shorebirdtech / updater

libupdater code for Shorebird
Other
66 stars 13 forks source link

chore(deps): bump the library-deps group across 1 directory with 6 updates #153

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Updates the requirements on http, reqwest, zip, mockall, serial_test and cbindgen to permit the latest version. Updates http to 1.1.0

Release notes

Sourced from http's releases.

v1.1.0

What's Changed

  • Add methods to allow trying to allocate in the HeaderMap, returning an error if oversize instead of panicking.
  • Add Extensions::get_or_insert() method.
  • Implement From<Uri> for uri::Builder.
  • Fix HeaderName::from_lowercase that could allow NUL bytes in some cases.

New Contributors

Full Changelog: https://github.com/hyperium/http/compare/v1.0.0...v1.1.0

Changelog

Sourced from http's changelog.

1.1.0 (March 4, 2024)

  • Add methods to allow trying to allocate in the HeaderMap, returning an error if oversize instead of panicking.
  • Add Extensions::get_or_insert() method.
  • Implement From<Uri> for uri::Builder.
  • Fix HeaderName::from_lowercase that could allow NUL bytes in some cases.

1.0.0 (November 15, 2023)

  • Implement Clone for Request, Response, and Extensions. This breaking change requires that all extensions now implement Clone.
  • Add a default-on std feature. Disabling it currently is not supported.
  • Fix MIRI warnings in HeaderMap::iter().

0.2.10 (November 10, 2023)

  • Fix parsing of Authority to handle square brackets in incorrect order.
  • Fix HeaderMap::with_capacity() to handle arithmetic overflow.

0.2.9 (February 17, 2023)

  • Add HeaderName constants for cache-status and cdn-cache-control.
  • Implement Hash for PathAndQuery.
  • Re-export HeaderName at crate root.

0.2.8 (June 6, 2022)

  • Fix internal usage of uninitialized memory to use MaybeUninit inside HeaderName.

0.2.7 (April 28, 2022)

  • MSRV bumped to 1.49.
  • Add extend() method to Extensions.
  • Add From<Authority> and From<PathAndQuery> impls for Uri.
  • Make HeaderName::from_static a const fn.

0.2.6 (December 30, 2021)

  • Upgrade internal itoa dependency to 1.0.

0.2.5 (September 21, 2021)

  • Add is_empty() and len() methods to Extensions.
  • Add version_ref() method to request::Builder.
  • Implement TryFrom<Vec<u8>> and TryFrom<String> for Authority, Uri, PathAndQuery, and HeaderName.
  • Make HeaderValue::from_static a const fn.

0.2.4 (April 4, 2021)

  • Fix Uri parsing to allow {, ", and } in paths.

... (truncated)

Commits
  • 3fe7267 v1.1.0
  • 96dc52f fix: HeaderName::from_lowercase allowing NUL bytes in some cases
  • caa8b4f feat: add HeaderMap::try_ methods to handle capacity overflow
  • 63102bc chore(lib): remove importing prelude AsRef trait
  • c03cc8b chore(header): allow clippy::should_implement_trait rule for HeaderValue::fro...
  • 4785cdd refactor(header): rename method to follow naming convention
  • 63e7d63 doc(header): add panics and safety section to document
  • b8ddea7 refactor(header): add comment and lint allowing to panic in const context wor...
  • fe1932d refactor(status): remove redundant static lifetime
  • 79f8da5 refactor(header): ownership is not needed to iterate
  • Additional commits viewable in compare view


Updates reqwest to 0.12.4

Release notes

Sourced from reqwest's releases.

v0.12.4

What's Changed

  • Add zstd support, enabled with zstd Cargo feature (thanks @​paolobarbolini!)
  • Add ClientBuilder::read_timeout(Duration), which applies the duration for each read operation. The timeout resets after a successful read.

New Contributors

Changelog

Sourced from reqwest's changelog.

v0.12.4

  • Add zstd support, enabled with zstd Cargo feature.
  • Add ClientBuilder::read_timeout(Duration), which applies the duration for each read operation. The timeout resets after a successful read.

v0.12.3

  • Add FromStr for dns::Name.
  • Add ClientBuilder::built_in_webpki_certs(bool) to enable them separately.
  • Add ClientBuilder::built_in_native_certs(bool) to enable them separately.
  • Fix sending content-length: 0 for GET requests.
  • Fix response body content_length() to return value when timeout is configured.
  • Fix ClientBuilder::resolve() to use lowercase domain names.

v0.12.2

  • Fix missing ALPN when connecting to socks5 proxy with rustls.
  • Fix TLS version limits with rustls.
  • Fix not detected ALPN h2 from server with native-tls.

v0.12.1

  • Fix ClientBuilder::interface() when no TLS is enabled.
  • Fix TlsInfo::peer_certificate() being truncated with rustls.
  • Fix panic if http2 feature disabled but TLS negotiated h2 in ALPN.
  • Fix Display for Error to not include its source error.

v0.12.0

  • Upgrade to hyper, http, and http-body v1.
  • Add better support for converting to and from http::Request and http::Response.
  • Add http2 optional cargo feature, default on.
  • Add charset optional cargo feature, default on.
  • Add macos-system-configuration cargo feature, default on.
  • Change all optional dependencies to no longer be exposed as implicit features.
  • Add ClientBuilder::interface(str) to specify the local interface to bind to.
  • Experimental: disables the http3 feature temporarily.

v0.11.27

  • Add hickory-dns feature, deprecating trust-dns.
  • (wasm) Fix Form::text() to not set octet-stream for plain text fields.

v0.11.26

  • Revert system-configuration upgrade, which broke MSRV on macOS.

v0.11.25

  • Fix Certificate::from_pem_bundle() parsing.

... (truncated)

Commits
  • de5dbb1 v0.12.4
  • 0f126f5 tests: fix blocking test about empty bodies and content-length
  • 1073881 feat: add zstd support (#1866)
  • 1af8945 feat: add ClientBuilder::read_timeout(dur) (#2241)
  • e99da85 refactor: fix warnings related to mutability of self (#2245)
  • 0720159 v0.12.3
  • 9209695 Remove duplicate example for ClientBuilder::default_headers (#2236)
  • e3a1565 fix: use lower case domain string when using resolve and resolve_to_addrs...
  • b4c491a feat: allow fine-grained root certs for rustls (#2232)
  • cf4295d chore: update winreg to 0.52.0 (#2226)
  • Additional commits viewable in compare view


Updates zip to 1.1.2

Release notes

Sourced from zip's releases.

v1.1.2

Added

  • index_for_name, index_for_path, name_for_index: get the index of a file given its path or vice-versa, without initializing metadata from the local-file header or needing to mutably borrow the ZipArchive.
  • add_symlink_from_path, shallow_copy_file_from_path, deep_copy_file_from_path, raw_copy_file_to_path: copy a file or create a symlink using AsRef<Path> arguments

Changed

  • add_directory_from_path and start_file_from_path are no longer deprecated, and they now normalize .. as well as ..
Changelog

Sourced from zip's changelog.

1.1.2 - 2024-04-28

🐛 Bug Fixes

  • Alignment was previously handled incorrectly (#33)

🚜 Refactor

  • deprecate deflate-miniz feature since it's now equivalent to deflate (#35)

[1.1.1]

Added

  • index_for_name, index_for_path, name_for_index: get the index of a file given its path or vice-versa, without initializing metadata from the local-file header or needing to mutably borrow the ZipArchive.
  • add_symlink_from_path, shallow_copy_file_from_path, deep_copy_file_from_path, raw_copy_file_to_path: copy a file or create a symlink using AsRef<Path> arguments

Changed

  • add_directory_from_path and start_file_from_path are no longer deprecated, and they now normalize .. as well as ..

[1.1.0]

Added

  • Support for decoding LZMA.

Changed

  • Eliminated a custom AtomicU64 type by replacing it with OnceLock in the only place it's used.
  • FileOptions now has the subtype SimpleFileOptions which implements Copy but has no extra data.

[1.0.1]

Changed

  • The published package on crates.io no longer includes the tests or examples.

[1.0.0]

Changed

  • Now uses boxed slices rather than String or Vec for metadata fields that aren't likely to grow.

[0.11.0]

Added

  • Support for DEFLATE64 (decompression only).

... (truncated)

Commits
  • 12b988b chore: override version number to 1.1.2 since the breaking change was reverted
  • e48d4ef revert: refactor!: remove deflate-miniz feature since it's now equivalent t...
  • e32ab41 Merge pull request #37 from Pr0methean/dependabot/github_actions/dependabot/f...
  • c45d132 ci(deps)(deps): bump dependabot/fetch-metadata from 2.0.0 to 2.1.0
  • 2de0c8b ci: Reduce fuzz_write iterations
  • a8a7545 ci: Bug fix: quote strings in fuzz.dict
  • 076fab4 ci: Drop redundant "(deps)" from Dependabot PR names
  • b4b6c26 ci: Add path bits to fuzz dictionary
  • 340e603 ci: Update name of auto-merge workflow
  • 97a9eb0 doc: add lzma to list of algorithms, drop encryption from unsupported feature...
  • Additional commits viewable in compare view


Updates mockall to 0.12.1

Changelog

Sourced from mockall's changelog.

[ 0.12.1 ] - 2023-12-21

Fixed

  • Fixed using #[mockall::concretize] on functions whose generic types contain trait bounds, yet are still object safe. (#531)

  • Fixed mocking methods that use raw identifiers for their names. This was a regression in 0.12.0. (#534)

[ 0.12.0 ] - 2023-12-10

Added

  • Added #[mockall::concretize], which can be used to mock some generic methods that have non-'static generic parameters. It works by turning the generic arguments into trait objects for the expectation. (#408)

  • When mocking functions with a non-default ABI (Like extern "C"), the mock function will now use the same ABI as the original. Name mangling will also be disabled, so the mock function will be callable from external code. For example, from C functions. (#504)

Changed

  • Raised predicates, which is reexported, to 3.0.0. This may affect backwards compatibility for users who make use of predicates's "color" feature. (#467)

  • Raised MSRV to 1.64.0 because predicates-core and predicates-tree did. (#430) (#467)

  • Better "No matching expectation found" messages on stable. (#425)

Fixed

  • Fixed mocking non-private inherent methods that have attributes with syn version 2.0.9 and later. (#486)

  • Suppress clippy::too_many_arguments warnings in the generated code. This is most useful when mocking static functions with exactly 7 arguments. (#487)

... (truncated)

Commits
  • 51c4820 chore: Release
  • 20e1c6d chore: Release
  • 9406902 Merge pull request #534 from asomers/raw_identifier
  • b252265 Merge pull request #538 from asomers/mit-or-apache
  • 80fee05 [skip ci] Clarify license terms
  • 71823a3 Fix mocking functions that use raw identifiers for their names.
  • d4e0710 Merge pull request #531 from asomers/concretize-bounds
  • b1f0e78 Fix using #[concretize] on functions with bounded generic types
  • 7e4af04 chore: Release
  • d605f45 [skip ci] update version number in mockall_double/README.md
  • Additional commits viewable in compare view


Updates serial_test to 3.1.1

Release notes

Sourced from serial_test's releases.

v3.1.1

What's Changed

Full Changelog: https://github.com/palfrey/serial_test/compare/v3.1.0...v3.1.1

Commits
  • b39310b 3.1.1
  • bf32228 Merge pull request #111 from palfrey/fix-mod-with-async
  • 2cb0880 Only test async with mod when async is on
  • 3c25842 Fix async test functions inside a serial mod block
  • 25fb948 3.1.0
  • 4ccc6bd Merge pull request #110 from palfrey/serial-mod-non-core
  • fb32f74 Standard test attribute worked with mod, others didn't
  • 2389412 Merge pull request #109 from palfrey/remove-dashmap
  • 14aa91f Add more details fslock names
  • 946db45 Allow unused name for Locks
  • Additional commits viewable in compare view


Updates cbindgen to 0.26.0

Release notes

Sourced from cbindgen's releases.

0.26.0

  • Fix swapping of >>= and <<= in constants.
  • Add support for #[deprecated] (#860).
  • Built-in support for bitflags 2.0.
  • Support for "C-unwind" ABI.
  • Generate bindings for non-public extern items if they are #[no_mangle].
Changelog

Sourced from cbindgen's changelog.

0.26.0

  * Fix swapping of `>>=` and `<<=` in constants.
  * Add support for #[deprecated] ([#860](https://github.com/mozilla/cbindgen/issues/860)).
  * Built-in support for bitflags 2.0.
  * Support for "C-unwind" ABI.
  * Generate bindings for non-public extern items if they are #[no_mangle].

0.25.0

  * Re-release of yanked 0.24.6 as a major release
  * Update MSRV to 1.57
  * Support variadic arguments (`...`) ([#805](https://github.com/mozilla/cbindgen/issues/805))
  * Add --depfile option ([#820](https://github.com/mozilla/cbindgen/issues/820))
  * Breaking changes: The `Config` struct now has a private member.

0.24.6 (YANKED: depfile option was breaking, see #841)

  * Update MSRV to 1.57
  * Support variadic arguments (`...`) ([#805](https://github.com/mozilla/cbindgen/issues/805))
  * Add --depfile option ([#820](https://github.com/mozilla/cbindgen/issues/820))

0.24.5

  * Don't enforce tempfile version.

0.24.4

  * Move expand infinite recursion fix ([#799](https://github.com/mozilla/cbindgen/issues/799))
  * Add with_cpp_compat to the builder ([#796](https://github.com/mozilla/cbindgen/issues/796))
  * Handle never type in return position consistently ([#780](https://github.com/mozilla/cbindgen/issues/780))
  * Fix warnings ([#816](https://github.com/mozilla/cbindgen/issues/816), [#819](https://github.com/mozilla/cbindgen/issues/819))
  * Updated documentation ([#788](https://github.com/mozilla/cbindgen/issues/788), [#791](https://github.com/mozilla/cbindgen/issues/791), [#792](https://github.com/mozilla/cbindgen/issues/792), [#810](https://github.com/mozilla/cbindgen/issues/810), [#823](https://github.com/mozilla/cbindgen/issues/823))

0.24.3

  * Make struct expressions correctly generated through typedefs ([#768](https://github.com/mozilla/cbindgen/issues/768)).

0.24.2

  * Make bitfield operators use explicit constructors.

0.24.1

  * Add support for unary negation ([#765](https://github.com/mozilla/cbindgen/issues/765)).
  * Make more bitfield operators constexpr ([#765](https://github.com/mozilla/cbindgen/issues/765)).

0.24.0

  * Basic const generic support ([#759](https://github.com/mozilla/cbindgen/issues/759), [#760](https://github.com/mozilla/cbindgen/issues/760) [#762](https://github.com/mozilla/cbindgen/issues/762)).

... (truncated)

Commits
  • 703b53c v0.26.0
  • 56f0feb Update MSRV in Readme
  • 9b4a149 Add support for out-of-line bitfields declarations
  • 35f2e44 Update URLs
  • 85eb0f4 Bump clippy msrv to 1.64
  • 43af1eb Handle bitflags bits method calls
  • f72e447 CHANGES: Note #[deprecated] support.
  • 1473070 utilities: annotation: Clean-up deprecated parsing and getter.
  • 0fb5d07 Add support for #[deprecated].
  • d8355da Support "C-unwind" ABI
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 5 months ago

Superseded by #156.