fix(deps): update all

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
async-trait	dependencies	patch	0.1.83 -> 0.1.88
bytes	dependencies	minor	1.9.0 -> 1.10.1
http-body-util	dependencies	patch	0.1.2 -> 0.1.3
hyper (source)	dependencies	minor	1.5.2 -> 1.6.0
hyper-util (source)	dependencies	patch	0.1.10 -> 0.1.11
jsonrpsee (source)	dependencies	patch	0.24.7 -> 0.24.9
markdown	dependencies	patch	1.0.0-alpha.21 -> 1.0.0-alpha.23
mockito	dev-dependencies	minor	1.6.1 -> 1.7.0
once_cell	dependencies	minor	1.20.2 -> 1.21.3
quick-xml	dependencies	patch	0.37.1 -> 0.37.4
rustls	dependencies	patch	0.23.20 -> 0.23.26
rustls-platform-verifier	dependencies	patch	0.5.0 -> 0.5.1
serde_json	dependencies	patch	1.0.134 -> 1.0.140
tempfile (source)	dev-dependencies	minor	3.14.0 -> 3.19.1
tokio (source)	dependencies	minor	1.42.0 -> 1.44.2

---

Release Notes

dtolnay/async-trait (async-trait)

v0.1.88

Compare Source

• Fix lifetime bounding on generic parameters that have cfg (#​289)

v0.1.87

Compare Source

• Documentation improvements

v0.1.86

Compare Source

• Documentation improvements

v0.1.85

Compare Source

• Omit Self: 'async_trait bound in impl when not needed by signature (#​284)

v0.1.84

Compare Source

• Support impl Trait in return type (#​282)

tokio-rs/bytes (bytes)

v1.10.1

Compare Source

Fixed

• Fix memory leak when using to_vec with Bytes::from_owner (#​773)

v1.10.0

Compare Source

Added

• Add feature to support platforms without atomic CAS (#​467)
• try_get_* methods for Buf trait (#​753)
• Implement Buf::chunks_vectored for Take (#​617)
• Implement Buf::chunks_vectored for VecDeque<u8> (#​708)

Fixed

• Remove incorrect guarantee for chunks_vectored (#​754)
• Ensure that tests pass under panic=abort (#​749)

hyperium/http-body (http-body-util)

v0.1.3: http-body-util v0.1.3

Compare Source

Features

• Add Channel, a body type backed by an async channel.
• Make Empty::new() to be const fn.

Thanks!

• @​cratelyn
• @​wgyt
• @​tottoto
• @​jplatte
• @​goto-bus-stop
• @​seanmonstar

hyperium/hyper (hyper)

v1.6.0

Compare Source

Bug Fixes

• server:
  • start http1 header read timeout when conn is idle (#​3828) (10b09ffc, closes #​3780, #​3781)
  • change max_local_error_reset_streams function to &mut self (#​3820) (e981a91e)

Features

• ext: add ext::on_informational() callback extension (#​3818) (8ce1fcfa, closes #​2565)
• server: add http1::Builder::ignore_invalid_headers(bool) option (#​3824) (3817a79b)

Breaking Changes

• http2::Builder::max_local_error_reset_streams() now takes &mut self and returns &mut Self. In practice, this shouldn't break almost anyone. It was the wrong receiver and return types.
  (e981a91e)

v1.5.2 (2024-12-16)

Bug Fixes

• http1:
  • fix intermitent panic parsing partial headers (#​3812) (a131111f, closes #​3811)
  • skip debug assertion of content length for HEAD responses (#​3795) (eaf2267c, closes #​3794)

Features

• ffi: add cargo-c support (#​3787) (7f4a6826, closes #​3786)

v1.5.1 (2024-11-19)

Bug Fixes

• http2:
  • pass proper value to h2 max_local_error_reset_streams (4a20147a)
  • improve graceful shutdown during handshake (#​3729) (13b05943)

hyperium/hyper-util (hyper-util)

v0.1.11

Compare Source

• Add tracing crate feature with support in TokioExecutor.
• Add HttpConnector::interface() support for macOS and Solarish systems.
• Add rt::WithHyperIo and rt::WithTokioIo combinators.
• Add auto_date_header() for auto server builder.
• Add max_local_error_reset_streams() for auto server builder.
• Add ignore_invalid_headers() for auto server builder.
• Add methods to determine if auto server is configured for HTTP/1 or HTTP/2.
• Implement Connection for UnixStream and NamedPipeClient.
• Fix HTTP/2 websocket requests sent through legacy::Client.

paritytech/jsonrpsee (jsonrpsee)

v0.24.9

Compare Source

[v0.24.9] - 2024-03-17

This is a non-breaking release that updates the dependency rust-platform-verifier to v0.5 to fix that
that rust-platform-verifier v0.3 didn't enable the std feature in rustls which caused a compilation error.

See https://github.com/paritytech/jsonrpsee/issues/1536 for further information.

Thanks to the external contributor @​prestwich who spotted and fixed this issue.

v0.24.8

Compare Source

[v0.24.8] - 2024-01-24

This is a non-breaking release that decreases the MSRV to 1.74.0.

[Changed]

• reduce MSRV to 1.74.0 (#​1519)

Full Changelog: paritytech/jsonrpsee@v0.24.7...v0.24.8

wooorm/markdown-rs (markdown)

v1.0.0-alpha.23

Compare Source

Add

• e923a3c Add allow_any_img_src option
  by @​lovasoa in https://github.com/wooorm/markdown-rs/pull/165

Full Changelog: https://github.com/wooorm/markdown-rs/compare/[email protected]

v1.0.0-alpha.22

Compare Source

• e9d53d2 Fix first line ending in paragaph after frontmatter
• 4e92bb3 f9b799d d5a0f56 Fix expression indent, sync tests w/ micromark

Full Changelog: wooorm/markdown-rs@1.0.0-alpha.21...1.0.0-alpha.22

lipanski/mockito (mockito)

v1.7.0

Compare Source

• Make parking_lot optional
• Update rand crate to v0.9
• Allow colored crate v3

Thanks to @​tottoto @​nerodono

matklad/once_cell (once_cell)

v1.21.3

Compare Source

• Outline more initialization in race: #​284,
  #​285.

v1.21.2

Compare Source

• Relax success ordering from AcqRel to Release in race: #​278.

v1.21.1

Compare Source

• Reduce MSRV to 1.65: #​277.

v1.21.0

Compare Source

• Outline initialization in race: #​273.
• Add OnceNonZereUsize::get_unchecked: #​274.
• Add OnceBox::clone and OnceBox::with_value: #​275.
• Increase MSRV to 1.70

v1.20.3

Compare Source

tafia/quick-xml (quick-xml)

v0.37.4

Compare Source

Misc Changes

• #​852: Add Debug impl for NsReader and Reader and Clone impl for NsReader

v0.37.3

Compare Source

New Features

• #​850: Add Attribute::as_bool() method to get an attribute value as a boolean.
• #​850: Add Attributes::has_nil() method to check if attributes has xsi:nil attribute set to true.
• #​497: Handle xsi:nil attribute in serde Deserializer to better process optional fields.

v0.37.2

Compare Source

New Features

• #​836: Add se::to_utf8_io_writer() helper compatible with std::io::Write and restricted to UTF-8 encoding.

serde-rs/json (serde_json)

v1.0.140

Compare Source

• Documentation improvements

v1.0.139

Compare Source

• Documentation improvements

v1.0.138

Compare Source

• Documentation improvements

v1.0.137

Compare Source

• Turn on "float_roundtrip" and "unbounded_depth" features for serde_json in play.rust-lang.org (#​1231)

v1.0.136

Compare Source

• Optimize serde_json::value::Serializer::serialize_map by using Map::with_capacity (#​1230, thanks @​goffrie)

v1.0.135

Compare Source

• Add serde_json::Map::into_values method (#​1226, thanks @​tisonkun)

Stebalien/tempfile (tempfile)

v3.19.1

Compare Source

• Don't unlink temporary files immediately on Windows (fixes #​339). Unfortunately, this seemed to corrupt the file object (possibly a Windows kernel bug) in rare cases and isn't strictly speaking necessary.

v3.19.0

Compare Source

• Remove direct dependency on cfg-if. It's still in the tree, but we didn't really need to use it in this crate.
• Add an unstable feature (unstable-windows-keep-open-tempfile) to test a potential fix to #​339.

v3.18.0

Compare Source

• Update rustix to 1.0.0.
• Make NamedTempFile::persist_noclobber atomic on Apple operating systems. It's now atomic on MacOS, Windows, and Linux (depending on the OS version and filesystem used).

v3.17.1

Compare Source

• Fix build with windows-sys 0.52. Unfortunately, we have no CI for older windows-sys versions at the moment...

v3.17.0

Compare Source

• Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in Builder::make_in (when creating temporary files of arbitrary types).
• Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test.
• When reseeding with getrandom, use platform (e.g., CPU) specific randomness sources where possible.
• Clarify some documentation.
• Unlink unnamed temporary files on windows immediately when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible.

v3.16.0

Compare Source

• Update getrandom to 0.3.0 (thanks to @​paolobarbolini).
• Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @​ErichDonGubler).
• Improved security documentation (thanks to @​n0toose for collaborating with me on this).

v3.15.0

Compare Source

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#​314). This resolves a potential DoS vector (#​178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.

tokio-rs/tokio (tokio)

v1.44.2: Tokio v1.44.2

Compare Source

This release fixes a soundness issue in the broadcast channel. The channel
accepts values that are Send but !Sync. Previously, the channel called
clone() on these values without synchronizing. This release fixes the channel
by synchronizing calls to .clone() (Thanks Austin Bonander for finding and
reporting the issue).

Fixed

• sync: synchronize clone() call in broadcast channel (#​7232)

v1.44.1: Tokio v1.44.1

Compare Source

1.44.1 (March 13th, 2025)

Fixed

• rt: skip defer queue in block_in_place context (#​7216)

v1.44.0: Tokio v1.44.0

Compare Source

1.44.0 (March 7th, 2025)

This release changes the from_std method on sockets to panic if a blocking socket is provided. We determined this change is not a breaking change as Tokio is not intended to operate using blocking sockets. Doing so results in runtime hangs and should be considered a bug. Accidentally passing a blocking socket to Tokio is one of the most common user mistakes. If this change causes an issue for you, please comment on #​7172.

Added

• coop: add task::coop module (#​7116)
• process: add Command::get_kill_on_drop() (#​7086)
• sync: add broadcast::Sender::closed (#​6685, #​7090)
• sync: add broadcast::WeakSender (#​7100)
• sync: add oneshot::Receiver::is_empty() (#​7153)
• sync: add oneshot::Receiver::is_terminated() (#​7152)

Fixed

• fs: empty reads on File should not start a background read (#​7139)
• process: calling start_kill on exited child should not fail (#​7160)
• signal: fix CTRL_CLOSE, CTRL_LOGOFF, CTRL_SHUTDOWN on windows (#​7122)
• sync: properly handle panic during mpsc drop (#​7094)

Changes

• runtime: clean up magic number in registration set (#​7112)
• coop: make coop yield using waker defer strategy (#​7185)
• macros: make select! budget-aware (#​7164)
• net: panic when passing a blocking socket to from_std (#​7166)
• io: clean up buffer casts (#​7142)

Changes to unstable APIs

• rt: add before and after task poll callbacks (#​7120)
• tracing: make the task tracing API unstable public (#​6972)

Documented

• docs: fix nesting of sections in top-level docs (#​7159)
• fs: rename symlink and hardlink parameter names (#​7143)
• io: swap reader/writer in simplex doc test (#​7176)
• macros: docs about select! alternatives (#​7110)
• net: rename the argument for send_to (#​7146)
• process: add example for reading Child stdout (#​7141)
• process: clarify Child::kill behavior (#​7162)
• process: fix grammar of the ChildStdin struct doc comment (#​7192)
• runtime: consistently use worker_threads instead of core_threads (#​7186)

v1.43.1

Compare Source

v1.43.0: Tokio v1.43.0

Compare Source

1.43.0 (Jan 8th, 2025)

Added

• net: add UdpSocket::peek methods (#​7068)
• net: add support for Haiku OS (#​7042)
• process: add Command::into_std() (#​7014)
• signal: add SignalKind::info on illumos (#​6995)
• signal: add support for realtime signals on illumos (#​7029)

Fixed

• io: don't call set_len before initializing vector in Blocking (#​7054)
• macros: suppress clippy::needless_return in #[tokio::main] (#​6874)
• runtime: fix thread parking on WebAssembly (#​7041)

Changes

• chore: use unsync loads for unsync_load (#​7073)
• io: use Buf::put_bytes in Repeat read impl (#​7055)
• task: drop the join waker of a task eagerly (#​6986)

Changes to unstable APIs

• metrics: improve flexibility of H2Histogram Configuration (#​6963)
• taskdump: add accessor methods for backtrace (#​6975)

Documented

• io: clarify ReadBuf::uninit allows initialized buffers as well (#​7053)
• net: fix ambiguity in TcpStream::try_write_vectored docs (#​7067)
• runtime: fix LocalRuntime doc links (#​7074)
• sync: extend documentation for watch::Receiver::wait_for (#​7038)
• sync: fix typos in OnceCell docs (#​7047)

v1.42.1: Tokio v1.42.1

Compare Source

This release fixes a soundness issue in the broadcast channel. The channel accepts values that are Send but !Sync. Previously, the channel called clone() on these values without synchronizing. This release fixes the channel by synchronizing calls to .clone() (Thanks Austin Bonander for finding and reporting the issue).

Fixed

• sync: synchronize clone() call in broadcast channel (#​7232)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.