chore(deps): update all dependencies #3

kjuulh · 2024-03-12T06:28:48+01:00

kjuulh commented

2024-03-12 06:28:48 +01:00

This PR contains the following updates:

Package	Type	Update	Change
@types/node (source)	devDependencies	minor	`20.12.4` -> `20.16.10`
autoprefixer	devDependencies	patch	`10.4.19` -> `10.4.20`
axum	workspace.dependencies	patch	`0.7.5` -> `0.7.7`
leptos	workspace.dependencies	patch	`0.6.14` -> `0.6.15`
leptos_axum	workspace.dependencies	patch	`0.6.14` -> `0.6.15`
leptos_meta	workspace.dependencies	patch	`0.6.14` -> `0.6.15`
leptos_router	workspace.dependencies	patch	`0.6.14` -> `0.6.15`
postcss (source)	devDependencies	patch	`8.4.38` -> `8.4.47`
server_fn	workspace.dependencies	patch	`0.6.14` -> `0.6.15`
sqlx	dependencies	minor	`0.7.3` -> `0.8.0`
tailwindcss (source)	devDependencies	patch	`3.4.3` -> `3.4.13`
thiserror	workspace.dependencies	patch	`1.0.63` -> `1.0.64`
tokio (source)	workspace.dependencies	minor	`1.39.3` -> `1.40.0`
tower	workspace.dependencies	patch	`0.5.0` -> `0.5.1`
tower-http	dependencies	minor	`0.5.2` -> `0.6.0`
tower-http	workspace.dependencies	minor	`0.5` -> `0.6`
typescript (source)	devDependencies	minor	`5.4.4` -> `5.6.2`
uuid	dependencies	minor	`1.7.0` -> `1.10.0`

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

postcss/autoprefixer (autoprefixer)

`v10.4.20`

Compare Source

Fixed fit-content prefix for Firefox.

tokio-rs/axum (axum)

`v0.7.7`: axum v0.7.7

Compare Source

change: Remove manual tables of content from the documentation, since
rustdoc now generates tables of content in the sidebar (#2921)

`v0.7.6`: axum - v0.7.6

Compare Source

change: Avoid cloning Arc during deserialization of Path
added: axum::serve::Serve::tcp_nodelay and axum::serve::WithGracefulShutdown::tcp_nodelay (#2653)
added: Router::has_routes function (#2790)
change: Update tokio-tungstenite to 0.23 (#2841)
added: Serve::local_addr and WithGracefulShutdown::local_addr functions (#2881)

leptos-rs/leptos (leptos)

`v0.6.15`

Compare Source

Belated release notes for 0.6.15. This was a quick patch release to incorporate two changes, one to improve rust-analyzer support and the other to switch from the unmaintained proc-macro-error to proc-macro-error2 per RUSTSEC.

What's Changed

[0.6] fix: Rust-Analyzer hover information / redundant spans by @chrisp60 in https://github.com/leptos-rs/leptos/pull/2840
leptos 0.6: Switch to proc-macro-error2 to address unmaintained security advisory. by @azriel91 in https://github.com/leptos-rs/leptos/pull/2935

Full Changelog: https://github.com/leptos-rs/leptos/compare/v0.6.14...v0.6.15

postcss/postcss (postcss)

`v8.4.47`

Compare Source

Removed debug code.

`v8.4.46`

Compare Source

Fixed Cannot read properties of undefined (reading 'before').

`v8.4.45`

Compare Source

Removed unnecessary fix which could lead to infinite loop.

`v8.4.44`

Compare Source

Another way to fix markClean is not a function error.

`v8.4.43`

Compare Source

Fixed markClean is not a function error.

`v8.4.42`

Compare Source

Fixed CSS syntax error on long minified files (by @varpstar).

`v8.4.41`

Compare Source

Fixed types (by @nex3 and @querkmachine).
Cleaned up RegExps (by @bluwy).

`v8.4.40`

Compare Source

Moved to getter/setter in nodes types to help Sass team (by @nex3).

`v8.4.39`

Compare Source

Fixed CssSyntaxError types (by @romainmenke).

launchbadge/sqlx (sqlx)

`v0.8.2`

Compare Source

10 pull requests were merged this release cycle.

This release addresses a few regressions that have occurred, and refines SQLx's MSRV policy (see the FAQ).

Added

[#3447]: Clarify usage of Json/Jsonb in query macros [[@Lachstec]]

Changed

[#3424]: Remove deprecated feature-names from Cargo.toml files in examples [[@carschandler]]

Fixed

[#3403]: Fix (#3395) sqlx::test macro in 0.8 [[@joeydewaal]]
[#3411]: fix: Use rfc3339 to decode date from text [[@pierre-wehbe]]
[#3453]: fix(#3445): PgHasArrayType [[@joeydewaal]]
- Fixes #[sqlx(no_pg_array)] being forbidden on #[derive(Type)] structs.
[#3454]: fix: non snake case warning [[@joeydewaal]]
[#3459]: Pgsql cube type compile fail [[@kdesjard]]
[#3465]: fix(postgres): max number of binds is 65535, not 32767 (regression) [[@abonander]]
[#3467]: fix cancellation issues with PgListener, PgStream::recv() [[@abonander]]
- Fixes cryptic unknown message: "\\0" error
[#3474]: Fix try_get example in README.md [[@luveti]]

`v0.8.1`

Compare Source

16 pull requests were merged this release cycle.

This release contains a fix for RUSTSEC-2024-0363.

Postgres users are advised to upgrade ASAP as a possible exploit has been demonstrated:
#3440 (comment)

MySQL and SQLite do not appear to be exploitable, but upgrading is recommended nonetheless.

Added

[#3421]: correct spelling of MySqlConnectOptions::no_engine_substitution() [[@kolinfluence]]
- Deprecates MySqlConnectOptions::no_engine_subsitution() (oops) in favor of the correctly spelled version.

Changed

[#3376]: doc: hide spec_error module [[@abonander]]
- This is a helper module for the macros and was not meant to be exposed.
- It is not expected to receive any breaking changes for the 0.8.x release, but is not designed as a public API.
  Use at your own risk.
[#3382]: feat: bumped to libsqlite3-sys=0.30.1 to support sqlite 3.46 [[@CommanderStorm]]
[#3385]: chore(examples):Migrated the pg-chat example to ratatui [[@CommanderStorm]]
[#3399]: Upgrade to rustls 0.23 [[@djc]]
- RusTLS now has pluggable cryptography providers: ring (the existing implementation),
  and aws-lc-rs which has optional FIPS certification.
- The existing features activating RusTLS (runtime-tokio-rustls, runtime-async-std-rustls, tls-rustls)
  enable the ring provider of RusTLS to match the existing behavior so this should not be a breaking change.
- Switch to the tls-rustls-aws-lc-rs feature to use the aws-lc-rs provider.
  - If using runtime-tokio-rustls or runtime-async-std-rustls,
    this will necessitate switching to the appropriate non-legacy runtime feature:
    runtime-tokio or runtime-async-std
- See the RusTLS README for more details: https://github.com/rustls/rustls?tab=readme-ov-file#cryptography-providers

Fixed

[#2786]: fix(sqlx-cli): do not clean sqlx during prepare [[@cycraig]]
[#3354]: sqlite: fix inconsistent read-after-write [[@ckampfe]]
[#3371]: Fix encoding and decoding of MySQL enums in sqlx::Type [[@alu]]
[#3374]: fix: usage of node12 in SQLx action [[@hamirmahal]]
[#3380]: chore: replace structopt with clap in examples [[@tottoto]]
[#3381]: Fix CI after Rust 1.80, remove dead feature references [[@abonander]]
[#3384]: chore(tests): fixed deprecation warnings [[@CommanderStorm]]
[#3386]: fix(dependencys):bumped cargo_metadata to v0.18.1 to avoid yanked v0.14.3 [[@CommanderStorm]]
[#3389]: fix(cli): typo in error for required DB URL [[@ods]]
[#3417]: Update version to 0.8 in README [[@soucosmo]]
[#3441]: fix: audit protocol handling [[@abonander]]
- This addresses RUSTSEC-2024-0363 and includes regression tests for MySQL, Postgres and SQLite.

`v0.8.0`

Compare Source

70 pull requests were merged this release cycle.

#2697 was merged the same day as release 0.7.4 and so was missed by the automatic CHANGELOG generation.

Breaking

[#2697]: fix(macros): only enable chrono when time is disabled [[@saiintbrisson]]
[#2973]: Generic Associated Types in Database, replacing HasValueRef, HasArguments, HasStatement [[@nitn3lav]]
[#2482]: chore: bump syn to 2.0 [[@saiintbrisson]]
- Deprecated type ascription syntax in the query macros was removed.
[#2736]: Fix describe on PostgreSQL views with rules [[@tsing]]
- Potentially breaking: nullability inference changes for Postgres.
[#2869]: Implement PgHasArrayType for all references [[@tylerhawkes]]
- Conflicts with existing manual implementations.
[#2940]: fix: Decode and Encode derives (#1031) [[@benluelo]]
- Changes lifetime obligations for field types.
[#3064]: Sqlite explain graph [[@tyrelr]]
- Potentially breaking: nullability inference changes for SQLite.
[#3123]: Reorder attrs in sqlx::test macro [[@bobozaur]]
- Potentially breaking: attributes on #[sqlx::test] usages are applied in the correct order now.
[#3126]: Make Encode return a result [[@FSMaxB]]
[#3130]: Add version information for failed cli migration (#3129) [[@FlakM]]
- Breaking changes to MigrateError.
[#3181]: feat: no tx migration [[@cleverjam]]
- (Postgres only) migrations that should not run in a transaction can be flagged by adding -- no-transaction to the beginning.
- Breaking change: added field to Migration
[#3184]: [BREAKING} fix(sqlite): always use i64 as intermediate when decoding [[@abonander]]
- integer decoding will now loudly error on overflow instead of silently truncating.
- some usages of the query!() macros might change an i32 to an i64.
[#3252]: fix #[derive(sqlx::Type)] in Postgres [[@abonander]]
- Manual implementations of PgHasArrayType for enums will conflict with the generated one. Delete the manual impl or add #[sqlx(no_pg_array)] where conflicts occur.
- Type equality for PgTypeInfo is now schema-aware.
[#3329]: fix: correct handling of arrays of custom types in Postgres [[@abonander]]
- Potential breaking change: PgTypeInfo::with_name() infers types that start with _ to be arrays of the un-prefixed type. Wrap type names in quotes to bypass this behavior.
[#3356]: breaking: fix name collision in FromRow, return Error::ColumnDecode for TryFrom errors [[@abonander]]
- Breaking behavior change: errors with #[sqlx(try_from = "T")] now return Error::ColumnDecode instead of Error::ColumnNotFound.
- Breaking because #[sqlx(default)] on an individual field or the struct itself would have previously suppressed the error.
  This doesn't seem like good behavior as it could result in some potentially very difficult bugs.
  - Instead, create a wrapper implementing From and apply the default explicitly.
[#3337]: allow rename with rename_all (close #2896) [[@DirectorX]]
- Changes the precedence of #[sqlx(rename)] and #[sqlx(rename_all)] to match the expected behavior (rename wins).
[#3285]: fix: use correct names for sslmode options [[@lily-mosquitoes]]
- Changes the output of ConnectOptions::to_url_lossy() to match what parsing expects.

Added

[#2917]: Add Debug impl for PgRow [[@g-bartoszek]]
[#3113]: feat: new derive feature flag [[@saiintbrisson]]
[#3154]: feat: add MySqlTime, audit mysql::types for panics [[@abonander]]
[#3188]: feat(cube): support postgres cube [[@jayy-lmao]]
[#3244]: feat: support NonZero* scalar types [[@AlphaKeks]]
[#3260]: feat: Add set_update_hook on SqliteConnection [[@gridbox]]
[#3291]: feat: support the Postgres Bool type for the Any driver [[@etorreborre]]
[#3293]: Add LICENSE-* files to crates [[@LecrisUT]]
[#3303]: add array support for NonZeroI* in postgres [[@JohannesIBK]]
[#3311]: Add example on how to use Transaction as Executor [[@Lachstec]]
[#3343]: Add support for PostgreSQL HSTORE data type [[@KobusEllis]]

Changed

[#2652]: MySQL: Remove collation compatibility check for strings [[@alu]]
[#2960]: Removed Send trait bound from argument binding [[@bobozaur]]
[#2970]: refactor: lift type mappings into driver crates [[@abonander]]
[#3148]: Bump libsqlite3-sys to v0.28 [[@NfNitLoop]]
- Note: version bumps to libsqlite3-sys are not considered breaking changes as per our semver guarantees.
[#3265]: perf: box MySqlConnection to reduce sizes of futures [[@stepantubanov]]
[#3352]: chore:added a testcase for sqlx migrate add ... [[@CommanderStorm]]
[#3340]: ci: Add job to check that sqlx builds with its declared minimum dependencies [[@iamjpotts]]

Fixed

[#2702]: Constrain cyclic associated types to themselves [[@BadBastion]]
[#2954]: Fix several inter doc links [[@ralpha]]
[#3073]: feat(logging): Log slow acquires from connection pool [[@iamjpotts]]
[#3137]: SqliteConnectOptions::filename() memory fix (#3136) [[@hoxxep]]
[#3138]: PostgreSQL Bugfix: Ensure connection is usable after failed COPY inside a transaction [[@feikesteenbergen]]
[#3146]: fix(sqlite): delete unused ConnectionHandleRaw type [[@abonander]]
[#3162]: Drop urlencoding dependency [[@paolobarbolini]]
[#3165]: Bump deps that do not need code changes [[@GnomedDev]]
[#3167]: fix(ci): use docker compose instead of docker-compose [[@abonander]]
[#3172]: fix: Option decoding in any driver [[@pxp9]]
[#3173]: fix(postgres) : int type conversion while decoding [[@RaghavRox]]
[#3190]: Update time to 0.3.36 [[@BlackSoulHub]]
[#3191]: Fix unclean TLS shutdown [[@levkk]]
[#3194]: Fix leaking connections in fetch_optional (#2647) [[@danjpgriffin]]
[#3216]: security: bump rustls to 0.21.11 [[@toxeus]]
[#3230]: fix: sqlite pragma order for auto_vacuum [[@jasonish]]
[#3233]: fix: get_filename should not consume self [[@jasonish]]
[#3234]: fix(ci): pin Rust version, ditch unmaintained actions [[@abonander]]
[#3236]: fix: resolve path ownership problems when using sqlx_macros_unstable [[@lily-mosquitoes]]
[#3254]: fix: hide sqlx_postgres::any [[@Zarathustra2]]
[#3266]: ci: MariaDB - add back 11.4 and add 11.5 [[@grooverdan]]
[#3267]: ci: syntax fix [[@grooverdan]]
[#3271]: docs(sqlite): fix typo - unixtime() -> unixepoch() [[@joelkoen]]
[#3276]: Invert boolean for migrate error message. (#3275) [[@nk9]]
[#3279]: fix Clippy errors [[@abonander]]
[#3288]: fix: sqlite update_hook char types [[@jasonish]]
[#3297]: Pass the persistent query setting when preparing queries with the Any driver [[@etorreborre]]
[#3298]: Track null arguments in order to provide the appropriate type when converting them. [[@etorreborre]]
[#3312]: doc: Minor rust docs fixes [[@SrGesus]]
[#3327]: chore: fixed one usage of select_input_type!() being unhygenic [[@CommanderStorm]]
[#3328]: fix(ci): comment not separated from other characters [[@hamirmahal]]
[#3341]: refactor: Resolve cargo check warnings in postgres examples [[@iamjpotts]]
[#3346]: fix(postgres): don't panic if M or C Notice fields are not UTF-8 [[@YgorSouza]]
[#3350]: fix:the json-feature should activate sqlx-postgres?/json as well [[@CommanderStorm]]
[#3353]: fix: build script new line at eof [[@Zarthus]]
(no PR): activate clock and std features of workspace.dependencies.chrono.

`v0.7.4`

Compare Source

38 pull requests were merged this release cycle.

This is officially the last release of the 0.7.x release cycle.

As of this release, development of 0.8.0 has begun on main and only high-priority bugfixes may be backported.

Added

[#2891]: feat: expose getters for connect options fields [[@saiintbrisson]]
[#2902]: feat: add to_url_lossy to connect options [[@lily-mosquitoes]]
[#2927]: Support query! for cargo-free systems [[@kshramt]]
[#2997]: doc(FAQ): add entry explaining prepared statements [[@abonander]]
[#3001]: Update README to clarify MariaDB support [[@iangilfillan]]
[#3004]: feat(logging): Add numeric elapsed time field elapsed_secs [[@iamjpotts]]
[#3007]: feat: add raw_sql API [[@abonander]]
- This hopefully makes it easier to find how to execute statements which are not supported by the default
  prepared statement interfaces query*() and query!().
- Improved documentation across the board for the query*() functions.
- Deprecated: execute_many() and fetch_many() on interfaces that use prepared statements.
  - Multiple SQL statements in one query string were only supported by SQLite because its prepared statement
    interface is the only way to execute SQL. All other database flavors forbid multiple statements in
    one prepared statement string as an extra defense against SQL injection.
  - The new raw_sql API retains this functionality because it explicitly does not use prepared statements.
    Raw or text-mode query interfaces generally allow multiple statements in one query string, and this is
    supported by all current databases. Due to their nature, however, one cannot use bind parameters with them.
  - If this change affects you, an issue is open for discussion: https://github.com/launchbadge/sqlx/issues/3108
[#3011]: Added support to IpAddr with MySQL/MariaDB. [[@Icerath]]
[#3013]: Add default implementation for PgInterval [[@pawurb]]
[#3018]: Add default implementation for PgMoney [[@pawurb]]
[#3026]: Update docs to reflect support for MariaDB data types [[@iangilfillan]]
[#3037]: feat(mysql): allow to connect with mysql driver without default behavor [[@darkecho731]]

Changed

[#2900]: Show latest url to docs for macro.migrate [[@Vrajs16]]
[#2914]: Use create_new instead of atomic-file-write [[@mattfbacon]]
[#2926]: docs: update example for PgConnectOptions [[@Fyko]]
[#2989]: sqlx-core: Remove dotenvy dependency [[@joshtriplett]]
[#2996]: chore: Update ahash to 0.8.7 [[@takenoko-gohan]]
[#3006]: chore(deps): Replace unmaintained tempdir crate with tempfile [[@iamjpotts]]
[#3008]: chore: Ignore .sqlx folder created by running ci steps locally [[@iamjpotts]]
[#3009]: chore(dev-deps): Upgrade env_logger from 0.9 to 0.11 [[@iamjpotts]]
[#3010]: chore(deps): Upgrade criterion to 0.5.1 [[@iamjpotts]]
[#3050]: Optimize SASL auth in sqlx-postgres [[@mirek26]]
[#3055]: Set TCP_NODELAY option on TCP sockets [[@mirek26]]
[#3065]: Improve max_lifetime handling [[@mirek26]]
[#3072]: Change the name of "inner" function generated by #[sqlx::test] [[@ciffelia]]
[#3083]: Remove sha1 because it's not being used in postgres [[@rafaelGuerreiro]]

Fixed

[#2898]: Fixed docs [[@Vrajs16]]
[#2905]: fix(mysql): Close prepared statement if persistence is disabled [[@larsschumacher]]
[#2913]: Fix handling of deferred constraints [[@Thomasdezeeuw]]
[#2919]: fix duplicate "`" in FromRow "default" attribute doc comment [[@shengsheng]]
[#2932]: fix(postgres): avoid unnecessary flush in PgCopyIn::read_from [[@tsing]]
[#2955]: Minor fixes [[@Dawsoncodes]]
[#2963]: Fixed ReadMe badge styling [[@tadghh]]
[#2976]: fix: AnyRow not support PgType::Varchar [[@holicc]]
[#3053]: fix: do not panic when binding a large BigDecimal [[@Ekleog]]
[#3056]: fix: spans in sqlite tracing (#2876) [[@zoomiti]]
[#3089]: fix(migrate): improve error message when parsing version from filename [[@abonander]]
[#3098]: Migrations fixes [[@abonander]]
- Unhides sqlx::migrate::Migrator.
- Improves I/O error message when failing to read a file in migrate!().

Fix detection of some utilities in Slim/Pug templates (#14006)

Changed

Loosen :is() wrapping rules when using an important selector (#13900)

`v3.4.5`

Compare Source

Fixed

Disable automatic var() injection for anchor properties (#13826)
Use no value instead of blur(0px) for backdrop-blur-none and blur-none utilities (#13830)
Add .mts and .cts config file detection (#13940)
Don't generate utilities like px-1 unnecessarily when using utilities like px-1.5 (#13959)
Always generate -webkit-backdrop-filter for backdrop-* utilities (#13997)

`v3.4.4`

Compare Source

Fixed

Make it possible to use multiple <alpha-value> placeholders in a single color definition (#13740)
Don't prefix classes in arbitrary values of has-*, group-has-*, and peer-has-* variants (#13770)
Support negative values for {col,row}-{start,end} utilities (#13781)
Update embedded browserslist database (#13792)

dtolnay/thiserror (thiserror)

`v1.0.64`

Compare Source

Exclude derived impls from coverage instrumentation (#322, thanks @oxalica)

tokio-rs/tokio (tokio)

`v1.40.0`: Tokio v1.40.0

Compare Source

1.40.0 (August 30th, 2024)

Added

io: add util::SimplexStream (#6589)
process: stabilize Command::process_group (#6731)
sync: add {TrySendError,SendTimeoutError}::into_inner (#6755)
task: add JoinSet::join_all (#6784)

Added (unstable)

runtime: add Builder::{on_task_spawn, on_task_terminate} (#6742)

Changed

io: use vectored io for write_all_buf when possible (#6724)
runtime: prevent niche-optimization to avoid triggering miri (#6744)
sync: mark mpsc types as UnwindSafe (#6783)
sync,time: make Sleep and BatchSemaphore instrumentation explicit roots (#6727)
task: use NonZeroU64 for task::Id (#6733)
task: include panic message when printing JoinError (#6753)
task: add #[must_use] to JoinHandle::abort_handle (#6762)
time: eliminate timer wheel allocations (#6779)

Documented

docs: clarify that [build] section doesn't go in Cargo.toml (#6728)
io: clarify zero remaining capacity case (#6790)
macros: improve documentation for select! (#6774)
sync: document mpsc channel allocation behavior (#6773)

tower-rs/tower (tower)

`v0.5.1`: tower 0.5.1

Compare Source

Fix minimum version of tower-layer dependency (#787)

tower-rs/tower-http (tower-http)

`v0.6.1`: v0.6.1

Compare Source

Fixed

decompression: reuse scratch buffer to significantly reduce allocations and improve performance (#521)

New Contributors

@magurotuna made their first contribution in https://github.com/tower-rs/tower-http/pull/521

`v0.6.0`: v0.6.0

Compare Source

Changed:

body module is disabled except for catch-panic, decompression-*, fs, or limit features (BREAKING) (#477)
Update to tower 0.5 (#503)

Fixed

fs: Precompression of static files now supports files without a file extension (#507)

microsoft/TypeScript (typescript)