Bump the rust-dependencies group with 10 updates

[dependabot]

Bumps the rust-dependencies group with 10 updates:

Package	From	To
chrono	0.4.26	0.4.31
clap	4.3.22	4.4.6
indexmap	2.0.0	2.0.2
libcnb-data	0.13.0	0.15.0
libcnb-package	0.13.0	0.15.0
regex	1.9.3	1.9.6
semver	1.0.18	1.0.19
serde_json	1.0.105	1.0.107
toml_edit	0.19.14	0.20.2
toml	0.7.6	0.8.2

Updates chrono from 0.4.26 to 0.4.31

Release notes

Sourced from chrono's releases.

0.4.31

Another maintenance release. It was not a planned effort to improve our support for UNIX timestamps, yet most PRs seem related to this.

Deprecations

• Deprecate timestamp_nanos in favor of the non-panicking timestamp_nanos_opt (#1275)

Additions

• Add DateTime::<Utc>::from_timestamp (#1279, thanks @​demurgos)
• Add TimeZone::timestamp_micros (#1285, thanks @​emikitas)
• Add DateTime<Tz>::timestamp_nanos_opt and NaiveDateTime::timestamp_nanos_opt (#1275)
• Add UNIX_EPOCH constants (#1291)

Fixes

• Format day of month in RFC 2822 without padding (#1272)
• Don't allow strange leap seconds which are not on a minute boundary initialization methods (#1283) This makes many methods a little more strict:
  • NaiveTime::from_hms_milli
  • NaiveTime::from_hms_milli_opt
  • NaiveTime::from_hms_micro
  • NaiveTime::from_hms_micro_opt
  • NaiveTime::from_hms_nano
  • NaiveTime::from_hms_nano_opt
  • NaiveTime::from_num_seconds_from_midnight
  • NaiveTime::from_num_seconds_from_midnight_opt
  • NaiveDate::and_hms_milli
  • NaiveDate::and_hms_milli_opt
  • NaiveDate::and_hms_micro
  • NaiveDate::and_hms_micro_opt
  • NaiveDate::and_hms_nano
  • NaiveDate::and_hms_nano_opt
  • NaiveDateTime::from_timestamp
  • NaiveDateTime::from_timestamp_opt
  • TimeZone::timestamp
  • TimeZone::timestamp_opt
• Fix underflow in NaiveDateTime::timestamp_nanos_opt (#1294, thanks @​crepererum)

Documentation

• Add more documentation about the RFC 2822 obsolete date format (#1267)

Internal

• Remove internal __doctest feature and doc_comment dependency (#1276)
• CI: Bump actions/checkout from 3 to 4 (#1280)
• Optimize NaiveDate::add_days for small values (#1214)
• Upgrade pure-rust-locales to 0.7.0 (#1288, thanks @​jeremija wo did good improvements on pure-rust-locales)

Thanks to all contributors on behalf of the chrono team, @​djc and @​pitdicker!

0.4.30

In this release, we have decided to swap out the chrono::Duration type (which has been a re-export of time 0.1 Duration type) with our own definition, which exposes a strict superset of the time::Duration API. This helps avoid warnings about the [CVE-2020-26235] and [RUSTSEC-2020-0071] advisories for downstream users and allows us to improve the Duration API going forward.

... (truncated)

Commits

• e730c6a Bump version to 0.4.31
• 2afdde8 fix: underflow during datetime->nanos conversion
• 46ad2c2 Add UNIX_EPOCH constants
• 1df8db3 Add TimeZone::timestamp_micros
• 861d4e1 Make TimeZone::timestamp_millis_opt use
• 3c4846a Upgrade pure-rust-locales to 0.7.0
• 6665804 Deny leap second if secs != 59 in from_num_seconds_from_midnight_opt
• 61b7ffb Deny leap second if secs != 59 in from_hms_nano_opt
• 202af6c Don't generate leap seconds that are not 60 in NaiveTime's Arbitrary impl
• 60283ab Don't create strange leap seconds in tests
• Additional commits viewable in compare view

Updates clap from 4.3.22 to 4.4.6

Release notes

Sourced from clap's releases.

v4.4.6

[4.4.6] - 2023-09-28

Internal

• Upgrade anstream

v4.4.5

[4.4.5] - 2023-09-25

Fixes

• (parser) When inferring subcommand name or long_flag, allow ambiguous-looking matches that unambiguously map back to the same command
• (parser) When inferring subcommand long_flag, don't panic
• (assert) Clarify what action is causing a positional that doesn't set values which is especially useful for derive users

v4.4.4

[4.4.4] - 2023-09-18

Internal

• Update terminal_size to 0.3

v4.4.3

[4.4.3] - 2023-09-12

Documentation

• (derive) Clarify use of attributes within the tutorial
• Split sections in the builder and derive tutorials into separate modules

v4.4.2

[4.4.2] - 2023-08-31

Performance

• Improve build times by removing once_cell dependency

v4.4.1

[4.4.1] - 2023-08-28

Features

• Stabilize Command::styles

v4.3.24

[4.3.24] - 2023-08-23

Fixes

... (truncated)

Changelog

Sourced from clap's changelog.

[4.4.6] - 2023-09-28

Internal

• Upgrade anstream

[4.4.5] - 2023-09-25

Fixes

• (parser) When inferring subcommand name or long_flag, allow ambiguous-looking matches that unambiguously map back to the same command
• (parser) When inferring subcommand long_flag, don't panic
• (assert) Clarify what action is causing a positional that doesn't set values which is especially useful for derive users

[4.4.4] - 2023-09-18

Internal

• Update terminal_size to 0.3

[4.4.3] - 2023-09-12

Documentation

• (derive) Clarify use of attributes within the tutorial
• Split sections in the builder and derive tutorials into separate modules

[4.4.2] - 2023-08-31

Performance

• Improve build times by removing once_cell dependency

[4.4.1] - 2023-08-28

Features

• Stabilize Command::styles

[4.4.0] - 2023-08-24

Compatibility

• Update MSRV to 1.70.0

[4.3.24] - 2023-08-23

Fixes

• Ensure column padding is preserved in --help with custom templates

... (truncated)

Commits

• 39f5e80 chore: Release
• a5cb6bb docs: Update changelog
• 418c001 Merge pull request #5146 from epage/update
• 485b957 chore: Upgrade anstream
• a1af8d9 chore: Update from '_rust/main'
• ac51f09 chore(ci): Normalize json5 syntax
• 86c29de chore(ci): Updaet Renovate schema
• 2045528 chore: Release
• 55d2230 docs: Update changelog
• 492ee03 Merge pull request #5140 from epage/dyn
• Additional commits viewable in compare view

Updates indexmap from 2.0.0 to 2.0.2

Changelog

Sourced from indexmap's changelog.

• 2.0.2

  • The hashbrown dependency has been updated to version 0.14.1 to complete the support for Rust 1.63.

• 2.0.1

  • MSRV: Rust 1.63.0 is now supported as well, pending publication of hashbrown's relaxed MSRV (or use cargo --ignore-rust-version).

Commits

• 67e67dd Merge pull request #277 from cuviper/release-2.0.2
• 9de727d Release 2.0.2 with complete MSRV 1.63
• fbd129f Merge pull request #276 from cuviper/release-2.0.1
• 9dcae76 Release 2.0.1 with rust-version = "1.63"
• 2eaf59c Merge pull request #275 from cuviper/safe-swap
• 8e03753 Use RawTable::get_many_mut for safe swap_indices
• 0604c5b Merge pull request #273 from your-diary/docs/indexset
• 77c58aa Improve explanation about IndexSet's complexity.
• 9469a1b Merge pull request #272 from daxpedda/minimal-versions
• 8360847 Test direct-minimal-versions
• Additional commits viewable in compare view

Updates libcnb-data from 0.13.0 to 0.15.0

Changelog

Sourced from libcnb-data's changelog.

[0.15.0] - 2023-09-25

Added

• libcnb:
  • LayerTypes now implements Copy and Clone. (#670).
• libcnb-data:
  • ExecDProgramOutputKey, ProcessType, LayerName, BuildpackId and StackId now implement Ord and PartialOrd. (#658)
  • Added generic::GenericMetadata as a generic metadata type. Also makes it the default for BuildpackDescriptor, SingleBuildpackDescriptor, CompositeBuildpackDescriptor and LayerContentMetadata. (#664)
• libcnb-test:
  • Added the BuildpackReference::WorkspaceBuildpack enum variant. This allows for the testing of any libcnb.rs or composite buildpack in the Cargo workspace, instead of only the buildpack of the current crate. Note: The testing of composite buildpacks requires pack CLI version >=0.30. (#666)

Changed

• libcnb-data:
  • Renamed the buildpackage module to package_descriptor, and the Buildpackage* types within it to PackageDescriptor*. (#656)
  • Renamed multiple types to match the new composite vs component buildpack upstream terminology. Renamed SingleBuildpackDescriptor to ComponentBuildpackDescriptor, MetaBuildpackDescriptor to CompositeBuildpackDescriptor and BuildpackDescriptor::{Single,Meta} to BuildpackDescriptor::{Component,Composite}. (#682)
• libcnb-cargo:
  • No longer outputs paths for non-libcnb.rs and non-meta buildpacks. (#657)
  • Build output for humans changed slightly, output intended for machines/scripting didn't change. (#657)
  • When performing buildpack detection, standard ignore files (.ignore and .gitignore) will be respected. (#673)
• libcnb-test:
  • Renamed BuildpackReference::Crate to BuildpackReference::CurrentCrate. (#666)

[0.14.0] - 2023-08-18

Added

• libcnb-package: Added cross-compilation assistance for Linux aarch64-unknown-linux-musl. (#577)
• libcnb-cargo: Added --package-dir command line option to control where packaged buildpacks are written. (#583)
• libcnb-test:
  • LogOutput now implements std::fmt::Display. (#635)
  • ContainerConfig now implements Clone. (#636)

Changed

• libcnb-cargo: Moved the default location for packaged buildpacks from Cargo's target/ directory to packaged/ in the Cargo workspace root. This simplifies the path and stops modification of the target/ directory which previously might have caching implications when other tools didn't expect non-Cargo output in that directory. Users that implicitly rely on the output directory need to adapt. The output of cargo libcnb package will refer to the new locations. (#583)
• libcnb-package:
  • buildpack target directory now contains the target triple. Users that implicitly rely on the output directory need to adapt. The output of cargo libcnb package will refer to the new locations. (#580)
  • get_buildpack_target_dir was renamed to get_buildpack_package_dir (#583)
• libcnb-test:
  • ContainerContext::address_for_port will now panic for all failure modes rather than just some, and so now returns SocketAddr directly instead of Option<SocketAddr>. This reduces test boilerplate due to the caller no longer needing to .unwrap() and improves debugging UX when containers crash after startup. (#605 and #636)
  • Docker commands are now run using the Docker CLI instead of Bollard and the Docker daemon API. (#620)
  • ContainerConfig::entrypoint now accepts a String rather than a vector of strings. Any arguments to the entrypoint should be moved to ContainerConfig::command. (#620)
  • Removed TestRunner::new since its only purpose was for advanced configuration that's no longer applicable. Use TestRunner::default instead. (#620)
  • Removed stdout_raw and stderr_raw from LogOutput. (#607)
  • Improved wording of panic error messages. (#619 and #620)
• libherokubuildpack: Changed the flate2 decompression backend from miniz_oxide to zlib. (#593)

Fixed

... (truncated)

Commits

• 56b4f4e Use the multi-line $GITHUB_OUTPUT syntax for the changelog entry output (#692)
• 95204ad Prepare release v0.15.0 (#690)
• f2dbe80 Add a GitHub Actions workflow for publishing a release (#691)
• f79c1e2 Add a GitHub Actions workflow for preparing a libcnb.rs release (#689)
• 768a1e9 Update cargo_metadata requirement from 0.17.0 to 0.18.0 (#687)
• 3ce2962 Update toml requirement from 0.7.6 to 0.8.0 (#688)
• b9c4e40 Bump Swatinem/rust-cache from 2.6.2 to 2.7.0 (#685)
• c2fdcdc Bump actions/checkout from 3 to 4 (#686)
• c7b2b6a Derive Copy and Clone for LayerTypes (#670)
• 7f64bf2 Update changelog for Buildpackage* types rename (#684)
• Additional commits viewable in compare view

Updates libcnb-package from 0.13.0 to 0.15.0

Changelog

Sourced from libcnb-package's changelog.

[0.15.0] - 2023-09-25

Added

• libcnb:
  • LayerTypes now implements Copy and Clone. (#670).
• libcnb-data:
  • ExecDProgramOutputKey, ProcessType, LayerName, BuildpackId and StackId now implement Ord and PartialOrd. (#658)
  • Added generic::GenericMetadata as a generic metadata type. Also makes it the default for BuildpackDescriptor, SingleBuildpackDescriptor, CompositeBuildpackDescriptor and LayerContentMetadata. (#664)
• libcnb-test:
  • Added the BuildpackReference::WorkspaceBuildpack enum variant. This allows for the testing of any libcnb.rs or composite buildpack in the Cargo workspace, instead of only the buildpack of the current crate. Note: The testing of composite buildpacks requires pack CLI version >=0.30. (#666)

Changed

• libcnb-data:
  • Renamed the buildpackage module to package_descriptor, and the Buildpackage* types within it to PackageDescriptor*. (#656)
  • Renamed multiple types to match the new composite vs component buildpack upstream terminology. Renamed SingleBuildpackDescriptor to ComponentBuildpackDescriptor, MetaBuildpackDescriptor to CompositeBuildpackDescriptor and BuildpackDescriptor::{Single,Meta} to BuildpackDescriptor::{Component,Composite}. (#682)
• libcnb-cargo:
  • No longer outputs paths for non-libcnb.rs and non-meta buildpacks. (#657)
  • Build output for humans changed slightly, output intended for machines/scripting didn't change. (#657)
  • When performing buildpack detection, standard ignore files (.ignore and .gitignore) will be respected. (#673)
• libcnb-test:
  • Renamed BuildpackReference::Crate to BuildpackReference::CurrentCrate. (#666)

[0.14.0] - 2023-08-18

Added

• libcnb-package: Added cross-compilation assistance for Linux aarch64-unknown-linux-musl. (#577)
• libcnb-cargo: Added --package-dir command line option to control where packaged buildpacks are written. (#583)
• libcnb-test:
  • LogOutput now implements std::fmt::Display. (#635)
  • ContainerConfig now implements Clone. (#636)

Changed

• libcnb-cargo: Moved the default location for packaged buildpacks from Cargo's target/ directory to packaged/ in the Cargo workspace root. This simplifies the path and stops modification of the target/ directory which previously might have caching implications when other tools didn't expect non-Cargo output in that directory. Users that implicitly rely on the output directory need to adapt. The output of cargo libcnb package will refer to the new locations. (#583)
• libcnb-package:
  • buildpack target directory now contains the target triple. Users that implicitly rely on the output directory need to adapt. The output of cargo libcnb package will refer to the new locations. (#580)
  • get_buildpack_target_dir was renamed to get_buildpack_package_dir (#583)
• libcnb-test:
  • ContainerContext::address_for_port will now panic for all failure modes rather than just some, and so now returns SocketAddr directly instead of Option<SocketAddr>. This reduces test boilerplate due to the caller no longer needing to .unwrap() and improves debugging UX when containers crash after startup. (#605 and #636)
  • Docker commands are now run using the Docker CLI instead of Bollard and the Docker daemon API. (#620)
  • ContainerConfig::entrypoint now accepts a String rather than a vector of strings. Any arguments to the entrypoint should be moved to ContainerConfig::command. (#620)
  • Removed TestRunner::new since its only purpose was for advanced configuration that's no longer applicable. Use TestRunner::default instead. (#620)
  • Removed stdout_raw and stderr_raw from LogOutput. (#607)
  • Improved wording of panic error messages. (#619 and #620)
• libherokubuildpack: Changed the flate2 decompression backend from miniz_oxide to zlib. (#593)

Fixed

... (truncated)

Commits

• 56b4f4e Use the multi-line $GITHUB_OUTPUT syntax for the changelog entry output (#692)
• 95204ad Prepare release v0.15.0 (#690)
• f2dbe80 Add a GitHub Actions workflow for publishing a release (#691)
• f79c1e2 Add a GitHub Actions workflow for preparing a libcnb.rs release (#689)
• 768a1e9 Update cargo_metadata requirement from 0.17.0 to 0.18.0 (#687)
• 3ce2962 Update toml requirement from 0.7.6 to 0.8.0 (#688)
• b9c4e40 Bump Swatinem/rust-cache from 2.6.2 to 2.7.0 (#685)
• c2fdcdc Bump actions/checkout from 3 to 4 (#686)
• c7b2b6a Derive Copy and Clone for LayerTypes (#670)
• 7f64bf2 Update changelog for Buildpackage* types rename (#684)
• Additional commits viewable in compare view

Updates regex from 1.9.3 to 1.9.6

Changelog

Sourced from regex's changelog.

1.9.6 (2023-09-30)

This is a patch release that fixes a panic that can occur when the default regex size limit is increased to a large number.

• BUG aa4e4c71: Fix a bug where computing the maximum haystack length for the bounded backtracker could result underflow and thus provoke a panic later in a search due to a broken invariant.

1.9.5 (2023-09-02)

This is a patch release that hopefully mostly fixes a performance bug that occurs when sharing a regex across multiple threads.

Issue #934 explains this in more detail. It is also noted in the crate documentation. The bug can appear when sharing a regex across multiple threads simultaneously, as might be the case when using a regex from a OnceLock, lazy_static or similar primitive. Usually high contention only results when using many threads to execute searches on small haystacks.

One can avoid the contention problem entirely through one of two methods. The first is to use lower level APIs from regex-automata that require passing state explicitly, such as meta::Regex::search_with. The second is to clone a regex and send it to other threads explicitly. This will not use any additional memory usage compared to sharing the regex. The only downside of this approach is that it may be less convenient, for example, it won't work with things like OnceLock or lazy_static or once_cell.

With that said, as of this release, the contention performance problems have been greatly reduced. This was achieved by changing the free-list so that it was sharded across threads, and that ensuring each sharded mutex occupies a single cache line to mitigate false sharing. So while contention may still impact performance in some cases, it should be a lot better now.

Because of the changes to how the free-list works, please report any issues you find with this release. That not only includes search time regressions but also significant regressions in memory usage. Reporting improvements is also welcome as well! If possible, provide a reproduction.

Bug fixes:

• [BUG #934](rust-lang/regex#934): Fix a performance bug where high contention on a single regex led to massive slow downs.

... (truncated)

Commits

• 11b4443 1.9.6
• 3dda425 deps: bump regex-automata to 0.3.9
• 03f00bd regex-automata-0.3.9
• e467408 changelog: 1.9.6
• aa4e4c7 automata: fix unintended panic in max_haystack_len
• 27a2538 automata: add some #[inline] annotations
• 061ee81 readme: visually emphasize performance criteria difference
• 8275c1b doc: fix a few typos
• cdc0dbd readme: add section about performance and benchmarks
• 4aaf389 ci: pin to memchr 2.6.2 for MSRV CI job
• Additional commits viewable in compare view

Updates semver from 1.0.18 to 1.0.19

Release notes

Sourced from semver's releases.

1.0.19

• Improve test coverage (#299, thanks @​CXWorks)

Commits

• 72a6b5a Release 1.0.19
• 83abc7f Relocate comparator parse testing
• 2d34e8f Touch up PR 299 test cases
• 5e09329 More comprehensible excessive version comparator test
• 473209f Merge pull request #299 from CXWorks/master
• cb07901 Update actions/checkout@v3 -> v4
• fff3f40 Revert "Temporarily disable -Zrandomize-layout due to rustc ICE"
• 2399480 Temporarily disable -Zrandomize-layout due to rustc ICE
• b074ea0 Resolve incorrect_partial_ord_impl_on_ord_type clippy lint
• 2d50313 Add missed test cases
• See full diff in compare view

Updates serde_json from 1.0.105 to 1.0.107

Release notes

Sourced from serde_json's releases.

v1.0.107

• impl IntoDeserializer for &RawValue (#1071)

v1.0.106

• Add Value::as_number accessor (#1069, thanks @​chanced)
• Add Number::as_str accessor under "arbitrary_precision" feature (#1067, thanks @​chanced)

Commits

• b6e113f Release 1.0.107
• 00626a0 Merge pull request #1073 from dtolnay/rawvalue
• b9d296f IntoDeserializer for &RawValue
• 4ea34a2 Merge pull request #1072 from dtolnay/rawvalue
• fe30766 Support deserializing from &RawValue
• 2c22077 Merge pull request #1062 from osiewicz/remove_build_rs
• 04f7758 fixup! chore: Remove no_btreemap_get_key_value and no_btreemap_remove_entry.
• 83bdc5f Omit return keyword in remove_entry
• 89a2741 Revert "Remove limb_width32 and limb_width64 features"
• 45f10ec Release 1.0.106
• Additional commits viewable in compare view

Updates toml_edit from 0.19.14 to 0.20.2

Commits

• ed597eb chore: Release
• 257a0fd docs: Update changelog
• 4b44f53 Merge pull request #617 from epage/update
• 7eaf286 fix(parser): Failed on mixed inline tables
• e1f2037 test: Verify with latest data
• 2f9253c chore: Update toml-test
• c9b481c test(toml): Ensure tables are used for validation
• 43d7f29 Merge pull request #615 from toml-rs/renovate/actions-checkout-4.x
• ef9b837 chore(deps): update actions/checkout action to v4
• d308188 chore: Release
• Additional commits viewable in compare view

Updates toml from 0.7.6 to 0.8.2

Commits

• fe65b2b chore: Release
• ed597eb chore: Release
• 257a0fd docs: Update changelog
• 4b44f53 Merge pull request #617 from epage/update
• 7eaf286 fix(parser): Failed on mixed inline tables
• e1f2037 test: Verify with latest data
• 2f9253c chore: Update toml-test
• c9b481c test(toml): Ensure tables are used for validation
• 43d7f29 Merge pull request #615 from toml-rs/renovate/actions-checkout-4.x
• ef9b837 chore(deps): update actions/checkout action to v4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[edmorley]

@dependabot recreate

[edmorley]

@dependabot recreate

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.