Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Weekly cargo update of dependencies #523

Merged
merged 5 commits into from
Sep 6, 2023
Merged

Weekly cargo update of dependencies #523

merged 5 commits into from
Sep 6, 2023

Conversation

obi1kenobi
Copy link
Owner

@obi1kenobi obi1kenobi commented Aug 28, 2023

Automation to keep dependencies in Cargo.lock current.

The following is the output from cargo update:

    Updating addr2line v0.20.0 -> v0.21.0
    Updating aho-corasick v1.0.4 -> v1.0.5
    Updating anstyle v1.0.1 -> v1.0.2
    Updating async-compression v0.4.1 -> v0.4.2
    Updating backtrace v0.3.68 -> v0.3.69
    Updating base64 v0.21.2 -> v0.21.3
    Updating bstr v1.6.0 -> v1.6.2
    Updating clap v4.4.2 -> v4.3.24
    Updating clap_builder v4.4.2 -> v4.3.24
    Updating clap_derive v4.4.2 -> v4.3.12
    Updating encoding_rs v0.8.32 -> v0.8.33
    Updating errno v0.3.2 -> v0.3.3
      Adding faster-hex v0.8.0
    Updating gimli v0.27.3 -> v0.28.0
    Updating gix-bitmap v0.2.6 -> v0.2.7
    Updating gix-command v0.2.8 -> v0.2.9
    Updating gix-date v0.7.2 -> v0.7.4
    Updating gix-packetline v0.16.4 -> v0.16.5
    Updating gix-packetline-blocking v0.16.4 -> v0.16.5
    Updating gix-quote v0.4.6 -> v0.4.7
    Updating h2 v0.3.20 -> v0.3.21
    Updating handlebars v4.3.7 -> v4.4.0
    Removing is-terminal v0.4.9
    Updating memchr v2.5.0 -> v2.6.3
    Updating object v0.31.1 -> v0.32.1
    Updating pest v2.7.2 -> v2.7.3
    Updating pest_derive v2.7.2 -> v2.7.3
    Updating pest_generator v2.7.2 -> v2.7.3
    Updating pest_meta v2.7.2 -> v2.7.3
    Updating pin-project-lite v0.2.12 -> v0.2.13
    Updating prodash v25.0.1 -> v25.0.2
    Updating regex v1.9.3 -> v1.9.5
    Updating regex-automata v0.3.6 -> v0.3.8
    Updating regex-syntax v0.7.4 -> v0.7.5
    Updating reqwest v0.11.18 -> v0.11.20
    Updating rustix v0.38.8 -> v0.38.11
    Updating rustls v0.21.6 -> v0.21.7
    Updating rustls-webpki v0.101.3 -> v0.101.4
    Updating serde v1.0.186 -> v1.0.188
    Updating serde_derive v1.0.186 -> v1.0.188
    Updating slab v0.4.8 -> v0.4.9
    Updating syn v2.0.29 -> v2.0.31
    Updating thiserror v1.0.47 -> v1.0.48
    Updating thiserror-impl v1.0.47 -> v1.0.48
    Updating time v0.3.27 -> v0.3.28
    Updating time-macros v0.2.13 -> v0.2.14
    Updating url v2.4.0 -> v2.4.1
    Removing webpki v0.22.0
    Updating webpki-roots v0.22.6 -> v0.25.2
    Updating winnow v0.5.14 -> v0.5.15
    Removing winreg v0.10.1

@github-actions github-actions bot enabled auto-merge (squash) August 28, 2023 03:41
    Updating addr2line v0.20.0 -> v0.21.0
    Updating aho-corasick v1.0.4 -> v1.0.5
    Updating anstream v0.3.2 -> v0.5.0
    Updating anstyle v1.0.1 -> v1.0.2
    Updating anstyle-wincon v1.0.2 -> v2.1.0
    Updating async-compression v0.4.1 -> v0.4.2
    Updating backtrace v0.3.68 -> v0.3.69
    Updating base64 v0.21.2 -> v0.21.3
    Updating bstr v1.6.0 -> v1.6.2
    Updating clap v4.3.23 -> v4.4.2
    Updating clap_builder v4.3.23 -> v4.4.2
    Updating clap_derive v4.3.12 -> v4.4.2
    Updating clap_lex v0.5.0 -> v0.5.1
    Updating encoding_rs v0.8.32 -> v0.8.33
    Updating errno v0.3.2 -> v0.3.3
      Adding faster-hex v0.8.0
    Updating gimli v0.27.3 -> v0.28.0
    Updating gix-bitmap v0.2.6 -> v0.2.7
    Updating gix-command v0.2.8 -> v0.2.9
    Updating gix-date v0.7.2 -> v0.7.4
    Updating gix-packetline v0.16.4 -> v0.16.5
    Updating gix-packetline-blocking v0.16.4 -> v0.16.5
    Updating gix-quote v0.4.6 -> v0.4.7
    Updating h2 v0.3.20 -> v0.3.21
    Updating handlebars v4.3.7 -> v4.4.0
    Updating human-panic v1.1.5 -> v1.2.0
    Removing is-terminal v0.4.9
    Updating memchr v2.5.0 -> v2.6.3
    Updating object v0.31.1 -> v0.32.1
    Updating pest v2.7.2 -> v2.7.3
    Updating pest_derive v2.7.2 -> v2.7.3
    Updating pest_generator v2.7.2 -> v2.7.3
    Updating pest_meta v2.7.2 -> v2.7.3
    Updating pin-project-lite v0.2.12 -> v0.2.13
    Updating prodash v25.0.1 -> v25.0.2
    Updating regex v1.9.3 -> v1.9.5
    Updating regex-automata v0.3.6 -> v0.3.8
    Updating regex-syntax v0.7.4 -> v0.7.5
    Updating reqwest v0.11.18 -> v0.11.20
    Updating rustix v0.38.8 -> v0.38.11
    Updating rustls v0.21.6 -> v0.21.7
    Updating rustls-webpki v0.101.3 -> v0.101.4
    Updating serde v1.0.186 -> v1.0.188
    Updating serde_derive v1.0.186 -> v1.0.188
    Updating slab v0.4.8 -> v0.4.9
    Updating syn v2.0.29 -> v2.0.31
    Updating thiserror v1.0.47 -> v1.0.48
    Updating thiserror-impl v1.0.47 -> v1.0.48
    Updating time v0.3.27 -> v0.3.28
    Updating time-macros v0.2.13 -> v0.2.14
    Updating url v2.4.0 -> v2.4.1
    Removing webpki v0.22.0
    Updating webpki-roots v0.22.6 -> v0.25.2
    Updating winnow v0.5.14 -> v0.5.15
    Removing winreg v0.10.1
@c-git
Copy link
Contributor

c-git commented Sep 4, 2023

@obi1kenobi I installed the tool using --locked as recommended by the readme and got the following warning (among the others about download and compile)

warning: package `hermit-abi v0.3.1` in Cargo.lock is yanked in registry `crates-io`, consider running without --locked

@obi1kenobi
Copy link
Owner Author

@obi1kenobi I installed the tool using --locked as recommended by the readme and got the following warning (among the others about download and compile)

warning: package `hermit-abi v0.3.1` in Cargo.lock is yanked in registry `crates-io`, consider running without --locked

Thanks for the heads-up. I have my hands a bit full at the moment but I'll look to release an updated version of cargo-semver-checks ASAP. I'm not too worried about that yank since I'd be shocked if any of that crate's code ends up being in use — it's an ABI for an unikernel that doesn't at all related to what cargo-semver-checks does. It's probably a transitive dependency of something, possibly even something in our dev dependencies.

Installing without --locked is possible, but it has a small chance of producing a broken build due to (ironically) semver violations. It isn't "officially" supported due to limited bandwidth, but it should still work most of the time.

@c-git
Copy link
Contributor

c-git commented Sep 4, 2023

Ok no rush. It also works without locked. Well it at least worked on my crate locally.

@github-actions github-actions bot merged commit 69a35bc into main Sep 6, 2023
32 of 33 checks passed
@github-actions github-actions bot deleted the cargo_update branch September 6, 2023 03:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants