From 39775804266c8d44a057e2b0e8c4b111810fdbe1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 1 Aug 2025 22:00:13 +0000 Subject: [PATCH 1/3] chore(cargo): bump toml from 0.8.23 to 0.9.4 Bumps [toml](https://github.com/toml-rs/toml) from 0.8.23 to 0.9.4. - [Commits](https://github.com/toml-rs/toml/compare/toml-v0.8.23...toml-v0.9.4) --- updated-dependencies: - dependency-name: toml dependency-version: 0.9.4 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- Cargo.lock | 62 ++++++++++++++++++++++++++++++++++++++++++++++++------ Cargo.toml | 2 +- 2 files changed, 56 insertions(+), 8 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 387d35d8a..f45a1859e 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1366,7 +1366,7 @@ dependencies = [ "tokio-stream", "tokio-tar", "tokio-util", - "toml", + "toml 0.9.4", "tracing", "url", "uuid", @@ -2565,7 +2565,7 @@ dependencies = [ "os_info", "serde", "serde_derive", - "toml", + "toml 0.8.23", "uuid", ] @@ -5412,6 +5412,15 @@ dependencies = [ "serde", ] +[[package]] +name = "serde_spanned" +version = "1.0.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "40734c41988f7306bb04f0ecf60ec0f3f1caa34290e4e8ea471dcd3346483b83" +dependencies = [ + "serde", +] + [[package]] name = "serde_urlencoded" version = "0.7.1" @@ -6191,11 +6200,26 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dc1beb996b9d83529a9e75c17a1686767d148d70663143c7854d8b4a09ced362" dependencies = [ "serde", - "serde_spanned", - "toml_datetime", + "serde_spanned 0.6.9", + "toml_datetime 0.6.11", "toml_edit 0.22.27", ] +[[package]] +name = "toml" +version = "0.9.4" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "41ae868b5a0f67631c14589f7e250c1ea2c574ee5ba21c6c8dd4b1485705a5a1" +dependencies = [ + "indexmap", + "serde", + "serde_spanned 1.0.0", + "toml_datetime 0.7.0", + "toml_parser", + "toml_writer", + "winnow 0.7.11", +] + [[package]] name = "toml_datetime" version = "0.6.11" @@ -6205,6 +6229,15 @@ dependencies = [ "serde", ] +[[package]] +name = "toml_datetime" +version = "0.7.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bade1c3e902f58d73d3f294cd7f20391c1cb2fbcb643b73566bc773971df91e3" +dependencies = [ + "serde", +] + [[package]] name = "toml_edit" version = "0.20.7" @@ -6212,7 +6245,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "70f427fce4d84c72b5b732388bf4a9f4531b53f74e2887e3ecb2481f68f66d81" dependencies = [ "indexmap", - "toml_datetime", + "toml_datetime 0.6.11", "winnow 0.5.40", ] @@ -6224,18 +6257,33 @@ checksum = "41fe8c660ae4257887cf66394862d21dbca4a6ddd26f04a3560410406a2f819a" dependencies = [ "indexmap", "serde", - "serde_spanned", - "toml_datetime", + "serde_spanned 0.6.9", + "toml_datetime 0.6.11", "toml_write", "winnow 0.7.11", ] +[[package]] +name = "toml_parser" +version = "1.0.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "97200572db069e74c512a14117b296ba0a80a30123fbbb5aa1f4a348f639ca30" +dependencies = [ + "winnow 0.7.11", +] + [[package]] name = "toml_write" version = "0.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5d99f8c9a7727884afe522e9bd5edbfc91a3312b36a77b5fb8926e4c31a41801" +[[package]] +name = "toml_writer" +version = "1.0.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "fcc842091f2def52017664b53082ecbbeb5c7731092bad69d2c63050401dfd64" + [[package]] name = "tower" version = "0.5.2" diff --git a/Cargo.toml b/Cargo.toml index 88c38384d..f037a44ec 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -107,7 +107,7 @@ tokio-stream = { version = "0.1.17", features = ["fs"] } tokio-tar = { version = "0.3" } # TODO: integrate tokio into async-tar tokio-util = { workspace = true } tokio = { workspace = true, features = ["fs", "rt-multi-thread", "macros"] } -toml = "0.8" +toml = "0.9" tracing = "0.1.41" url = "2" uuid = { version = "1", features = ["serde", "v4"] } From 2d0b7b5bd88f8a7ae5bb0509c2ac3d3e9e614372 Mon Sep 17 00:00:00 2001 From: iequidoo Date: Sat, 2 Aug 2025 16:14:48 -0300 Subject: [PATCH 2/3] chore(cargo): bump human-panic from 2.0.2 to 2.0.3 --- Cargo.lock | 36 +++++------------------------------- 1 file changed, 5 insertions(+), 31 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index f45a1859e..8ca42f1e3 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1366,7 +1366,7 @@ dependencies = [ "tokio-stream", "tokio-tar", "tokio-util", - "toml 0.9.4", + "toml", "tracing", "url", "uuid", @@ -2557,15 +2557,15 @@ checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9" [[package]] name = "human-panic" -version = "2.0.2" +version = "2.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "80b84a66a325082740043a6c28bbea400c129eac0d3a27673a1de971e44bf1f7" +checksum = "ac63a746b187e95d51fe16850eb04d1cfef203f6af98e6c405a6f262ad3df00a" dependencies = [ "backtrace", "os_info", "serde", "serde_derive", - "toml 0.8.23", + "toml", "uuid", ] @@ -5403,15 +5403,6 @@ dependencies = [ "serde", ] -[[package]] -name = "serde_spanned" -version = "0.6.9" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3" -dependencies = [ - "serde", -] - [[package]] name = "serde_spanned" version = "1.0.0" @@ -6193,18 +6184,6 @@ dependencies = [ "tokio-util", ] -[[package]] -name = "toml" -version = "0.8.23" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "dc1beb996b9d83529a9e75c17a1686767d148d70663143c7854d8b4a09ced362" -dependencies = [ - "serde", - "serde_spanned 0.6.9", - "toml_datetime 0.6.11", - "toml_edit 0.22.27", -] - [[package]] name = "toml" version = "0.9.4" @@ -6213,7 +6192,7 @@ checksum = "41ae868b5a0f67631c14589f7e250c1ea2c574ee5ba21c6c8dd4b1485705a5a1" dependencies = [ "indexmap", "serde", - "serde_spanned 1.0.0", + "serde_spanned", "toml_datetime 0.7.0", "toml_parser", "toml_writer", @@ -6225,9 +6204,6 @@ name = "toml_datetime" version = "0.6.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "22cddaf88f4fbc13c51aebbf5f8eceb5c7c5a9da2ac40a13519eb5b0a0e8f11c" -dependencies = [ - "serde", -] [[package]] name = "toml_datetime" @@ -6256,8 +6232,6 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "41fe8c660ae4257887cf66394862d21dbca4a6ddd26f04a3560410406a2f819a" dependencies = [ "indexmap", - "serde", - "serde_spanned 0.6.9", "toml_datetime 0.6.11", "toml_write", "winnow 0.7.11", From 4f1bf1f13c859705897f22a2e66362b341efc720 Mon Sep 17 00:00:00 2001 From: iequidoo Date: Sat, 2 Aug 2025 16:16:43 -0300 Subject: [PATCH 3/3] chore(deny.toml): add exception for duplicate toml_datetime 0.6.11 dependency --- deny.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/deny.toml b/deny.toml index dbded77e9..ef5fd5043 100644 --- a/deny.toml +++ b/deny.toml @@ -48,6 +48,7 @@ skip = [ { name = "syn", version = "1.0.109" }, { name = "thiserror-impl", version = "1.0.69" }, { name = "thiserror", version = "1.0.69" }, + { name = "toml_datetime", version = "0.6.11" }, { name = "wasi", version = "0.11.0+wasi-snapshot-preview1" }, { name = "windows" }, { name = "windows_aarch64_gnullvm" },