fix(deps): update all dependencies #894

platform-engineering-bot · 2024-11-11T00:07:02Z

This PR contains the following updates:

Package	Type	Update	Change
EmbarkStudios/cargo-deny-action	action	major	`v1` -> `v2`
actions/checkout	action	major	`v3` -> `v4`
flate2	dependencies	minor	`1.0.35` -> `1.1.0`
indexmap	dependencies	minor	`2.6.0` -> `2.7.1`
indoc	dev-dependencies	pin	`2.0.5` -> `=2.0.5`
mandown (source)	dependencies	major	`0.1.3` -> `1.0.0`
quay.io/fedora/fedora-bootc	container	major	`41` -> `43`
quickcheck	dev-dependencies	pin	`1` -> `=1.0.3`
rustix	workspace.dependencies	major	`0.38.34` -> `1.0.0`
similar-asserts	dependencies	minor	`1.6.1` -> `1.7.0`
similar-asserts	workspace.dependencies	minor	`1.6.1` -> `1.7.0`
tempfile (source)	workspace.dependencies	minor	`3.14.0` -> `3.18.0`
tokio (source)	workspace.dependencies	minor	`1.41.1` -> `1.44.0`
uuid	dependencies	minor	`1.11.1` -> `1.15.1`

Release Notes

EmbarkStudios/cargo-deny-action (EmbarkStudios/cargo-deny-action)

`v2`

Compare Source

actions/checkout (actions/checkout)

`v4`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941
Expand unit test coverage for isGhes by @jww3 in https://github.com/actions/checkout/pull/1946

rust-lang/flate2-rs (flate2)

indexmap-rs/indexmap (indexmap)

`v2.7.1`

Compare Source

Added #[track_caller] to functions that may panic.
Improved memory reservation for insert_entry.

`v2.7.0`

Compare Source

Added methods Entry::insert_entry and VacantEntry::insert_entry, returning
an OccupiedEntry after insertion.

kornelski/mandown (mandown)

`v1.0.0`

Compare Source

bytecodealliance/rustix (rustix)

`v1.0.1`

Compare Source

`v1.0.0`: 1.0.0

Compare Source

This release introduces the [Buffer trait][Buffer trait], which is used in [read][read], [pread][pread], [recv][recv], [recvfrom][recvfrom], [getrandom][getrandom], [readlinkat_raw][readlinkat_raw], [epoll::wait][epoll::wait], [kevent][kevent], [port::getn][port::getn], [getxattr][getxattr], [lgetxattr][lgetxattr], [fgetxattr][fgetxattr], [listxattr][listxattr], [llistxattr][llistxattr], and [flistxattr][flistxattr], and adds support for reading data into uninitialized buffers, as well as safely reading data into the spare capacity of Vecs.

This release also simplifies the way network addresses are handled. Instead of having separate functions with _v4, _v6, _unix, _xdp, and now _netlink suffixes, rustix now uses a [SocketAddrArg trait][SocketAddrArg trait] so that functions such as [bind][bind], [connect][connect], [sendto][sendto], and [sendmsg_addr][sendmsg_addr] can accept any type of address, and are easier to extend to new address types in the future.

And, this release simplifies the ioctl API, replacing opcode wrapper types with const generics.

This updates several APIs to add Linux 6.13 features, and raw linux-raw-sys types are no longer exposed in the public API, so it should be easier to stay up to date with new Linux releases.

And many more new features, bug fixes, and cleanups. See the CHANGES.md file for the full list of breaking changes.

mitsuhiko/similar-asserts (similar-asserts)

`v1.7.0`

Compare Source

Added support for SIMILAR_ASSERTS_CONTEXT_SIZE. #13

Stebalien/tempfile (tempfile)

`v3.18.0`

Compare Source

Update rustix to 1.0.0.
Make NamedTempFile::persist_noclobber atomic on Apple operating systems. It's now atomic on MacOS, Windows, and Linux (depending on the OS version and filesystem used).

`v3.17.1`

Compare Source

Fix build with windows-sys 0.52. Unfortunately, we have no CI for older windows-sys versions at the moment...

`v3.17.0`

Compare Source

Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in Builder::make_in (when creating temporary files of arbitrary types).
Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test.
When reseeding with getrandom, use platform (e.g., CPU) specific randomness sources where possible.
Clarify some documentation.
Unlink unnamed temporary files on windows immediately when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible.

`v3.16.0`

Compare Source

Update getrandom to 0.3.0 (thanks to @paolobarbolini).
Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @ErichDonGubler).
Improved security documentation (thanks to @n0toose for collaborating with me on this).

`v3.15.0`

Compare Source

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#314). This resolves a potential DoS vector (#178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.

tokio-rs/tokio (tokio)

`v1.44.0`: Tokio v1.44.0

Compare Source

1.44.0 (March 7th, 2025)

This release changes the from_std method on sockets to panic if a blocking socket is provided. We determined this change is not a breaking change as Tokio is not intended to operate using blocking sockets. Doing so results in runtime hangs and should be considered a bug. Accidentally passing a blocking socket to Tokio is one of the most common user mistakes. If this change causes an issue for you, please comment on #7172.

Added

coop: add task::coop module (#7116)
process: add Command::get_kill_on_drop() (#7086)
sync: add broadcast::Sender::closed (#6685, #7090)
sync: add broadcast::WeakSender (#7100)
sync: add oneshot::Receiver::is_empty() (#7153)
sync: add oneshot::Receiver::is_terminated() (#7152)

Fixed

fs: empty reads on File should not start a background read (#7139)
process: calling start_kill on exited child should not fail (#7160)
signal: fix CTRL_CLOSE, CTRL_LOGOFF, CTRL_SHUTDOWN on windows (#7122)
sync: properly handle panic during mpsc drop (#7094)

Changes

runtime: clean up magic number in registration set (#7112)
coop: make coop yield using waker defer strategy (#7185)
macros: make select! budget-aware (#7164)
net: panic when passing a blocking socket to from_std (#7166)
io: clean up buffer casts (#7142)

Changes to unstable APIs

rt: add before and after task poll callbacks (#7120)
tracing: make the task tracing API unstable public (#6972)

Documented

docs: fix nesting of sections in top-level docs (#7159)
fs: rename symlink and hardlink parameter names (#7143)
io: swap reader/writer in simplex doc test (#7176)
macros: docs about select! alternatives (#7110)
net: rename the argument for send_to (#7146)
process: add example for reading Child stdout (#7141)
process: clarify Child::kill behavior (#7162)
process: fix grammar of the ChildStdin struct doc comment (#7192)
runtime: consistently use worker_threads instead of core_threads (#7186)

`v1.43.0`: Tokio v1.43.0

Compare Source

1.43.0 (Jan 8th, 2025)

Added

net: add UdpSocket::peek methods (#7068)
net: add support for Haiku OS (#7042)
process: add Command::into_std() (#7014)
signal: add SignalKind::info on illumos (#6995)
signal: add support for realtime signals on illumos (#7029)

Fixed

io: don't call set_len before initializing vector in Blocking (#7054)
macros: suppress clippy::needless_return in #[tokio::main] (#6874)
runtime: fix thread parking on WebAssembly (#7041)

Changes

chore: use unsync loads for unsync_load (#7073)
io: use Buf::put_bytes in Repeat read impl (#7055)
task: drop the join waker of a task eagerly (#6986)

Changes to unstable APIs

metrics: improve flexibility of H2Histogram Configuration (#6963)
taskdump: add accessor methods for backtrace (#6975)

Documented

io: clarify ReadBuf::uninit allows initialized buffers as well (#7053)
net: fix ambiguity in TcpStream::try_write_vectored docs (#7067)
runtime: fix LocalRuntime doc links (#7074)
sync: extend documentation for watch::Receiver::wait_for (#7038)
sync: fix typos in OnceCell docs (#7047)

`v1.42.0`: Tokio v1.42.0

Compare Source

1.42.0 (Dec 3rd, 2024)

Added

io: add AsyncFd::{try_io, try_io_mut} (#6967)

Fixed

io: avoid ptr->ref->ptr roundtrip in RegistrationSet (#6929)
runtime: do not defer yield_now inside block_in_place (#6999)

Changes

io: simplify io readiness logic (#6966)

Documented

net: fix docs for tokio::net::unix::{pid_t, gid_t, uid_t} (#6791)
time: fix a typo in Instant docs (#6982)

uuid-rs/uuid (uuid)

`v1.15.1`

Compare Source

What's Changed

Guarantee v7 timestamp will never overflow by @KodrAus in https://github.com/uuid-rs/uuid/pull/811
Prepare for 1.15.1 release by @KodrAus in https://github.com/uuid-rs/uuid/pull/812

Full Changelog: uuid-rs/uuid@v1.15.0...v1.15.1

`v1.15.0`

Compare Source

What's Changed

Add a manual Debug implementation for NonNilUUid by @rick-de-water in https://github.com/uuid-rs/uuid/pull/808
Support higher precision, shiftable timestamps in V7 UUIDs by @KodrAus in https://github.com/uuid-rs/uuid/pull/809
Prepare for 1.15.0 release by @KodrAus in https://github.com/uuid-rs/uuid/pull/810

New Contributors

@rick-de-water made their first contribution in https://github.com/uuid-rs/uuid/pull/808

Full Changelog: uuid-rs/uuid@v1.14.0...v1.15.0

`v1.14.0`

Compare Source

What's Changed

Add FromStr impls to the fmt structs by @tysen in https://github.com/uuid-rs/uuid/pull/806
Prepare for 1.14.0 release by @KodrAus in https://github.com/uuid-rs/uuid/pull/807

New Contributors

@tysen made their first contribution in https://github.com/uuid-rs/uuid/pull/806

Full Changelog: uuid-rs/uuid@v1.13.2...v1.14.0

`v1.13.2`

Compare Source

What's Changed

Add a compile_error when no source of randomness is available on wasm32-unknown-unknown by @KodrAus in https://github.com/uuid-rs/uuid/pull/804
Prepare for 1.13.2 release by @KodrAus in https://github.com/uuid-rs/uuid/pull/805

Full Changelog: uuid-rs/uuid@1.13.1...v1.13.2

`v1.13.1`

Compare Source

What's Changed

Fix wasm32 with atomics by @bushrat011899 in https://github.com/uuid-rs/uuid/pull/797
Prepare for 1.13.1 release by @KodrAus in https://github.com/uuid-rs/uuid/pull/799

New Contributors

@bushrat011899 made their first contribution in https://github.com/uuid-rs/uuid/pull/797

Full Changelog: uuid-rs/uuid@1.13.0...1.13.1

`v1.13.0`

Compare Source

⚠️ Potential Breakage

This release updates our version of getrandom to 0.3 and rand to 0.9. It is a potentially breaking change for the following users:

no-std users who enable the `rng` feature

uuid still uses getrandom by default on these platforms. Upgrade your version of getrandom and follow its new docs on configuring a custom backend.

`wasm32-unknown-unknown` users who enable the `rng` feature without the `js` feature

Upgrade your version of getrandom and follow its new docs on configuring a backend.

You'll also need to enable the rng-getrandom or rng-rand feature of uuid to force it to use getrandom as its backend:

[dependencies.uuid]
version = "1.13.0"
- features = ["v4"]
+ features = ["v4", "rng-getrandom"]

[dependencies.getrandom]
version = "0.3"

If you're on wasm32-unknown-unknown and using the js feature of uuid you shouldn't see any breakage. We've kept this behavior by vendoring in getrandom's web-based backend when the js feature is enabled.

What's Changed

Update getrandom to 0.3 and rand to 0.9 by @KodrAus in https://github.com/uuid-rs/uuid/pull/793
Support forcing getrandom on wasm32-unknown-unknown without JavaScript by @KodrAus in https://github.com/uuid-rs/uuid/pull/794
Prepare for 1.13.0 release by @KodrAus in https://github.com/uuid-rs/uuid/pull/795

Full Changelog: uuid-rs/uuid@1.12.1...1.13.0

`v1.12.1`

Compare Source

What's Changed

Fix links to namespaces in documentation by @cstyles in https://github.com/uuid-rs/uuid/pull/789
use inherent to_be_bytes and to_le_bytes methods by @Vrtgs in https://github.com/uuid-rs/uuid/pull/788
Reduce bitshifts in from_u64_pair by @KodrAus in https://github.com/uuid-rs/uuid/pull/790
prepare for 1.12.1 release by @KodrAus in https://github.com/uuid-rs/uuid/pull/791

New Contributors

@cstyles made their first contribution in https://github.com/uuid-rs/uuid/pull/789
@Vrtgs made their first contribution in https://github.com/uuid-rs/uuid/pull/788

Full Changelog: uuid-rs/uuid@1.12.0...1.12.1

`v1.12.0`

Compare Source

⚠️ Possible Breakage

This release includes additional PartialEq implementations on Uuid, which can break inference in some cases.

What's Changed

feat: Add NonZeroUuid type for optimized Option<Uuid> representation by @ab22593k in https://github.com/uuid-rs/uuid/pull/779
Finalize NonNilUuid by @KodrAus in https://github.com/uuid-rs/uuid/pull/783
Prepare for 1.12.0 release by @KodrAus in https://github.com/uuid-rs/uuid/pull/784

New Contributors

@ab22593k made their first contribution in https://github.com/uuid-rs/uuid/pull/779

Full Changelog: uuid-rs/uuid@1.11.1...1.12.0

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

cgwalters · 2024-11-11T17:06:32Z

Hmm this is a big mix of stuff...including things we don't want for now such as bumping fedora:41 -> fedora:42 (need to figure out how to teach renovate about pre-release versions there).

The biggest problem here is at least our renovate config doesn't understand Rust semver compatibility rules; the indexmap, uuid etc. bumps should have gone in with the other PR type.

Digging in I think we're inheriting from this global config
https://github.com/platform-engineering-org/.github/blob/main/default.json

platform-engineering-bot · 2025-03-06T18:36:15Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --package [email protected] --precise 1.0.1
    Updating crates.io index
error: failed to select a version for the requirement `rustix = "^0.38"`
candidate versions found which didn't match: 1.0.1
location searched: crates.io index
required by package `cap-std-ext v4.0.5`
    ... which satisfies dependency `cap-std-ext = "^4.0.3"` (locked to 4.0.5) of package `bootc-lib v1.1.6 (/builds/platform-engineering-org/renovate-runners/github-com/renovate/repos/github/containers/bootc/lib)`
    ... which satisfies path dependency `bootc-lib` (locked to 1.1.6) of package `bootc v0.1.9 (/builds/platform-engineering-org/renovate-runners/github-com/renovate/repos/github/containers/bootc/cli)`

cgwalters · 2025-03-06T18:41:02Z

Hmm, dependabot shouldn't be trying to roll in a semver-incompat version of rustix here (though it's cool they bumped to 1.0!)

Signed-off-by: Platform Engineering Bot <[email protected]> Signed-off-by: Colin Walters <[email protected]>

p5 · 2025-08-08T14:16:53Z

Hey @cgwalters
Please can this PR be closed & the branch deleted.
This will allow Renovate to take over from next week.

Whenever anybody makes an update to a branch managed by Renovate (i.e. rebasing), Renovate is no longer able to push to the branch.

cgwalters · 2025-08-08T17:43:03Z

Thanks for looking into this!

$ git push origin :renovate/all
To github.com:bootc-dev/bootc.git
 - [deleted]           renovate/all

platform-engineering-bot force-pushed the renovate/all branch 2 times, most recently from 4e66595 to 5e9001b Compare November 11, 2024 18:38

platform-engineering-bot force-pushed the renovate/all branch 10 times, most recently from e24dc01 to 3638a4d Compare November 22, 2024 19:15

platform-engineering-bot force-pushed the renovate/all branch 7 times, most recently from 83e091a to 8e64751 Compare December 3, 2024 13:57

platform-engineering-bot force-pushed the renovate/all branch 10 times, most recently from d958b2f to dfc9f90 Compare December 7, 2024 15:45

platform-engineering-bot force-pushed the renovate/all branch 8 times, most recently from 4826025 to ea77d51 Compare March 6, 2025 18:36

platform-engineering-bot force-pushed the renovate/all branch 6 times, most recently from 37142d6 to e354451 Compare March 7, 2025 20:25

renovate bot force-pushed the renovate/all branch from e354451 to f5bf216 Compare June 9, 2025 00:36

github-actions bot added the area/system-reinstall-bootc Issues related to system-reinstall-botoc label Jun 9, 2025

renovate bot force-pushed the renovate/all branch from f5bf216 to c8947cf Compare June 16, 2025 03:29

renovate bot force-pushed the renovate/all branch 2 times, most recently from 01432bc to 02ee364 Compare July 7, 2025 00:58

p5 mentioned this pull request Jul 11, 2025

Switch to dependabot #1338

Closed

cgwalters force-pushed the renovate/all branch from 02ee364 to fe7d0a9 Compare July 11, 2025 21:05

cgwalters approved these changes Jul 11, 2025

View reviewed changes

fix(deps): update all dependencies

a6bf0b2

Signed-off-by: Platform Engineering Bot <[email protected]> Signed-off-by: Colin Walters <[email protected]>

cgwalters force-pushed the renovate/all branch from fe7d0a9 to a6bf0b2 Compare July 12, 2025 01:32

cgwalters closed this Aug 8, 2025

cgwalters deleted the renovate/all branch August 8, 2025 17:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all dependencies #894

fix(deps): update all dependencies #894

Uh oh!

platform-engineering-bot commented Nov 11, 2024 •

edited by cgwalters

Loading

Uh oh!

cgwalters commented Nov 11, 2024

Uh oh!

platform-engineering-bot commented Mar 6, 2025 •

edited

Loading

Uh oh!

cgwalters commented Mar 6, 2025

Uh oh!

p5 commented Aug 8, 2025 •

edited

Loading

Uh oh!

cgwalters commented Aug 8, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

fix(deps): update all dependencies #894

fix(deps): update all dependencies #894

Uh oh!

Conversation

platform-engineering-bot commented Nov 11, 2024 • edited by cgwalters Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

v1.0.0: 1.0.0

v1.44.0: Tokio v1.44.0

1.44.0 (March 7th, 2025)

Added

Fixed

Changes

Changes to unstable APIs

Documented

v1.43.0: Tokio v1.43.0

1.43.0 (Jan 8th, 2025)

Added

Fixed

Changes

Changes to unstable APIs

Documented

v1.42.0: Tokio v1.42.0

1.42.0 (Dec 3rd, 2024)

Added

Fixed

Changes

Documented

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

⚠️ Potential Breakage

no-std users who enable the rng feature

wasm32-unknown-unknown users who enable the rng feature without the js feature

What's Changed

What's Changed

New Contributors

⚠️ Possible Breakage

What's Changed

New Contributors

Configuration

Uh oh!

cgwalters commented Nov 11, 2024

Uh oh!

platform-engineering-bot commented Mar 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: Cargo.lock

Uh oh!

cgwalters commented Mar 6, 2025

Uh oh!

p5 commented Aug 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cgwalters commented Aug 8, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

platform-engineering-bot commented Nov 11, 2024 •

edited by cgwalters

Loading

`v1.0.0`: 1.0.0

`v1.44.0`: Tokio v1.44.0

`v1.43.0`: Tokio v1.43.0

`v1.42.0`: Tokio v1.42.0

no-std users who enable the `rng` feature

`wasm32-unknown-unknown` users who enable the `rng` feature without the `js` feature

platform-engineering-bot commented Mar 6, 2025 •

edited

Loading

p5 commented Aug 8, 2025 •

edited

Loading