search

oasisprotocol / oasis-core

Performant and Confidentiality-Preserving Smart Contracts + Blockchains
https://oasisprotocol.org
Apache License 2.0
332 stars 109 forks source link

rust: bump the rust group with 9 updates #5656

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps the rust group with 9 updates:

Package From To
base64 0.13.1 0.22.0
x509-parser 0.15.1 0.16.0
oid-registry 0.6.1 0.7.0
base64-serde 0.6.1 0.7.0
lru 0.9.0 0.12.3
jsonrpc 0.13.0 0.18.0
rustls 0.22.4 0.23.5
rustls-mbedcrypto-provider 0.0.2 0.1.0
rustls-mbedpki-provider 0.0.2 0.1.0

Updates base64 from 0.13.1 to 0.22.0

Changelog

Sourced from base64's changelog.

0.22.0

  • DecodeSliceError::OutputSliceTooSmall is now conservative rather than precise. That is, the error will only occur if the decoded output cannot fit, meaning that Engine::decode_slice can now be used with exactly-sized output slices. As part of this, Engine::internal_decode now returns DecodeSliceError instead of DecodeError, but that is not expected to affect any external callers.
  • DecodeError::InvalidLength now refers specifically to the number of valid symbols being invalid (i.e. len % 4 == 1), rather than just the number of input bytes. This avoids confusing scenarios when based on interpretation you could make a case for either InvalidLength or InvalidByte being appropriate.
  • Decoding is somewhat faster (5-10%)

0.21.7

  • Support getting an alphabet's contents as a str via Alphabet::as_str()

0.21.6

  • Improved introductory documentation and example

0.21.5

  • Add Debug and Clone impls for the general purpose Engine

0.21.4

  • Make encoded_len const, allowing the creation of arrays sized to encode compile-time-known data lengths

0.21.3

  • Implement source instead of cause on Error types
  • Roll back MSRV to 1.48.0 so Debian can continue to live in a time warp
  • Slightly faster chunked encoding for short inputs
  • Decrease binary size

0.21.2

  • Rollback MSRV to 1.57.0 -- only dev dependencies need 1.60, not the main code

0.21.1

  • Remove the possibility of panicking during decoded length calculations
  • DecoderReader no longer sometimes erroneously ignores padding #226

Breaking changes

  • Engine.internal_decode return type changed
  • Update MSRV to 1.60.0

0.21.0

Migration

Functions

... (truncated)

Commits
  • 5d70ba7 Merge pull request #269 from marshallpierce/mp/decode-precisely
  • efb6c00 Release notes
  • 2b91084 Add some tests to boost coverage
  • 9e9c7ab Engine::internal_decode now returns DecodeSliceError
  • a8a60f4 Decode main loop improvements
  • a25be06 Simplify leftover output writes
  • 9979cc3 Keep morsels as separate bytes
  • 37670c5 Bump dev toolchain version (#268)
  • 9652c78 v0.21.7
  • 08deccf provide as_str() method to return the alphabet characters (#264)
  • Additional commits viewable in compare view


Updates x509-parser from 0.15.1 to 0.16.0

Changelog

Sourced from x509-parser's changelog.

0.16.0

Added/Changed/Fixed

Global:

  • Updated *ring* to 0.17.7 (#148)
  • Updated time to 0.3.20 (#148)
  • Updated asn1-rs to 0.6, der-parser and oid-registry
  • Set MSRV to 1.63 (due to time/ring) (#148)

Code:

  • Added support for parsing CRL IssuingDistributionPoint extensions (#146)
  • Fixed lifetime signature on TbsCertificate::subject_alt_names function (#151)
  • Fixed parsing of certificate UniqueIdentifier fields to use implicit tagging instead of explicit (#145)
  • Fixed clippy::manual_try_fold findings (#147)

Thanks

  • aggstam, Biagio Festa, Daniel McCarney
Commits
  • 6f4a732 Update changelog
  • 6247deb Fix warning when building doc (explicit target is redundant)
  • 817afb3 Update dependencies: asn1-rs, oid-registry and der-parser
  • 222f74e Set version to 0.16.0
  • e75ac8f docs: update CHANGELOG
  • b2fd6d5 extensions: parse CRL issuing distribution point.
  • 756a0aa proj: add .idea to gitignore
  • 125e6de .github/workflows/rust.yml: updated to correct time crate version
  • 6911229 Cargo.toml: reverted time to 0.3.20 which is the latest version supporting ou...
  • a78d16a Cargo.toml: pumped ring version to 0.17.7, time to 0.3.34 and MSRV to 1.63
  • Additional commits viewable in compare view


Updates oid-registry from 0.6.1 to 0.7.0

Commits


Updates base64-serde from 0.6.1 to 0.7.0

Changelog

Sourced from base64-serde's changelog.

0.7.0-rc.1

  • Use base64 0.21.0-rc.1
  • Support visibilities other than pub, e.g. pub(crate)

0.7.0-beta.2

  • Update to base64 0.21.0-beta.2

0.7.0-beta.1

  • Update to base64 0.21.0-beta.1
  • Update to serde 1.0.152
  • The base64_serde_type macro now uses an Engine instead of Config because that's how base64 0.20+ works.
Commits


Updates lru from 0.9.0 to 0.12.3

Changelog

Sourced from lru's changelog.

v0.12.3 - 2024-02-24

  • Add get_key_value_mut method.

v0.12.2 - 2024-01-28

  • Add clone method.

v0.12.1 - 2023-11-21

  • Add get_key_value method.

v0.12.0 - 2023-10-03

  • Add lifetime specifier to try_get_or_insert_mut.
  • Add BuildHasher trait bound to Debug for LruCache.

v0.11.1 - 2023-09-05

  • Add try_get_or_insert_mut method.

v0.11.0 - 2023-07-11

  • Update dependency on hashbrown to 0.14 and update MSRV to 1.64.0.

v0.10.1 - 2023-06-29

  • Add try_get_or_insert method.

v0.10.0 - 2023-03-04

  • Remove KeyRef from the public API.
Commits
  • 339020e Merge pull request #197 from jeromefroe/jerome/prepare-0-12-3-release
  • 64bf47e Prepare 0.12.3 release
  • 770dcca Merge pull request #195 from gcsbt/get_key_value_mut
  • b18e772 Merge pull request #196 from gcsbt/clippy-needless-lifetimes
  • 6eb450b Remove needless lifetimes (clippy warnings)
  • be08e77 Add get_key_value_mut
  • fa6d1b2 Merge pull request #194 from jeromefroe/jerome/prepare-0-12-2-release
  • 5fb5aca Prepare 0.12.2 release
  • 1465a37 Merge pull request #193 from jeromefroe/jerome/ignore-unconditional-recursion...
  • 26218d5 Ignore unconditional recursion lints
  • Additional commits viewable in compare view


Updates jsonrpc from 0.13.0 to 0.18.0

Changelog

Sourced from jsonrpc's changelog.

0.18.0 - 2024-04-12

  • simple_http: throw a specific error when transfer encoding is chunked #114

0.17.0 - 2023-12-22

  • params field in Request changed to a generic RawValue instead of an array. #108

0.16.0 - 2023-06-29

  • Re-export the minreq crate when the feature is set #102
  • Don't treat HTTP errors with no JSON as JSON parsing errors #103

0.15.0 - 2023-05-28

  • Add new transport that uses minreq #94
  • Bump MSRV to rust 1.48.0 #91

0.14.1 - 2023-04-03

  • simple_http: fix "re-open socket on write failure" behavior #84 #86
  • simple_http: add "host" header (required by HTTP 1.1) #85
  • simple_http: add ability to replace URL/path; minor ergonomic improvements #89

0.14.0 - 2022-11-28

This release significantly improves our simple_http client, though at the apparent cost of a performance regression when making repeated RPC calls to a local bitcoind. We are unsure what to make of this, since our code now uses fewer sockets, less memory and does less redundant processing.

The highlights are:

  • Support JSON replies that span multiple lines #70
  • Add feature-gated support for using a SOCKS proxy #70
  • Fix resource exhaustive bug on MacOS by reusing sockets #72 #76

... (truncated)

Commits


Updates rustls from 0.22.4 to 0.23.5

Commits
  • 14cb5d2 Prepare 0.23.5
  • 6e938bc complete_io: bail out if progress is impossible
  • 2123576 Regression test for complete_io infinite loop bug
  • f45664f Don't specially handle unauthenticated close_notify alerts
  • 1f5146c docs: update SECURITY example
  • 5ea02ed Return Option from handshake_kind()
  • d2e1e66 bogo: verify expected handshake kind
  • d8a2ae0 Add API exposing shape of the performed handshake
  • 740ca41 tests/api.rs: reformat
  • 5ed2c97 deps: update cargo semver compatible deps
  • Additional commits viewable in compare view


Updates rustls-mbedcrypto-provider from 0.0.2 to 0.1.0

Commits
  • 9bda144 bump rustls version (#73)
  • 3feb464 Add support of customizing RNG for crypto algorithms (#65)
  • 41c8d29 Chore(deps): bump chrono from 0.4.37 to 0.4.38 in the crates-io group (#72)
  • ef99ba3 Chore(deps): bump rustls-pemfile in the crates-io group (#63)
  • 6378810 Chore(deps): bump the crates-io group with 3 updates (#62)
  • cb8f23f Chore(deps): bump the crates-io group with 1 update (#61)
  • 36a19d2 Upgrade rustls to 0.23.3 (#60)
  • 9a69cf6 Merge ffdhe to master (#59)
  • ebc413f Chore(deps): bump the crates-io group with 3 updates (#56)
  • 07874e8 chore: format Cargo.toml files (#51)
  • Additional commits viewable in compare view


Updates rustls-mbedpki-provider from 0.0.2 to 0.1.0

Commits
  • 9bda144 bump rustls version (#73)
  • 3feb464 Add support of customizing RNG for crypto algorithms (#65)
  • 41c8d29 Chore(deps): bump chrono from 0.4.37 to 0.4.38 in the crates-io group (#72)
  • ef99ba3 Chore(deps): bump rustls-pemfile in the crates-io group (#63)
  • 6378810 Chore(deps): bump the crates-io group with 3 updates (#62)
  • cb8f23f Chore(deps): bump the crates-io group with 1 update (#61)
  • 36a19d2 Upgrade rustls to 0.23.3 (#60)
  • 9a69cf6 Merge ffdhe to master (#59)
  • ebc413f Chore(deps): bump the crates-io group with 3 updates (#56)
  • 07874e8 chore: format Cargo.toml files (#51)
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
netlify[bot] commented 4 months ago

Deploy Preview for oasisprotocol-oasis-core canceled.

Name Link
Latest commit 52d9d9e5cc4226f97061a64a70965b7441d0765c
Latest deploy log https://app.netlify.com/sites/oasisprotocol-oasis-core/deploys/6627ba989ed0e2000846bc58
codecov[bot] commented 4 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 65.33%. Comparing base (5e7b3ef) to head (aa845e9). Report is 12 commits behind head on master.

:exclamation: Current head aa845e9 differs from pull request most recent head 52d9d9e. Consider uploading reports for the commit 52d9d9e to get more accurate results

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #5656 +/- ## ========================================== - Coverage 65.53% 65.33% -0.20% ========================================== Files 594 596 +2 Lines 61458 61569 +111 ========================================== - Hits 40274 40225 -49 - Misses 16483 16605 +122 - Partials 4701 4739 +38 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.