search

heroku / buildpacks-ruby

Heroku's Cloud Native Buildpack for Ruby applications.
BSD 3-Clause "New" or "Revised" License
25 stars 7 forks source link

Bump the rust-dependencies group with 6 updates #360

Open dependabot[bot] opened 1 day ago

dependabot[bot] commented 1 day ago

Bumps the rust-dependencies group with 6 updates:

Package From To
clap 4.5.20 4.5.21
flate2 1.0.34 1.0.35
serde 1.0.214 1.0.215
tempfile 3.13.0 3.14.0
ureq 2.10.1 2.11.0
url 2.5.3 2.5.4

Updates clap from 4.5.20 to 4.5.21

Release notes

Sourced from clap's releases.

v4.5.21

[4.5.21] - 2024-11-13

Fixes

  • (parser) Ensure defaults are filled in on error with ignore_errors(true)
Changelog

Sourced from clap's changelog.

[4.5.21] - 2024-11-13

Fixes

  • (parser) Ensure defaults are filled in on error with ignore_errors(true)
Commits
  • 03d7226 chore: Release
  • 3df70fb docs: Update changelog
  • 3266c36 Merge pull request #5691 from epage/custom
  • 951762d feat(complete): Allow any OsString-compatible type to be a CompletionCandidate
  • bb6493e feat(complete): Offer - as a path option
  • 27b348d refactor(complete): Simplify ArgValueCandidates code
  • 49b8108 feat(complete): Add PathCompleter
  • 82a360a feat(complete): Add ArgValueCompleter
  • 47aedc6 fix(complete): Ensure paths are sorted
  • 431e2bc test(complete): Ensure ArgValueCandidates get filtered
  • Additional commits viewable in compare view


Updates flate2 from 1.0.34 to 1.0.35

Release notes

Sourced from flate2's releases.

1.0.35 - security update to zlib-rs

What's Changed

New Contributors

Full Changelog: https://github.com/rust-lang/flate2-rs/compare/1.0.34...1.0.35

Commits


Updates serde from 1.0.214 to 1.0.215

Release notes

Sourced from serde's releases.

v1.0.215

  • Produce warning when multiple fields or variants have the same deserialization name (#2855, #2856, #2857)
Commits
  • 8939af4 Release 1.0.215
  • fa5d58c Use ui test syntax that does not interfere with rustfmt
  • 1a3cf4b Update PR 2562 ui tests
  • 7d96352 Merge pull request #2857 from dtolnay/collide
  • 111ecc5 Update ui tests for warning on colliding aliases
  • edd6fe9 Revert "Add checks for conflicts for aliases"
  • a20e924 Revert "pacify clippy"
  • b1353a9 Merge pull request #2856 from dtolnay/dename
  • c59e876 Produce a separate warning for every colliding name
  • 7f1e697 Merge pull request #2855 from dtolnay/namespan
  • Additional commits viewable in compare view


Updates tempfile from 3.13.0 to 3.14.0

Changelog

Sourced from tempfile's changelog.

3.14.0

  • Make the wasip2 target work (requires tempfile's "nightly" feature to be enabled). #305.
  • Allow older windows-sys versions #304.
Commits


Updates ureq from 2.10.1 to 2.11.0

Changelog

Sourced from ureq's changelog.

Unreleased

3.0.0-rc3

  • Re-export ureq_proto::ArrayVec (#891)
  • Expose typestate variables, but #[doc(hidden)] (#889)
  • Clarify versioning and MSRV policy (#887)
  • Get last used uri via ResponseExt::get_uri() (#884)
  • Expose more things for 3rd party Transport impls (#886)
  • Make accessor fn for Config and TlsConfig (#886)
  • Move Transport and Resolver traits to unversioned (#881)
  • Upgrade deps (#885)
  • MSRV 1.71.1 to follow rustls (#885)
  • Fix bug in chunked overhead calculation (#880)
  • Make it possible to disable all automatic headers (#876)
  • Rename hoot -> ureq_proto(#872)
  • Fix disable_verification for TLS (#871)
  • vendored feature flag to get vendored native-tls (#866)
  • Fix incorrect handling of expect-100 (#867)

3.0.0-rc2

  • Remove pub-field config structs in favor of builders (#848)
  • BodyBuilder to create a response Body for test/middleware (#847)
  • RequestBuilder::send_empty() convenience fn (#846)
  • Rename BodyWithConfig::into_reader -> reader (#845)
  • Escape hatch to send body for any method (#857)
  • Reintrodice RequestBuilder::query (#843)
  • Reintroduce RequestBuilder::query_pairs (#856)
  • Reintroduce ResponseBuilder::send_form helper (#859)
  • (internal) Use HeaderName for non-sensitive headers (#855)
  • Fix broken build with rustls (#832)
  • Reduce dependency count, platform-verifier feature (#833, #818)

3.0.0-rc1

  • Ground up rewrite based on the http crate API.
Commits


Updates url from 2.5.3 to 2.5.4

Release notes

Sourced from url's releases.

v2.5.4

What's Changed

  • Revert "Normalize URL paths: convert /.//p, /..//p, and //p to p (#943)" by @​valenting in servo/rust-url#999
  • Updates the MSRV to 1.63 required though the libc v0.2.164 dependency

Full Changelog: https://github.com/servo/rust-url/compare/v2.5.3...v2.5.4

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions