Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the all group with 11 updates #154

Merged
merged 2 commits into from
Aug 7, 2024
Merged

Bump the all group with 11 updates #154

merged 2 commits into from
Aug 7, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 4, 2024

Bumps the all group with 11 updates:

Package From To
clap 4.5.4 4.5.13
flate2 1.0.30 1.0.31
fs4 0.8.3 0.9.1
os_pipe 1.1.5 1.2.1
reqwest 0.12.4 0.12.5
tar 0.4.40 0.4.41
tempfile 3.10.1 3.11.0
zip 2.1.1 2.1.6
zstd 0.13.1 0.13.2
highway 1.1.0 1.2.0
regex 1.10.4 1.10.6

Updates clap from 4.5.4 to 4.5.13

Release notes

Sourced from clap's releases.

v4.5.13

[4.5.13] - 2024-07-31

Fixes

  • (derive) Improve error message when #[flatten]ing an optional #[group(skip)]
  • (help) Properly wrap long subcommand descriptions in help

v4.5.12

[4.5.12] - 2024-07-31

v4.5.10

[4.5.10] - 2024-07-23

v4.5.9

[4.5.9] - 2024-07-09

Fixes

  • (error) When defining a custom help flag, be sure to suggest it like we do the built-in one

v4.5.8

[4.5.8] - 2024-06-28

Fixes

  • Reduce extra flushes

v4.5.7

[4.5.7] - 2024-06-10

Fixes

  • Clean up error message when too few arguments for num_args

v4.5.6

[4.5.6] - 2024-06-06

Changelog

Sourced from clap's changelog.

[4.5.13] - 2024-07-31

Fixes

  • (derive) Improve error message when #[flatten]ing an optional #[group(skip)]
  • (help) Properly wrap long subcommand descriptions in help

[4.5.12] - 2024-07-31

[4.5.11] - 2024-07-25

[4.5.10] - 2024-07-23

[4.5.9] - 2024-07-09

Fixes

  • (error) When defining a custom help flag, be sure to suggest it like we do the built-in one

[4.5.8] - 2024-06-28

Fixes

  • Reduce extra flushes

[4.5.7] - 2024-06-10

Fixes

  • Clean up error message when too few arguments for num_args

[4.5.6] - 2024-06-06

[4.5.5] - 2024-06-06

Fixes

  • Allow exclusive to override required_unless_present, required_unless_present_any, required_unless_present_all
Commits

Updates flate2 from 1.0.30 to 1.0.31

Commits

Updates fs4 from 0.8.3 to 0.9.1

Commits

Updates os_pipe from 1.1.5 to 1.2.1

Commits

Updates reqwest from 0.12.4 to 0.12.5

Release notes

Sourced from reqwest's releases.

v0.12.5

What's Changed

  • Add http3 feature back, still requiring reqwest_unstable.
  • Add rustls-tls-no-provider Cargo feature to use rustls without a crypto provider.
  • Add blocking::ClientBuilder::dns_resolver() method to change DNS resolver in blocking client.
  • Fix Accept-Encoding header combinations.
  • Fix http3 resolving IPv6 addresses.
  • Internal: upgrade to rustls 0.23.

New Contributors

Full Changelog: seanmonstar/reqwest@v0.12.4...v0.12.5

Changelog

Sourced from reqwest's changelog.

v0.12.5

  • Add blocking::ClientBuilder::dns_resolver() method to change DNS resolver in blocking client.
  • Add http3 feature back, still requiring reqwest_unstable.
  • Add rustls-tls-no-provider Cargo feature to use rustls without a crypto provider.
  • Fix Accept-Encoding header combinations.
  • Fix http3 resolving IPv6 addresses.
  • Internal: upgrade to rustls 0.23.
Commits
  • 29d4cff v0.12.5
  • a7880d6 tests: fix http3 tests
  • c32d877 tests: enable http3 content-length test
  • ce3b30e http3: send content-length if known
  • 404df59 test: add http3 test server support
  • e5ce0b5 fix: don't enable hyper-rustls/http2 unless http2 is already enabled
  • ccb5e40 Don't compile hyper-tls with native-roots unless rustls-tls-native-roots is e...
  • c56fbae tests: remove a proxy parse error check
  • 8cc7cd4 msrv: pin url
  • 695bc04 fix: http3 resolving ipv6 addresses (#2305)
  • Additional commits viewable in compare view

Updates tar from 0.4.40 to 0.4.41

Commits

Updates tempfile from 3.10.1 to 3.11.0

Changelog

Sourced from tempfile's changelog.

3.11.0

  • Add the ability to override the default temporary directory. This API shouldn't be used in general, but there are some cases where it's unavoidable.
Commits

Updates zip from 2.1.1 to 2.1.6

Release notes

Sourced from zip's releases.

v2.1.6

🐛 Bug Fixes

  • (#33) Rare combination of settings could lead to writing a corrupt archive with overlength extra data, and data_start locations when reading the archive back were also wrong (#221)

🚜 Refactor

  • Eliminate some magic numbers and unnecessary path prefixes (#225)

v2.1.5

🚜 Refactor

  • change invalid_state() return type to io::Result

v2.1.4

🐛 Bug Fixes

  • fix(#215): Upgrade to deflate64 0.1.9
  • Panic when reading a file truncated in the middle of an XZ block header
  • Some archives with over u16::MAX files were handled incorrectly or slowly (#189)
  • Check number of files when deciding whether a CDE is the real one
  • Could still select a fake CDE over a real one in some cases
  • May have to consider multiple CDEs before filtering for validity
  • We now keep searching for a real CDE header after read an invalid one from the file comment
  • Always search for data start when opening an archive for append, and reject the header if data appears to start after central directory
  • deep_copy_file no longer allows overwriting an existing file, to match the behavior of shallow_copy_file
  • File start position was wrong when extra data was present
  • Abort file if central extra data is too large
  • Overflow panic when central directory extra data is too large
  • ZIP64 header was being written twice when copying a file
  • ZIP64 header was being written to central header twice
  • Start position was incorrect when file had no extra data
  • Allow all reserved headers we can create
  • Fix a bug where alignment padding interacts with other extra-data fields
  • Fix bugs involving alignment padding and Unicode extra fields
  • Incorrect header when adding AES-encrypted files
  • Parse the extra field and reject it if invalid
  • Incorrect behavior following a rare combination of merge_archive, abort_file and deep_copy_file. As well, we now return an error when a file is being copied to itself.
  • path_to_string now properly handles the case of an empty path
  • Implement Debug for ZipWriter even when it's not implemented for the inner writer's type
  • Fix an issue where the central directory could be incorrectly detected
  • finish_into_readable() would corrupt the archive if the central directory had moved

🚜 Refactor

  • Verify with debug assertions that no FixedSizeBlock expects a multi-byte alignment (#198)
  • Use new do_or_abort_file method

⚡ Performance

  • Speed up CRC when encrypting small files
  • Limit the number of extra fields
  • Refactor extra-data validation
  • Store extra data in plain vectors until after validation
  • Only build one IndexMap after choosing among the possible valid headers
  • Simplify validation of empty extra-data fields

... (truncated)

Changelog

Sourced from zip's changelog.

2.1.6 - 2024-07-29

🐛 Bug Fixes

  • (#33) Rare combination of settings could lead to writing a corrupt archive with overlength extra data, and data_start locations when reading the archive back were also wrong (#221)

🚜 Refactor

  • Eliminate some magic numbers and unnecessary path prefixes (#225)

2.1.5 - 2024-07-20

🚜 Refactor

  • change invalid_state() return type to io::Result

2.1.4 - 2024-07-18

🐛 Bug Fixes

  • fix(#215): Upgrade to deflate64 0.1.9
  • Panic when reading a file truncated in the middle of an XZ block header
  • Some archives with over u16::MAX files were handled incorrectly or slowly (#189)
  • Check number of files when deciding whether a CDE is the real one
  • Could still select a fake CDE over a real one in some cases
  • May have to consider multiple CDEs before filtering for validity
  • We now keep searching for a real CDE header after read an invalid one from the file comment
  • Always search for data start when opening an archive for append, and reject the header if data appears to start after central directory
  • deep_copy_file no longer allows overwriting an existing file, to match the behavior of shallow_copy_file
  • File start position was wrong when extra data was present
  • Abort file if central extra data is too large
  • Overflow panic when central directory extra data is too large
  • ZIP64 header was being written twice when copying a file
  • ZIP64 header was being written to central header twice
  • Start position was incorrect when file had no extra data
  • Allow all reserved headers we can create
  • Fix a bug where alignment padding interacts with other extra-data fields
  • Fix bugs involving alignment padding and Unicode extra fields
  • Incorrect header when adding AES-encrypted files
  • Parse the extra field and reject it if invalid
  • Incorrect behavior following a rare combination of merge_archive, abort_file and deep_copy_file. As well, we now return an error when a file is being copied to itself.
  • path_to_string now properly handles the case of an empty path
  • Implement Debug for ZipWriter even when it's not implemented for the inner writer's type
  • Fix an issue where the central directory could be incorrectly detected
  • finish_into_readable() would corrupt the archive if the central directory had moved

🚜 Refactor

  • Verify with debug assertions that no FixedSizeBlock expects a multi-byte alignment (#198)
  • Use new do_or_abort_file method

⚡ Performance

  • Speed up CRC when encrypting small files
  • Limit the number of extra fields
  • Refactor extra-data validation

... (truncated)

Commits
  • beab418 chore: release (#229)
  • f803fa0 test: (#33) Verify that data_start is correct when reading an alignment-padde...
  • 6d8ab62 fix: (#33) Rare combination of settings could lead to writing a corrupt archi...
  • fd5f804 test(fuzz): Consume self, and add initial junk (#226)
  • 3ecd651 refactor: Eliminate some magic numbers and unnecessary path prefixes (#225)
  • a29b860 test(fuzz): Make cargo fuzz fmt fuzz_write output more reliably equivalent ...
  • 546e49d docs: Update pull_request_template.md
  • 50fd94f docs: Update pull_request_template.md
  • 8fb107a chore: release (#222)
  • a7c1230 publicly export and document the zip64 threshold constants (#79)
  • Additional commits viewable in compare view

Updates zstd from 0.13.1 to 0.13.2

Commits

Updates highway from 1.1.0 to 1.2.0

Changelog

Sourced from highway's changelog.

v1.2.0 - 2024-06-21

  • x86 SSE implementation now provably can't panic
  • HighwayHasher debug representation now exhaustive
  • Removed all unsafe Wasm SIMD implementation at no cost
Commits
  • fd36b1e Release 1.2.0
  • 21d0236 Update changelog to latest
  • 2c52ba1 Merge pull request #85 from nickbabcock/bench
  • d12061a Update benchmarks to latest
  • 6a60349 Clippy pedantic formatting
  • b716913 Merge pull request #84 from nickbabcock/wasm-safe
  • a238883 Remove unsafe from wasm SIMD implementation
  • 0e9c2c2 Merge pull request #83 from nickbabcock/actions
  • e7b4fa1 Update to non-deprecated github actions
  • 6bfad17 Merge pull request #82 from nickbabcock/highway-debug
  • Additional commits viewable in compare view

Updates regex from 1.10.4 to 1.10.6

Changelog

Sourced from regex's changelog.

1.10.6 (2024-08-02)

This is a new patch release with a fix for the unstable crate feature that enables std::str::Pattern trait integration.

Bug fixes:

1.10.5 (2024-06-09)

This is a new patch release with some minor fixes.

Bug fixes:

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all group with 11 updates
c7f4d19 
Bumps the all group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.4` | `4.5.13` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.0.30` | `1.0.31` |
| [fs4](https://github.com/al8n/fs4-rs) | `0.8.3` | `0.9.1` |
| [os_pipe](https://github.com/oconnor663/os_pipe.rs) | `1.1.5` | `1.2.1` |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.4` | `0.12.5` |
| [tar](https://github.com/alexcrichton/tar-rs) | `0.4.40` | `0.4.41` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.10.1` | `3.11.0` |
| [zip](https://github.com/zip-rs/zip2) | `2.1.1` | `2.1.6` |
| [zstd](https://github.com/gyscos/zstd-rs) | `0.13.1` | `0.13.2` |
| [highway](https://github.com/nickbabcock/highway-rs) | `1.1.0` | `1.2.0` |
| [regex](https://github.com/rust-lang/regex) | `1.10.4` | `1.10.6` |


Updates `clap` from 4.5.4 to 4.5.13
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.4...v4.5.13)

Updates `flate2` from 1.0.30 to 1.0.31
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](https://github.com/rust-lang/flate2-rs/commits)

Updates `fs4` from 0.8.3 to 0.9.1
- [Release notes](https://github.com/al8n/fs4-rs/releases)
- [Commits](https://github.com/al8n/fs4-rs/commits)

Updates `os_pipe` from 1.1.5 to 1.2.1
- [Commits](oconnor663/os_pipe.rs@1.1.5...1.2.1)

Updates `reqwest` from 0.12.4 to 0.12.5
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.4...v0.12.5)

Updates `tar` from 0.4.40 to 0.4.41
- [Commits](alexcrichton/tar-rs@0.4.40...0.4.41)

Updates `tempfile` from 3.10.1 to 3.11.0
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.10.1...v3.11.0)

Updates `zip` from 2.1.1 to 2.1.6
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v2.1.1...v2.1.6)

Updates `zstd` from 0.13.1 to 0.13.2
- [Release notes](https://github.com/gyscos/zstd-rs/releases)
- [Commits](gyscos/zstd-rs@v0.13.1...v0.13.2)

Updates `highway` from 1.1.0 to 1.2.0
- [Changelog](https://github.com/nickbabcock/highway-rs/blob/master/CHANGELOG.md)
- [Commits](nickbabcock/highway-rs@v1.1.0...v1.2.0)

Updates `regex` from 1.10.4 to 1.10.6
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.10.4...1.10.6)

---
updated-dependencies:
- dependency-name: clap
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: flate2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: fs4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: os_pipe
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: reqwest
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: tar
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: tempfile
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: zip
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: zstd
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: highway
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: regex
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Aug 4, 2024
@ofek ofek merged commit 43c4359 into master Aug 7, 2024
12 checks passed
@ofek ofek deleted the dependabot/cargo/all-4070659eaf branch August 7, 2024 13:06
github-actions bot pushed a commit that referenced this pull request Aug 7, 2024
@ofek @dependabot
Bump the all group with 11 updates (#154)
ddfe9ac 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ofek Lev <[email protected]> 43c4359
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ofek ofek ofek approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@ofek