Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update rust crate tempfile to v3.17.1 #111

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jan 4, 2025

This PR contains the following updates:

Package Type Update Change
tempfile (source) dev-dependencies minor 3.14.0 -> 3.17.1

Release Notes

Stebalien/tempfile (tempfile)

v3.17.1

Compare Source

  • Fix build with windows-sys 0.52. Unfortunately, we have no CI for older windows-sys versions at the moment...

v3.17.0

Compare Source

  • Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in Builder::make_in (when creating temporary files of arbitrary types).
  • Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test.
  • When reseeding with getrandom, use platform (e.g., CPU) specific randomness sources where possible.
  • Clarify some documentation.
  • Unlink unnamed temporary files on windows immediately when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible.

v3.16.0

Compare Source

  • Update getrandom to 0.3.0 (thanks to @​paolobarbolini).
  • Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @​ErichDonGubler).
  • Improved security documentation (thanks to @​n0toose for collaborating with me on this).

v3.15.0

Compare Source

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#​314). This resolves a potential DoS vector (#​178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

codecov bot commented Jan 4, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 85.41%. Comparing base (fdc6992) to head (56a6c0a).

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #111      +/-   ##
==========================================
+ Coverage   85.03%   85.41%   +0.38%     
==========================================
  Files          12       12              
  Lines        5825     5807      -18     
  Branches      475      475              
==========================================
+ Hits         4953     4960       +7     
+ Misses        857      827      -30     
- Partials       15       20       +5     
Flag Coverage Δ
macos_latest ?
ubuntu_latest 85.46% <ø> (+0.23%) ⬆️
windows_latest 22.93% <ø> (-0.03%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@renovate renovate bot changed the title chore(deps): update rust crate tempfile to v3.15.0 chore(deps): update rust crate tempfile to v3.16.0 Jan 28, 2025
@renovate renovate bot force-pushed the renovate/tempfile-3.x-lockfile branch from 3399bc5 to b3f94db Compare January 28, 2025 22:12
@renovate renovate bot changed the title chore(deps): update rust crate tempfile to v3.16.0 chore(deps): update rust crate tempfile to v3.17.0 Feb 16, 2025
@renovate renovate bot force-pushed the renovate/tempfile-3.x-lockfile branch from b3f94db to 6dde56e Compare February 16, 2025 22:45
@renovate renovate bot changed the title chore(deps): update rust crate tempfile to v3.17.0 chore(deps): update rust crate tempfile to v3.17.1 Feb 17, 2025
@renovate renovate bot force-pushed the renovate/tempfile-3.x-lockfile branch from 6dde56e to 56a6c0a Compare February 17, 2025 18:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants