Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the rust-dependencies group with 5 updates #258

Merged
merged 8 commits into from
Mar 1, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2024

Bumps the rust-dependencies group with 5 updates:

Package From To
tempfile 3.9.0 3.10.1
thiserror 1.0.55 1.0.57
ureq 2.9.1 2.9.6
clap 4.4.18 4.5.1
toml 0.8.9 0.8.10

Updates tempfile from 3.9.0 to 3.10.1

Changelog

Sourced from tempfile's changelog.

3.10.1

  • Handle potential integer overflows in 32-bit systems when seeking/truncating "spooled" temporary files past 4GiB (2³²).
  • Handle a theoretical 32-bit overflow when generating a temporary file name larger than 4GiB. Now it'll panic (on allocation failure) rather than silently succeeding due to wraparound.

Thanks to @​stoeckmann for finding and fixing both of these issues.

3.10.0

  • Drop redox_syscall dependency, we now use rustix for Redox.
  • Add Builder::permissions for setting the permissions on temporary files and directories (thanks to @​Byron).
  • Update rustix to 0.38.31.
  • Update fastrand to 2.0.1.
Commits

Updates thiserror from 1.0.55 to 1.0.57

Release notes

Sourced from thiserror's releases.

1.0.57

  • Generate more efficient Display impl for error message which do not contain any interpolated value (#286, thanks @​nyurik)

1.0.56

  • Update proc-macro2 to fix caching issue when using a rustc-wrapper such as sccache
Commits
  • 1d106b1 Release 1.0.57
  • 8a5c4d1 Use write_str when args only consists of trailing comma
  • f790bee Phrase flag in terms of whether core::fmt machinery is required
  • d43b759 Ignore needless_raw_string_hashes pedantic clippy lint in test
  • d09c418 Touch up PR 286
  • 097251d Merge pull request #286 from nyurik/litstr
  • cd79876 optimize by avoiding second fmt.value() call
  • d7e738e Optimize simple literals for Display::fmt
  • 0717de3 Update ui test suite to nightly-2024-02-08
  • c7c7547 Update ui test suite to nightly-2024-01-31
  • Additional commits viewable in compare view

Updates ureq from 2.9.1 to 2.9.6

Changelog

Sourced from ureq's changelog.

2.9.6

Fixed

  • hootbin is optional dep. Tests must be run with feature testdeps (#729)
  • Exclude script files from cargo package (#728)

2.9.5

Fixed

  • Update deps (cookie 0.18, cookie_store 0.21, unpin url). (#722)

2.9.4

Fixed

  • MSRV 1.61 with CI tests

2.9.3

Fixed

  • docs.rs docs

2.9.2

Added

  • Replace dependency on httpbin.org for tests/doc-tests. (#703)

Fixed

  • Remove Header struct that never should have been exported. (#696)
  • Update deps (rustls 0.22) (#690)
Commits

Updates clap from 4.4.18 to 4.5.1

Release notes

Sourced from clap's releases.

v4.5.1

[4.5.1] - 2024-02-16

Fixes

  • (error) Include suggestion to add -- even if there is a "did you mean" so long as last or trailing_var_arg is used

v4.5.0

No release notes provided.

Changelog

Sourced from clap's changelog.

[4.5.1] - 2024-02-16

Fixes

  • (error) Include suggestion to add -- even if there is a "did you mean" so long as last or trailing_var_arg is used

[4.5.0] - 2024-02-08

Compatibility

  • Update MSRV to 1.74
Commits
  • 0c01b55 chore: Release
  • 08e0b5b docs: Update changelog
  • f2c4e6e Merge pull request #5359 from poliorcetics/ab/push-szymvyzpmnqx
  • e782775 fix(complete): Handle newlines in command/arg descriptions
  • fba7c85 test(complete): Show newline issue
  • 8a7a13a chore: Release
  • 7b3a3e1 docs: Update changelog
  • 7b624ca Merge pull request #5356 from epage/escape
  • 446328a fix(error): Include -- in more cases
  • 7de6df8 test(error): Show existing last behavior
  • Additional commits viewable in compare view

Updates toml from 0.8.9 to 0.8.10

Commits
  • 7f3e276 chore: Release
  • 07c8c2c docs: Update changelog
  • 10392d5 chore: Release
  • 4592fe4 docs: Update changelog
  • b7bd3a4 Merge pull request #675 from epage/dotted-key
  • 89d1416 fix(edit): Preserve previous line decor on leaf key
  • 4e89856 fix(edit): Don't include decor in Key's Display
  • 35e5326 Merge pull request #674 from epage/refactor
  • 0aca85b refactor(encode): Remove trait abstraction
  • 16c8353 test(edit): Show dotted-key comment bug
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.9.0` | `3.10.1` |
| [thiserror](https://github.com/dtolnay/thiserror) | `1.0.55` | `1.0.57` |
| [ureq](https://github.com/algesten/ureq) | `2.9.1` | `2.9.6` |
| [clap](https://github.com/clap-rs/clap) | `4.4.18` | `4.5.1` |
| [toml](https://github.com/toml-rs/toml) | `0.8.9` | `0.8.10` |


Updates `tempfile` from 3.9.0 to 3.10.1
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.9.0...v3.10.1)

Updates `thiserror` from 1.0.55 to 1.0.57
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.55...1.0.57)

Updates `ureq` from 2.9.1 to 2.9.6
- [Changelog](https://github.com/algesten/ureq/blob/main/CHANGELOG.md)
- [Commits](algesten/ureq@2.9.1...2.9.6)

Updates `clap` from 4.4.18 to 4.5.1
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@v4.4.18...clap_complete-v4.5.1)

Updates `toml` from 0.8.9 to 0.8.10
- [Commits](toml-rs/toml@toml-v0.8.9...toml-v0.8.10)

---
updated-dependencies:
- dependency-name: tempfile
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: thiserror
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: ureq
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: toml
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from schneems as a code owner March 1, 2024 10:24
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code skip changelog labels Mar 1, 2024
edmorley added 7 commits March 1, 2024 10:33
Since the import is now used in the library itself.
The default `miniz_oxide` flate2 backend has poor performance in debug/under QEMU:
rust-lang/flate2-rs#297

Ideally we'd use the fastest `zlib-ng` backend, however it fails to cross-compile:
rust-lang/libz-sys#93

As such we have to use the next best alternate backend, which is `zlib`.

This makes the `flate2` usage in this repo consistent with `libherokubuildpack`,
Python CNB, PHP CNB etc.
@dependabot dependabot bot requested a review from a team as a code owner March 1, 2024 10:58
@edmorley edmorley enabled auto-merge (squash) March 1, 2024 11:00
@edmorley edmorley merged commit 04cb18f into main Mar 1, 2024
6 checks passed
@edmorley edmorley deleted the dependabot/cargo/rust-dependencies-f78b7c1892 branch March 1, 2024 11:08
@edmorley edmorley removed the request for review from schneems March 1, 2024 11:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code skip changelog
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant