Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the dependencies group across 1 directory with 14 updates #1653

Merged
merged 1 commit into from
Mar 10, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 10, 2025

Bumps the dependencies group with 14 updates in the / directory:

Package From To
anyhow 1.0.96 1.0.97
clap 4.5.30 4.5.31
console 0.15.10 0.15.11
ring 0.17.11 0.17.13
serde 1.0.218 1.0.219
serde_json 1.0.139 1.0.140
tokio 1.43.0 1.44.0
tempfile 3.17.1 3.18.0
uuid 1.14.0 1.15.1
wiremock 0.6.2 0.6.3
async-trait 0.1.86 0.1.87
cached 0.54.0 0.55.1
thiserror 2.0.11 2.0.12
rstest 0.24.0 0.25.0

Updates anyhow from 1.0.96 to 1.0.97

Release notes

Sourced from anyhow's releases.

1.0.97

  • Documentation improvements
Commits

Updates clap from 4.5.30 to 4.5.31

Release notes

Sourced from clap's releases.

v4.5.31

[4.5.31] - 2025-02-24

Features

  • Add ValueParserFactory for Saturating<T>
Changelog

Sourced from clap's changelog.

[4.5.31] - 2025-02-24

Features

  • Add ValueParserFactory for Saturating<T>
Commits
  • acf9abb chore: Release
  • 9186a18 docs: Update changelog
  • 233c316 Merge pull request #5926 from sorairolake/feature/value-parser-factory-for-sa...
  • 13931a2 Merge pull request #5923 from Reverier-Xu/master
  • 536e29f feat(builder): Add ValueParserFactory for Saturating\<T>
  • 45ed71c chore: Avoid using gen for rust 2024 preserved keyword
  • 5029bb3 chore: Avoid using gen for rust 2024 preserved keyword
  • 8a1d59b chore(deps): Update Rust Stable to v1.85 (#5921)
  • 9caee53 docs(changelog): Clarify 5.0.0
  • cb2352f Merge pull request #5918 from epage/test
  • Additional commits viewable in compare view

Updates console from 0.15.10 to 0.15.11

Release notes

Sourced from console's releases.

0.15.11

What's Changed

Commits
  • c7002e3 Refer to GitHub Releases
  • 73033ec Bump version to 0.15.11
  • 4fa21ad Simplify windows read_single_key()
  • 456eb78 Remove unused cruft
  • 8623cd6 Simplify ConsoleModeGuard::set()
  • ca2e0f8 Use match for creation of new console mode
  • 2f7184f Add docstring for Windows set_console_mode()
  • 3c7ba95 Explicitly handle CtrlC on Windows (#235)
  • de16ee6 Run clippy on all major platforms
  • cb6126e Extend application of clippy
  • Additional commits viewable in compare view

Updates ring from 0.17.11 to 0.17.13

Changelog

Sourced from ring's changelog.

Version 0.17.13 (2025-03-06)

Increased MSRV to 1.66.0 to avoid bugs in earlier versions so that we can safely use core::arch::x86_64::__cpuid and core::arch::x86::__cpuid from Rust in future releases.

AVX2-based VAES-CLMUL implementation. This will be a notable performance improvement for most newish x86-64 systems. This will likely raise the minimum binutils version supported for very old Linux distros.

Version 0.17.12 (2025-03-05)

Bug fix: briansmith/ring#2447 for denial of service (DoS).

  • Fixes a panic in ring::aead::quic::HeaderProtectionKey::new_mask() when integer overflow checking is enabled. In the QUIC protocol, an attacker can induce this panic by sending a specially-crafted packet. Even unintentionally it is likely to occur in 1 out of every 2**32 packets sent and/or received.

  • Fixes a panic on 64-bit targets in ring::aead::{AES_128_GCM, AES_256_GCM} when overflow checking is enabled, when encrypting/decrypting approximately 68,719,476,700 bytes (about 64 gigabytes) of data in a single chunk. Protocols like TLS and SSH are not affected by this because those protocols break large amounts of data into small chunks. Similarly, most applications will not attempt to encrypt/decrypt 64GB of data in one chunk.

Overflow checking is not enabled in release mode by default, but RUSTFLAGS="-C overflow-checks" or overflow-checks = true in the Cargo.toml profile can override this. Overflow checking is usually enabled by default in debug mode.

Commits

Updates serde from 1.0.218 to 1.0.219

Release notes

Sourced from serde's releases.

v1.0.219

  • Prevent absolute_paths Clippy restriction being triggered inside macro-generated code (#2906, thanks @​davidzeng0)
Commits
  • 49d098d Release 1.0.219
  • 40f1d19 Wrap dummy.rs to 80 columns
  • 514848b Merge pull request #2906 from davidzeng0/master
  • 168b6cf fix clippy absolute paths warning
  • a8bdd17 Remove unused Punctuated import
  • 1c96013 Resolve mem_replace_with_default clippy lint
  • f0d1ae0 Ignore elidable_lifetime_names pedantic clippy lint
  • e3eaa6a Merge pull request #2896 from dtolnay/stabledoc
  • 6a630cf Also link to stable proc_macro
  • See full diff in compare view

Updates serde_json from 1.0.139 to 1.0.140

Release notes

Sourced from serde_json's releases.

v1.0.140

  • Documentation improvements
Commits
  • 7627834 Release 1.0.140
  • d77a498 Merge pull request #1245 from serde-rs/powerpc
  • b34d317 Delete unused gcc installation
  • f7200c3 Ignore unbuffered_bytes clippy lint
  • 76cd4fb Ignore elidable_lifetime_names pedantic clippy lint
  • 400eaa9 Point standard library links to stable
  • See full diff in compare view

Updates tokio from 1.43.0 to 1.44.0

Release notes

Sourced from tokio's releases.

Tokio v1.44.0

1.44.0 (March 7th, 2025)

This release changes the from_std method on sockets to panic if a blocking socket is provided. We determined this change is not a breaking change as Tokio is not intended to operate using blocking sockets. Doing so results in runtime hangs and should be considered a bug. Accidentally passing a blocking socket to Tokio is one of the most common user mistakes. If this change causes an issue for you, please comment on #7172.

Added

  • coop: add task::coop module (#7116)
  • process: add Command::get_kill_on_drop() (#7086)
  • sync: add broadcast::Sender::closed (#6685, #7090)
  • sync: add broadcast::WeakSender (#7100)
  • sync: add oneshot::Receiver::is_empty() (#7153)
  • sync: add oneshot::Receiver::is_terminated() (#7152)

Fixed

  • fs: empty reads on File should not start a background read (#7139)
  • process: calling start_kill on exited child should not fail (#7160)
  • signal: fix CTRL_CLOSE, CTRL_LOGOFF, CTRL_SHUTDOWN on windows (#7122)
  • sync: properly handle panic during mpsc drop (#7094)

Changes

  • runtime: clean up magic number in registration set (#7112)
  • coop: make coop yield using waker defer strategy (#7185)
  • macros: make select! budget-aware (#7164)
  • net: panic when passing a blocking socket to from_std (#7166)
  • io: clean up buffer casts (#7142)

Changes to unstable APIs

  • rt: add before and after task poll callbacks (#7120)
  • tracing: make the task tracing API unstable public (#6972)

Documented

  • docs: fix nesting of sections in top-level docs (#7159)
  • fs: rename symlink and hardlink parameter names (#7143)
  • io: swap reader/writer in simplex doc test (#7176)
  • macros: docs about select! alternatives (#7110)
  • net: rename the argument for send_to (#7146)
  • process: add example for reading Child stdout (#7141)
  • process: clarify Child::kill behavior (#7162)
  • process: fix grammar of the ChildStdin struct doc comment (#7192)
  • runtime: consistently use worker_threads instead of core_threads (#7186)

#6685: tokio-rs/tokio#6685 #6972: tokio-rs/tokio#6972 #7086: tokio-rs/tokio#7086 #7090: tokio-rs/tokio#7090

... (truncated)

Commits

Updates tempfile from 3.17.1 to 3.18.0

Changelog

Sourced from tempfile's changelog.

3.18.0

  • Update rustix to 1.0.0.
  • Make NamedTempFile::persist_noclobber atomic on Apple operating systems. It's now atomic on MacOS, Windows, and Linux (depending on the OS version and filesystem used).
Commits

Updates uuid from 1.14.0 to 1.15.1

Release notes

Sourced from uuid's releases.

v1.15.1

What's Changed

Full Changelog: uuid-rs/uuid@v1.15.0...v1.15.1

v1.15.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.14.0...v1.15.0

Commits
  • 4e5b88e Merge pull request #812 from uuid-rs/cargo/v1.15.1
  • 7fb64f7 prepare for 1.15.1 release
  • f05b6df Merge pull request #811 from uuid-rs/fix/v7-overflow
  • c2d313f guarantee v7 timestamp will never overflow
  • 56ba68f Merge pull request #810 from uuid-rs/cargo/v1.15.0
  • 26c8a9b prepare for 1.15.0 release
  • e468f99 Merge pull request #809 from uuid-rs/feat/v7-precision
  • c46f4e0 add bench for additional precision v7
  • 6c4597c document extra precision behavior
  • 295593a ensure sub-millisecond precision fits into the requested number of bits
  • Additional commits viewable in compare view

Updates wiremock from 0.6.2 to 0.6.3

Commits

Updates async-trait from 0.1.86 to 0.1.87

Release notes

Sourced from async-trait's releases.

0.1.87

  • Documentation improvements
Commits
  • 32540aa Release 0.1.87
  • 137d14c Resolve mem_replace_with_default clippy lint
  • 45fd82a Ignore elidable_lifetime_names pedantic clippy lint
  • ea2f2a2 Point standard library links to stable
  • 3b78161 Update ui test suite to nightly-2025-02-12
  • See full diff in compare view

Updates cached from 0.54.0 to 0.55.1

Changelog

Sourced from cached's changelog.

[0.55.1 / [cached_proc_macro[0.24.0]]]

Added

  • Add sync_writes = "by_key" support to `#[cached]

Changed

  • Update redis to 0.29.0
  • Update directories to 6.0
  • Update thiserror to 2.0
  • With the sync_writes = "by_key" addition, the argument values changed from a boolean to strings. The equivalent of sync_writes = true is now sync_writes = "default"

Removed

Commits

Updates thiserror from 2.0.11 to 2.0.12

Release notes

Sourced from thiserror's releases.

2.0.12

  • Prevent elidable_lifetime_names pedantic clippy lint in generated impl (#413)
Commits
  • 95a5126 Release 2.0.12
  • 76490f7 Merge pull request #413 from dtolnay/elidablelifetime
  • 9f27b76 Ignore elidable_lifetime_names pedantic clippy lint
  • daf2a6f Resolve some elidable_lifetime_names pedantic clippy lint
  • 5f07160 Point standard library links to stable
  • 6706a51 Convert html links to intra-doc links
  • 2706873 More precise gitignore patterns
  • 70bc20d Remove **/*.rs.bk from project-specific gitignore
  • See full diff in compare view

Updates rstest from 0.24.0 to 0.25.0

Release notes

Sourced from rstest's releases.

0.25.0

What's Changed

New Contributors

Full Changelog: la10736/rstest@v0.24.0...v0.25.0

Changelog

Sourced from rstest's changelog.

[0.25.0] 2025/3/2

Changed

  • Append generated test macro so next test macros are aware of it (see #291 thanks to @​kezhuw).

Add

  • Added a #[mode = ...] attribute to be used with the #[files(...)] attribute to change the way the files get passed to the test. (see #295 thanks to @​lucascool12)
Commits
  • 8d80cea Prepare release
  • eb1f228 Make clippy happy
  • f570b06 Avoid concurrent manifest changes in integration tests
  • 8551eb8 feat: add include_str and include_bytes file input behaviour
  • e0b735e Append generated test macro so next test macros are aware of it
  • 154d0b0 Prepare develop
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyhow](https://github.com/dtolnay/anyhow) | `1.0.96` | `1.0.97` |
| [clap](https://github.com/clap-rs/clap) | `4.5.30` | `4.5.31` |
| [console](https://github.com/console-rs/console) | `0.15.10` | `0.15.11` |
| [ring](https://github.com/briansmith/ring) | `0.17.11` | `0.17.13` |
| [serde](https://github.com/serde-rs/serde) | `1.0.218` | `1.0.219` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.139` | `1.0.140` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.43.0` | `1.44.0` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.17.1` | `3.18.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.14.0` | `1.15.1` |
| [wiremock](https://github.com/LukeMathWalker/wiremock-rs) | `0.6.2` | `0.6.3` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.86` | `0.1.87` |
| [cached](https://github.com/jaemk/cached) | `0.54.0` | `0.55.1` |
| [thiserror](https://github.com/dtolnay/thiserror) | `2.0.11` | `2.0.12` |
| [rstest](https://github.com/la10736/rstest) | `0.24.0` | `0.25.0` |



Updates `anyhow` from 1.0.96 to 1.0.97
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](dtolnay/anyhow@1.0.96...1.0.97)

Updates `clap` from 4.5.30 to 4.5.31
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.30...v4.5.31)

Updates `console` from 0.15.10 to 0.15.11
- [Release notes](https://github.com/console-rs/console/releases)
- [Changelog](https://github.com/console-rs/console/blob/main/CHANGELOG.md)
- [Commits](console-rs/console@0.15.10...0.15.11)

Updates `ring` from 0.17.11 to 0.17.13
- [Changelog](https://github.com/briansmith/ring/blob/main/RELEASES.md)
- [Commits](https://github.com/briansmith/ring/commits)

Updates `serde` from 1.0.218 to 1.0.219
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.218...v1.0.219)

Updates `serde_json` from 1.0.139 to 1.0.140
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.139...v1.0.140)

Updates `tokio` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.43.0...tokio-1.44.0)

Updates `tempfile` from 3.17.1 to 3.18.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.17.1...v3.18.0)

Updates `uuid` from 1.14.0 to 1.15.1
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.14.0...v1.15.1)

Updates `wiremock` from 0.6.2 to 0.6.3
- [Changelog](https://github.com/LukeMathWalker/wiremock-rs/blob/main/CHANGELOG.md)
- [Commits](LukeMathWalker/wiremock-rs@v0.6.2...v0.6.3)

Updates `async-trait` from 0.1.86 to 0.1.87
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.86...0.1.87)

Updates `cached` from 0.54.0 to 0.55.1
- [Changelog](https://github.com/jaemk/cached/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jaemk/cached/commits)

Updates `thiserror` from 2.0.11 to 2.0.12
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.11...2.0.12)

Updates `rstest` from 0.24.0 to 0.25.0
- [Release notes](https://github.com/la10736/rstest/releases)
- [Changelog](https://github.com/la10736/rstest/blob/master/CHANGELOG.md)
- [Commits](la10736/rstest@v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: clap
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: console
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ring
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tempfile
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: wiremock
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: async-trait
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cached
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: thiserror
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: rstest
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Mar 10, 2025
@mre mre merged commit a071bb4 into master Mar 10, 2025
6 checks passed
@mre mre deleted the dependabot/cargo/dependencies-fda1a5a664 branch March 10, 2025 12:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant