Bump the backend group with 11 updates #578

dependabot · 2024-04-01T15:32:04Z

Bumps the backend group with 11 updates:

Package	From	To
anyhow	`1.0.80`	`1.0.81`
async-trait	`0.1.77`	`0.1.79`
axum	`0.7.4`	`0.7.5`
clap	`4.5.1`	`4.5.4`
http	`1.0.0`	`1.1.0`
regex	`1.10.3`	`1.10.4`
reqwest	`0.11.24`	`0.11.27`
serde_json	`1.0.114`	`1.0.115`
serde_yaml	`0.9.32`	`0.9.34+deprecated`
tokio	`1.36.0`	`1.37.0`
uuid	`1.7.0`	`1.8.0`

Updates anyhow from 1.0.80 to 1.0.81

Release notes

Sourced from anyhow's releases.

1.0.81

Make backtrace support available when using -Dwarnings (#354)

Commits

4aad4ed Release 1.0.81
8be9091 Merge pull request #354 from dtolnay/deadcode
a2eb7dd Make compatible with -Dwarnings
See full diff in compare view

Updates async-trait from 0.1.77 to 0.1.79

Release notes

Sourced from async-trait's releases.

0.1.79

Clean up some dead code

0.1.78

Prevent unused_qualifications lint being triggered in generated code in nightly-2024-03-05 and up (#260)

Commits

1eb21ed Release 0.1.79
82cb95c Resolve unused field of ReplaceSelf syntax tree visitor
cd8286b Update ui test suite to nightly-2024-03-22
c73061d Release 0.1.78
b6314bc Refactor inferred bound filtering
8d51928 Merge pull request #262 from dtolnay/asyncspan
c98a408 Minimize use of async token's span in expanded code
2f5343c Merge pull request #261 from dtolnay/inferredbound
1a01bb4 Skip needlessly generating inferred bounds during ?Send
e68d68c Merge pull request #260 from dtolnay/qualifications
Additional commits viewable in compare view

Updates axum from 0.7.4 to 0.7.5

Release notes

Sourced from axum's releases.

axum-extra - v0.7.5

fixed: Remove explicit auto deref from PrivateCookieJar example (#2028)

#2028: tokio-rs/axum#2028

axum - v0.7.5

fixed: Fixed layers being cloned when calling axum::serve directly with a Router or MethodRouter (#2586)

fixed: h2 is no longer pulled as a dependency unless the http2 feature is enabled (#2605)

#2586: tokio-rs/axum#2586 #2605: tokio-rs/axum#2605

Commits

ef8a9e8 Release axum and axum-extra (#2676)
c6fd852 Update sync_wrapper to 1.0.0 from 0.1.1
2ec68d6 Add rejection tracing to all extractors (#2584)
2ce382f Remove h2 from dependencies when http2 feature is off (#2605)
8b13d4c Add axum-typed-routing to ECOSYSTEM.md (#2608)
19f6f79 Fix layers being cloned for each request (#2586)
3569950 Make nightly_error_messages feature compatible with latest nightly
b6b203b fix typo in prometheus_metrics_example (#2627)
b03f6c1 Fix typo in CONTRIBUTING.md (#2612)
4d65ba0 ci: Unbreak cargo-deny action (#2613)
Additional commits viewable in compare view

Updates clap from 4.5.1 to 4.5.4

Release notes

Sourced from clap's releases.

v4.5.4

[4.5.4] - 2024-03-25

Fixes

(derive) Allow non-literal #[arg(id)] attributes again

v4.5.3

[4.5.3] - 2024-03-15

Internal

(derive) Update heck

v4.5.2

[4.5.2] - 2024-03-06

Fixes

(macros) Silence a warning

Changelog

Sourced from clap's changelog.

[4.5.4] - 2024-03-25

Fixes

(derive) Allow non-literal #[arg(id)] attributes again

[4.5.3] - 2024-03-15

Internal

(derive) Update heck

[4.5.2] - 2024-03-06

Fixes

(macros) Silence a warning

Commits

5e4facf chore: Release
8880b0a docs: Update changelog
132b5dd Merge pull request #5425 from epage/lit
df915fe fix(derive): Re-allow expressions for id's
8eab48f refactor(derive): Make it easier to work with 'Name'
be73195 refactor(derive): Clarify tests
024089b Merge pull request #5415 from Pi-Cla/patch-1
3b35dba docs: Add mention of nushell to clap_complete README
58469d1 Merge pull request #5405 from epage/docs
655d829 docs(derive): Fix ToC links within tutorial chapters
Additional commits viewable in compare view

Updates http from 1.0.0 to 1.1.0

Release notes

Sourced from http's releases.

v1.1.0

What's Changed

Add methods to allow trying to allocate in the HeaderMap, returning an error if oversize instead of panicking.

Add Extensions::get_or_insert() method.

Implement From<Uri> for uri::Builder.

Fix HeaderName::from_lowercase that could allow NUL bytes in some cases.

New Contributors

@tottoto made their first contribution in hyperium/http#645

@julianbraha made their first contribution in hyperium/http#652

@LukeMathWalker made their first contribution in hyperium/http#654

@mattgathu made their first contribution in hyperium/http#660

@LukasKalbertodt made their first contribution in hyperium/http#667

@dswij made their first contribution in hyperium/http#673

Full Changelog: hyperium/http@v1.0.0...v1.1.0

Changelog

Sourced from http's changelog.

1.1.0 (March 4, 2024)

Add methods to allow trying to allocate in the HeaderMap, returning an error if oversize instead of panicking.

Add Extensions::get_or_insert() method.

Implement From<Uri> for uri::Builder.

Fix HeaderName::from_lowercase that could allow NUL bytes in some cases.

Commits

3fe7267 v1.1.0
96dc52f fix: HeaderName::from_lowercase allowing NUL bytes in some cases
caa8b4f feat: add HeaderMap::try_ methods to handle capacity overflow
63102bc chore(lib): remove importing prelude AsRef trait
c03cc8b chore(header): allow clippy::should_implement_trait rule for HeaderValue::fro...
4785cdd refactor(header): rename method to follow naming convention
63e7d63 doc(header): add panics and safety section to document
b8ddea7 refactor(header): add comment and lint allowing to panic in const context wor...
fe1932d refactor(status): remove redundant static lifetime
79f8da5 refactor(header): ownership is not needed to iterate
Additional commits viewable in compare view

Updates regex from 1.10.3 to 1.10.4

Commits

aa2d8bd 1.10.4
088d7f3 api: add Cow guarantee to replace API
a5ae351 regex-automata-0.4.6
9cf4a42 automata: fix bug where reverse NFA lacked an unanchored prefix
10fe722 style: clean up some recent lint violations
d7f9347 regex-automata-0.4.5
07ef7f1 automata: make additional prefileter metadata public
See full diff in compare view

Updates reqwest from 0.11.24 to 0.11.27

Release notes

Sourced from reqwest's releases.

v0.11.27

What's Changed

Add hickory-dns feature, deprecating trust-dns.

(wasm) Fix Form::text() to not set octet-stream for plain text fields.

New Contributors

@ashdnazg made their first contribution in seanmonstar/reqwest#2174

Full Changelog: seanmonstar/reqwest@v0.11.26...v0.11.27

v0.11.26

Revert system-configuration upgrade, which broke MSRV on macOS.

v0.11.25

What's Changed

Fix Certificate::from_pem_bundle() parsing.

Fix Apple linker errors from detecting system proxies.

New Contributors

@cdata made their first contribution in seanmonstar/reqwest#2130

@yottalogical made their first contribution in seanmonstar/reqwest#2154

Full Changelog: seanmonstar/reqwest@v0.11.24...v0.11.25

Changelog

Sourced from reqwest's changelog.

v0.11.27

Add hickory-dns feature, deprecating trust-dns.

(wasm) Fix Form::text() to not set octet-stream for plain text fields.

v0.11.26

Revert system-configuration upgrade, which broke MSRV on macOS.

v0.11.25

Fix Certificate::from_pem_bundle() parsing.

Fix Apple linker errors from detecting system proxies.

Commits

cf69fd4 v0.11.27
d0d2b47 docs: add note about sponsors/support
2fe53c5 refactor: Migrate trust-dns to hickory-dns
6904889 (wasm) fix: Form::text on wasm setting octet-stream mime type and file name. ...
54bb709 v0.11.26
d334800 Revert "fix: Patch system-configuration version (#2130)" (#2172)
c7940c6 revert: hyper v1 upgrade (for now)
e319263 Fix missing tokio/io-util (#2168)
037111f feat: Allow binding interface (#2163)
bfc54fc feat: Add http2 cargo feature (#2162)
Additional commits viewable in compare view

Updates serde_json from 1.0.114 to 1.0.115

Release notes

Sourced from serde_json's releases.

v1.0.115

Documentation improvements

Commits

b1ebf38 Release 1.0.115
c3dc153 Merge pull request #1119 from titaniumtraveler/pr
218770b Explicitly install a Rust toolchain for cargo-outdated job
840da8e Fix missing backticks in doc comments
3a3f61b Temporarily disable miri on doctests
4a0be88 Format regression tests with rustfmt
d2dbbf7 Ignore dead code lint in tests
8e7b37b Merge pull request #1118 from serde-rs/transparent
a25f6c6 Remove conditional on repr(transparent)
fedf834 Ignore non_local_definitions false positive in test
See full diff in compare view

Updates serde_yaml from 0.9.32 to 0.9.34+deprecated

Release notes

Sourced from serde_yaml's releases.

0.9.34

As of this release, I am not planning to publish further versions of serde_yaml as none of my projects have been using YAML for a long time, so I have archived the GitHub repo and marked the crate deprecated in the version number. An official replacement isn't designated for those who still need to work with YAML, but https://crates.io/search?q=yaml&sort=relevance and https://crates.io/keywords/yaml has a number of reasonable-looking options available.

0.9.33

Fix quadratic parse time for YAML containing deeply nested flow collections (dtolnay/unsafe-libyaml#26)

Commits

2009506 Release 0.9.34
3ba8462 Add unmaintained note
77236b0 Ignore dead code lint in tests
f4c9ed9 Release 0.9.33
b4edaee Pull in yaml_parser_fetch_more_tokens fix from libyaml
8a5542c Resolve non_local_definitions warning in test
See full diff in compare view

Updates tokio from 1.36.0 to 1.37.0

Release notes

Sourced from tokio's releases.

Tokio v1.37.0

1.37.0 (March 28th, 2024)

Added

fs: add set_max_buf_size to tokio::fs::File (#6411)

io: add try_new and try_with_interest to AsyncFd (#6345)

sync: add forget_permits method to semaphore (#6331)

sync: add is_closed, is_empty, and len to mpsc receivers (#6348)

sync: add a rwlock() method to owned RwLock guards (#6418)

sync: expose strong and weak counts of mpsc sender handles (#6405)

sync: implement Clone for watch::Sender (#6388)

task: add TaskLocalFuture::take_value (#6340)

task: implement FromIterator for JoinSet (#6300)

Changed

io: make io::split use a mutex instead of a spinlock (#6403)

Fixed

docs: fix docsrs build without net feature (#6360)

macros: allow select with only else branch (#6339)

runtime: fix leaking registration entries when os registration fails (#6329)

Documented

io: document cancel safety of AsyncBufReadExt::fill_buf (#6431)

io: document cancel safety of AsyncReadExt's primitive read functions (#6337)

runtime: add doc link from Runtime to #[tokio::main] (#6366)

runtime: make the enter example deterministic (#6351)

sync: add Semaphore example for limiting the number of outgoing requests (#6419)

sync: fix missing period in broadcast docs (#6377)

sync: mark mpsc::Sender::downgrade with #[must_use] (#6326)

sync: reorder const_new before new_with (#6392)

sync: update watch channel docs (#6395)

task: fix documentation links (#6336)

Changed (unstable)

runtime: include task Id in taskdumps (#6328)

runtime: panic if unhandled_panic is enabled when not supported (#6410)

#6300: tokio-rs/tokio#6300 #6326: tokio-rs/tokio#6326 #6328: tokio-rs/tokio#6328 #6329: tokio-rs/tokio#6329 #6331: tokio-rs/tokio#6331 #6336: tokio-rs/tokio#6336 #6337: tokio-rs/tokio#6337

... (truncated)

Commits

9c337ca chore: prepare Tokio v1.37.0 (#6435)
e542501 io: document cancel safety of AsyncBufReadExt::fill_buf (#6431)
4601c84 stream: add next_many and poll_next_many to StreamMap (#6409)
deff252 util: document cancel safety of SinkExt::send and StreamExt::next (#6417)
4565b81 sync: add a rwlock() method to owned RwLock guards (#6418)
3ce4720 sync: add is_closed, is_empty, and len to mpsc receivers (#6348)
8342e4b util: assert compatibility between LengthDelimitedCodec options (#6414)
4c453e9 readme: add description about benchmarks (#6425)
1846483 sync: expose strong and weak counts of mpsc sender handles (#6405)
baad270 sync: add Semaphore example for limiting the number of outgoing requests (#6419)
Additional commits viewable in compare view

Updates uuid from 1.7.0 to 1.8.0

Release notes

Sourced from uuid's releases.

1.8.0

⚠️ Potential Breakage ⚠️

A new impl AsRef<Uuid> for Uuid bound has been added, which can break inference on code like:
let b = uuid.as_ref();
You can fix these by explicitly typing the result of the conversion:
let b: &[u8] = uuid.as_ref();
or by calling as_bytes instead:
let b = uuid.as_bytes();
What's Changed

docs: fix small spelling mistake by @bengsparks in uuid-rs/uuid#737

serde serialize_with support by @dakaizou in uuid-rs/uuid#735

Fix up CI builds by @KodrAus in uuid-rs/uuid#744

Only add wasm-bindgen as a dependency on wasm32-unknown-unknown by @emilk in uuid-rs/uuid#738

impl AsRef for Uuid by @koshell in uuid-rs/uuid#743

Add v6 to v8 draft link to README by @KodrAus in uuid-rs/uuid#746

Add a workflow for running cargo outdated by @KodrAus in uuid-rs/uuid#745

Prepare for 1.8.0 release by @KodrAus in uuid-rs/uuid#747

New Contributors

@bengsparks made their first contribution in uuid-rs/uuid#737

@dakaizou made their first contribution in uuid-rs/uuid#735

@emilk made their first contribution in uuid-rs/uuid#738

@koshell made their first contribution in uuid-rs/uuid#743

Full Changelog: uuid-rs/uuid@1.7.0...1.8.0

Commits

0f2aaae Merge pull request #747 from uuid-rs/cargo/1.8.0
01d16c3 prepare for 1.8.0 release
e4746bc Merge pull request #745 from uuid-rs/ci/outdated
d0396ad Merge pull request #746 from uuid-rs/chore/draft-link
9415ed4 Merge pull request #743 from koshell/main
951e8e3 Merge pull request #738 from rerun-io/emilk/wasm-bindgen-only-on-web
101aa84 add v6 to v8 draft link to README
84dcbba run outdated on a schedule
ca952b1 add a workflow for running cargo outdated
abe995a Make the toml longer, more complicated, and functional
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the backend group with 11 updates: | Package | From | To | | --- | --- | --- | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.80` | `1.0.81` | | [async-trait](https://github.com/dtolnay/async-trait) | `0.1.77` | `0.1.79` | | [axum](https://github.com/tokio-rs/axum) | `0.7.4` | `0.7.5` | | [clap](https://github.com/clap-rs/clap) | `4.5.1` | `4.5.4` | | [http](https://github.com/hyperium/http) | `1.0.0` | `1.1.0` | | [regex](https://github.com/rust-lang/regex) | `1.10.3` | `1.10.4` | | [reqwest](https://github.com/seanmonstar/reqwest) | `0.11.24` | `0.11.27` | | [serde_json](https://github.com/serde-rs/json) | `1.0.114` | `1.0.115` | | [serde_yaml](https://github.com/dtolnay/serde-yaml) | `0.9.32` | `0.9.34+deprecated` | | [tokio](https://github.com/tokio-rs/tokio) | `1.36.0` | `1.37.0` | | [uuid](https://github.com/uuid-rs/uuid) | `1.7.0` | `1.8.0` | Updates `anyhow` from 1.0.80 to 1.0.81 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.80...1.0.81) Updates `async-trait` from 0.1.77 to 0.1.79 - [Release notes](https://github.com/dtolnay/async-trait/releases) - [Commits](dtolnay/async-trait@0.1.77...0.1.79) Updates `axum` from 0.7.4 to 0.7.5 - [Release notes](https://github.com/tokio-rs/axum/releases) - [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md) - [Commits](tokio-rs/axum@axum-v0.7.4...axum-v0.7.5) Updates `clap` from 4.5.1 to 4.5.4 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.1...v4.5.4) Updates `http` from 1.0.0 to 1.1.0 - [Release notes](https://github.com/hyperium/http/releases) - [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md) - [Commits](hyperium/http@v1.0.0...v1.1.0) Updates `regex` from 1.10.3 to 1.10.4 - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](rust-lang/regex@1.10.3...1.10.4) Updates `reqwest` from 0.11.24 to 0.11.27 - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.11.24...v0.11.27) Updates `serde_json` from 1.0.114 to 1.0.115 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.114...v1.0.115) Updates `serde_yaml` from 0.9.32 to 0.9.34+deprecated - [Release notes](https://github.com/dtolnay/serde-yaml/releases) - [Commits](dtolnay/serde-yaml@0.9.32...0.9.34) Updates `tokio` from 1.36.0 to 1.37.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.36.0...tokio-1.37.0) Updates `uuid` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@1.7.0...1.8.0) --- updated-dependencies: - dependency-name: anyhow dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: async-trait dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: axum dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: clap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: http dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: regex dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: reqwest dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: serde_json dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: serde_yaml dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: tokio dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: uuid dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-04-15T15:10:00Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 1, 2024

dependabot bot closed this Apr 15, 2024

dependabot bot deleted the dependabot/cargo/backend-4839e9b2df branch April 15, 2024 15:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the backend group with 11 updates #578

Bump the backend group with 11 updates #578

dependabot bot commented on behalf of github Apr 1, 2024 •

edited

Loading

dependabot bot commented on behalf of github Apr 15, 2024

Bump the backend group with 11 updates #578

Bump the backend group with 11 updates #578

Conversation

dependabot bot commented on behalf of github Apr 1, 2024 • edited Loading

1.0.81

0.1.79

0.1.78

axum-extra - v0.7.5

axum - v0.7.5

v4.5.4

[4.5.4] - 2024-03-25

Fixes

v4.5.3

[4.5.3] - 2024-03-15

Internal

v4.5.2

[4.5.2] - 2024-03-06

Fixes

[4.5.4] - 2024-03-25

Fixes

[4.5.3] - 2024-03-15

Internal

[4.5.2] - 2024-03-06

Fixes

v1.1.0

What's Changed

New Contributors

1.1.0 (March 4, 2024)

v0.11.27

What's Changed

New Contributors

v0.11.26

v0.11.25

What's Changed

New Contributors

v0.11.27

v0.11.26

v0.11.25

v1.0.115

0.9.34

0.9.33

Tokio v1.37.0

1.37.0 (March 28th, 2024)

Added

Changed

Fixed

Documented

Changed (unstable)

1.8.0

⚠️ Potential Breakage ⚠️

What's Changed

New Contributors

dependabot bot commented on behalf of github Apr 15, 2024

dependabot bot commented on behalf of github Apr 1, 2024 •

edited

Loading