Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the crates-io group with 3 updates #166

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 24, 2025

Bumps the crates-io group with 3 updates: ring, rustls and tempfile.

Updates ring from 0.17.8 to 0.17.11

Release notes

Sourced from ring's releases.

0.17.11

This is an administrative release, which is functionally equivalent to 0.17.10. It changes the crate repository to https://github.com/ctz/ring where this project will receive future security maintenance.

0.17.10

Full Changelog: ctz/ring@0.17.9...0.17.10

0.17.9

Full Changelog: ctz/ring@0.17.8...0.17.9

Commits

Updates rustls from 0.23.22 to 0.23.23

Commits
  • 7742147 unbuffered: introduce PeerClosed state
  • 7abb149 tests/unbuffered: refactor
  • 1963cc7 Bump version to 0.23.23
  • ad5a31b tests: reuse SingleCertAndKey
  • 591c0c1 crypto: expose SingleCertAndKey
  • 82e1688 client: use SingleCertAndKey for with_client_auth_cert()
  • b0cc4df crypto: add CertifiedKey::from_der()
  • be2865a crypto: simplify SingleCertAndKey construction with OCSP
  • 82c3c2d crypto: use From impl to construct SingleCertAndKey
  • 27551e1 Move SingleCertAndKey to crypto::signer
  • Additional commits viewable in compare view

Updates tempfile from 3.16.0 to 3.17.1

Changelog

Sourced from tempfile's changelog.

3.17.1

  • Fix build with windows-sys 0.52. Unfortunately, we have no CI for older windows-sys versions at the moment...

3.17.0

  • Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in Builder::make_in (when creating temporary files of arbitrary types).
  • Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test.
  • When reseeding with getrandom, use platform (e.g., CPU) specific randomness sources where possible.
  • Clarify some documentation.
  • Unlink unnamed temporary files on windows immediately when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible.
Commits
  • 714a259 chore: release 3.17.1
  • 78309ed fix: cast handle to the windows crate HANDLE (#332)
  • 6e7d167 chore: release 3.17.0
  • 3718075 doc: remove incorrect documentation about windows and open files
  • 461369f feat: delete unnamed temporary files on windows immediately
  • 78d30a2 doc: clarify "inner file will be deleted" documentation (#329)
  • 0fe11c4 doc: document how to "keep" temporary files/dirs after creation (#328)
  • 35e0629 feat: simplify getrandom call (#325)
  • 1e5059f fix: handle TLS deallocation (#324)
  • c7b2e1a chore: simplify reborrow
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the crates-io group with 3 updates: [ring](https://github.com/ctz/ring), [rustls](https://github.com/rustls/rustls) and [tempfile](https://github.com/Stebalien/tempfile).


Updates `ring` from 0.17.8 to 0.17.11
- [Release notes](https://github.com/ctz/ring/releases)
- [Commits](ctz/ring@0.17.8...0.17.11)

Updates `rustls` from 0.23.22 to 0.23.23
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.22...v/0.23.23)

Updates `tempfile` from 3.16.0 to 3.17.1
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.16.0...v3.17.1)

---
updated-dependencies:
- dependency-name: ring
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crates-io
- dependency-name: rustls
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: crates-io
- dependency-name: tempfile
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: crates-io
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Feb 24, 2025
@djc djc closed this Feb 24, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 24, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/cargo/crates-io-1f4bfea435 branch February 24, 2025 06:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant