Bump the rust-dependencies group across 1 directory with 8 updates

[dependabot]

Bumps the rust-dependencies group with 8 updates in the / directory:

Package	From	To
bullet_stream	0.3.0	0.7.0
clap	4.5.24	4.5.29
fs-err	3.0.0	3.1.0
fun_run	0.2.0	0.5.0
rand	0.8.5	0.9.0
tempfile	3.14.0	3.16.0
thiserror	2.0.9	2.0.11
toml	0.8.19	0.8.20

Updates bullet_stream from 0.3.0 to 0.7.0

Changelog

Sourced from bullet_stream's changelog.

CHANGELOG

Unreleased

v0.6.1 - 2024/02/11

• Fix: Relax the constraint of fun_run optional dependency. Now any version higher than 0.5 and less than 1.0 is will work. (heroku-buildpacks/bullet_stream#30)

v0.6.0 - 2025/02/05

• Added: Print<T>::error() now returns the original writer W, this allows for building error messages (Vec<u8>) with debug output above it using the stateful API. See the tests for an example (heroku-buildpacks/bullet_stream#28)

v0.5.0 - 2025/01/31

• A fun_run feature to provide optional interfaces when the fun_run crate is being used. PR: (heroku-buildpacks/bullet_stream#25)
  • Added: global::print::sub_stream_cmd and global::print::sub_time_cmd
  • Added: Print<SubBullet<W>>::stream_cmd() and Print<SubBullet<W>>::time_cmd()
• Struct _GlobalWriter is deprecated, use GlobalWriter instead (heroku-buildpacks/bullet_stream#26)

v0.4.0 - 2025/01/21

• Fix: dropping Print<Background<W>> now emits a message of (Error) and a newline (heroku-buildpacks/bullet_stream#20)
• Added: bullet_stream::global::print functions for writing formatted output without needing to preserve state (heroku-buildpacks/bullet_stream#21)
• Added: Print::global() and bullet_stream::global::set_writer. Use these to preserve the newline indentation when handling dropped structs or errors (heroku-buildpacks/bullet_stream#21)

Commits

• See full diff in compare view

Updates clap from 4.5.24 to 4.5.29

Release notes

Sourced from clap's releases.

v4.5.29

[4.5.29] - 2025-02-11

Fixes

• Change ArgMatches::args_present so not-present flags are considered not-present (matching the documentation)

v4.5.28

[4.5.28] - 2025-02-03

Features

• (derive) Unstable support for full markdown syntax for doc comments, enabled with unstable-markdown

v4.5.27

[4.5.27] - 2025-01-20

Documentation

• Iterate on tutorials and reference based on feedback

v4.5.26

[4.5.26] - 2025-01-09

Fixes

• (error) Reduce binary size with the suggestions feature

v4.5.25

[4.5.25] - 2025-01-09

Fixes

• (help) Reduce binary size

Changelog

Sourced from clap's changelog.

[4.5.29] - 2025-02-11

Fixes

• Change ArgMatches::args_present so not-present flags are considered not-present (matching the documentation)

[4.5.28] - 2025-02-03

Features

• (derive) Unstable support for full markdown syntax for doc comments, enabled with unstable-markdown

[4.5.27] - 2025-01-20

Documentation

• Iterate on tutorials and reference based on feedback

[4.5.26] - 2025-01-09

Fixes

• (error) Reduce binary size with the suggestions feature

[4.5.25] - 2025-01-09

Fixes

• (help) Reduce binary size

Commits

• 1f74b01 chore: Release
• 23feee1 docs: Update changelog
• ae1457b chore(complete): Update require clap
• 0d142f6 chore: Release
• 0facf1f docs: Update changelog
• ee6af99 Merge pull request #5743 from epage/sort
• 232ee10 fix(complete): Use existing display order for Arg/Command
• c6b5d62 feat(builder): Expose get_display_order
• 67d9fef feat(complete): Give control over display order
• 59a61e1 refactor(complete): Pull out common candidate code
• Additional commits viewable in compare view

Updates fs-err from 3.0.0 to 3.1.0

Changelog

Sourced from fs-err's changelog.

3.1.0

• Added new wrappers for create_new and options functions on File (#69)

Commits

• 6155620 chore: Release fs-err version 3.1.0
• 94406b8 Update CHANGELOG
• 5ba87e1 Add missing File / OpenOptions constructors (#69)
• See full diff in compare view

Updates fun_run from 0.2.0 to 0.5.0

Changelog

Sourced from fun_run's changelog.

0.5.0

• Add impl CommandWithName for &mut NamedCommand in addition to NamedCommand (schneems/fun_run#14)

0.4.0

• Add impl CommandWithName for &mut Command in addition to Command (schneems/fun_run#12)

0.3.0

• Add NamedOutput::output() which returns &Output. (schneems/fun_run#10)
• Add impl From<&NamedOutput> for &Output in addition to the existing impl From<NamedOutput> for Output. (schneems/fun_run#10)
• Add NamedOutput::stdout() and stderr() to return references to the original Vec<u8>. This is in addition to stdout_lossy and stderr_lossy functions that return String. (schneems/fun_run#10)
• Add CmdError::status() to return an ExitStatus (schneems/fun_run#10)

Commits

• See full diff in compare view

Updates rand from 0.8.5 to 0.9.0

Changelog

Sourced from rand's changelog.

[0.9.0] - 2025-01-27

Security and unsafe

• Policy: "rand is not a crypto library" (#1514)
• Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
• Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

• Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
• Update to rand_core v0.9.0 (#1558)

Features

• Support std feature without getrandom or rand_chacha (#1354)
• Enable feature small_rng by default (#1455)
• Remove implicit feature rand_chacha; use std_rng instead. (#1473)
• Rename feature serde1 to serde (#1477)
• Rename feature getrandom to os_rng (#1537)
• Add feature thread_rng (#1547)

API changes: rand_core traits

• Add fn RngCore::read_adapter implementing std::io::Read (#1267)
• Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)
• Add traits TryRngCore, TryCryptoRng (#1424, #1499)
• Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)
• Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)
• Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

• Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)
• Remove fn rand::random() from the prelude (#1506)
• Add top-level fns random_iter, random_range, random_bool, random_ratio, fill (#1488)
• Re-introduce fn Rng::gen_iter as random_iter (#1305, #1500)
• Rename fn Rng::gen to random to avoid conflict with the new gen keyword in Rust 2024 (#1438)
• Rename fns Rng::gen_range to random_range, gen_bool to random_bool, gen_ratio to random_ratio (#1505)
• Annotate panicking methods with #[track_caller] (#1442, #1447)

API changes: RNGs

• Fix <SmallRng as SeedableRng>::Seed size to 256 bits (#1455)
• Remove first parameter (rng) of ReseedingRng::new (#1533)

API changes: Sequences

• Split trait SliceRandom into IndexedRandom, IndexedMutRandom, SliceRandom (#1382)
• Add IndexedRandom::choose_multiple_array, index::sample_array (#1453, #1469)

API changes: Distributions: renames

• Rename module rand::distributions to rand::distr (#1470)
• Rename distribution Standard to StandardUniform (#1526)
• Move distr::Slice -> distr::slice::Choose, distr::EmptySlice -> distr::slice::Empty (#1548)
• Rename trait distr::DistString -> distr::SampleString (#1548)
• Rename distr::DistIter -> distr::Iter, distr::DistMap -> distr::Map (#1548)

... (truncated)

Commits

• 96f8df6 Prepare 0.9.0 release (#1558)
• 34da321 Enable stdarch_x86_avx512 for cpu has avx512bw (#1551)
• b4b1eb7 Re-org with distr::slice, distr::weighted modules (#1548)
• 16eb7de Add the thread_rng feature flag (#1547)
• afa24e4 Fix test status badges (#1544)
• c681dfc Create FUNDING.yml
• 9f05e22 Update: getrandom v0.3.0 rc.0 (#1541)
• 88c310b Fix docs.rs build options (#1539)
• b879689 Adjust GH Actions (#1538)
• 3fac49f Prepare 0.9.0-beta.0 (#1535)
• Additional commits viewable in compare view

Updates tempfile from 3.14.0 to 3.16.0

Changelog

Sourced from tempfile's changelog.

3.16.0

• Update getrandom to 0.3.0 (thanks to @​paolobarbolini).
• Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @​ErichDonGubler).
• Improved security documentation (thanks to @​n0toose for collaborating with me on this).

3.15.0

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#314). This resolves a potential DoS vector (#178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.

Commits

• 6ecd9f1 chore: release 3.16.0
• 3693c01 build: upgrade getrandom to v0.3.0 (#320)
• a4596e5 build: allow windows-sys 0.59 (#319)
• 3ac6d4e chore: fix clippy lifetime warning (#318)
• 3a722e8 docs: improve & expand security documentation (#317)
• e7a40e3 Release v3.15.0
• ea45f47 feat: re-seed from system randomness on collision (#314)
• 16209da Fix link to ticket in changelog (#310)
• ae22b27 docs: add owasp link on insecure temporary files (#309)
• See full diff in compare view

Updates thiserror from 2.0.9 to 2.0.11

Release notes

Sourced from thiserror's releases.

2.0.11

• Add feature gate to tests that use std (#409, #410, thanks @​Maytha8)

2.0.10

• Support errors containing a generic type parameter's associated type in a field (#408)

Commits

• 0f532e3 Release 2.0.11
• 3d15543 Merge pull request #410 from dtolnay/testnostd
• 1a226ae Disable two more integration tests in no-std mode
• 8b5f2d7 Fix unused import in test when built without std
• eecd247 Add CI step to test with "std" disabled
• 8f2a76b Merge pull request #409 from Maytha8/std-tests
• 693a6cd Add feature gate to tests that use std
• 349f696 Release 2.0.10
• 6cd87bc Merge pull request #408 from dtolnay/assoctype
• 6b3e1e5 Generate trait bounds on associated types
• Additional commits viewable in compare view

Updates toml from 0.8.19 to 0.8.20

Commits

• f550dbf chore: Release
• 25587db docs: Update changelog
• fbc77ec Merge pull request #829 from tisonkun/map-get-kv
• 4605a64 fea: impl Map get_key_value
• 8efc81e chore(deps): Update Rust crate serde_json to v1.0.138 (#828)
• 15496f1 chore: Release
• 1131ce8 docs: Update changelog
• 4776fca Merge pull request #827 from epage/winnow07
• 754769b chore: Upgrade to Winnow 0.7
• 9415da2 refactor(parser): Switch to ModalParser
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.