build(deps): bump the prod group across 1 directory with 11 updates #8664
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the prod group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.5.7` | `4.5.8` | | [serde](https://github.com/serde-rs/serde) | `1.0.203` | `1.0.204` | | [tinyvec](https://github.com/Lokathor/tinyvec) | `1.6.1` | `1.7.0` | | [metrics](https://github.com/metrics-rs/metrics) | `0.22.3` | `0.23.0` | | [metrics-exporter-prometheus](https://github.com/metrics-rs/metrics) | `0.14.0` | `0.15.1` | | [log](https://github.com/rust-lang/log) | `0.4.21` | `0.4.22` | | [proptest-derive](https://github.com/proptest-rs/proptest) | `0.4.0` | `0.5.0` | | [console-subscriber](https://github.com/tokio-rs/console) | `0.2.0` | `0.3.0` | | [serde_json](https://github.com/serde-rs/json) | `1.0.118` | `1.0.120` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.8.1` | `3.8.3` | | [syn](https://github.com/dtolnay/syn) | `2.0.68` | `2.0.69` | Updates `clap` from 4.5.7 to 4.5.8 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.7...v4.5.8) Updates `serde` from 1.0.203 to 1.0.204 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](serde-rs/serde@v1.0.203...v1.0.204) Updates `tinyvec` from 1.6.1 to 1.7.0 - [Changelog](https://github.com/Lokathor/tinyvec/blob/main/CHANGELOG.md) - [Commits](Lokathor/tinyvec@v1.6.1...v1.7.0) Updates `metrics` from 0.22.3 to 0.23.0 - [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml) - [Commits](metrics-rs/metrics@metrics-v0.22.3...metrics-v0.23.0) Updates `metrics-exporter-prometheus` from 0.14.0 to 0.15.1 - [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml) - [Commits](metrics-rs/metrics@metrics-exporter-prometheus-v0.14.0...metrics-exporter-prometheus-v0.15.1) Updates `log` from 0.4.21 to 0.4.22 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](rust-lang/log@0.4.21...0.4.22) Updates `proptest-derive` from 0.4.0 to 0.5.0 - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/master/CHANGELOG.md) - [Commits](proptest-rs/proptest@0.4.0...proptest-derive-0.5.0) Updates `console-subscriber` from 0.2.0 to 0.3.0 - [Release notes](https://github.com/tokio-rs/console/releases) - [Changelog](https://github.com/tokio-rs/console/blob/main/release-plz.toml) - [Commits](tokio-rs/console@console-subscriber-v0.2.0...console-subscriber-v0.3.0) Updates `serde_json` from 1.0.118 to 1.0.120 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.118...v1.0.120) Updates `serde_with` from 3.8.1 to 3.8.3 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](jonasbb/serde_with@v3.8.1...v3.8.3) Updates `syn` from 2.0.68 to 2.0.69 - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](dtolnay/syn@2.0.68...2.0.69) --- updated-dependencies: - dependency-name: clap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: serde dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: tinyvec dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: metrics dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: metrics-exporter-prometheus dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: log dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: proptest-derive dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: console-subscriber dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: serde_json dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: serde_with dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: syn dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
A-dependencies
oxarbitrage
reviewed
Jul 8, 2024
|
I am not really sure how to intepret @arya2 can you help me when you get a chance ? |
|
We could start by adding a some of these to our list of trusted dependencies like those in this commit. We could also self-certify the Zebra crates or add them as exemptions by running There are already many exemptions in
Then we should be left with a much shorter list of untrusted, uncertified dependency versions. Once we've reviewed the changes between the dependency versions, we can run |
|
Ok, thank you for the details. I did some of that, pushed the Can you take a look at #8664 (comment) when you get a chance and let me know what do you think. Thanks! |
arya2
previously approved these changes
Jul 10, 2024
13 tasks
oxarbitrage
approved these changes
Jul 10, 2024
13 tasks
arya2
approved these changes
Jul 10, 2024
|
@Mergifyio refresh |
✅ Pull request refreshed |
20 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the prod group with 11 updates in the / directory:
4.5.74.5.81.0.2031.0.2041.6.11.7.00.22.30.23.00.14.00.15.10.4.210.4.220.4.00.5.00.2.00.3.01.0.1181.0.1203.8.13.8.32.0.682.0.69Updates
clapfrom 4.5.7 to 4.5.8Release notes
Sourced from clap's releases.
Changelog
Sourced from clap's changelog.
Commits
Updates
serdefrom 1.0.203 to 1.0.204Release notes
Sourced from serde's releases.
Commits
18dcae0Release 1.0.20458c307fAlphabetize list of rustc-check-cfg8cc4809Merge pull request #2769 from dtolnay/onunimpl1179158Update ui test with diagnostic::on_unimplemented from PR 276791aa40eAdd ui test of unsatisfied serde trait bound595019eCut test_suite from workspace members in old toolchain CI jobsb0d7917Pull in trybuild 'following types implement trait' fix8e6637aMerge pull request #2767 from weiznich/feature/diagnostic_on_unimplemented694fe05Use the#[diagnostic::on_unimplemented]attribute when possiblef3dfd2aSuppress dead code warning in test of unit struct remote deriveUpdates
tinyvecfrom 1.6.1 to 1.7.0Changelog
Sourced from tinyvec's changelog.
Commits
ed22e15chore: Releasef94410bchangelog5097217Add retain_mut (#198)Updates
metricsfrom 0.22.3 to 0.23.0Commits
787b170chore: Releaseb48ed78update changelog82513b3Relax bounds on somemetrics_util::registry::Registrymethods (#484)ce9084bpermit trailing commans in describe macros (#483)deba76aFix wording for histogram functionality in lib.rs (#477)06fa1beAdd community exporter for Sentry to readme (#480)3fc0b4fImplement conversion from cow to std cow (#478)cd7de8cAnnotate metric types with must_use (#475)f322087chore: bump MSRV to 1.70.0 (#476)65f6e65metrics-util: derive Clone for Snapshotter (#472)Updates
metrics-exporter-prometheusfrom 0.14.0 to 0.15.1Commits
f84efc4chore: Release20b6ec5metrics-exporter-promethus: update CHANGELOG9f86b53Try fixing the Discord invite link... again.db56631Update Discord invite link.654c3a1metrics-exporter-prometheus: use hyper-rustls (#489)4c002c4typo fix in CHANGELOG.md (#487)787b170chore: Releaseb48ed78update changelog82513b3Relax bounds on somemetrics_util::registry::Registrymethods (#484)ce9084bpermit trailing commans in describe macros (#483)Updates
logfrom 0.4.21 to 0.4.22Changelog
Sourced from log's changelog.
Commits
d5ba2cfMerge pull request #634 from rust-lang/cargo/0.4.22d1a8306prepare for 0.4.22 release46894efMerge pull request #633 from rust-lang/feat/panic-infoe0d389cMerge pull request #632 from rust-lang/feat/loosen-atomicsc9e5e13use Location::caller() for file and line info507b672loosen orderings for logger initializationc879b01Merge pull request #628 from Thomasdezeeuw/fix-warnings405fdb4Merge pull request #627 from Thomasdezeeuw/check-features1307adeRemove unneeded import710560eDon't use --all-features in CIUpdates
proptest-derivefrom 0.4.0 to 0.5.0Commits
ca308b0Merge pull request #462 from mirandaconrado/master0a53edaMerge pull request #467 from matthew-russo/macro-0.196a2dabMerge pull request #464 from matthew-russo/masterf818fa2Release : prep for proptest-macro 0.1.0 releasee275f8aRelease : prep for proptest-derive 0.5 releasef87ec63Release : prep for proptest 1.5 release060cfbe[Doc] Arbitrary : add a note about the derive macro in Arbitrary's documentation1426f0fUpdate changelog7774b9cDetect empty ranges during tree creation24412f5Update compiletest_rs requirement from 0.10 to 0.11 (#455)Updates
console-subscriberfrom 0.2.0 to 0.3.0Release notes
Sourced from console-subscriber's releases.
Commits
b802bf1chore: release tokio-console-v0.1.11, console-api-v0.7.0, console-subscriber-...87ba91cchore(console): update cargo dist (#556)dcf8c2cchore: include tonic updates in release notes (#559)99437b0chore: automate releases with Release-plz (#545)852a977fix(subscriber): ignore metadata that is not a span or event (#554)a0d20fddocs(console): add note about running on Windows (#510)60bcf87chore: get rid of remove_dir_all (#542)1c1d599chore: bump clap and clap_complete to the latest version (#552)ef6816cchore: bump tonic to 0.11 (#547)6cbd6dbchore(console): bump ratatui to 0.26.2 and crossterm to 0.27.0 (#515)Updates
serde_jsonfrom 1.0.118 to 1.0.120Release notes
Sourced from serde_json's releases.
Commits
bcedc3dRelease 1.0.120962c0fbMerge pull request #1152 from cforycki/fix/index-map-minimal-version3480fedfix: indexmap minimal version with Map::shift_insert()b48b9a3Release 1.0.1198878cd7Make shift_insert available for inlining like other Map methods352b7abDocument the cfg required for Map::shift_insert to existc17e63fMerge pull request #1149 from joshka/master309ef6bAdd Map::shift_insert()a9e089aMerge pull request #1146 from haouvw/mastera83fe96chore: remove repeat wordsUpdates
serde_withfrom 3.8.1 to 3.8.3Release notes
Sourced from serde_with's releases.
Commits
1c4b022Bump version to v3.8.3 (#765)7de9838Bump version to v3.8.319bfe18Make code compile withschemars_0_8/preserve_orderenabled (#764)4c8c2dbMake code compile withschemars_0_8/preserve_orderenabled2274dd1Bump version to 3.8.2 (#761)e9e7a7eBump version to 3.8.2c9d9672Implement JsonSchemaAs for OneOrMany instead of JsonSchema (#760)dee706aImplement JsonSchemaAs for OneOrMany instead of JsonSchemaf74b460Fix two clippy issues (#755)3ae4424Fix two clippy issuesUpdates
synfrom 2.0.68 to 2.0.69Release notes
Sourced from syn's releases.
Commits
d4a0ff5Release 2.0.690f72134Improve precedence variant name of sum and product operators06f34fcMerge pull request #1693 from dtolnay/geta443857Add Punctuated::get and get_mutf0dfdbdUpdate test suite to nightly-2024-07-051560f9aMerge pull request #1692 from dtolnay/break4e71c1cParenthesize labeled loops inside break value93931a4Add fixup test for break with leading labelcc5e64eUpdate test suite to nightly-2024-06-292bbf612Merge pull request #1691 from dtolnay/postfixDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions