Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the prod group with 5 updates #8726

Merged
merged 2 commits into from
Jul 30, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 29, 2024

Bumps the prod group with 5 updates:

Package From To
clap 4.5.10 4.5.11
toml 0.8.15 0.8.16
tokio 1.39.0 1.39.2
console-subscriber 0.3.0 0.4.0
serde_json 1.0.120 1.0.121

Updates clap from 4.5.10 to 4.5.11

Changelog

Sourced from clap's changelog.

[4.5.11] - 2024-07-25

Commits
  • 349ed30 chore: Release
  • 68ed9ff docs: Update changelog
  • afecaa4 Merge pull request #5576 from shannmu/option_value_new
  • 36c849b refactor(clap_complete): Reuse code about shortflag parsing
  • fc479ba feat(clap_complete): Add support for -fbar and -f=bar completion
  • 48a23f5 test(clap_complete): Add test cases for -fbar and -f=bar completion
  • See full diff in compare view

Updates toml from 0.8.15 to 0.8.16

Commits

Updates tokio from 1.39.0 to 1.39.2

Release notes

Sourced from tokio's releases.

Tokio v1.39.2

1.39.2 (July 27th, 2024)

This release fixes a regression where the select! macro stopped accepting expressions that make use of temporary lifetime extension. (#6722)

#6722: tokio-rs/tokio#6722

Tokio v1.39.1

1.39.1 (July 23rd, 2024)

This release reverts "time: avoid traversing entries in the time wheel twice" because it contains a bug. (#6715)

#6715: tokio-rs/tokio#6715

Commits

Updates console-subscriber from 0.3.0 to 0.4.0

Release notes

Sourced from console-subscriber's releases.

console-subscriber-v0.4.0

Breaking Changes

  • Upgrade tonic to 0.12 (#571) (5f6faa2)This is a breaking change for users of console-api and console-subscriber, as it changes the public tonic, prost and prost-types dependency to a semver-incompatible version. This breaks compatibility with tonic 0.11.x as well as prost/prost-types 0.12.x.

Added

  • Add TOKIO_CONSOLE_BUFFER_CAPACITY env variable (#568) (a6cf14b)

Fixed

  • Remove unused AggregatorHandle and fix other lints (#578) (c442063)

Updated

Commits
  • ca39033 chore: release console-api-v0.8.0, console-subscriber-v0.4.0, tokio-console-v...
  • c442063 fix(subscriber): remove unused AggregatorHandle and fix other lints (#578)
  • 9205e15 fix(console): avoid crash when accessing selected item (#570)
  • 4543901 chore(deps): unpin and bump trycmd (#572)
  • ee4ef17 chore(deps): bump ahash from 0.8.6 to 0.8.11 (#575)
  • 5f6faa2 update(api,subscriber)!: upgrade tonic to 0.12 (#571)
  • b01631a refactor(subscriber): use dep syntax to avoid crate rename (#573)
  • a6cf14b feat(subscriber): add TOKIO_CONSOLE_BUFFER_CAPACITY env variable (#568)
  • 6ad0def fix: handle Windows path correctly (#555)
  • 5bdd1f2 chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#563)
  • Additional commits viewable in compare view

Updates serde_json from 1.0.120 to 1.0.121

Release notes

Sourced from serde_json's releases.

v1.0.121

Commits
  • eca2658 Release 1.0.121
  • b0d678c Merge pull request #1160 from iex-rs/efficient-position
  • b1edc7d Optimize position search in error path
  • 40dd7f5 Merge pull request #1159 from iex-rs/fix-recursion
  • 6a306e6 Move call to tri! out of check_recursion!
  • 3f1c6de Ignore byte_char_slices clippy lint in test
  • 3fd6f5f Merge pull request #1153 from dpathakj/master
  • fcb5e83 Correct documentation URL for Value's Index impl.
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [clap](https://github.com/clap-rs/clap) | `4.5.10` | `4.5.11` |
| [toml](https://github.com/toml-rs/toml) | `0.8.15` | `0.8.16` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.39.0` | `1.39.2` |
| [console-subscriber](https://github.com/tokio-rs/console) | `0.3.0` | `0.4.0` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.120` | `1.0.121` |


Updates `clap` from 4.5.10 to 4.5.11
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.10...clap_complete-v4.5.11)

Updates `toml` from 0.8.15 to 0.8.16
- [Commits](toml-rs/toml@toml-v0.8.15...toml-v0.8.16)

Updates `tokio` from 1.39.0 to 1.39.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.39.0...tokio-1.39.2)

Updates `console-subscriber` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/tokio-rs/console/releases)
- [Changelog](https://github.com/tokio-rs/console/blob/main/release-plz.toml)
- [Commits](tokio-rs/console@console-subscriber-v0.3.0...console-subscriber-v0.4.0)

Updates `serde_json` from 1.0.120 to 1.0.121
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.120...v1.0.121)

---
updated-dependencies:
- dependency-name: clap
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: toml
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: console-subscriber
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner July 29, 2024 15:16
@dependabot dependabot bot added A-dependencies Area: Dependency file updates A-rust Area: Updates to Rust code labels Jul 29, 2024
@dependabot dependabot bot requested a review from a team as a code owner July 29, 2024 15:16
@dependabot dependabot bot added C-trivial Category: A trivial change that is not worth mentioning in the CHANGELOG P-Low ❄️ labels Jul 29, 2024
@dependabot dependabot bot requested review from arya2 and removed request for a team July 29, 2024 15:16
@arya2
Copy link
Contributor

arya2 commented Jul 29, 2024

Cargo vet output:

$ cargo vet 
Vetting Succeeded (85 fully audited, 36 partially audited, 467 exempted)

mergify bot added a commit that referenced this pull request Jul 29, 2024
@mergify mergify bot merged commit 7b0c1ad into main Jul 30, 2024
192 checks passed
@mergify mergify bot deleted the dependabot/cargo/prod-e362178eb3 branch July 30, 2024 00:15
@arya2 arya2 mentioned this pull request Aug 1, 2024
43 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-dependencies Area: Dependency file updates A-rust Area: Updates to Rust code C-trivial Category: A trivial change that is not worth mentioning in the CHANGELOG P-Low ❄️
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

2 participants