build(deps): bump the prod group with 5 updates (#8726)

* build(deps): bump the prod group with 5 updates Bumps the prod group with 5 updates: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.5.10` | `4.5.11` | | [toml](https://github.com/toml-rs/toml) | `0.8.15` | `0.8.16` | | [tokio](https://github.com/tokio-rs/tokio) | `1.39.0` | `1.39.2` | | [console-subscriber](https://github.com/tokio-rs/console) | `0.3.0` | `0.4.0` | | [serde_json](https://github.com/serde-rs/json) | `1.0.120` | `1.0.121` | Updates `clap` from 4.5.10 to 4.5.11 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](clap-rs/clap@clap_complete-v4.5.10...clap_complete-v4.5.11) Updates `toml` from 0.8.15 to 0.8.16 - [Commits](toml-rs/toml@toml-v0.8.15...toml-v0.8.16) Updates `tokio` from 1.39.0 to 1.39.2 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](tokio-rs/tokio@tokio-1.39.0...tokio-1.39.2) Updates `console-subscriber` from 0.3.0 to 0.4.0 - [Release notes](https://github.com/tokio-rs/console/releases) - [Changelog](https://github.com/tokio-rs/console/blob/main/release-plz.toml) - [Commits](tokio-rs/console@console-subscriber-v0.3.0...console-subscriber-v0.4.0) Updates `serde_json` from 1.0.120 to 1.0.121 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.120...v1.0.121) --- updated-dependencies: - dependency-name: clap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: toml dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: tokio dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: console-subscriber dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: serde_json dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod ... Signed-off-by: dependabot[bot] <[email protected]> * cargo vet --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alfredo Garcia <[email protected]>
ZcashFoundation · Jul 30, 2024 · 7b0c1ad · 7b0c1ad
1 parent 988dd55
commit 7b0c1ad
Show file tree

Hide file tree

Showing 17 changed files with 130 additions and 187 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml
@@ -46,11 +46,21 @@ who = "Alfredo Garcia <[email protected]>"
 criteria = "safe-to-deploy"
 delta = "0.6.0 -> 0.7.0"
 
+[[audits.console-api]]
+who = "Alfredo Garcia <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.7.0 -> 0.8.0"
+
 [[audits.console-subscriber]]
 who = "Alfredo Garcia <[email protected]>"
 criteria = "safe-to-deploy"
 delta = "0.2.0 -> 0.3.0"
 
+[[audits.console-subscriber]]
+who = "Alfredo Garcia <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.3.0 -> 0.4.0"
+
 [[audits.git2]]
 who = "Alfredo Garcia <[email protected]>"
 criteria = "safe-to-deploy"
@@ -131,6 +141,11 @@ who = "Alfredo Garcia <[email protected]>"
 criteria = "safe-to-deploy"
 delta = "0.12.6 -> 0.13.1"
 
+[[audits.serde_spanned]]
+who = "Alfredo Garcia <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.6.6 -> 0.6.7"
+
 [[audits.serde_with]]
 who = "Alfredo Garcia <[email protected]>"
 criteria = "safe-to-deploy"
@@ -181,11 +196,26 @@ who = "Alfredo Garcia <[email protected]>"
 criteria = "safe-to-deploy"
 delta = "0.8.14 -> 0.8.15"
 
+[[audits.toml]]
+who = "Alfredo Garcia <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.8.15 -> 0.8.16"
+
+[[audits.toml_datetime]]
+who = "Alfredo Garcia <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.6.6 -> 0.6.7"
+
 [[audits.toml_edit]]
 who = "Alfredo Garcia <[email protected]>"
 criteria = "safe-to-deploy"
 delta = "0.22.14 -> 0.22.16"
 
+[[audits.toml_edit]]
+who = "Alfredo Garcia <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.22.16 -> 0.22.17"
+
 [[audits.tonic]]
 who = "Alfredo Garcia <[email protected]>"
 criteria = "safe-to-deploy"
@@ -235,3 +265,9 @@ criteria = "safe-to-deploy"
 user-id = 3618 # David Tolnay (dtolnay)
 start = "2019-03-01"
 end = "2025-07-09"
+
+[[trusted.tokio]]
+criteria = "safe-to-deploy"
+user-id = 6741 # Alice Ryhl (Darksonn)
+start = "2020-12-25"
+end = "2025-07-29"
diff --git a/supply-chain/config.toml b/supply-chain/config.toml
@@ -1550,14 +1550,6 @@ criteria = "safe-to-deploy"
 version = "0.3.36"
 criteria = "safe-to-deploy"
 
-[[exemptions.tokio]]
-version = "1.38.0"
-criteria = "safe-to-deploy"
-
-[[exemptions.tokio-io-timeout]]
-version = "1.2.0"
-criteria = "safe-to-deploy"
-
 [[exemptions.tokio-macros]]
 version = "2.3.0"
 criteria = "safe-to-deploy"

diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock
@@ -9,22 +9,22 @@ user-login = "emilio"
 user-name = "Emilio Cobos Álvarez"
 
 [[publisher.clap]]
-version = "4.5.10"
-when = "2024-07-23"
+version = "4.5.11"
+when = "2024-07-25"
 user-id = 6743
 user-login = "epage"
 user-name = "Ed Page"
 
 [[publisher.clap_builder]]
-version = "4.5.10"
-when = "2024-07-23"
+version = "4.5.11"
+when = "2024-07-25"
 user-id = 6743
 user-login = "epage"
 user-name = "Ed Page"
 
 [[publisher.clap_derive]]
-version = "4.5.8"
-when = "2024-06-28"
+version = "4.5.11"
+when = "2024-07-25"
 user-id = 6743
 user-login = "epage"
 user-name = "Ed Page"
@@ -44,8 +44,8 @@ user-login = "hsivonen"
 user-name = "Henri Sivonen"
 
 [[publisher.serde_json]]
-version = "1.0.120"
-when = "2024-07-01"
+version = "1.0.121"
+when = "2024-07-28"
 user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
@@ -64,6 +64,13 @@ user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
 
+[[publisher.tokio]]
+version = "1.39.2"
+when = "2024-07-27"
+user-id = 6741
+user-login = "Darksonn"
+user-name = "Alice Ryhl"
+
 [[publisher.unicode-normalization]]
 version = "0.1.23"
 when = "2024-02-20"

diff --git a/tower-batch-control/Cargo.toml b/tower-batch-control/Cargo.toml
@@ -26,7 +26,7 @@ futures = "0.3.30"
 futures-core = "0.3.28"
 pin-project = "1.1.5"
 rayon = "1.10.0"
-tokio = { version = "1.39.0", features = ["time", "sync", "tracing", "macros"] }
+tokio = { version = "1.39.2", features = ["time", "sync", "tracing", "macros"] }
 tokio-util = "0.7.11"
 tower = { version = "0.4.13", features = ["util", "buffer"] }
 tracing = "0.1.39"
@@ -41,7 +41,7 @@ tinyvec = { version = "1.8.0", features = ["rustc_1_55"] }
 ed25519-zebra = "4.0.3"
 rand = "0.8.5"
 
-tokio = { version = "1.39.0", features = ["full", "tracing", "test-util"] }
+tokio = { version = "1.39.2", features = ["full", "tracing", "test-util"] }
 tokio-test = "0.4.4"
 tower-fallback = { path = "../tower-fallback/", version = "0.2.41-beta.14" }
 tower-test = "0.4.0"

diff --git a/tower-fallback/Cargo.toml b/tower-fallback/Cargo.toml
@@ -22,6 +22,6 @@ futures-core = "0.3.28"
 tracing = "0.1.39"
 
 [dev-dependencies]
-tokio = { version = "1.39.0", features = ["full", "tracing", "test-util"] }
+tokio = { version = "1.39.2", features = ["full", "tracing", "test-util"] }
 
 zebra-test = { path = "../zebra-test/", version = "1.0.0-beta.38" }
diff --git a/zebra-chain/Cargo.toml b/zebra-chain/Cargo.toml
@@ -128,10 +128,10 @@ redjubjub = "0.7.0"
 reddsa = "0.5.1"
 
 # Production feature json-conversion
-serde_json = { version = "1.0.120", optional = true }
+serde_json = { version = "1.0.121", optional = true }
 
 # Production feature async-error and testing feature proptest-impl
-tokio = { version = "1.39.0", optional = true }
+tokio = { version = "1.39.2", optional = true }
 
 # Experimental feature shielded-scan
 zcash_client_backend = { version = "0.12.1", optional = true }
@@ -164,7 +164,7 @@ proptest-derive = "0.5.0"
 rand = "0.8.5"
 rand_chacha = "0.3.1"
 
-tokio = { version = "1.39.0", features = ["full", "tracing", "test-util"] }
+tokio = { version = "1.39.2", features = ["full", "tracing", "test-util"] }
 
 zebra-test = { path = "../zebra-test/", version = "1.0.0-beta.38" }
 

diff --git a/zebra-consensus/Cargo.toml b/zebra-consensus/Cargo.toml
@@ -52,7 +52,7 @@ futures = "0.3.30"
 futures-util = "0.3.28"
 metrics = "0.23.0"
 thiserror = "1.0.63"
-tokio = { version = "1.39.0", features = ["time", "sync", "tracing", "rt-multi-thread"] }
+tokio = { version = "1.39.2", features = ["time", "sync", "tracing", "rt-multi-thread"] }
 tower = { version = "0.4.13", features = ["timeout", "util", "buffer"] }
 tracing = "0.1.39"
 tracing-futures = "0.2.5"
@@ -90,7 +90,7 @@ proptest = "1.4.0"
 proptest-derive = "0.5.0"
 spandoc = "0.2.2"
 
-tokio = { version = "1.39.0", features = ["full", "tracing", "test-util"] }
+tokio = { version = "1.39.2", features = ["full", "tracing", "test-util"] }
 tracing-error = "0.2.0"
 tracing-subscriber = "0.3.18"
 

diff --git a/zebra-grpc/Cargo.toml b/zebra-grpc/Cargo.toml
@@ -21,7 +21,7 @@ tonic = "0.12.1"
 tonic-reflection = "0.12.1"
 prost = "0.13.1"
 serde = { version = "1.0.204", features = ["serde_derive"] }
-tokio = { version = "1.39.0", features = ["macros", "rt-multi-thread"] }
+tokio = { version = "1.39.2", features = ["macros", "rt-multi-thread"] }
 tokio-stream = "0.1.15"
 tower = { version = "0.4.13", features = ["util", "buffer", "timeout"] }
 color-eyre = "0.6.3"

diff --git a/zebra-network/Cargo.toml b/zebra-network/Cargo.toml
@@ -61,7 +61,7 @@ tempfile = "3.10.1"
 thiserror = "1.0.63"
 
 futures = "0.3.30"
-tokio = { version = "1.39.0", features = ["fs", "io-util", "net", "time", "tracing", "macros", "rt-multi-thread"] }
+tokio = { version = "1.39.2", features = ["fs", "io-util", "net", "time", "tracing", "macros", "rt-multi-thread"] }
 tokio-stream = { version = "0.1.15", features = ["sync", "time"] }
 tokio-util = { version = "0.7.11", features = ["codec"] }
 tower = { version = "0.4.13", features = ["retry", "discover", "load", "load-shed", "timeout", "util", "buffer"] }
@@ -90,8 +90,8 @@ proptest = "1.4.0"
 proptest-derive = "0.5.0"
 
 static_assertions = "1.1.0"
-tokio = { version = "1.39.0", features = ["full", "tracing", "test-util"] }
-toml = "0.8.15"
+tokio = { version = "1.39.2", features = ["full", "tracing", "test-util"] }
+toml = "0.8.16"
 
 zebra-chain = { path = "../zebra-chain", features = ["proptest-impl"] }
 zebra-test = { path = "../zebra-test/" }
diff --git a/zebra-node-services/Cargo.toml b/zebra-node-services/Cargo.toml
@@ -47,13 +47,13 @@ jsonrpc-core = { version = "18.0.0", optional = true }
 # Security: avoid default dependency on openssl
 reqwest = { version = "0.11.26", default-features = false, features = ["rustls-tls"], optional = true }
 serde = { version = "1.0.204", optional = true }
-serde_json = { version = "1.0.120", optional = true }
-tokio = { version = "1.39.0", features = ["time"], optional = true }
+serde_json = { version = "1.0.121", optional = true }
+tokio = { version = "1.39.2", features = ["time"], optional = true }
 
 [dev-dependencies]
 
 color-eyre = "0.6.3"
 jsonrpc-core = "18.0.0"
 reqwest = { version = "0.11.26", default-features = false, features = ["rustls-tls"] }
 serde = "1.0.204"
-serde_json = "1.0.120"
+serde_json = "1.0.121"
diff --git a/zebra-rpc/Cargo.toml b/zebra-rpc/Cargo.toml
@@ -65,10 +65,10 @@ jsonrpc-derive = "18.0.0"
 jsonrpc-http-server = "18.0.0"
 
 # zebra-rpc needs the preserve_order feature in serde_json, which is a dependency of jsonrpc-core
-serde_json = { version = "1.0.120", features = ["preserve_order"] }
+serde_json = { version = "1.0.121", features = ["preserve_order"] }
 indexmap = { version = "2.2.6", features = ["serde"] }
 
-tokio = { version = "1.39.0", features = [
+tokio = { version = "1.39.2", features = [
     "time",
     "rt-multi-thread",
     "macros",
@@ -118,7 +118,7 @@ insta = { version = "1.39.0", features = ["redactions", "json", "ron"] }
 proptest = "1.4.0"
 
 thiserror = "1.0.63"
-tokio = { version = "1.39.0", features = ["full", "tracing", "test-util"] }
+tokio = { version = "1.39.2", features = ["full", "tracing", "test-util"] }
 
 zebra-chain = { path = "../zebra-chain", version = "1.0.0-beta.38", features = [
     "proptest-impl",

diff --git a/zebra-scan/Cargo.toml b/zebra-scan/Cargo.toml
@@ -65,7 +65,7 @@ indexmap = { version = "2.2.6", features = ["serde"] }
 itertools = "0.13.0"
 semver = "1.0.23"
 serde = { version = "1.0.204", features = ["serde_derive"] }
-tokio = { version = "1.39.0", features = ["time"] }
+tokio = { version = "1.39.2", features = ["time"] }
 tower = "0.4.13"
 tracing = "0.1.39"
 futures = "0.3.30"
@@ -101,7 +101,7 @@ zebra-test = { path = "../zebra-test", version = "1.0.0-beta.38", optional = tru
 tracing-subscriber = { version = "0.3.18", features = ["env-filter"] }
 structopt = "0.3.26"
 lazy_static = "1.4.0"
-serde_json = "1.0.117"
+serde_json = "1.0.121"
 
 jsonrpc = { version = "0.18.0", optional = true }
 hex = { version = "0.4.3", optional = true }
@@ -110,7 +110,7 @@ zebrad = { path = "../zebrad", version = "1.8.0" }
 
 [dev-dependencies]
 insta = { version = "1.39.0", features = ["ron", "redactions"] }
-tokio = { version = "1.39.0", features = ["test-util"] }
+tokio = { version = "1.39.2", features = ["test-util"] }
 
 proptest = "1.4.0"
 proptest-derive = "0.5.0"
@@ -121,7 +121,7 @@ jubjub = "0.10.0"
 rand = "0.8.5"
 tempfile = "3.10.1"
 zcash_note_encryption = "0.4.0"
-toml = "0.8.15"
+toml = "0.8.16"
 tonic = "0.12.1"
 
 zebra-state = { path = "../zebra-state", version = "1.0.0-beta.38", features = ["proptest-impl"] }

diff --git a/zebra-state/Cargo.toml b/zebra-state/Cargo.toml
@@ -68,14 +68,14 @@ tempfile = "3.10.1"
 thiserror = "1.0.63"
 
 rayon = "1.10.0"
-tokio = { version = "1.39.0", features = ["rt-multi-thread", "sync", "tracing"] }
+tokio = { version = "1.39.2", features = ["rt-multi-thread", "sync", "tracing"] }
 tower = { version = "0.4.13", features = ["buffer", "util"] }
 tracing = "0.1.39"
 
 # elasticsearch specific dependencies.
 # Security: avoid default dependency on openssl
 elasticsearch = { version = "8.5.0-alpha.1", default-features = false, features = ["rustls-tls"], optional = true }
-serde_json = { version = "1.0.120", package = "serde_json", optional = true }
+serde_json = { version = "1.0.121", package = "serde_json", optional = true }
 
 zebra-chain = { path = "../zebra-chain", version = "1.0.0-beta.38", features = ["async-error"] }
 
@@ -106,7 +106,7 @@ rand = "0.8.5"
 halo2 = { package = "halo2_proofs", version = "0.3.0" }
 jubjub = "0.10.0"
 
-tokio = { version = "1.39.0", features = ["full", "tracing", "test-util"] }
+tokio = { version = "1.39.2", features = ["full", "tracing", "test-util"] }
 
 zebra-chain = { path = "../zebra-chain", version = "1.0.0-beta.38", features = ["proptest-impl"] }
 zebra-test = { path = "../zebra-test/", version = "1.0.0-beta.38" }
diff --git a/zebra-test/Cargo.toml b/zebra-test/Cargo.toml
@@ -25,7 +25,7 @@ once_cell = "1.18.0"
 rand = "0.8.5"
 regex = "1.10.4"
 
-tokio = { version = "1.39.0", features = ["full", "tracing", "test-util"] }
+tokio = { version = "1.39.2", features = ["full", "tracing", "test-util"] }
 tower = { version = "0.4.13", features = ["util"] }
 futures = "0.3.30"
 

diff --git a/zebra-utils/Cargo.toml b/zebra-utils/Cargo.toml
@@ -89,7 +89,7 @@ tinyvec = { version = "1.8.0", features = ["rustc_1_55"] }
 
 structopt = "0.3.26"
 hex = "0.4.3"
-serde_json = "1.0.120"
+serde_json = "1.0.121"
 tracing-error = "0.2.0"
 tracing-subscriber = "0.3.18"
 thiserror = "1.0.63"
@@ -109,7 +109,7 @@ regex = { version = "1.10.4", optional = true }
 reqwest = { version = "0.11.26", default-features = false, features = ["rustls-tls"], optional = true }
 
 # These crates are needed for the zebra-checkpoints and search-issue-refs binaries
-tokio = { version = "1.39.0", features = ["full"], optional = true }
+tokio = { version = "1.39.2", features = ["full"], optional = true }
 
 jsonrpc = { version = "0.18.0", optional = true }