Update Rust crate tempfile to v3.19.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
tempfile (source)	workspace.dependencies	minor	3.8.1 -> 3.19.0

---

Release Notes

Stebalien/tempfile (tempfile)

v3.19.0

Compare Source

• Remove direct dependency on cfg-if. It's still in the tree, but we didn't really need to use it in this crate.
• Add an unstable feature (unstable-windows-keep-open-tempfile) to test a potential fix to #​339.

v3.18.0

Compare Source

• Update rustix to 1.0.0.
• Make NamedTempFile::persist_noclobber atomic on Apple operating systems. It's now atomic on MacOS, Windows, and Linux (depending on the OS version and filesystem used).

v3.17.1

Compare Source

• Fix build with windows-sys 0.52. Unfortunately, we have no CI for older windows-sys versions at the moment...

v3.17.0

Compare Source

• Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in Builder::make_in (when creating temporary files of arbitrary types).
• Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test.
• When reseeding with getrandom, use platform (e.g., CPU) specific randomness sources where possible.
• Clarify some documentation.
• Unlink unnamed temporary files on windows immediately when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible.

v3.16.0

Compare Source

• Update getrandom to 0.3.0 (thanks to @​paolobarbolini).
• Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @​ErichDonGubler).
• Improved security documentation (thanks to @​n0toose for collaborating with me on this).

v3.15.0

Compare Source

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#​314). This resolves a potential DoS vector (#​178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.

v3.14.0

Compare Source

• Make the wasip2 target work (requires tempfile's "nightly" feature to be enabled). #​305.
• Allow older windows-sys versions #​304.

v3.13.0

Compare Source

• Add with_suffix constructors for easily creating new temporary files with a specific suffix (e.g., a specific file extension). Thanks to @​Borgerr.
• Update dependencies (fastrand & rustix).

v3.12.0

Compare Source

• Add a keep(keep: bool) function to builder that suppresses delete-on-drop behavior (thanks to @​RalfJung).
• Update windows-sys from 0.52 to 0.59.

v3.11.0

Compare Source

• Add the ability to override the default temporary directory. This API shouldn't be used in general, but there are some cases where it's unavoidable.

v3.10.1

Compare Source

• Handle potential integer overflows in 32-bit systems when seeking/truncating "spooled" temporary files past 4GiB (2³²).
• Handle a theoretical 32-bit overflow when generating a temporary file name larger than 4GiB. Now it'll panic (on allocation failure) rather than silently succeeding due to wraparound.

Thanks to @​stoeckmann for finding and fixing both of these issues.

v3.10.0

Compare Source

• Drop redox_syscall dependency, we now use rustix for Redox.
• Add Builder::permissions for setting the permissions on temporary files and directories (thanks to @​Byron).
• Update rustix to 0.38.31.
• Update fastrand to 2.0.1.

v3.9.0

Compare Source

• Updates windows-sys to 0.52
• Updates minimum rustix version to 0.38.25

---

Configuration

📅 Schedule: Branch creation - "after 8pm,before 6am" in timezone America/Los_Angeles, Automerge - "after 8pm,before 6am" in timezone America/Los_Angeles.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --workspace
error: failed to load manifest for workspace member `/tmp/renovate/repos/github/oxidecomputer/crucible/downstairs`
referenced by workspace at `/tmp/renovate/repos/github/oxidecomputer/crucible/Cargo.toml`

Caused by:
  failed to parse manifest at `/tmp/renovate/repos/github/oxidecomputer/crucible/downstairs/Cargo.toml`

Caused by:
  error inheriting `rangemap` from workspace root manifest's `workspace.dependencies.rangemap`

Caused by:
  `dependency.rangemap` was not found in `workspace.dependencies`

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[leftwo]

This update was rolled into other recent changes, so there is actually no change here.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (3). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.