Bump the cargo group group in /quickwit with 9 updates #74
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the cargo group group in /quickwit with 9 updates: | Package | From | To | | --- | --- | --- | | [openssl](https://github.com/sfackler/rust-openssl) | `0.10.54` | `0.10.64` | | [time](https://github.com/time-rs/time) | `0.3.21` | `0.3.34` | | [ouroboros](https://github.com/someguynamedjosh/ouroboros) | `0.15.6` | `0.16.0` | | [h2](https://github.com/hyperium/h2) | `0.3.19` | `0.3.24` | | [mio](https://github.com/tokio-rs/mio) | `0.8.8` | `0.8.11` | | [rustix](https://github.com/bytecodealliance/rustix) | `0.36.14` | `0.36.17` | | [rustls-webpki](https://github.com/rustls/webpki) | `0.100.1` | `0.100.3` | | [unsafe-libyaml](https://github.com/dtolnay/unsafe-libyaml) | `0.2.8` | `0.2.10` | | [webpki](https://github.com/briansmith/webpki) | `0.22.0` | `0.22.4` | Updates `openssl` from 0.10.54 to 0.10.64 - [Release notes](https://github.com/sfackler/rust-openssl/releases) - [Commits](rust-openssl/rust-openssl@openssl-v0.10.54...openssl-v0.10.64) Updates `time` from 0.3.21 to 0.3.34 - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](time-rs/time@v0.3.21...v0.3.34) Updates `ouroboros` from 0.15.6 to 0.16.0 - [Commits](https://github.com/someguynamedjosh/ouroboros/commits) Updates `h2` from 0.3.19 to 0.3.24 - [Release notes](https://github.com/hyperium/h2/releases) - [Changelog](https://github.com/hyperium/h2/blob/v0.3.24/CHANGELOG.md) - [Commits](hyperium/h2@v0.3.19...v0.3.24) Updates `mio` from 0.8.8 to 0.8.11 - [Release notes](https://github.com/tokio-rs/mio/releases) - [Changelog](https://github.com/tokio-rs/mio/blob/master/CHANGELOG.md) - [Commits](tokio-rs/mio@v0.8.8...v0.8.11) Updates `rustix` from 0.36.14 to 0.36.17 - [Release notes](https://github.com/bytecodealliance/rustix/releases) - [Commits](bytecodealliance/rustix@v0.36.14...v0.36.17) Updates `rustls-webpki` from 0.100.1 to 0.100.3 - [Release notes](https://github.com/rustls/webpki/releases) - [Commits](rustls/webpki@v/0.100.1...v/0.100.3) Updates `unsafe-libyaml` from 0.2.8 to 0.2.10 - [Release notes](https://github.com/dtolnay/unsafe-libyaml/releases) - [Commits](dtolnay/unsafe-libyaml@0.2.8...0.2.10) Updates `webpki` from 0.22.0 to 0.22.4 - [Commits](https://github.com/briansmith/webpki/commits) --- updated-dependencies: - dependency-name: openssl dependency-type: direct:production dependency-group: cargo-security-group - dependency-name: time dependency-type: direct:production dependency-group: cargo-security-group - dependency-name: ouroboros dependency-type: direct:production dependency-group: cargo-security-group - dependency-name: h2 dependency-type: indirect dependency-group: cargo-security-group - dependency-name: mio dependency-type: indirect dependency-group: cargo-security-group - dependency-name: rustix dependency-type: indirect dependency-group: cargo-security-group - dependency-name: rustls-webpki dependency-type: indirect dependency-group: cargo-security-group - dependency-name: unsafe-libyaml dependency-type: indirect dependency-group: cargo-security-group - dependency-name: webpki dependency-type: indirect dependency-group: cargo-security-group ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
|
This was referenced Mar 4, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the cargo group group in /quickwit with 9 updates:
0.10.540.10.640.3.210.3.340.15.60.16.00.3.190.3.240.8.80.8.110.36.140.36.170.100.10.100.30.2.80.2.100.22.00.22.4Updates
opensslfrom 0.10.54 to 0.10.64Release notes
Sourced from openssl's releases.
... (truncated)
Commits
4a19cd4Merge pull request #2175 from reaperhulk/changelog4e0e05abump openssl and openssl-sys + changelogsc2b124aBe explicit that aliases are not part of X.509 certificates1abf4a5Merge pull request #2167 from alex/expose-aliasa644ec2Merge pull request #2170 from botovq/crypto-free83940d1LibreSSL 3.9: fix CRYPTO_malloc/free signatures51fc569Merge pull request #2168 from sfackler/alex-patch-13c53deeAdded binding for EVP_default_properties_enable_fipsa12abe1Expose alias on X509 structs3acf2efMerge pull request #2157 from reaperhulk/rebuild-if-changedUpdates
timefrom 0.3.21 to 0.3.34Release notes
Sourced from time's releases.
Changelog
Sourced from time's changelog.
... (truncated)
Commits
f11f9b2v0.3.34 releaseef7bfbdfix unsigned to signed conversion bug (#656)76468cbv0.3.33 release6c2b602Fix wasm32-unknown-unknown build (#655)ff3255fv0.3.32 released3dd5c9DeprecateDuration::time_fn8a0dc70Remove markdown files in favor of org-wide config980878bBuild docs using org-wide workflow, change audit4baf6b3Remove documentation of deprecated feature flagbe932d8Adds support to serialize and deserialize timestamps with different resolutio...Updates
ouroborosfrom 0.15.6 to 0.16.0Commits
Updates
h2from 0.3.19 to 0.3.24Release notes
Sourced from h2's releases.
Changelog
Sourced from h2's changelog.
Commits
7243ab5Prepare v0.3.24d919cd6streams: limit error resets for misbehaving connectionsa7eb14av0.3.23b668c7ffix: streams awaiting capacity lockout (#730) (#734)0f412d8v0.3.22c7ca62fdocs: fix typos (#724)ef743ecAdd a setter for header_table_size (#638)56651e6fix lint about unused import4aa7b16Fix documentation for max_send_buffer_size (#718)d03c54achore(dependencies): update tracing minimal version to 0.1.35Updates
miofrom 0.8.8 to 0.8.11Changelog
Sourced from mio's changelog.
Commits
0328bdeRelease v0.8.117084498Fix warnings90d4fe0named-pipes: fix receiving IOCP events after deregisterc710a30Add v0.8.x to the CIc29e21cRelease v0.8.10f6a20daAdd Solaris operating system support (#1724)e80c3b2Release v0.8.9862786bFix importing of IoSourceState4034872Add support for vita target8eb4010Fix receiver and sender fd in pipe based wakerUpdates
rustixfrom 0.36.14 to 0.36.17Commits
76c998cchore: Release rustix version 0.36.171c6013aFix p{read,write}v{,v2}'s encoding of the offset argument on Linux. (#896) (#...6534992chore: Release rustix version 0.36.164928cf7Disable riscv64 testing.8cc159cFix thetest_ttyname_oktest when /dev/stdin is inaccessable. (#821)6dc7ba9Downgrade dependencies and disable tests to compile under Rust 1.48.ded8986Disable MIPS in CI. (#793)739f9c3Fixes forDiron macOS, FreeBSD, and WASI.87481a9Merge pull request from GHSA-c827-hfw6-qwvm5b764b5chore: Release rustix version 0.36.15Updates
rustls-webpkifrom 0.100.1 to 0.100.3Release notes
Sourced from rustls-webpki's releases.
Commits
5649c6aCargo: bump version 0.100.2 -> 0.100.3.86f4cb2verify_cert: use enum for build chain error50a2930verify_cert: correct handling of fatal errors0651f72error: add is_fatal helper, use in verify_cert0598dd2verify_cert: optionalBudgetarg forverify_chainhelper277fb4bverify_cert: take references in verify_chain helper63f78e0verify_cert: name constraint checking on verified chainf55622averify_cert: budget for name constraint comparisons141ddcbverify_cert: pull outverify_chaintest helpereb07f2fverify_cert: pull outmake_end_entitytest helperUpdates
unsafe-libyamlfrom 0.2.8 to 0.2.10Release notes
Sourced from unsafe-libyaml's releases.
Commits
61f3ab8Release 0.2.10d90d7abClean up some redundant casts7755559Merge pull request #24 from dtolnay/mallocalignb8a0863Fix insufficient alignment of malloc's return value on 32-bit389373fMerge pull request #23 from dtolnay/mallocfd41ef6Check arithmetic in malloc computations9e054fbMerge pull request #22 from dtolnay/force5b40a9eCheck more arithmetic operations97a4332Delete cast to long followed by size_te5f4bbdClean up duplicated casting to size_tUpdates
webpkifrom 0.22.0 to 0.22.4Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.