lilly/nm-file-secret-agent
1
0
Fork 0
Code Issues Pull requests 1 Releases Activity

fix(deps): update all non-major dependencies #9

Open
renovatebot wants to merge 1 commit from renovate/all-minor-patch into main
pull from: renovate/all-minor-patch
merge into: lilly:main
Conversation 0 Commits 1 Files changed 2 +124 -76
renovatebot commented 2025-04-24 09:38:09 +02:00
Collaborator
Copy link

This PR contains the following updates:

Package Type Update Change
anyhow dependencies patch 1.0.97 -> 1.0.100
clap dependencies patch 4.5.32 -> 4.5.51
dbus dependencies patch 0.9.7 -> 0.9.9
serde (source) dependencies patch 1.0.219 -> 1.0.228
toml dependencies minor 0.8.19 -> 0.9.0
tracing-subscriber (source) dependencies patch 0.3.19 -> 0.3.20
uuid dependencies minor 1.16.0 -> 1.18.1

Release Notes

dtolnay/anyhow (anyhow)

v1.0.100

Compare Source

  • Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#​426)

v1.0.99

Compare Source

  • Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#​420)

v1.0.98

Compare Source

clap-rs/clap (clap)

v4.5.51

Compare Source

Fixes
  • (help) Correctly calculate padding for short flags that take a value
  • (help) Don't panic on short flags using ArgAction::Count

v4.5.50

Compare Source

Features
  • Accept Cow where String and &str are accepted

v4.5.49

Compare Source

Fixes
  • (help) Correctly wrap when ANSI escape codes are present

v4.5.48

Compare Source

Documentation
  • Add a new CLI Concepts document as another way of framing clap
  • Expand the typed_derive cookbook entry

v4.5.47

Compare Source

Features
  • Added impl FromArgMatches for ()
  • Added impl Args for ()
  • Added impl Subcommand for ()
  • Added impl FromArgMatches for Infallible
  • Added impl Subcommand for Infallible
Fixes
  • (derive) Update runtime error text to match clap

v4.5.46

Compare Source

Features
  • Expose StyledStr::push_str

v4.5.45

Compare Source

Fixes
  • (unstable-v5) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

v4.5.44

Compare Source

Features
  • Add Command::mut_subcommands

v4.5.43

Compare Source

Fixes
  • (help) In long help, list Possible Values before defaults, rather than after, for a more consistent look

v4.5.42

Compare Source

Fixes
  • Include subcommand visible long aliases in --help

v4.5.41

Compare Source

Features
  • Add Styles::context and Styles::context_value to customize the styling of [default: value] like notes in the --help

v4.5.40

Compare Source

Features
  • Support quoted ids in arg!() macro (e.g. arg!("check-config": ...))

v4.5.39

Compare Source

Fixes
  • (help) Show short flag aliases before long
  • (help) Merge the short and long flag alias lists

v4.5.38

Compare Source

Fixes
  • (help) When showing aliases, include leading -- or -

v4.5.37

Compare Source

Features
  • Added ArgMatches::try_clear_id()

v4.5.36

Compare Source

Fixes
  • (help) Revert 4.5.35's "Don't leave space for shorts if there are none" for now

v4.5.35

Compare Source

Fixes
  • (help) Align positionals and flags when put in the same help_heading
  • (help) Don't leave space for shorts if there are none

v4.5.34

Compare Source

Fixes
  • (help) Don't add extra blank lines with flatten_help(true) and subcommands without arguments

v4.5.33

Compare Source

Fixes
  • (error) When showing the usage of a suggestion for an unknown argument, don't show the group
diwic/dbus-rs (dbus)

v0.9.9

Compare Source

v0.9.8

Compare Source

serde-rs/serde (serde)

v1.0.228

Compare Source

  • Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#​2995)

v1.0.227

Compare Source

v1.0.226

Compare Source

  • Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#​2935, thanks @​Mingun)

v1.0.225

Compare Source

  • Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#​2879, thanks @​rcrisanti)

v1.0.224

Compare Source

  • Remove private types being suggested in rustc diagnostics (#​2979)

v1.0.223

Compare Source

  • Fix serde_core documentation links (#​2978)

v1.0.222

Compare Source

  • Make serialize_with attribute produce code that works if respanned to 2024 edition (#​2950, thanks @​aytey)

v1.0.221

Compare Source

  • Documentation improvements (#​2973)
  • Deprecate serde_if_integer128! macro (#​2975)

v1.0.220

Compare Source

toml-rs/toml (toml)

v0.9.8

Compare Source

v0.9.7

Compare Source

v0.9.6

Compare Source

v0.9.5

Compare Source

v0.9.4

Compare Source

v0.9.3

Compare Source

v0.9.2

Compare Source

v0.9.1

Compare Source

v0.9.0

Compare Source

v0.8.23

Compare Source

v0.8.22

Compare Source

v0.8.21

Compare Source

tokio-rs/tracing (tracing-subscriber)

v0.3.20: tracing-subscriber 0.3.20

Compare Source

Security Fix: ANSI Escape Sequence Injection (CVE-TBD)

Impact

Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:

  • Manipulate terminal title bars
  • Clear screens or modify terminal display
  • Potentially mislead users through terminal manipulation

In isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.

Solution

Version 0.3.20 fixes this vulnerability by escaping ANSI control characters in when writing events to destinations that may be printed to the terminal.

Affected Versions

All versions of tracing-subscriber prior to 0.3.20 are affected by this vulnerability.

Recommendations

Immediate Action Required: We recommend upgrading to tracing-subscriber 0.3.20 immediately, especially if your application:

  • Logs user-provided input (form data, HTTP headers, query parameters, etc.)
  • Runs in environments where terminal output is displayed to users

Migration

This is a patch release with no breaking API changes. Simply update your Cargo.toml:

[dependencies]
tracing-subscriber = "0.3.20"

Acknowledgments

We would like to thank zefr0x who responsibly reported the issue at security@tokio.rs.

If you believe you have found a security vulnerability in any tokio-rs project, please email us at security@tokio.rs.

uuid-rs/uuid (uuid)

v1.18.1

Compare Source

What's Changed

Full Changelog: https://github.com/uuid-rs/uuid/compare/v1.18.0...v1.18.1

v1.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/uuid-rs/uuid/compare/v1.17.0...v1.18.0

v1.17.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/uuid-rs/uuid/compare/v1.16.0...v1.17.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [anyhow](https://github.com/dtolnay/anyhow) | dependencies | patch | `1.0.97` -> `1.0.100` | | [clap](https://github.com/clap-rs/clap) | dependencies | patch | `4.5.32` -> `4.5.51` | | [dbus](https://github.com/diwic/dbus-rs) | dependencies | patch | `0.9.7` -> `0.9.9` | | [serde](https://serde.rs) ([source](https://github.com/serde-rs/serde)) | dependencies | patch | `1.0.219` -> `1.0.228` | | [toml](https://github.com/toml-rs/toml) | dependencies | minor | `0.8.19` -> `0.9.0` | | [tracing-subscriber](https://tokio.rs) ([source](https://github.com/tokio-rs/tracing)) | dependencies | patch | `0.3.19` -> `0.3.20` | | [uuid](https://github.com/uuid-rs/uuid) | dependencies | minor | `1.16.0` -> `1.18.1` | --- ### Release Notes <details> <summary>dtolnay/anyhow (anyhow)</summary> ### [`v1.0.100`](https://github.com/dtolnay/anyhow/releases/tag/1.0.100) [Compare Source](https://github.com/dtolnay/anyhow/compare/1.0.99...1.0.100) - Teach clippy to lint formatting arguments in `bail!`, `ensure!`, `anyhow!` ([#&#8203;426](https://github.com/dtolnay/anyhow/issues/426)) ### [`v1.0.99`](https://github.com/dtolnay/anyhow/releases/tag/1.0.99) [Compare Source](https://github.com/dtolnay/anyhow/compare/1.0.98...1.0.99) - Allow build-script cleanup failure with NFSv3 output directory to be non-fatal ([#&#8203;420](https://github.com/dtolnay/anyhow/issues/420)) ### [`v1.0.98`](https://github.com/dtolnay/anyhow/releases/tag/1.0.98) [Compare Source](https://github.com/dtolnay/anyhow/compare/1.0.97...1.0.98) - Add [`self.into_boxed_dyn_error()`](https://docs.rs/anyhow/1/anyhow/struct.Error.html#method.into_boxed_dyn_error) and [`self.reallocate_into_boxed_dyn_error_without_backtrace()`](https://docs.rs/anyhow/1/anyhow/struct.Error.html#method.reallocate_into_boxed_dyn_error_without_backtrace) methods for anyhow::Error ([#&#8203;415](https://github.com/dtolnay/anyhow/issues/415)) </details> <details> <summary>clap-rs/clap (clap)</summary> ### [`v4.5.51`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4551---2025-10-29) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.50...v4.5.51) ##### Fixes - *(help)* Correctly calculate padding for short flags that take a value - *(help)* Don't panic on short flags using `ArgAction::Count` ### [`v4.5.50`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4550---2025-10-20) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.49...v4.5.50) ##### Features - Accept `Cow` where `String` and `&str` are accepted ### [`v4.5.49`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4549---2025-10-13) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.48...v4.5.49) ##### Fixes - *(help)* Correctly wrap when ANSI escape codes are present ### [`v4.5.48`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4548---2025-09-19) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.47...v4.5.48) ##### Documentation - Add a new CLI Concepts document as another way of framing clap - Expand the `typed_derive` cookbook entry ### [`v4.5.47`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4547---2025-09-02) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.46...v4.5.47) ##### Features - Added `impl FromArgMatches for ()` - Added `impl Args for ()` - Added `impl Subcommand for ()` - Added `impl FromArgMatches for Infallible` - Added `impl Subcommand for Infallible` ##### Fixes - *(derive)* Update runtime error text to match `clap` ### [`v4.5.46`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4546---2025-08-26) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.45...v4.5.46) ##### Features - Expose `StyledStr::push_str` ### [`v4.5.45`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4545---2025-08-12) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.44...v4.5.45) ##### Fixes - *(unstable-v5)* `ValueEnum` variants now use the full doc comment, not summary, for `PossibleValue::help` ### [`v4.5.44`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4544---2025-08-11) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.43...v4.5.44) ##### Features - Add `Command::mut_subcommands` ### [`v4.5.43`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4543---2025-08-06) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.42...v4.5.43) ##### Fixes - *(help)* In long help, list Possible Values before defaults, rather than after, for a more consistent look ### [`v4.5.42`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4542---2025-07-30) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.41...v4.5.42) ##### Fixes - Include subcommand visible long aliases in `--help` ### [`v4.5.41`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4541---2025-07-09) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.40...v4.5.41) ##### Features - Add `Styles::context` and `Styles::context_value` to customize the styling of `[default: value]` like notes in the `--help` ### [`v4.5.40`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4540---2025-06-09) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.39...v4.5.40) ##### Features - Support quoted ids in `arg!()` macro (e.g. `arg!("check-config": ...)`) ### [`v4.5.39`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4539---2025-05-27) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.38...v4.5.39) ##### Fixes - *(help)* Show short flag aliases before long - *(help)* Merge the short and long flag alias lists ### [`v4.5.38`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4538---2025-05-11) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.37...v4.5.38) ##### Fixes - *(help)* When showing aliases, include leading `--` or `-` ### [`v4.5.37`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4537---2025-04-18) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.36...v4.5.37) ##### Features - Added `ArgMatches::try_clear_id()` ### [`v4.5.36`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4536---2025-04-11) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.35...v4.5.36) ##### Fixes - *(help)* Revert 4.5.35's "Don't leave space for shorts if there are none" for now ### [`v4.5.35`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4535---2025-04-01) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.34...v4.5.35) ##### Fixes - *(help)* Align positionals and flags when put in the same `help_heading` - *(help)* Don't leave space for shorts if there are none ### [`v4.5.34`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4534---2025-03-27) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.33...v4.5.34) ##### Fixes - *(help)* Don't add extra blank lines with `flatten_help(true)` and subcommands without arguments ### [`v4.5.33`](https://github.com/clap-rs/clap/blob/HEAD/CHANGELOG.md#4533---2025-03-26) [Compare Source](https://github.com/clap-rs/clap/compare/v4.5.32...v4.5.33) ##### Fixes - *(error)* When showing the usage of a suggestion for an unknown argument, don't show the group </details> <details> <summary>diwic/dbus-rs (dbus)</summary> ### [`v0.9.9`](https://github.com/diwic/dbus-rs/compare/dbus-v0.9.8...dbus-v0.9.9) [Compare Source](https://github.com/diwic/dbus-rs/compare/dbus-v0.9.8...dbus-v0.9.9) ### [`v0.9.8`](https://github.com/diwic/dbus-rs/compare/dbus-v0.9.7...dbus-v0.9.8) [Compare Source](https://github.com/diwic/dbus-rs/compare/dbus-v0.9.7...dbus-v0.9.8) </details> <details> <summary>serde-rs/serde (serde)</summary> ### [`v1.0.228`](https://github.com/serde-rs/serde/releases/tag/v1.0.228) [Compare Source](https://github.com/serde-rs/serde/compare/v1.0.227...v1.0.228) - Allow building documentation with `RUSTDOCFLAGS='--cfg=docsrs'` set for the whole dependency graph ([#&#8203;2995](https://github.com/serde-rs/serde/issues/2995)) ### [`v1.0.227`](https://github.com/serde-rs/serde/releases/tag/v1.0.227) [Compare Source](https://github.com/serde-rs/serde/compare/v1.0.226...v1.0.227) - Documentation improvements ([#&#8203;2991](https://github.com/serde-rs/serde/issues/2991)) ### [`v1.0.226`](https://github.com/serde-rs/serde/releases/tag/v1.0.226) [Compare Source](https://github.com/serde-rs/serde/compare/v1.0.225...v1.0.226) - Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums ([#&#8203;2935](https://github.com/serde-rs/serde/issues/2935), thanks [@&#8203;Mingun](https://github.com/Mingun)) ### [`v1.0.225`](https://github.com/serde-rs/serde/releases/tag/v1.0.225) [Compare Source](https://github.com/serde-rs/serde/compare/v1.0.224...v1.0.225) - Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations ([#&#8203;2879](https://github.com/serde-rs/serde/issues/2879), thanks [@&#8203;rcrisanti](https://github.com/rcrisanti)) ### [`v1.0.224`](https://github.com/serde-rs/serde/releases/tag/v1.0.224) [Compare Source](https://github.com/serde-rs/serde/compare/v1.0.223...v1.0.224) - Remove private types being suggested in rustc diagnostics ([#&#8203;2979](https://github.com/serde-rs/serde/issues/2979)) ### [`v1.0.223`](https://github.com/serde-rs/serde/releases/tag/v1.0.223) [Compare Source](https://github.com/serde-rs/serde/compare/v1.0.222...v1.0.223) - Fix serde\_core documentation links ([#&#8203;2978](https://github.com/serde-rs/serde/issues/2978)) ### [`v1.0.222`](https://github.com/serde-rs/serde/releases/tag/v1.0.222) [Compare Source](https://github.com/serde-rs/serde/compare/v1.0.221...v1.0.222) - Make `serialize_with` attribute produce code that works if respanned to 2024 edition ([#&#8203;2950](https://github.com/serde-rs/serde/issues/2950), thanks [@&#8203;aytey](https://github.com/aytey)) ### [`v1.0.221`](https://github.com/serde-rs/serde/releases/tag/v1.0.221) [Compare Source](https://github.com/serde-rs/serde/compare/v1.0.220...v1.0.221) - Documentation improvements ([#&#8203;2973](https://github.com/serde-rs/serde/issues/2973)) - Deprecate `serde_if_integer128!` macro ([#&#8203;2975](https://github.com/serde-rs/serde/issues/2975)) ### [`v1.0.220`](https://github.com/serde-rs/serde/releases/tag/v1.0.220) [Compare Source](https://github.com/serde-rs/serde/compare/v1.0.219...v1.0.220) - Add a way for data formats to depend on serde traits without waiting for serde\_derive compilation: <https://docs.rs/serde_core> ([#&#8203;2608](https://github.com/serde-rs/serde/issues/2608), thanks [@&#8203;osiewicz](https://github.com/osiewicz)) </details> <details> <summary>toml-rs/toml (toml)</summary> ### [`v0.9.8`](https://github.com/toml-rs/toml/compare/toml-v0.9.7...toml-v0.9.8) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.9.7...toml-v0.9.8) ### [`v0.9.7`](https://github.com/toml-rs/toml/compare/toml-v0.9.6...toml-v0.9.7) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.9.6...toml-v0.9.7) ### [`v0.9.6`](https://github.com/toml-rs/toml/compare/toml-v0.9.5...toml-v0.9.6) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.9.5...toml-v0.9.6) ### [`v0.9.5`](https://github.com/toml-rs/toml/compare/toml-v0.9.4...toml-v0.9.5) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.9.4...toml-v0.9.5) ### [`v0.9.4`](https://github.com/toml-rs/toml/compare/toml-v0.9.3...toml-v0.9.4) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.9.3...toml-v0.9.4) ### [`v0.9.3`](https://github.com/toml-rs/toml/compare/toml-v0.9.2...toml-v0.9.3) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.9.2...toml-v0.9.3) ### [`v0.9.2`](https://github.com/toml-rs/toml/compare/toml-v0.9.1...toml-v0.9.2) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.9.1...toml-v0.9.2) ### [`v0.9.1`](https://github.com/toml-rs/toml/compare/toml-v0.9.0...toml-v0.9.1) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.9.0...toml-v0.9.1) ### [`v0.9.0`](https://github.com/toml-rs/toml/compare/toml-v0.8.23...toml-v0.9.0) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.8.23...toml-v0.9.0) ### [`v0.8.23`](https://github.com/toml-rs/toml/compare/toml-v0.8.22...toml-v0.8.23) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.8.22...toml-v0.8.23) ### [`v0.8.22`](https://github.com/toml-rs/toml/compare/toml-v0.8.21...toml-v0.8.22) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.8.21...toml-v0.8.22) ### [`v0.8.21`](https://github.com/toml-rs/toml/compare/toml-v0.8.20...toml-v0.8.21) [Compare Source](https://github.com/toml-rs/toml/compare/toml-v0.8.20...toml-v0.8.21) </details> <details> <summary>tokio-rs/tracing (tracing-subscriber)</summary> ### [`v0.3.20`](https://github.com/tokio-rs/tracing/releases/tag/tracing-subscriber-0.3.20): tracing-subscriber 0.3.20 [Compare Source](https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.19...tracing-subscriber-0.3.20) **Security Fix**: ANSI Escape Sequence Injection (CVE-TBD) #### Impact Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to: - Manipulate terminal title bars - Clear screens or modify terminal display - Potentially mislead users through terminal manipulation In isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator. #### Solution Version 0.3.20 fixes this vulnerability by escaping ANSI control characters in when writing events to destinations that may be printed to the terminal. #### Affected Versions All versions of tracing-subscriber prior to 0.3.20 are affected by this vulnerability. #### Recommendations Immediate Action Required: We recommend upgrading to tracing-subscriber 0.3.20 immediately, especially if your application: - Logs user-provided input (form data, HTTP headers, query parameters, etc.) - Runs in environments where terminal output is displayed to users #### Migration This is a patch release with no breaking API changes. Simply update your Cargo.toml: ```toml [dependencies] tracing-subscriber = "0.3.20" ``` #### Acknowledgments We would like to thank [zefr0x](http://github.com/zefr0x) who responsibly reported the issue at `security@tokio.rs`. If you believe you have found a security vulnerability in any tokio-rs project, please email us at `security@tokio.rs`. </details> <details> <summary>uuid-rs/uuid (uuid)</summary> ### [`v1.18.1`](https://github.com/uuid-rs/uuid/releases/tag/v1.18.1) [Compare Source](https://github.com/uuid-rs/uuid/compare/v1.18.0...v1.18.1) #### What's Changed - Unsafe cleanup by [@&#8203;KodrAus](https://github.com/KodrAus) in [#&#8203;841](https://github.com/uuid-rs/uuid/pull/841) - Prepare for 1.18.1 release by [@&#8203;KodrAus](https://github.com/KodrAus) in [#&#8203;842](https://github.com/uuid-rs/uuid/pull/842) **Full Changelog**: <https://github.com/uuid-rs/uuid/compare/v1.18.0...v1.18.1> ### [`v1.18.0`](https://github.com/uuid-rs/uuid/releases/tag/v1.18.0) [Compare Source](https://github.com/uuid-rs/uuid/compare/v1.17.0...v1.18.0) #### What's Changed - Fix up mismatched\_lifetime\_syntaxes lint by [@&#8203;KodrAus](https://github.com/KodrAus) in [#&#8203;837](https://github.com/uuid-rs/uuid/pull/837) - Conversions between `Timestamp` and `std::time::SystemTime` by [@&#8203;dcormier](https://github.com/dcormier) in [#&#8203;835](https://github.com/uuid-rs/uuid/pull/835) - Wrap the error type used in time conversions by [@&#8203;KodrAus](https://github.com/KodrAus) in [#&#8203;838](https://github.com/uuid-rs/uuid/pull/838) - Prepare for 1.18.0 release by [@&#8203;KodrAus](https://github.com/KodrAus) in [#&#8203;839](https://github.com/uuid-rs/uuid/pull/839) #### New Contributors - [@&#8203;dcormier](https://github.com/dcormier) made their first contribution in [#&#8203;835](https://github.com/uuid-rs/uuid/pull/835) **Full Changelog**: <https://github.com/uuid-rs/uuid/compare/v1.17.0...v1.18.0> ### [`v1.17.0`](https://github.com/uuid-rs/uuid/releases/tag/v1.17.0) [Compare Source](https://github.com/uuid-rs/uuid/compare/v1.16.0...v1.17.0) #### What's Changed - Added convenience implementation TryFrom<String> for std by [@&#8203;Nahuel-M](https://github.com/Nahuel-M) in [#&#8203;819](https://github.com/uuid-rs/uuid/pull/819) - Update OSX builds to arm by [@&#8203;KodrAus](https://github.com/KodrAus) in [#&#8203;825](https://github.com/uuid-rs/uuid/pull/825) - Replace derive(Hash) with manual impl in Uuid by [@&#8203;diopoex](https://github.com/diopoex) in [#&#8203;824](https://github.com/uuid-rs/uuid/pull/824) - Add `wasm32v1-none` Support by [@&#8203;bushrat011899](https://github.com/bushrat011899) in [#&#8203;828](https://github.com/uuid-rs/uuid/pull/828) - Prepare for 1.17.0 release by [@&#8203;KodrAus](https://github.com/KodrAus) in [#&#8203;829](https://github.com/uuid-rs/uuid/pull/829) #### New Contributors - [@&#8203;Nahuel-M](https://github.com/Nahuel-M) made their first contribution in [#&#8203;819](https://github.com/uuid-rs/uuid/pull/819) - [@&#8203;diopoex](https://github.com/diopoex) made their first contribution in [#&#8203;824](https://github.com/uuid-rs/uuid/pull/824) **Full Changelog**: <https://github.com/uuid-rs/uuid/compare/v1.16.0...v1.17.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNTcuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE2OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovatebot force-pushed renovate/all-minor-patch from 2b35fe0c7e to 4b71bd429f 2025-04-25 22:18:15 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 4b71bd429f to 64edeaccd7 2025-04-28 22:03:13 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 64edeaccd7 to 7fcc401a48 2025-05-11 03:03:13 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 7fcc401a48 to 80c229330d 2025-05-17 11:03:27 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 80c229330d to c4a09c1f50 2025-05-23 04:48:28 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from c4a09c1f50 to 81d02f2d15 2025-05-27 20:18:22 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 81d02f2d15 to a8a4fcc323 2025-06-06 17:18:15 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from a8a4fcc323 to 072be9b9da 2025-06-09 20:18:38 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 072be9b9da to 9296899fcd 2025-06-25 22:03:15 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 9296899fcd to 01ede32f33 2025-07-08 16:03:28 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 01ede32f33 to d382a5f537 2025-07-10 00:48:34 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from d382a5f537 to 2cea534c56 2025-07-30 04:33:17 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 2cea534c56 to a94b76fef3 2025-08-06 18:48:12 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from a94b76fef3 to e38b2ded17 2025-08-11 12:18:10 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from e38b2ded17 to 3a6bc5408a 2025-08-11 21:48:39 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 3a6bc5408a to 1673c33f22 2025-08-12 01:18:04 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 1673c33f22 to c6632683cb 2025-08-12 20:03:36 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from c6632683cb to 6e12e41574 2025-08-23 07:03:39 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 6e12e41574 to 926f445c6c 2025-08-26 15:34:02 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 926f445c6c to f6702232c4 2025-08-29 21:19:03 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from f6702232c4 to cc5d9e97c1 2025-08-30 08:48:54 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from cc5d9e97c1 to 6fe6400a83 2025-09-02 08:18:48 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 6fe6400a83 to c4561a47cd 2025-09-02 19:19:07 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from c4561a47cd to 0b9ea42eb0 2025-09-14 00:04:07 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 0b9ea42eb0 to 4fb0051e7b 2025-09-14 02:33:50 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 4fb0051e7b to a9989b39cd 2025-09-14 20:19:11 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from a9989b39cd to cdf38340b4 2025-09-14 22:33:53 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from cdf38340b4 to 6d61fac4ec 2025-09-15 17:49:12 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 6d61fac4ec to f9c5eca6a7 2025-09-16 05:48:57 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from f9c5eca6a7 to ff9a9b3380 2025-09-19 16:34:21 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from ff9a9b3380 to 3b0d4760e7 2025-09-19 23:19:10 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 3b0d4760e7 to 531f3b407b 2025-09-21 01:48:53 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 531f3b407b to cc5eefa2e0 2025-09-26 01:49:09 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from cc5eefa2e0 to d6843b3727 2025-09-27 19:08:04 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from d6843b3727 to 3936093758 2025-10-13 18:19:21 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from 3936093758 to f35e69e60c 2025-10-20 18:04:42 +02:00 Compare
renovatebot force-pushed renovate/all-minor-patch from f35e69e60c to 3eabb1c26a 2025-10-29 15:34:40 +01:00 Compare
Some checks failed
ci/woodpecker/pr/test Pipeline was successful
Details
ci/woodpecker/push/test Pipeline failed
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/all-minor-patch:renovate/all-minor-patch
git switch renovate/all-minor-patch

Merge

Merge the changes and update on Forgejo.
git switch main
git merge --no-ff renovate/all-minor-patch
git switch renovate/all-minor-patch
git rebase main
git switch main
git merge --ff-only renovate/all-minor-patch
git switch renovate/all-minor-patch
git rebase main
git switch main
git merge --no-ff renovate/all-minor-patch
git switch main
git merge --squash renovate/all-minor-patch
git switch main
git merge --ff-only renovate/all-minor-patch
git switch main
git merge renovate/all-minor-patch
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: lilly/nm-file-secret-agent#9
No description provided.
Delete branch "renovate/all-minor-patch"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?