build(deps): bump the prod group with 14 updates #8264
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
A-dependencies
dependabot
bot
requested review from
arya2 and
upbqdn
and removed request for
a team
Bumps the prod group with 14 updates: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.4.18` | `4.5.0` | | [chrono](https://github.com/chronotope/chrono) | `0.4.33` | `0.4.34` | | [indexmap](https://github.com/indexmap-rs/indexmap) | `2.2.2` | `2.2.3` | | [toml](https://github.com/toml-rs/toml) | `0.8.9` | `0.8.10` | | [thiserror](https://github.com/dtolnay/thiserror) | `1.0.56` | `1.0.57` | | [metrics](https://github.com/metrics-rs/metrics) | `0.22.0` | `0.22.1` | | [num-integer](https://github.com/rust-num/num-integer) | `0.1.45` | `0.1.46` | | [metrics-exporter-prometheus](https://github.com/metrics-rs/metrics) | `0.13.0` | `0.13.1` | | [indicatif](https://github.com/console-rs/indicatif) | `0.17.7` | `0.17.8` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.9.0` | `3.10.0` | | [tonic](https://github.com/hyperium/tonic) | `0.10.2` | `0.11.0` | | [tonic-build](https://github.com/hyperium/tonic) | `0.10.2` | `0.11.0` | | [x25519-dalek](https://github.com/dalek-cryptography/curve25519-dalek) | `2.0.0` | `2.0.1` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.6.0` | `3.6.1` | Updates `clap` from 4.4.18 to 4.5.0 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@v4.4.18...clap_complete-v4.5.0) Updates `chrono` from 0.4.33 to 0.4.34 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.33...v0.4.34) Updates `indexmap` from 2.2.2 to 2.2.3 - [Changelog](https://github.com/indexmap-rs/indexmap/blob/master/RELEASES.md) - [Commits](indexmap-rs/indexmap@2.2.2...2.2.3) Updates `toml` from 0.8.9 to 0.8.10 - [Commits](toml-rs/toml@toml-v0.8.9...toml-v0.8.10) Updates `thiserror` from 1.0.56 to 1.0.57 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@1.0.56...1.0.57) Updates `metrics` from 0.22.0 to 0.22.1 - [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml) - [Commits](metrics-rs/metrics@metrics-v0.22.0...metrics-v0.22.1) Updates `num-integer` from 0.1.45 to 0.1.46 - [Changelog](https://github.com/rust-num/num-integer/blob/master/RELEASES.md) - [Commits](rust-num/num-integer@num-integer-0.1.45...num-integer-0.1.46) Updates `metrics-exporter-prometheus` from 0.13.0 to 0.13.1 - [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml) - [Commits](metrics-rs/metrics@metrics-exporter-prometheus-v0.13.0...metrics-v0.13.1) Updates `indicatif` from 0.17.7 to 0.17.8 - [Release notes](https://github.com/console-rs/indicatif/releases) - [Commits](https://github.com/console-rs/indicatif/commits) Updates `tempfile` from 3.9.0 to 3.10.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.9.0...v3.10.0) Updates `tonic` from 0.10.2 to 0.11.0 - [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md) - [Commits](hyperium/tonic@v0.10.2...v0.11.0) Updates `tonic-build` from 0.10.2 to 0.11.0 - [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md) - [Commits](hyperium/tonic@v0.10.2...v0.11.0) Updates `x25519-dalek` from 2.0.0 to 2.0.1 - [Release notes](https://github.com/dalek-cryptography/curve25519-dalek/releases) - [Commits](dalek-cryptography/curve25519-dalek@2.0.0...x25519-2.0.1) Updates `serde_with` from 3.6.0 to 3.6.1 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.6.0...v3.6.1) --- updated-dependencies: - dependency-name: clap dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: chrono dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: indexmap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: toml dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: thiserror dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: metrics dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: num-integer dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: metrics-exporter-prometheus dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: indicatif dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: tempfile dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: tonic dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: tonic-build dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: x25519-dalek dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: serde_with dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/cargo/prod-681ac9bb39
branch
from
62c183a to
4a2b8d1
Compare
@upbqdn These commits may need a cryptographic review: But everything else in x25519-dalek that Zebra uses looks fine. The changes in dalek-cryptography/curve25519-dalek@4373695 seem to only affect code behind the |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the prod group with 14 updates:
4.4.184.5.00.4.330.4.342.2.22.2.30.8.90.8.101.0.561.0.570.22.00.22.10.1.450.1.460.13.00.13.10.17.70.17.83.9.03.10.00.10.20.11.00.10.20.11.02.0.02.0.13.6.03.6.1Updates
clapfrom 4.4.18 to 4.5.0Changelog
Sourced from clap's changelog.
Commits
a751c5fchore: Release9ec6c94chore: Release0735119docs: Update changelogc4d3959Merge pull request #5344 from epage/encodef750e57fix(lex): Use new-ish OsStr API1d9a554Merge pull request #5343 from epage/msrv4b45d36chore: Update MSRV to 1.7455b1f94Merge pull request #5342 from epage/divanea77b98test(complete): Make it order independentb0fea2btest(bench): Switch to divanUpdates
chronofrom 0.4.33 to 0.4.34Release notes
Sourced from chrono's releases.
Commits
dc19606Prepare 0.4.3458a2149AddStrftimeItems::parse_to_owned59eeb8cAddStrftimeItems::parse79de122Add more documentation toStrftimeItems::new_with_locale5b7cf85Add more documentation toStrftimeItems::newbe6af79MakeDisplayformat ofTimeDeltaconform better to ISO 8601d1cf0e9Add test for issue 6510ef34e4Extend test to more distant datesfc67f3eRemove obsolete testacb693aWindows: rewrite usingGetTimeZoneInformationForYearUpdates
indexmapfrom 2.2.2 to 2.2.3Changelog
Sourced from indexmap's changelog.
Commits
406bbdbMerge pull request #312 from cuviper/release-2.2.33b79b87Release 2.2.38e6753cMerge pull request #310 from cuviper/shift_inserte3ff25bMerge pull request #311 from cuviper/test_debug2a33977Fully mask the"test_debug"code from normal builds8c206efTest shift_insert that moves5debe73IndexSet::swap_indices is O(1) too4572493AddIndexSet::shift_insertbased on map's method3b217caAddIndexMap::shift_insertbased onEntry209e3e1Document equivalence of move_index/swap_indicesUpdates
tomlfrom 0.8.9 to 0.8.10Commits
7f3e276chore: Release07c8c2cdocs: Update changelog10392d5chore: Release4592fe4docs: Update changelogb7bd3a4Merge pull request #675 from epage/dotted-key89d1416fix(edit): Preserve previous line decor on leaf key4e89856fix(edit): Don't include decor in Key's Display35e5326Merge pull request #674 from epage/refactor0aca85brefactor(encode): Remove trait abstraction16c8353test(edit): Show dotted-key comment bugUpdates
thiserrorfrom 1.0.56 to 1.0.57Release notes
Sourced from thiserror's releases.
Commits
1d106b1Release 1.0.578a5c4d1Use write_str when args only consists of trailing commaf790beePhrase flag in terms of whether core::fmt machinery is requiredd43b759Ignore needless_raw_string_hashes pedantic clippy lint in testd09c418Touch up PR 286097251dMerge pull request #286 from nyurik/litstrcd79876optimize by avoiding second fmt.value() calld7e738eOptimize simple literals for Display::fmt0717de3Update ui test suite to nightly-2024-02-08c7c7547Update ui test suite to nightly-2024-01-31Updates
metricsfrom 0.22.0 to 0.22.1Commits
5fd46a9(cargo-release) version 0.22.135b9d86woopsf7e979afix ahash MSRV nonsense019bc0e(cargo-release) version 0.13.1f6c3592(cargo-release) version 0.16.29a5d9dcfix pointless ahash MSRV bump6eef32a(cargo-release) version 0.16.1fed20b3update changelogsf50f914Updateindexmapto version2(#439)bc29c4fUpdatehashbrownto0.14(#438)Updates
num-integerfrom 0.1.45 to 0.1.46Changelog
Sourced from num-integer's changelog.
Commits
ede2d2cMerge pull request #62 from cuviper/release-0.1.46c7f506eRelease 0.1.463ac8866Merge pull request #42 from aobatact/master736ec84Add default fallback from divides to is_multiple_of77324eeMerge pull request #53 from MiguelX413/mastera51b3ffMark Integer::divides as deprecated.8682553Add examples to dec/inc9d4d68bAdd Integer.dec() and Integer.inc()9720c90Merge pull request #61 from cuviper/ci8bfce25ci: Add a registry cache for git protocolUpdates
metrics-exporter-prometheusfrom 0.13.0 to 0.13.1Commits
45137b4(cargo-release) version 0.13.1f4c0555Add conversion from stdlib Cow to our internal Cow.e46c951Change MetricKindMask to MetricKind.a14557aMerge pull request #163 from RAnders00/fix-prometheus-exporter-no-default-fea...68fbbf8Fix compile errors and warnings when compiling prometheus exporter without de...a3b289e(cargo-release) version 0.1.0bb45f68(cargo-release) version 0.1.03615f1f(cargo-release) version 0.1.03279b19(cargo-release) version 0.4.1f38e9e3non-alpha version bumpsUpdates
indicatiffrom 0.17.7 to 0.17.8Commits
Updates
tempfilefrom 3.9.0 to 3.10.0Changelog
Sourced from tempfile's changelog.
Commits
61531eachore: release v3.10.0e246c4achore: update deps (#275)4a05e47feat: AddBuilder::permissions()method. (#273)184ab8ffix: drop redox_syscall dependency (#272)Updates
tonicfrom 0.10.2 to 0.11.0Changelog
Sourced from tonic's changelog.
Commits
ea8cd3fchore: prepare v0.11.0 release (#1626)209fcbechore(ci): fix udeps warning errors (#1627)4263f87feat(tls): Implement AsMut for Certificate (#1621)23106ddchore(tls): Update to rustls 0.22.0 (#1509)2a2809bUpdate Cargo.toml (#1622)4227468Update helloworld-tutorial.md - Fix Clippy lints (#1617)4859a73Add connection timeout to connect_with_connector_lazy (#1619)227b169web: fix invalid bit header error message (#1618)c30cb78chore(reflection): Make prost-types dependency optional (#1610)f714f42Repair rust-analyzer for tonic files (#1604)Updates
tonic-buildfrom 0.10.2 to 0.11.0Changelog
Sourced from tonic-build's changelog.
Commits
ea8cd3fchore: prepare v0.11.0 release (#1626)209fcbechore(ci): fix udeps warning errors (#1627)4263f87feat(tls): Implement AsMut for Certificate (#1621)23106ddchore(tls): Update to rustls 0.22.0 (#1509)2a2809bUpdate Cargo.toml (#1622)4227468Update helloworld-tutorial.md - Fix Clippy lints (#1617)4859a73Add connection timeout to connect_with_connector_lazy (#1619)227b169web: fix invalid bit header error message (#1618)c30cb78chore(reflection): Make prost-types dependency optional (#1610)f714f42Repair rust-analyzer for tonic files (#1604)Updates
x25519-dalekfrom 2.0.0 to 2.0.1Commits
4ac84ddcurve,ed,x: Bump patch version to reflect fix to nightly SIMD build (#621)ff1c309Fix nightly build (#619)ba737a3Update README.md (#613)0b45e00chore: typo fix (#608)ba7a073doc: Fix markdown PR reference (#605)a2ff6ba{Signing,Verifying}KeyVisitor: visit_borrowed_bytes -> visit_bytes (#602)f08bbb7ed: Prep to release v2.1.0 (#600)04f811aed: Add backSigningKey::to_scalar_bytes(#599)ac51ef6ed25519: loosensignaturecrate dependency again (#598)89aabacREADME.md: remove broken image (#595)Updates
serde_withfrom 3.6.0 to 3.6.1Release notes
Sourced from serde_with's releases.
Commits
76cf252Bump version to v3.6.1 (#696)6872fa8Bump version to v3.6.16211d20Eliminate dependency on serde's "derive" feature (#694)5e6a115Eliminate dependency on serde's "derive" featured145a45Update ahash to 0.8.7 to accommodate stdsimd change in nightly (#695)2b17850Update ahash to 0.8.7 to accommodate stdsimd change in nightlycaba452Bump the github-actions group with 1 update (#693)54a665dBump the github-actions group with 1 updateDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions