build(deps): bump the dependencies group with 9 updates #219

dependabot · 2025-02-01T20:46:40Z

Bumps the dependencies group with 9 updates:

Package	From	To
log	`0.4.22`	`0.4.25`
tokio	`1.42.0`	`1.43.0`
data-encoding	`2.6.0`	`2.7.0`
windows	`0.58.0`	`0.59.0`
security-framework	`3.1.0`	`3.2.0`
tun	`0.7.10`	`0.7.11`
tempfile	`3.15.0`	`3.16.0`
rand	`0.8.5`	`0.9.0`
pyo3	`0.23.3`	`0.23.4`

Updates log from 0.4.22 to 0.4.25

Release notes

Sourced from log's releases.

0.4.25

What's Changed

Revert loosening of kv cargo features by @KodrAus in rust-lang/log#662

Prepare for 0.4.25 release by @KodrAus in rust-lang/log#663

Full Changelog: rust-lang/log@0.4.24...0.4.25

0.4.24 (yanked)

What's Changed

Fix up kv feature activation by @KodrAus in rust-lang/log#659

Prepare for 0.4.24 release by @KodrAus in rust-lang/log#660

Full Changelog: rust-lang/log@0.4.23...0.4.24

0.4.23 (yanked)

What's Changed

Fix some typos by @Kleinmarb in rust-lang/log#637

Add logforth to implementation by @tisonkun in rust-lang/log#638

Add spdlog-rs link to README by @SpriteOvO in rust-lang/log#639

Add correct lifetime to kv::Value::to_borrowed_str by @stevenroose in rust-lang/log#643

docs: Add logforth as an impl by @tisonkun in rust-lang/log#642

Add clang_log implementation by @DDAN-17 in rust-lang/log#646

Bind lifetimes of &str returned from Key by the lifetime of 'k rather than the lifetime of the Key struct by @gbbosak in rust-lang/log#648 (reverted)

Fix up key lifetimes and add method to try get a borrowed key by @KodrAus in rust-lang/log#653

Add Ftail implementation by @tjardoo in rust-lang/log#652

Relax feature flag for value's std_support by @tisonkun in rust-lang/log#657

Prepare for 0.4.23 release by @KodrAus in rust-lang/log#656

New Contributors

@Kleinmarb made their first contribution in rust-lang/log#637

@tisonkun made their first contribution in rust-lang/log#638

@SpriteOvO made their first contribution in rust-lang/log#639

@stevenroose made their first contribution in rust-lang/log#643

@DDAN-17 made their first contribution in rust-lang/log#646

@gbbosak made their first contribution in rust-lang/log#648

@tjardoo made their first contribution in rust-lang/log#652

Full Changelog: rust-lang/log@0.4.22...0.4.23

Changelog

Sourced from log's changelog.

[0.4.25] - 2025-01-14

What's Changed

Revert loosening of kv cargo features by @KodrAus in rust-lang/log#662

Full Changelog: rust-lang/log@0.4.24...0.4.25

[0.4.24] - 2025-01-11

What's Changed

Fix up kv feature activation by @KodrAus in rust-lang/log#659

Full Changelog: rust-lang/log@0.4.23...0.4.24

[0.4.23] - 2025-01-10 (yanked)

What's Changed

Fix some typos by @Kleinmarb in rust-lang/log#637

Add logforth to implementation by @tisonkun in rust-lang/log#638

Add spdlog-rs link to README by @SpriteOvO in rust-lang/log#639

Add correct lifetime to kv::Value::to_borrowed_str by @stevenroose in rust-lang/log#643

docs: Add logforth as an impl by @tisonkun in rust-lang/log#642

Add clang_log implementation by @DDAN-17 in rust-lang/log#646

Bind lifetimes of &str returned from Key by the lifetime of 'k rather than the lifetime of the Key struct by @gbbosak in rust-lang/log#648

Fix up key lifetimes and add method to try get a borrowed key by @KodrAus in rust-lang/log#653

Add Ftail implementation by @tjardoo in rust-lang/log#652

New Contributors

@Kleinmarb made their first contribution in rust-lang/log#637

@tisonkun made their first contribution in rust-lang/log#638

@SpriteOvO made their first contribution in rust-lang/log#639

@stevenroose made their first contribution in rust-lang/log#643

@DDAN-17 made their first contribution in rust-lang/log#646

@gbbosak made their first contribution in rust-lang/log#648

@tjardoo made their first contribution in rust-lang/log#652

Full Changelog: rust-lang/log@0.4.22...0.4.23

Commits

22be810 Merge pull request #663 from rust-lang/cargo/0.4.25
0279730 prepare for 0.4.25 release
4099bcb Merge pull request #662 from rust-lang/fix/cargo-features
36e7e3f revert loosening of kv cargo features
2282191 Merge pull request #660 from rust-lang/cargo/0.4.24
2994f0a prepare for 0.4.24 release
5fcb50e Merge pull request #659 from rust-lang/fix/feature-builds
29fe9e6 fix up feature activation
b1824f2 use cargo hack in CI to test all feature combinations
e6b643d Merge pull request #656 from rust-lang/cargo/0.4.23
Additional commits viewable in compare view

Updates tokio from 1.42.0 to 1.43.0

Release notes

Sourced from tokio's releases.

Tokio v1.43.0

1.43.0 (Jan 8th, 2025)

Added

net: add UdpSocket::peek methods (#7068)

net: add support for Haiku OS (#7042)

process: add Command::into_std() (#7014)

signal: add SignalKind::info on illumos (#6995)

signal: add support for realtime signals on illumos (#7029)

Fixed

io: don't call set_len before initializing vector in Blocking (#7054)

macros: suppress clippy::needless_return in #[tokio::main] (#6874)

runtime: fix thread parking on WebAssembly (#7041)

Changes

chore: use unsync loads for unsync_load (#7073)

io: use Buf::put_bytes in Repeat read impl (#7055)

task: drop the join waker of a task eagerly (#6986)

Changes to unstable APIs

metrics: improve flexibility of H2Histogram Configuration (#6963)

taskdump: add accessor methods for backtrace (#6975)

Documented

io: clarify ReadBuf::uninit allows initialized buffers as well (#7053)

net: fix ambiguity in TcpStream::try_write_vectored docs (#7067)

runtime: fix LocalRuntime doc links (#7074)

sync: extend documentation for watch::Receiver::wait_for (#7038)

sync: fix typos in OnceCell docs (#7047)

#6874: tokio-rs/tokio#6874 #6963: tokio-rs/tokio#6963 #6975: tokio-rs/tokio#6975 #6986: tokio-rs/tokio#6986 #6995: tokio-rs/tokio#6995 #7014: tokio-rs/tokio#7014 #7029: tokio-rs/tokio#7029 #7038: tokio-rs/tokio#7038 #7041: tokio-rs/tokio#7041 #7042: tokio-rs/tokio#7042 #7047: tokio-rs/tokio#7047 #7053: tokio-rs/tokio#7053 #7054: tokio-rs/tokio#7054 #7055: tokio-rs/tokio#7055

... (truncated)

Commits

5f3296d chore: prepare Tokio v1.43.0 (#7079)
cc974a6 chore: prepare tokio-macros v2.5.0 (#7078)
15495fd metrics: improve flexibility of H2Histogram Configuration (#6963)
ad41834 io: don't call set_len before initializing vector in Blocking (#7054)
bd3e857 runtime: move is_join_waker_set assertion in unset_waker (#7072)
15f7366 runtime: fix LocalRuntime doc links (#7074)
fd2048d ci: split miri jobs into unit and integration tests (#7071)
e8f3915 chore: use unsync loads for unsync_load (#7073)
67f1277 net: fix ambiguity in TcpStream::try_write_vectored docs (#7067)
463502c io: clarify ReadBuf::uninit allows initialized buffers as well (#7053)
Additional commits viewable in compare view

Updates data-encoding from 2.6.0 to 2.7.0

Commits

See full diff in compare view

Updates windows from 0.58.0 to 0.59.0

Commits

308e08e Release 0.59.0 (#3182)
429666e Fix support for no_std (#3180)
02c4f29 Update component sample to use static factory (#3154)
7cec74f Implement static COM objects (#3144)
12f4621 Reduce boilerplate code in windows-core crate for VARIANT support (#3151)
See full diff in compare view

Updates security-framework from 3.1.0 to 3.2.0

Commits

d0b1b60 Bump
70d3ae0 Bump
22359c4 Synchronizable polish
9b733ff Simpler bool
433f35e Simplify cfg boilerplate
e6fdb1a Use new macro syntax
accd722 Simplify feature flag
d139535 Add keychain synchronisation and authentication
e5e5412 Workaround for picky PartialEq
362832f Clippy
Additional commits viewable in compare view

Updates tun from 0.7.10 to 0.7.11

Release notes

Sourced from tun's releases.

v0.7.11

Full Changelog: meh/rust-tun@v0.7.7...v0.7.11

Commits

See full diff in compare view

Updates tempfile from 3.15.0 to 3.16.0

Changelog

Sourced from tempfile's changelog.

3.16.0

Update getrandom to 0.3.0 (thanks to @paolobarbolini).

Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @ErichDonGubler).

Improved security documentation (thanks to @n0toose for collaborating with me on this).

Commits

6ecd9f1 chore: release 3.16.0
3693c01 build: upgrade getrandom to v0.3.0 (#320)
a4596e5 build: allow windows-sys 0.59 (#319)
3ac6d4e chore: fix clippy lifetime warning (#318)
3a722e8 docs: improve & expand security documentation (#317)
See full diff in compare view

Updates rand from 0.8.5 to 0.9.0

Changelog

Sourced from rand's changelog.

[0.9.0] - 2025-01-27

Security and unsafe

Policy: "rand is not a crypto library" (#1514)

Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)

Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version

Update to rand_core v0.9.0 (#1558)

Features

Support std feature without getrandom or rand_chacha (#1354)

Enable feature small_rng by default (#1455)

Remove implicit feature rand_chacha; use std_rng instead. (#1473)

Rename feature serde1 to serde (#1477)

Rename feature getrandom to os_rng (#1537)

Add feature thread_rng (#1547)

API changes: rand_core traits

Add fn RngCore::read_adapter implementing std::io::Read (#1267)

Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)

Add traits TryRngCore, TryCryptoRng (#1424, #1499)

Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)

Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)

Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)

Remove fn rand::random() from the prelude (#1506)

Add top-level fns random_iter, random_range, random_bool, random_ratio, fill (#1488)

Re-introduce fn Rng::gen_iter as random_iter (#1305, #1500)

Rename fn Rng::gen to random to avoid conflict with the new gen keyword in Rust 2024 (#1438)

Rename fns Rng::gen_range to random_range, gen_bool to random_bool, gen_ratio to random_ratio (#1505)

Annotate panicking methods with #[track_caller] (#1442, #1447)

API changes: RNGs

Fix <SmallRng as SeedableRng>::Seed size to 256 bits (#1455)

Remove first parameter (rng) of ReseedingRng::new (#1533)

API changes: Sequences

Split trait SliceRandom into IndexedRandom, IndexedMutRandom, SliceRandom (#1382)

Add IndexedRandom::choose_multiple_array, index::sample_array (#1453, #1469)

API changes: Distributions: renames

Rename module rand::distributions to rand::distr (#1470)

Rename distribution Standard to StandardUniform (#1526)

Move distr::Slice -> distr::slice::Choose, distr::EmptySlice -> distr::slice::Empty (#1548)

Rename trait distr::DistString -> distr::SampleString (#1548)

Rename distr::DistIter -> distr::Iter, distr::DistMap -> distr::Map (#1548)

... (truncated)

Commits

96f8df6 Prepare 0.9.0 release (#1558)
34da321 Enable stdarch_x86_avx512 for cpu has avx512bw (#1551)
b4b1eb7 Re-org with distr::slice, distr::weighted modules (#1548)
16eb7de Add the thread_rng feature flag (#1547)
afa24e4 Fix test status badges (#1544)
c681dfc Create FUNDING.yml
9f05e22 Update: getrandom v0.3.0 rc.0 (#1541)
88c310b Fix docs.rs build options (#1539)
b879689 Adjust GH Actions (#1538)
3fac49f Prepare 0.9.0-beta.0 (#1535)
Additional commits viewable in compare view

Updates pyo3 from 0.23.3 to 0.23.4

Release notes

Sourced from pyo3's releases.

PyO3 0.23.4

This release contains a range of fixes on top of PyO3 0.23.3, primarily grouped into the following categories:

Fixes for the new support for free-threaded Python 3.13

Fixes to conversions between Python and chrono datetimes

Fixes to various build configuration cases for Windows

Fixes to edge cases in PyO3's macros leading to compile failures

Thank you to the following contributors for the improvements:

@alex @bschoenmaeckers @davidhewitt @Icxolu @kahojyun @LilyFoote @mejrs @messense @msimacek @ngoldbaum @Owen-CH-Leung @Tpt

Changelog

Sourced from pyo3's changelog.

[0.23.4] - 2025-01-10

Added

Add PyList::locked_for_each, which uses a critical section to lock the list on the free-threaded build. #4789

Add pyo3_build_config::add_python_framework_link_args build script API to set rpath when using macOS system Python. #4833

Changed

Use datetime.fold to distinguish ambiguous datetimes when converting to and from chrono::DateTime<Tz> (rather than erroring). #4791

Optimize PyList iteration on the free-threaded build. #4789

Fixed

Fix unnecessary internal py.allow_threads GIL-switch when attempting to access contents of a PyErr which originated from Python (could lead to unintended deadlocks). #4766

Fix thread-unsafe access of dict internals in BoundDictIterator on the free-threaded build. #4788

Fix unnecessary critical sections in BoundDictIterator on the free-threaded build. #4788

Fix time-of-check to time-of-use issues with list iteration on the free-threaded build. #4789

Fix chrono::DateTime<Tz> to-Python conversion when Tz is chrono_tz::Tz. #4790

Fix #[pyclass] not being able to be named Probe. #4794

Fix not treating cross-compilation from x64 to aarch64 on Windows as a cross-compile. #4800

Fix missing struct fields on GraalPy when subclassing builtin classes. #4802

Fix generating import lib for PyPy when abi3 feature is enabled. #4806

Fix generating import lib for python3.13t when abi3 feature is enabled. #4808

Fix compile failure for raw identifiers like r#box in derive(FromPyObject). #4814

Fix compile failure for #[pyclass] enum variants with more than 12 fields. #4832

Commits

f2a8460 release: 0.23.4
0c10e34 ci: updates for Rust 1.84 (#4846)
9ee55a3 Implement locked iteration for PyList (#4789)
4b04bb3 Allow useless conversion (#4838)
bcdbc93 Fix PyDict issues on free-threaded build (#4788)
8aa6825 Add an API to set rpath when using macOS system Python (#4833)
e19d048 ci: add more tests for cross-compilation (#4773)
325218f docs: Expand docs on when and why allow_threads is necessary (#4767)
869a25b fix error with complex enums with many fields (#4832)
f2915f5 fix: cross-compilation compatibility checks for Windows (#4800)
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
windows	[>= 0.58.a, < 0.59]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 9 updates: | Package | From | To | | --- | --- | --- | | [log](https://github.com/rust-lang/log) | `0.4.22` | `0.4.25` | | [tokio](https://github.com/tokio-rs/tokio) | `1.42.0` | `1.43.0` | | [data-encoding](https://github.com/ia0/data-encoding) | `2.6.0` | `2.7.0` | | [windows](https://github.com/microsoft/windows-rs) | `0.58.0` | `0.59.0` | | [security-framework](https://github.com/kornelski/rust-security-framework) | `3.1.0` | `3.2.0` | | [tun](https://github.com/meh/rust-tun) | `0.7.10` | `0.7.11` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.15.0` | `3.16.0` | | [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.0` | | [pyo3](https://github.com/pyo3/pyo3) | `0.23.3` | `0.23.4` | Updates `log` from 0.4.22 to 0.4.25 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.22...0.4.25) Updates `tokio` from 1.42.0 to 1.43.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.42.0...tokio-1.43.0) Updates `data-encoding` from 2.6.0 to 2.7.0 - [Commits](https://github.com/ia0/data-encoding/commits) Updates `windows` from 0.58.0 to 0.59.0 - [Release notes](https://github.com/microsoft/windows-rs/releases) - [Commits](microsoft/windows-rs@0.58.0...0.59.0) Updates `security-framework` from 3.1.0 to 3.2.0 - [Release notes](https://github.com/kornelski/rust-security-framework/releases) - [Commits](kornelski/rust-security-framework@v3.1.0...v3.2.0) Updates `tun` from 0.7.10 to 0.7.11 - [Release notes](https://github.com/meh/rust-tun/releases) - [Commits](https://github.com/meh/rust-tun/commits/v0.7.11) Updates `tempfile` from 3.15.0 to 3.16.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.15.0...v3.16.0) Updates `rand` from 0.8.5 to 0.9.0 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.8.5...0.9.0) Updates `pyo3` from 0.23.3 to 0.23.4 - [Release notes](https://github.com/pyo3/pyo3/releases) - [Changelog](https://github.com/PyO3/pyo3/blob/v0.23.4/CHANGELOG.md) - [Commits](PyO3/pyo3@v0.23.3...v0.23.4) --- updated-dependencies: - dependency-name: log dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tokio dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: data-encoding dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: windows dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: security-framework dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: tun dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tempfile dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: rand dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pyo3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

mhils · 2025-02-01T23:30:54Z

@dependabot ignore windows minor version

dependabot · 2025-02-01T23:30:56Z

OK, I won't notify you about version 0.59.x of windows again, unless you unignore it.

dependabot · 2025-02-01T23:33:45Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

mhils · 2025-02-01T23:41:13Z

@dependabot unignore windows minor version

dependabot · 2025-02-01T23:41:14Z

OK, I will stop ignoring the windows dependency.

dependabot · 2025-02-01T23:41:15Z

Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use @dependabot reopen if the branch has been deleted).

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Feb 1, 2025

mhils enabled auto-merge (squash) February 1, 2025 23:31

dependabot bot closed this Feb 1, 2025

auto-merge was automatically disabled February 1, 2025 23:33
Pull request was closed

dependabot bot deleted the dependabot/cargo/dependencies-8498615a36 branch February 1, 2025 23:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the dependencies group with 9 updates #219

build(deps): bump the dependencies group with 9 updates #219

dependabot bot commented on behalf of github Feb 1, 2025 •

edited

Loading

mhils commented Feb 1, 2025

dependabot bot commented on behalf of github Feb 1, 2025

dependabot bot commented on behalf of github Feb 1, 2025

mhils commented Feb 1, 2025

dependabot bot commented on behalf of github Feb 1, 2025

dependabot bot commented on behalf of github Feb 1, 2025

build(deps): bump the dependencies group with 9 updates #219

build(deps): bump the dependencies group with 9 updates #219

Conversation

dependabot bot commented on behalf of github Feb 1, 2025 • edited Loading

0.4.25

What's Changed

0.4.24 (yanked)

What's Changed

0.4.23 (yanked)

What's Changed

New Contributors

[0.4.25] - 2025-01-14

What's Changed

[0.4.24] - 2025-01-11

What's Changed

[0.4.23] - 2025-01-10 (yanked)

What's Changed

New Contributors

Tokio v1.43.0

1.43.0 (Jan 8th, 2025)

Added

Fixed

Changes

Changes to unstable APIs

Documented

v0.7.11

3.16.0

[0.9.0] - 2025-01-27

Security and unsafe

Dependencies

Features

API changes: rand_core traits

API changes: Rng trait and top-level fns

API changes: RNGs

API changes: Sequences

API changes: Distributions: renames

PyO3 0.23.4

[0.23.4] - 2025-01-10

Added

Changed

Fixed

mhils commented Feb 1, 2025

dependabot bot commented on behalf of github Feb 1, 2025

dependabot bot commented on behalf of github Feb 1, 2025

mhils commented Feb 1, 2025

dependabot bot commented on behalf of github Feb 1, 2025

dependabot bot commented on behalf of github Feb 1, 2025

dependabot bot commented on behalf of github Feb 1, 2025 •

edited

Loading