe9d8f484cafe3346b883c
 Size (openssl-macros-0.1.1.crate) = 5601 bytes
-BLAKE2s (openssl-probe-0.1.6.crate) = 5e1ba9009c251c2d4cc4a3f95a3a2039b0ff5382191369fa70706d26d1d757e9
-SHA512 (openssl-probe-0.1.6.crate) = 6c2f02a9d42caf578fbd2a40277ad346bef32d191f27564d04a83477d62d6ad1f44945f40234e9425503e3f701a9e0ec8735ade52641170ff57fa6732666ac69
-Size (openssl-probe-0.1.6.crate) = 8128 bytes
 BLAKE2s (openssl-src-300.6.0+3.6.2.crate) = 78f180870343c86390954a02cbca671d19164e2448e290765b3daccc9d04f40e
 SHA512 (openssl-src-300.6.0+3.6.2.crate) = 1d81acf3a6516b24498880861d85df0f6fe7ff36bfe15bda2046ecc10e02822d3b59f16924d109bb35456a0545c371a60f972f0f6cf90db2e24060721bc0ff0f
 Size (openssl-src-300.6.0+3.6.2.crate) = 7191232 bytes
@@ -609,12 +609,18 @@ Size (r-efi-5.3.0.crate) = 64532 bytes
 BLAKE2s (r-efi-6.0.0.crate) = 43354cc640d5fc19106e09dd1841a1e8fa6504bbc8db6eaceeac64641c8f3b35
 SHA512 (r-efi-6.0.0.crate) = 65f8c75c0201c3b922e6bf032ba9e6c648840f60939615565287b9c64d44f3fccbde209d8fe691937949cd76307b59c53801e6bd43ed7b8ada46d5d8fccf7012
 Size (r-efi-6.0.0.crate) = 65303 bytes
+BLAKE2s (rand-0.10.3.crate) = 7f82e92e147267f2155b14858447aa746ac7ab2173fe83e64ca6cfbcb1e65160
+SHA512 (rand-0.10.3.crate) = 2fe2397bf700ff1c9b495fa8f503e1f8836d4aa34c6e20d407687ae6278d541d84e603f623cd8dc9e5e51a13aa775e4253638c0ee1c2cce887b04273362bb9dd
+Size (rand-0.10.3.crate) = 105994 bytes
 BLAKE2s (rand-0.9.5.crate) = 7d2f72dd852f573fd6be8eba15bbf35301a2274c28aa6916ce63e34a83d22091
 SHA512 (rand-0.9.5.crate) = a59c3ddca83a6c6c5a8c39312d33aae2f7464017fca8738e2c8aed7ec013690eba7165d0f0dcc9caac4f103fd62663b80907de1cf9d41ae7a49db01f83f42343
 Size (rand-0.9.5.crate) = 100216 bytes
 BLAKE2s (rand_chacha-0.9.0.crate) = 92c607c07408ba75e10597aba27370fc46ceece6bf2e3d836de2eeb55af6dd72
 SHA512 (rand_chacha-0.9.0.crate) = f62a7bb067ff984049c96cddccc841cd9931daeb5b25bb69f056bfe577f62b1b35c08f2bb5028590eefa04a9369beead4e6b03607eec97256e0383b20542af96
 Size (rand_chacha-0.9.0.crate) = 18258 bytes
+BLAKE2s (rand_core-0.10.1.crate) = 073ca7cb0dd3dc6ca70daf6e5ba91e82ae0948bc5ed8be0231872168a6ae1da0
+SHA512 (rand_core-0.10.1.crate) = 7095ef3932cb731fd52a18208100aa01e27cc66aaafd933b70444158258ab2e9542ef0f1d0564f2db8846da597c9b4be5a3c0f865e68607b7d1725582282b94d
+Size (rand_core-0.10.1.crate) = 22833 bytes
 BLAKE2s (rand_core-0.9.5.crate) = bb780e2b4bfc4864096bdf32c3991e4b872e49c8f88cf785a5c6c1df3ca3345d
 SHA512 (rand_core-0.9.5.crate) = 0ae54e2fdc0fa8f6a2dd46fe29de26ac397b9f5c805424b3d06e467cf1d09762d66c7eb07ada74adb64ced326f15d4f415e665979d5de2b3f8e8cc1196547c56
 Size (rand_core-0.9.5.crate) = 24129 bytes
@@ -690,9 +696,9 @@ Size (schemars_derive-1.2.1.crate) = 313
 BLAKE2s (scopeguard-1.2.0.crate) = 4daf97de7fabaf7fe5ba6000f7132a46cc0bab2a297127580d9ac127d0a8fcec
 SHA512 (scopeguard-1.2.0.crate) = 6247719a15fe1e4e2d179127b9a934bd2f99367724f41175ed9522f58824b6bc69b35002eae66b35880375ff61d77ac43ddaa78cbde7160a35183a1da32d3fbb
 Size (scopeguard-1.2.0.crate) = 11619 bytes
-BLAKE2s (sem-0.27.0.tar.gz) = 35154a3d0fcf226005d4a17fa2ed94d858fd18a1100d85af5392774fd0442eb8
-SHA512 (sem-0.27.0.tar.gz) = a25113e639df4b9415f6a7767dd18c7d3d64aa60c5a04f01bfd103a9040ec64c2052ee6092bbec0f6d00a152f1945b07746f6e7aac9c3910b13c36a8a58338fa
-Size (sem-0.27.0.tar.gz) = 2697608 bytes
+BLAKE2s (sem-0.28.1.tar.gz) = c90bcfc357ede742376b5f72f277084dd1f027a82a738e2b1e6d98cb04ad8764
+SHA512 (sem-0.28.1.tar.gz) = c0bd7a2f8708c6809239d146671b8bd810dc3ba816747ebfb963b0b5020ad6c8b6f10b8bc04b8aaa1736e1167d3227a46d8ceb99f4ccda45e8d612d31048e1f7
+Size (sem-0.28.1.tar.gz) = 2770397 bytes
 BLAKE2s (semver-1.0.28.crate) = cc54fd8b7e1ad8e773e58137625a19c3ca7c46fec285a7eec1685230a1e9b88f
 SHA512 (semver-1.0.28.crate) = bb44373e60fccb83bc95e4277ea0abdd756a3f77b3334cf6d6b5fceac086910661ab94eb326cdc8fefce0c09220933bdf03bfd142c1594a92c9c1e4e931114b7
 Size (semver-1.0.28.crate) = 33064 bytes
@@ -762,6 +768,9 @@ Size (socket2-0.6.3.crate) = 59330 bytes
 BLAKE2s (spdx-0.10.9.crate) = 3e48cbb4b3ea810a6db0e62567e90d36ef5c129fe3741f4ee3b72c7664f60305
 SHA512 (spdx-0.10.9.crate) = 4ed56e48d6a04a6d717589d168ba5da03d1bb3d5abe1d79b468deb46dcdafa076b5ae1c8d077d01c8bd6cf9eb6a49c767a0d50fdaf2750448240ed85577929e2
 Size (spdx-0.10.9.crate) = 1050181 bytes
+BLAKE2s (sse-stream-0.2.6.crate) = 6e7619a15ebbdf2c38d8f8974a85cff737924c600700b79d589be7150eef6c08
+SHA512 (sse-stream-0.2.6.crate) = 5c48b2c3972e7921d1cb818068104a37574dcb9e4ff9691533948ad5f5a4c47f2799ba716864fc16106ca15796607838e3a820429c943baeef5426f197b15a75
+Size (sse-stream-0.2.6.crate) = 26576 bytes
 BLAKE2s (stable_deref_trait-1.2.1.crate) = b10100bc26d661fd9dce98e4be90e31ae3e6a0e723a77659f2ae67327ec492ce
 SHA512 (stable_deref_trait-1.2.1.crate) = 630721d3f8e9f3290efc250c42aba13e2325839e62167a2a611618c18c6aa58c08a53622db61a9aa920284570626b98df26b3c28009cf45b6ce1ec134b9c9f5c
 Size (stable_deref_trait-1.2.1.crate) = 8186 bytes
@@ -816,6 +825,9 @@ Size (tokio-1.52.3.crate) = 901393 bytes
 BLAKE2s (tokio-macros-2.7.0.crate) = e73f6786825ad350ccd605ca80ea15d224797a9bcb5509d5dbc3bf26197ae8a9
 SHA512 (tokio-macros-2.7.0.crate) = c93653ec669b092e928f71ed1e7af8783a5e9899739265389ee24301a0a5a9e2b98c69539937f78926e47c13a36aa70c70eae278ba6c082306e4044a7021c2c7
 Size (tokio-macros-2.7.0.crate) = 15859 bytes
+BLAKE2s (tokio-stream-0.1.19.crate) = 7045379c6cceb39982b27d781b0951bffc897ebafe4b5723c410425080e14e07
+SHA512 (tokio-stream-0.1.19.crate) = fb82ded555620df780c68e561e1a2744a2721cc8ca3744d91aac6f19c3d81c569306c099e3928c2431278945cfd85222d3762ef5961c6e503844a0c2cbf4009f
+Size (tokio-stream-0.1.19.crate) = 48088 bytes
 BLAKE2s (tokio-util-0.7.18.crate) = f948deec6ec1aa76861876e066545dc421ff5973181c426a8457215be38b9797
 SHA512 (tokio-util-0.7.18.crate) = 619504b1c7b10ef79da38b99e7c17affc0dbb984dc671bd1ca0c4b1ad3d1d86f80feee67b78fdb7fcf7ea989a0e9bd5d52714467f4881f31ef5f60cb989ec671
 Size (tokio-util-0.7.18.crate) = 140550 bytes
@@ -837,6 +849,9 @@ Size (topological-sort-0.2.2.crate) = 10
 BLAKE2s (tower-0.5.3.crate) = 0e162b148873dc7133eee0f0042da97be0d2b0dae53d1f88a5f694b307e35f30
 SHA512 (tower-0.5.3.crate) = 59ef5d805fbaea97ea05de33c54f7cdb76f793e5020baf25285183db20e50850f2b4906b7533330016bca4664066a97ffebcb605e4fbc2edfff8a9a244a01602
 Size (tower-0.5.3.crate) = 110488 bytes
+BLAKE2s (tower-http-0.6.11.crate) = 1357b1120686047d55ab48e9c5d42f2b4f9434e5384cfbdb20f5183170811939
+SHA512 (tower-http-0.6.11.crate) = 39e5f66c7cc446ead24956fab0638f64690c8ef9b072ba2ac6be11936557baa9c6cd052ec7b850c48df5e44719d7a95c50c1b16ca117fb37c98524cd9dee8624
+Size (tower-http-0.6.11.crate) = 156773 bytes
 BLAKE2s (tower-layer-0.3.3.crate) = c24a4a09a3879906630fd1abe5d197f3c17154afe54e82117ed6f668285c3d3e
 SHA512 (tower-layer-0.3.3.crate) = edf36671076cd29bb32c29351b648afbf3e7134316988a697c7807db62de7a63cb0339e4db7c0f36ed60d8aced7f3e493318cccc272070c037b01e2dd189b934
 Size (tower-layer-0.3.3.crate) = 6180 bytes
@@ -1005,6 +1020,9 @@ Size (utf8_iter-1.0.4.crate) = 10437 byt
 BLAKE2s (utf8parse-0.2.2.crate) = f323328af7b902180d7a9a03012ebc187b6f38e313bed41fba569ee9e402fa85
 SHA512 (utf8parse-0.2.2.crate) = f3dbf78fe924f1dc3cf9498b6e43fb10174699463f31091a7a8136d8f31ec84fc00e80e3d8551b7e86257e8b3573cfddb56fc0de797fdb2cde0e962a8f239266
 Size (utf8parse-0.2.2.crate) = 13499 bytes
+BLAKE2s (uuid-1.26.1.crate) = eb9672ecbf70f13daa6c5ec2996120aad61dd0367c19338a6b99a2fc827d29ca
+SHA512 (uuid-1.26.1.crate) = 298b8197a7c94d4d70bfe0860e21373421cbd53fb9681190171c71889b4b7de6d7bfa58d4e7ab99ebb4dc8bc718ede946f208eacb1cf9a08d693eef551cb422f
+Size (uuid-1.26.1.crate) = 65928 bytes
 BLAKE2s (valuable-0.1.1.crate) = df7602da20aa0212438759173532cf82c56ba05307e036b22bfddb318e2f82b7
 SHA512 (valuable-0.1.1.crate) = d8a4bffdc8a166d1ee11b87dd91cd68e5c898916b14db7039ad2faaad34f4bfef76f3fc3d17d6e7bf05e495778f7c9d5223fbf45331bd114f93fb6ec950eadbf
 Size (valuable-0.1.1.crate) = 28679 bytes

Index: pkgsrc/devel/sem/cargo-depends.mk
diff -u pkgsrc/devel/sem/cargo-depends.mk:1.4 pkgsrc/devel/sem/cargo-depends.mk:1.5
--- pkgsrc/devel/sem/cargo-depends.mk:1.4       Mon Oct  5 10:13:56 2026
+++ pkgsrc/devel/sem/cargo-depends.mk   Sat Oct 24 17:12:48 2026
@@ -1,4 +1,4 @@
-# $NetBSD: cargo-depends.mk,v 1.4 2026/10/05 10:13:56 pin Exp $
+# $NetBSD: cargo-depends.mk,v 1.5 2026/10/24 17:12:48 pin Exp $
 
 CARGO_CRATE_DEPENDS+=  adler2-2.0.1
 CARGO_CRATE_DEPENDS+=  ahash-0.8.12
@@ -27,6 +27,7 @@ CARGO_CRATE_DEPENDS+= cast-0.3.0
 CARGO_CRATE_DEPENDS+=  castaway-0.2.4
 CARGO_CRATE_DEPENDS+=  cc-1.2.62
 CARGO_CRATE_DEPENDS+=  cfg-if-1.0.4
+CARGO_CRATE_DEPENDS+=  chacha20-0.10.2
 CARGO_CRATE_DEPENDS+=  chrono-0.4.44
 CARGO_CRATE_DEPENDS+=  ciborium-0.2.2
 CARGO_CRATE_DEPENDS+=  ciborium-io-0.2.2
@@ -44,6 +45,7 @@ CARGO_CRATE_DEPENDS+= compact_str-0.10.0
 CARGO_CRATE_DEPENDS+=  console-0.15.11
 CARGO_CRATE_DEPENDS+=  core-foundation-sys-0.8.7
 CARGO_CRATE_DEPENDS+=  cow-utils-0.1.3
+CARGO_CRATE_DEPENDS+=  cpufeatures-0.3.1
 CARGO_CRATE_DEPENDS+=  crc32fast-1.5.0
 CARGO_CRATE_DEPENDS+=  criterion-0.5.1
 CARGO_CRATE_DEPENDS+=  criterion-plot-0.5.0
@@ -133,7 +135,6 @@ CARGO_CRATE_DEPENDS+=       libc-0.2.186
 CARGO_CRATE_DEPENDS+=  libgit2-sys-0.18.4+1.9.3
 CARGO_CRATE_DEPENDS+=  libmimalloc-sys-0.1.49
 CARGO_CRATE_DEPENDS+=  libsqlite3-sys-0.30.1
-CARGO_CRATE_DEPENDS+=  libssh2-sys-0.3.1
 CARGO_CRATE_DEPENDS+=  libz-sys-1.1.28
 CARGO_CRATE_DEPENDS+=  linux-raw-sys-0.12.1
 CARGO_CRATE_DEPENDS+=  litemap-0.8.2
@@ -161,7 +162,6 @@ CARGO_CRATE_DEPENDS+=       once_cell_polyfill
 CARGO_CRATE_DEPENDS+=  oorandom-11.1.5
 CARGO_CRATE_DEPENDS+=  openssl-0.10.80
 CARGO_CRATE_DEPENDS+=  openssl-macros-0.1.1
-CARGO_CRATE_DEPENDS+=  openssl-probe-0.1.6
 CARGO_CRATE_DEPENDS+=  openssl-src-300.6.0+3.6.2
 CARGO_CRATE_DEPENDS+=  openssl-sys-0.9.117
 CARGO_CRATE_DEPENDS+=  owo-colors-4.3.0
@@ -204,8 +204,10 @@ CARGO_CRATE_DEPENDS+=      quote-1.0.45
 CARGO_CRATE_DEPENDS+=  r-efi-5.3.0
 CARGO_CRATE_DEPENDS+=  r-efi-6.0.0
 CARGO_CRATE_DEPENDS+=  rand-0.9.5
+CARGO_CRATE_DEPENDS+=  rand-0.10.3
 CARGO_CRATE_DEPENDS+=  rand_chacha-0.9.0
 CARGO_CRATE_DEPENDS+=  rand_core-0.9.5
+CARGO_CRATE_DEPENDS+=  rand_core-0.10.1
 CARGO_CRATE_DEPENDS+=  rand_xorshift-0.4.0
 CARGO_CRATE_DEPENDS+=  rayon-1.12.0
 CARGO_CRATE_DEPENDS+=  rayon-core-1.13.0
@@ -253,6 +255,7 @@ CARGO_CRATE_DEPENDS+=       smallvec-1.15.1
 CARGO_CRATE_DEPENDS+=  smawk-0.3.3
 CARGO_CRATE_DEPENDS+=  socket2-0.6.3
 CARGO_CRATE_DEPENDS+=  spdx-0.10.9
+CARGO_CRATE_DEPENDS+=  sse-stream-0.2.6
 CARGO_CRATE_DEPENDS+=  stable_deref_trait-1.2.1
 CARGO_CRATE_DEPENDS+=  static_assertions-1.1.0
 CARGO_CRATE_DEPENDS+=  streaming-iterator-0.1.9
@@ -271,6 +274,7 @@ CARGO_CRATE_DEPENDS+=       tinystr-0.8.3
 CARGO_CRATE_DEPENDS+=  tinytemplate-1.2.1
 CARGO_CRATE_DEPENDS+=  tokio-1.52.3
 CARGO_CRATE_DEPENDS+=  tokio-macros-2.7.0
+CARGO_CRATE_DEPENDS+=  tokio-stream-0.1.19
 CARGO_CRATE_DEPENDS+=  tokio-util-0.7.18
 CARGO_CRATE_DEPENDS+=  toml-0.8.23
 CARGO_CRATE_DEPENDS+=  toml_datetime-0.6.11
@@ -278,6 +282,7 @@ CARGO_CRATE_DEPENDS+=       toml_edit-0.22.27
 CARGO_CRATE_DEPENDS+=  toml_write-0.1.2
 CARGO_CRATE_DEPENDS+=  topological-sort-0.2.2
 CARGO_CRATE_DEPENDS+=  tower-0.5.3
+CARGO_CRATE_DEPENDS+=  tower-http-0.6.11
 CARGO_CRATE_DEPENDS+=  tower-layer-0.3.3
 CARGO_CRATE_DEPENDS+=  tower-service-0.3.3
 CARGO_CRATE_DEPENDS+=  tracing-0.1.44
@@ -334,6 +339,7 @@ CARGO_CRATE_DEPENDS+=       ureq-2.12.1
 CARGO_CRATE_DEPENDS+=  url-2.5.8
 CARGO_CRATE_DEPENDS+=  utf8_iter-1.0.4
 CARGO_CRATE_DEPENDS+=  utf8parse-0.2.2
+CARGO_CRATE_DEPENDS+=  uuid-1.26.1
 CARGO_CRATE_DEPENDS+=  valuable-0.1.1
 CARGO_CRATE_DEPENDS+=  vcpkg-0.2.15
 CARGO_CRATE_DEPENDS+=  version_check-0.9.5