fix(deps): update all dependencies

[platform-engineering-bot]

This PR contains the following updates:

Package	Type	Update	Change
EmbarkStudios/cargo-deny-action	action	major	v1 -> v2
actions/checkout	action	major	v3 -> v4
indexmap	dependencies	minor	2.6.0 -> 2.7.1
indoc	dev-dependencies	pin	2.0.5 -> =2.0.5
quay.io/fedora/fedora-bootc	container	major	41 -> 43
quickcheck	dev-dependencies	pin	1 -> =1.0.3
tempfile (source)	workspace.dependencies	minor	3.14.0 -> 3.16.0
tokio (source)	workspace.dependencies	minor	1.41.1 -> 1.43.0
uuid	dependencies	minor	1.11.1 -> 1.13.1

---

Release Notes

EmbarkStudios/cargo-deny-action (EmbarkStudios/cargo-deny-action)

v2

Compare Source

actions/checkout (actions/checkout)

v4

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

indexmap-rs/indexmap (indexmap)

v2.7.1

Compare Source

• Added #[track_caller] to functions that may panic.
• Improved memory reservation for insert_entry.

v2.7.0

Compare Source

• Added methods Entry::insert_entry and VacantEntry::insert_entry, returning
  an OccupiedEntry after insertion.

Stebalien/tempfile (tempfile)

v3.16.0

Compare Source

• Update getrandom to 0.3.0 (thanks to @​paolobarbolini).
• Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @​ErichDonGubler).
• Improved security documentation (thanks to @​n0toose for collaborating with me on this).

v3.15.0

Compare Source

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#​314). This resolves a potential DoS vector (#​178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.

tokio-rs/tokio (tokio)

v1.43.0: Tokio v1.43.0

Compare Source

1.43.0 (Jan 8th, 2025)

Added

• net: add UdpSocket::peek methods (#​7068)
• net: add support for Haiku OS (#​7042)
• process: add Command::into_std() (#​7014)
• signal: add SignalKind::info on illumos (#​6995)
• signal: add support for realtime signals on illumos (#​7029)

Fixed

• io: don't call set_len before initializing vector in Blocking (#​7054)
• macros: suppress clippy::needless_return in #[tokio::main] (#​6874)
• runtime: fix thread parking on WebAssembly (#​7041)

Changes

• chore: use unsync loads for unsync_load (#​7073)
• io: use Buf::put_bytes in Repeat read impl (#​7055)
• task: drop the join waker of a task eagerly (#​6986)

Changes to unstable APIs

• metrics: improve flexibility of H2Histogram Configuration (#​6963)
• taskdump: add accessor methods for backtrace (#​6975)

Documented

• io: clarify ReadBuf::uninit allows initialized buffers as well (#​7053)
• net: fix ambiguity in TcpStream::try_write_vectored docs (#​7067)
• runtime: fix LocalRuntime doc links (#​7074)
• sync: extend documentation for watch::Receiver::wait_for (#​7038)
• sync: fix typos in OnceCell docs (#​7047)

v1.42.0: Tokio v1.42.0

Compare Source

1.42.0 (Dec 3rd, 2024)

Added

• io: add AsyncFd::{try_io, try_io_mut} (#​6967)

Fixed

• io: avoid ptr->ref->ptr roundtrip in RegistrationSet (#​6929)
• runtime: do not defer yield_now inside block_in_place (#​6999)

Changes

• io: simplify io readiness logic (#​6966)

Documented

• net: fix docs for tokio::net::unix::{pid_t, gid_t, uid_t} (#​6791)
• time: fix a typo in Instant docs (#​6982)

uuid-rs/uuid (uuid)

v1.13.1

Compare Source

What's Changed

• Fix wasm32 with atomics by @​bushrat011899 in https://github.com/uuid-rs/uuid/pull/797
• Prepare for 1.13.1 release by @​KodrAus in https://github.com/uuid-rs/uuid/pull/799

New Contributors

• @​bushrat011899 made their first contribution in https://github.com/uuid-rs/uuid/pull/797

Full Changelog: uuid-rs/uuid@1.13.0...1.13.1

v1.13.0

Compare Source

⚠️ Potential Breakage

This release updates our version of getrandom to 0.3 and rand to 0.9. It is a potentially breaking change for the following users:

no-std users who enable the rng feature

uuid still uses getrandom by default on these platforms. Upgrade your version of getrandom and follow its new docs on configuring a custom backend.

wasm32-unknown-unknown users who enable the rng feature without the js feature

Upgrade your version of getrandom and follow its new docs on configuring a backend.

You'll also need to enable the rng-getrandom or rng-rand feature of uuid to force it to use getrandom as its backend:

[dependencies.uuid]
version = "1.13.0"
- features = ["v4"]
+ features = ["v4", "rng-getrandom"]

[dependencies.getrandom]
version = "0.3"

If you're on wasm32-unknown-unknown and using the js feature of uuid you shouldn't see any breakage. We've kept this behavior by vendoring in getrandom's web-based backend when the js feature is enabled.

What's Changed

• Update getrandom to 0.3 and rand to 0.9 by @​KodrAus in https://github.com/uuid-rs/uuid/pull/793
• Support forcing getrandom on wasm32-unknown-unknown without JavaScript by @​KodrAus in https://github.com/uuid-rs/uuid/pull/794
• Prepare for 1.13.0 release by @​KodrAus in https://github.com/uuid-rs/uuid/pull/795

Full Changelog: uuid-rs/uuid@1.12.1...1.13.0

v1.12.1

Compare Source

What's Changed

• Fix links to namespaces in documentation by @​cstyles in https://github.com/uuid-rs/uuid/pull/789
• use inherent to_be_bytes and to_le_bytes methods by @​Vrtgs in https://github.com/uuid-rs/uuid/pull/788
• Reduce bitshifts in from_u64_pair by @​KodrAus in https://github.com/uuid-rs/uuid/pull/790
• prepare for 1.12.1 release by @​KodrAus in https://github.com/uuid-rs/uuid/pull/791

New Contributors

• @​cstyles made their first contribution in https://github.com/uuid-rs/uuid/pull/789
• @​Vrtgs made their first contribution in https://github.com/uuid-rs/uuid/pull/788

Full Changelog: uuid-rs/uuid@1.12.0...1.12.1

v1.12.0

Compare Source

⚠️ Possible Breakage

This release includes additional PartialEq implementations on Uuid, which can break inference in some cases.

What's Changed

• feat: Add NonZeroUuid type for optimized Option<Uuid> representation by @​ab22593k in https://github.com/uuid-rs/uuid/pull/779
• Finalize NonNilUuid by @​KodrAus in https://github.com/uuid-rs/uuid/pull/783
• Prepare for 1.12.0 release by @​KodrAus in https://github.com/uuid-rs/uuid/pull/784

New Contributors

• @​ab22593k made their first contribution in https://github.com/uuid-rs/uuid/pull/779

Full Changelog: uuid-rs/uuid@1.11.1...1.12.0

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[cgwalters]

Hmm this is a big mix of stuff...including things we don't want for now such as bumping fedora:41 -> fedora:42 (need to figure out how to teach renovate about pre-release versions there).

The biggest problem here is at least our renovate config doesn't understand Rust semver compatibility rules; the indexmap, uuid etc. bumps should have gone in with the other PR type.

Digging in I think we're inheriting from this global config
https://github.com/platform-engineering-org/.github/blob/main/default.json