fix(deps): update all non-major dependencies #83

renovate · 2024-11-12T05:28:52Z

This PR contains the following updates:

Package	Type	Update	Change
anyhow	dependencies	patch	`1.0.71` -> `1.0.93`
backtrace	dependencies	patch	`0.3.73` -> `0.3.74`
chrono	dependencies	patch	`0.4.26` -> `0.4.38`
config	dependencies	patch	`0.14.0` -> `0.14.1`
lazy_static	dependencies	minor	`1.4.0` -> `1.5.0`
prometheus	dependencies	patch	`0.13.3` -> `0.13.4`
reqwest	dependencies	patch	`0.12.4` -> `0.12.9`
reqwest-middleware	dependencies	minor	`0.3.0` -> `0.4.0`
reqwest-tracing	dependencies	patch	`0.5.3` -> `0.5.4`
rss	dependencies	patch	`2.0.4` -> `2.0.9`
serde (source)	dependencies	patch	`1.0.193` -> `1.0.215`
serde_json	dependencies	patch	`1.0.109` -> `1.0.132`
temp-env	dev-dependencies	patch	`0.3.4` -> `0.3.6`
tempfile (source)	dev-dependencies	minor	`3.6.0` -> `3.14.0`
thiserror	dependencies	patch	`2.0.1` -> `2.0.3`
tokio (source)	dependencies	minor	`1.25.0` -> `1.41.1`
tokio-stream (source)	dependencies	patch	`0.1.14` -> `0.1.16`
tracing (source)	dependencies	patch	`0.1.37` -> `0.1.40`
tracing-subscriber (source)	dependencies	patch	`0.3.17` -> `0.3.18`

Release Notes

dtolnay/anyhow (anyhow)

`v1.0.93`

Compare Source

Update dev-dependencies to thiserror v2

`v1.0.92`

Compare Source

Support Rust 1.82's &raw const and &raw mut syntax inside ensure! (#390)

`v1.0.91`

Compare Source

Ensure OUT_DIR is left with deterministic contents after build script execution (#388)

`v1.0.90`

Compare Source

Documentation improvements

`v1.0.89`

Compare Source

Make anyhow::Error's UnwindSafe and RefUnwindSafe impl consistently available between versions of Rust newer and older than 1.72 (#386)

`v1.0.88`

Compare Source

Documentation improvements

`v1.0.87`

Compare Source

Support more APIs, including Error::new and Error::chain, in no-std mode on Rust 1.81+ (#383)

`v1.0.86`

Compare Source

Fix parse error in ensure! with non-literal after minus sign (#373)

`v1.0.85`

Compare Source

Improve ensure! macro's rules to unblock some rustc pretty-printer improvements (#368, #371)

`v1.0.84`

Compare Source

Disallow calling ensure! through a Not impl for a type that is not bool (#367)

`v1.0.83`

Compare Source

Integrate compile-time checking of cfgs (#363)

`v1.0.82`

Compare Source

Documentation improvements

`v1.0.81`

Compare Source

Make backtrace support available when using -Dwarnings (#354)

`v1.0.80`

Compare Source

Fix unused_imports warnings when compiled by rustc 1.78

`v1.0.79`

Compare Source

Work around improperly cached build script result by sccache (#340)

`v1.0.78`

Compare Source

Reduce spurious rebuilds under RustRover IDE when using a nightly toolchain (#337)

`v1.0.77`

Compare Source

Make anyhow::Error::backtrace available on stable Rust compilers 1.65+ (#293, thanks @LukasKalbertodt)

`v1.0.76`

Compare Source

Opt in to unsafe_op_in_unsafe_fn lint (#329)

`v1.0.75`

Compare Source

Partially work around rust-analyzer bug (https://github.com/rust-lang/rust-analyzer/issues/9911)

`v1.0.74`

Compare Source

Add bootstrap workaround to allow rustc to depend on anyhow (#320, thanks @RalfJung)

`v1.0.73`

Compare Source

Update backtrace support to nightly's new Error::provide API (https://github.com/rust-lang/rust/pull/113464, #319)

`v1.0.72`

Compare Source

Documentation improvements

rust-lang/backtrace-rs (backtrace)

`v0.3.74`

Compare Source

What's Changed

QNX Neutrino 7.0 support, thanks to @nyurik in https://github.com/rust-lang/backtrace-rs/pull/648
Cleaned up our Android support. This should massively improve backtraces for ones with the API level sufficient to ship with libunwind, etc. Unfortunately, it comes at the cost of dropping support for older ones! Thanks to @fengys in https://github.com/rust-lang/backtrace-rs/pull/656
Made PrintFmt, which was using the Enum::__NonExhaustiveVariant pattern, use #[non_exhaustive] for real. Don't @ me if you were matching on that! Thanks to @nyurik in https://github.com/rust-lang/backtrace-rs/pull/651
Massively cleaned up the windows code! We moved from winapi to windows-sys with windows-targets thanks to @CraftSpider and @ChrisDenton in
- Don't cast HANDLE to usize and back by @CraftSpider in https://github.com/rust-lang/backtrace-rs/pull/635
- Switch from winapi to windows-sys by @CraftSpider in https://github.com/rust-lang/backtrace-rs/pull/641
- Update windows bindings and use windows-targets by @ChrisDenton in https://github.com/rust-lang/backtrace-rs/pull/653
A bunch of updated dependencies. Thanks @djc and @khuey!
Sorry if you were testing this code in miri! It started yelling about sussy casts. A lot. We did a bunch of internal cleanups that should make it quiet down, thanks to @workingjubilee in https://github.com/rust-lang/backtrace-rs/pull/641
Uhhh we had to tweak dl_iterate_phdr in https://github.com/rust-lang/backtrace-rs/pull/660 after Android revealed it was... kind of unsound actually and not doing things like checking for null pointers before making slices! WHOOPS! Thanks to @saethlin for implementing detection for precisely that in rustc! It's really hard to find soundness issues in inherited codebases like this one...

New Contributors

@CraftSpider made their first contribution in https://github.com/rust-lang/backtrace-rs/pull/635
@fengys1996 made their first contribution in https://github.com/rust-lang/backtrace-rs/pull/656
@djc made their first contribution in https://github.com/rust-lang/backtrace-rs/pull/657

Full Changelog: rust-lang/backtrace-rs@0.3.73...0.3.74

chronotope/chrono (chrono)

`v0.4.38`

Compare Source

This release bring a ca. 20% improvement to the performance of the formatting code, and a convenient days_since method for the Weekday type.

Chrono 0.4.38 also removes the long deprecated rustc-serialize feature. Support for rustc-serialize will be soft-destabilized in the next Rust edition. Removing the feature will not break existing users of the feature; Cargo will just not update dependents that rely on it to newer versions of chrono.

In chrono 0.4.36 we made an accidental breaking change by switching to derive(Copy) for DateTime instead of a manual implementation. It is reverted in this release.

Removals

Remove rustc-serialize feature (#1548, thanks @workingjubilee)

Additions

Add Weekday::days_since (#1249, based on #216 by @clarfonthey)
Add TimeDelta::checked_mul and TimeDelta::checked_div (#1565, thanks @Zomtir)

Fixes

Return error when rounding with a zero duration (#1474, thanks @Dav1dde)
Manually implement Copy for DateTime if offset is Copy (#1573)

Internal

Inline test_encodable_json and test_decodable_json functions (#1550)
CI: Reduce combinations in cargo hack check (#1553)
Refactor formatting code (#1335)
Optimize number formatting (#1558)
Only package files needed for building and testing (#1554)

Thanks to all contributors on behalf of the chrono team, @djc and @pitdicker!

`v0.4.37`

Compare Source

Version 0.4.36 introduced an unexpected breaking change and was yanked. In it LocalResult was renamed to MappedLocalTime to avoid the impression that it is a Result type were some of the results are errors. For backwards compatibility a type alias with the old name was added.

As it turns out there is one case where a type alias behaves differently from the regular enum: you can't import enum variants from a type alias with use chrono::LocalResult::*. With 0.4.37 we make the new name MappedLocalTime the alias, but keep using it in function signatures and the documentation as much as possible.

See also the release notes of chrono 0.4.36 from yesterday for the yanked release.

`v0.4.36`

Compare Source

This release un-deprecates the methods on TimeDelta that were deprecated with the 0.4.35 release because of the churn they are causing for the ecosystem.

New is the DateTime::with_time() method. As an example of when it is useful:

use chrono::{Local, NaiveTime};
// Today at 12:00:00
let today_noon = Local::now().with_time(NaiveTime::from_hms_opt(12, 0, 0).unwrap());

Additions

Add DateTime::with_time() (#1510)

Deprecations

Revert TimeDelta deprecations (#1543)
Deprecate TimeStamp::timestamp_subsec_nanos, which was missed in the 0.4.35 release (#1486)

Documentation

Correct version number of deprecation notices (#1486)
Fix some typos (#1505)
Slightly improve serde documentation (#1519)
Main documentation: simplify links and reflow text (#1535)

Internal

CI: Lint benchmarks (#1489)
Remove unnessary Copy and Send impls (#1492, thanks @erickt)
Backport streamlined NaiveDate unit tests (#1500, thanks @Zomtir)
Rename LocalResult to TzResolution, add alias (#1501)
Update windows-bindgen to 0.55 (#1504)
Avoid duplicate imports, which generate warnings on nightly (#1507)
Add extra debug assertions to NaiveDate::from_yof (#1518)
Some small simplifications to DateTime::date_naive and NaiveDate::diff_months (#1530)
Remove unwrap in Unix Local type (#1533)
Use different method to ignore feature-dependent doctests (#1534)

Thanks to all contributors on behalf of the chrono team, @djc and @pitdicker!

`v0.4.35`

Compare Source

Most of our efforts have shifted to improving the API for a 0.5 release, for which cleanups and refactorings are landing on the 0.4.x branch.

The most significant changes in this release are two sets of deprecations.

We deprecated all timestamp-related methods on NaiveDateTime. The reason is that a timestamp is defined to be in UTC. The NaiveDateTime type doesn't know the offset from UTC, so it was technically wrong to have these methods. The alternative is to use the similar methods on the DateTime<Utc> type, or from the TimeZone trait.

Converting from NaiveDateTime to DateTime<Utc> is simple with .and_utc(), and in the other direction with .naive_utc().
The panicking constructors of TimeDelta (the new name of the Duration type) are deprecated. This was the last part of chrono that defaulted to panicking on error, dating from before rust 1.0.
A nice change is that NaiveDate now includes a niche. So now Option<NaiveDate>, Option<NaiveDateTime> and Option<DateTime<Tz>> are the same size as their base types.
format::Numeric and format::Fixed are marked as non_exhaustive. This will allow us to improve our formatting and parsing support, and we have reason to believe this breaking change will have little to no impact on users.

Additions

Add DateTime::{from_timestamp_micros, from_timestamp_nanos} (#1234)
Add getters to Parsed (#1465)

Deprecations

Deprecate timestamp methods on NaiveDateTime (#1473)
Deprecate panicking constructors of TimeDelta (#1450)

Changes/fixes

Use NonZeroI32 inside NaiveDate (#1207)
Mark format::Numeric and format::Fixed as non_exhaustive (#1430)
Parsed fixes to error values (#1439)
Use overflowing_naive_local in DateTime::checked_add* (#1333)
Do complete range checks in Parsed::set_* (#1465)

Documentation

Rustfmt doctests (#1452)
Improve docs for crate features (#1455, thanks @edmorley)
Add more documentation and examples to Parsed (#1439)

Internal

Refactor internals module (#1428, #1429, #1431, #1432, #1433, #1438)
CI: test cross-compiling to x86_64-unknown-illumos instead of Solaris (#1437)
CI: lint Windows target, fix clippy warning (#1441)
CI: only run cargo hack check on Linux (#1442)
Update windows-bindgen to 0.54 (#1462, #1483)
Simplify error value of parse_internal (#1459)
Simplify SerdeError (#1458)
Simplify NaiveDate::from_isoywd a bit (#1464)

Thanks to all contributors on behalf of the chrono team, @djc and @pitdicker!

`v0.4.34`

Compare Source

Notable changes

In chrono 0.4.34 we finished the work to make all methods const where doing so is supported by rust 1.61.
We renamed the Duration type to TimeDelta. This removes the confusion between chrono's type and the later Duration type in the standard library. It will remain available under the old name as a type alias for compatibility.
The Windows implementation of Local is rewritten. The new version avoids panics when the date is outside of the range supported by windows (the years 1601 to 30828), and gives more accurate results during DST transitions.
The Display format of TimeDelta is modified to conform better to ISO 8601. Previously it converted all values greater than 24 hours to a value with days. This is not correct, as doing so changes the duration from an 'accurate' to a 'nominal' representation to use ISO 8601 terms.

Fixes

Add missing range check in TimeDelta::milliseconds (#1385, thanks @danwilliams)
Remove check for DurationExceedsTimestamp in DurationRound (#1403, thanks @joroKr21)
Fix localized formatting with %X (https://github.com/chronotope/pure-rust-locales/pull/12, #1420)
Windows: base implementation on GetTimeZoneInformationForYear (#1017)

Additions

Add TimeDelta::try_milliseconds (#1385, thanks @danwilliams)
Add TimeDelta::new (#1337)
Add StrftimeItems::{parse, parse_to_owned} and more documentation (#1184)
More standard traits and documentation for format::Locale (via https://github.com/chronotope/pure-rust-locales/pull/8)

Changes

Rename Duration to TimeDelta, add type alias (#1406)
Make TimeDelta methods const (#1337)
Make remaining methods of NaiveDate, NaiveWeek, NaiveTime and NaiveDateTime const where possible (#1337)
Make methods on DateTime const where possible (#1400)
Make Display format of TimeDelta conform better to ISO 8601 (#1328)

Documentation

Fix the formatting of timestamp_micros's Example doc (#1338 via #1386, thanks @emikitas)
Specify branch for GitHub Actions badge and fix link (#1388)
Don't mention some deprecated methods in docs (#1395)
Remove stray documentation from main (#1397)
Improved documentation of TimeDelta constructors (#1385, thanks @danwilliams)

Internal

Switch branch names: 0.4.x releases are the main branch, work on 0.5 happens in the 0.5.x branch (#1390, #1402).
Don't use deprecated method in impl Arbitrary for DateTime and set up CI test (#1336)
Remove workaround for Rust < 1.61 (#1393)
Bump codecov/codecov-action from 3 to 4 (#1404)
Remove partial support for handling -0000 offset (#1411)
Move TOO_LONG error out of parse_internal (#1419)

Thanks to all contributors on behalf of the chrono team, @djc and @pitdicker!

`v0.4.33`

Compare Source

This release fixes the broken docrs.rs build of chrono 0.4.32.

What's Changed

Make rkyv feature imply size_32 (#1383)
Fixed typo in Duration::hours() exception (#1384, thanks @danwilliams)

`v0.4.32`

Compare Source

In this release we shipped part of the effort to reduce the number of methods that could unexpectedly panic, notably for the DateTime and Duration types.

Chrono internally stores the value of a DateTime in UTC, and transparently converts it to the local value as required. For example adding a second to a DateTime needs to be done in UTC to get the correct result, but adding a day needs to be done in local time to be correct. What happens when the value is near the edge of the representable range, and the implicit conversions pushes it beyond the representable range? Many methods could panic on such inputs, including formatting the value for Debug output.

In chrono 0.4.32 the range of NaiveDate, NaiveDateTime and DateTime is made slightly smaller. This allows us to always do the implicit conversion, and in many cases return the expected result. Specifically the range is now from January 1, -262144 until December 31, 262143, one year less on both sides than before. We expect this may trip up tests if you hardcoded the MIN and MAX dates.

Duration had a similar issue. The range of this type was pretty arbitrary picked to match the range of an i64 in milliseconds. Negating an i64::MIN pushes a value out of range, and in the same way negating Duration::MIN could push it out of our defined range and cause a panic. This turns out to be somewhat common and hidden behind many layers of abstraction. We adjusted the type to have a minimum value of -Duration::MAX instead and prevent the panic case.

Other highlights:

Duration gained new fallible initialization methods.
Better support for rkyv.
Most methods on NaiveDateTime are now const.
We had to bump our MSRV to 1.61 to keep building with our dependencies. This will also allow us to make more methods on DateTime const in a future release.

Complete list of changes:

Fixes

Fix panic in TimeZone::from_local_datetime (#1071)
Fix out of range panics in DateTime getters and setters (#1317, #1329)

Additions

Add NaiveDateTime::checked_(add|sub)_offset (#1313)
Add DateTime::to_utc (#1325)
Derive Default for Duration (#1327)
Add Duration::subsec_nanos (#1327)
Add try_* builders to Duration (#1327)
Implement AddAssign and SubAssign for Duration (#1327)
Make methods on NaiveDateTime const where possible (#1286)
Split clock feature into clock and now (#1343, thanks @mmastrac)
Add From<NaiveDate> for NaiveDateTime (#1355, thanks @dcechano)
Add NaiveDateTime::from_timestamp_nanos (#1357, thanks @Ali-Mirghasemi)
Add Months::num_months() and num_years() (#1373, thanks @danwilliams)
Add DateTime<Utc>::from_timestamp_millis (#1374, thanks @xmakro)

Changes

Fix panic in Duration::MIN.abs() (adjust Duration::MIN by 1 millisecond) (#1334)
Bump MSRV to 1.61 (#1347)
Update windows-targets requirement from 0.48 to 0.52 (#1360)
Update windows-bindgen to 0.52 (#1379)

Deprecations

Deprecate standalone format functions (#1306)

Documentation

Improve doc comment and tests for timestamp_nanos_opt (#1299, thanks @mlegner)
Switch to doc_auto_cfg (#1305, #1326)
Document panics in Add/Sub impls and use expect (#1316)
Improve types listed in top-level documentation (#1274)
Improve deprecation note of TimeZone::datetime_from_str (#1342, thanks @tmccombs)
Fix typos in Datelike impl for DateTime (#1376, thanks @ElectrifyPro)

Rkyv support

Export Archived* types in rkyv module (#1304)
Duplicate derives on Archived* types (#1271, thanks @Awpteamoose)
Archive derive of PartialEq for rkyv (#959, thanks @mkatychev)
Expose rkyv features as features for chrono users (#1368, thanks @gz)

Changes to unstable features

Don't let unstable-locales imply the alloc feature (#1307)
Remove format::{format_localized, format_item_localized} (#1311)
Inline write_rfc2822_inner, don't localize (#1322)

Internal

Add benchmark for DateTime::with_* (#1309)
Fix *_DAYS_FROM_YEAR_0 calculation (#1312)
Add NaiveTime::overflowing_(add|sub)_offset (#1310)
Rewrite DateTime::overflowing_(add|sub)_offset (#1069)
Tests calling date command set env LC_ALL (#1315, thanks @jtmoon79)
Update deny.toml (#1320)
Bump actions/setup-node from 3 to 4 (#1346)
test.yml remove errant with: node-version (#1352, thanks @jtmoon79)
CI Linting: Fix missing sources checkout in toml job (#1371, thanks @gibbz00)
Silence clippy lint for test code with Rust 1.74.0 (#1362)

Thanks to all contributors on behalf of the chrono team, @djc and @pitdicker!

`v0.4.31`

Compare Source

Another maintenance release.
It was not a planned effort to improve our support for UNIX timestamps, yet most PRs seem related to this.

Deprecations

Deprecate timestamp_nanos in favor of the non-panicking timestamp_nanos_opt (#1275)

Additions

Add DateTime::<Utc>::from_timestamp (#1279, thanks @demurgos)
Add TimeZone::timestamp_micros (#1285, thanks @emikitas)
Add DateTime<Tz>::timestamp_nanos_opt and NaiveDateTime::timestamp_nanos_opt (#1275)
Add UNIX_EPOCH constants (#1291)

Fixes

Format day of month in RFC 2822 without padding (#1272)
Don't allow strange leap seconds which are not on a minute boundary initialization methods (#1283)
This makes many methods a little more strict:
- NaiveTime::from_hms_milli
- NaiveTime::from_hms_milli_opt
- NaiveTime::from_hms_micro
- NaiveTime::from_hms_micro_opt
- NaiveTime::from_hms_nano
- NaiveTime::from_hms_nano_opt
- NaiveTime::from_num_seconds_from_midnight
- NaiveTime::from_num_seconds_from_midnight_opt
- NaiveDate::and_hms_milli
- NaiveDate::and_hms_milli_opt
- NaiveDate::and_hms_micro
- NaiveDate::and_hms_micro_opt
- NaiveDate::and_hms_nano
- NaiveDate::and_hms_nano_opt
- NaiveDateTime::from_timestamp
- NaiveDateTime::from_timestamp_opt
- TimeZone::timestamp
- TimeZone::timestamp_opt
Fix underflow in NaiveDateTime::timestamp_nanos_opt (#1294, thanks @crepererum)

Documentation

Add more documentation about the RFC 2822 obsolete date format (#1267)

Internal

Remove internal __doctest feature and doc_comment dependency (#1276)
CI: Bump actions/checkout from 3 to 4 (#1280)
Optimize NaiveDate::add_days for small values (#1214)
Upgrade pure-rust-locales to 0.7.0 (#1288, thanks @jeremija wo did good improvements on pure-rust-locales)

Thanks to all contributors on behalf of the chrono team, @djc and @pitdicker!

`v0.4.30`

Compare Source

In this release, we have decided to swap out the chrono::Duration type (which has been a re-export of time 0.1 Duration type) with our own definition, which exposes a strict superset of the time::Duration API. This helps avoid warnings about the CVE-2020-26235 and RUSTSEC-2020-0071 advisories for downstream users and allows us to improve the Duration API going forward.

While this is technically a SemVer-breaking change, we expect the risk of downstream users experiencing actual incompatibility to be exceedingly limited (see our analysis of public code using a crater-like experiment), and not enough justification for the large ecosystem churn of a 0.5 release. If you have any feedback on these changes, please let us know in #1268.

Additions

Add NaiveDate::leap_year (#1261)

Documentation

Update main documentation from README (#1260, thanks @Stygmates)
Add history of relation between chrono and time 0.1 to documentation (https://github.com/chronotope/chrono/pull/1264, https://github.com/chronotope/chrono/pull/1266)
Clarify Timelike::num_seconds_from_midnight is a simple mapping (#1255)

Relation between chrono and time 0.1

Rust first had a time module added to std in its 0.7 release. It later moved to libextra, and then to a libtime library shipped alongside the standard library. In 2014 work on chrono started in order to provide a full-featured date and time library in Rust. Some improvements from chrono made it into the standard library; notably, chrono::Duration was included as std::time::Duration (rust#15934) in 2014.

In preparation of Rust 1.0 at the end of 2014 libtime was moved out of the Rust distro and into the time crate to eventually be redesigned (rust#18832, rust#18858), like the num and rand crates. Of course chrono kept its dependency on this time crate. time started re-exporting std::time::Duration during this period. Later, the standard library was changed to have a more limited unsigned Duration type (rust#24920, RFC 1040), while the time crate kept the full functionality with time::Duration. time::Duration had been a part of chrono's public API.

By 2016 time 0.1 lived under the rust-lang-deprecated organisation and was not actively maintained (time#136). chrono absorbed the platform functionality and Duration type of the time crate in chrono#478 (the work started in chrono#286). In order to preserve compatibility with downstream crates depending on time and chrono sharing a Duration type, chrono kept depending on time 0.1. chrono offered the option to opt out of the time dependency by disabling the oldtime feature (swapping it out for an effectively similar chrono type). In 2019, @jhpratt took over maintenance on the time crate and released what amounts to a new crate as time 0.2.

Security advisories

In November of 2020 CVE-2020-26235 and RUSTSEC-2020-0071 were opened against the time crate. @quininer had found that calls to localtime_r may be unsound (chrono#499). Eventually, almost a year later, this was also made into a security advisory against chrono as RUSTSEC-2020-0159, which had platform code similar to time.

On Unix-like systems a process is given a timezone id or description via the TZ environment variable. We need this timezone data to calculate the current local time from a value that is in UTC, such as the time from the system clock. time 0.1 and chrono used the POSIX function localtime_r to do the conversion to local time, which reads the TZ variable.

Rust assumes the environment to be writable and uses locks to access it from multiple threads. Some other programming languages and libraries use similar locking strategies, but these are typically not shared across languages. More importantly, POSIX declares modifying the environment in a multi-threaded process as unsafe, and getenv in libc can't be changed to take a lock because it returns a pointer to the data (see rust#27970 for more discussion).

Since version 4.20 chrono no longer uses localtime_r, instead using Rust code to query the timezone (from the TZ variable or via iana-time-zone as a fallback) and work with data from the system timezone database directly. The code for this was forked from the tz-rs crate by @x-hgg-x. As such, chrono now respects the Rust lock when reading the TZ environment variable. In general, code should avoid modifying the environment.

Removing time 0.1

Because time 0.1 has been unmaintained for years, however, the security advisory mentioned above has not been addressed. While chrono maintainers were careful not to break backwards compatibility with the time::Duration type, there has been a long stream of issues from users inquiring about the time 0.1 dependency with the vulnerability. We investigated the potential breakage of removing the time 0.1 dependency in chrono#1095 using a crater-like experiment and determined that the potential for breaking (public) dependencies is very low. We reached out to those few crates that did still depend on compatibility with time 0.1.

As such, for chrono 0.4.30 we have decided to swap out the time 0.1 Duration implementation for a local one that will offer a strict superset of the existing API going forward. This will prevent most downstream users from being affected by the security vulnerability in time 0.1 while minimizing the ecosystem impact of semver-incompatible version churn.

Thanks to all contributors on behalf of the chrono team, @djc and @pitdicker!

`v0.4.29`

Compare Source

This release fixes a panic introduced in chrono 0.4.27 in FromStr<DateTime<Utc>> (#1253).

Chrono now has a Discord channel.

Fixes

Fix arbitrary string slicing in parse_rfc3339_relaxed (#1254)

Deprecations

Deprecate TimeZone::datetime_from_str (#1251)

Documentation

Correct documentation for FromStr for Weekday and Month (#1226, thanks @wfraser)

Internal improvements

Revert "add test_issue_866" (#1238)
CI: run tests on i686 and wasm32-wasi (#1237)
CI: Include doctests for code coverage (#1248)
Move benchmarks to a separate crate (#1243)
This allows us to upgrade the criterion dependency to 5.1 without changing our MSRV.
Add Discord link to README (#1240, backported in #1256)

Thanks to all contributors on behalf of the chrono team, @djc and @pitdicker!

`v0.4.28`

Compare Source

This release fixes a test failure on 32-bit targets introduced with 0.4.27, see https://github.com/chronotope/chrono/issues/1234.

`v0.4.27`

Compare Source

This release bumps the MSRV from 1.56 to 1.57. This allows us to take advantage of the panicking in const feature. In this release most methods on NaiveDate and NaiveTime are made const, NaiveDateTime and others will follow in a later release.

The parser for the %+ formatting specifier and the RFC3339 formatting item is switched from a strict to a relaxed parser (see https://github.com/chronotope/chrono/pull/1145). This matches the existing documentation, and the parser used by DateTime::from_str. If you need to validate the input, consider using DateTime::from_rfc3339.

Deprecations

Deprecate DateTime::{from_local, from_utc} (https://github.com/chronotope/chrono/pull/1175)

Additions

Let DateTime::signed_duration_since take argument with Borrow (https://github.com/chronotope/chrono/pull/1119)
Implement PartialOrd for Month (https://github.com/chronotope/chrono/pull/999, thanks @Munksgaard)
Add Ord and Eq for types which already derive PartialOrd and PartialEq (https://github.com/chronotope/chrono/pull/1128, thanks @totikom)
implement FusedIterator for NaiveDateDaysIterator and NaiveDateWeeksIterator (https://github.com/chronotope/chrono/pull/1134)
Make NaiveDateDaysIterator and NaiveDateWeeksIterator public (https://github.com/chronotope/chrono/pull/1134)
Add FromStr for FixedOffset (https://github.com/chronotope/chrono/pull/1157, thanks @mcronce)
Remove Tz::Offset: Display requirement from DateTime::to_rfc* (https://github.com/chronotope/chrono/pull/1160)
More flexible offset formatting (not exposed yet) (https://github.com/chronotope/chrono/pull/1160)
Make StrftimeItems with unstable-locales work without allocating (https://github.com/chronotope/chrono/pull/1152)
Make NaiveDate::from_ymd_opt const (https://github.com/chronotope/chrono/pull/1172, thanks @kamadorueda)
Implement Error trait for ParseWeekdayError and ParseMonthError (https://github.com/chronotope/chrono/pull/539, thanks @mike-kfed)
Make methods on NaiveTime const, update MSRV to 1.57 (https://github.com/chronotope/chrono/pull/1080)
Make methods on NaiveDate const (https://github.com/chronotope/chrono/pull/1205)
Implement operations for core::time::Duration on DateTime types (https://github.com/chronotope/chrono/pull/1229)

Fixes

Ensure timestamp_nanos panics on overflow in release builds (https://github.com/chronotope/chrono/pull/1123)
Fix offset_from_local_datetime for wasm_bindgen (https://github.com/chronotope/chrono/pull/1131)
Parsing: Consider %s to be a timestamp in UTC (https://github.com/chronotope/chrono/pull/1136)
Don't panic when formatting with %#z (https://github.com/chronotope/chrono/pull/1140, thanks @domodwyer)
Parsing: allow MINUS SIGN (U+2212) in offset (https://github.com/chronotope/chrono/pull/1087, thanks @jtmoon79)
Fix locale formatting for %c and %r (https://github.com/chronotope/chrono/pull/1165)
Localize decimal point with unstable-locales feature (https://github.com/chronotope/chrono/pull/1168)
Fix panic on macOS 10.12 caused by using version 1 of the TZif file format (https://github.com/chronotope/chrono/pull/1201, thanks to help from @jfro)
Fix deserialization of negative timestamps (https://github.com/chronotope/chrono/pull/1194)
Do not use Offset's Debug impl when serializing DateTime (https://github.com/chronotope/chrono/pull/1035)
Allow missing seconds in NaiveTime::from_str (https://github.com/chronotope/chrono/pull/1181)
Do not depend on android-tzdata if the clock feature is not enabled (https://github.com/chronotope/chrono/pull/1220, thanks @AlexTMjugador)
Small fixes to the RFC 3339 parsers (https://github.com/chronotope/chrono/pull/1145)

Documentation

Add "Errors" and "Panics" sections to API docs (https://github.com/chronotope/chrono/pull/1120)
Specify licenses in SPDX format (https://github.com/chronotope/chrono/pull/1132, backport of https://github.com/chronotope/chrono/issues/910, thanks @LingMan)
Fix NaiveTime doc typo (https://github.com/chronotope/chrono/pull/1146, thanks @zachs18)
Clarify nanosecond formatting specifier doc ([https://github.com/Clarify nanosecond formatting specifier doc chronotope/chrono#1173](https://redir

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2024-11-12T05:28:54Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --package [email protected] --precise 0.14.1
    Updating crates.io index
error: failed to select a version for `encoding_rs`.
    ... required by package `yaml-rust2 v0.8.0`
    ... which satisfies dependency `yaml-rust2 = "^0.8"` of package `config v0.14.1`
    ... which satisfies dependency `config = "^0.14.0"` of package `netcup-offer-bot v1.3.0 (/tmp/renovate/repos/github/Timmi6790/netcup-offer-bot)`
versions that meet the requirements `^0.8.33` are: 0.8.35, 0.8.34, 0.8.33

all possible versions conflict with previously selected packages.

  previously selected package `encoding_rs v0.8.32`
    ... which satisfies dependency `encoding_rs = "^0.8"` (locked to 0.8.32) of package `reqwest v0.12.4`
    ... which satisfies dependency `reqwest = "^0.12.0"` (locked to 0.12.4) of package `netcup-offer-bot v1.3.0 (/tmp/renovate/repos/github/Timmi6790/netcup-offer-bot)`

failed to select a version for `encoding_rs` which could resolve this conflict

fix(deps): update all non-major dependencies

98063d2

renovate bot added the dependencies Pull requests that update a dependency file label Nov 12, 2024

renovate bot enabled auto-merge (squash) November 12, 2024 05:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies #83

fix(deps): update all non-major dependencies #83

renovate bot commented Nov 12, 2024

renovate bot commented Nov 12, 2024

fix(deps): update all non-major dependencies #83

Are you sure you want to change the base?

fix(deps): update all non-major dependencies #83

Conversation

renovate bot commented Nov 12, 2024

Release Notes

What's Changed

New Contributors

Removals

Additions

Fixes

Internal

Additions

Deprecations

Documentation

Internal

Additions

Deprecations

Changes/fixes

Documentation

Internal

Notable changes

Fixes

Additions

Changes

Documentation

Internal

What's Changed

Fixes

Additions

Changes

Deprecations

Documentation

Rkyv support

Changes to unstable features

Internal

Deprecations

Additions

Fixes

Documentation

Internal

Additions

Documentation

Relation between chrono and time 0.1

Security advisories

Removing time 0.1

Fixes

Deprecations

Documentation

Internal improvements

Deprecations

Additions

Fixes

Documentation

Configuration

renovate bot commented Nov 12, 2024

⚠️ Artifact update problem

File name: Cargo.lock