Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the rust-dependencies group with 7 updates #758

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 24, 2025

Bumps the rust-dependencies group with 7 updates:

Package From To
rustls 0.23.23 0.23.25
time 0.3.39 0.3.41
quinn 0.11.6 0.11.7
h3-quinn 0.0.8 0.0.9
quinn-proto 0.11.9 0.11.10
windows 0.60.0 0.61.1
tempfile 3.19.0 3.19.1

Updates rustls from 0.23.23 to 0.23.25

Commits
  • 1e2b4f3 Prepare 0.23.25
  • 317c5bf Map webpki RequiredEkuNotFound error to InvalidPurpose
  • 3ab8a8e Prepare 0.23.24
  • 70e2b1c Add warning about server-side cross-config resumption
  • 1c318bc Refactor: prefer to take reference on match scrutinee
  • 7a64c74 admin/coverage: only measure core crate coverage
  • 94d4cb7 chore(deps): update dependency go to v1.24.1
  • a209a0e docs: link to manual from front page
  • 8464356 Mark unreachable functions with coverage(off)
  • 4f2d21e Prefer to put check-cfg data in Cargo.toml
  • Additional commits viewable in compare view

Updates time from 0.3.39 to 0.3.41

Release notes

Sourced from time's releases.

v0.3.41

See the changelog for details.

v0.3.40

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.41 [2025-03-23]

Fixed

  • Compatibility with the latest release of deranged. This fix is permanent and covers future similar changes upstream.

0.3.40 [2025-03-18]

Added

  • Visibility modifiers may now be added to the mod generated by time::sere::format_description!.
Commits
  • cc35dcf v0.3.41 release
  • 6de297b v0.3.40 release
  • c386cac Move days_in_month to time-core
  • 84f3a75 Remove two-way conversion in arithmetic
  • 79a4b62 Move interop between datetime types to single mod
  • 56187f1 Remove region markers
  • 1bc4ce0 Update to deranged 0.4
  • ad945a9 Fix UI tests, build on MSRV
  • b2b602a Permit visibility in serde::format_description!
  • e3dcbd3 Pull floored division algorithm from stdlib
  • See full diff in compare view

Updates quinn from 0.11.6 to 0.11.7

Commits
  • d8302df Remove obsolete advisory ignore rule
  • a3f88b3 Ignore advisory for paste being unmaintained
  • 490094b Ignore key discard timer when detecting activity in unit tests
  • 8b464de Account for queued application datagrams when composing TLPs
  • a62c56c Don't queue a PING for a TLP if there's already an IMMEDIATE_ACK
  • 8d6e48c move sending path_challenge to its own function
  • a7821ff proto: fix compatibility with older quinn
  • 9430972 Bump quinn-proto dependency edge
  • 161274f Makes poll_read_buf public
  • 56ae894 Ignore that ring is unmaintained, for now
  • Additional commits viewable in compare view

Updates h3-quinn from 0.0.8 to 0.0.9

Changelog

Sourced from h3-quinn's changelog.

v0.0.9 (2025-03-18)

  • fix private field usage from quinn
Commits

Updates quinn-proto from 0.11.9 to 0.11.10

Commits
  • d8302df Remove obsolete advisory ignore rule
  • a3f88b3 Ignore advisory for paste being unmaintained
  • 490094b Ignore key discard timer when detecting activity in unit tests
  • 8b464de Account for queued application datagrams when composing TLPs
  • a62c56c Don't queue a PING for a TLP if there's already an IMMEDIATE_ACK
  • 8d6e48c move sending path_challenge to its own function
  • a7821ff proto: fix compatibility with older quinn
  • 9430972 Bump quinn-proto dependency edge
  • 161274f Makes poll_read_buf public
  • 56ae894 Ignore that ring is unmaintained, for now
  • Additional commits viewable in compare view

Updates windows from 0.60.0 to 0.61.1

Commits

Updates tempfile from 3.19.0 to 3.19.1

Changelog

Sourced from tempfile's changelog.

3.19.1

  • Don't unlink temporary files immediately on Windows (fixes #339). Unfortunately, this seemed to corrupt the file object (possibly a Windows kernel bug) in rare cases and isn't strictly speaking necessary.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [rustls](https://github.com/rustls/rustls) | `0.23.23` | `0.23.25` |
| [time](https://github.com/time-rs/time) | `0.3.39` | `0.3.41` |
| [quinn](https://github.com/quinn-rs/quinn) | `0.11.6` | `0.11.7` |
| [h3-quinn](https://github.com/hyperium/h3) | `0.0.8` | `0.0.9` |
| [quinn-proto](https://github.com/quinn-rs/quinn) | `0.11.9` | `0.11.10` |
| [windows](https://github.com/microsoft/windows-rs) | `0.60.0` | `0.61.1` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.19.0` | `3.19.1` |


Updates `rustls` from 0.23.23 to 0.23.25
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.23...v/0.23.25)

Updates `time` from 0.3.39 to 0.3.41
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.39...v0.3.41)

Updates `quinn` from 0.11.6 to 0.11.7
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-0.11.6...quinn-0.11.7)

Updates `h3-quinn` from 0.0.8 to 0.0.9
- [Release notes](https://github.com/hyperium/h3/releases)
- [Changelog](https://github.com/hyperium/h3/blob/master/changelog-h3-quinn.md)
- [Commits](hyperium/h3@h3-quinn-v0.0.8...h3-quinn-v0.0.9)

Updates `quinn-proto` from 0.11.9 to 0.11.10
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.9...quinn-proto-0.11.10)

Updates `windows` from 0.60.0 to 0.61.1
- [Release notes](https://github.com/microsoft/windows-rs/releases)
- [Commits](https://github.com/microsoft/windows-rs/commits)

Updates `tempfile` from 3.19.0 to 3.19.1
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.19.0...v3.19.1)

---
updated-dependencies:
- dependency-name: rustls
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: time
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: quinn
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: h3-quinn
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: quinn-proto
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: windows
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: tempfile
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Mar 24, 2025
@ibigbug
Copy link
Member

ibigbug commented Mar 24, 2025

@dependabot unignore hickory-client

Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 24, 2025

OK, I will stop ignoring the hickory-client dependency.

@ibigbug
Copy link
Member

ibigbug commented Mar 24, 2025

https://github.com/dependabot unignore hickory-proto

Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 24, 2025

OK, I will stop ignoring the hickory-proto dependency.

@ibigbug
Copy link
Member

ibigbug commented Mar 24, 2025

https://github.com/dependabot unignore hickory-server

Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 24, 2025

No dependency name (hickory-server) or ignore conditions found to unignore.

@ibigbug
Copy link
Member

ibigbug commented Mar 24, 2025

https://github.com/dependabot unignore hickory-resolver

Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 24, 2025

No dependency name (hickory-resolver) or ignore conditions found to unignore.

Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 24, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Mar 24, 2025
@dependabot dependabot bot deleted the dependabot/cargo/rust-dependencies-a856b291da branch March 24, 2025 12:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant