heroku / buildpacks-python

Heroku's Cloud Native Buildpack for Python applications.
BSD 3-Clause "New" or "Revised" License
26 stars 2 forks source link

Bump the rust-dependencies group across 1 directory with 4 updates #199

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps the rust-dependencies group with 4 updates in the / directory: flate2, indoc, serde and ureq.

Updates flate2 from 1.0.28 to 1.0.30

Release notes

Sourced from flate2's releases.

1.0.29 - with new zlib-rs feature (~zlib-ng in Rust)

With the new zlib-rs feature, a new backend is enabled that brings in a SIMD-accelerated Rust implementation.

What's Changed

New Contributors

Full Changelog: https://github.com/rust-lang/flate2-rs/compare/1.0.28...1.0.29

Commits
  • d3bea90 Merge pull request #405 from Byron/fix-CI
  • 5048843 Merge pull request #407 from striezel-stash/actions-checkout-v4
  • 42c86ce Merge pull request #406 from striezel-stash/fix-some-typos
  • f7b99e9 Update actions/checkout in GitHub Actions workflows to v4
  • 563f1c4 Fix typos
  • 1126a4a prepare bugfix release to make docs work again
  • bc1b3e9 CI verifies that docs can be built (#404)
  • 5ce4154 fix CI by assuring builds work with --all-features enabled (#404)
  • 9a25bc0 Merge pull request #403 from folkertdev/bump-version-zlib-rs
  • e9c87c0 zlib-rs support version bump
  • Additional commits viewable in compare view


Updates indoc from 2.0.4 to 2.0.5

Release notes

Sourced from indoc's releases.

2.0.5

Commits
  • 4bfa29f Release 2.0.5
  • 8d38299 Merge pull request #62 from ilyagr/docstring
  • 735ddcc Update docstring for indoc!
  • 60b5fa2 Remove 'remember to update' reminder from Cargo.toml
  • 15abc17 Test docs.rs documentation build in CI
  • See full diff in compare view


Updates serde from 1.0.197 to 1.0.200

Release notes

Sourced from serde's releases.

v1.0.200

  • Fix formatting of "invalid type" and "invalid value" deserialization error messages containing NaN or infinite floats (#2733, thanks @​jamessan)

v1.0.199

  • Fix ambiguous associated item when forward_to_deserialize_any! is used on an enum with Error variant (#2732, thanks @​aatifsyed)

v1.0.198

Commits
  • cc865ac Release 1.0.200
  • 2d973c1 Merge pull request #2733 from jamessan/nan-decimal
  • 6ca499b Only format Unexpected::Float with decimal point if it is finite
  • 1477028 Release 1.0.199
  • 789740b Merge pull request #2732 from aatifsyed/master
  • 8fe7539 fix: ambiguous associated type in forward_to_deserialize_any!
  • f6623a3 Ignore cast_precision_loss pedantic clippy lint
  • c4fb923 Release 1.0.198
  • 65b7eea Merge pull request #2729 from dtolnay/saturating
  • 01cd696 Integrate Saturating<T> deserialization into impl_deserialize_num macro
  • Additional commits viewable in compare view


Updates ureq from 2.9.6 to 2.9.7

Changelog

Sourced from ureq's changelog.

2.9.7

  • Update deps (base64 0.22, rustls to 0.22.4 (#747, #748)
  • Parse URL after middleware to enable changing it (#745)
  • Tidy up code and fix compilatio (#742, 743)
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 4 months ago

Looks like these dependencies are no longer updatable, so this is no longer needed.