gotham-rs / gotham

A flexible web framework that promotes stability, safety, security and speed.
https://gotham.rs
Other
2.24k stars 125 forks source link

Update cookie requirement from 0.15 to 0.17 #609

Closed dependabot[bot] closed 12 months ago

dependabot[bot] commented 1 year ago

Updates the requirements on cookie to permit the latest version.

Changelog

Sourced from cookie's changelog.

Version 0.17.0 (Jan 22, 2022)

Breaking Changes

  • Cookie parsing no longer removes a . Domain prefix. Cookie::domain() now removes a . prefix before returning.

    As these changes are inverses, they are not likely observable. The change only affects manually set domain values via the .domain() builder method, the set_domain() setter method, or similar, which will now have a prefix of . removed when returned by Cookie::domain(). This results in more consistent treatment of Domain values.

New Features

  • Added Cookie::split_parse() and Cookie::split_parse_encoded() methods.

    The methods split a ;-joined cookie string and parse/decode the split values. They return a newly introduced iterator value of type SplitCookies over the parse results.

General Changes and Fixes

  • Parsing fuzzers were introduced and run for 48 CPU hours without failure.
  • base64 was updated to 0.21.

Version 0.16

Version 0.16.2 (Dec 16, 2022)

General Changes

  • base64 was updated to 0.20.

Version 0.16.1 (Sep 25, 2022)

Changes and Fixes

  • The ,, (, and ) are percent-encoded/decoded when encoding is used.
  • The aes-gcm dependency was updated to 0.10.

Version 0.16.0 (Dec 28, 2021)

Breaking Changes

  • The MSRV is now 1.53, up from 1.41 in 0.15.
  • time has been updated to 0.3 and is reexported from the crate root.

General Changes

... (truncated)

Commits
  • 9a1bf40 New version: 0.17.0.
  • efa8d9c Replace deprecated base64 method calls.
  • 2a70042 Update 'base64' to '0.21'.
  • f3c540e Add fuzzers for parsers.
  • 4295db8 Add 'Cookie::split_{parse,parse_encoded}()'.
  • 1de015a Move 'indexes_of' to 'CookieStr::indexed()'.
  • 87d0396 Preserve leading '.' prefix for 'Domain'.
  • d5ce056 New version: 0.16.2.
  • b6d154b Update 'base64' to '0.20'.
  • 2e606ae New version: 0.16.1.
  • Additional commits viewable in compare view


You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
codecov[bot] commented 1 year ago

Codecov Report

Merging #609 (c042987) into main (8af0685) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #609   +/-   ##
=======================================
  Coverage   78.07%   78.07%           
=======================================
  Files          72       72           
  Lines        2048     2048           
=======================================
  Hits         1599     1599           
  Misses        449      449           

:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more

dependabot[bot] commented 12 months ago

Superseded by #627.