v4.2.0

Highlights

The move to GPUI Kit: PortFinder now builds
entirely from crates.io, more of the window uses GPUI Kit components,
and a round of security fixes lands.

Changed

• More of the UI on GPUI Kit components: the history and
  settings-popover rows (including the language picker) are Kit list
  items, the settings sub-pages' back control is a Kit button, and
  every result row gets a Kit copy button. Clicking a value still
  copies it, as before.
• Moved to GPUI Kit 0.8.0 (gpui-pre 0.3.9), the crates.io home of
  gpui-component, replacing the Zed-git gpui and gpui-component git
  pins. The build now uses crates.io only.

Security

• rustls patched (0.23.40 → 0.23.46, rustls-webpki 0.103.16,
  webpki-roots 1.0.11): clears six TLS advisories, including a
  ServerHello downgrade to classical key exchange, certificate
  verification accepting distrusted intermediates, and the
  distrusted emSign roots. Used by the update checker.
• h2, tokio and crossbeam-epoch patched (h2 0.4.20, tokio 1.54.1,
  crossbeam-epoch 0.9.21), and the unmaintained unsafe-libyaml
  dropped from the dependency graph.
• Docs toolchain refreshed (astro 7.4.2, starlight 0.42.7, sharp
  0.35.5 and their transitive dependencies), clearing all 32 open
  advisories against the docs site's build tooling. None affected
  the PortFinder app.

What's Changed

• release: prep v4.2.0 (9876cc5)
• release: prep v4.2.0-beta.1 (ea01d17)
• test(capture): name the parser fn type (clippy::type_complexity) (fca56cc)
• docs(todo): tick off the gpui pin and the parser no-panic test (0a99242)
• style: cargo fmt the crate; check formatting in CI (279628a)
• test(capture): parsers never panic on random or truncated frames (09bf585)
• refactor(ui): history, settings rows and result copy on GPUI Kit (6f05942)
• build(deps): move to GPUI Kit 0.8.0 (gpui-pre 0.3.9) (0a2b521)
• fix(docs): refresh docs-next toolchain — clears all 32 advisories (5ebd49e)
• chore(dependabot): point at the 4.x layout and group updates (49d099d)
• fix(deps): patch rustls, h2, tokio, crossbeam-epoch and friends; add cargo-deny (2b84709)
• build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 (7b634cd)
• build(deps): bump vedantmgoyal9/winget-releaser (a77832b)
• build(deps): bump taiki-e/install-action from 2.85.5 to 2.87.26 (b4daac3)
• build(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 (5c3e08f)
• build(deps): bump Swatinem/rust-cache (5a293de)
• fix(appimage): AppRun runnable by every user, not just root (03db90e)
• deps: clear all open Dependabot alerts (ced3471)
• build(deps): bump taiki-e/install-action from 2.83.2 to 2.85.5 (0b1dbd3)
• build(deps): bump vedantmgoyal9/winget-releaser (ce0b030)
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (4fcb6af)
• build(deps): bump actions/setup-node from 6 to 7 (ebcb1cb)
• build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 (91f8cfa)
• docs(winget): CI hookup is live — workflow_run auto-submission (24738da)
• after_release: fix dead trigger — release event never fires (ef60ab3)

Full Changelog: v4.1.4...v4.2.0