Commit Graph

19 Commits

Author SHA1 Message Date
Kobi Hikri ed060166ff chore(deny): drop stale RUSTSEC-2026-0049 suppression (patched in resolved 0.103.13) (#24509)
## What this does

`deny.toml` suppresses `RUSTSEC-2026-0049` (rustls-webpki) with the
comment *"No fix in stable rustls-webpki yet."* That's no longer true,
so this drops the stale suppression.

## Why it's safe

- The advisory is patched: `patched = [">= 0.103.10"]`
([RUSTSEC-2026-0049](https://rustsec.org/advisories/RUSTSEC-2026-0049),
dated 2026-03-20).
- `Cargo.lock` already resolves `rustls-webpki` to `0.103.13`, which is
`>= 0.103.10`.

So `cargo deny` won't flag the advisory anymore, and keeping the ignore
just hides future regressions in that crate. `RUSTSEC-2026-0049` was the
only entry, so the list becomes `ignore = []`.

## Verification

```
grep -A1 'name = "rustls-webpki"' Cargo.lock            # version = "0.103.13"
# advisory: patched = [">= 0.103.10"]  → 0.103.13 satisfies it
```

One-line config change.

---

*Disclosure: I used an AI tool to help spot this and prepare the change;
I verified the resolved version and the advisory's patched range myself
and take responsibility for it.*

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-14 23:13:58 +08:00
renovate[bot] c9efe10ca3 chore(deps): update rust crates (#20625) 2026-03-23 15:29:19 +08:00
renovate 14d803a578 chore(deps): update rust crates (#16575)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [hashbrown](https://redirect.github.com/rust-lang/hashbrown) | workspace.dependencies | patch | `0.16.0` -> `0.16.1` |
| [indexmap](https://redirect.github.com/indexmap-rs/indexmap) | workspace.dependencies | patch | `2.12.0` -> `2.12.1` |
| [insta](https://insta.rs/) ([source](https://redirect.github.com/mitsuhiko/insta)) | workspace.dependencies | minor | `1.43.2` -> `1.44.3` |
| [log](https://redirect.github.com/rust-lang/log) | workspace.dependencies | patch | `0.4.28` -> `0.4.29` |
| [syn](https://redirect.github.com/dtolnay/syn) | workspace.dependencies | patch | `2.0.110` -> `2.0.111` |
| [tower-lsp-server](https://redirect.github.com/tower-lsp-community/tower-lsp-server) | workspace.dependencies | minor | `0.22.1` -> `0.23.0` |
| [tracing-subscriber](https://tokio.rs) ([source](https://redirect.github.com/tokio-rs/tracing)) | workspace.dependencies | patch | `0.3.20` -> `0.3.22` |

---

### Release Notes

<details>
<summary>rust-lang/hashbrown (hashbrown)</summary>

### [`v0.16.1`](https://redirect.github.com/rust-lang/hashbrown/blob/HEAD/CHANGELOG.md#0161---2025-11-20)

[Compare Source](https://redirect.github.com/rust-lang/hashbrown/compare/v0.16.0...v0.16.1)

##### Added

- Added `HashTable` methods related to the raw bucket index ([#&#8203;657](https://redirect.github.com/rust-lang/hashbrown/issues/657))
- Added `VacantEntryRef::insert_with_key` ([#&#8203;579](https://redirect.github.com/rust-lang/hashbrown/issues/579))

##### Changed

- Removed specialization for `Copy` types ([#&#8203;662](https://redirect.github.com/rust-lang/hashbrown/issues/662))
- The `get_many_mut` family of methods have been renamed to `get_disjoint_mut`
  to match the standard library. The old names are still present for now, but
  deprecated. ([#&#8203;648](https://redirect.github.com/rust-lang/hashbrown/issues/648))
- Recognize and use over-sized allocations when using custom allocators. ([#&#8203;523](https://redirect.github.com/rust-lang/hashbrown/issues/523))
- Depend on `serde_core` instead of `serde`. ([#&#8203;649](https://redirect.github.com/rust-lang/hashbrown/issues/649))
- Optimized `collect` on rayon parallel iterators. ([#&#8203;652](https://redirect.github.com/rust-lang/hashbrown/issues/652))

</details>

<details>
<summary>indexmap-rs/indexmap (indexmap)</summary>

### [`v2.12.1`](https://redirect.github.com/indexmap-rs/indexmap/blob/HEAD/RELEASES.md#2121-2025-11-20)

[Compare Source](https://redirect.github.com/indexmap-rs/indexmap/compare/2.12.0...2.12.1)

- Simplified a lot of internals using `hashbrown`'s new bucket API.

</details>

<details>
<summary>mitsuhiko/insta (insta)</summary>

### [`v1.44.3`](https://redirect.github.com/mitsuhiko/insta/blob/HEAD/CHANGELOG.md#1443)

[Compare Source](https://redirect.github.com/mitsuhiko/insta/compare/1.44.2...1.44.3)

- Fix a regression in 1.44.2 where merge conflict detection was too aggressive, incorrectly flagging snapshot content containing `======` or similar patterns as conflicts. [#&#8203;832](https://redirect.github.com/mitsuhiko/insta/issues/832)
- Fix a regression in 1.42.2 where inline snapshot updates would corrupt the file when code preceded the macro (e.g., `let output = assert_snapshot!(...)`). [#&#8203;833](https://redirect.github.com/mitsuhiko/insta/issues/833)

### [`v1.44.2`](https://redirect.github.com/mitsuhiko/insta/blob/HEAD/CHANGELOG.md#1442)

[Compare Source](https://redirect.github.com/mitsuhiko/insta/compare/1.44.1...1.44.2)

- Fix a rare backward compatibility issue where inline snapshots using an uncommon legacy format (single-line content stored in multiline raw strings) could fail to match after 1.44.0. [#&#8203;830](https://redirect.github.com/mitsuhiko/insta/issues/830)
- Handle merge conflicts in snapshot files gracefully. When a snapshot file contains git merge conflict markers, insta now detects them and treats the snapshot as missing, allowing tests to continue and create a new pending snapshot for review. [#&#8203;829](https://redirect.github.com/mitsuhiko/insta/issues/829)
- Skip nextest\_doctest tests when cargo-nextest is not installed. [#&#8203;826](https://redirect.github.com/mitsuhiko/insta/issues/826)
- Fix functional tests failing under nextest due to inherited `NEXTEST_RUN_ID` environment variable. [#&#8203;824](https://redirect.github.com/mitsuhiko/insta/issues/824)

### [`v1.44.1`](https://redirect.github.com/mitsuhiko/insta/blob/HEAD/CHANGELOG.md#1441)

[Compare Source](https://redirect.github.com/mitsuhiko/insta/compare/1.44.0...1.44.1)

- Add `--dnd` alias for `--disable-nextest-doctest` flag to make it easier to silence the deprecation warning. [#&#8203;822](https://redirect.github.com/mitsuhiko/insta/issues/822)
- Update cargo-dist to 0.30.2 and fix Windows runner to use windows-2022. [#&#8203;821](https://redirect.github.com/mitsuhiko/insta/issues/821)

### [`v1.44.0`](https://redirect.github.com/mitsuhiko/insta/blob/HEAD/CHANGELOG.md#1440)

[Compare Source](https://redirect.github.com/mitsuhiko/insta/compare/1.43.2...1.44.0)

- Added non-interactive snapshot review and reject modes for use in non-TTY environments
  (LLMs, CI pipelines, scripts). `cargo insta review --snapshot <path>` and
  `cargo insta reject --snapshot <path>` now work without a terminal. Enhanced
  `pending-snapshots` output with usage instructions and workspace-relative paths. [#&#8203;815](https://redirect.github.com/mitsuhiko/insta/issues/815)
- Add `--disable-nextest-doctest` flag to `cargo insta test` to disable running doctests with
  nextest. Shows a deprecation warning when nextest is used with doctests without this flag, to prepare `cargo insta` to no longer run
  a separate doctest process when using nextest in the future. [#&#8203;803](https://redirect.github.com/mitsuhiko/insta/issues/803)
- Add ergonomic `--test-runner-fallback` / `--no-test-runner-fallback` flags to `cargo insta test`. [#&#8203;811](https://redirect.github.com/mitsuhiko/insta/issues/811)
- Apply redactions to snapshot metadata. [#&#8203;813](https://redirect.github.com/mitsuhiko/insta/issues/813)
- Remove confusing 'previously unseen snapshot' message. [#&#8203;812](https://redirect.github.com/mitsuhiko/insta/issues/812)
- Speed up JSON float rendering. [#&#8203;806](https://redirect.github.com/mitsuhiko/insta/issues/806) ([@&#8203;nyurik](https://redirect.github.com/nyurik))
- Allow globset version up to 0.4.16. [#&#8203;810](https://redirect.github.com/mitsuhiko/insta/issues/810) ([@&#8203;g0hl1n](https://redirect.github.com/g0hl1n))
- Improve documentation. [#&#8203;814](https://redirect.github.com/mitsuhiko/insta/issues/814) ([@&#8203;tshepang](https://redirect.github.com/tshepang))
- We no longer trim starting newlines during assertions, which allows asserting
  the number of leading newlines match. Existing assertions with different
  leading newlines will pass and print a warning suggesting running with
  `--force-update-snapshots`.  They may fail in the future.  (Note that we still
  currently allow differing *trailing* newlines, though may adjust this in the
  future).  [#&#8203;563](https://redirect.github.com/mitsuhiko/insta/issues/563)

</details>

<details>
<summary>rust-lang/log (log)</summary>

### [`v0.4.29`](https://redirect.github.com/rust-lang/log/blob/HEAD/CHANGELOG.md#0429---2025-12-02)

[Compare Source](https://redirect.github.com/rust-lang/log/compare/0.4.28...0.4.29)

</details>

<details>
<summary>dtolnay/syn (syn)</summary>

### [`v2.0.111`](https://redirect.github.com/dtolnay/syn/releases/tag/2.0.111)

[Compare Source](https://redirect.github.com/dtolnay/syn/compare/2.0.110...2.0.111)

- Allow first argument of `braced!`, `bracketed!`, `parenthesized!` to be an otherwise unused variable ([#&#8203;1946](https://redirect.github.com/dtolnay/syn/issues/1946))

</details>

<details>
<summary>tower-lsp-community/tower-lsp-server (tower-lsp-server)</summary>

### [`v0.23.0`](https://redirect.github.com/tower-lsp-community/tower-lsp-server/blob/HEAD/CHANGELOG.md#0230---2025-12-07)

[Compare Source](https://redirect.github.com/tower-lsp-community/tower-lsp-server/compare/v0.22.1...v0.23.0)

##### Added

- add Amber LSP to README Projects section ([#&#8203;66](https://redirect.github.com/tower-lsp-community/tower-lsp-server/issues/66))
- support `window/workDoneProgress/create` requests

##### Changed

- Change the LSP specification types library from `gluon-lang/lsp-types` (which was unmaintained) to `tower-lsp-community/ls-types` (our fork).

  The initial release manually fixes typos that are blocking for some projects.

  In the long term, ls-types will take the approach of codegen based on the types model provided by the LSP specification. This should remove any kind of typos or documentation desync. See [tower-lsp-community/ls-types#22 (comment)](https://redirect.github.com/tower-lsp-community/ls-types/issues/22#issuecomment-3483189800).

##### Fixed

- use `WorkspaceSymbolResponse` in `symbol()` return value

</details>

<details>
<summary>tokio-rs/tracing (tracing-subscriber)</summary>

### [`v0.3.22`](https://redirect.github.com/tokio-rs/tracing/releases/tag/tracing-subscriber-0.3.22): tracing-subscriber 0.3.22

[Compare Source](https://redirect.github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.21...tracing-subscriber-0.3.22)

##### Important

The previous release [0.3.21] was yanked as it depended explicitly on
[tracing-0.1.42], which was yanked due to a breaking change (see [#&#8203;3424] for
details). This release contains all the changes from the previous release, plus
an update to the newer version of `tracing`.

##### Changed

- `tracing`: updated to 0.1.43 ([#&#8203;3427])

[#&#8203;3424]: https://redirect.github.com/tokio-rs/tracing/pull/3424

[#&#8203;3427]: https://redirect.github.com/tokio-rs/tracing/pull/3427

[0.3.21]: https://redirect.github.com/tokio-rs/tracing/releases/tag/tracing-subscriber-0.3.21

[tracing-0.1.42]: https://redirect.github.com/tokio-rs/tracing/releases/tag/tracing-0.1.42

### [`v0.3.21`](https://redirect.github.com/tokio-rs/tracing/releases/tag/tracing-subscriber-0.3.21): tracing-subscriber 0.3.21

[Compare Source](https://redirect.github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.20...tracing-subscriber-0.3.21)

##### Fixed

- Change registry exit to decrement local span ref only ([#&#8203;3331])
- Make Layered propagate `on_register_dispatch` ([#&#8203;3379])

##### Changed

- `tracing`: updated to 0.1.42 ([#&#8203;3418])

##### Performance

- Remove `clone_span` on enter ([#&#8203;3289])

##### Documented

- Fix a few small things in the format module ([#&#8203;3339])
- Fix extra closing brace in layer docs ([#&#8203;3350])
- Fix link in `FmtSpan` docs ([#&#8203;3411])

[#&#8203;3289]: https://redirect.github.com/tokio-rs/tracing/pull/#&#8203;3289

[#&#8203;3331]: https://redirect.github.com/tokio-rs/tracing/pull/#&#8203;3331

[#&#8203;3339]: https://redirect.github.com/tokio-rs/tracing/pull/#&#8203;3339

[#&#8203;3350]: https://redirect.github.com/tokio-rs/tracing/pull/#&#8203;3350

[#&#8203;3379]: https://redirect.github.com/tokio-rs/tracing/pull/#&#8203;3379

[#&#8203;3411]: https://redirect.github.com/tokio-rs/tracing/pull/#&#8203;3411

[#&#8203;3418]: https://redirect.github.com/tokio-rs/tracing/pull/#&#8203;3418

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zMi4yIiwidXBkYXRlZEluVmVyIjoiNDIuMzIuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
2025-12-09 03:06:52 +00:00
Copilot 2c4369a80d perf(syntax,codegen): Replace ryu_js with dragonbox_ecma for floating point formatting (#12821)
From the blog post https://v8.dev/blog/json-stringify
2025-08-06 13:16:41 +08:00
renovate a47ccf29a4 chore(deps): lock file maintenance rust crates (#10651)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|  |  | lockFileMaintenance | All locks refreshed |
| [insta](https://insta.rs/) ([source](https://redirect.github.com/mitsuhiko/insta)) | workspace.dependencies | minor | `1.42.2` -> `1.43.0` |
| [markdown](https://redirect.github.com/wooorm/markdown-rs) | workspace.dependencies | patch | `1.0.0-alpha.23` -> `1.0.0` |
| [mimalloc-safe](https://redirect.github.com/napi-rs/mimalloc-safe) | workspace.dependencies | patch | `0.1.50` -> `0.1.51` |
| [syn](https://redirect.github.com/dtolnay/syn) | workspace.dependencies | patch | `2.0.100` -> `2.0.101` |

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

### Release Notes

<details>
<summary>mitsuhiko/insta (insta)</summary>

### [`v1.43.0`](https://redirect.github.com/mitsuhiko/insta/blob/HEAD/CHANGELOG.md#1430)

[Compare Source](https://redirect.github.com/mitsuhiko/insta/compare/1.42.2...1.43.0)

-   Add uppercase keyboard shortcuts for bulk operations in `cargo insta review`:
    `A` to accept all, `R` to reject all, and `S` to skip all remaining snapshots.
    [#&#8203;745](https://redirect.github.com/mitsuhiko/insta/issues/745)
-   `--unreferenced=auto` (or other relevant values) no longer cleans up pending
    snapshots. A bug where `cargo insta test --unreferenced=auto` would
    incorrectly pass on new pending snapshots has been fixed.
-   Support specifying `cargo-nextest` bin with `INSTA_CARGO_NEXTEST_BIN`.  [#&#8203;721](https://redirect.github.com/mitsuhiko/insta/issues/721) (Louis Fruleux)
-   Allow setting `INSTA_WORKSPACE_ROOT` at compile time. This is useful for reproducible binaries
    so they don't contain references to `CARGO_MANIFEST_DIR`. [#&#8203;726](https://redirect.github.com/mitsuhiko/insta/issues/726) (Pascal Bach)
-   Qualify all references in macros to avoid name clashes. [#&#8203;729](https://redirect.github.com/mitsuhiko/insta/issues/729) (Austin Schey)
-   Remove `linked-hash-map` and `pin-project` dependencies.  [#&#8203;742](https://redirect.github.com/mitsuhiko/insta/issues/742), [#&#8203;741](https://redirect.github.com/mitsuhiko/insta/issues/741), [#&#8203;738](https://redirect.github.com/mitsuhiko/insta/issues/738)
-   `cargo insta review` fails with a helpful error message when run in a non-TTY environment.

</details>

<details>
<summary>wooorm/markdown-rs (markdown)</summary>

### [`v1.0.0`](https://redirect.github.com/wooorm/markdown-rs/releases/tag/1.0.0)

[Compare Source](https://redirect.github.com/wooorm/markdown-rs/compare/1.0.0-alpha.24...1.0.0)

💯

Nothing changed since the last alpha.
It’s just that: this crate’s now being used a bunch and working well, so it’s time to be stable!

### [`v1.0.0-alpha.24`](https://redirect.github.com/wooorm/markdown-rs/releases/tag/1.0.0-alpha.24)

[Compare Source](https://redirect.github.com/wooorm/markdown-rs/compare/1.0.0-alpha.23...1.0.0-alpha.24)

-   [`9987d15`](https://redirect.github.com/wooorm/markdown-rs/commit/9987d15) Add serde (de)serializing to configuration
-   [`d399853`](https://redirect.github.com/wooorm/markdown-rs/commit/d399853) Update Unicode

**Full Changelog**: https://github.com/wooorm/markdown-rs/compare/1.0.0-alpha.23...1.0.0-alpha.24

</details>

<details>
<summary>napi-rs/mimalloc-safe (mimalloc-safe)</summary>

### [`v0.1.51`](https://redirect.github.com/napi-rs/mimalloc-safe/releases/tag/v0.1.51)

[Compare Source](https://redirect.github.com/napi-rs/mimalloc-safe/compare/v0.1.50...v0.1.51)

#### What's Changed

-   chore(deps): update yarn to v4.9.0 by [@&#8203;renovate](https://redirect.github.com/renovate) in [https://github.com/napi-rs/mimalloc-safe/pull/10](https://redirect.github.com/napi-rs/mimalloc-safe/pull/10)
-   chore(deps): update yarn to v4.9.1 by [@&#8203;renovate](https://redirect.github.com/renovate) in [https://github.com/napi-rs/mimalloc-safe/pull/11](https://redirect.github.com/napi-rs/mimalloc-safe/pull/11)
-   feat: add no_opt_arch feature flag by [@&#8203;Brooooooklyn](https://redirect.github.com/Brooooooklyn) in [https://github.com/napi-rs/mimalloc-safe/pull/13](https://redirect.github.com/napi-rs/mimalloc-safe/pull/13)
-   feat: mimalloc v2.2.3 by [@&#8203;Brooooooklyn](https://redirect.github.com/Brooooooklyn) in [https://github.com/napi-rs/mimalloc-safe/pull/14](https://redirect.github.com/napi-rs/mimalloc-safe/pull/14)

**Full Changelog**: https://github.com/napi-rs/mimalloc-safe/compare/v0.1.50...v0.1.51

</details>

<details>
<summary>dtolnay/syn (syn)</summary>

### [`v2.0.101`](https://redirect.github.com/dtolnay/syn/releases/tag/2.0.101)

[Compare Source](https://redirect.github.com/dtolnay/syn/compare/2.0.100...2.0.101)

-   Improve TypeGenerics::as_turbofish to return longer-lived return value ([#&#8203;1861](https://redirect.github.com/dtolnay/syn/issues/1861))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 12am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNTcuMyIsInVwZGF0ZWRJblZlciI6IjM5LjI1Ny4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
2025-04-28 09:13:04 +00:00
Boshen c859a36f93 chore: bump ring 2025-03-07 12:01:31 +08:00
Boshen 1d81adac48 Rust Edition 2024 (#9289)
closes #9271

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-02-22 11:56:25 +08:00
overlookmotel 69b1ef3c16 style(tools): remove line break from deny.toml (#8022)
Extra line break is triggering autofix.
2024-12-19 15:46:43 +00:00
Boshen c24f102255 chore: add Zlib license to deny.toml 2024-12-19 23:36:12 +08:00
Boshen ed93193c32 chore: bump dprint plugins (#7818) 2024-12-12 22:12:01 +08:00
renovate 17fb7e5303 chore(deps): update rust crates (#7467)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [allocator-api2](https://redirect.github.com/zakarumych/allocator-api2) | workspace.dependencies | patch | `0.2.18` -> `0.2.20` |
| [flate2](https://redirect.github.com/rust-lang/flate2-rs) | workspace.dependencies | patch | `1.0.34` -> `1.0.35` |
| [itoa](https://redirect.github.com/dtolnay/itoa) | workspace.dependencies | patch | `1.0.11` -> `1.0.13` |
| [oxc_resolver](https://redirect.github.com/oxc-project/oxc-resolver) | workspace.dependencies | minor | `2.0.0` -> `2.1.1` |
| [proc-macro2](https://redirect.github.com/dtolnay/proc-macro2) | workspace.dependencies | patch | `1.0.89` -> `1.0.92` |
| [serde](https://serde.rs) ([source](https://redirect.github.com/serde-rs/serde)) | workspace.dependencies | patch | `1.0.214` -> `1.0.215` |
| [serde_json](https://redirect.github.com/serde-rs/json) | workspace.dependencies | patch | `1.0.132` -> `1.0.133` |
| [tempfile](https://stebalien.com/projects/tempfile-rs/) ([source](https://redirect.github.com/Stebalien/tempfile)) | workspace.dependencies | minor | `3.13.0` -> `3.14.0` |
| [tokio](https://tokio.rs) ([source](https://redirect.github.com/tokio-rs/tokio)) | workspace.dependencies | patch | `1.41.0` -> `1.41.1` |
| [url](https://redirect.github.com/servo/rust-url) | workspace.dependencies | patch | `2.5.3` -> `2.5.4` |

---

### Release Notes

<details>
<summary>rust-lang/flate2-rs (flate2)</summary>

### [`v1.0.35`](https://redirect.github.com/rust-lang/flate2-rs/releases/tag/1.0.35): - security update to zlib-rs

[Compare Source](https://redirect.github.com/rust-lang/flate2-rs/compare/1.0.34...1.0.35)

#### What's Changed

-   Upgrade actions/upload-artifact by [@&#8203;jdno](https://redirect.github.com/jdno) in [https://github.com/rust-lang/flate2-rs/pull/438](https://redirect.github.com/rust-lang/flate2-rs/pull/438)
-   upgrade zlib-rs to version `0.4.0` by [@&#8203;folkertdev](https://redirect.github.com/folkertdev) in [https://github.com/rust-lang/flate2-rs/pull/439](https://redirect.github.com/rust-lang/flate2-rs/pull/439)

#### New Contributors

-   [@&#8203;jdno](https://redirect.github.com/jdno) made their first contribution in [https://github.com/rust-lang/flate2-rs/pull/438](https://redirect.github.com/rust-lang/flate2-rs/pull/438)

**Full Changelog**: https://github.com/rust-lang/flate2-rs/compare/1.0.34...1.0.35

</details>

<details>
<summary>dtolnay/itoa (itoa)</summary>

### [`v1.0.13`](https://redirect.github.com/dtolnay/itoa/releases/tag/1.0.13)

[Compare Source](https://redirect.github.com/dtolnay/itoa/compare/1.0.12...1.0.13)

-   Code cleanup ([#&#8203;48](https://redirect.github.com/dtolnay/itoa/issues/48), [#&#8203;49](https://redirect.github.com/dtolnay/itoa/issues/49), [#&#8203;50](https://redirect.github.com/dtolnay/itoa/issues/50), [#&#8203;51](https://redirect.github.com/dtolnay/itoa/issues/51), [#&#8203;52](https://redirect.github.com/dtolnay/itoa/issues/52), [#&#8203;53](https://redirect.github.com/dtolnay/itoa/issues/53), [#&#8203;54](https://redirect.github.com/dtolnay/itoa/issues/54), [#&#8203;55](https://redirect.github.com/dtolnay/itoa/issues/55))

### [`v1.0.12`](https://redirect.github.com/dtolnay/itoa/releases/tag/1.0.12)

[Compare Source](https://redirect.github.com/dtolnay/itoa/compare/1.0.11...1.0.12)

-   Add itoa::Integer::MAX_STR_LEN associated constant ([#&#8203;45](https://redirect.github.com/dtolnay/itoa/issues/45), thanks [@&#8203;SUPERCILEX](https://redirect.github.com/SUPERCILEX))

</details>

<details>
<summary>oxc-project/oxc-resolver (oxc_resolver)</summary>

### [`v2.1.1`](https://redirect.github.com/oxc-project/oxc-resolver/blob/HEAD/CHANGELOG.md#211---2024-11-22)

[Compare Source](https://redirect.github.com/oxc-project/oxc-resolver/compare/oxc_resolver-v2.1.0...oxc_resolver-v2.1.1)

##### Performance

-   reduce hash while resolving package.json ([#&#8203;319](https://redirect.github.com/oxc-project/oxc-resolver/pull/319))
-   reduce memory allocation while normalizing package path ([#&#8203;318](https://redirect.github.com/oxc-project/oxc-resolver/pull/318))
-   reduce memory allocation while resolving package.json ([#&#8203;317](https://redirect.github.com/oxc-project/oxc-resolver/pull/317))
-   use `path.as_os_str().hash()` instead of `path.hash()` ([#&#8203;316](https://redirect.github.com/oxc-project/oxc-resolver/pull/316))
-   reduce memory allocation by using a thread_local path for path methods ([#&#8203;315](https://redirect.github.com/oxc-project/oxc-resolver/pull/315))

##### Other

-   remove the deprecated simdutf8 aarch64\_neon feature
-   mention extension must start with a `.` in `with_extension` ([#&#8203;313](https://redirect.github.com/oxc-project/oxc-resolver/pull/313))

### [`v2.1.0`](https://redirect.github.com/oxc-project/oxc-resolver/blob/HEAD/CHANGELOG.md#210---2024-11-20)

[Compare Source](https://redirect.github.com/oxc-project/oxc-resolver/compare/oxc_resolver-v2.0.1...oxc_resolver-v2.1.0)

##### Added

-   add `Resolver::resolve_tsconfig` API ([#&#8203;312](https://redirect.github.com/oxc-project/oxc-resolver/pull/312))

##### Fixed

-   don't panic when resolving `/` with `roots` ([#&#8203;310](https://redirect.github.com/oxc-project/oxc-resolver/pull/310))
-   use same UNC path normalization logic with libuv ([#&#8203;306](https://redirect.github.com/oxc-project/oxc-resolver/pull/306))

##### Other

-   *(deps)* update rust crates to v1.0.215
-   fix symlink test init on windows ([#&#8203;307](https://redirect.github.com/oxc-project/oxc-resolver/pull/307))

### [`v2.0.1`](https://redirect.github.com/oxc-project/oxc-resolver/blob/HEAD/CHANGELOG.md#201---2024-11-08)

[Compare Source](https://redirect.github.com/oxc-project/oxc-resolver/compare/oxc_resolver-v2.0.0...oxc_resolver-v2.0.1)

##### Other

-   `cargo upgrade` && `pnpm upgrade`
-   bring back the symlink optimization ([#&#8203;298](https://redirect.github.com/oxc-project/oxc-resolver/pull/298))
-   *(deps)* update rust crate criterion2 to v2

</details>

<details>
<summary>dtolnay/proc-macro2 (proc-macro2)</summary>

### [`v1.0.92`](https://redirect.github.com/dtolnay/proc-macro2/releases/tag/1.0.92)

[Compare Source](https://redirect.github.com/dtolnay/proc-macro2/compare/1.0.91...1.0.92)

-   Improve compiler/fallback mismatch panic message ([#&#8203;487](https://redirect.github.com/dtolnay/proc-macro2/issues/487))

### [`v1.0.91`](https://redirect.github.com/dtolnay/proc-macro2/releases/tag/1.0.91)

[Compare Source](https://redirect.github.com/dtolnay/proc-macro2/compare/1.0.90...1.0.91)

-   Fix panic *"compiler/fallback mismatch 949"* when using TokenStream::from_str from inside a proc macro to parse a string containing doc comment ([#&#8203;484](https://redirect.github.com/dtolnay/proc-macro2/issues/484))

### [`v1.0.90`](https://redirect.github.com/dtolnay/proc-macro2/releases/tag/1.0.90)

[Compare Source](https://redirect.github.com/dtolnay/proc-macro2/compare/1.0.89...1.0.90)

-   Improve error recovery in TokenStream's and Literal's FromStr implementations to work around [https://github.com/rust-lang/rust/issues/58736](https://redirect.github.com/rust-lang/rust/issues/58736) such that rustc does not poison compilation on codepaths that should be recoverable errors ([#&#8203;477](https://redirect.github.com/dtolnay/proc-macro2/issues/477), [#&#8203;478](https://redirect.github.com/dtolnay/proc-macro2/issues/478), [#&#8203;479](https://redirect.github.com/dtolnay/proc-macro2/issues/479), [#&#8203;480](https://redirect.github.com/dtolnay/proc-macro2/issues/480), [#&#8203;481](https://redirect.github.com/dtolnay/proc-macro2/issues/481), [#&#8203;482](https://redirect.github.com/dtolnay/proc-macro2/issues/482))

</details>

<details>
<summary>serde-rs/serde (serde)</summary>

### [`v1.0.215`](https://redirect.github.com/serde-rs/serde/releases/tag/v1.0.215)

[Compare Source](https://redirect.github.com/serde-rs/serde/compare/v1.0.214...v1.0.215)

-   Produce warning when multiple fields or variants have the same deserialization name ([#&#8203;2855](https://redirect.github.com/serde-rs/serde/issues/2855), [#&#8203;2856](https://redirect.github.com/serde-rs/serde/issues/2856), [#&#8203;2857](https://redirect.github.com/serde-rs/serde/issues/2857))

</details>

<details>
<summary>serde-rs/json (serde_json)</summary>

### [`v1.0.133`](https://redirect.github.com/serde-rs/json/releases/tag/v1.0.133)

[Compare Source](https://redirect.github.com/serde-rs/json/compare/v1.0.132...v1.0.133)

-   Implement From<\[T; N]> for serde_json::Value ([#&#8203;1215](https://redirect.github.com/serde-rs/json/issues/1215))

</details>

<details>
<summary>Stebalien/tempfile (tempfile)</summary>

### [`v3.14.0`](https://redirect.github.com/Stebalien/tempfile/blob/HEAD/CHANGELOG.md#3140)

[Compare Source](https://redirect.github.com/Stebalien/tempfile/compare/v3.13.0...v3.14.0)

-   Make the wasip2 target work (requires tempfile's "nightly" feature to be enabled). [#&#8203;305](https://redirect.github.com/Stebalien/tempfile/pull/305).
-   Allow older windows-sys versions [#&#8203;304](https://redirect.github.com/Stebalien/tempfile/pull/304).

</details>

<details>
<summary>tokio-rs/tokio (tokio)</summary>

### [`v1.41.1`](https://redirect.github.com/tokio-rs/tokio/releases/tag/tokio-1.41.1): Tokio v1.41.1

[Compare Source](https://redirect.github.com/tokio-rs/tokio/compare/tokio-1.41.0...tokio-1.41.1)

### 1.41.1 (Nov 7th, 2024)

##### Fixed

-   metrics: fix bug with wrong number of buckets for the histogram ([#&#8203;6957])
-   net: display `net` requirement for `net::UdpSocket` in docs ([#&#8203;6938])
-   net: fix typo in `TcpStream` internal comment ([#&#8203;6944])

[#&#8203;6957]: https://redirect.github.com/tokio-rs/tokio/pull/6957

[#&#8203;6938]: https://redirect.github.com/tokio-rs/tokio/pull/6938

[#&#8203;6944]: https://redirect.github.com/tokio-rs/tokio/pull/6944

</details>

<details>
<summary>servo/rust-url (url)</summary>

### [`v2.5.4`](https://redirect.github.com/servo/rust-url/releases/tag/v2.5.4)

[Compare Source](https://redirect.github.com/servo/rust-url/compare/v2.5.3...v2.5.4)

##### What's Changed

-   Revert "Normalize URL paths: convert /.//p, /..//p, and //p to p ([#&#8203;943](https://redirect.github.com/servo/rust-url/issues/943))" by [@&#8203;valenting](https://redirect.github.com/valenting) in [https://github.com/servo/rust-url/pull/999](https://redirect.github.com/servo/rust-url/pull/999)
-   Updates the MSRV to 1.63 required though the libc v0.2.164 dependency

**Full Changelog**: https://github.com/servo/rust-url/compare/v2.5.3...v2.5.4

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
2024-11-25 16:10:34 +00:00
renovate[bot] 8e90790a60 chore(deps): update rust crates (#7115) 2024-11-04 23:34:51 +08:00
Boshen 63a830e08c chore(dprint): format toml files (#5599)
Co-authored-by: Boshen <1430279+Boshen@users.noreply.github.com>
2024-09-08 14:26:16 +08:00
Boshen 89b1886403 chore: update deny.toml 2024-08-12 10:12:03 +08:00
rzvxa 297401db42 chore: fix mistake in configuring deny.toml V2 (#4619)
Follow up to #4616, Fixing my mistake.
2024-08-03 13:03:05 +00:00
rzvxa 84d80c124f chore: update deny.toml to version 2. (#4616)
Fixes the errors raised
[here](https://github.com/oxc-project/oxc/actions/runs/10218564260/job/28274959011?pr=4404).

Based on https://github.com/EmbarkStudios/cargo-deny/pull/611 and the
latest version of
[docs](https://embarkstudios.github.io/cargo-deny/checks/index.html).
2024-08-03 08:10:11 +10:00
Boshen 9a0d1ad165 chore: format top level toml files 2024-06-04 16:05:08 +08:00
Boshen 32ab1ac89d wip 2024-03-05 16:25:14 +08:00
Boshen 7aca953635 ci: add cargo deny 2023-04-22 22:35:19 +08:00