build(deps): bump the rust-dependencies group with 4 updates

[dependabot]

Bumps the rust-dependencies group with 4 updates: async-trait, axum, tempfile and axum-macros.

Updates async-trait from 0.1.83 to 0.1.84

Release notes

Sourced from async-trait's releases.

0.1.84

• Support impl Trait in return type (#282)

Commits

• 4c8406d Release 0.1.84
• 1cab7e4 Merge pull request #282 from dtolnay/impltrait
• 3af8236 Require Rust 1.75+ for RPITIT (return position impl trait in trait)
• 85b572c Support impl Trait in return type
• aff365f Add regression test for issue 281
• 7d8519d Update ui test suite to nightly-2024-12-09
• 00f9367 Raise minimum compiler for tests to rust 1.70
• 9fc6835 Prevent upload-artifact step from causing CI failure
• 03468c2 Update ui test suite to nightly-2024-10-31
• c8f5733 Update ui test suite to nightly-2024-10-30
• Additional commits viewable in compare view

Updates axum from 0.7.9 to 0.8.1

Release notes

Sourced from axum's releases.

axum-extra - v0.8.0

• breaking: Update to prost 0.12. Used for the Protobuf extractor (#2224)

#2224: tokio-rs/axum#2224

axum v0.8.0

since rc.1

• breaking: axum::extract::ws::Message now uses Bytes in place of Vec<u8>, and a new Utf8Bytes type in place of String, for its variants (#3078)
• breaking: Remove OptionalFromRequestParts impl for Query (#3088)
• changed: Upgraded tokio-tungstenite to 0.26 (#3078)
• changed: Query/Form: Use serde_path_to_error to report fields that failed to parse (#3081)

full changelog

Note: there are further relevant changes in axum-core's changelog

• breaking: Upgrade matchit to 0.8, changing the path parameter syntax from /:single and /*many to /{single} and /{*many}; the old syntax produces a panic to avoid silent change in behavior (#2645)
• breaking: Require Sync for all handlers and services added to Router and MethodRouter (#2473)
• breaking: The tuple and tuple_struct Path extractor deserializers now check that the number of parameters matches the tuple length exactly (#2931)
• breaking: Move Host extractor to axum-extra (#2956)
• breaking: Remove WebSocket::close. Users should explicitly send close messages themselves. (#2974)
• breaking: Make serve generic over the listener and IO types (#2941)
• breaking: Remove Serve::tcp_nodelay and WithGracefulShutdown::tcp_nodelay. See serve::ListenerExt for an API that let you set arbitrary TCP stream properties. (#2941)
• breaking: Option<Path<T>> no longer swallows all error conditions, instead rejecting the request in many cases; see its documentation for details (#2475)
• breaking: axum::extract::ws::Message now uses Bytes in place of Vec<u8>, and a new Utf8Bytes type in place of String, for its variants (#3078)
• fixed: Skip SSE incompatible chars of serde_json::RawValue in Event::json_data (#2992)
• fixed: Don't panic when array type is used for path segment (#3039)
• fixed: Avoid setting content-length before middleware. This allows middleware to add bodies to requests without needing to manually set content-length (#2897)
• change: Update minimum rust version to 1.75 (#2943)
• changed: Upgraded tokio-tungstenite to 0.26 (#3078)
• changed: Query/Form: Use serde_path_to_error to report fields that failed to parse (#3081)
• added: Add method_not_allowed_fallback to set a fallback when a path matches but there is no handler for the given HTTP method (#2903)
• added: Add NoContent as a self-described shortcut for StatusCode::NO_CONTENT (#2978)
• added: Add support for WebSockets over HTTP/2. They can be enabled by changing get(ws_endpoint) handlers to any(ws_endpoint) (#2894)
• added: Add MethodFilter::CONNECT, routing::connect[_service] and MethodRouter::connect[_service] (#2961)
• added: Extend FailedToDeserializePathParams::kind enum with (ErrorKind::DeserializeError). This new variant captures both key, value, and message from named path parameters parse errors, instead of only deserialization error message in ErrorKind::Message. (#2720)

#2475: tokio-rs/axum#2475 #2897: tokio-rs/axum#2897 #2903: tokio-rs/axum#2903

... (truncated)

Commits

• See full diff in compare view

Updates tempfile from 3.14.0 to 3.15.0

Changelog

Sourced from tempfile's changelog.

3.15.0

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#314). This resolves a potential DoS vector (#178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.

Commits

• e7a40e3 Release v3.15.0
• ea45f47 feat: re-seed from system randomness on collision (#314)
• 16209da Fix link to ticket in changelog (#310)
• ae22b27 docs: add owasp link on insecure temporary files (#309)
• See full diff in compare view

Updates axum-macros from 0.4.2 to 0.5.0

Release notes

Sourced from axum-macros's releases.

axum-macros - v0.5.0

No changes since alpha.1

full changelog

• breaking: Update code generation for axum-core 0.5.0
• change: Update minimum rust version to 1.75 (#2943)

#2943: tokio-rs/axum#2943

axum-macros - v0.5.0-alpha.1

• breaking: Update code generation for axum-core 0.5.0-alpha.1
• change: Update minimum rust version to 1.75 (#2943)

#2943: tokio-rs/axum#2943

Commits

• 926543f Release axum v0.8.0
• c8259dc CI: Remove obsolete prefix-key attributes for rust-cache action (#3130)
• f8f3a03 Update more hardcoded docs.rs URLs (#3125)
• bb5cf4c axum-extra/protobuf: Use rejection macros for ProtobufRejection (#3124)
• e58b166 axum-extra/multipart: Use rejection macros for MultipartRejection (#3123)
• 5f82540 axum-extra/query: Use rejection macros for QueryRejection (#3122)
• 28d8d9b Refactor TestClient usage (#3121)
• 3497e5d Update TLS examples to use better HTTP->HTTPS redirect (#2792)
• 33b353d Update docs.rs links to 0.8 (#3120)
• 09841ff axum-extra/form: Add FailedToDeserializeFormBody rejection variant (#3119)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Itsusinn]

needs remove 'async_trait' crate