1309: build(deps): bump tempfile from 3.3.0 to 3.4.0 r=delta1 a=dependabot[bot]
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.3.0 to 3.4.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Stebalien/tempfile/blob/master/NEWS">tempfile's changelog</a>.</em></p>
<blockquote>
<h1>3.4.0</h1>
<p>SECURITY: Prior <code>tempfile</code> releases depended on <code>remove_dir_all</code> version 0.5.0 which was vulnerabiel to a <a href="https://github.com/XAMPPRocky/remove_dir_all/security/advisories/GHSA-mc8h-8q98-g5hr">TOCTOU race</a>. This same race is present in rust versions prior to 1.58.1.</p>
<p>Features:</p>
<ul>
<li>Generalized temporary files: <code>NamedTempFile</code> can now abstract over different kinds of files (e.g.,
unix domain sockets, pipes, etc.):
<ul>
<li>Add <code>Builder::make</code> and <code>Builder::make_in</code> for generalized temp file
creation.</li>
<li>Add <code>NamedTempFile::from_parts</code> to complement <code>NamedTempFile::into_parts</code>.</li>
<li>Add generic parameter to <code>NamedTempFile</code> to support wrapping non-File types.</li>
</ul>
</li>
</ul>
<p>Bug Fixes/Improvements:</p>
<ul>
<li>Don't try to create a temporary file multiple times if the file path has been fully specified by
the user (no random characters).</li>
<li><code>NamedTempFile::persist_noclobber</code> is now always atomic on linux when <code>renameat_with</code> is
supported. Previously, it would first link the new path, then unlink the previous path.</li>
<li>Fix compiler warnings on windows.</li>
</ul>
<p>Trivia:</p>
<ul>
<li>Switch from <code>libc</code> to <code>rustix</code> on wasi/unix. This now makes direct syscalls instead of calling
through libc.</li>
<li>Remove <code>remove_dir_all</code> dependency. The rust standard library has optimized their internal version
significantly.</li>
<li>Switch to official windows-sys windows bindings.</li>
</ul>
<p>Breaking:</p>
<ul>
<li>The minimum rust version is now <code>1.48.0</code>.</li>
<li>Mark most functions as <code>must_use</code>.</li>
<li>Uses direct syscalls on linux by default, instead of libc.</li>
<li>The new type parameter in <code>NamedTempFile</code> may lead to type inference issues in some cases.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/Stebalien/tempfile/commits">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1310: build(deps): bump time from 0.3.19 to 0.3.20 r=delta1 a=dependabot[bot]
Bumps [time](https://github.com/time-rs/time) from 0.3.19 to 0.3.20.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/time-rs/time/releases">time's releases</a>.</em></p>
<blockquote>
<h2>v0.3.20</h2>
<p>See the <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">changelog</a> for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">time's changelog</a>.</em></p>
<blockquote>
<h2>0.3.20 [2023-02-24]</h2>
<h3>Changed</h3>
<ul>
<li>The minimum supported Rust version is now 1.63.0.</li>
<li>On Unix-based operating systems with known thread-safe environments, functions obtaining the local
offset no longer require a check that the program is single-threaded. This currently includes
MacOS, illumos, and NetBSD.</li>
</ul>
<h3>Added</h3>
<ul>
<li><code>[ignore]</code> component in format descriptions. A <code>count</code> modifier is required, indicating the number
of bytes to ignore when parsing.</li>
<li><code>[unix_timestamp]</code> component in format descriptions. This is currently only usable with
<code>OffsetDateTime</code>. Users can choose between seconds, milliseconds, microseconds, and nanoseconds, and whether the sign is mandatory or optional.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>The API for declaring soundness now uses stricter atomic orderings internally.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="d7c725c422"><code>d7c725c</code></a> v0.3.20 release</li>
<li><a href="91afd54287"><code>91afd54</code></a> Add lock to another test</li>
<li><a href="8dca98c946"><code>8dca98c</code></a> Implement <code>[unix_timestamp]</code> component</li>
<li><a href="d07b394baf"><code>d07b394</code></a> Further split logical and memory offset</li>
<li><a href="0229837518"><code>0229837</code></a> Slightly refactor <code>DateTime</code> internals</li>
<li><a href="1daedfb705"><code>1daedfb</code></a> Add missing test for new error variant</li>
<li><a href="4edf73a035"><code>4edf73a</code></a> Use <code>bug!</code> instead of <code>unreachable!</code></li>
<li><a href="0e82474728"><code>0e82474</code></a> Use <code>explicit_generic_args_with_impl_trait</code></li>
<li><a href="3b6d77f1dc"><code>3b6d77f</code></a> Bump MSRV to 1.63</li>
<li><a href="eb7b60e74e"><code>eb7b60e</code></a> Always test local offset</li>
<li>Additional commits viewable in <a href="https://github.com/time-rs/time/compare/v0.3.19...v0.3.20">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1308: build(deps): bump Swatinem/rust-cache from 2.2.0 to 2.2.1 r=delta1 a=dependabot[bot]
Bumps [Swatinem/rust-cache](https://github.com/Swatinem/rust-cache) from 2.2.0 to 2.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/Swatinem/rust-cache/releases">Swatinem/rust-cache's releases</a>.</em></p>
<blockquote>
<h2>v2.2.1</h2>
<ul>
<li>Update <code>`@actions/cache</code>` dependency to fix usage of <code>zstd</code> compression.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md">Swatinem/rust-cache's changelog</a>.</em></p>
<blockquote>
<h2>2.2.1</h2>
<ul>
<li>Update <code>`@actions/cache</code>` dependency to fix usage of <code>zstd</code> compression.</li>
</ul>
<h2>2.2.0</h2>
<ul>
<li>Add new <code>save-if</code> option to always restore, but only conditionally save the cache.</li>
</ul>
<h2>2.1.0</h2>
<ul>
<li>Only hash <code>Cargo.{lock,toml}</code> files in the configured workspace directories.</li>
</ul>
<h2>2.0.2</h2>
<ul>
<li>Avoid calling <code>cargo metadata</code> on pre-cleanup.</li>
<li>Added <code>prefix-key</code>, <code>cache-directories</code> and <code>cache-targets</code> options.</li>
</ul>
<h2>2.0.1</h2>
<ul>
<li>Primarily just updating dependencies to fix GitHub deprecation notices.</li>
</ul>
<h2>2.0.0</h2>
<ul>
<li>The action code was refactored to allow for caching multiple workspaces and
different <code>target</code> directory layouts.</li>
<li>The <code>working-directory</code> and <code>target-dir</code> input options were replaced by a
single <code>workspaces</code> option that has the form of <code>$workspace -> $target</code>.</li>
<li>Support for considering <code>env-vars</code> as part of the cache key.</li>
<li>The <code>sharedKey</code> input option was renamed to <code>shared-key</code> for consistency.</li>
</ul>
<h2>1.4.0</h2>
<ul>
<li>Clean both <code>debug</code> and <code>release</code> target directories.</li>
</ul>
<h2>1.3.0</h2>
<ul>
<li>Use Rust toolchain file as additional cache key.</li>
<li>Allow for a configurable target-dir.</li>
</ul>
<h2>1.2.0</h2>
<ul>
<li>Cache <code>~/.cargo/bin</code>.</li>
<li>Support for custom <code>$CARGO_HOME</code>.</li>
<li>Add a <code>cache-hit</code> output.</li>
<li>Add a new <code>sharedKey</code> option that overrides the automatic job-name based key.</li>
</ul>
<h2>1.1.0</h2>
<ul>
<li>Add a new <code>working-directory</code> input.</li>
<li>Support caching git dependencies.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="6fd3edff69"><code>6fd3edf</code></a> 2.2.1</li>
<li><a href="a1c019f71a"><code>a1c019f</code></a> update dependencies and rebuild</li>
<li><a href="664ce0090f"><code>664ce00</code></a> chore: Create check-dist.yml (<a href="https://github-redirect.dependabot.com/Swatinem/rust-cache/issues/96">#96</a>)</li>
<li>See full diff in <a href="https://github.com/Swatinem/rust-cache/compare/v2.2.0...v2.2.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1307: build(deps): bump bdk from 0.27.0 to 0.27.1 r=delta1 a=dependabot[bot]
Bumps [bdk](https://github.com/bitcoindevkit/bdk) from 0.27.0 to 0.27.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/bitcoindevkit/bdk/releases">bdk's releases</a>.</em></p>
<blockquote>
<h2>Release 0.27.1</h2>
<h3>Summary</h3>
<p>Fixes <a href="https://rustsec.org/advisories/RUSTSEC-2022-0090">RUSTSEC-2022-0090</a>, this issue is only applicable if you are using the optional sqlite database feature.</p>
<h3>Changelog</h3>
<p>Changed</p>
<ul>
<li>Update optional sqlite dependency from 0.27.0 to 0.28.0. <a href="https://github-redirect.dependabot.com/bitcoindevkit/bdk/issues/867">#867</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/bitcoindevkit/bdk/compare/v0.27.0...v0.27.1">https://github.com/bitcoindevkit/bdk/compare/v0.27.0...v0.27.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/bitcoindevkit/bdk/blob/master/CHANGELOG.md">bdk's changelog</a>.</em></p>
<blockquote>
<h2>[v0.27.1]</h2>
<h3>Summary</h3>
<p>Fixes <a href="https://rustsec.org/advisories/RUSTSEC-2022-0090">RUSTSEC-2022-0090</a>, this issue is only applicable if you are using the optional sqlite database feature.</p>
<h3>Changed</h3>
<ul>
<li>Update optional sqlite dependency from 0.27.0 to 0.28.0. <a href="https://github-redirect.dependabot.com/bitcoindevkit/bdk/issues/867">#867</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="7a8e6609b1"><code>7a8e660</code></a> Bump version to 0.27.1</li>
<li><a href="4ec6f3272e"><code>4ec6f32</code></a> Update rusqlite from 0.27.0 to 0.28.0</li>
<li>See full diff in <a href="https://github.com/bitcoindevkit/bdk/compare/v0.27.0...v0.27.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1306: build(deps): bump time from 0.3.18 to 0.3.19 r=delta1 a=dependabot[bot]
Bumps [time](https://github.com/time-rs/time) from 0.3.18 to 0.3.19.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/time-rs/time/releases">time's releases</a>.</em></p>
<blockquote>
<h2>v0.3.19</h2>
<p>See the <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">changelog</a> for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">time's changelog</a>.</em></p>
<blockquote>
<h2>0.3.19 [2022-02-016]</h2>
<h3>Fixed</h3>
<p>This includes the update to the <code>format_description!</code> macro, which was supposed to be included in
0.3.18.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="6afe656a8f"><code>6afe656</code></a> 0.3.19 release</li>
<li>See full diff in <a href="https://github.com/time-rs/time/compare/v0.3.18...v0.3.19">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1305: build(deps): bump time from 0.3.17 to 0.3.18 r=delta1 a=dependabot[bot]
Bumps [time](https://github.com/time-rs/time) from 0.3.17 to 0.3.18.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/time-rs/time/releases">time's releases</a>.</em></p>
<blockquote>
<h2>v0.3.18</h2>
<p>See the <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">changelog</a> for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">time's changelog</a>.</em></p>
<blockquote>
<h2>0.3.18 [2022-02-16]</h2>
<h3>Changed</h3>
<ul>
<li>The minimum supported Rust version is now 1.62.0.</li>
</ul>
<h3>Added</h3>
<ul>
<li><code>[first]</code> and <code>[optional]</code> items can now be included in format descriptions. To parse this at
runtime, you must use the <code>format_description::parse_owned</code> method.</li>
<li><code>format_description::parse_borrowed</code></li>
<li>An API has been added to opt out of soundness checks for obtaining the local offset. This replaces
the previous, officially unsupported <code>RUSTFLAGS="--cfg unsound_local_offset"</code>. End users may call
<code>time::util::local_offset::set_soundness(time::util::local_offset::Soundness::Unsound)</code>. This
method is <code>unsafe</code> because it enables undefined behavior if its safety requirements are not
upheld. Note that libraries <strong>must not</strong> set this to <code>Unsound</code>, as it is impossible for a library
to guarantee end users uphold the required invariants.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Correctly parse offset sign when hour is zero. The parse was previously unconditionally positive,
even if the sign indicated otherwise.</li>
<li>Compilation is fixed for WebAssembly.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="3df1120719"><code>3df1120</code></a> 0.3.18 release</li>
<li><a href="9615d56883"><code>9615d56</code></a> Require user to provide version to methods</li>
<li><a href="c45264ca4d"><code>c45264c</code></a> <code>#[derive(Default)]</code> on enums, bump MSRV to 1.62</li>
<li><a href="43862d2945"><code>43862d2</code></a> Run CI on ubuntu-latest</li>
<li><a href="b5c4bc1a5d"><code>b5c4bc1</code></a> Let user invoke UB if they choose</li>
<li><a href="8dfc955c46"><code>8dfc955</code></a> Lints for Rust 1.66</li>
<li><a href="2ef301fb7a"><code>2ef301f</code></a> Fix build status badge (<a href="https://github-redirect.dependabot.com/time-rs/time/issues/534">#534</a>)</li>
<li><a href="09818dae68"><code>09818da</code></a> Silence warning about unused method</li>
<li><a href="beac001c9e"><code>beac001</code></a> Change to <code>version=X</code>, implement for serde helper</li>
<li><a href="581c44a378"><code>581c44a</code></a> Make offset kind uninhabited</li>
<li>Additional commits viewable in <a href="https://github.com/time-rs/time/compare/v0.3.17...v0.3.18">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1300: build(deps): bump vergen from 7.5.0 to 7.5.1 r=delta1 a=dependabot[bot]
Bumps [vergen](https://github.com/rustyhorde/vergen) from 7.5.0 to 7.5.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/rustyhorde/vergen/releases">vergen's releases</a>.</em></p>
<blockquote>
<h2>v7.5.1</h2>
<ul>
<li>Dependency update for <code>git2</code> to pick up security updates.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="b20c9e93ba"><code>b20c9e9</code></a> version bump for next release</li>
<li><a href="242ef6194f"><code>242ef61</code></a> remove unaligned_references lint</li>
<li><a href="4b42868b8e"><code>4b42868</code></a> Updated to trigger on legacy branch</li>
<li><a href="33e2cf2fe5"><code>33e2cf2</code></a> Updated git2 to catch security updates</li>
<li>See full diff in <a href="https://github.com/rustyhorde/vergen/compare/7.5.0...7.5.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1301: build(deps): bump serde_json from 1.0.92 to 1.0.93 r=delta1 a=dependabot[bot]
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.92 to 1.0.93.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/serde-rs/json/releases">serde_json's releases</a>.</em></p>
<blockquote>
<h2>v1.0.93</h2>
<ul>
<li>Support 128-bit integers in serde_json::to_value (<a href="https://github-redirect.dependabot.com/serde-rs/json/issues/982">#982</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="0ebeede28a"><code>0ebeede</code></a> Release 1.0.93</li>
<li><a href="4fd48503de"><code>4fd4850</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/serde-rs/json/issues/982">#982</a> from serde-rs/integer128tovalue</li>
<li><a href="e3d13cd61a"><code>e3d13cd</code></a> Support 128-bit integers in to_value</li>
<li><a href="f77ad4750f"><code>f77ad47</code></a> Add test of integer128 to_value</li>
<li>See full diff in <a href="https://github.com/serde-rs/json/compare/v1.0.92...v1.0.93">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1295: build(deps): bump serde_json from 1.0.91 to 1.0.92 r=delta1 a=dependabot[bot]
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.91 to 1.0.92.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/serde-rs/json/releases">serde_json's releases</a>.</em></p>
<blockquote>
<h2>v1.0.92</h2>
<ul>
<li>Documentation improvements</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="a9c984f13e"><code>a9c984f</code></a> Release 1.0.92</li>
<li><a href="c42b724c14"><code>c42b724</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/serde-rs/json/issues/980">#980</a> from serde-rs/docrepr</li>
<li><a href="eaa287cb3a"><code>eaa287c</code></a> Hide repr attribute from documentation</li>
<li><a href="7bc6c86310"><code>7bc6c86</code></a> RawValue -> repr(transparent)</li>
<li><a href="e41ee42d92"><code>e41ee42</code></a> Update indoc dev-dependency to version 2</li>
<li><a href="8cebe89500"><code>8cebe89</code></a> Speed up cargo fuzz CI job</li>
<li><a href="74f510e56d"><code>74f510e</code></a> Sync license text with rust-lang repos</li>
<li><a href="557f45c404"><code>557f45c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/serde-rs/json/issues/964">#964</a> from dtolnay/docsrs</li>
<li><a href="9edf7fa9b3"><code>9edf7fa</code></a> Replace docs.serde.rs links with intra-rustdoc links</li>
<li><a href="9947ae606e"><code>9947ae6</code></a> Point documentation links to docs.rs instead of docs.serde.rs</li>
<li>See full diff in <a href="https://github.com/serde-rs/json/compare/v1.0.91...v1.0.92">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1294: build(deps): bump proptest from 1.0.0 to 1.1.0 r=delta1 a=dependabot[bot]
Bumps [proptest](https://github.com/proptest-rs/proptest) from 1.0.0 to 1.1.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="75c749ee50"><code>75c749e</code></a> bump version to 1.1.0</li>
<li><a href="a7c75a1bcb"><code>a7c75a1</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/proptest-rs/proptest/issues/295">#295</a> from proptest-rs/replays-dont-count-cases</li>
<li><a href="a854d2ed7a"><code>a854d2e</code></a> [replays-dont-count-cases] persisted failures are not counted against success...</li>
<li><a href="f8eff50603"><code>f8eff50</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/proptest-rs/proptest/issues/291">#291</a> from schuelermine/fix/prop_assert_ne!</li>
<li><a href="d38268304c"><code>d382683</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/proptest-rs/proptest/issues/294">#294</a> from proptest-rs/fix-ci</li>
<li><a href="ad0a4d311c"><code>ad0a4d3</code></a> [fix-ci] changed the line for where the error occurs</li>
<li><a href="00f29af8e8"><code>00f29af</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/proptest-rs/proptest/issues/288">#288</a> from proptest-rs/const-generic-arbitrary</li>
<li><a href="a16853f4fc"><code>a16853f</code></a> Fix prop_assert_ne! requiring import of prop_assert!</li>
<li><a href="b513a32c72"><code>b513a32</code></a> Config : support disabling failure persistence via env var (<a href="https://github-redirect.dependabot.com/proptest-rs/proptest/issues/287">#287</a>)</li>
<li><a href="7a94e16589"><code>7a94e16</code></a> note that PROPTEST_CASES and other env var requires the std feature (<a href="https://github-redirect.dependabot.com/proptest-rs/proptest/issues/262">#262</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/proptest-rs/proptest/compare/1.0.0...v1.1.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1296: build(deps): bump rust_decimal_macros from 1.28.0 to 1.28.1 r=delta1 a=dependabot[bot]
Bumps [rust_decimal_macros](https://github.com/paupino/rust-decimal) from 1.28.0 to 1.28.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/paupino/rust-decimal/blob/master/CHANGELOG.md">rust_decimal_macros's changelog</a>.</em></p>
<blockquote>
<h2>1.28.1</h2>
<h3>Fixed</h3>
<ul>
<li>Bumped <code>borsh</code> and <code>criterion</code> dependencies to the latest versions. (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/pull/568">#568</a>)</li>
<li>Removed erroneous debug statements in <code>serde-with-str</code> feature. (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/pull/571">#571</a>)</li>
</ul>
<p>Thanks <a href="https://github.com/attila-lin"><code>`@attila-lin</code></a>` for your help bumping dependencies.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="84f59436b0"><code>84f5943</code></a> Version 1.28.1 (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/572">#572</a>)</li>
<li><a href="7935895faf"><code>7935895</code></a> Remove debug statements and add lint (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/571">#571</a>)</li>
<li><a href="7675f6df94"><code>7675f6d</code></a> chore: bump <code>borsh</code> and <code>criterion</code> (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/568">#568</a>)</li>
<li>See full diff in <a href="https://github.com/paupino/rust-decimal/compare/1.28.0...1.28.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
1297: build(deps): bump anyhow from 1.0.68 to 1.0.69 r=delta1 a=dependabot[bot]
Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.68 to 1.0.69.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dtolnay/anyhow/releases">anyhow's releases</a>.</em></p>
<blockquote>
<h2>1.0.69</h2>
<ul>
<li>Documentation improvements</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="58377abfea"><code>58377ab</code></a> Release 1.0.69</li>
<li><a href="f65b087b52"><code>f65b087</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dtolnay/anyhow/issues/295">#295</a> from dtolnay/docrepr</li>
<li><a href="10370e94a1"><code>10370e9</code></a> Hide repr attribute from documentation</li>
<li><a href="cf2adb47a1"><code>cf2adb4</code></a> Raise minimum toolchain for the backtrace feature to 1.60</li>
<li><a href="0a45d7665c"><code>0a45d76</code></a> Prevent actions duplication on noop merge commits</li>
<li><a href="3d91f13dcd"><code>3d91f13</code></a> Sync license text with rust-lang repos</li>
<li><a href="ed1327fbab"><code>ed1327f</code></a> Ignore redundant_clone lint on test testing clone</li>
<li>See full diff in <a href="https://github.com/dtolnay/anyhow/compare/1.0.68...1.0.69">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
1298: build(deps): bump rust_decimal from 1.28.0 to 1.28.1 r=delta1 a=dependabot[bot]
Bumps [rust_decimal](https://github.com/paupino/rust-decimal) from 1.28.0 to 1.28.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/paupino/rust-decimal/blob/master/CHANGELOG.md">rust_decimal's changelog</a>.</em></p>
<blockquote>
<h2>1.28.1</h2>
<h3>Fixed</h3>
<ul>
<li>Bumped <code>borsh</code> and <code>criterion</code> dependencies to the latest versions. (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/pull/568">#568</a>)</li>
<li>Removed erroneous debug statements in <code>serde-with-str</code> feature. (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/pull/571">#571</a>)</li>
</ul>
<p>Thanks <a href="https://github.com/attila-lin"><code>`@attila-lin</code></a>` for your help bumping dependencies.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="84f59436b0"><code>84f5943</code></a> Version 1.28.1 (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/572">#572</a>)</li>
<li><a href="7935895faf"><code>7935895</code></a> Remove debug statements and add lint (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/571">#571</a>)</li>
<li><a href="7675f6df94"><code>7675f6d</code></a> chore: bump <code>borsh</code> and <code>criterion</code> (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/568">#568</a>)</li>
<li>See full diff in <a href="https://github.com/paupino/rust-decimal/compare/1.28.0...1.28.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1293: build(deps): bump hyper from 0.14.23 to 0.14.24 r=delta1 a=dependabot[bot]
Bumps [hyper](https://github.com/hyperium/hyper) from 0.14.23 to 0.14.24.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/hyperium/hyper/releases">hyper's releases</a>.</em></p>
<blockquote>
<h2>v0.14.24</h2>
<h2>Bug Fixes</h2>
<ul>
<li><strong>body:</strong> set an internal max to reserve in <code>to_bytes</code> (<a href="4d89adce61">4d89adce</a>)</li>
<li><strong>server:</strong> prevent sending 100-continue if user drops request body (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/3138">#3138</a>) (<a href="92443d7ef5">92443d7e</a>)</li>
</ul>
<h2>Features</h2>
<ul>
<li><strong>http2:</strong> add <code>http2_max_header_list_size</code> to <code>hyper::server::Builder</code> (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/3006">#3006</a>) (<a href="031425f087">031425f0</a>)</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/jiahaoliang"><code>`@jiahaoliang</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/hyperium/hyper/pull/3006">hyperium/hyper#3006</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/hyperium/hyper/blob/v0.14.24/CHANGELOG.md">hyper's changelog</a>.</em></p>
<blockquote>
<h3>v0.14.24 (2023-02-02)</h3>
<h4>Bug Fixes</h4>
<ul>
<li><strong>body:</strong> set an internal max to reserve in <code>to_bytes</code> (<a href="4d89adce61">4d89adce</a>)</li>
<li><strong>server:</strong> prevent sending 100-continue if user drops request body (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/3138">#3138</a>) (<a href="92443d7ef5">92443d7e</a>)</li>
</ul>
<h4>Features</h4>
<ul>
<li><strong>http2:</strong> add <code>http2_max_header_list_size</code> to <code>hyper::server::Builder</code> (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/3006">#3006</a>) (<a href="031425f087">031425f0</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="40c01dfb4f"><code>40c01df</code></a> v0.14.24</li>
<li><a href="92443d7ef5"><code>92443d7</code></a> fix(server): prevent sending 100-continue if user drops request body (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/3138">#3138</a>)</li>
<li><a href="4d89adce61"><code>4d89adc</code></a> fix(body): set an internal max to reserve in <code>to_bytes</code></li>
<li><a href="031425f087"><code>031425f</code></a> feat(http2): add <code>http2_max_header_list_size</code> to <code>hyper::server::Builder</code> (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/3">#3</a>...</li>
<li>See full diff in <a href="https://github.com/hyperium/hyper/compare/v0.14.23...v0.14.24">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1290: build(deps): bump async-trait from 0.1.63 to 0.1.64 r=delta1 a=dependabot[bot]
Bumps [async-trait](https://github.com/dtolnay/async-trait) from 0.1.63 to 0.1.64.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dtolnay/async-trait/releases">async-trait's releases</a>.</em></p>
<blockquote>
<h2>0.1.64</h2>
<ul>
<li>Suppress async_yields_async clippy correctness lint in generated code (<a href="https://github-redirect.dependabot.com/dtolnay/async-trait/issues/236">#236</a>, <a href="https://github-redirect.dependabot.com/dtolnay/async-trait/issues/237">#237</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="6a13fce882"><code>6a13fce</code></a> Release 0.1.64</li>
<li><a href="ea573a3823"><code>ea573a3</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dtolnay/async-trait/issues/237">#237</a> from dtolnay/asyncyieldsasync</li>
<li><a href="54cc1ce438"><code>54cc1ce</code></a> Suppress async_yields_async clippy correctness lint in generated code</li>
<li><a href="e6e736f8df"><code>e6e736f</code></a> Add regression test for issue 236</li>
<li>See full diff in <a href="https://github.com/dtolnay/async-trait/compare/0.1.63...0.1.64">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1289: build(deps): bump dprint/check from 2.1 to 2.2 r=delta1 a=dependabot[bot]
Bumps [dprint/check](https://github.com/dprint/check) from 2.1 to 2.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dprint/check/releases">dprint/check's releases</a>.</em></p>
<blockquote>
<h2>v2.2</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: add input for specifiable config by <a href="https://github.com/kachick"><code>`@kachick</code></a>` in <a href="https://github-redirect.dependabot.com/dprint/check/pull/9">dprint/check#9</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/kachick"><code>`@kachick</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/dprint/check/pull/9">dprint/check#9</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/dprint/check/compare/v2.1...v2.2">https://github.com/dprint/check/compare/v2.1...v2.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="2f1cf31537"><code>2f1cf31</code></a> v2.2</li>
<li><a href="58958abb76"><code>58958ab</code></a> chore: remove dprint-another.json</li>
<li><a href="23e4f056b9"><code>23e4f05</code></a> feat: add inputs for specifiable config (<a href="https://github-redirect.dependabot.com/dprint/check/issues/9">#9</a>)</li>
<li><a href="c0ea92f185"><code>c0ea92f</code></a> docs: slightly simplify</li>
<li>See full diff in <a href="https://github.com/dprint/check/compare/v2.1...v2.2">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1286: build(deps): bump rust_decimal_macros from 1.27.0 to 1.28.0 r=delta1 a=dependabot[bot]
Bumps [rust_decimal_macros](https://github.com/paupino/rust-decimal) from 1.27.0 to 1.28.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/paupino/rust-decimal/blob/master/CHANGELOG.md">rust_decimal_macros's changelog</a>.</em></p>
<blockquote>
<h2>1.28.0</h2>
<h3>Added</h3>
<ul>
<li>Implement <code>TryFrom<&str></code> for <code>Decimal</code> (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/pull/560">#560</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Explicit string deserialize for <code>Option<Decimal></code> when using <code>serde-with-str</code> (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/pull/565">#565</a>)</li>
<li>Fix for <code>rescale</code> preventing <code>Decimal::ZERO</code> to be rescaled to an invalid precision (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/pull/566">#566</a>)</li>
</ul>
<h3>Credit</h3>
<p>Thank you to <a href="https://github.com/c410-f3r"><code>`@c410-f3r</code></a>` for your diligent help adding features to this library!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="d62fe61025"><code>d62fe61</code></a> Version 1.28.0 (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/567">#567</a>)</li>
<li><a href="bc8b53a7ca"><code>bc8b53a</code></a> Fixes rescale internal allowing zeros to scale greater than the maximum possi...</li>
<li><a href="2da7a0d134"><code>2da7a0d</code></a> Explicit string (de)serialize for optional serde-with-str values (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/565">#565</a>)</li>
<li><a href="69c1e7f067"><code>69c1e7f</code></a> Implement <code>TryFrom\<&str></code> for <code>Decimal</code> (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/560">#560</a>)</li>
<li>See full diff in <a href="https://github.com/paupino/rust-decimal/compare/1.27.0...1.28.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
1287: build(deps): bump rust_decimal from 1.27.0 to 1.28.0 r=delta1 a=dependabot[bot]
Bumps [rust_decimal](https://github.com/paupino/rust-decimal) from 1.27.0 to 1.28.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/paupino/rust-decimal/blob/master/CHANGELOG.md">rust_decimal's changelog</a>.</em></p>
<blockquote>
<h2>1.28.0</h2>
<h3>Added</h3>
<ul>
<li>Implement <code>TryFrom<&str></code> for <code>Decimal</code> (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/pull/560">#560</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Explicit string deserialize for <code>Option<Decimal></code> when using <code>serde-with-str</code> (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/pull/565">#565</a>)</li>
<li>Fix for <code>rescale</code> preventing <code>Decimal::ZERO</code> to be rescaled to an invalid precision (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/pull/566">#566</a>)</li>
</ul>
<h3>Credit</h3>
<p>Thank you to <a href="https://github.com/c410-f3r"><code>`@c410-f3r</code></a>` for your diligent help adding features to this library!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="d62fe61025"><code>d62fe61</code></a> Version 1.28.0 (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/567">#567</a>)</li>
<li><a href="bc8b53a7ca"><code>bc8b53a</code></a> Fixes rescale internal allowing zeros to scale greater than the maximum possi...</li>
<li><a href="2da7a0d134"><code>2da7a0d</code></a> Explicit string (de)serialize for optional serde-with-str values (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/565">#565</a>)</li>
<li><a href="69c1e7f067"><code>69c1e7f</code></a> Implement <code>TryFrom\<&str></code> for <code>Decimal</code> (<a href="https://github-redirect.dependabot.com/paupino/rust-decimal/issues/560">#560</a>)</li>
<li>See full diff in <a href="https://github.com/paupino/rust-decimal/compare/1.27.0...1.28.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
1288: build(deps): bump async-trait from 0.1.62 to 0.1.63 r=delta1 a=dependabot[bot]
Bumps [async-trait](https://github.com/dtolnay/async-trait) from 0.1.62 to 0.1.63.
<details>
<summary>Commits</summary>
<ul>
<li><a href="36bcff4c0d"><code>36bcff4</code></a> Release 0.1.63</li>
<li><a href="f88c287dff"><code>f88c287</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dtolnay/async-trait/issues/235">#235</a> from dtolnay/patterns</li>
<li><a href="1c2e90a984"><code>1c2e90a</code></a> Make expansion of nested _ and .. patterns edition independent</li>
<li><a href="80a9c2c8af"><code>80a9c2c</code></a> Add regression test for issue 234</li>
<li><a href="125917ffe0"><code>125917f</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dtolnay/async-trait/issues/233">#233</a> from dtolnay/reference</li>
<li><a href="ba930258fa"><code>ba93025</code></a> Bypass Sync bound implied by non-existent drop of reference</li>
<li><a href="70bf4b0243"><code>70bf4b0</code></a> Add regression test for issue 232</li>
<li>See full diff in <a href="https://github.com/dtolnay/async-trait/compare/0.1.62...0.1.63">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1282: build(deps): bump serial_test from 0.10.0 to 1.0.0 r=delta1 a=dependabot[bot]
Bumps [serial_test](https://github.com/palfrey/serial_test) from 0.10.0 to 1.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/palfrey/serial_test/releases">serial_test's releases</a>.</em></p>
<blockquote>
<h2>v1.0.0</h2>
<p>Nothing since 0.10.0. Well, <a href="https://github-redirect.dependabot.com/palfrey/serial_test/pull/87">a test dependency upgrade on <code>tokio</code></a>, but nothing in the published library. This is mainly just as a "1.0!" release.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="47d09d04ef"><code>47d09d0</code></a> 1.0.0</li>
<li><a href="13c3d6123e"><code>13c3d61</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/palfrey/serial_test/issues/87">#87</a> from palfrey/dependabot/cargo/tokio-1.18.4</li>
<li><a href="125a3f6c7d"><code>125a3f6</code></a> Bump tokio from 1.17.0 to 1.18.4</li>
<li>See full diff in <a href="https://github.com/palfrey/serial_test/compare/v0.10.0...v1.0.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1283: build(deps): bump async-trait from 0.1.61 to 0.1.62 r=delta1 a=dependabot[bot]
Bumps [async-trait](https://github.com/dtolnay/async-trait) from 0.1.61 to 0.1.62.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dtolnay/async-trait/releases">async-trait's releases</a>.</em></p>
<blockquote>
<h2>0.1.62</h2>
<ul>
<li>Improve error message involving elided lifetimes (<a href="https://github-redirect.dependabot.com/dtolnay/async-trait/issues/229">#229</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="d71c74de7b"><code>d71c74d</code></a> Release 0.1.62</li>
<li><a href="861b6bc57f"><code>861b6bc</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dtolnay/async-trait/issues/230">#230</a> from dtolnay/definedhere</li>
<li><a href="b4c19da340"><code>b4c19da</code></a> Improve spans of named lifetimes generated from elided lifetimes</li>
<li><a href="8206008ede"><code>8206008</code></a> Add regression test for issue 229</li>
<li>See full diff in <a href="https://github.com/dtolnay/async-trait/compare/0.1.61...0.1.62">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
1284: build(deps): bump reqwest from 0.11.13 to 0.11.14 r=delta1 a=dependabot[bot]
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.11.13 to 0.11.14.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/releases">reqwest's releases</a>.</em></p>
<blockquote>
<h2>v0.11.14</h2>
<h2>What's Changed</h2>
<ul>
<li>Adds <code>Proxy::no_proxy(url)</code> that works like the NO_PROXY environment variable.</li>
<li>Adds <code>multipart::Part::headers(headers)</code> method to add custom headers.</li>
<li>(wasm) Add <code>Response::bytes_stream()</code>.</li>
<li>Perf: several internal optimizations reducing copies and memory allocations.</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Austaras"><code>`@Austaras</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/pull/1699">seanmonstar/reqwest#1699</a></li>
<li><a href="https://github.com/BlackDex"><code>`@BlackDex</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/pull/1701">seanmonstar/reqwest#1701</a></li>
<li><a href="https://github.com/Khoulaiz"><code>`@Khoulaiz</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/pull/1694">seanmonstar/reqwest#1694</a></li>
<li><a href="https://github.com/beeb"><code>`@beeb</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/pull/1687">seanmonstar/reqwest#1687</a></li>
<li><a href="https://github.com/link2xt"><code>`@link2xt</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/pull/1710">seanmonstar/reqwest#1710</a></li>
<li><a href="https://github.com/dmeijboom"><code>`@dmeijboom</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/pull/1713">seanmonstar/reqwest#1713</a></li>
<li><a href="https://github.com/lstrojny"><code>`@lstrojny</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/pull/1730">seanmonstar/reqwest#1730</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md">reqwest's changelog</a>.</em></p>
<blockquote>
<h2>v0.11.14</h2>
<ul>
<li>Adds <code>Proxy::no_proxy(url)</code> that works like the NO_PROXY environment variable.</li>
<li>Adds <code>multipart::Part::headers(headers)</code> method to add custom headers.</li>
<li>(wasm) Add <code>Response::bytes_stream()</code>.</li>
<li>Perf: several internal optimizations reducing copies and memory allocations.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="3459b89488"><code>3459b89</code></a> v0.11.14</li>
<li><a href="fac510365d"><code>fac5103</code></a> Use SPDX license identifier (<a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/issues/1730">#1730</a>)</li>
<li><a href="cda9c348bb"><code>cda9c34</code></a> Optimize the <code>NO_PROXY</code> domain matcher (<a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/issues/1728">#1728</a>)</li>
<li><a href="6f714f438a"><code>6f714f4</code></a> Unify basic-auth header generation (<a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/issues/1726">#1726</a>)</li>
<li><a href="6df88587ce"><code>6df8858</code></a> Update <code>base64</code> to 0.21 (<a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/issues/1725">#1725</a>)</li>
<li><a href="1d904968f1"><code>1d90496</code></a> Reduce string allocation during multipart header encoding (<a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/issues/1724">#1724</a>)</li>
<li><a href="4d96adfca5"><code>4d96adf</code></a> Implement bytes_stream() for wasm. (<a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/issues/1713">#1713</a>)</li>
<li><a href="c2a1870a3e"><code>c2a1870</code></a> Documentation fix: it's <code>TCP_NODELAY</code>, not <code>SO_NODELAY</code> (<a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/issues/1710">#1710</a>)</li>
<li><a href="b16ea79e28"><code>b16ea79</code></a> Add public interface to Multipart's Part <code>headers</code> (<a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/issues/1687">#1687</a>)</li>
<li><a href="cdbf84feb1"><code>cdbf84f</code></a> Adds <code>Proxy::no_proxy(url)</code> (<a href="https://github-redirect.dependabot.com/seanmonstar/reqwest/issues/1694">#1694</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/seanmonstar/reqwest/compare/v0.11.13...v0.11.14">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
1285: build(deps): bump toml from 0.5.10 to 0.5.11 r=delta1 a=dependabot[bot]
Bumps [toml](https://github.com/toml-rs/toml) from 0.5.10 to 0.5.11.
<details>
<summary>Commits</summary>
<ul>
<li><a href="0c2004aaa5"><code>0c2004a</code></a> chore: Release</li>
<li><a href="22660a5279"><code>22660a5</code></a> docs: Update changelog</li>
<li><a href="8395fd159b"><code>8395fd1</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/toml-rs/toml/issues/476">#476</a> from epage/deprecated</li>
<li><a href="d8dfb1cffe"><code>d8dfb1c</code></a> fix(toml): Deprecate 'Deserializer::end'</li>
<li><a href="266fa47a2e"><code>266fa47</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/toml-rs/toml/issues/393">#393</a> from epage/compat</li>
<li><a href="8ad0d37d2c"><code>8ad0d37</code></a> fix(toml): Deprecate compat hacks</li>
<li>See full diff in <a href="https://github.com/toml-rs/toml/compare/toml-v0.5.10...toml-v0.5.11">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dependabot[bot]