build(deps): bump the rust-dependencies group with 4 updates

[dependabot]

Bumps the rust-dependencies group with 4 updates: futures-util, rustls, rustls-pemfile and once_cell.

Updates futures-util from 0.3.30 to 0.3.31

Release notes

Sourced from futures-util's releases.

0.3.31

• Fix use after free of task in FuturesUnordered when dropped future panics (#2886)
• Fix soundness bug in task::waker_ref (#2830) This is a breaking change but allowed because it is soundness bug fix.
• Fix bugs in AsyncBufRead::read_line and AsyncBufReadExt::lines (#2884)
• Fix parsing issue in select!/select_biased! (#2832) This is technically a breaking change as it will now reject a very odd undocumented syntax that was previously accidentally accepted.
• Work around issue due to upstream Waker::will_wake change (#2865)
• Add stream::Iter::{get_ref,get_mut,into_inner} (#2875)
• Add future::AlwaysReady (#2825)
• Relax trait bound on non-constructor methods of io::{BufReader,BufWriter} (#2848)

Changelog

Sourced from futures-util's changelog.

0.3.31 - 2024-10-05

• Fix use after free of task in FuturesUnordered when dropped future panics (#2886)
• Fix soundness bug in task::waker_ref (#2830) This is a breaking change but allowed because it is soundness bug fix.
• Fix bugs in AsyncBufRead::read_line and AsyncBufReadExt::lines (#2884)
• Fix parsing issue in select!/select_biased! (#2832) This is technically a breaking change as it will now reject a very odd undocumented syntax that was previously accidentally accepted.
• Work around issue due to upstream Waker::will_wake change (#2865)
• Add stream::Iter::{get_ref,get_mut,into_inner} (#2875)
• Add future::AlwaysReady (#2825)
• Relax trait bound on non-constructor methods of io::{BufReader,BufWriter} (#2848)

Commits

• 1e05281 Release 0.3.31
• 8a8b085 Fix clippy::uninit_vec warning
• f3fb74d Document how BoxFutures / BoxStreams are often made (#2887)
• f00e7af Fix use after free of task in FuturesUnordered when dropped future panics (#2...
• 33c46b3 ci: Work around sanitizer issue on latest Linux kernel
• 7bf5a72 Fix issues with AsyncBufRead::read_line and AsyncBufReadExt::lines (#2884)
• 87afaf3 Use #[inline(always)] on clone_arc_raw (#2865)
• 549b90b Add accessors for the inner of stream::Iter (#2875)
• 07b004a Add missing symbols (#2883)
• 86dc069 Various fixes too make the CI green (#2885)
• Additional commits viewable in compare view

Updates rustls from 0.23.13 to 0.23.14

Commits

• cf736e3 Prepare 0.23.14
• 262ae99 Accept kyber deprecation
• c9f5734 Take aws-lc-rs 1.10
• 0560938 Take latest bogo release
• 7bf82dc Send illegal_parameter alert on illegal group
• d752eb2 Send illegal_parameter alert on invalid key share
• 2d3b7ab default crypto provider improvements
• bcc295d Fix new cargo doc warnings in examples
• e7dd2fd fips.rs: reflect certificate issuance for aws-lc 2.0.0
• 58a5891 fix(deps): update rust crate brotli to v7
• Additional commits viewable in compare view

Updates rustls-pemfile from 2.1.3 to 2.2.0

Release notes

Sourced from rustls-pemfile's releases.

2.2.0

Release notes

The main function of this crate has been incorporated into rustls-pki-types. 2.2.0 maintains the existing public API for this crate, on top of this new implementation. This drops the dependency on the base64 crate, and allows for constant-time decoding of private keys.

This crate will continue to exist in its current form, but it is somewhat unlikely that the API will be extended from its current state.

Should you wish to migrate to using the new rustls-pki-types PEM APIs directly, here is a rough cheat-sheet:

Use case	Replace
File stream to CertificateDer iterator	rustls_pemfile::certs(io::BufRead) ➡️ CertificateDer::pem_reader_iter(io::Read)
File stream to one PrivateKeyDer	rustls_pemfile::private_key(io::BufRead) ➡️ PrivateKeyDer::from_pem_reader(io::Read)
File stream to one CertificateSigningRequestDer	rustls_pemfile::csr(io::BufRead) ➡️ CertificateSigningRequestDer::from_pem_reader(io::Read)
File stream to CertificateRevocationListDer iterator	rustls_pemfile::crls(io::BufRead) ➡️ CertificateRevocationListDer::pem_reader_iter(io::Read)
File stream to PrivatePkcs1KeyDer iterator	rustls_pemfile::rsa_private_keys(io::BufRead) ➡️ PrivatePkcs1KeyDer::pem_reader_iter(io::Read)
File stream to PrivatePkcs8KeyDer iterator	rustls_pemfile::pkcs8_private_keys(io::BufRead) ➡️ PrivatePkcs8KeyDer::pem_reader_iter(io::Read)
File stream to PrivateSec1KeyDer iterator	rustls_pemfile::ec_private_keys(io::BufRead) ➡️ PrivateSec1KeyDer::pem_reader_iter(io::Read)
File stream to SubjectPublicKeyInfoDer iterator	rustls_pemfile::public_keys(io::BufRead) ➡️ SubjectPublicKeyInfoDer::pem_reader_iter(io::Read)

What's Changed

• Add semver checks action by @​ctz in rustls/pemfile#54
• Use pki-types pem decoding by @​ctz in rustls/pemfile#55
• Prepare 2.2.0 by @​ctz in rustls/pemfile#56

Full Changelog: rustls/pemfile@v/2.1.3...v/2.2.0

Commits

• 0f37efe Prepare 2.2.0
• f5d49b2 rustfmt to reformat imports
• 7bbc08e Use pki-types 1.9 for PEM decoding
• b2104d8 Add semver checks action
• See full diff in compare view

Updates once_cell from 1.20.1 to 1.20.2

Changelog

Sourced from once_cell's changelog.

1.20.2

• Remove portable_atomic from Cargo.lock if it is not, in fact, used: #267 This is a work-around for this cargo bug: rust-lang/cargo#10801.

Commits

• 4fbd4a5 release 1.20.3
• 0aef2f8 Merge pull request #267 from taiki-e/portable-atomic
• cf87ac6 Remove "portable-atomic?/require-cas" from race feature
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions