Bump the cargo group across 1 directory with 15 updates #95
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the cargo group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.94` | `1.0.95` | | [clap](https://github.com/clap-rs/clap) | `4.5.23` | `4.5.26` | | [colored](https://github.com/mackwic/colored) | `2.1.0` | `3.0.0` | | [fast-glob](https://github.com/shulaoda/fast-glob) | `0.4.0` | `0.4.3` | | [git2](https://github.com/rust-lang/git2-rs) | `0.19.0` | `0.20.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.9` | `0.12.12` | | [semver](https://github.com/dtolnay/semver) | `1.0.23` | `1.0.24` | | [serde](https://github.com/serde-rs/serde) | `1.0.216` | `1.0.217` | | [serde_json](https://github.com/serde-rs/json) | `1.0.133` | `1.0.135` | | [tokio](https://github.com/tokio-rs/tokio) | `1.42.0` | `1.43.0` | | [which](https://github.com/harryfei/which-rs) | `7.0.0` | `7.0.1` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.14.0` | `3.15.0` | | [pyo3](https://github.com/pyo3/pyo3) | `0.23.3` | `0.23.4` | | [napi-build](https://github.com/napi-rs/napi-rs) | `2.1.3` | `2.1.4` | Updates `anyhow` from 1.0.94 to 1.0.95 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.94...1.0.95) Updates `clap` from 4.5.23 to 4.5.26 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.23...clap_complete-v4.5.26) Updates `colored` from 2.1.0 to 3.0.0 - [Release notes](https://github.com/mackwic/colored/releases) - [Changelog](https://github.com/colored-rs/colored/blob/master/CHANGELOG.md) - [Commits](colored-rs/colored@v2.1.0...v3.0.0) Updates `fast-glob` from 0.4.0 to 0.4.3 - [Commits](https://github.com/shulaoda/fast-glob/commits) Updates `git2` from 0.19.0 to 0.20.0 - [Changelog](https://github.com/rust-lang/git2-rs/blob/master/CHANGELOG.md) - [Commits](rust-lang/git2-rs@git2-0.19.0...git2-0.20.0) Updates `reqwest` from 0.12.9 to 0.12.12 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.12.9...v0.12.12) Updates `semver` from 1.0.23 to 1.0.24 - [Release notes](https://github.com/dtolnay/semver/releases) - [Commits](dtolnay/semver@1.0.23...1.0.24) Updates `serde` from 1.0.216 to 1.0.217 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.216...v1.0.217) Updates `serde_json` from 1.0.133 to 1.0.135 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.133...v1.0.135) Updates `tokio` from 1.42.0 to 1.43.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.42.0...tokio-1.43.0) Updates `tokio-macros` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-macros-2.4.0...tokio-macros-2.5.0) Updates `which` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/harryfei/which-rs/releases) - [Changelog](https://github.com/harryfei/which-rs/blob/master/CHANGELOG.md) - [Commits](harryfei/which-rs@7.0.0...7.0.1) Updates `tempfile` from 3.14.0 to 3.15.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.14.0...v3.15.0) Updates `pyo3` from 0.23.3 to 0.23.4 - [Release notes](https://github.com/pyo3/pyo3/releases) - [Changelog](https://github.com/PyO3/pyo3/blob/v0.23.4/CHANGELOG.md) - [Commits](PyO3/pyo3@v0.23.3...v0.23.4) Updates `napi-build` from 2.1.3 to 2.1.4 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](https://github.com/napi-rs/napi-rs/commits/[email protected]) --- updated-dependencies: - dependency-name: anyhow dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: clap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: colored dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo - dependency-name: fast-glob dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: git2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: reqwest dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: semver dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: serde dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: serde_json dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tokio dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: tokio-macros dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: which dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: tempfile dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo - dependency-name: pyo3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo - dependency-name: napi-build dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #95 +/- ##
=======================================
Coverage 97.84% 97.84%
=======================================
Files 14 14
Lines 3474 3474
=======================================
Hits 3399 3399
Misses 75 75 ☔ View full report in Codecov by Sentry. |
CodSpeed Performance ReportMerging #95 will not alter performanceComparing Summary
|
updates the lock file which pins dependencies of dependencies. Specifically `idna` crate (used by `url` and `git2` crates). This should resolve the security alert about using `idna` older than v1.0.0
|
I also ran |
|
This also resolves https://github.com/cpp-linter/cpp-linter-rs/security/dependabot/4. Although, we aren't creating a server in production (only in dev tests to mock REST API calls). |
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the cargo group with 14 updates in the / directory:
1.0.941.0.954.5.234.5.262.1.03.0.00.4.00.4.30.19.00.20.00.12.90.12.121.0.231.0.241.0.2161.0.2171.0.1331.0.1351.42.01.43.07.0.07.0.13.14.03.15.00.23.30.23.42.1.32.1.4Updates
anyhowfrom 1.0.94 to 1.0.95Release notes
Sourced from anyhow's releases.
Commits
48be1caRelease 1.0.95a03d6d6Merge pull request #402 from dtolnay/fromboxed52e4abbAdd Error::from_boxed with documentation about bidirectional?ffecefcMerge pull request #401 from dtolnay/construct671f700Add construct_ prefix to name of private construct functionsUpdates
clapfrom 4.5.23 to 4.5.26Release notes
Sourced from clap's releases.
Changelog
Sourced from clap's changelog.
Commits
df1efcachore: Released48bef6docs: Update changelog6b7aa3dMerge pull request #5628 from mart-mihkel/complete_hyphen57b6cb8refactor(complete): Simplify engine::completefbec05erefactor(complete): Fix typo in hyhpenb7cfbdcfeat(complete): Native support for hyphen values1d97c29test(complete): Test cases for allow_hyphen_values64e3790chore: Release1cf50c7docs: Update changelog085143dMerge pull request #5722 from epage/sortUpdates
coloredfrom 2.1.0 to 3.0.0Release notes
Sourced from colored's releases.
Changelog
Sourced from colored's changelog.
Commits
95b2de8Remove unnecessary lazy_static dependency (#176)037e091Fix missing2.2.0release in changelogef1484c2.2.0 (#186)1bb63e4cargo: supported range for windows-sys (#184)a7e464fAdd dependabot config (#178)0ddacefIgnore blame for clippy fix05b0f57Differentiate between ansi_term style and colored style due to deprecation of...981cfe4Fix deprecation warnings58a06a4Apply some (pedantic) clippy lintse55e26cUpdate rspec (#177)Updates
fast-globfrom 0.4.0 to 0.4.3Commits
Updates
git2from 0.19.0 to 0.20.0Changelog
Sourced from git2's changelog.
Commits
14cdc15Merge pull request #1115 from ehuss/lock-lockedcbf9dd4Merge pull request #1116 from ehuss/update-timee46a1f9Check that Cargo.lock is not outdated in CIa4bd932Update thetimedev-dependencyca65651Merge pull request #1113 from ehuss/cargo-locke16a3f9Merge pull request #1112 from ehuss/check-cfgf538a99Add a Cargo.lock8ce89e2Squelch the warning about libgit2_vendored check-cfg92d96acMerge pull request #1072 from vcfxb/remove-error-unwraps8977c0cMerge pull request #1071 from vcfxb/fix-tracing-ubUpdates
reqwestfrom 0.12.9 to 0.12.12Release notes
Sourced from reqwest's releases.
Changelog
Sourced from reqwest's changelog.
Commits
8b8fdd2v0.12.121ef8703(wasm) fix: remove tower as dependency for wasm32-unknown-unknown (#2510)224f0b8v0.12.11beea332fix decoding extra empty frame (#2508)177cc7fcleanup: typo fix409cff3v0.12.10ea48da7docs: fix a few spelling issues (#2478)3ce98b5fix: propagate Body::size_hint when wrapping bodies (#2503)44ca5eeremove Clone from connect::Unnameable for now (#2502)2a7c1b6feat: allow pluggable tower layers in connector service stack (#2496)Updates
semverfrom 1.0.23 to 1.0.24Release notes
Sourced from semver's releases.
Commits
6f4069dRelease 1.0.24d03aba3Touch up PR 328238757dMerge pull request #328 from Eh2406/master75856effaster Ord when Eq89504ebPrevent upload-artifact step from causing CI failured1b17a9Upload CI Cargo.lock for reproducing failures4ea60aeResolve doc_lazy_continuation clippy lintf96f9d8Merge pull request #319 from dtolnay/docsrsfc5c98dRely on docs.rs to define --cfg=docsrs by defaultUpdates
serdefrom 1.0.216 to 1.0.217Release notes
Sourced from serde's releases.
Commits
930401bRelease 1.0.217cb6eaeaFix roundtrip inconsistency:b6f339cResolve repr_packed_without_abi clippy lint in tests2a5caeaMerge pull request #2872 from dtolnay/ehpersonalityb9f93f9Add no-std CI on stable compilereb5cd47Drop #[lang = "eh_personality"] from no-std test8478a3bMerge pull request #2871 from dtolnay/nostdstartdbb9091Replace #[start] with extern fn mainUpdates
serde_jsonfrom 1.0.133 to 1.0.135Release notes
Sourced from serde_json's releases.
Commits
9802c08Release 1.0.135b97935fMerge pull request #1226 from tisonkun/map-into-valuesd48c224Add Map::into_values method1e77cacResolve precedence clippy lintb2a1415Release 1.0.1349875785Tweak wording of NULL/TRUE/FALSE documentation4aa05b9Merge pull request #1222 from dtolnay/rawvalueassocf42c7c7Move RawValue associated constants into same impl block as public functions96576baMerge pull request #1221 from bheylin/add-const-raw-values-for-null-and-bools4db66fbAdd'staticlifetime toconst'sUpdates
tokiofrom 1.42.0 to 1.43.0Release notes
Sourced from tokio's releases.
... (truncated)
Commits
5f3296dchore: prepare Tokio v1.43.0 (#7079)cc974a6chore: prepare tokio-macros v2.5.0 (#7078)15495fdmetrics: improve flexibility of H2Histogram Configuration (#6963)ad41834io: don't callset_lenbefore initializing vector inBlocking(#7054)bd3e857runtime: moveis_join_waker_setassertion inunset_waker(#7072)15f7366runtime: fixLocalRuntimedoc links (#7074)fd2048dci: split miri jobs into unit and integration tests (#7071)e8f3915chore: use unsync loads forunsync_load(#7073)67f1277net: fix ambiguity inTcpStream::try_write_vectoreddocs (#7067)463502cio: clarifyReadBuf::uninitallows initialized buffers as well (#7053)Updates
tokio-macrosfrom 2.4.0 to 2.5.0Commits
cc974a6chore: prepare tokio-macros v2.5.0 (#7078)15495fdmetrics: improve flexibility of H2Histogram Configuration (#6963)ad41834io: don't callset_lenbefore initializing vector inBlocking(#7054)bd3e857runtime: moveis_join_waker_setassertion inunset_waker(#7072)15f7366runtime: fixLocalRuntimedoc links (#7074)fd2048dci: split miri jobs into unit and integration tests (#7071)e8f3915chore: use unsync loads forunsync_load(#7073)67f1277net: fix ambiguity inTcpStream::try_write_vectoreddocs (#7067)463502cio: clarifyReadBuf::uninitallows initialized buffers as well (#7053)a1520f5runtime: fix thread parking on WebAssembly (#7041)Updates
whichfrom 7.0.0 to 7.0.1Release notes
Sourced from which's releases.
Changelog
Sourced from which's changelog.
Commits
68acf2cFix changelog to link to GitHub profileb6754b2Update CHANGELOG.md0c63719fixes #106, bump patch version36cb494Switch to env_home crate. Fixes #104Updates
tempfilefrom 3.14.0 to 3.15.0Changelog
Sourced from tempfile's changelog.
Commits
e7a40e3Release v3.15.0ea45f47feat: re-seed from system randomness on collision (#314)16209daFix link to ticket in changelog (#310)ae22b27docs: add owasp link on insecure temporary files (#309)Updates
pyo3from 0.23.3 to 0.23.4Release notes
Sourced from pyo3's releases.
Changelog
Sourced from pyo3's changelog.
Commits
f2a8460release: 0.23.40c10e34ci: updates for Rust 1.84 (#4846)9ee55a3Implement locked iteration for PyList (#4789)4b04bb3Allow useless conversion (#4838)bcdbc93Fix PyDict issues on free-threaded build (#4788)8aa6825Add an API to set rpath when using macOS system Python (#4833)e19d048ci: add more tests for cross-compilation (#4773)325218fdocs: Expand docs on when and why allow_threads is necessary (#4767)869a25bfix error with complex enums with many fields (#4832)f2915f5fix: cross-compilation compatibility checks for Windows (#4800)Updates
napi-buildfrom 2.1.3 to 2.1.4Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions