Upgrade a few more dependencies (#1284)

Author: svix-jplatte

.github/workflows/bridge-ci.yml

@@ -72,7 +72,6 @@ jobs:
           curl \
           libssl-dev=* \
           pkg-config=0.29.* \
-          protobuf-compiler=* \
           zlib1g-dev=1:*
 
     - name: Build

.github/workflows/bridge-security.yml

@@ -11,11 +11,13 @@ on:
       - 'bridge/**/Cargo.toml'
       - 'bridge/**/Cargo.lock'
       - '.github/workflows/bridge-security.yml'
+      - 'deny.toml'
   pull_request:
     paths:
       - 'bridge/**/Cargo.toml'
       - 'bridge/**/Cargo.lock'
       - '.github/workflows/bridge-security.yml'
+      - 'deny.toml'
 
 jobs:
   security_audit:

.github/workflows/server-security.yml

@@ -11,11 +11,13 @@ on:
       - 'server/**/Cargo.toml'
       - 'server/**/Cargo.lock'
       - '.github/workflows/server-security.yml'
+      - 'deny.toml'
   pull_request:
     paths:
       - 'server/**/Cargo.toml'
       - 'server/**/Cargo.lock'
       - '.github/workflows/server-security.yml'
+      - 'deny.toml'
 
 jobs:
   security_audit:

bridge/Cargo.lock

@@ -7,7 +7,6 @@ RUN apt-get update && apt-get install -y \
     curl=7.* \
     libssl-dev=* \
     pkg-config=0.29.* \
-    protobuf-compiler=* \
     zlib1g-dev=1:* \
     --no-install-recommends
 

bridge/Dockerfile

@@ -12,9 +12,9 @@ axum = { version = "0.6", features = ["macros"] }
 enum_dispatch = "0.3"
 http = "0.2"
 once_cell = "1.18.0"
-opentelemetry = "0.21.0"
-opentelemetry_sdk = { version = "0.21.2", features = ["metrics", "rt-tokio"] }
-opentelemetry-otlp = { version = "0.14.0", features = ["metrics", "grpc-tonic", "http-proto", "reqwest-client"] }
+opentelemetry = "0.22.0"
+opentelemetry_sdk = { version = "0.22.1", features = ["metrics", "rt-tokio"] }
+opentelemetry-otlp = { version = "0.15.0", features = ["metrics", "grpc-tonic", "http-proto", "reqwest-client"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 serde_yaml = "0.9"
@@ -23,7 +23,7 @@ svix-bridge-plugin-queue = { optional=true, path = "../svix-bridge-plugin-queue"
 svix-bridge-types = { path = "../svix-bridge-types" }
 tokio = { version = "1", features = ["full"] }
 tracing = "0.1"
-tracing-opentelemetry = "0.22.0"
+tracing-opentelemetry = "0.23.0"
 tracing-subscriber = { version = "0.3", features = ["env-filter", "fmt", "json"] }
 # N.b. for newer deno versions (like this) the runtimes must be retained and reused since they will leak memory if you
 # create/drop them.

bridge/svix-bridge/Cargo.toml

@@ -8,7 +8,7 @@ use clap::Parser;
 use once_cell::sync::Lazy;
 use opentelemetry_otlp::WithExportConfig;
 use opentelemetry_sdk::{
-    metrics::{data::Temporality, reader::TemporalitySelector, InstrumentKind, MeterProvider},
+    metrics::{data::Temporality, reader::TemporalitySelector, InstrumentKind, SdkMeterProvider},
     runtime::Tokio,
 };
 use svix_bridge_types::{SenderInput, TransformerJob};
@@ -144,7 +144,7 @@ impl TemporalitySelector for DeltaTemporalitySelector {
     }
 }
 
-pub fn setup_metrics(cfg: &Config) -> Option<MeterProvider> {
+pub fn setup_metrics(cfg: &Config) -> Option<SdkMeterProvider> {
     cfg.opentelemetry.as_ref().map(|otel_cfg| {
         let exporter = opentelemetry_otlp::new_exporter()
             .tonic()

bridge/svix-bridge/src/main.rs

@@ -9,7 +9,7 @@ targets = [
 db-path = "~/.cargo/advisory-db"
 db-urls = ["https://github.com/rustsec/advisory-db"]
 vulnerability = "deny"
-unmaintained = "deny"
+unmaintained = "warn"
 yanked = "deny"
 notice = "warn"
 ignore = [