search

oasisprotocol / oasis-core

Performant and Confidentiality-Preserving Smart Contracts + Blockchains
https://oasisprotocol.org
Apache License 2.0
330 stars 107 forks source link

rust: bump the rust group across 1 directory with 8 updates #5705

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps the rust group with 8 updates in the / directory:

Package From To
serde 1.0.200 1.0.203
serde_json 1.0.116 1.0.117
anyhow 1.0.83 1.0.86
thiserror 1.0.60 1.0.61
zeroize 1.7.0 1.8.1
honggfuzz 0.5.55 0.5.56
toml 0.8.12 0.8.13
rustls 0.23.5 0.23.8

Updates serde from 1.0.200 to 1.0.203

Release notes

Sourced from serde's releases.

v1.0.203

  • Documentation improvements (#2747)

v1.0.202

  • Provide public access to RenameAllRules in serde_derive_internals (#2743)

v1.0.201

  • Resolve unexpected_cfgs warning (#2737)
Commits
  • d5bc546 Release 1.0.203
  • 45ae217 Merge pull request #2747 from dtolnay/variadic
  • b7b97dd Unindent implementation inside tuple_impl_body macro
  • 5d3c563 Document tuple impls as fake variadic
  • 3761854 Merge pull request #2745 from dtolnay/docsrs
  • a8f1484 Rely on docs.rs to define --cfg=docsrs by default
  • 9e32a40 Release 1.0.202
  • 87f635e Release serde_derive_internals 0.29.1
  • d4b2dfb Merge pull request #2743 from dtolnay/renameallrules
  • f6ab0bc Provide public access to RenameAllRules in serde_derive_internals
  • Additional commits viewable in compare view


Updates serde_json from 1.0.116 to 1.0.117

Release notes

Sourced from serde_json's releases.

v1.0.117

  • Resolve unexpected_cfgs warning (#1130)
Commits


Updates anyhow from 1.0.83 to 1.0.86

Release notes

Sourced from anyhow's releases.

1.0.86

  • Fix parse error in ensure! with non-literal after minus sign (#373)

1.0.85

  • Improve ensure! macro's rules to unblock some rustc pretty-printer improvements (#368, #371)

1.0.84

  • Disallow calling ensure! through a Not impl for a type that is not bool (#367)
Commits
  • 8ea1819 Release 1.0.86
  • 0a1b405 Merge pull request #373 from dtolnay/minusneg
  • e0c74f2 Ensure $:literal never matches negative literal
  • 013c66e Fix parse error with non-literal after minus sign
  • ca7aff7 Add binary operator ensure tests
  • 2737bbe Release 1.0.85
  • 82b8b34 Merge pull request #371 from dtolnay/split
  • ad78d70 Preserve more token spans in expression parser
  • 5cce406 Parse comparison operators before other binary operators
  • 7205394 Merge pull request #369 from dtolnay/tokensplit
  • Additional commits viewable in compare view


Updates thiserror from 1.0.60 to 1.0.61

Release notes

Sourced from thiserror's releases.

1.0.61

  • Use core::fmt and core::panic to facilitate error_in_core support (#299, thanks @​jordens)
Commits


Updates zeroize from 1.7.0 to 1.8.1

Commits


Updates honggfuzz from 0.5.55 to 0.5.56

Commits
  • f2c319c Release 0.5.56
  • 8c2497e update github workflow
  • 27bd96f Update upstream honggfuzz to master
  • 4528202 cargo update
  • 4dd0560 Merge pull request #79 from rust-fuzz/dependabot/cargo/memmap2-0.5.10
  • 63ea011 Merge pull request #83 from altaua/mira/build-args
  • 6b3bb2d Merge pull request #82 from altaua/mira/build-paths
  • 9032429 Merge pull request #87 from ryanavella/master
  • 612f124 Better diagnostics for FreeBSD/NetBSD/OpenBSD when gmake is not found.
  • 912092c cargo update
  • Additional commits viewable in compare view


Updates toml from 0.8.12 to 0.8.13

Commits


Updates rustls from 0.23.5 to 0.23.8

Commits
  • 99abca5 Prepare 0.23.8
  • 06c777b Hide internals from documentation
  • 091587b Derive Clone for ServerConfig & ClientConfig
  • 9664833 Refactor construction of CertificatePayloadTls13
  • 45c8a54 Remove PayloadU24::new
  • 04ef27c api.rs: format imports
  • 572f970 Add test for CRL expiration
  • 8da3530 Add support for enforcing CRL expiration
  • c570793 Cover HandshakeMessagePayload::into_owned()
  • 125d641 Test theoretical support for OCSP pinning
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
netlify[bot] commented 1 month ago

Deploy Preview for oasisprotocol-oasis-core canceled.

Name Link
Latest commit 28541508093cd59768001de89487ac07acee4b27
Latest deploy log https://app.netlify.com/sites/oasisprotocol-oasis-core/deploys/6656da065852f500083c57d8
dependabot[bot] commented 1 month ago

Looks like these dependencies are updatable in another way, so this is no longer needed.