Verify the dependency version and check for security advisories.

Ensure that version 1.0.6 of lexical-parse-float exists and is free from known vulnerabilities.

🏁 Script executed:

#!/bin/bash
# Check for security advisories for lexical-parse-float

gh api graphql -f query='
{
  securityVulnerabilities(first: 5, ecosystem: CARGO, package: "lexical-parse-float") {
    nodes {
      advisory {
        summary
        severity
        publishedAt
      }
      vulnerableVersionRange
      firstPatchedVersion {
        identifier
      }
    }
  }
}'

Length of output: 477

🌐 Web query:

What is the latest version of lexical-parse-float crate on crates.io?

💡 Result:

The latest version is 1.0.5 (published Jan 10, 2025). [1][2]

Sources:

• Fedora crate update (lists lexical-parse-float 1.0.5). [1]
• Fedora packages page showing release 1.0.5 in Fedora Rawhide/Stable. [2]

Justify the use of build_unchecked() and verify it's necessary.

The change from build() to build_unchecked() removes runtime validation of the format configuration. While this is likely safe since the format is based on the predefined PYTHON3_LITERAL with a minor modification, this needs justification.

Possible reasons for this change:

1. The build() method may no longer be const-compatible in lexical-parse-float 1.0.6
2. Performance optimization for a compile-time constant

Please verify:

• Is this change required by the updated dependency version?
• Are the safety invariants upheld (valid format configuration)?

Consider adding a comment explaining why build_unchecked() is safe here, unless this is already documented elsewhere.

🏁 Script executed:

#!/bin/bash
# Check if build() method exists and is const-compatible in lexical-parse-float 1.0.6

# Search for NumberFormatBuilder documentation or usage examples
rg -n -C3 'NumberFormatBuilder.*build\(' --type rust

Length of output: 512

🌐 Web query:

Does lexical-parse-float 1.0.6 support const build() method on NumberFormatBuilder, or does it require build_unchecked() for const contexts?

💡 Result:

You can use the const build() method — NumberFormatBuilder::build is a const fn, so you do not need build_unchecked() for const contexts. [1][2]

Sources:

• NumberFormatBuilder (const build) — lexical-core docs. [1]
• Examples showing const usage with NumberFormatBuilder::build — lexical / lexical-parse-float docs. [2]