Bump the all group across 1 directory with 8 updates #2503

dependabot · 2025-01-29T03:47:03Z

Bumps the all group with 8 updates in the / directory:

Package	From	To
clap	`4.5.26`	`4.5.27`
libp2p	`0.53.2`	`0.54.1`
thiserror	`1.0.69`	`2.0.10`
itertools	`0.12.1`	`0.14.0`
reqwest	`0.11.27`	`0.12.12`
serde_json	`1.0.135`	`1.0.138`
tempfile	`3.15.0`	`3.16.0`
rand	`0.8.5`	`0.9.0`

Updates clap from 4.5.26 to 4.5.27

Release notes

Sourced from clap's releases.

v4.5.27

[4.5.27] - 2025-01-20

Documentation

Iterate on tutorials and reference based on feedback

Changelog

Sourced from clap's changelog.

[4.5.27] - 2025-01-20

Documentation

Iterate on tutorials and reference based on feedback

Commits

21c9892 chore: Release
0c8bceb docs: Update changelog
d8f102a Merge pull request #5732 from epage/consistent
c92fca3 docs(complete): Clarify CompleteEnv's Shell trait
5ca60e9 Merge pull request #5731 from epage/bash
5d7c16c fix(complete): Adjust how IFS is passed to clap
See full diff in compare view

Updates libp2p from 0.53.2 to 0.54.1

Commits

d7beb55 chore(libp2p): release 0.54.1
41f67c9 chore(metrics): release 0.15.0
d9ee266 feat(kad): New provider record update strategy
0861e39 chore: Fix identity changelog link
539bdd9 Create funding.json (#5553)
8f5f268 chore: fix some comments
0ca1388 fix(quic): release libp2p-quic 0.11.1
c34668e chore(swarm): add PR number to 0.45.1 release
2357b04 fix(swarm): release libp2p-swarm-derive 0.35.0
0c143ff chore: prepare libp2p 0.54 release
Additional commits viewable in compare view

Updates thiserror from 1.0.69 to 2.0.10

Release notes

Sourced from thiserror's releases.

2.0.10

Support errors containing a generic type parameter's associated type in a field (#408)

2.0.9

Work around missing_inline_in_public_items clippy restriction being triggered in macro-generated code (#404)

2.0.8

Improve support for macro-generated derive(Error) call sites (#399)

2.0.7

Work around conflict with #[deny(clippy::allow_attributes)] (#397, thanks @zertosh)

2.0.6

Suppress deprecation warning on generated From impls (#396)

2.0.5

Prevent deprecation warning on generated impl for deprecated type (#394)

2.0.4

Eliminate needless_lifetimes clippy lint in generated From impls (#391, thanks @matt-phylum)

2.0.3

Support the same Path field being repeated in both Debug and Display representation in error message (#383)

Improve error message when a format trait used in error message is not implemented by some field (#384)

2.0.2

Fix hang on invalid input inside #[error(...)] attribute (#382)

2.0.1

Support errors that contain a dynamically sized final field (#375)

Improve inference of trait bounds for fields that are interpolated multiple times in an error message (#377)

2.0.0

Breaking changes
Referencing keyword-named fields by a raw identifier like {r#type} inside a format string is no longer accepted; simply use the unraw name like {type} (#347)

This aligns thiserror with the standard library's formatting macros, which gained support for implicit argument capture later than the release of this feature in thiserror 1.x.
#[derive(Error, Debug)]
#[error("... {type} ...")]  // Before: {r#type}
pub struct Error {
    pub r#type: Type,
}
Trait bounds are no longer inferred on fields whose value is shadowed by an explicit named argument in a format message (#345)

... (truncated)

Commits

349f696 Release 2.0.10
6cd87bc Merge pull request #408 from dtolnay/assoctype
6b3e1e5 Generate trait bounds on associated types
1368591 Add regression test for issue 405
c535cec Release 2.0.9
0a0516d Merge pull request #404 from dtolnay/fromfn
e5169bb Unspan From impl contents
c008375 FIx typo in ui test
2bd2982 Release 2.0.8
a7de3ab Merge pull request #399 from dtolnay/respan
Additional commits viewable in compare view

Updates itertools from 0.12.1 to 0.14.0

Changelog

Sourced from itertools's changelog.

0.14.0

Breaking

Increased MSRV to 1.63.0 (#960)

Removed generic parameter from cons_tuples (#988)

Added

Added array_combinations (#991)

Added k_smallest_relaxed and variants (#925)

Added next_array and collect_array (#560)

Implemented DoubleEndedIterator for FilterOk (#948)

Implemented DoubleEndedIterator for FilterMapOk (#950)

Changed

Allow Q: ?Sized in Itertools::contains (#971)

Improved hygiene of chain! (#943)

Improved into_group_map_by documentation (#1000)

Improved tree_reduce documentation (#955)

Improved discoverability of merge_join_by (#966)

Improved discoverability of take_while_inclusive (#972)

Improved documentation of find_or_last and find_or_first (#984)

Prevented exponentially large type sizes in tuple_combinations (#945)

Added track_caller attr for asser_equal (#976)

Notable Internal Changes

Fixed clippy lints (#956, #987, #1008)

Addressed warnings within doctests (#964)

CI: Run most tests with miri (#961)

CI: Speed up "cargo-semver-checks" action (#938)

Changed an instance of default_features in Cargo.toml to default-features (#985)

0.13.0

Breaking

Removed implementation of DoubleEndedIterator for ConsTuples (#853)

Made MultiProduct fused and fixed on an empty iterator (#835, #834)

Changed iproduct! to return tuples for maxi one iterator too (#870)

Changed PutBack::put_back to return the old value (#880)

Removed deprecated repeat_call, Itertools::{foreach, step, map_results, fold_results} (#878)

Removed TakeWhileInclusive::new (#912)

Added

Added Itertools::{smallest_by, smallest_by_key, largest, largest_by, largest_by_key} (#654, #885)

Added Itertools::tail (#899)

Implemented DoubleEndedIterator for ProcessResults (#910)

Implemented Debug for FormatWith (#931)

Added Itertools::get (#891)

Changed

Deprecated Itertools::group_by (renamed chunk_by) (#866, #879)

... (truncated)

Commits

a015a68 Add next_array and collect_array
a1213e1 Prepare v0.14.0 release
ff0c942 fix clippy lints
f80883b Fix into_group_map_by documentation errors
b793238 Add track_caller for asser_equal
5d4056b default_features is deprecated - switch it to default-features
a447b68 doc for added trait
d0479b0 "nitpicks"
35c78ce IndexMut -> BorrowMut<slice>
deb53ba refactored to share code
Additional commits viewable in compare view

Updates reqwest from 0.11.27 to 0.12.12

Release notes

Sourced from reqwest's releases.

v0.12.11

What's Changed

Fix decompression returning an error when HTTP/2 ends with an empty data frame by @seanmonstar in seanmonstar/reqwest#2508

Full Changelog: seanmonstar/reqwest@v0.12.10...v0.12.11

v0.12.10

What's Changed

Add ClientBuilder::connector_layer() to allow customizing the connector stack. by @jlizen in seanmonstar/reqwest#2496

Add ClientBuilder::http2_max_header_list_size() option by @DSharifi in seanmonstar/reqwest#2465

Fix decompression of chunked bodies so the connections can be reused more often by @Andrey36652 in seanmonstar/reqwest#2484

Fix propagating body size hint (content-length) information when wrapping bodies by @seanmonstar in seanmonstar/reqwest#2503

New Contributors

@DSharifi made their first contribution in seanmonstar/reqwest#2465

@gretchenfrage made their first contribution in seanmonstar/reqwest#2464

@hsivonen made their first contribution in seanmonstar/reqwest#2470

@ovnicraft made their first contribution in seanmonstar/reqwest#2469

@Nuhvi made their first contribution in seanmonstar/reqwest#2473

@caojen made their first contribution in seanmonstar/reqwest#2488

@Andrey36652 made their first contribution in seanmonstar/reqwest#2484

@jlizen made their first contribution in seanmonstar/reqwest#2499

Thanks

@seanmonstar

@nyurik

Full Changelog: seanmonstar/reqwest@v0.12.9...v0.12.10

v0.12.9

What's Changed

Add tls::CertificateRevocationLists support (by @ksenia-vazhdaeva in seanmonstar/reqwest#2433)

Add crate features to enable webpki roots without selecting a rustls provider (by @stevefan1999-personal in seanmonstar/reqwest#2447)

Fix multipart::Part::file() to automatically include content-length (by @Mr-Pine in seanmonstar/reqwest#2459)

Fix proxy to internally no longer cache system proxy settings (by @lanyeeee in seanmonstar/reqwest#2442)

Fix connection_verbose() to output read logs (by @seanmonstar in seanmonstar/reqwest#2454)

New Contributors

@lanyeeee made their first contribution in seanmonstar/reqwest#2442

@ksenia-vazhdaeva made their first contribution in seanmonstar/reqwest#2433

@Mr-Pine made their first contribution in seanmonstar/reqwest#2459

@stevefan1999-personal made their first contribution in seanmonstar/reqwest#2447

Full Changelog: seanmonstar/reqwest@v0.12.8...v0.12.9

v0.12.8

What's Changed

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.12.12

(wasm) Fix compilation by not compiler tokio/time on WASM.

v0.12.11

Fix decompression returning an error when HTTP/2 ends with an empty data frame.

v0.12.10

Add ClientBuilder::connector_layer() to allow customizing the connector stack.

Add ClientBuilder::http2_max_header_list_size() option.

Fix propagating body size hint (content-length) information when wrapping bodies.

Fix decompression of chunked bodies so the connections can be reused more often.

v0.12.9

Add tls::CertificateRevocationLists support.

Add crate features to enable webpki roots without selecting a rustls provider.

Fix connection_verbose() to output read logs.

Fix multipart::Part::file() to automatically include content-length.

Fix proxy to internally no longer cache system proxy settings.

v0.12.8

Add support for SOCKS4 proxies.

Add multipart::Form::file() method for adding files easily.

Add Body::wrap() to wrap any http_body::Body type.

Fix the pool configuration to use a timer to remove expired connections.

v0.12.7

Revert adding impl Service<http::Request<_>> for Client.

v0.12.6

Add support for danger_accept_invalid_hostnames for rustls.

Add impl Service<http::Request<Body>> for Client and &'_ Client.

Add support for !Sync bodies in Body::wrap_stream().

Enable happy eyeballs when hickory-dns is used.

Fix Proxy so that HTTP(S)_PROXY values take precedence over ALL_PROXY.

Fix blocking::RequestBuilder::header() from unsetting sensitive on passed header values.

v0.12.5

Add blocking::ClientBuilder::dns_resolver() method to change DNS resolver in blocking client.

Add http3 feature back, still requiring reqwest_unstable.

Add rustls-tls-no-provider Cargo feature to use rustls without a crypto provider.

Fix Accept-Encoding header combinations.

... (truncated)

Commits

8b8fdd2 v0.12.12
1ef8703 (wasm) fix: remove tower as dependency for wasm32-unknown-unknown (#2510)
224f0b8 v0.12.11
beea332 fix decoding extra empty frame (#2508)
177cc7f cleanup: typo fix
409cff3 v0.12.10
ea48da7 docs: fix a few spelling issues (#2478)
3ce98b5 fix: propagate Body::size_hint when wrapping bodies (#2503)
44ca5ee remove Clone from connect::Unnameable for now (#2502)
2a7c1b6 feat: allow pluggable tower layers in connector service stack (#2496)
Additional commits viewable in compare view

Updates serde_json from 1.0.135 to 1.0.138

Release notes

Sourced from serde_json's releases.

v1.0.138

Documentation improvements

v1.0.137

Turn on "float_roundtrip" and "unbounded_depth" features for serde_json in play.rust-lang.org (#1231)

v1.0.136

Optimize serde_json::value::Serializer::serialize_map by using Map::with_capacity (#1230, thanks @goffrie)

Commits

c916099 Release 1.0.138
dc29e48 Move BufReader to caller
29122f9 Sort imports from PR 1237
d33c1b5 Merge pull request #1237 from JonathanBrouwer/master
8c2d800 Add more warnings to apply buffering on docs of affected functions
65bbd1a Fix example of from_reader not applying buffering when it should
87f78da More precise gitignore patterns
4134f11 Remove *.sw[po] from gitignore
c7626db Remove **/*.rs.bk from project-specific gitignore
eb49e28 Release 1.0.137
Additional commits viewable in compare view

Updates tempfile from 3.15.0 to 3.16.0

Changelog

Sourced from tempfile's changelog.

3.16.0

Update getrandom to 0.3.0 (thanks to @paolobarbolini).

Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @ErichDonGubler).

Improved security documentation (thanks to @n0toose for collaborating with me on this).

Commits

6ecd9f1 chore: release 3.16.0
3693c01 build: upgrade getrandom to v0.3.0 (#320)
a4596e5 build: allow windows-sys 0.59 (#319)
3ac6d4e chore: fix clippy lifetime warning (#318)
3a722e8 docs: improve & expand security documentation (#317)
See full diff in compare view

Updates rand from 0.8.5 to 0.9.0

Changelog

Sourced from rand's changelog.

[0.9.0] - 2025-01-27

Security and unsafe

Policy: "rand is not a crypto library" (#1514)

Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)

Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version

Update to rand_core v0.9.0 (#1558)

Features

Support std feature without getrandom or rand_chacha (#1354)

Enable feature small_rng by default (#1455)

Remove implicit feature rand_chacha; use std_rng instead. (#1473)

Rename feature serde1 to serde (#1477)

Rename feature getrandom to os_rng (#1537)

Add feature thread_rng (#1547)

API changes: rand_core traits

Add fn RngCore::read_adapter implementing std::io::Read (#1267)

Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)

Add traits TryRngCore, TryCryptoRng (#1424, #1499)

Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)

Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)

Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)

Remove fn rand::random() from the prelude (#1506)

Add top-level fns random_iter, random_range, random_bool, random_ratio, fill (#1488)

Re-introduce fn Rng::gen_iter as random_iter (#1305, #1500)

Rename fn Rng::gen to random to avoid conflict with the new gen keyword in Rust 2024 (#1438)

Rename fns Rng::gen_range to random_range, gen_bool to random_bool, gen_ratio to random_ratio (#1505)

Annotate panicking methods with #[track_caller] (#1442, #1447)

API changes: RNGs

Fix <SmallRng as SeedableRng>::Seed size to 256 bits (#1455)

Remove first parameter (rng) of ReseedingRng::new (#1533)

API changes: Sequences

Split trait SliceRandom into IndexedRandom, IndexedMutRandom, SliceRandom (#1382)

Add IndexedRandom::choose_multiple_array, index::sample_array (#1453, #1469)

API changes: Distributions: renames

Rename module rand::distributions to rand::distr (#1470)

Rename distribution Standard to StandardUniform (#1526)

Move distr::Slice -> distr::slice::Choose, distr::EmptySlice -> distr::slice::Empty (#1548)

Rename trait distr::DistString -> distr::SampleString (#1548)

Rename distr::DistIter -> distr::Iter, distr::DistMap -> distr::Map (#1548)

... (truncated)

Commits

96f8df6 Prepare 0.9.0 release (#1558)
34da321 Enable stdarch_x86_avx512 for cpu has avx512bw (#1551)
b4b1eb7 Re-org with distr::slice, distr::weighted modules (#1548)
16eb7de Add the thread_rng feature flag (#1547)
afa24e4 Fix test status badges (#1544)
c681dfc Create FUNDING.yml
9f05e22 Update: getrandom v0.3.0 rc.0 (#1541)
88c310b Fix docs.rs build options (#1539)
b879689 Adjust GH Actions (#1538)
3fac49f Prepare 0.9.0-beta.0 (#1535)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.5.26` | `4.5.27` | | [libp2p](https://github.com/libp2p/rust-libp2p) | `0.53.2` | `0.54.1` | | [thiserror](https://github.com/dtolnay/thiserror) | `1.0.69` | `2.0.10` | | [itertools](https://github.com/rust-itertools/itertools) | `0.12.1` | `0.14.0` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.11.27` | `0.12.12` | | [serde_json](https://github.com/serde-rs/json) | `1.0.135` | `1.0.138` | | [tempfile](https://github.com/Stebalien/tempfile) | `3.15.0` | `3.16.0` | | [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.0` | Updates `clap` from 4.5.26 to 4.5.27 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.26...clap_complete-v4.5.27) Updates `libp2p` from 0.53.2 to 0.54.1 - [Release notes](https://github.com/libp2p/rust-libp2p/releases) - [Changelog](https://github.com/libp2p/rust-libp2p/blob/master/CHANGELOG.md) - [Commits](libp2p/rust-libp2p@libp2p-v0.53.2...v0.54.1) Updates `thiserror` from 1.0.69 to 2.0.10 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@1.0.69...2.0.10) Updates `itertools` from 0.12.1 to 0.14.0 - [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md) - [Commits](rust-itertools/itertools@v0.12.1...v0.14.0) Updates `reqwest` from 0.11.27 to 0.12.12 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.11.27...v0.12.12) Updates `serde_json` from 1.0.135 to 1.0.138 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.135...v1.0.138) Updates `tempfile` from 3.15.0 to 3.16.0 - [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md) - [Commits](Stebalien/tempfile@v3.15.0...v3.16.0) Updates `rand` from 0.8.5 to 0.9.0 - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@0.8.5...0.9.0) --- updated-dependencies: - dependency-name: clap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: libp2p dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: thiserror dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: itertools dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: reqwest dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: serde_json dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: tempfile dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: rand dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot requested review from philippecamacho and ImJeremyHe as code owners January 29, 2025 03:47

dependabot bot added the dependencies Pull requests that update a dependency file label Jan 29, 2025

dependabot bot requested a review from sveitser as a code owner January 29, 2025 03:47

dependabot bot added the rust Pull requests that update Rust code label Jan 29, 2025

dependabot bot force-pushed the dependabot/cargo/all-0a58416759 branch from 5b8ce62 to b7ce96e Compare January 30, 2025 03:29

dependabot bot force-pushed the dependabot/cargo/all-0a58416759 branch from b7ce96e to b01efbb Compare January 31, 2025 04:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all group across 1 directory with 8 updates #2503

Bump the all group across 1 directory with 8 updates #2503

dependabot bot commented on behalf of github Jan 29, 2025 •

edited

Loading

Bump the all group across 1 directory with 8 updates #2503

Are you sure you want to change the base?

Bump the all group across 1 directory with 8 updates #2503

Conversation

dependabot bot commented on behalf of github Jan 29, 2025 • edited Loading

v4.5.27

[4.5.27] - 2025-01-20

Documentation

[4.5.27] - 2025-01-20

Documentation

2.0.10

2.0.9

2.0.8

2.0.7

2.0.6

2.0.5

2.0.4

2.0.3

2.0.2

2.0.1

2.0.0

Breaking changes

0.14.0

Breaking

Added

Changed

Notable Internal Changes

0.13.0

Breaking

Added

Changed

v0.12.11

What's Changed

v0.12.10

What's Changed

New Contributors

Thanks

v0.12.9

What's Changed

New Contributors

v0.12.8

What's Changed

v0.12.12

v0.12.11

v0.12.10

v0.12.9

v0.12.8

v0.12.7

v0.12.6

v0.12.5

v1.0.138

v1.0.137

v1.0.136

3.16.0

[0.9.0] - 2025-01-27

Security and unsafe

Dependencies

Features

API changes: rand_core traits

API changes: Rng trait and top-level fns

API changes: RNGs

API changes: Sequences

API changes: Distributions: renames

dependabot bot commented on behalf of github Jan 29, 2025 •

edited

Loading