build(deps): bump the cargo-dependencies group with 21 updates #571

dependabot · 2024-05-12T14:46:03Z

Bumps the cargo-dependencies group with 21 updates:

Package	From	To
anyhow	`1.0.75`	`1.0.83`
chrono	`0.4.26`	`0.4.38`
clap	`4.4.1`	`4.4.18`
futures	`0.3.28`	`0.3.30`
itertools	`0.11.0`	`0.12.1`
log	`0.4.20`	`0.4.21`
log4rs	`1.2.0`	`1.3.0`
regex	`1.9.4`	`1.10.4`
rustyline	`12.0.0`	`14.0.0`
serde	`1.0.188`	`1.0.193`
serde_json	`1.0.105`	`1.0.109`
shlex	`1.1.0`	`1.3.0`
tokio	`1.32.0`	`1.37.0`
tokio-stream	`0.1.14`	`0.1.15`
ratatui	`0.23.0`	`0.26.2`
unicode-segmentation	`1.10.1`	`1.11.0`
unicode-truncate	`0.2.0`	`1.0.0`
unicode-width	`0.1.10`	`0.1.12`
uuid	`1.4.1`	`1.8.0`
versions	`5.0.1`	`6.2.0`
clap_complete	`4.4.0`	`4.5.2`

Updates anyhow from 1.0.75 to 1.0.83

Release notes

Sourced from anyhow's releases.

1.0.83

Integrate compile-time checking of cfgs (#363)

1.0.82

Documentation improvements

1.0.81

Make backtrace support available when using -Dwarnings (#354)

1.0.80

Fix unused_imports warnings when compiled by rustc 1.78

1.0.79

Work around improperly cached build script result by sccache (#340)

1.0.78

Reduce spurious rebuilds under RustRover IDE when using a nightly toolchain (#337)

1.0.77

Make anyhow::Error::backtrace available on stable Rust compilers 1.65+ (#293, thanks @LukasKalbertodt)

1.0.76

Opt in to unsafe_op_in_unsafe_fn lint (#329)

Commits

96f0392 Release 1.0.83
17bbd1e Merge pull request #363 from dtolnay/checkcfg
3ab3c3b Resolve unexpected_cfgs warning
8e62244 Discard CI coverage of backtrace feature on toolchains older than 1.63
e77374f Mirror PR 343 changes from readme to rustdoc
cb47d7c Reword no-std documentation change from PR 343
6b5bdb1 Wrap PR 343 to 80 columns
f01080b Merge pull request #343 from Arthur-Milchior/readme1
074bdea Release 1.0.82
47a4fbf Merge pull request #360 from dtolnay/docensure
Additional commits viewable in compare view

Updates chrono from 0.4.26 to 0.4.38

Release notes

Sourced from chrono's releases.

v0.4.38

This release bring a ca. 20% improvement to the performance of the formatting code, and a convenient days_since method for the Weekday type.

Chrono 0.4.38 also removes the long deprecated rustc-serialize feature. Support for rustc-serialize will be soft-destabilized in the next Rust edition. Removing the feature will not break existing users of the feature; Cargo will just not update dependents that rely on it to newer versions of chrono.

In chrono 0.4.36 we made an accidental breaking change by switching to derive(Copy) for DateTime instead of a manual implementation. It is reverted in this release.

Removals

Remove rustc-serialize feature (#1548, thanks @workingjubilee)

Additions

Add Weekday::days_since (#1249, based on #216 by @clarfonthey)

Add TimeDelta::checked_mul and TimeDelta::checked_div (#1565, thanks @Zomtir)

Fixes

Return error when rounding with a zero duration (#1474, thanks @Dav1dde)

Manually implement Copy for DateTime if offset is Copy (#1573)

Internal

Inline test_encodable_json and test_decodable_json functions (#1550)

CI: Reduce combinations in cargo hack check (#1553)

Refactor formatting code (#1335)

Optimize number formatting (#1558)

Only package files needed for building and testing (#1554)

Thanks to all contributors on behalf of the chrono team, @djc and @pitdicker!

v0.4.37

Version 0.4.36 introduced an unexpected breaking change and was yanked. In it LocalResult was renamed to MappedLocalTime to avoid the impression that it is a Result type were some of the results are errors. For backwards compatibility a type alias with the old name was added.

As it turns out there is one case where a type alias behaves differently from the regular enum: you can't import enum variants from a type alias with use chrono::LocalResult::*. With 0.4.37 we make the new name MappedLocalTime the alias, but keep using it in function signatures and the documentation as much as possible.

See also the release notes of chrono 0.4.36 from yesterday for the yanked release.

v0.4.36

This release un-deprecates the methods on TimeDelta that were deprecated with the 0.4.35 release because of the churn they are causing for the ecosystem.

New is the DateTime::with_time() method. As an example of when it is useful:
use chrono::{Local, NaiveTime};
// Today at 12:00:00
let today_noon = Local::now().with_time(NaiveTime::from_hms_opt(12, 0, 0).unwrap());
Additions

Add DateTime::with_time() (#1510)

Deprecations

Revert TimeDelta deprecations (#1543)

Deprecate TimeStamp::timestamp_subsec_nanos, which was missed in the 0.4.35 release (#1486)

... (truncated)

Commits

352a352 Prepare 0.4.38
46d44d6 Manually implement Copy for DateTime if offset is Copy
760eb66 Update windows-bindgen requirement from 0.55 to 0.56
391187f Return error when rounding with zero duration
ffc75e5 Add TimeDelta::checked_mul and TimeDelta::checked_div
f8cecbe Make Weekday::num_days_from public, rename to days_since.
0cfc405 Optimize number formatting
74ba83b Take pad by value
78e79db Match on tuples in format_fixed
f3d76c7 Match on tuples in format_numeric
Additional commits viewable in compare view

Updates clap from 4.4.1 to 4.4.18

Release notes

Sourced from clap's releases.

v4.4.18

[4.4.18] - 2024-01-16

Fixes

(error) When lacking usage feature, ensure the list of required arguments is unique

v4.4.17

[4.4.17] - 2024-01-15

Fixes

Fix panic! when mixing args_conflicts_with_subcommands with ArgGroup (which is implicit with derive) introduced in 4.4.15

v4.4.16

[4.4.16] - 2024-01-12

Fixes

Ensure invalid escape sequences in user-defined strings are correctly stripped when terminal doesn't support color

v4.4.15

[4.4.15] - 2024-01-11

Fixes

Improve error for args_conflicts_with_subcommands

Ensure we error for args_conflicts_with_subcommands when using subcommand short and long flags

v4.4.14

[4.4.14] - 2024-01-08

Documentation

Fix find cookbook entry to allow repeats of flags/options

Features

Allow num_args(0) on options which allows making them emulate being a flag for position-tracking flags

v4.4.13

[4.4.13] - 2024-01-04

Documentation

Fix link to structopt migration guide

v4.4.12

[4.4.12] - 2023-12-28

... (truncated)

Changelog

Sourced from clap's changelog.

Commits

0134f45 chore: Release
995ee03 docs: Update changelog
2f18909 Merge pull request #5314 from epage/required
0a635b9 fix(parser): Don't duplicate requireds when usage disabled
e648e08 Merge pull request #5311 from sourcefrog/doc-exitcode
8c83971 docs: Link to exit code info
b250c0b Merge pull request #5310 from epage/pty
c742b8e chore(complete): Update completest-pty
f524d84 chore: Release
944fb81 docs: Update changelog
Additional commits viewable in compare view

Updates futures from 0.3.28 to 0.3.30

Release notes

Sourced from futures's releases.

0.3.30

Add {BiLock,SplitStream,SplitSink,ReadHalf,WriteHalf}::is_pair_of (#2797)

Fix panic in FuturesUnordered::clear (#2809)

Fix panic in AsyncBufReadExt::fill_buf (#2801, #2812)

Improve support for targets without atomic CAS (#2811)

Remove build scripts (#2811)

0.3.29

Add TryStreamExt::try_ready_chunks (#2757)

Add TryStreamExt::{try_all,try_any} (#2783)

Add UnboundedSender::{len,is_empty} (#2750)

Fix Sync impl of FuturesUnordered (#2788)

Fix infinite loop caused by invalid UTF-8 bytes (#2785)

Fix build error with -Z minimal-versions (#2761)

Changelog

Sourced from futures's changelog.

0.3.30 - 2023-12-24

Add {BiLock,SplitStream,SplitSink,ReadHalf,WriteHalf}::is_pair_of (#2797)

Fix panic in FuturesUnordered::clear (#2809)

Fix panic in AsyncBufReadExt::fill_buf (#2801, #2812)

Improve support for targets without atomic CAS (#2811)

Remove build scripts (#2811)

0.3.29 - 2023-10-26

Add TryStreamExt::try_ready_chunks (#2757)

Add TryStreamExt::{try_all,try_any} (#2783)

Add UnboundedSender::{len,is_empty} (#2750)

Fix Sync impl of FuturesUnordered (#2788)

Fix infinite loop caused by invalid UTF-8 bytes (#2785)

Fix build error with -Z minimal-versions (#2761)

Commits

de1a0fd Release 0.3.30
68d2845 Remove a redundant space in example (#2816)
fdd2ce7 Fix broken link in CopyBufAbortable docs (#2815)
272a3c7 Use cfg(target_has_atomic) on no-std targets
c179201 FillBuf: Do not call poll_fill_buf twice
e6735f3 FuturesUnordered: Fix clear implementation
04d01a0 FuturesOrdered: Use 64-bit index
e4aa659 remove redundant impl Unpin
17851c1 provide a mechanism to determine if io read/write halves are from the same st...
4910799 provide a non-destructive mechanism to determine if a sink/stream are paired
Additional commits viewable in compare view

Updates itertools from 0.11.0 to 0.12.1

Changelog

Sourced from itertools's changelog.

0.12.1

Added

Documented iteration order guarantee for Itertools::[tuple_]combinations (#822)

Documented possible panic in iterate (#842)

Implemented Clone and Debug for Diff (#845)

Implemented Debug for WithPosition (#859)

Implemented Eq for MinMaxResult (#838)

Implemented From<EitherOrBoth<A, B>> for Option<Either<A, B>> (#843)

Implemented PeekingNext for RepeatN (#855)

Changed

Made CoalesceBy lazy (#801)

Optimized Filter[Map]Ok::next, Itertools::partition, Unique[By]::next[_back] (#818)

Optimized Itertools::find_position (#837)

Optimized Positions::next[_back] (#816)

Optimized ZipLongest::fold (#854)

Relaxed Debug bounds for GroupingMapBy (#860)

Specialized ExactlyOneError::fold (#826)

Specialized Interleave[Shortest]::fold (#849)

Specialized MultiPeek::fold (#820)

Specialized PadUsing::[r]fold (#825)

Specialized PeekNth::fold (#824)

Specialized Positions::[r]fold (#813)

Specialized PutBackN::fold (#823)

Specialized RepeatN::[r]fold (#821)

Specialized TakeWhileInclusive::fold (#851)

Specialized ZipLongest::rfold (#848)

Notable Internal Changes

Added test coverage in CI (#847, #856)

Added semver check in CI (#784)

Enforced clippy in CI (#740)

Enforced rustdoc in CI (#840)

Improved specialization tests (#807)

More specialization benchmarks (#806)

0.12.0

Breaking

Made take_while_inclusive consume iterator by value (#709)

Added Clone bound to Unique (#777)

Added

Added Itertools::try_len (#723)

Added free function sort_unstable (#796)

Added GroupMap::fold_with (#778, #785)

Added PeekNth::{peek_mut, peek_nth_mut} (#716)

Added PeekNth::{next_if, next_if_eq} (#734)

Added conversion into (Option<A>,Option<B>) to EitherOrBoth (#713)

... (truncated)

Commits

98d3978 Prepare v0.12.1 release
dffac1f Bump obi1kenobi/cargo-semver-checks-action from 2.2 to 2.3
00998a4 CoalesceBy: missing field in Debug
a0411d6 CombinationsWithReplacement: use a boxed slice internally
8dd75f1 Permutations: use boxed slices internally
b785403 ExactlyOneError: implement Debug differently
7a1c22b FlattenOk: Debug with macro
94452e3 GroupingMapBy: fix Debug implementation
2e325a0 TakeWhileInclusive: missing field in Debug
a48c5b4 WithPosition: implement Debug
Additional commits viewable in compare view

Updates log from 0.4.20 to 0.4.21

Changelog

Sourced from log's changelog.

[0.4.21] - 2024-02-27

What's Changed

Minor clippy nits by @nyurik in rust-lang/log#578

Simplify Display impl by @nyurik in rust-lang/log#579

Set all crates to 2021 edition by @nyurik in rust-lang/log#580

Various changes based on review by @Thomasdezeeuw in rust-lang/log#583

Fix typo in file_static() method doc by @dimo414 in rust-lang/log#590

Specialize empty key value pairs by @EFanZh in rust-lang/log#576

Fix incorrect lifetime in Value::to_str() by @peterjoel in rust-lang/log#587

Remove some API of the key-value feature by @Thomasdezeeuw in rust-lang/log#585

Add logcontrol-log and log-reload by @swsnr in rust-lang/log#595

Add Serialization section to kv::Value docs by @Thomasdezeeuw in rust-lang/log#593

Rename Value::to_str to to_cow_str by @Thomasdezeeuw in rust-lang/log#592

Clarify documentation and simplify initialization of STATIC_MAX_LEVEL by @ptosi in rust-lang/log#594

Update docs to 2021 edition, test by @nyurik in rust-lang/log#577

Add "alterable_logger" link to README.md by @brummer-simon in rust-lang/log#589

Normalize line ending by @EFanZh in rust-lang/log#602

Remove ok_or in favor of Option::ok_or by @AngelicosPhosphoros in rust-lang/log#607

Use Acquire ordering for initialization check by @AngelicosPhosphoros in rust-lang/log#610

Get structured logging API ready for stabilization by @KodrAus in rust-lang/log#613

New Contributors

@nyurik made their first contribution in rust-lang/log#578

@dimo414 made their first contribution in rust-lang/log#590

@peterjoel made their first contribution in rust-lang/log#587

@ptosi made their first contribution in rust-lang/log#594

@brummer-simon made their first contribution in rust-lang/log#589

@AngelicosPhosphoros made their first contribution in rust-lang/log#607

Commits

3ccdc28 Merge pull request #617 from rust-lang/cargo/0.4.21
6153cb2 prepare for 0.4.21 release
f0f7494 Merge pull request #613 from rust-lang/feat/kv-cleanup
2b220bf clean up structured logging example
646e9ab use original Visitor name for VisitValue
cf85c38 add needed subfeatures to kv_unstable
73e9539 fix up capturing of :err
31bb4b0 move error macros together
ad91711 support field shorthand in macros
90a347b restore removed APIs as deprecated
Additional commits viewable in compare view

Updates log4rs from 1.2.0 to 1.3.0

Release notes

Sourced from log4rs's releases.

v.1.3.0

See the changelog for more details.

New

Add debug and release formatters

Documentation on configuring the tool

Code Coverage CI

CVE Audit CI

EditorConfig CI

Code Owners

NO_COLOR, CLICOLOR, CLICOLOR_FORCE controls

Example of inline configuration with file rotation

Time Based Trigger

Changed

Update minimum supported rust to 1.69 for CVE-2020-26235

Update arc-swap to 1.6

Update log to 0.4.20

Update humantime to 2.1

Update serde_yaml to 0.9

Update toml to 0.8

Update derivative to 2.2

Update tempfile to 3.8

Update chrono to 0.2.23

Moved level field before message in json format

Legacy test moved to examples

Fixed

README typo regarding building for dev on windows

Apply editorconfig

Swap rustfmt configuration to imports_granularity="Crate" over deprecated merge_imports = true

Changelog

Sourced from log4rs's changelog.

[1.3.0]

New

Add debug and release formatters

Documentation on configuring the tool

Code Coverage CI

CVE Audit CI

EditorConfig CI

Code Owners

NO_COLOR, CLICOLOR, CLICOLOR_FORCE controls

Example of inline configuration with file rotation

Time Based Trigger

Changed

Update minimum supported rust to 1.69 for CVE-2020-26235

Update arc-swap to 1.6

Update log to 0.4.20

Update humantime to 2.1

Update serde_yaml to 0.9

Update toml to 0.8

Update derivative to 2.2

Update tempfile to 3.8

Moved level field before message in json format

Legacy test moved to examples

Fixed

README typo regarding building for dev on windows

Apply editorconfig

Swap rustfmt configuration to imports_granularity="Crate" over deprecated merge_imports = true

Commits

c981ca4 chore: set min chrono (#346)
d4e6cbe docs: Update CHANGELOG for new release (#336)
6c6ace0 add trigger kind "time" in rolling_file (#296)
a898a07 Create an example of logging with file rotation (#295)
b0ad8ba chore: move old test to example. fix formatting (#337)
4f09b8f Add windows and *nix based env vars to control color output in logs (#335)
84dd0c7 docs: Apply markdownlint to all files (#338)
a69fdf9 fix: add check that the readme sample cfg is accepted by log4rs (#339)
58b92c8 Fix quickstart log4rs.yaml sample (#332)
ebb9123 Changed the order of the field in json log output (#333)
Additional commits viewable in compare view

Updates regex from 1.9.4 to 1.10.4

Changelog

Sourced from regex's changelog.

1.10.3 (2024-01-21)

This is a new patch release that fixes the feature configuration of optional dependencies, and fixes an unsound use of bounds check elision.

Bug fixes:

[BUG #1147](rust-lang/regex#1147): Set default-features=false for the memchr and aho-corasick dependencies.

[BUG #1154](rust-lang/regex#1154): Fix unsound bounds check elision.

1.10.2 (2023-10-16)

This is a new patch release that fixes a search regression where incorrect matches could be reported.

Bug fixes:

[BUG #1110](rust-lang/regex#1110): Revert broadening of reverse suffix literal optimization introduced in 1.10.1.

1.10.1 (2023-10-14)

This is a new patch release with a minor increase in the number of valid patterns and a broadening of some literal optimizations.

New features:

FEATURE 04f5d7be: Loosen ASCII-compatible rules such that regexes like (?-u:☃) are now allowed.

Performance improvements:

PERF 8a8d599f: Broader the reverse suffix optimization to apply in more cases.

1.10.0 (2023-10-09)

This is a new minor release of regex that adds support for start and end word boundary assertions. That is, \< and \>. The minimum supported Rust version has also been raised to 1.65, which was released about one year ago.

The new word boundary assertions are:

\< or \b{start}: a Unicode start-of-word boundary (\W|\A on the left, \w on the right).

... (truncated)

Commits

aa2d8bd 1.10.4
088d7f3 api: add Cow guarantee to replace API
a5ae351 regex-automata-0.4.6
9cf4a42 automata: fix bug where reverse NFA lacked an unanchored prefix
10fe722 style: clean up some recent lint violations
d7f9347 regex-automata-0.4.5
07ef7f1 automata: make additional prefileter metadata public
0c09903 1.10.3
653bb59 deps: bump regex-automata to 0.4.4
e7b5401 regex-automata-0.4.4
Additional commits viewable in compare view

Updates rustyline from 12.0.0 to 14.0.0

Release notes

Sourced from rustyline's releases.

14.0.0

What's Changed

Migrate to windows-sys #753

Bump env_logger version to 0.11 #760

Bump rusqlite to version 0.31 #763

Fix typeahead #761

Add enable signals config option #759

Fix clippy warnings #764

Upgrade nix to 0.28 #765

New Contributors

@printfn made their first contribution in kkawakam/rustyline#753

@andreistan26 made their first contribution in kkawakam/rustyline#759

Full Changelog: kkawakam/rustyline@v13.0.0...v14.0.0

13.0.0

What's Changed

Add HistoryHinter::default() and HistoryHinter::new() by @segeljakt in kkawakam/rustyline#710

Update fd-lock requirement from 3.0.0 to 4.0.0 by @dependabot in kkawakam/rustyline#714

Use termios from termios crate by @nospam3089 in kkawakam/rustyline#717

Fix clippy warnings by @gwenn in kkawakam/rustyline#718

Fix clippy warning by @gwenn in kkawakam/rustyline#720

Implement Candidate for Rc<str> by @fsktom in kkawakam/rustyline#721

fix(unix): restore terminal mode by @miraclx in kkawakam/rustyline#724

Bump nix dependency to version 0.27 by @gwenn in kkawakam/rustyline#728

No highligh_char on final refresh by @gwenn in kkawakam/rustyline#729

Fix clippy warnings on Windows by @gwenn in kkawakam/rustyline#735

add Cmd::Repaint by @sujiacong in kkawakam/rustyline#734

Make termios an optional dependency by @gwenn in kkawakam/rustyline#736

Mapping between linenoise API and rustyline API by @gwenn in kkawakam/rustyline#737

Use wrap_at_eol when ENABLE_VIRTUAL_TERMINAL_PROCESSING is set by @gwenn in kkawakam/rustyline#739

Ignore binding::test::size_of_event on arch <> x86_64 by @gwenn in kkawakam/rustyline#742

Update rusqlite requirement from 0.29.0 to 0.30.0 by @dependabot in kkawakam/rustyline#745

Bump clipboard-win to version 5.0 by @gwenn in kkawakam/rustyline#746

Change cursor visibility by @gwenn in kkawakam/rustyline#747

Fix some clippy warnings by @gwenn in kkawakam/rustyline#749

Fix derive macro with Highlighter attr by @gwenn in kkawakam/rustyline#751

Support completion candidates that are shorter than the input by @gwenn in kkawakam/rustyline#750

New Contributors

@segeljakt made their first contribution in kkawakam/rustyline#710

@nospam3089 made their first contribution in kkawakam/rustyline#717

@fsktom made their first contribution in kkawakam/rustyline#721

@miraclx made their first contribution in kkawakam/rustyline#724

@sujiacong made their first contribution in kkawakam/rustyline#734

Full Changelog: kkawakam/rustyline@v12.0.0...v12.0.1

Commits

bd63fea Merge pull request #766 from gwenn/14.0.0
75e9a08 Prepare next release
d27ef02 Merge pull request #765 from gwenn/nix
bf09447 Upgrade nix to 0.28
542a191 Merge pull request #764 from gwenn/clippy
a55b343 Fix clippy warnings
3284f43 Merge pull request #759 from andreistan26/enable-signal
485eef8 Merge pull request #761 from gwenn/typeahead
d3524ae Merge branch 'master' into typeahead
57037fd Merge pull request #763 from gwenn/rusqlite
Additional commits viewable in compare view

Updates serde from 1.0.188 to 1.0.193

Release notes

Sourced from serde's releases.

v1.0.193

Fix field names used for the deserialization of RangeFrom and RangeTo (#2653, #2654, #2655, thanks @emilbonnek)

v1.0.192

Allow internal tag field in untagged variant (#2646, thanks @robsdedude)

v1.0.191

Documentation improvements

v1.0.190

Preserve NaN sign when deserializing f32 from f64 or vice versa (#2637)

v1.0.189

Fix "cannot infer type" error when internally tagged enum contains untagged variant (#2613, thanks @ahl)

Commits

44613c7 Release 1.0.193
c706281 Merge pull request #2655 from dtolnay/rangestartend
65d75b8 Add RangeFrom and RangeTo tests
332b0cb Merge pull request #2654 from dtolnay/rangestartend
8c4af41 Fix more RangeFrom / RangeEnd mixups
24a78f0 Merge pull request #2653 from emilbonnek/fix/range-to-from-de-mixup
c91c334 Fix Range{From,To} deserialize mixup
2083f43 Update ui test suite to nightly-2023-11-19
4676abd Release 1.0.192
35700eb Merge pull request #2646 from robsdedude/fix/2643/allow-tag-field-in-untagged
Additional commits viewable in compare view

Updates serde_json from 1.0.105 to 1.0.109

Release notes

Sourced from serde_json's releases.

v1.0.109

Documentation improvements

v1.0.108

Documentation improvements (#1075, #1081, #1082, thanks @dimo414 and @fritzrehde)

v1.0.107

impl IntoDeserializer for &RawValue (#1071)

v1.0.106

Add Value::as_number accessor (#1069, thanks @chanced)

Add Number::as_str accessor under "arbitrary_precision" feature (#1067, thanks @chanced)

Commits

f88bf1f Release 1.0.109
bb62c73 Merge pull request #1097 from serde-rs/doccfg
df36d10 Restore doc cfg on re-exports
c367091 Merge pull request #1095 from dtolnay/hashtest
b328ee7 Eliminate hash closure in favor of calling hash_one directly
b9bcbad Use BuildHasher::hash_one
7ff6c9e Use random hasher state for number hashing test
fe031cd Delete trace_macros! functionality from test
05196ca Update ui test suite to nightly-2023-11-19
4bc1eaa Release 1.0.108
Additional commits viewable in compare view

Updates shlex from 1.1.0 to 1.3.0

Changelog

Sourced from shlex's changelog.

1.3.0

Full fix for the high-severity security vulnerability RUSTSEC-2024-0006 a.k.a. GHSA-r7qv-8r2h-pg27:

Deprecates quote APIs in favor of try_ equivalents that complain about nul bytes.

Also adds a builder API, which allows re-enabling nul bytes without using the deprecated interface, and in the future can allow other things (as discussed in quoting_warning).

Adds documentation about various security risks that remain, particularly with interactive shells.

Adds explicit MSRV of 1.46.0.

1.2.1

Partial fix for the high-severity security vulnerability RUSTSEC-2024-0006 a.k.a. GHSA-r7qv-8r2h-pg27 without bumping MSRV:

The bytes { and \xa0 are now escaped by quoting functions.

1.2.0

Adds bytes module to support operating directl...
Description has been truncated

Bumps the cargo-dependencies group with 21 updates: | Package | From | To | | --- | --- | --- | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.75` | `1.0.83` | | [chrono](https://github.com/chronotope/chrono) | `0.4.26` | `0.4.38` | | [clap](https://github.com/clap-rs/clap) | `4.4.1` | `4.4.18` | | [futures](https://github.com/rust-lang/futures-rs) | `0.3.28` | `0.3.30` | | [itertools](https://github.com/rust-itertools/itertools) | `0.11.0` | `0.12.1` | | [log](https://github.com/rust-lang/log) | `0.4.20` | `0.4.21` | | [log4rs](https://github.com/estk/log4rs) | `1.2.0` | `1.3.0` | | [regex](https://github.com/rust-lang/regex) | `1.9.4` | `1.10.4` | | [rustyline](https://github.com/kkawakam/rustyline) | `12.0.0` | `14.0.0` | | [serde](https://github.com/serde-rs/serde) | `1.0.188` | `1.0.193` | | [serde_json](https://github.com/serde-rs/json) | `1.0.105` | `1.0.109` | | [shlex](https://github.com/comex/rust-shlex) | `1.1.0` | `1.3.0` | | [tokio](https://github.com/tokio-rs/tokio) | `1.32.0` | `1.37.0` | | [tokio-stream](https://github.com/tokio-rs/tokio) | `0.1.14` | `0.1.15` | | [ratatui](https://github.com/ratatui-org/ratatui) | `0.23.0` | `0.26.2` | | [unicode-segmentation](https://github.com/unicode-rs/unicode-segmentation) | `1.10.1` | `1.11.0` | | [unicode-truncate](https://github.com/Aetf/unicode-truncate) | `0.2.0` | `1.0.0` | | [unicode-width](https://github.com/unicode-rs/unicode-width) | `0.1.10` | `0.1.12` | | [uuid](https://github.com/uuid-rs/uuid) | `1.4.1` | `1.8.0` | | [versions](https://github.com/fosskers/rs-versions) | `5.0.1` | `6.2.0` | | [clap_complete](https://github.com/clap-rs/clap) | `4.4.0` | `4.5.2` | Updates `anyhow` from 1.0.75 to 1.0.83 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.75...1.0.83) Updates `chrono` from 0.4.26 to 0.4.38 - [Release notes](https://github.com/chronotope/chrono/releases) - [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md) - [Commits](chronotope/chrono@v0.4.26...v0.4.38) Updates `clap` from 4.4.1 to 4.4.18 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.4.1...v4.4.18) Updates `futures` from 0.3.28 to 0.3.30 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.28...0.3.30) Updates `itertools` from 0.11.0 to 0.12.1 - [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md) - [Commits](rust-itertools/itertools@v0.11.0...v0.12.1) Updates `log` from 0.4.20 to 0.4.21 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.20...0.4.21) Updates `log4rs` from 1.2.0 to 1.3.0 - [Release notes](https://github.com/estk/log4rs/releases) - [Changelog](https://github.com/estk/log4rs/blob/main/CHANGELOG.md) - [Commits](estk/log4rs@v1.2.0...v1.3.0) Updates `regex` from 1.9.4 to 1.10.4 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.9.4...1.10.4) Updates `rustyline` from 12.0.0 to 14.0.0 - [Release notes](https://github.com/kkawakam/rustyline/releases) - [Changelog](https://github.com/kkawakam/rustyline/blob/master/History.md) - [Commits](kkawakam/rustyline@v12.0.0...v14.0.0) Updates `serde` from 1.0.188 to 1.0.193 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.188...v1.0.193) Updates `serde_json` from 1.0.105 to 1.0.109 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.105...v1.0.109) Updates `shlex` from 1.1.0 to 1.3.0 - [Changelog](https://github.com/comex/rust-shlex/blob/master/CHANGELOG.md) - [Commits](https://github.com/comex/rust-shlex/commits) Updates `tokio` from 1.32.0 to 1.37.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.32.0...tokio-1.37.0) Updates `tokio-stream` from 0.1.14 to 0.1.15 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-stream-0.1.14...tokio-stream-0.1.15) Updates `ratatui` from 0.23.0 to 0.26.2 - [Release notes](https://github.com/ratatui-org/ratatui/releases) - [Changelog](https://github.com/ratatui-org/ratatui/blob/main/CHANGELOG.md) - [Commits](ratatui/ratatui@v0.23.0...v0.26.2) Updates `unicode-segmentation` from 1.10.1 to 1.11.0 - [Commits](unicode-rs/unicode-segmentation@v1.10.1...v1.11.0) Updates `unicode-truncate` from 0.2.0 to 1.0.0 - [Release notes](https://github.com/Aetf/unicode-truncate/releases) - [Changelog](https://github.com/Aetf/unicode-truncate/blob/master/CHANGELOG.md) - [Commits](Aetf/unicode-truncate@v0.2.0...v1.0.0) Updates `unicode-width` from 0.1.10 to 0.1.12 - [Commits](unicode-rs/unicode-width@v0.1.10...v0.1.12) Updates `uuid` from 1.4.1 to 1.8.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@1.4.1...1.8.0) Updates `versions` from 5.0.1 to 6.2.0 - [Release notes](https://github.com/fosskers/rs-versions/releases) - [Changelog](https://github.com/fosskers/rs-versions/blob/master/CHANGELOG.md) - [Commits](fosskers/rs-versions@v5.0.1...v6.2.0) Updates `clap_complete` from 4.4.0 to 4.5.2 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.4.0...clap_complete-v4.5.2) --- updated-dependencies: - dependency-name: anyhow dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: chrono dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: clap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: futures dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: itertools dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: log dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: log4rs dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: regex dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: rustyline dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo-dependencies - dependency-name: serde dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: serde_json dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: shlex dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: tokio dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: tokio-stream dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: ratatui dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: unicode-segmentation dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: unicode-truncate dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo-dependencies - dependency-name: unicode-width dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cargo-dependencies - dependency-name: uuid dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies - dependency-name: versions dependency-type: direct:production update-type: version-update:semver-major dependency-group: cargo-dependencies - dependency-name: clap_complete dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cargo-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2024-05-12T15:24:07Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels May 12, 2024

dependabot bot closed this May 12, 2024

dependabot bot deleted the dependabot/cargo/cargo-dependencies-613dbd75b9 branch May 12, 2024 15:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the cargo-dependencies group with 21 updates #571

build(deps): bump the cargo-dependencies group with 21 updates #571

dependabot bot commented on behalf of github May 12, 2024 •

edited

Loading

dependabot bot commented on behalf of github May 12, 2024

build(deps): bump the cargo-dependencies group with 21 updates #571

build(deps): bump the cargo-dependencies group with 21 updates #571

Conversation

dependabot bot commented on behalf of github May 12, 2024 • edited Loading

1.0.83

1.0.82

1.0.81

1.0.80

1.0.79

1.0.78

1.0.77

1.0.76

v0.4.38

Removals

Additions

Fixes

Internal

v0.4.37

v0.4.36

Additions

Deprecations

v4.4.18

[4.4.18] - 2024-01-16

Fixes

v4.4.17

[4.4.17] - 2024-01-15

Fixes

v4.4.16

[4.4.16] - 2024-01-12

Fixes

v4.4.15

[4.4.15] - 2024-01-11

Fixes

v4.4.14

[4.4.14] - 2024-01-08

Documentation

Features

v4.4.13

[4.4.13] - 2024-01-04

Documentation

v4.4.12

[4.4.12] - 2023-12-28

0.3.30

0.3.29

0.3.30 - 2023-12-24

0.3.29 - 2023-10-26

0.12.1

Added

Changed

Notable Internal Changes

0.12.0

Breaking

Added

[0.4.21] - 2024-02-27

What's Changed

New Contributors

v.1.3.0

New

Changed

Fixed

[1.3.0]

New

Changed

Fixed

1.10.3 (2024-01-21)

1.10.2 (2023-10-16)

1.10.1 (2023-10-14)

1.10.0 (2023-10-09)

14.0.0

What's Changed

New Contributors

13.0.0

What's Changed

New Contributors

v1.0.193

v1.0.192

v1.0.191

v1.0.190

v1.0.189

v1.0.109

dependabot bot commented on behalf of github May 12, 2024 •

edited

Loading