palantir / witchcraft-rust-server

A highly opinionated Rust embedded application server for RESTy APIs
Apache License 2.0
5 stars 7 forks source link

Update minidump-writer requirement from 0.8 to 0.9 #200

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Updates the requirements on minidump-writer to permit the latest version.

Release notes

Sourced from minidump-writer's releases.

0.9.0

Fixed

  • PR#117 resolved #79 by enabling reading of a module's build id and soname directly from the mapped process rather than relying on file reading, though that is still used as a fallback.

Changed

  • PR#126 updated minidump-common -> 0.22.
Changelog

Sourced from minidump-writer's changelog.

[0.9.0] - 2024-07-20

Fixed

  • PR#117 resolved #79 by enabling reading of a module's build id and soname directly from the mapped process rather than relying on file reading, though that is still used as a fallback.

Changed

  • PR#126 updated minidump-common -> 0.22.

[0.8.9] - 2024-04-01

Fixed

  • PR#110 changed it so that SIGCONT is sent regardless if the process was not able to be SIGSTOPed quickly enough.
  • PR#113 fixed a segfault(!) on linux if it was compiled with rustc 1.77.0 in release mode.

[0.8.8] - 2024-03-21

Fixed

  • PR#108 resolved #28 by sending a SIGSTOP to the process that is about to be dumped to (hopefully) increase the robustness of the dumping process by reducing the chance of errors, particularly with regard to threads. This is done as a best effort, and will perform the old behavior if the process has not stopped within a timeout (by default 100ms), which can be overriden by the user.

[0.8.7] - 2024-03-04

Changed

  • PR#106 bumped minidump-common, minidump, minidump-processor, and minidump-unwind -> 0.21.

[0.8.6] - 2024-02-26

Changed

  • PR#104 slightly tweaked .so version parsing in the case of more "exotic" versions such as libdbus-1.so.3.34.2rc5. Previously this was parsed as 3.34.25 but would cause ambiguity if there was ever an actual .25 patch/age in the future. Now, the last version is parsed as 1-2 numbers, ignoring non-digit characters if the last component has them. If 2 numbers are parsed, the last number is now placed in VS_FIXEDFILEINFO::product_version_lo so that it is distinct from the patch/age component placed in VS_FIXEDFILEINFO::product_version_hi.

[0.8.5] - 2024-02-23

Added

  • PR#103 added .so file versions as additional metadata to minidumps, resolving this Mozilla bug. There is no true standard for .so file versions, so this is a best effort to pull what version information we can from the .so filename. The version components are major.minor.release similarly to semver, where major -> VS_FIXEDFILEINFO::file_version_hi, major -> VS_FIXEDFILEINFO::file_version_lo, and release -> VS_FIXEDFILEINFO::product_version_hi
    • libmozsandbox.so -> 0.0.0
    • libstdc++.so.6.0.32 -> 6.0.32
    • libcairo-gobject.so.2.11800.0 -> 2.11800.0
    • libm.so.6 -> 6.0.0
    • libabsl_time_zone.so.20220623.0.0 -> 20220623.0.0
    • libdbus-1.so.3.34.2rc5 -> 3.34.25

[0.8.4] - 2024-02-15

Changed

  • PR#97 bumped goblin -> 0.8.
  • PR#99 bumped minidump-common -> 0.20, scroll -> 0.12, memmap2 -> 0.9.

[0.8.3] - 2023-11-07

Added

  • PR#94 added support for writing file information for every file open in the process the dump is being performed for into the MINIDUMP_HANDLE_DATA_STREAM stream.
  • PR#90 added support for including the /proc/<pid>/limits file in the MozLinuxLimits stream. This information can be used together with the file information described above to diagnose situations where the process was killed by the kernel due to file handle limits being hit. Thanks @​lissyx!

Changed

  • PR#94 updated several dependencies to align with minidump-common, which was also bumped.

[0.8.2] - 2023-09-21

Added

  • PR#86 added support for i686-android-linux.

... (truncated)

Commits
  • b095f5b Release 0.9.0
  • e3fda99 Update CHANGELOG
  • 3bd6b20 Merge pull request #126 from afranchuk/update-minidump
  • dfadf0b Update the minidump crates to 0.22.
  • 00942d6 Extend CI-disabled ptrace_dumper tests to also be disabled on Android,
  • 9e748df Merge pull request #117 from afranchuk/in-memory-soname
  • cfdbc8f Ensure build ids are created in android binaries.
  • ec2c008 Merge pull request #119 from gabrielesvelto/fix-cargo-deny
  • 15d85db Update cargo deny configuration and vulnerable crates
  • db38bf9 Merge pull request #120 from gabrielesvelto/rustsec-2024-0336
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)