build(deps): bump windows from 0.58.0 to 0.62.2

[dependabot]

Bumps windows from 0.58.0 to 0.62.2.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[greptile-apps]

Greptile Summary

The Windows dependency upgrade to windows 0.62.2 introduces an API incompatibility in the Windows sandbox. The Windows-targeted build fails until the job-object query passes the handle in the form required by the upgraded dependency.

Confidence Score: 4/5

Not safe to merge: the Windows-targeted sandbox build is currently broken.

A reproducible Windows compilation failure prevents affected users from building the CLI.

Files Needing Attention: src/cortex-windows-sandbox/src/job.rs needs to adapt its QueryInformationJobObject call to the upgraded Windows API; the dependency declarations in both sandbox manifests introduced the incompatible version.

T-Rex Logs

What T-Rex did

• T-Rex produced a finding-proof for a posted P1 finding and attached a shellscript and a log artifact to document the evidence.
• T-Rex produced a second finding-proof for another P1 finding and linked it to the related review comment.
• T-Rex performed a general contract validation flow on the Windows sandbox code, capturing decisive compiler output that shows a mismatched types error and documenting the before/after script artifacts.

_{Ran code and verified through T-Rex}

Comments Outside Diff (1)

1. General comment

   Windows sandbox no longer compiles with windows 0.62.2

   • Bug
     • The required Windows-targeted locked check fails with E0308 in cortex-windows-sandbox. QueryInformationJobObject is called with self.handle at src/cortex-windows-sandbox/src/job.rs:223, but the resolved windows 0.62.2 API requires Option<HANDLE>.
   • Cause
     • The manifest upgrade at src/cortex-windows-sandbox/Cargo.toml:9 and src/cortex-sandbox/Cargo.toml:30 resolves to windows 0.62.2 (Cargo.lock:8099-8108), whose generated QueryInformationJobObject signature wraps the job handle in Option<HANDLE>; the existing call site retains the prior bare HANDLE argument.
   • Fix
     • Update src/cortex-windows-sandbox/src/job.rs:223 to pass Some(self.handle) to QueryInformationJobObject, then rerun the same locked Windows-target check.

   _{Ran code and verified through T-Rex}

_{Reviews (1): Last reviewed commit: "build(deps): bump windows from 0.58.0 to..." | Re-trigger Greptile}

[greptile-apps]

Windows sandbox build fails

Updating this dependency resolves windows to 0.62.2, but src/cortex-windows-sandbox/src/job.rs:223 still passes a bare HANDLE to QueryInformationJobObject. That API now requires Option<HANDLE>, so the Windows-targeted sandbox build fails and Windows users cannot build the CLI from this revision. Update the call to pass Some(self.handle) before merging.

Artifacts

Evidence from the check

• The executable script records and runs the exact pinned-toolchain cargo check from the repository root, providing the reproducible source of the validation.

Command output from the check

• The captured command output shows the focused x86_64-pc-windows-gnu check exited 101 because job.rs passes HANDLE where windows 0.62.2 requires Option<HANDLE>, confirming the build-breaking incompatibility.

_{Ran code and verified through T-Rex}