1219: feat: add wallet database migration from older bdk r=delta1 a=delta1
- upgrades to bdk 0.24 #1198
- adds a regression test for opening older wallets #1183
- adds a migration for older wallets that encounter the ChecksumMismatch error #1182
Co-authored-by: Byron Hambly <bhambly@blockstream.com>
- upgrades to bdk 0.24 #1198
- adds a regression test for opening older wallets #1183
- adds a migration for older wallets that encounter the ChecksumMismatch
error #1182
1206: build(deps): bump Swatinem/rust-cache from 2.0.2 to 2.2.0 r=delta1 a=dependabot[bot]
Bumps [Swatinem/rust-cache](https://github.com/Swatinem/rust-cache) from 2.0.2 to 2.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/Swatinem/rust-cache/releases">Swatinem/rust-cache's releases</a>.</em></p>
<blockquote>
<h2>v2.2.0</h2>
<ul>
<li>Add new <code>save-if</code> option to always restore, but only conditionally save the cache.</li>
</ul>
<h2>v2.1.0</h2>
<ul>
<li>Only hash <code>Cargo.{lock,toml}</code> files in the configured workspace directories.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md">Swatinem/rust-cache's changelog</a>.</em></p>
<blockquote>
<h2>2.2.0</h2>
<ul>
<li>Add new <code>save-if</code> option to always restore, but only conditionally save the cache.</li>
</ul>
<h2>2.1.0</h2>
<ul>
<li>Only hash <code>Cargo.{lock,toml}</code> files in the configured workspace directories.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="359a70e43a"><code>359a70e</code></a> 2.2.0</li>
<li><a href="ecee04e7b3"><code>ecee04e</code></a> feat: add save-if option, closes <a href="https://github-redirect.dependabot.com/Swatinem/rust-cache/issues/66">#66</a> (<a href="https://github-redirect.dependabot.com/Swatinem/rust-cache/issues/91">#91</a>)</li>
<li><a href="b894d59a8d"><code>b894d59</code></a> 2.1.0</li>
<li><a href="e78327dd9e"><code>e78327d</code></a> small code style improvements, README and CHANGELOG updates</li>
<li><a href="ccdddcc049"><code>ccdddcc</code></a> only hash Cargo.toml/Cargo.lock that belong to a configured workspace (<a href="https://github-redirect.dependabot.com/Swatinem/rust-cache/issues/90">#90</a>)</li>
<li>See full diff in <a href="https://github.com/Swatinem/rust-cache/compare/v2.0.2...v2.2.0">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Swatinem/rust-cache&package-manager=github_actions&previous-version=2.0.2&new-version=2.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1199: build(deps): bump time from 0.3.16 to 0.3.17 r=delta1 a=dependabot[bot]
Bumps [time](https://github.com/time-rs/time) from 0.3.16 to 0.3.17.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/time-rs/time/releases">time's releases</a>.</em></p>
<blockquote>
<h2>v0.3.17</h2>
<p>See the <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">changelog</a> for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">time's changelog</a>.</em></p>
<blockquote>
<h2>0.3.17 [2022-11-06]</h2>
<h3>Changed</h3>
<ul>
<li>The amount of code generated by <code>time::serde::format_description!</code> is reduced if not all feature
flags are active.</li>
<li><code>cargo test --tests</code> works with any configuration of feature flags. This occurs by spawning a
subprocess that passes <code>--all-features</code>. <code>cargo test --doc</code> works with most combinations of
feature flags, including the default. The combination of these changes means that crater will now
run on <code>time</code>.</li>
<li><code>libc</code> and <code>num_threads</code> are only included as dependencies when needed. They were previously
unconditionally included.</li>
</ul>
<h3>Added</h3>
<ul>
<li><code>time::format_description::parse_owned</code>, which returns an <code>OwnedFormatItem</code>. This avoids "lifetime
hell", where all your structs now need a lifetime because a single field has one. Note that when
possible, the borrowed format item (just called <code>FormatItem</code>) is still preferred, as it has
significantly fewer allocations. The new <code>OwnedFormatItem</code> is usable for both formatting and
parsing, as you would expect.</li>
</ul>
<h3>Compatibility</h3>
<ul>
<li>The parser for runtime format descriptions has been rewritten. A side effect of this is that some
errors have slightly changed. No existing API has been altered, so this is not a breaking change.
However, you may notice different errors, which are hopefully better! The parser for compile-time
format descriptions has not yet been swapped out. If you notice any bugs, please file an issue.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="d97594b9f5"><code>d97594b</code></a> 0.3.17 release</li>
<li><a href="88f5c134f3"><code>88f5c13</code></a> Fix concurrency for GitHub actions</li>
<li><a href="e5e2a60188"><code>e5e2a60</code></a> Update lints</li>
<li><a href="27ea0d44f4"><code>27ea0d4</code></a> Use <code>parse_owned</code> in tests</li>
<li><a href="4887aa7c43"><code>4887aa7</code></a> Add <code>format_description::parse_owned</code></li>
<li><a href="2ba92f67b1"><code>2ba92f6</code></a> Configure codecov</li>
<li><a href="2cba2ef2f5"><code>2cba2ef</code></a> Add tests for <code>OwnedFormatItem</code></li>
<li><a href="4d18c08d8e"><code>4d18c08</code></a> Implement owned format descriptions</li>
<li><a href="139aba1460"><code>139aba1</code></a> Move <code>FormatItem</code> definition to its own module</li>
<li><a href="e4b40add3f"><code>e4b40ad</code></a> Remove extraneous debug call</li>
<li>Additional commits viewable in <a href="https://github.com/time-rs/time/compare/v0.3.16...v0.3.17">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=time&package-manager=cargo&previous-version=0.3.16&new-version=0.3.17)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1194: build(deps): bump Swatinem/rust-cache from 2.0.1 to 2.0.2 r=delta1 a=dependabot[bot]
Bumps [Swatinem/rust-cache](https://github.com/Swatinem/rust-cache) from 2.0.1 to 2.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/Swatinem/rust-cache/releases">Swatinem/rust-cache's releases</a>.</em></p>
<blockquote>
<h2>v2.0.2</h2>
<ul>
<li>Avoid calling cargo metadata on pre-cleanup.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md">Swatinem/rust-cache's changelog</a>.</em></p>
<blockquote>
<h2>2.0.2</h2>
<ul>
<li>Avoid calling <code>cargo metadata</code> on pre-cleanup.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="b5ec9edd91"><code>b5ec9ed</code></a> 2.0.2</li>
<li><a href="3f2513fdf4"><code>3f2513f</code></a> avoid calling cargo metadata on pre-cleanup</li>
<li><a href="19c46583c5"><code>19c4658</code></a> update dependencies</li>
<li><a href="b8e72aae83"><code>b8e72aa</code></a> Added <code>prefix-key</code> <code>cache-directories</code> and <code>cache-targets</code> options (<a href="https://github-redirect.dependabot.com/Swatinem/rust-cache/issues/85">#85</a>)</li>
<li>See full diff in <a href="https://github.com/Swatinem/rust-cache/compare/v2.0.1...v2.0.2">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Swatinem/rust-cache&package-manager=github_actions&previous-version=2.0.1&new-version=2.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1193: build(deps): bump hyper from 0.14.20 to 0.14.22 r=delta1 a=dependabot[bot]
Bumps [hyper](https://github.com/hyperium/hyper) from 0.14.20 to 0.14.22.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/hyperium/hyper/releases">hyper's releases</a>.</em></p>
<blockquote>
<h2>v0.14.22</h2>
<h2>Bug Fixes</h2>
<ul>
<li><strong>server:</strong> fix compile-time cfgs for TCP keepalive options (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/3039">#3039</a>) (<a href="e8765e0feb">e8765e0f</a>, closes <a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/3038">#3038</a>)</li>
</ul>
<h2>v0.14.21</h2>
<h2>Bug Fixes</h2>
<ul>
<li><strong>client:</strong> send an error back to client when dispatch misbehaves () (<a href="9fa363829c">9fa36382</a>, closes <a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/2649">#2649</a>)</li>
<li><strong>http1:</strong> fix <code>http1_header_read_timeout</code> to use same future (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/2891">#2891</a>) (<a href="c5a14e7c08">c5a14e7c</a>)</li>
</ul>
<h2>Features</h2>
<ul>
<li><strong>http1:</strong> allow ignoring invalid header lines in requests (<a href="73dd474652">73dd4746</a>)</li>
<li><strong>server:</strong> add <code>Server::tcp_keepalive_interval</code> and <code>Server::tcp_keepalive_retries</code> (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/2991">#2991</a>) (<a href="287d712483">287d7124</a>)</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/hansonchar"><code>`@hansonchar</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/hyperium/hyper/pull/2991">hyperium/hyper#2991</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/hyperium/hyper/blob/v0.14.22/CHANGELOG.md">hyper's changelog</a>.</em></p>
<blockquote>
<h3>v0.14.22 (2022-10-31)</h3>
<h4>Bug Fixes</h4>
<ul>
<li><strong>server:</strong> fix compile-time cfgs for TCP keepalive options (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/3039">#3039</a>) (<a href="e8765e0feb">e8765e0f</a>, closes <a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/3038">#3038</a>)</li>
</ul>
<h3>v0.14.21 (2022-10-31)</h3>
<h4>Bug Fixes</h4>
<ul>
<li><strong>client:</strong> send an error back to client when dispatch misbehaves () (<a href="9fa363829c">9fa36382</a>, closes <a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/2649">#2649</a>)</li>
<li><strong>http1:</strong> fix <code>http1_header_read_timeout</code> to use same future (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/2891">#2891</a>) (<a href="c5a14e7c08">c5a14e7c</a>)</li>
</ul>
<h4>Features</h4>
<ul>
<li><strong>http1:</strong> allow ignoring invalid header lines in requests (<a href="73dd474652">73dd4746</a>)</li>
<li><strong>server:</strong> add <code>Server::tcp_keepalive_interval</code> and <code>Server::tcp_keepalive_retries</code> (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/2991">#2991</a>) (<a href="287d712483">287d7124</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="04d637ec66"><code>04d637e</code></a> v0.14.22</li>
<li><a href="e8765e0feb"><code>e8765e0</code></a> fix(server): fix compile-time cfgs for TCP keepalive options (<a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/3039">#3039</a>)</li>
<li><a href="9ad4055fbf"><code>9ad4055</code></a> v0.14.21</li>
<li><a href="9fa363829c"><code>9fa3638</code></a> fix(client): send an error back to client when dispatch misbehaves (fixes <a href="https://github-redirect.dependabot.com/hyperium/hyper/issues/2649">#2649</a>)</li>
<li><a href="78e2c580cf"><code>78e2c58</code></a> chore(http2): add a server feature-gate on some server-only method</li>
<li><a href="73dd474652"><code>73dd474</code></a> feat(h1): allow ignoring invalid header lines in requests</li>
<li><a href="287d712483"><code>287d712</code></a> feat(server): add <code>Server::tcp_keepalive_interval</code> and `Server::tcp_keepalive...</li>
<li>See full diff in <a href="https://github.com/hyperium/hyper/compare/v0.14.20...v0.14.22">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hyper&package-manager=cargo&previous-version=0.14.20&new-version=0.14.22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1190: build(deps): bump sigma_fun from `b511ab5` to `7f1ae3d` r=delta1 a=dependabot[bot]
Bumps [sigma_fun](https://github.com/LLFourn/secp256kfun) from `b511ab5` to `7f1ae3d`.
<details>
<summary>Commits</summary>
<ul>
<li><a href="7f1ae3db39"><code>7f1ae3d</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/LLFourn/secp256kfun/issues/131">#131</a> from nickfarrow/frost-musig-types</li>
<li><a href="501d8f177c"><code>501d8f1</code></a> fixup! FrostKey and AggKey type parameter</li>
<li><a href="87b90b9e19"><code>87b90b9</code></a> FrostKey and AggKey type parameter</li>
<li><a href="615bae2a71"><code>615bae2</code></a> add Frost::gen_nonce_rng and use in gen_nonce</li>
<li>See full diff in <a href="b511ab5f83...7f1ae3db39">compare view</a></li>
</ul>
</details>
<br />
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
1191: build(deps): bump ecdsa_fun from `b511ab5` to `7f1ae3d` r=delta1 a=dependabot[bot]
Bumps [ecdsa_fun](https://github.com/LLFourn/secp256kfun) from `b511ab5` to `7f1ae3d`.
<details>
<summary>Commits</summary>
<ul>
<li><a href="7f1ae3db39"><code>7f1ae3d</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/LLFourn/secp256kfun/issues/131">#131</a> from nickfarrow/frost-musig-types</li>
<li><a href="501d8f177c"><code>501d8f1</code></a> fixup! FrostKey and AggKey type parameter</li>
<li><a href="87b90b9e19"><code>87b90b9</code></a> FrostKey and AggKey type parameter</li>
<li><a href="615bae2a71"><code>615bae2</code></a> add Frost::gen_nonce_rng and use in gen_nonce</li>
<li>See full diff in <a href="b511ab5f83...7f1ae3db39">compare view</a></li>
</ul>
</details>
<br />
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1181: build(deps): bump time from 0.3.15 to 0.3.16 r=delta1 a=dependabot[bot]
Bumps [time](https://github.com/time-rs/time) from 0.3.15 to 0.3.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/time-rs/time/releases">time's releases</a>.</em></p>
<blockquote>
<h2>v0.3.16</h2>
<p>See the <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">changelog</a> for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">time's changelog</a>.</em></p>
<blockquote>
<h2>0.3.16 [2022-10-24]</h2>
<h3>Changed</h3>
<ul>
<li>The minimum supported Rust version is now 1.60.0.</li>
<li>The <code>serde-well-known</code> feature flag is deprecated. The necessary features for an item to be
enabled are indicated in documentation.</li>
<li>Feature gates have been loosened for well-known formats.</li>
</ul>
<h3>Added</h3>
<ul>
<li>
<p><code>const</code>s can now be provided as the format description for <code>time::serde::format_description!</code>. The
<code>const</code> must be of type <code>&[FormatItem<'_>]</code>, which is what is returned by the
<code>time::macros::format_description!</code> macro.</p>
<pre lang="rust"><code>const TIME_FORMAT_ALT: &[FormatItem<'_>] = time::macros::format_description!("[hour]:[minute]");
time::serde::format_description!(time_format_alt, Time, TIME_FORMAT_ALT);
</code></pre>
</li>
</ul>
<h3>Compatibility</h3>
<ul>
<li>Some feature flags have been removed. None of these have ever been documented as flags, so any use
was unsupported. These flags are:
<ul>
<li><code>js-sys</code></li>
<li><code>quickcheck-dep</code></li>
<li><code>itoa</code></li>
<li><code>time-macros</code></li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="05bdab8a70"><code>05bdab8</code></a> 0.3.16 release</li>
<li><a href="ad3ce25dd8"><code>ad3ce25</code></a> Support passing <code>&[FormatItem\<'_>]</code> to macro</li>
<li><a href="da719aa20f"><code>da719aa</code></a> Fix powerset</li>
<li><a href="c22e000b7d"><code>c22e000</code></a> Document dependencies in CI</li>
<li><a href="084e32dcb3"><code>084e32d</code></a> Fix powerset build</li>
<li><a href="e4c884704c"><code>e4c8847</code></a> Move some utility functions to <code>time-core</code></li>
<li><a href="f7a3e55108"><code>f7a3e55</code></a> Initialize <code>time-core</code> crate</li>
<li><a href="e7d132aeee"><code>e7d132a</code></a> Enable feature flags directly</li>
<li><a href="9b1c7550af"><code>9b1c755</code></a> Add miri test to CI</li>
<li><a href="fcbad1dfd0"><code>fcbad1d</code></a> Restructure repository</li>
<li>Additional commits viewable in <a href="https://github.com/time-rs/time/compare/v0.3.15...v0.3.16">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=time&package-manager=cargo&previous-version=0.3.15&new-version=0.3.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
1186: build(deps): bump comfy-table from 6.1.1 to 6.1.2 r=delta1 a=dependabot[bot]
Bumps [comfy-table](https://github.com/nukesor/comfy-table) from 6.1.1 to 6.1.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Nukesor/comfy-table/blob/main/CHANGELOG.md">comfy-table's changelog</a>.</em></p>
<blockquote>
<h2>[6.1.2] - 2022-10-27</h2>
<h3>Fixed</h3>
<ul>
<li><code>Table::row_iter</code> no longer requires a <code>&mut self</code>, but only <code>&self</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="84c23147eb"><code>84c2314</code></a> chore: Release comfy-table version 6.1.2</li>
<li><a href="8327236e4b"><code>8327236</code></a> docs: Update changelog</li>
<li><a href="3a80c8050e"><code>3a80c80</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/nukesor/comfy-table/issues/95">#95</a> from abhizer/main</li>
<li><a href="109510eaab"><code>109510e</code></a> row_iter: Remove unnecessary &mut self</li>
<li><a href="4c6a9a1928"><code>4c6a9a1</code></a> docs: Update v6.1.1 release date in changelog</li>
<li>See full diff in <a href="https://github.com/nukesor/comfy-table/compare/v6.1.1...v6.1.2">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=comfy-table&package-manager=cargo&previous-version=6.1.1&new-version=6.1.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1180: build(deps): bump serde from 1.0.146 to 1.0.147 r=delta1 a=dependabot[bot]
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.146 to 1.0.147.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/serde-rs/serde/releases">serde's releases</a>.</em></p>
<blockquote>
<h2>v1.0.147</h2>
<ul>
<li>Add <code>serde:🇩🇪:value::EnumAccessDeserializer</code> which transforms an <code>EnumAccess</code> into a <code>Deserializer</code> (<a href="https://github-redirect.dependabot.com/serde-rs/serde/issues/2305">#2305</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="f41509261e"><code>f415092</code></a> Release 1.0.147</li>
<li><a href="6d009711a2"><code>6d00971</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/serde-rs/serde/issues/2305">#2305</a> from serde-rs/enumaccessdeserializer</li>
<li><a href="354b48fd40"><code>354b48f</code></a> Add EnumAccessDeserializer to turn EnumAccess into a Deserializer</li>
<li>See full diff in <a href="https://github.com/serde-rs/serde/compare/v1.0.146...v1.0.147">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=serde&package-manager=cargo&previous-version=1.0.146&new-version=1.0.147)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1179: build(deps): bump base64 from 0.13.0 to 0.13.1 r=delta1 a=dependabot[bot]
Bumps [base64](https://github.com/marshallpierce/rust-base64) from 0.13.0 to 0.13.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/marshallpierce/rust-base64/blob/v0.13.1/RELEASE-NOTES.md">base64's changelog</a>.</em></p>
<blockquote>
<h1>0.13.1</h1>
<ul>
<li>More precise decode buffer sizing, avoiding unnecessary allocation in <code>decode_config</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="efb0b531c7"><code>efb0b53</code></a> Don't allocate an unnecessarily large buffer in decode_config</li>
<li>See full diff in <a href="https://github.com/marshallpierce/rust-base64/compare/v0.13.0...v0.13.1">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=base64&package-manager=cargo&previous-version=0.13.0&new-version=0.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1178: build(deps): bump serde from 1.0.145 to 1.0.146 r=delta1 a=dependabot[bot]
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.145 to 1.0.146.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/serde-rs/serde/releases">serde's releases</a>.</em></p>
<blockquote>
<h2>v1.0.146</h2>
<ul>
<li>Allow internally tagged newtype variant to contain unit (<a href="https://github-redirect.dependabot.com/serde-rs/serde/issues/2303">#2303</a>, thanks <a href="https://github.com/tage64"><code>`@tage64</code></a>)</li>`
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="3fd8e52f0c"><code>3fd8e52</code></a> Release 1.0.146</li>
<li><a href="142dce0d3d"><code>142dce0</code></a> Touch up PR 2303</li>
<li><a href="6aed101630"><code>6aed101</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/serde-rs/serde/issues/2303">#2303</a> from tage64/master</li>
<li><a href="e2ccfd9ea7"><code>e2ccfd9</code></a> Remove bad deserialization from sequence to internally tagged newtype variant...</li>
<li><a href="a07d794f74"><code>a07d794</code></a> Update test_suite/tests/test_annotations.rs</li>
<li><a href="90d28fc314"><code>90d28fc</code></a> Serialize and deserialize a tagged newtype variant over unit () as if it was ...</li>
<li><a href="55cf0ac51a"><code>55cf0ac</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/serde-rs/serde/issues/2297">#2297</a> from serde-rs/output</li>
<li><a href="07696c1674"><code>07696c1</code></a> Switch from set-output to $GITHUB_OUTPUT</li>
<li><a href="f803b290f3"><code>f803b29</code></a> Ignore uninlined_format_args pedantic clippy lint false positive</li>
<li><a href="d96e181150"><code>d96e181</code></a> Resolve uninlined_format_args pedantic clippy lint in test suite</li>
<li>Additional commits viewable in <a href="https://github.com/serde-rs/serde/compare/v1.0.145...v1.0.146">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=serde&package-manager=cargo&previous-version=1.0.145&new-version=1.0.146)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1177: build(deps): bump anyhow from 1.0.65 to 1.0.66 r=delta1 a=dependabot[bot]
Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.65 to 1.0.66.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dtolnay/anyhow/releases">anyhow's releases</a>.</em></p>
<blockquote>
<h2>1.0.66</h2>
<ul>
<li>Reduce unhelpful backtrace frames in backtraces captured during a <code>context</code> call (<a href="https://github-redirect.dependabot.com/dtolnay/anyhow/issues/279">#279</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="8de29aafd4"><code>8de29aa</code></a> Release 1.0.66</li>
<li><a href="54fc812209"><code>54fc812</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dtolnay/anyhow/issues/279">#279</a> from dtolnay/contextbacktrace</li>
<li><a href="131249b11c"><code>131249b</code></a> Remove 2 frames of noise from 'context' backtraces</li>
<li><a href="f2123ab51b"><code>f2123ab</code></a> Ui test changes for trybuild 1.0.66</li>
<li><a href="9bd74a1540"><code>9bd74a1</code></a> Restore pre-nightly-2022-10-05 behavior of test_path PhantomData tests</li>
<li><a href="77c4fa4566"><code>77c4fa4</code></a> Update test suite to nightly-2022-10-05</li>
<li><a href="7b171d651d"><code>7b171d6</code></a> Ignore bool_to_int_with_if clippy lint in test suite</li>
<li><a href="94ae34b0d5"><code>94ae34b</code></a> Raise minimum tested toolchain to rust 1.56</li>
<li><a href="94f6f4df66"><code>94f6f4d</code></a> Remove default package.readme metadata from Cargo.toml</li>
<li>See full diff in <a href="https://github.com/dtolnay/anyhow/compare/1.0.65...1.0.66">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anyhow&package-manager=cargo&previous-version=1.0.65&new-version=1.0.66)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1171: build(deps): bump async-trait from 0.1.57 to 0.1.58 r=delta1 a=dependabot[bot]
Bumps [async-trait](https://github.com/dtolnay/async-trait) from 0.1.57 to 0.1.58.
<details>
<summary>Commits</summary>
<ul>
<li><a href="65a5c9d52b"><code>65a5c9d</code></a> Release 0.1.58</li>
<li><a href="a7ea43d254"><code>a7ea43d</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dtolnay/async-trait/issues/218">#218</a> from dtolnay/spans</li>
<li><a href="d3c0a423d3"><code>d3c0a42</code></a> Tweak some spans to try for meaningful click-through on method names</li>
<li><a href="3b9e32e8c1"><code>3b9e32e</code></a> Update ui test suite to nightly-2022-10-02</li>
<li><a href="74cb3274d0"><code>74cb327</code></a> Raise minimum tested toolchain to rust 1.56</li>
<li><a href="ccfce18e4e"><code>ccfce18</code></a> Remove default package.readme metadata from Cargo.toml</li>
<li><a href="0dc4f285f0"><code>0dc4f28</code></a> Update ui test suite to nightly-2022-09-14</li>
<li><a href="05dc92a3b0"><code>05dc92a</code></a> GitHub Workflows security hardening</li>
<li><a href="415a62da87"><code>415a62d</code></a> Revert "Avoid cargo 1.45–1.50 in GitHub Actions"</li>
<li><a href="1af42cc80d"><code>1af42cc</code></a> Avoid cargo 1.45–1.50 in GitHub Actions</li>
<li>See full diff in <a href="https://github.com/dtolnay/async-trait/compare/0.1.57...0.1.58">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=async-trait&package-manager=cargo&previous-version=0.1.57&new-version=0.1.58)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>