chore(deps): bump the cargo group across 1 directory with 8 updates

[dependabot]

Bumps the cargo group with 3 updates in the / directory: gix, mio and rustix.

Updates gix from 0.62.0 to 0.63.0

Release notes

Sourced from gix's releases.

gix v0.63.0

New Features

• checkout respects options for core.protectHFS and core.protectNTFS. This also adds gitoxide.core.protectWindows as a way to enforce additional restrictions that are usually only available on Windows.

  Note that core.protectNFS is always enabled by default, just like it is in Git.

Bug Fixes

• empty paths as configured will not be an error with lenient configuration enabled. When using gix::open_opts(path, options.strict_config(false)), empty core.excludesFile values will not cause an error anymore.

  Note that in strict mode, the behaviour is unchanged so invalid configuration can rather be fixed than ignored.

• don't unwrap when reading possibly left-over bytes from pack-stream

Commit Statistics

• 23 commits contributed to the release over the course of 38 calendar days.
• 38 days passed between releases.
• 3 commits were understood as conventional.
• 2 unique issues were worked on: #1352, #1370

Commit Details

• #1352
  • Don't unwrap when reading possibly left-over bytes from pack-stream (88a6a4e)
• #1370
  • Empty paths as configured will not be an error with lenient configuration enabled. (3c7b7b3)
• Uncategorized
  • Adjust changelogs prior to release (9511416)
  • Merge branch 'various-fixes' (d6cd449)
  • Update dependencies (cd4de83)
  • Fix-CI (6f55f2a)
  • Merge pull request from GHSA-7w47-3wg8-547c (79dce79)
  • Adapt to changes in gix-ref (d2ae9d5)
  • Adapt to changes in gix-index (5f86e6b)
  • Fix compile warnings (f961687)
  • Address review comments (fcc3b69)
  • Apply suggestions from code review (bad9a79)
  • Checkout respects options for core.protectHFS and core.protectNTFS. (886d6b5)
  • Adapt to changes in gix-worktree (1ca6a3c)

... (truncated)

Commits

• 4f98e94 Release gix-features v0.38.2, gix-actor v0.31.2, gix-validate v0.8.5, gix-obj...
• 9511416 adjust changelogs prior to release
• d6cd449 Merge branch 'various-fixes'
• e955770 fix: symlink support for zip archives
• cd4de83 update dependencies
• 6f55f2a fix-CI
• 79dce79 Merge pull request from GHSA-7w47-3wg8-547c
• 1242151 Apply suggestions from code review
• d2ae9d5 adapt to changes in gix-ref
• 9555efe fix!: assure that special device names on Windows aren't allowed.
• Additional commits viewable in compare view

Updates gix-fs from 0.10.2 to 0.11.0

Release notes

Sourced from gix-fs's releases.

gix-fs v0.11.0

Bug Fixes

• multi-process safe parallel filesystem capabilities probing This is achieved by making filenames unique so they won't clash.
• default to creating file-symlinks if it is dangling on Windows This behaviour is the same as in Git.

Bug Fixes (BREAKING)

• validate all components pushed onto the stack when creating leading paths. This way, everyone using the stack with the purpose of altering the working tree will run additional checks to prevent callers from sneaking in forbidden paths.

  Note that these checks don't run otherwise, so one has to be careful to not forget to run these checks whenever needed.

Commit Statistics

• 14 commits contributed to the release over the course of 8 calendar days.
• 38 days passed between releases.
• 3 commits were understood as conventional.
• 2 unique issues were worked on: #1354, #1373

Commit Details

• #1354
  • Default to creating file-symlinks if it is dangling on Windows (31d02a8)
• #1373
  • Multi-process safe parallel filesystem capabilities probing (bec648d)
• Uncategorized
  • Adjust changelogs prior to release (9511416)
  • Merge branch 'various-fixes' (d6cd449)
  • Merge pull request from GHSA-7w47-3wg8-547c (79dce79)
  • Apply suggestions from code review (1242151)
  • Adapt to changes in gix-index (5f86e6b)
  • Apply suggestions from code review (ccbc119)
  • Address review comments (fcc3b69)
  • Apply suggestions from code review (bad9a79)
  • Validate all components pushed onto the stack when creating leading paths. (874cfd6)
  • Add validation for path components and tree-names (0d78db2)
  • Merge branch 'status' (04ef31e)
  • Improve the symlink probing by simplifying it (7a3c583)

Changelog

Sourced from gix-fs's changelog.

0.11.0 (2022-04-03)

Adapt to changes in gix-features which change Send + Sync to Send + Clone. This happens to allow non-sync implementations (i.e. thread-local), along with Sync ones which usually are Clone too as they are passed by immutable reference (which is Clone + Copy).

Refactor (BREAKING)

• Remove light* features, add 'lean-async' in its place; remove termion support

Changed (BREAKING)

• remove Option<impl Progress> in favor of impl Progress
• remove unnecessary Arc around should_interrupt flag
• remove Sha1 mentions in index::verify::Mode::* variants The hash is repository defined and not hard-coded
• Remove lean plumbing CLI

Bug Fixes

• Collect all stdout messages in line renderer as well Otherwise the threaded line renderer will interfere with genuine program output.

New Features

• gix mailmap verify command
• ein find --debug to learn why it is slow
• --counting-threads flag to configure amount of threads when counting The efficiency of multi-threaded counting is low per core, and despite some speedups might be desirable, one might not want to commit all cores to this amount of waste.
• in-manifest and in-bin documentation of feature toggles Unfortunately, these don't show up on docs.rs due to it being a binary only crate. One could consider throwing in a lib just for good measure.

Commit Statistics

• 63 commits contributed to the release over the course of 126 calendar days.
• 165 days passed between releases.
• 10 commits were understood as conventional.
• 12 unique issues were worked on: #215, #263, #266, #279, #287, #289, #293, #298, #301, #329, #366, #67

Commit Details

... (truncated)

Commits

• 4f98e94 Release gix-features v0.38.2, gix-actor v0.31.2, gix-validate v0.8.5, gix-obj...
• 9511416 adjust changelogs prior to release
• d6cd449 Merge branch 'various-fixes'
• e955770 fix: symlink support for zip archives
• cd4de83 update dependencies
• 6f55f2a fix-CI
• 79dce79 Merge pull request from GHSA-7w47-3wg8-547c
• 1242151 Apply suggestions from code review
• d2ae9d5 adapt to changes in gix-ref
• 9555efe fix!: assure that special device names on Windows aren't allowed.
• Additional commits viewable in compare view

Updates gix-index from 0.32.1 to 0.33.0

Release notes

Sourced from gix-index's releases.

gix-index v0.33.0

New Features

• add From<gix_object::tree::Mode> for gix_index::entry::Mode.

Other

• make clear that indices can contain invalid or dangerous paths. It's probably best not to try to protect against violations of constraints in this free-to-mutate data-structure and instead suggest to validate entry paths before using them on disk (or use the gix_worktree::Stack).

Bug Fixes (BREAKING)

• State::from_tree() now performs name validation. Previously, malicious trees could be used to create a index with invalid names, which is one step closer to actually abusing it.

Commit Statistics

• 8 commits contributed to the release over the course of 33 calendar days.
• 33 days passed between releases.
• 3 commits were understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Commit Details

• Uncategorized
  • Adjust changelogs prior to release (9511416)
  • Merge branch 'various-fixes' (d6cd449)
  • Merge pull request from GHSA-7w47-3wg8-547c (79dce79)
  • State::from_tree() now performs name validation. (2ea87f0)
  • Apply suggestions from code review (bad9a79)
  • Make clear that indices can contain invalid or dangerous paths. (b6a67d7)
  • Add From<gix_object::tree::Mode> for gix_index::entry::Mode. (9564699)
  • Merge branch 'cargo-fixes' (977346e)

Changelog

Sourced from gix-index's changelog.

0.33.0 (2023-12-29)

New Features

• Add rev parse --reference. It's similar to git rev-parse --symbolic-full-name.

Bug Fixes (BREAKING)

• mark gix::interrupt::init_handler() as unsafe The passed interrupt() argument will be called from a signal handler, so that needs to be documented and the call sites need to state that they fulfill the contract.

  Thanks to @​Manishearth for pointing this out.

Commit Statistics

• 7 commits contributed to the release over the course of 21 calendar days.
• 22 days passed between releases.
• 2 commits were understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Commit Details

• Uncategorized
  • Merge branch 'maintenance' (4454c9d)
  • Upgrade tabled and setup wordwrapping (a78caba)
  • Merge branch 'tracking-branch' (0fe20e8)
  • Add rev parse --reference. (193ffcd)
  • Merge branch 'main' into fix-1183 (1691ba6)
  • Merge branch 'push-yvzxzqrkkvry' (4917beb)
  • Mark gix::interrupt::init_handler() as unsafe (59b8104)

0.32.0 (2023-12-06)

New Features

... (truncated)

Commits

• 4f98e94 Release gix-features v0.38.2, gix-actor v0.31.2, gix-validate v0.8.5, gix-obj...
• 9511416 adjust changelogs prior to release
• d6cd449 Merge branch 'various-fixes'
• e955770 fix: symlink support for zip archives
• cd4de83 update dependencies
• 6f55f2a fix-CI
• 79dce79 Merge pull request from GHSA-7w47-3wg8-547c
• 1242151 Apply suggestions from code review
• d2ae9d5 adapt to changes in gix-ref
• 9555efe fix!: assure that special device names on Windows aren't allowed.
• Additional commits viewable in compare view

Updates gix-ref from 0.43.0 to 0.44.0

Release notes

Sourced from gix-ref's releases.

gix-ref v0.44.0

New Features

• add file::Store::force_refresh_packed_buffer() to public API That way it's possible to explicitly refresh if the caller knows that some other operation might have invalidated the in-memory cache. The mtime based approach doesn't work reliably on all filesystems due to coarse granularity of time.

Bug Fixes

• don't ignore packed ref deletion in non-default transaction mode Before, Change::Delete edits weren't propagated to packed refs if the mode was DeletionsAndNonSymbolicUpdates/RemoveLooseSourceReference.

Bug Fixes (BREAKING)

• assure that special device names on Windows aren't allowed. Otherwise it's possible to read or write to devices when interacting with references of the 'right' name.

  This behaviour can be controlled with the new prohibit_windows_device_names flag, which is adjustable on the Store instance as field, and which now has to be passed during instantiation as part of the new store::init::Options struct.

Commit Statistics

• 12 commits contributed to the release over the course of 30 calendar days.
• 68 days passed between releases.
• 3 commits were understood as conventional.
• 1 unique issue was worked on: #1348

Commit Details

• #1348
  • Add file::Store::force_refresh_packed_buffer() to public API (f2d8955)
• Uncategorized
  • Adjust changelogs prior to release (9511416)
  • Merge branch 'various-fixes' (d6cd449)
  • Fix-CI (6f55f2a)
  • Merge pull request from GHSA-7w47-3wg8-547c (79dce79)
  • Apply suggestions from code review (1242151)
  • Assure that special device names on Windows aren't allowed. (9555efe)
  • Release gix-date v0.8.6 (d3588ca)
  • Merge branch 'push-wwxrqxuzmolm' (048e43e)
  • Refactor - address fix suggested by cargo check (4faf10e)
  • Don't ignore packed ref deletion in non-default transaction mode (e33efa2)

... (truncated)

Commits

• 4f98e94 Release gix-features v0.38.2, gix-actor v0.31.2, gix-validate v0.8.5, gix-obj...
• 9511416 adjust changelogs prior to release
• d6cd449 Merge branch 'various-fixes'
• e955770 fix: symlink support for zip archives
• cd4de83 update dependencies
• 6f55f2a fix-CI
• 79dce79 Merge pull request from GHSA-7w47-3wg8-547c
• 1242151 Apply suggestions from code review
• d2ae9d5 adapt to changes in gix-ref
• 9555efe fix!: assure that special device names on Windows aren't allowed.
• Additional commits viewable in compare view

Updates gix-worktree from 0.33.1 to 0.34.0

Release notes

Sourced from gix-worktree's releases.

gix-worktree v0.34.0

New Features (BREAKING)

• Stack::at_path() replaces is_dir parameter with mode. That way, detailed information about the path-to-be is available not only for evaluating attributes or excludes, but also for validating path components (in this case, relevant for .gitmodules).

Bug Fixes (BREAKING)

• validate all components pushed onto the stack when creating leading paths. This way, everyone using the stack with the purpose of altering the working tree will run additional checks to prevent callers from sneaking in forbidden paths.

  Note that these checks don't run otherwise, so one has to be careful to not forget to run these checks whenever needed.

Commit Statistics

• 30 commits contributed to the release over the course of 33 calendar days.
• 33 days passed between releases.
• 2 commits were understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 1 time to make code idiomatic.

Commit Details

• Uncategorized
  • Adjust changelogs prior to release (9511416)
  • Merge branch 'various-fixes' (d6cd449)
  • Merge pull request from GHSA-7w47-3wg8-547c (79dce79)
  • Add tests for actual worktree checkouts to assure validations kick in (a6710c5)
  • Make more test repos with traversal-attempting blob names (f3edaa3)
  • Combine non-"slashes" (i.e. trees) scripts and make it a fixture (6f44aca)
  • Combine "slashes" scripts and make it a fixture (7e9c769)
  • Adjust make_traverse_dotdot_slashes.sh for environment (fe8c2c9)
  • Start on demo script making repo with ../… filename (4c684ca)
  • Pass --literally to hash-object when making tree (6846c90)
  • Reword to be more portable and self-documenting (89ee180)
  • Split into commented sections (9436f3f)
  • Show the new commit, once made and on the branch (981cf5b)
  • Start on demo script making repo with .git/… filename (7daca49)

... (truncated)

Changelog

Sourced from gix-worktree's changelog.

0.34.0 (2024-02-25)

New Features

• add gix clean --patterns-for-entries|-m to help with wildcards.
• basic gix clean

Commit Statistics

• 20 commits contributed to the release over the course of 42 calendar days.
• 58 days passed between releases.
• 2 commits were understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Commit Details

• Uncategorized
  • Merge branch 'status' (d53504a)
  • Allow the -n argument as no-op to make them more compatible. (8959b21)
  • Add gix clean --patterns-for-entries|-m to help with wildcards. (9863d75)
  • Merge branch 'tabled' (ed79aa7)
  • Refactor (e25d7eb)
  • Merge branch 'ein-completions' (cebeedf)
  • Fix clippy lints (454e6b9)
  • Add back line wrapping simplify Usage Variants (4ac597a)
  • Tell clap that ein is named ein (4fd6ab8)
  • Copy over code from gix to generate completions for ein as well (abe0043)
  • Fix indenting by removing formatting on the config str (c0c4d59)
  • Reserve 50 characters for the config name (cc8d008)
  • Bring back old implementation from GitoxideLabs/gitoxide@65e6496 this also removes terminal_size, although its not large (1ecc96d)
  • Remove tabled (fcd585b)
  • Merge branch 'dirwalk' (face359)
  • Basic gix clean (e8597f3)
  • Merge branch 'chunks_exact' (d4d478b)
  • Use chunks_exact where possible (2482023)
  • Merge pull request #1248 from joshtriplett/tyop (39f35da)
  • Typo fixes (3ef3bc2)

0.33.0 (2023-12-29)

New Features

• Add rev parse --reference.

... (truncated)

Commits

• 4f98e94 Release gix-features v0.38.2, gix-actor v0.31.2, gix-validate v0.8.5, gix-obj...
• 9511416 adjust changelogs prior to release
• d6cd449 Merge branch 'various-fixes'
• e955770 fix: symlink support for zip archives
• cd4de83 update dependencies
• 6f55f2a fix-CI
• 79dce79 Merge pull request from GHSA-7w47-3wg8-547c
• 1242151 Apply suggestions from code review
• d2ae9d5 adapt to changes in gix-ref
• 9555efe fix!: assure that special device names on Windows aren't allowed.
• Additional commits viewable in compare view

Updates gix-worktree-state from 0.10.0 to 0.11.0

Release notes

Sourced from gix-worktree-state's releases.

gix-worktree-state v0.11.0

Bug Fixes

• default to creating file-symlinks if it is dangling on Windows This behaviour is the same as in Git.

Commit Statistics

• 10 commits contributed to the release over the course of 33 calendar days.
• 38 days passed between releases.
• 1 commit was understood as conventional.
• 2 unique issues were worked on: #1354, #1373

Commit Details

• #1354
  • Default to creating file-symlinks if it is dangling on Windows (31d02a8)
• #1373
  • Better detection of pre-requisites for symlink test (00a1c47)
• Uncategorized
  • Adjust changelogs prior to release (9511416)
  • Merge branch 'various-fixes' (d6cd449)
  • Merge pull request from GHSA-7w47-3wg8-547c (79dce79)
  • Add tests for actual worktree checkouts to assure validations kick in (a6710c5)
  • Adapt to changes in gix-worktree (1ca6a3c)
  • Merge branch 'status' (04ef31e)
  • Merge branch 'cargo-fixes' (977346e)
  • Release gix-index v0.32.1, gix-pathspec v0.7.4, gix-worktree v0.33.1, gix-dir v0.4.1 (54ac559)

Changelog

Sourced from gix-worktree-state's changelog.

0.11.0 (2022-04-03)

Adapt to changes in gix-features which change Send + Sync to Send + Clone. This happens to allow non-sync implementations (i.e. thread-local), along with Sync ones which usually are Clone too as they are passed by immutable reference (which is Clone + Copy).

Refactor (BREAKING)

• Remove light* features, add 'lean-async' in its place; remove termion support

Changed (BREAKING)

• remove Option<impl Progress> in favor of impl Progress
• remove unnecessary Arc around should_interrupt flag
• remove Sha1 mentions in index::verify::Mode::* variants The hash is repository defined and not hard-coded
• Remove lean plumbing CLI

Bug Fixes

• Collect all stdout messages in line renderer as well Otherwise the threaded line renderer will interfere with genuine program output.

New Features

• gix mailmap verify command
• ein find --debug to learn why it is slow
• --counting-threads flag to configure amount of threads when counting The efficiency of multi-threaded counting is low per core, and despite some speedups might be desirable, one might not want to commit all cores to this amount of waste.
• in-manifest and in-bin documentation of feature toggles Unfortunately, these don't show up on docs.rs due to it being a binary only crate. One could consider throwing in a lib just for good measure.

Commit Statistics

• 63 commits contributed to the release over the course of 126 calendar days.
• 165 days passed between releases.
• 10 commits were understood as conventional.
• 12 unique issues were worked on: #215, #263, #266, #279, #287, #289, #293, #298, #301, #329, #366, #67

Commit Details

... (truncated)

Commits

• 4f98e94 Release gix-features v0.38.2, gix-actor v0.31.2, gix-validate v0.8.5, gix-obj...
• 9511416 adjust changelogs prior to release
• d6cd449 Merge branch 'various-fixes'
• e955770 fix: symlink support for zip archives
• cd4de83 update dependencies
• 6f55f2a fix-CI
• 79dce79 Merge pull request from GHSA-7w47-3wg8-547c
• 1242151 Apply suggestions from code review
• d2ae9d5 adapt to changes in gix-ref
• 9555efe fix!: assure that special device names on Windows aren't allowed.
• Additional commits viewable in compare view

Updates mio from 0.8.6 to 0.8.11

Changelog

Sourced from mio's changelog.

0.8.11

• Fix receiving IOCP events after deregistering a Windows named pipe (tokio-rs/mio#1760, backport pr: tokio-rs/mio#1761).

0.8.10

Added

• Solaris support (tokio-rs/mio#1724).

0.8.9

Added

• ESP-IDF framework support (tokio-rs/mio#1692).
• AIX operating system support (tokio-rs/mio#1704).
• Vita support (tokio-rs/mio#1721).
• {UnixListener,UnixStream}:bind_addr (tokio-rs/mio#1630).
• mio_unsupported_force_poll_poll and mio_unsupported_force_waker_pipe unsupported configuration flags to force a specific poll or waker implementation (tokio-rs/mio#1684, tokio-rs/mio#1685, tokio-rs/mio#1692).

Fixed

• The pipe(2) based waker (swapped file descriptors) (tokio-rs/mio#1722).
• The duplicate waker check to work correctly with cloned Registrys. (tokio-rs/mio#1706).

0.8.8

Fixed

• Fix compilation on WASI (tokio-rs/mio#1676).

0.8.7

Added

• Add/fix support for tvOS and watchOS, Mio should now build for tvOS and

... (truncated)

Commits

• 0328bde Release v0.8.11
• 7084498 Fix warnings
• 90d4fe0 named-pipes: fix receiving IOCP events after deregister
• c710a30 Add v0.8.x to the CI
• c29e21c Release v0.8.10
• f6a20da Add Solaris operating system support (#1724)
• e80c3b2 Release v0.8.9
• 862786b Fix importing of IoSourceState
• 4034872 Add support for vita target
• 8eb4010 Fix receiver and sender fd in pipe based waker
• Additional commits viewable in compare view

Updates rustix from 0.37.11 to 0.37.27

Release notes

Sourced from rustix's releases.

0.37.20

• Fix decoding of abstract unix sockets (#661)
• Fix the fstat/statat/etc. fallback when statx fails with EPERM. (#666)
• Add a rustix::pty module. (#673)
• process: Add aliaseses for parent_process_death_signal (#677)
• Fix panic on dropping RecvAncillaryBuffer after failed recvmsg (#676)

0.37.19

What's Changed

• Fix no-std builds for MacOS and BSDs by @​niluxv in bytecodealliance/rustix#647
• Make linkat, unlinkat, and renameat weak on macos. by @​sunfishcode in bytecodealliance/rustix#649

Full Changelog: bytecodealliance/rustix@v0.37.18...v0.37.19

Commits

• b38dc51 chore: Release rustix version 0.37.27
• a2d9c8e Fix p{read,write}v{,v2}'s encoding of the offset argument on Linux. (#896) (#...
• dce2777 chore: Release rustix version 0.37.26
• 06dbe83 Fix sendmsg_unix's address encoding. (#885) (#886)
• 00b84d6 chore: Release rustix version 0.37.25
• cad15a7 Fixes for Dir on macOS, FreeBSD, and WASI.
• df3c3a1 Merge pull request from GHSA-c827-hfw6-qwvm
• b78aeff chore: Release rustix version 0.37.24
• c0c3f01 Add GNU/Hurd support (#852)
• f416b6b Fix the test_ttyname_ok test when /dev/stdin is inaccessable. (#821)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.