chore(deps): update rust crate tempfile to v3.19.1 #235

Merged

lucas merged 1 commit from renovate/tempfile-3.x-lockfile into master

2025-04-21 18:33:23 +02:00

renovate-botbot commented

2025-04-21 17:47:32 +02:00

Collaborator

This PR contains the following updates:

Package	Type	Update	Change
tempfile (source)	dev-dependencies	minor	`3.12.0` -> `3.19.1`

Release Notes

Stebalien/tempfile (tempfile)

`v3.19.1`

Compare Source

Don't unlink temporary files immediately on Windows (fixes #339). Unfortunately, this seemed to corrupt the file object (possibly a Windows kernel bug) in rare cases and isn't strictly speaking necessary.

`v3.19.0`

Compare Source

Remove direct dependency on cfg-if. It's still in the tree, but we didn't really need to use it in this crate.
Add an unstable feature (unstable-windows-keep-open-tempfile) to test a potential fix to #339.

`v3.18.0`

Compare Source

Update rustix to 1.0.0.
Make NamedTempFile::persist_noclobber atomic on Apple operating systems. It's now atomic on MacOS, Windows, and Linux (depending on the OS version and filesystem used).

`v3.17.1`

Compare Source

Fix build with windows-sys 0.52. Unfortunately, we have no CI for older windows-sys versions at the moment...

`v3.17.0`

Compare Source

Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in Builder::make_in (when creating temporary files of arbitrary types).
Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test.
When reseeding with getrandom, use platform (e.g., CPU) specific randomness sources where possible.
Clarify some documentation.
Unlink unnamed temporary files on windows immediately when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible.

`v3.16.0`

Compare Source

Update getrandom to 0.3.0 (thanks to @paolobarbolini).
Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @ErichDonGubler).
Improved security documentation (thanks to @n0toose for collaborating with me on this).

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#314). This resolves a potential DoS vector (#178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.

`v3.14.0`

Compare Source

Make the wasip2 target work (requires tempfile's "nightly" feature to be enabled). #305.
Allow older windows-sys versions #304.

`v3.13.0`

Compare Source

Add with_suffix constructors for easily creating new temporary files with a specific suffix (e.g., a specific file extension). Thanks to @Borgerr.
Update dependencies (fastrand & rustix).

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [tempfile](https://stebalien.com/projects/tempfile-rs/) ([source](https://github.com/Stebalien/tempfile)) | dev-dependencies | minor | `3.12.0` -> `3.19.1` | --- ### Release Notes <details> <summary>Stebalien/tempfile (tempfile)</summary> ### [`v3.19.1`](https://github.com/Stebalien/tempfile/blob/HEAD/CHANGELOG.md#3191) [Compare Source](https://github.com/Stebalien/tempfile/compare/v3.19.0...v3.19.1) - Don't unlink temporary files immediately on Windows (fixes [#339](https://github.com/Stebalien/tempfile/issues/339)). Unfortunately, this seemed to corrupt the file object (possibly a Windows kernel bug) in rare cases and isn't strictly speaking necessary. ### [`v3.19.0`](https://github.com/Stebalien/tempfile/blob/HEAD/CHANGELOG.md#3190) [Compare Source](https://github.com/Stebalien/tempfile/compare/v3.18.0...v3.19.0) - Remove direct dependency on `cfg-if`. It's still in the tree, but we didn't really need to use it in this crate. - Add an unstable feature (`unstable-windows-keep-open-tempfile`) to test a potential fix to [#339](https://github.com/Stebalien/tempfile/issues/339). ### [`v3.18.0`](https://github.com/Stebalien/tempfile/blob/HEAD/CHANGELOG.md#3180) [Compare Source](https://github.com/Stebalien/tempfile/compare/v3.17.1...v3.18.0) - Update `rustix` to 1.0.0. - Make `NamedTempFile::persist_noclobber` atomic on Apple operating systems. It's now atomic on MacOS, Windows, and Linux (depending on the OS version and filesystem used). ### [`v3.17.1`](https://github.com/Stebalien/tempfile/blob/HEAD/CHANGELOG.md#3171) [Compare Source](https://github.com/Stebalien/tempfile/compare/v3.17.0...v3.17.1) - Fix build with `windows-sys` 0.52. Unfortunately, we have no CI for older `windows-sys` versions at the moment... ### [`v3.17.0`](https://github.com/Stebalien/tempfile/blob/HEAD/CHANGELOG.md#3170) [Compare Source](https://github.com/Stebalien/tempfile/compare/v3.16.0...v3.17.0) - Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in `Builder::make_in` (when creating temporary files of arbitrary types). - Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test. - When reseeding with `getrandom`, use platform (e.g., CPU) specific randomness sources where possible. - Clarify some documentation. - Unlink unnamed temporary files on windows *immediately* when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible. ### [`v3.16.0`](https://github.com/Stebalien/tempfile/blob/HEAD/CHANGELOG.md#3160) [Compare Source](https://github.com/Stebalien/tempfile/compare/v3.15.0...v3.16.0) - Update `getrandom` to `0.3.0` (thanks to [@paolobarbolini](https://github.com/paolobarbolini)). - Allow `windows-sys` versions `0.59.x` in addition to `0.59.0` (thanks [@ErichDonGubler](https://github.com/ErichDonGubler)). - Improved security documentation (thanks to [@n0toose](https://github.com/n0toose) for collaborating with me on this). ### [`v3.15.0`](https://github.com/Stebalien/tempfile/blob/HEAD/CHANGELOG.md#3150) [Compare Source](https://github.com/Stebalien/tempfile/compare/v3.14.0...v3.15.0) Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files ([#314](https://github.com/Stebalien/tempfile/issues/314)). This resolves a potential DoS vector ([#178](https://github.com/Stebalien/tempfile/issues/178)) while avoiding `getrandom` in the common case where it's necessary. The feature is optional but enabled by default via the `getrandom` feature. For libc-free builds, you'll either need to disable this feature or opt-in to a different [`getrandom` backend](https://github.com/rust-random/getrandom?tab=readme-ov-file#opt-in-backends). ### [`v3.14.0`](https://github.com/Stebalien/tempfile/blob/HEAD/CHANGELOG.md#3140) [Compare Source](https://github.com/Stebalien/tempfile/compare/v3.13.0...v3.14.0) - Make the wasip2 target work (requires tempfile's "nightly" feature to be enabled). [#305](https://github.com/Stebalien/tempfile/pull/305). - Allow older windows-sys versions [#304](https://github.com/Stebalien/tempfile/pull/304). ### [`v3.13.0`](https://github.com/Stebalien/tempfile/blob/HEAD/CHANGELOG.md#3130) [Compare Source](https://github.com/Stebalien/tempfile/compare/v3.12.0...v3.13.0) - Add `with_suffix` constructors for easily creating new temporary files with a specific suffix (e.g., a specific file extension). Thanks to [@Borgerr](https://github.com/Borgerr). - Update dependencies (fastrand & rustix). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-botbot added 1 commit 2025-04-21 17:47:33 +02:00