build(deps): bump the prod group across 1 directory with 13 updates #8640
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
A-rust
dependabot
bot
requested review from
arya2 and
upbqdn
and removed request for
a team
Bumps the prod group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.5.4` | `4.5.7` | | [lazy_static](https://github.com/rust-lang-nursery/lazy-static.rs) | `1.4.0` | `1.5.0` | | [toml](https://github.com/toml-rs/toml) | `0.8.13` | `0.8.14` | | [tokio](https://github.com/tokio-rs/tokio) | `1.37.0` | `1.38.0` | | [metrics](https://github.com/metrics-rs/metrics) | `0.22.3` | `0.23.0` | | [hyper](https://github.com/hyperium/hyper) | `0.14.28` | `1.3.1` | | [metrics-exporter-prometheus](https://github.com/metrics-rs/metrics) | `0.14.0` | `0.15.1` | | [proptest](https://github.com/proptest-rs/proptest) | `1.4.0` | `1.5.0` | | [proptest-derive](https://github.com/proptest-rs/proptest) | `0.4.0` | `0.5.0` | | [console-subscriber](https://github.com/tokio-rs/console) | `0.2.0` | `0.3.0` | | [regex](https://github.com/rust-lang/regex) | `1.10.4` | `1.10.5` | | [tracing-test](https://github.com/dbrgn/tracing-test) | `0.2.4` | `0.2.5` | | [syn](https://github.com/dtolnay/syn) | `2.0.66` | `2.0.68` | Updates `clap` from 4.5.4 to 4.5.7 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.4...v4.5.7) Updates `lazy_static` from 1.4.0 to 1.5.0 - [Release notes](https://github.com/rust-lang-nursery/lazy-static.rs/releases) - [Commits](rust-lang-nursery/lazy-static.rs@1.4.0...1.5.0) Updates `toml` from 0.8.13 to 0.8.14 - [Commits](toml-rs/toml@toml-v0.8.13...toml-v0.8.14) Updates `tokio` from 1.37.0 to 1.38.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.37.0...tokio-1.38.0) Updates `metrics` from 0.22.3 to 0.23.0 - [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml) - [Commits](metrics-rs/metrics@metrics-v0.22.3...metrics-v0.23.0) Updates `hyper` from 0.14.28 to 1.3.1 - [Release notes](https://github.com/hyperium/hyper/releases) - [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md) - [Commits](hyperium/hyper@v0.14.28...v1.3.1) Updates `metrics-exporter-prometheus` from 0.14.0 to 0.15.1 - [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml) - [Commits](metrics-rs/metrics@metrics-exporter-prometheus-v0.14.0...metrics-exporter-prometheus-v0.15.1) Updates `proptest` from 1.4.0 to 1.5.0 - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/master/CHANGELOG.md) - [Commits](proptest-rs/proptest@v1.4.0...v1.5.0) Updates `proptest-derive` from 0.4.0 to 0.5.0 - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/master/CHANGELOG.md) - [Commits](proptest-rs/proptest@0.4.0...proptest-derive-0.5.0) Updates `console-subscriber` from 0.2.0 to 0.3.0 - [Release notes](https://github.com/tokio-rs/console/releases) - [Changelog](https://github.com/tokio-rs/console/blob/main/release-plz.toml) - [Commits](tokio-rs/console@console-subscriber-v0.2.0...console-subscriber-v0.3.0) Updates `regex` from 1.10.4 to 1.10.5 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.10.4...1.10.5) Updates `tracing-test` from 0.2.4 to 0.2.5 - [Changelog](https://github.com/dbrgn/tracing-test/blob/main/CHANGELOG.md) - [Commits](dbrgn/tracing-test@v0.2.4...v0.2.5) Updates `syn` from 2.0.66 to 2.0.68 - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](dtolnay/syn@2.0.66...2.0.68) --- updated-dependencies: - dependency-name: clap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: lazy_static dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: toml dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: tokio dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: metrics dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: hyper dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod - dependency-name: metrics-exporter-prometheus dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: proptest dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: proptest-derive dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: console-subscriber dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: regex dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: tracing-test dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: syn dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod ... Signed-off-by: dependabot[bot] <support@github.com>
7 tasks
…from jsonrpc_http_server instead
arya2
force-pushed
the
dependabot/cargo/prod-0f58da088e
branch
from
224c615
to
d3ff131
Compare
arya2
reviewed
Jun 24, 2024
Comment on lines
+6
to
+82
| [[trusted.clap]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 6743 # Ed Page (epage) | ||
| start = "2021-12-08" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.clap_builder]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 6743 # Ed Page (epage) | ||
| start = "2023-03-28" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.clap_derive]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 6743 # Ed Page (epage) | ||
| start = "2021-12-08" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.console-api]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 1249 # Eliza Weisman (hawkw) | ||
| start = "2021-12-16" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.console-subscriber]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 1249 # Eliza Weisman (hawkw) | ||
| start = "2021-12-16" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.hyper]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 359 # Sean McArthur (seanmonstar) | ||
| start = "2019-03-01" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.lazy_static]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 539 # Josh Stone (cuviper) | ||
| start = "2024-06-21" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.regex]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 189 # Andrew Gallant (BurntSushi) | ||
| start = "2019-02-27" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.syn]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 3618 # David Tolnay (dtolnay) | ||
| start = "2019-03-01" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.tokio]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 10 # Carl Lerche (carllerche) | ||
| start = "2019-03-02" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.tokio-macros]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 10 # Carl Lerche (carllerche) | ||
| start = "2019-04-24" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.toml]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 6743 # Ed Page (epage) | ||
| start = "2022-12-14" | ||
| end = "2025-06-24" | ||
|
|
||
| [[trusted.toml_edit]] | ||
| criteria = "safe-to-deploy" | ||
| user-id = 6743 # Ed Page (epage) | ||
| start = "2021-09-13" | ||
| end = "2025-06-24" |
There was a problem hiding this comment.
Except for console-api and console-subscriber (which are for experimental features and rely on setting the tokio_unstable flag), these are trusted in the mozilla audits.toml file.
arya2
force-pushed
the
dependabot/cargo/prod-0f58da088e
branch
from
d3ff131
to
22d015f
Compare
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the prod group with 13 updates in the / directory:
4.5.44.5.71.4.01.5.00.8.130.8.141.37.01.38.00.22.30.23.00.14.281.3.10.14.00.15.11.4.01.5.00.4.00.5.00.2.00.3.01.10.41.10.50.2.40.2.52.0.662.0.68Updates
clapfrom 4.5.4 to 4.5.7Release notes
Sourced from clap's releases.
Changelog
Sourced from clap's changelog.
Commits
6c6839achore: Releasee79ff0ddocs: Update changelogbe2e5caMerge pull request #5527 from epage/mincf5c958fix(parser): Report correct num_args on too-fewe0c9619test(parser): Snapshot num_args errors2f645d3chore: Release6e1e036docs: Update changelog7e1bbf8Merge pull request #5523 from ben--/zsh-colon8e3c273fix(zsh): Separate options from _arguments optionsUpdates
lazy_staticfrom 1.4.0 to 1.5.0Commits
be7c1c4point readme version to 1.5.08971a27update readme build badge15691ecModernize lazy-static infra (#219)2660041Merge pull request #206 from TheBotlyNoob/master6ace970Merge pull request #216 from frewsxcv/patch-1a203105Update README.mdcfd89acUpdate README.mdfc8e466Update README.mda8afb21Update README.md41fa234Update README to indicate how to replace withstd::sync::OnceLockUpdates
tomlfrom 0.8.13 to 0.8.14Commits
c383efachore: Release7bb1781docs: Update changelog0af6debMerge pull request #740 from epage/key-quotesc9e36e7fix(encode): Prefer literals over escaping double-quotes42f7a1btest(encode): Show existing quote behavior9e6290fchore(deps): Update compatible (dev) (#737)dbf1cc1Merge pull request #736 from epage/snapboxec9bfd7chore: Update to snapbox 0.6881bf67chore: Remove unused featuresb62c76erefactor: Resolve deprecationsUpdates
tokiofrom 1.37.0 to 1.38.0Release notes
Sourced from tokio's releases.
... (truncated)
Commits
14c17fcchore: prepare Tokio v1.38.0 (#6601)65cbf73chore: prepare tokio-macros v2.3.0 (#6600)dbf93c7sync: fix incorrect is_empty on mpsc block boundaries (#6603)873cb8aruntime: move task out of thelifo_slotinblock_in_place(#6596)97bb47btask: fix a typo in doc ofLocalSet::run_until(#6599)86658bdmetrics: stabilizeRuntimeMetrics::worker_count(#6556)9e00b26sync: addNotify::notify_last(#6520)6c42d28net: fix misleadingNamedPipeServerexample (#6590)3a6fdc0license: fix formatting and remove year in licenses (#6451)2890d0cmetrics: fix blocking_threads count (#6551)Updates
metricsfrom 0.22.3 to 0.23.0Commits
787b170chore: Releaseb48ed78update changelog82513b3Relax bounds on somemetrics_util::registry::Registrymethods (#484)ce9084bpermit trailing commans in describe macros (#483)deba76aFix wording for histogram functionality in lib.rs (#477)06fa1beAdd community exporter for Sentry to readme (#480)3fc0b4fImplement conversion from cow to std cow (#478)cd7de8cAnnotate metric types with must_use (#475)f322087chore: bump MSRV to 1.70.0 (#476)65f6e65metrics-util: derive Clone for Snapshotter (#472)Updates
hyperfrom 0.14.28 to 1.3.1Release notes
Sourced from hyper's releases.
... (truncated)
Changelog
Sourced from hyper's changelog.
... (truncated)
Commits
c78379ev1.3.13705a7eRevert "fix(client): send content-length even with no body"d53305av1.3.0dc27043feat(ext): implement From ReasonPhrase for Bytes6aee2e6feat(service): expose Service and HttpService trait unconditionally172fdfafix(client): send content-length even with no bodyb79be91fix(server): avoid unwrapping for theFutureimpl of HTTP/1 `UpgradeableCon...203d1b0fix(http2):max_header_list_size(num)defaults to 16kb1c5b1b8feat(client): addmax_header_list_size(num)tohttp2::Builder.df33d4drefactor(h1): use UninitSlice::as_uninit_slice_mut() instead of cast (#3618)Updates
metrics-exporter-prometheusfrom 0.14.0 to 0.15.1Commits
f84efc4chore: Release20b6ec5metrics-exporter-promethus: update CHANGELOG9f86b53Try fixing the Discord invite link... again.db56631Update Discord invite link.654c3a1metrics-exporter-prometheus: use hyper-rustls (#489)4c002c4typo fix in CHANGELOG.md (#487)787b170chore: Releaseb48ed78update changelog82513b3Relax bounds on somemetrics_util::registry::Registrymethods (#484)ce9084bpermit trailing commans in describe macros (#483)Updates
proptestfrom 1.4.0 to 1.5.0Commits
ca308b0Merge pull request #462 from mirandaconrado/master0a53edaMerge pull request #467 from matthew-russo/macro-0.196a2dabMerge pull request #464 from matthew-russo/masterf818fa2Release : prep for proptest-macro 0.1.0 releasee275f8aRelease : prep for proptest-derive 0.5 releasef87ec63Release : prep for proptest 1.5 release060cfbe[Doc] Arbitrary : add a note about the derive macro in Arbitrary's documentation1426f0fUpdate changelog7774b9cDetect empty ranges during tree creation24412f5Update compiletest_rs requirement from 0.10 to 0.11 (#455)Updates
proptest-derivefrom 0.4.0 to 0.5.0Commits
ca308b0Merge pull request #462 from mirandaconrado/master0a53edaMerge pull request #467 from matthew-russo/macro-0.196a2dabMerge pull request #464 from matthew-russo/masterf818fa2Release : prep for proptest-macro 0.1.0 releasee275f8aRelease : prep for proptest-derive 0.5 releasef87ec63Release : prep for proptest 1.5 release060cfbe[Doc] Arbitrary : add a note about the derive macro in Arbitrary's documentation1426f0fUpdate changelog7774b9cDetect empty ranges during tree creation24412f5Update compiletest_rs requirement from 0.10 to 0.11 (#455)Updates
console-subscriberfrom 0.2.0 to 0.3.0Release notes
Sourced from console-subscriber's releases.
Commits
b802bf1chore: release tokio-console-v0.1.11, console-api-v0.7.0, console-subscriber-...87ba91cchore(console): update cargo dist (#556)dcf8c2cchore: include tonic updates in release notes (#559)99437b0chore: automate releases with Release-plz (#545)852a977fix(subscriber): ignore metadata that is not a span or event (#554)a0d20fddocs(console): add note about running on Windows (#510)60bcf87chore: get rid of remove_dir_all (#542)1c1d599chore: bump clap and clap_complete to the latest version (#552)ef6816cchore: bump tonic to 0.11 (#547)6cbd6dbchore(console): bump ratatui to 0.26.2 and crossterm to 0.27.0 (#515)Updates
regexfrom 1.10.4 to 1.10.5Changelog
Sourced from regex's changelog.
Commits
0718fc51.10.5377463bchangelog: 1.10.4 and 1.10.568c4f0bregex-automata-0.4.74757b5fregex-syntax-0.8.41430b65changelog: 1.10.41f9f9ccbytes: escape invalid UTF-8 bytes in debug output for Matchab4c8d1doc: fix duplicate phrasing typoddeb85ecli/deps: update memmap2 to 0.9023f1c9lite: fix attribute warning about rustfmt9c139f4syntax: simplifyHir::dotconstructorsUpdates
tracing-testfrom 0.2.4 to 0.2.5Changelog
Sourced from tracing-test's changelog.
Commits
5d645cbRelease v0.2.5aa67a99Update syn (#40)3c5379fInclude license text in the packaged crates (#41)9b8aa60Replace lazy_static dependency with std::sync::OnceCell (#36)49fa2c4Merge pull request #32 from dbrgn/cifc98e76Add dependabot config90cce74CI: Switch to dtolnay/rust-toolchain0709a22CI: Bump actions/checkout from v2 to v4f0e2903CI: Bump Rust to 1.71.1Updates
synfrom 2.0.66 to 2.0.68Release notes
Sourced from syn's releases.
Commits
ecb0429Release 2.0.6837edbd2Merge pull request #1690 from stepancheg/track-called4338772track-caller in parse_quote_spanned537b0c5Update test suite to nightly-2024-06-22b088d5cMerge pull request #1688 from dtolnay/peeklit9b4e478Relocate Lit peek impls into lit module38f2ddbMerge pull request #1687 from dtolnay/fastpeekef20bfdOptimize the peek impl of Group and Lifetime4b6c96aMerge pull request #1686 from dtolnay/isempty87d5792Reword explanation of ParseBuffer::is_emptyMost Recent Ignore Conditions Applied to This Pull Request
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions