Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the cargo-dependencies group across 1 directory with 5 updates #1354

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 10, 2025

Bumps the cargo-dependencies group with 5 updates in the / directory:

Package From To
actix-web 4.9.0 4.10.2
env_logger 0.11.6 0.11.7
rand 0.8.5 0.9.0
ic-stable-structures 0.6.7 0.6.8
once_cell 1.20.3 1.21.0

Updates actix-web from 4.9.0 to 4.10.2

Release notes

Sourced from actix-web's releases.

actix-web: v4.10.2

  • No significant changes since 4.10.1.

actix-web: v4.10.1

  • No significant changes since 4.10.0.

actix-web: v4.10.0

Added

  • Implement Responder for Result<(), E: Into<Error>>. Returning Ok(()) responds with HTTP 204 No Content.

Changed

  • On Windows, an error is now returned from HttpServer::bind() (or TLS variants) when binding to a socket that's already in use.
  • Update brotli dependency to 7.
  • Minimum supported Rust version (MSRV) is now 1.75.
Commits
  • cede0c6 chore(actix-web): prepare release 4.10.2
  • 1005b6a chore: fix actix-http ver req
  • d898e8f chore(actix-web): prepare release 4.10.1
  • 353873f chore: fix derive-more feature selection
  • 1390e29 docs: fix lint
  • c6e7ebd refactor: use Payload::from internally
  • e8351cc build(deps): bump taiki-e/install-action from 2.49.10 to 2.49.17 (#3597)
  • f63cf69 docs: remove "copyright"
  • 92c1e22 chore(awc): prepare release 3.6.0
  • 4bb495a chore(actix-web): prepare release 4.10.0
  • Additional commits viewable in compare view

Updates env_logger from 0.11.6 to 0.11.7

Release notes

Sourced from env_logger's releases.

v0.11.7

[0.11.7] - 2025-03-10

Internal

  • Replaced humantime with jiff
Changelog

Sourced from env_logger's changelog.

[0.11.7] - 2025-03-10

Internal

  • Replaced humantime with jiff
Commits

Updates rand from 0.8.5 to 0.9.0

Changelog

Sourced from rand's changelog.

[0.9.0] - 2025-01-27

Security and unsafe

  • Policy: "rand is not a crypto library" (#1514)
  • Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
  • Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

  • Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
  • Update to rand_core v0.9.0 (#1558)

Features

  • Support std feature without getrandom or rand_chacha (#1354)
  • Enable feature small_rng by default (#1455)
  • Remove implicit feature rand_chacha; use std_rng instead. (#1473)
  • Rename feature serde1 to serde (#1477)
  • Rename feature getrandom to os_rng (#1537)
  • Add feature thread_rng (#1547)

API changes: rand_core traits

  • Add fn RngCore::read_adapter implementing std::io::Read (#1267)
  • Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)
  • Add traits TryRngCore, TryCryptoRng (#1424, #1499)
  • Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)
  • Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)
  • Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

  • Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)
  • Remove fn rand::random() from the prelude (#1506)
  • Add top-level fns random_iter, random_range, random_bool, random_ratio, fill (#1488)
  • Re-introduce fn Rng::gen_iter as random_iter (#1305, #1500)
  • Rename fn Rng::gen to random to avoid conflict with the new gen keyword in Rust 2024 (#1438)
  • Rename fns Rng::gen_range to random_range, gen_bool to random_bool, gen_ratio to random_ratio (#1505)
  • Annotate panicking methods with #[track_caller] (#1442, #1447)

API changes: RNGs

  • Fix <SmallRng as SeedableRng>::Seed size to 256 bits (#1455)
  • Remove first parameter (rng) of ReseedingRng::new (#1533)

API changes: Sequences

  • Split trait SliceRandom into IndexedRandom, IndexedMutRandom, SliceRandom (#1382)
  • Add IndexedRandom::choose_multiple_array, index::sample_array (#1453, #1469)

API changes: Distributions: renames

  • Rename module rand::distributions to rand::distr (#1470)
  • Rename distribution Standard to StandardUniform (#1526)
  • Move distr::Slice -> distr::slice::Choose, distr::EmptySlice -> distr::slice::Empty (#1548)
  • Rename trait distr::DistString -> distr::SampleString (#1548)
  • Rename distr::DistIter -> distr::Iter, distr::DistMap -> distr::Map (#1548)

... (truncated)

Commits

Updates ic-stable-structures from 0.6.7 to 0.6.8

Release notes

Sourced from ic-stable-structures's releases.

v0.6.8

What's Changed

New Contributors

Full Changelog: dfinity/stable-structures@v0.6.7...v0.6.8

Commits
  • 2c30a85 chore: bump version to v0.6.8 (#269)
  • 595e58e chore(deps): bump dawidd6/action-download-artifact from 8 to 9 (#267)
  • bbfa830 ci: Upgrade Rust toolchain to 1.84 (#268)
  • 2a8357a chore: Add a SECURITY.md policy (#265)
  • 7cb7529 chore(deps): bump dawidd6/action-download-artifact from 7 to 8 (#262)
  • 69ed47f perf: Add bucket cache in MemoryManager (#260)
  • 5657691 chore: fix typo (#261)
  • 4a9aeeb chore(deps): bump dawidd6/action-download-artifact from 6 to 7 (#255)
  • 534df82 perf: Replace BucketIterator with function (#258)
  • c0d1af1 test: Add stability tests for MemoryManager (#259)
  • Additional commits viewable in compare view

Updates once_cell from 1.20.3 to 1.21.0

Changelog

Sourced from once_cell's changelog.

1.21.0

  • Outline initialization in race: #273.
  • Add OnceNonZereUsize::get_unchecked: #274.
  • Add OnceBox::clone and OnceBox::with_value: #275.

1.20.2

  • Remove portable_atomic from Cargo.lock if it is not, in fact, used: #267 This is a work-around for this cargo bug: rust-lang/cargo#10801.

1.20.1

  • Allow using race module using just portable_atomic, without critical_section and provide better error messages on targets without atomic CAS instruction, #265.

1.19.0

  • Use portable-atomic instead of atomic-polyfill, #251.

1.18.0

  • MSRV is updated to 1.60.0 to take advantage of dep: syntax for cargo features, removing "implementation details" from publicly visible surface.

1.17.2

  • Avoid unnecessary synchronization in Lazy::{force,deref}_mut(), #231.

1.17.1

1.17.0

  • Add race::OnceRef for storing a &'a T.

1.16.0

  • Add no_std implementation based on critical-section, #195.
  • Deprecate atomic-polyfill feature (use the new critical-section instead)

1.15.0

  • Increase minimal supported Rust version to 1.56.0.
  • Implement UnwindSafe even if the std feature is disabled.

1.14.0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 5 updates

Bumps the cargo-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actix-web](https://github.com/actix/actix-web) | `4.9.0` | `4.10.2` |
| [env_logger](https://github.com/rust-cli/env_logger) | `0.11.6` | `0.11.7` |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.0` |
| [ic-stable-structures](https://github.com/dfinity/stable-structures) | `0.6.7` | `0.6.8` |
| [once_cell](https://github.com/matklad/once_cell) | `1.20.3` | `1.21.0` |



Updates `actix-web` from 4.9.0 to 4.10.2
- [Release notes](https://github.com/actix/actix-web/releases)
- [Changelog](https://github.com/actix/actix-web/blob/master/CHANGES.md)
- [Commits](actix/actix-web@web-v4.9.0...web-v4.10.2)

Updates `env_logger` from 0.11.6 to 0.11.7
- [Release notes](https://github.com/rust-cli/env_logger/releases)
- [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md)
- [Commits](rust-cli/env_logger@v0.11.6...v0.11.7)

Updates `rand` from 0.8.5 to 0.9.0
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...0.9.0)

Updates `ic-stable-structures` from 0.6.7 to 0.6.8
- [Release notes](https://github.com/dfinity/stable-structures/releases)
- [Commits](dfinity/stable-structures@v0.6.7...v0.6.8)

Updates `once_cell` from 1.20.3 to 1.21.0
- [Changelog](https://github.com/matklad/once_cell/blob/master/CHANGELOG.md)
- [Commits](matklad/once_cell@v1.20.3...v1.21.0)

---
updated-dependencies:
- dependency-name: actix-web
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: env_logger
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: rand
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
- dependency-name: ic-stable-structures
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-dependencies
- dependency-name: once_cell
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Mar 10, 2025
@dependabot dependabot bot requested a review from a team as a code owner March 10, 2025 17:46
@sasa-tomic sasa-tomic enabled auto-merge (squash) March 10, 2025 17:47
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 11, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Mar 11, 2025
auto-merge was automatically disabled March 11, 2025 17:28

Pull request was closed

@dependabot dependabot bot deleted the dependabot/cargo/cargo-dependencies-68b7241cb0 branch March 11, 2025 17:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant