From 764d5d467362908fecb0881b6f1c818937e2f1f0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 23 Jan 2025 08:59:00 +0000
Subject: [PATCH 1/5] build(deps): bump spdx from 0.10.6 to 0.10.8
Bumps [spdx](https://github.com/EmbarkStudios/spdx) from 0.10.6 to 0.10.8.
- [Release notes](https://github.com/EmbarkStudios/spdx/releases)
- [Changelog](https://github.com/EmbarkStudios/spdx/blob/main/CHANGELOG.md)
- [Commits](https://github.com/EmbarkStudios/spdx/compare/0.10.6...0.10.8)
---
updated-dependencies:
- dependency-name: spdx
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot]
---
Cargo.lock | 4 ++--
Cargo.toml | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
index 7cb469dc..72afb798 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4188,9 +4188,9 @@ dependencies = [
[[package]]
name = "spdx"
-version = "0.10.6"
+version = "0.10.8"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47317bbaf63785b53861e1ae2d11b80d6b624211d42cb20efcd210ee6f8a14bc"
+checksum = "58b69356da67e2fc1f542c71ea7e654a361a79c938e4424392ecf4fa065d2193"
dependencies = [
"smallvec",
]
diff --git a/Cargo.toml b/Cargo.toml
index c8975133..016fac4b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -51,7 +51,7 @@ serde_json = "1.0.132"
serde_with = "3.11.0"
serde_yaml = "0.9.34"
shlex = "1.3.0"
-spdx = "0.10.6"
+spdx = "0.10.8"
tar = "0.4.43"
tempfile = "3.15.0"
time = { version = "0.3.36", features = ["parsing", "serde"] }
From 59e95088a253834a2dd0b67b18b1eb408cc1a5f5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 23 Jan 2025 08:59:13 +0000
Subject: [PATCH 2/5] build(deps): bump itertools from 0.13.0 to 0.14.0
Bumps [itertools](https://github.com/rust-itertools/itertools) from 0.13.0 to 0.14.0.
- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-itertools/itertools/compare/v0.13.0...v0.14.0)
---
updated-dependencies:
- dependency-name: itertools
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot]
---
Cargo.lock | 13 +++++++++++--
Cargo.toml | 2 +-
2 files changed, 12 insertions(+), 3 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
index 7cb469dc..fed5b3a8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -355,7 +355,7 @@ dependencies = [
"ignore",
"im-rc",
"indexmap 2.4.0",
- "itertools",
+ "itertools 0.13.0",
"jobserver",
"lazycell",
"libc",
@@ -2656,6 +2656,15 @@ dependencies = [
"either",
]
+[[package]]
+name = "itertools"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
+dependencies = [
+ "either",
+]
+
[[package]]
name = "itoa"
version = "1.0.11"
@@ -3023,7 +3032,7 @@ dependencies = [
"indoc",
"insta",
"is-terminal",
- "itertools",
+ "itertools 0.14.0",
"once_cell",
"owo-colors",
"parse-display",
diff --git a/Cargo.toml b/Cargo.toml
index c8975133..a4bcfa87 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -35,7 +35,7 @@ flate2 = "1.0.34"
heck = "0.5.0"
indoc = "2.0.5"
is-terminal = "0.4.13"
-itertools = "0.13.0"
+itertools = "0.14.0"
once_cell = "1.20.2"
owo-colors = "4.1.0"
parse-display = "0.10.0"
From ec755efdb191a1b1c001b728ba6c304d370485d4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Feb 2025 08:06:37 +0000
Subject: [PATCH 3/5] build(deps): bump rustc-hash from 2.0.0 to 2.1.1
Bumps [rustc-hash](https://github.com/rust-lang/rustc-hash) from 2.0.0 to 2.1.1.
- [Changelog](https://github.com/rust-lang/rustc-hash/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/rustc-hash/compare/v2.0.0...v2.1.1)
---
updated-dependencies:
- dependency-name: rustc-hash
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot]
---
Cargo.lock | 4 ++--
Cargo.toml | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
index 7cb469dc..dfaa8c28 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3722,9 +3722,9 @@ checksum = "719b953e2095829ee67db738b3bfa9fa368c94900df327b3f07fe6e794d2fe1f"
[[package]]
name = "rustc-hash"
-version = "2.0.0"
+version = "2.1.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "583034fd73374156e66797ed8e5b0d5690409c9226b22d87cb7f19821c05d152"
+checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
[[package]]
name = "rustfix"
diff --git a/Cargo.toml b/Cargo.toml
index c8975133..7a1edfe3 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -43,7 +43,7 @@ pep-508 = "0.4.0"
rayon = "1.10.0"
regex = "1.11.1"
reqwest = { version = "0.12.9", features = ["json"] }
-rustc-hash = "2.0.0"
+rustc-hash = "2.1.1"
secrecy = { version = "0.10.3", features = ["serde"] }
semver = "1.0.23"
serde = { version = "1.0.214", features = ["derive"] }
From de68bf02802382d6fdbcb5e8cd7183223a205a45 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 7 Mar 2025 17:08:05 +0000
Subject: [PATCH 4/5] build(deps): bump ring from 0.17.8 to 0.17.13
Bumps [ring](https://github.com/briansmith/ring) from 0.17.8 to 0.17.13.
- [Changelog](https://github.com/briansmith/ring/blob/main/RELEASES.md)
- [Commits](https://github.com/briansmith/ring/commits)
---
updated-dependencies:
- dependency-name: ring
dependency-type: indirect
...
Signed-off-by: dependabot[bot]
---
Cargo.lock | 19 ++++++-------------
1 file changed, 6 insertions(+), 13 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
index 7cb469dc..208bf335 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1,6 +1,6 @@
# This file is automatically @generated by Cargo.
# It is not intended for manual editing.
-version = 3
+version = 4
[[package]]
name = "addr2line"
@@ -484,9 +484,9 @@ dependencies = [
[[package]]
name = "cc"
-version = "1.1.12"
+version = "1.2.16"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "68064e60dbf1f17005c2fde4d07c16d8baa506fd7ffed8ccab702d93617975c7"
+checksum = "be714c154be609ec7f5dad223a33bf1482fff90472de28f7362806e6d4832b8c"
dependencies = [
"jobserver",
"libc",
@@ -2738,7 +2738,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "4979f22fdb869068da03c9f7528f8297c6fd2606bc3a4affe42e6a823fdb8da4"
dependencies = [
"cfg-if",
- "windows-targets 0.52.6",
+ "windows-targets 0.48.5",
]
[[package]]
@@ -3659,15 +3659,14 @@ dependencies = [
[[package]]
name = "ring"
-version = "0.17.8"
+version = "0.17.13"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c17fa4cb658e3583423e915b9f3acc01cceaee1860e33d59ebae66adc3a2dc0d"
+checksum = "70ac5d832aa16abd7d1def883a8545280c20a60f523a370aa3a9617c2b8550ee"
dependencies = [
"cc",
"cfg-if",
"getrandom",
"libc",
- "spin",
"untrusted",
"windows-sys 0.52.0",
]
@@ -4195,12 +4194,6 @@ dependencies = [
"smallvec",
]
-[[package]]
-name = "spin"
-version = "0.9.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67"
-
[[package]]
name = "spki"
version = "0.7.3"
From ef8ae5aff9b37ecd3c37a727b4128491938e29f1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 11 Mar 2025 08:19:25 +0000
Subject: [PATCH 5/5] build(deps): bump cachix/cachix-action from 15 to 16
Bumps [cachix/cachix-action](https://github.com/cachix/cachix-action) from 15 to 16.
- [Release notes](https://github.com/cachix/cachix-action/releases)
- [Commits](https://github.com/cachix/cachix-action/compare/v15...v16)
---
updated-dependencies:
- dependency-name: cachix/cachix-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot]
---
.github/workflows/ci.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 74f0182d..d1b65d3f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,7 +22,7 @@ jobs:
uses: cachix/install-nix-action@v30
- name: Set up cachix
- uses: cachix/cachix-action@v15
+ uses: cachix/cachix-action@v16
with:
name: nix-community
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}