chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
DeterminateSystems/magic-nix-cache-action	action	major	v4 -> v7
base64	dependencies	minor	0.21.7 -> 0.22.0
cachix/install-nix-action	action	major	v26 -> v27
clap	dependencies	patch	4.5.6 -> 4.5.7
cyclonedx-bom (source)	dependencies	minor	0.5.0 -> 0.6.0
itertools	dependencies	minor	0.12.1 -> 0.13.0

---

Release Notes

DeterminateSystems/magic-nix-cache-action (DeterminateSystems/magic-nix-cache-action)

v7

Compare Source

What's Changed

• Behave well when MNCA isn't trusted by @​grahamc in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/52
• Bring back store diffing (optionally) by @​cole-h in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/54
• Add strict mode by @​lucperkins in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/53
• Make the source-binary setting optional by @​lucperkins in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/55
• Make strict mode input not required by @​lucperkins in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/56
• Update detsys-ts by @​lucperkins in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/59
• Add store diff fact by @​lucperkins in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/58
• srv update by @​grahamc in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/60
• Update detsys-ts (status page changes) by @​lucperkins in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/61

Full Changelog: DeterminateSystems/magic-nix-cache-action@v6...v7

v6

Compare Source

What's Changed

• Set the default flakehub-flake-name to an empty string by @​cole-h in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/51

Full Changelog: DeterminateSystems/magic-nix-cache-action@v5...v6

v5

Compare Source

What's Changed

• Better Boolean handling and debug statement by @​lucperkins in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/39
• Cache dev shell in FlakeHub Cache by @​lucperkins in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/40
• Rebase on detsys-ts and get rid of bun by @​grahamc in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/41
• Update detsys-ts by @​grahamc in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/42
• Preflight nix, or don't fail by @​grahamc in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/43
• Switch to tsup-based build by @​lucperkins in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/44
• Add prettier config by @​lucperkins in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/45
• Revamp logic into central class by @​lucperkins in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/46
• Debug daemon listen by @​grahamc in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/47
• Gracefully handle it if a user tries to register the action twice. by @​grahamc in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/48
• Don't mark the daemon started until after we successfully import the … by @​grahamc in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/49
• Update deps by @​grahamc in https://github.com/DeterminateSystems/magic-nix-cache-action/pull/50

Full Changelog: DeterminateSystems/magic-nix-cache-action@v4...v5

marshallpierce/rust-base64 (base64)

v0.22.1

Compare Source

• Correct the symbols used for the predefined alphabet::BIN_HEX.

v0.22.0

Compare Source

• DecodeSliceError::OutputSliceTooSmall is now conservative rather than precise. That is, the error will only occur if the decoded output cannot fit, meaning that Engine::decode_slice can now be used with exactly-sized output slices. As part of this, Engine::internal_decode now returns DecodeSliceError instead of DecodeError, but that is not expected to affect any external callers.
• DecodeError::InvalidLength now refers specifically to the number of valid symbols being invalid (i.e. len % 4 == 1), rather than just the number of input bytes. This avoids confusing scenarios when based on interpretation you could make a case for either InvalidLength or InvalidByte being appropriate.
• Decoding is somewhat faster (5-10%)

cachix/install-nix-action (cachix/install-nix-action)

v27

Compare Source

What's Changed

• Enable always-allow-substitutes by default by @​sandydoo in https://github.com/cachix/install-nix-action/pull/207
• nix: 2.20.5 -> 2.22.1 by @​kashw2 in https://github.com/cachix/install-nix-action/pull/206
• ci: fix tests by @​sandydoo in https://github.com/cachix/install-nix-action/pull/208

New Contributors

• @​kashw2 made their first contribution in https://github.com/cachix/install-nix-action/pull/206

Full Changelog: cachix/install-nix-action@v26...V27

clap-rs/clap (clap)

v4.5.7

Compare Source

Fixes

• Clean up error message when too few arguments for num_args

CycloneDX/cyclonedx-rust-cargo (cyclonedx-bom)

v0.6.1: 0.6.1 - 2024-06-04

Compare Source

Release Notes

Added

• A series of APIs that serialize and deserialize in the format specified with the SpecVersion enum ([#​725])

Fixed

• Fixed a panic when parsing CycloneDX v1.5 from a serde_json::Value ([#​723])

Changed

• Removed --allow-dirty flag from the publishing workflow so that the provenance of the package uploaded to crates.io can be established ([#​724])

v0.6.0

Compare Source

rust-itertools/itertools (itertools)

v0.13.0

Compare Source

Breaking

• Removed implementation of DoubleEndedIterator for ConsTuples (#​853)
• Made MultiProduct fused and fixed on an empty iterator (#​835, #​834)
• Changed iproduct! to return tuples for maxi one iterator too (#​870)
• Changed PutBack::put_back to return the old value (#​880)
• Removed deprecated repeat_call, Itertools::{foreach, step, map_results, fold_results} (#​878)
• Removed TakeWhileInclusive::new (#​912)

Added

• Added Itertools::{smallest_by, smallest_by_key, largest, largest_by, largest_by_key} (#​654, #​885)
• Added Itertools::tail (#​899)
• Implemented DoubleEndedIterator for ProcessResults (#​910)
• Implemented Debug for FormatWith (#​931)
• Added Itertools::get (#​891)

Changed

• Deprecated Itertools::group_by (renamed chunk_by) (#​866, #​879)
• Deprecated unfold (use std::iter::from_fn instead) (#​871)
• Optimized GroupingMapBy (#​873, #​876)
• Relaxed Fn bounds to FnMut in diff_with, Itertools::into_group_map_by (#​886)
• Relaxed Debug/Clone bounds for MapInto (#​889)
• Documented the use_alloc feature (#​887)
• Optimized Itertools::set_from (#​888)
• Removed badges in README.md (#​890)
• Added "no-std" categories in Cargo.toml (#​894)
• Fixed Itertools::k_smallest on short unfused iterators (#​900)
• Deprecated Itertools::tree_fold1 (renamed tree_reduce) (#​895)
• Deprecated GroupingMap::fold_first (renamed reduce) (#​902)
• Fixed Itertools::k_smallest(0) to consume the iterator, optimized Itertools::k_smallest(1) (#​909)
• Specialized Combinations::nth (#​914)
• Specialized MergeBy::fold (#​920)
• Specialized CombinationsWithReplacement::nth (#​923)
• Specialized FlattenOk::{fold, rfold} (#​927)
• Specialized Powerset::nth (#​924)
• Documentation fixes (#​882, #​936)
• Fixed assert_equal for iterators longer than i32::MAX (#​932)
• Updated the must_use message of non-lazy KMergeBy and TupleCombinations (#​939)

Notable Internal Changes

• Tested iterator laziness (#​792)
• Created CONTRIBUTING.md (#​767)

---

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: rust/transformer/Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path rust/transformer/Cargo.toml --package base64@0.21.7 --precise 0.22.1
    Updating crates.io index
error: failed to select a version for the requirement `base64 = "^0.21.2"`
candidate versions found which didn't match: 0.22.1
location searched: crates.io index
required by package `cyclonedx-bom v0.6.1`
    ... which satisfies dependency `cyclonedx-bom = "^0.6.0"` (locked to 0.6.1) of package `bombon-transformer v0.2.0 (/tmp/renovate/repos/github/nikstur/bombon/rust/transformer)`
perhaps a crate was updated and forgotten to be re-vendored?

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.