chore(deps): bump reqwest from 0.12.4 to 0.12.5

[dependabot[bot]]

Bumps reqwest from 0.12.4 to 0.12.5.

Release notes

Sourced from reqwest's releases.

v0.12.5

What's Changed

• Add http3 feature back, still requiring reqwest_unstable.
• Add rustls-tls-no-provider Cargo feature to use rustls without a crypto provider.
• Add blocking::ClientBuilder::dns_resolver() method to change DNS resolver in blocking client.
• Fix Accept-Encoding header combinations.
• Fix http3 resolving IPv6 addresses.
• Internal: upgrade to rustls 0.23.

New Contributors

• @​bnjmnjrk made their first contribution in seanmonstar/reqwest#2253
• @​d-e-s-o made their first contribution in seanmonstar/reqwest#2257
• @​mger1 made their first contribution in seanmonstar/reqwest#2260
• @​nickguletskii made their first contribution in seanmonstar/reqwest#2268
• @​lenstr made their first contribution in seanmonstar/reqwest#2271
• @​torokati44 made their first contribution in seanmonstar/reqwest#2274
• @​jayvdb made their first contribution in seanmonstar/reqwest#2284
• @​adamaq01 made their first contribution in seanmonstar/reqwest#2288
• @​asonix made their first contribution in seanmonstar/reqwest#2301

Full Changelog: https://github.com/seanmonstar/reqwest/compare/v0.12.4...v0.12.5

Changelog

Sourced from reqwest's changelog.

v0.12.5

• Add blocking::ClientBuilder::dns_resolver() method to change DNS resolver in blocking client.
• Add http3 feature back, still requiring reqwest_unstable.
• Add rustls-tls-no-provider Cargo feature to use rustls without a crypto provider.
• Fix Accept-Encoding header combinations.
• Fix http3 resolving IPv6 addresses.
• Internal: upgrade to rustls 0.23.

Commits

• 29d4cff v0.12.5
• a7880d6 tests: fix http3 tests
• c32d877 tests: enable http3 content-length test
• ce3b30e http3: send content-length if known
• 404df59 test: add http3 test server support
• e5ce0b5 fix: don't enable hyper-rustls/http2 unless http2 is already enabled
• ccb5e40 Don't compile hyper-tls with native-roots unless rustls-tls-native-roots is e...
• c56fbae tests: remove a proxy parse error check
• 8cc7cd4 msrv: pin url
• 695bc04 fix: http3 resolving ipv6 addresses (#2305)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel[bot]]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
rooch-portal	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Aug 28, 2024 6:22pm
rooch-portal-v2.1	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Aug 28, 2024 6:22pm

1 Skipped Deployment

| Name | Status | Preview | Comments | Updated (UTC) | | :--- | :----- | :------ | :------- | :------ | | **rooch** | ⬜️ Ignored ([Inspect](https://vercel.com/rooch/rooch/784gnCh79zAVPK3mUejpRkJGFtdM)) | [Visit Preview](https://rooch-git-dependabot-cargoreqwest-0125-rooch.vercel.app) | | Aug 28, 2024 6:22pm |

[github-actions[bot]]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
cargo/quinn	0.11.3	:green_circle: 6.6	Details Check Score Reason Maintained :green_circle: 10 30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10 Code-Review :green_circle: 10 all changesets reviewed CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Signed-Releases :warning: -1 no releases found Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Packaging :warning: -1 packaging workflow not detected Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Security-Policy :warning: 0 security policy file not detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Fuzzing :green_circle: 10 project is fuzzed Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0
cargo/quinn-proto	0.11.6	:green_circle: 6.6	Details Check Score Reason Maintained :green_circle: 10 30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10 Code-Review :green_circle: 10 all changesets reviewed CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Signed-Releases :warning: -1 no releases found Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Packaging :warning: -1 packaging workflow not detected Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Security-Policy :warning: 0 security policy file not detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Fuzzing :green_circle: 10 project is fuzzed Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0
cargo/quinn-udp	0.5.4	:green_circle: 6.6	Details Check Score Reason Maintained :green_circle: 10 30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10 Code-Review :green_circle: 10 all changesets reviewed CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Signed-Releases :warning: -1 no releases found Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Packaging :warning: -1 packaging workflow not detected Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Security-Policy :warning: 0 security policy file not detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Fuzzing :green_circle: 10 project is fuzzed Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0
cargo/reqwest	0.12.5	:green_circle: 4.3	Details Check Score Reason Code-Review :green_circle: 5 Found 16/28 approved changesets -- score normalized to 5 Maintained :green_circle: 10 30 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Signed-Releases :warning: -1 no releases found Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Packaging :warning: -1 packaging workflow not detected Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Security-Policy :warning: 0 security policy file not detected Fuzzing :warning: 0 project is not fuzzed SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities :warning: 0 62 existing vulnerabilities detected

Scanned Manifest Files

Cargo.lock

• quinn@0.11.3
• quinn-proto@0.11.6
• quinn-udp@0.5.4
• reqwest@0.12.5
• hyper-rustls@0.26.0
• reqwest@0.12.4

[jolestar]

@dependabot ignore this minor version

[dependabot[bot]]

OK, I won't notify you about version 0.12.x again, unless you re-open this PR.