Bump turbovec from 0.9.0 to 1.0.0

[dependabot]

Bumps turbovec from 0.9.0 to 1.0.0.

Changelog

Sourced from turbovec's changelog.

turbovec 1.0.0 (Python package) + turbovec 1.0.0 (Rust crate) — 2026-08-18

First stable release, and the two packages are now on one version — the crate and the Python package had drifted to 0.9.0 and 0.8.0 and both go to 1.0.0 here. What 1.0 commits to is the on-disk format: v7 is what turbovec reads and writes, and a file written by this release will be readable by later ones.

Breaking: v7 is the only format turbovec reads or writes. A .tv or .tvim file written by any earlier release no longer loads — it is refused with an error naming its version rather than misread. Use turbovec::convert, added in this release, to bring a v5 or v6 file forward (or take a v7 file back); cargo run --example convert -- <in> <out> v7 does it from a shell. Files older than v5 predate the rotation change that altered every encoded byte and can only be rebuilt from the source vectors.

What v7 buys is sync(): saving an index that has changed writes the rows that changed rather than the whole file, and write() / to_bytes() now produce the same container so there is one format to reason about instead of two.

The rest of the release is bug fixes, several of them long-lived. A delete could stall for seconds behind concurrent searches; the first small add after a load permanently doubled the codes buffer; a load allocated from a file's apparent length rather than its declared contents; a built index carried two copies of its codes for its lifetime; the stale-temp sweep never fired for long filenames; an aarch64 search got slower the moment an index crossed 32768 vectors; and Agno's async writes paid for embeddings before discovering the store was not created.

Commits

• ccab9f3 release: 1.0.0 (#537)
• 9f2c990 feat: convert index files between v5, v6 and v7 in any direction (#536)
• f10b0fe feat: v7 is the only format turbovec reads or writes (#535)
• 5e2b536 fix: five release-blocking bugs (#484, #501, #487, #473, #493) (#533)
• d8827fa test: pin the long-name sweep on the sync() path too (#534)
• ba2d09e perf: converge a built index onto the search layout alone (#475) (#532)
• 033c6d5 fix(io): sweep leaked temps for long destination filenames (#524)
• 38a044f test: pin which coordinate the invalid-input scan reports (#528)
• c0f14d3 fix: validate the quantity the kernels use, not just the stored value (#518)
• 97b1215 ci: exercise the abi3 floor on all three OSes, and the integrations at releas...
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.