Nerixyz / current-song2

Display the currently playing song/audio.
https://currentsong.nerixyz.de
86 stars 7 forks source link

deps(cargo): bump the rust group with 4 updates #400

Closed dependabot[bot] closed 8 months ago

dependabot[bot] commented 8 months ago

Bumps the rust group with 4 updates: tokio, futures, actix-web and anyhow.

Updates tokio from 1.35.0 to 1.35.1

Release notes

Sourced from tokio's releases.

Tokio v1.35.1

1.35.1 (December 19, 2023)

This is a forward part of a change that was backported to 1.25.3.

Fixed

  • io: add budgeting to tokio::runtime::io::registration::async_io (#6221)

#6221: tokio-rs/tokio#6221

Commits


Updates futures from 0.3.29 to 0.3.30

Release notes

Sourced from futures's releases.

0.3.30

  • Add {BiLock,SplitStream,SplitSink,ReadHalf,WriteHalf}::is_pair_of (#2797)
  • Fix panic in FuturesUnordered::clear (#2809)
  • Fix panic in AsyncBufReadExt::fill_buf (#2801, #2812)
  • Improve support for targets without atomic CAS (#2811)
  • Remove build scripts (#2811)
Changelog

Sourced from futures's changelog.

0.3.30 - 2023-12-24

  • Add {BiLock,SplitStream,SplitSink,ReadHalf,WriteHalf}::is_pair_of (#2797)
  • Fix panic in FuturesUnordered::clear (#2809)
  • Fix panic in AsyncBufReadExt::fill_buf (#2801, #2812)
  • Improve support for targets without atomic CAS (#2811)
  • Remove build scripts (#2811)
Commits
  • de1a0fd Release 0.3.30
  • 68d2845 Remove a redundant space in example (#2816)
  • fdd2ce7 Fix broken link in CopyBufAbortable docs (#2815)
  • 272a3c7 Use cfg(target_has_atomic) on no-std targets
  • c179201 FillBuf: Do not call poll_fill_buf twice
  • e6735f3 FuturesUnordered: Fix clear implementation
  • 04d01a0 FuturesOrdered: Use 64-bit index
  • e4aa659 remove redundant impl Unpin
  • 17851c1 provide a mechanism to determine if io read/write halves are from the same st...
  • 4910799 provide a non-destructive mechanism to determine if a sink/stream are paired
  • Additional commits viewable in compare view


Updates actix-web from 4.4.0 to 4.4.1

Release notes

Sourced from actix-web's releases.

actix-web: v4.4.1

Changed

  • Updated zstd dependency to 0.13.
  • Compression middleware now prefers brotli over zstd over gzip.

Fixed

  • Fix validation of Json extractor when JsonConfig::validate_content_type() is set to false.
Commits
  • 68597b5 build(deps): bump taiki-e/install-action from 2.22.0 to 2.23.0 (#3228)
  • 9dc3ad7 chore(actix-web): prepare release 4.4.1
  • 17060ed chore(awc): prepare release 3.3.0
  • 0d9ca4d chore(actix-http): prepare release 3.5.0
  • ff2904e ci: prevent cargo-cache install failing MSRV builds
  • fdef224 docs: document internal Path fields
  • ede0201 docs: fix derive readme version
  • 271edaf docs: add router readme
  • 5e5e5d8 chore: remove allow(uninlined_format_args)
  • c7a0af3 docs: doc and metadata tweaks
  • Additional commits viewable in compare view


Updates anyhow from 1.0.75 to 1.0.76

Release notes

Sourced from anyhow's releases.

1.0.76

  • Opt in to unsafe_op_in_unsafe_fn lint (#329)
Commits
  • 5cad3bf Release 1.0.76
  • d371a49 Merge pull request #329 from dtolnay/unsafeop
  • 07aac81 Fill in unsafe blocks inside unsafe functions
  • 5ea720d Turn on deny(unsafe_op_in_unsafe_fn)
  • 539e831 Detect whether unsafe_op_in_unsafe_fn lint is available
  • afb298e Label the compiler versions in build.rs with a comment and link
  • a205cc9 Add a funding file
  • 05e4132 Ignore struct_field_names pedantic clippy lint
  • 98921f8 Remove 'remember to update' reminder from Cargo.toml
  • 1ae9905 Ignore needless_raw_string_hashes clippy lint
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions