Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the backend group with 9 updates #443

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 4, 2023

Bumps the backend group with 9 updates:

Package From To
askama_axum 0.3.0 0.4.0
async-channel 2.1.0 2.1.1
axum 0.6.20 0.7.2
clap 4.4.8 4.4.11
config 0.13.3 0.13.4
ignore 0.4.20 0.4.21
jsonwebtoken 9.1.0 9.2.0
openssl 0.10.59 0.10.60
tower-http 0.4.4 0.5.0

Updates askama_axum from 0.3.0 to 0.4.0

Release notes

Sourced from askama_axum's releases.

0.4.0

Roughly six months after announcing the first public version of Askama, 0.4.0 feels like a large update.

There are some breaking changes compared to the 0.3.0 series:

  • &, < and > are replaced with HTML character entities by default (see #23)
  • Run-time errors are now returned via custom Error and Result types

Other noteworthy new features include:

  • Optional integrations for Rocket and Iron (see examples for Rocket and Iron)
  • Support for defining variables, user-defined filters, includes and macros
  • Inheriting templates no longer have to use _parent to refer to fields from the parent context
  • Template implementations now automatically implement Display
  • Better robustness and more explicit error handling through panics at compile time
  • Much faster compilation in some edge cases with nested binary operators

Special thanks to those who have contributed to this release, in particular @​anowell and @​defyrlt.

Please post your feedback or questions as an issue or join the chat!

0.3.4

  • Add support for chained attributes (fixes #22)
  • Fix edge cases in content literal parser (fixes #24)

0.3.2

  • No longer need to use std; or use askama; in template modules (#17)
  • Add lower, trim and upper filters (#16, #19)
  • Documentation improvements, including an explanation of inheritance pitfalls

0.3.1

  • Prevent errors due to type parameter defaults in generic types (#12)
  • Some documentation improvements
Commits
  • f58e26c Update dependency on error-chain to 0.11
  • 2bd1745 Add package metadata for new askama_shared crate
  • 27ba9ae Add badge for Gitter chat to README
  • 9c4f37c Decrease coupling with Rocket in generated code
  • 0129365 Add documentation on optional features
  • 6003615 Allow setting an extension with source attributes
  • ddcc045 Make path and source attributes mutually exclusive
  • 09514f0 Tighten up and expand documentation on variables
  • 697f461 Cover all template() attribute options
  • 832c23b Slightly extend introduction to creating templates
  • Additional commits viewable in compare view

Updates async-channel from 2.1.0 to 2.1.1

Release notes

Sourced from async-channel's releases.

v2.1.1

  • Bump event-listener to v4.0.0. (#73)
Changelog

Sourced from async-channel's changelog.

Version 2.1.1

  • Bump event-listener to v4.0.0. (#73)
Commits

Updates axum from 0.6.20 to 0.7.2

Release notes

Sourced from axum's releases.

axum-extra - v0.7.2

  • added: Implement IntoResponse for MultipartError (#1861)

#1861: tokio-rs/axum#1861

axum - v0.7.2

  • added: Add axum::body::to_bytes (#2373)
  • fixed: Gracefully handle accept errors in serve (#2400)

#2373: tokio-rs/axum#2373 #2400: tokio-rs/axum#2400

axum-extra - v0.7.1

  • Updated to latest axum-macros

axum - v0.7.1

  • fix: Fix readme.

axum-extra - v0.7.0

  • breaking: Remove the spa feature which should have been removed in 0.6.0 (#1802)
  • added: Add Multipart. This is similar to axum::extract::Multipart except that it enforces field exclusivity at runtime instead of compile time, as this improves usability (#1692)
  • added: Implement Clone for CookieJar, PrivateCookieJar and SignedCookieJar (#1808)
  • fixed: Add #[must_use] attributes to types that do nothing unless used (#1809)

#1692: tokio-rs/axum#1692 #1802: tokio-rs/axum#1802 #1808: tokio-rs/axum#1808 #1809: tokio-rs/axum#1809

axum - v0.7.0

  • breaking: Update public dependencies. axum now requires
  • breaking: axum now requires tower-http 0.5
  • breaking: Remove deprecated WebSocketUpgrade::max_send_queue
  • breaking: The following types/traits are no longer generic over the request body (i.e. the B type param has been removed) (#1751 and #1789):
    • FromRequestParts
    • FromRequest
    • HandlerService
    • HandlerWithoutStateExt
    • Handler
    • LayeredFuture
    • Layered
    • MethodRouter
    • Next
    • RequestExt

... (truncated)

Commits

Updates clap from 4.4.8 to 4.4.11

Release notes

Sourced from clap's releases.

v4.4.11

[4.4.11] - 2023-12-04

Features

  • Add Command::mut_group

v4.4.10

[4.4.10] - 2023-11-28

Documentation

  • Link out to changelog
  • Cross link derive's attribute reference to derive tutorial

v4.4.9

[4.4.9] - 2023-11-27

Fixes

  • (help) Show correct Command::about under flattened headings
  • (help) Respect hide when flattening subcommands
Changelog

Sourced from clap's changelog.

[4.4.11] - 2023-12-04

Features

  • Add Command::mut_group

[4.4.10] - 2023-11-28

Documentation

  • Link out to changelog
  • Cross link derive's attribute reference to derive tutorial

[4.4.9] - 2023-11-27

Fixes

  • (help) Show correct Command::about under flattened headings
  • (help) Respect hide when flattening subcommands
Commits

Updates config from 0.13.3 to 0.13.4

Changelog

Sourced from config's changelog.

0.13.4 - 2023-11-22

  • Relaxed the MSRV to 1.56.0 for this release. Please have a look at #495 for details
  • Backport of the following patches from PR #465:
    • [aa63d2dbbcc13fbdfa846185d54d87d7822e2509]
    • [831102fe0ffd5c7fe475efe5f379c710d201f165]
    • [147e6c7275b65b6a74eaec9c05b317673e61084e]
    • [ed6a3c9882fbc43eae9313ab1801610e49af863f] to fix nested arrays (see the related bug report for details).

#495: mehcode/config-rs#495 #465: mehcode/config-rs#465 [aa63d2dbbcc13fbdfa846185d54d87d7822e2509]: rust-cli/config-rs@aa63d2d [831102fe0ffd5c7fe475efe5f379c710d201f165]: rust-cli/config-rs@831102f [147e6c7275b65b6a74eaec9c05b317673e61084e]: rust-cli/config-rs@147e6c7 [ed6a3c9882fbc43eae9313ab1801610e49af863f]: rust-cli/config-rs@ed6a3c9

Commits
  • a383879 Merge pull request #500 from matthiasbeyer/release-0.13/changelog
  • 750c8d3 Update version: 0.13.3 -> 0.13.4
  • 8bab2ac Add changelog entry for 0.13.4
  • db754f5 Merge pull request #486 from ijackson/nested-array-backport
  • 08197e4 Merge pull request #495 from mehcode/chore/0.13.x-min-versions
  • eb46fd6 ser: sequences: Test a more comprehensive round-trip
  • 9bed600 ser: sequences: Rework, fixing handling of nested arrays
  • 43ac661 ser: sequences: Introduce SeqSerializer newtype
  • 319a9e2 ser: sequences: Centralise
  • bedfb5d chore(CI): Relax MSRV to 1.56.1
  • Additional commits viewable in compare view

Updates ignore from 0.4.20 to 0.4.21

Commits

Updates jsonwebtoken from 9.1.0 to 9.2.0

Changelog

Sourced from jsonwebtoken's changelog.

9.2.0 (2023-12-01)

  • Add an option to not validate aud in the Validation struct
  • Get the current timestamp in wasm without using std
  • Update ring to 0.17
Commits

Updates openssl from 0.10.59 to 0.10.60

Release notes

Sourced from openssl's releases.

openssl-v0.10.60

What's Changed

Full Changelog: sfackler/rust-openssl@openssl-v0.10.59...openssl-v0.10.60

Commits
  • 8f4b97a Merge pull request #2104 from alex/bump-for-release
  • df66283 Release openssl v0.10.60 and openssl-sys v0.9.96
  • 1a09dc8 Merge pull request #2102 from sfackler/ex-leak
  • b0a1da5 Merge branch 'master' into ex-leak
  • f456b60 Merge pull request #2099 from alex/deprecate-store-ref-objects
  • a8413b8 Merge pull request #2100 from alex/symm-update-unchecked
  • a92c237 clippy
  • e839496 Don't leak when overwriting ex data
  • 602d38d Added update_unchecked to symm::Crypter
  • cf9681a fixes #2096 -- deprecate X509StoreRef::objects, it is unsound
  • Additional commits viewable in compare view

Updates tower-http from 0.4.4 to 0.5.0

Release notes

Sourced from tower-http's releases.

v0.5.0

Changed

  • Bump Minimum Supported Rust Version to 1.66 (#433)
  • Update to http-body 1.0 (#348)
  • Update to http 1.0 (#348)
  • Preserve service error type in RequestDecompression (#368)

Fixed

  • Accepts range headers with ranges where the end of range goes past the end of the document by bumping http-range-header to 0.4

#418: tower-rs/tower-http#418 #433: tower-rs/tower-http#433 #348: tower-rs/tower-http#348 #368: tower-rs/tower-http#368

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the backend group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [askama_axum](https://github.com/djc/askama) | `0.3.0` | `0.4.0` |
| [async-channel](https://github.com/smol-rs/async-channel) | `2.1.0` | `2.1.1` |
| [axum](https://github.com/tokio-rs/axum) | `0.6.20` | `0.7.2` |
| [clap](https://github.com/clap-rs/clap) | `4.4.8` | `4.4.11` |
| [config](https://github.com/mehcode/config-rs) | `0.13.3` | `0.13.4` |
| [ignore](https://github.com/BurntSushi/ripgrep) | `0.4.20` | `0.4.21` |
| [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | `9.1.0` | `9.2.0` |
| [openssl](https://github.com/sfackler/rust-openssl) | `0.10.59` | `0.10.60` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.4.4` | `0.5.0` |


Updates `askama_axum` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/djc/askama/releases)
- [Commits](djc/askama@0.3.0...0.4.0)

Updates `async-channel` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/smol-rs/async-channel/releases)
- [Changelog](https://github.com/smol-rs/async-channel/blob/master/CHANGELOG.md)
- [Commits](smol-rs/async-channel@v2.1.0...v2.1.1)

Updates `axum` from 0.6.20 to 0.7.2
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](tokio-rs/axum@axum-v0.6.20...axum-v0.7.2)

Updates `clap` from 4.4.8 to 4.4.11
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@v4.4.8...v4.4.11)

Updates `config` from 0.13.3 to 0.13.4
- [Changelog](https://github.com/mehcode/config-rs/blob/v0.13.4/CHANGELOG.md)
- [Commits](rust-cli/config-rs@0.13.3...v0.13.4)

Updates `ignore` from 0.4.20 to 0.4.21
- [Release notes](https://github.com/BurntSushi/ripgrep/releases)
- [Changelog](https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md)
- [Commits](https://github.com/BurntSushi/ripgrep/commits)

Updates `jsonwebtoken` from 9.1.0 to 9.2.0
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v9.1.0...v9.2.0)

Updates `openssl` from 0.10.59 to 0.10.60
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](sfackler/rust-openssl@openssl-v0.10.59...openssl-v0.10.60)

Updates `tower-http` from 0.4.4 to 0.5.0
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.4.4...tower-http-0.5.0)

---
updated-dependencies:
- dependency-name: askama_axum
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: async-channel
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: axum
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: clap
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: config
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: ignore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: jsonwebtoken
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: openssl
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: tower-http
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Dec 4, 2023
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 11, 2023

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 11, 2023
@dependabot dependabot bot deleted the dependabot/cargo/backend-2b9d48074d branch December 11, 2023 19:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants