Deprecates quote APIs in favor of try_ equivalents that complain about nul bytes.
Also adds a builder API, which allows re-enabling nul bytes without using the deprecated interface, and in the future can allow other things (as discussed in quoting_warning).
Adds documentation about various security risks that remain, particularly with interactive shells.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/nick42d/youtui/network/alerts).
Bumps the cargo group group with 4 updates: h2, mio, shlex and zerocopy.
Updates
h2
from 0.3.22 to 0.3.24Release notes
Sourced from h2's releases.
Changelog
Sourced from h2's changelog.
Commits
7243ab5
Prepare v0.3.24d919cd6
streams: limit error resets for misbehaving connectionsa7eb14a
v0.3.23b668c7f
fix: streams awaiting capacity lockout (#730) (#734)Updates
mio
from 0.8.10 to 0.8.11Changelog
Sourced from mio's changelog.
Commits
0328bde
Release v0.8.117084498
Fix warnings90d4fe0
named-pipes: fix receiving IOCP events after deregisterc710a30
Add v0.8.x to the CIc29e21c
Release v0.8.10Updates
shlex
from 1.2.0 to 1.3.0Changelog
Sourced from shlex's changelog.
Commits
Updates
zerocopy
from 0.7.30 to 0.7.32Release notes
Sourced from zerocopy's releases.
Changelog
Sourced from zerocopy's changelog.
Commits
94b7e0a
[derive] Exclude large test files when publishing (#744)7d3a8f9
Fix soundness hole in Ref::into_ref and into_mut (#721)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show