Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 31, 2025

Bumps the cli-minor group with 6 updates in the /bolt-cli directory:

Package From To
tokio 1.43.0 1.44.1
alloy 0.9.2 0.11.1
rand 0.8.5 0.9.0
tempfile 3.15.0 3.19.1
alloy-node-bindings 0.9.2 0.11.1
tonic-build 0.12.3 0.13.0

Updates tokio from 1.43.0 to 1.44.1

Release notes

Sourced from tokio's releases.

Tokio v1.44.1

1.44.1 (March 13th, 2025)

Fixed

  • rt: skip defer queue in block_in_place context (#7216)

#7216: tokio-rs/tokio#7216

Tokio v1.44.0

1.44.0 (March 7th, 2025)

This release changes the from_std method on sockets to panic if a blocking socket is provided. We determined this change is not a breaking change as Tokio is not intended to operate using blocking sockets. Doing so results in runtime hangs and should be considered a bug. Accidentally passing a blocking socket to Tokio is one of the most common user mistakes. If this change causes an issue for you, please comment on #7172.

Added

  • coop: add task::coop module (#7116)
  • process: add Command::get_kill_on_drop() (#7086)
  • sync: add broadcast::Sender::closed (#6685, #7090)
  • sync: add broadcast::WeakSender (#7100)
  • sync: add oneshot::Receiver::is_empty() (#7153)
  • sync: add oneshot::Receiver::is_terminated() (#7152)

Fixed

  • fs: empty reads on File should not start a background read (#7139)
  • process: calling start_kill on exited child should not fail (#7160)
  • signal: fix CTRL_CLOSE, CTRL_LOGOFF, CTRL_SHUTDOWN on windows (#7122)
  • sync: properly handle panic during mpsc drop (#7094)

Changes

  • runtime: clean up magic number in registration set (#7112)
  • coop: make coop yield using waker defer strategy (#7185)
  • macros: make select! budget-aware (#7164)
  • net: panic when passing a blocking socket to from_std (#7166)
  • io: clean up buffer casts (#7142)

Changes to unstable APIs

  • rt: add before and after task poll callbacks (#7120)
  • tracing: make the task tracing API unstable public (#6972)

Documented

  • docs: fix nesting of sections in top-level docs (#7159)
  • fs: rename symlink and hardlink parameter names (#7143)
  • io: swap reader/writer in simplex doc test (#7176)
  • macros: docs about select! alternatives (#7110)
  • net: rename the argument for send_to (#7146)

... (truncated)

Commits

Updates alloy from 0.9.2 to 0.11.1

Release notes

Sourced from alloy's releases.

v0.11.1

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from alloy's changelog.

0.11.1 - 2025-02-12

Bug Fixes

  • Make ChainLayer network agnostic (#2045)
  • [multicall] Impl Error for Failure + clear returns Empty builder. (#2043)
  • Don't validate when ABI decoding (#2041)
  • Overflow on CU offset (#1998)
  • [docs] Update outdated Provider doc comment (#1991)
  • Opt-in to keep stdout (#1985)

Documentation

  • Clean up top level docs (#2028)

Features

  • Add TxSigner support for Either (#2036)
  • [provider] Multicall (#2010)
  • Add try_get_deserialized (#2042)
  • Add helpers for account overrides (#2040)
  • Add builder style account override helpers (#2039)
  • [filler] Add prepare_call method (#2011)
  • [provider] DynProvider added as a helper on provider (#2008)
  • [provider] Expose inner AnvilInstance from AnvilProvider (#2037)
  • Add dynamic dispatch helper trait for (Signer +TxSigner) and (SignerSync + TxSignerSync) (#2035)
  • Builder fns for PrivateTransactionRequest and inner props (#1954) (#2023)
  • Test faulty roundtrip behavior of ExecutionPayload (#2014)
  • Add helpers for the blob gas (#2009)
  • Add Block::apply (#2006)
  • Add auth count helper fn (#2007)
  • Add blob_count helper fn (#2005)
  • [transport] Made avg_cost to be configurable in retrybackoff (#2002)
  • Add helper fn to unwrap Sendable (#2001)
  • Add additional payloadbody conversion fn (#1989)
  • [node-bindings] Expose anvil wallet (#1994)
  • [meta] Enable pubsub,trace,txpool,debug,anvil apis via full (#1992)
  • Add default for blobsbundle (#1990)
  • Add helpers to consume payloadfields (#1984)

Miscellaneous Tasks

  • Release 0.11.1
  • Re-export kzgsettings (#2034)
  • Silence unused warnings (#2031)
  • [serde] Remove quantity_bool (#2026)
  • Nicer error message when HTTP body is empty (#2024)
  • Camelcase serde (#2018)
  • Enable serde in tests (#2013)
  • Add serde support for Eip1559Estimation (#2012)

... (truncated)

Commits

Updates rand from 0.8.5 to 0.9.0

Changelog

Sourced from rand's changelog.

[0.9.0] - 2025-01-27

Security and unsafe

  • Policy: "rand is not a crypto library" (#1514)
  • Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
  • Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

  • Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
  • Update to rand_core v0.9.0 (#1558)

Features

  • Support std feature without getrandom or rand_chacha (#1354)
  • Enable feature small_rng by default (#1455)
  • Remove implicit feature rand_chacha; use std_rng instead. (#1473)
  • Rename feature serde1 to serde (#1477)
  • Rename feature getrandom to os_rng (#1537)
  • Add feature thread_rng (#1547)

API changes: rand_core traits

  • Add fn RngCore::read_adapter implementing std::io::Read (#1267)
  • Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)
  • Add traits TryRngCore, TryCryptoRng (#1424, #1499)
  • Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)
  • Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)
  • Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

  • Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)
  • Remove fn rand::random() from the prelude (#1506)
  • Add top-level fns random_iter, random_range, random_bool, random_ratio, fill (#1488)
  • Re-introduce fn Rng::gen_iter as random_iter (#1305, #1500)
  • Rename fn Rng::gen to random to avoid conflict with the new gen keyword in Rust 2024 (#1438)
  • Rename fns Rng::gen_range to random_range, gen_bool to random_bool, gen_ratio to random_ratio (#1505)
  • Annotate panicking methods with #[track_caller] (#1442, #1447)

API changes: RNGs

  • Fix <SmallRng as SeedableRng>::Seed size to 256 bits (#1455)
  • Remove first parameter (rng) of ReseedingRng::new (#1533)

API changes: Sequences

  • Split trait SliceRandom into IndexedRandom, IndexedMutRandom, SliceRandom (#1382)
  • Add IndexedRandom::choose_multiple_array, index::sample_array (#1453, #1469)

API changes: Distributions: renames

  • Rename module rand::distributions to rand::distr (#1470)
  • Rename distribution Standard to StandardUniform (#1526)
  • Move distr::Slice -> distr::slice::Choose, distr::EmptySlice -> distr::slice::Empty (#1548)
  • Rename trait distr::DistString -> distr::SampleString (#1548)
  • Rename distr::DistIter -> distr::Iter, distr::DistMap -> distr::Map (#1548)

... (truncated)

Commits

Updates tempfile from 3.15.0 to 3.19.1

Changelog

Sourced from tempfile's changelog.

3.19.1

  • Don't unlink temporary files immediately on Windows (fixes #339). Unfortunately, this seemed to corrupt the file object (possibly a Windows kernel bug) in rare cases and isn't strictly speaking necessary.

3.19.0

  • Remove direct dependency on cfg-if. It's still in the tree, but we didn't really need to use it in this crate.
  • Add an unstable feature (unstable-windows-keep-open-tempfile) to test a potential fix to #339.

3.18.0

  • Update rustix to 1.0.0.
  • Make NamedTempFile::persist_noclobber atomic on Apple operating systems. It's now atomic on MacOS, Windows, and Linux (depending on the OS version and filesystem used).

3.17.1

  • Fix build with windows-sys 0.52. Unfortunately, we have no CI for older windows-sys versions at the moment...

3.17.0

  • Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in Builder::make_in (when creating temporary files of arbitrary types).
  • Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test.
  • When reseeding with getrandom, use platform (e.g., CPU) specific randomness sources where possible.
  • Clarify some documentation.
  • Unlink unnamed temporary files on windows immediately when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible.

3.16.0

  • Update getrandom to 0.3.0 (thanks to @​paolobarbolini).
  • Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @​ErichDonGubler).
  • Improved security documentation (thanks to @​n0toose for collaborating with me on this).
Commits

Updates alloy-node-bindings from 0.9.2 to 0.11.1

Release notes

Sourced from alloy-node-bindings's releases.

v0.11.1

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from alloy-node-bindings's changelog.

0.11.1 - 2025-02-12

Bug Fixes

  • Make ChainLayer network agnostic (#2045)
  • [multicall] Impl Error for Failure + clear returns Empty builder. (#2043)
  • Don't validate when ABI decoding (#2041)
  • Overflow on CU offset (#1998)
  • [docs] Update outdated Provider doc comment (#1991)
  • Opt-in to keep stdout (#1985)

Documentation

  • Clean up top level docs (#2028)

Features

  • Add TxSigner support for Either (#2036)
  • [provider] Multicall (#2010)
  • Add try_get_deserialized (#2042)
  • Add helpers for account overrides (#2040)
  • Add builder style account override helpers (#2039)
  • [filler] Add prepare_call method (#2011)
  • [provider] DynProvider added as a helper on provider (#2008)
  • [provider] Expose inner AnvilInstance from AnvilProvider (#2037)
  • Add dynamic dispatch helper trait for (Signer +TxSigner) and (SignerSync + TxSignerSync) (#2035)
  • Builder fns for PrivateTransactionRequest and inner props (#1954) (#2023)
  • Test faulty roundtrip behavior of ExecutionPayload (#2014)
  • Add helpers for the blob gas (#2009)
  • Add Block::apply (#2006)
  • Add auth count helper fn (#2007)
  • Add blob_count helper fn (#2005)
  • [transport] Made avg_cost to be configurable in retrybackoff (#2002)
  • Add helper fn to unwrap Sendable (#2001)
  • Add additional payloadbody conversion fn (#1989)
  • [node-bindings] Expose anvil wallet (#1994)
  • [meta] Enable pubsub,trace,txpool,debug,anvil apis via full (#1992)
  • Add default for blobsbundle (#1990)
  • Add helpers to consume payloadfields (#1984)

Miscellaneous Tasks

  • Release 0.11.1
  • Re-export kzgsettings (#2034)
  • Silence unused warnings (#2031)
  • [serde] Remove quantity_bool (#2026)
  • Nicer error message when HTTP body is empty (#2024)
  • Camelcase serde (#2018)
  • Enable serde in tests (#2013)
  • Add serde support for Eip1559Estimation (#2012)

... (truncated)

Commits

Updates tonic-build from 0.12.3 to 0.13.0

Release notes

Sourced from tonic-build's releases.

v0.13.0

This release is a breaking release and thus there are many changes include axum version and a few other crates. There are some additionally exposed APIs. At the moment this release is planned to be a long term release as the project shifts some of its resources to implementing a new transport module and to align itself better with other gPRC projects. More to be announced on this later.

What's Changed

Bumps the cli-minor group with 6 updates in the /bolt-cli directory:

| Package | From | To |
| --- | --- | --- |
| [tokio](https://github.com/tokio-rs/tokio) | `1.43.0` | `1.44.1` |
| [alloy](https://github.com/alloy-rs/alloy) | `0.9.2` | `0.11.1` |
| [rand](https://github.com/rust-random/rand) | `0.8.5` | `0.9.0` |
| [tempfile](https://github.com/Stebalien/tempfile) | `3.15.0` | `3.19.1` |
| [alloy-node-bindings](https://github.com/alloy-rs/alloy) | `0.9.2` | `0.11.1` |
| [tonic-build](https://github.com/hyperium/tonic) | `0.12.3` | `0.13.0` |



Updates `tokio` from 1.43.0 to 1.44.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.43.0...tokio-1.44.1)

Updates `alloy` from 0.9.2 to 0.11.1
- [Release notes](https://github.com/alloy-rs/alloy/releases)
- [Changelog](https://github.com/alloy-rs/alloy/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/alloy@v0.9.2...v0.11.1)

Updates `rand` from 0.8.5 to 0.9.0
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...0.9.0)

Updates `tempfile` from 3.15.0 to 3.19.1
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.15.0...v3.19.1)

Updates `alloy-node-bindings` from 0.9.2 to 0.11.1
- [Release notes](https://github.com/alloy-rs/alloy/releases)
- [Changelog](https://github.com/alloy-rs/alloy/blob/main/CHANGELOG.md)
- [Commits](alloy-rs/alloy@v0.9.2...v0.11.1)

Updates `tonic-build` from 0.12.3 to 0.13.0
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](hyperium/tonic@v0.12.3...v0.13.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli-minor
- dependency-name: alloy
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli-minor
- dependency-name: rand
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli-minor
- dependency-name: tempfile
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli-minor
- dependency-name: alloy-node-bindings
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli-minor
- dependency-name: tonic-build
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the T: security Type: Security label Mar 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

T: security Type: Security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant