Bump tonic-build from 0.9.2 to 0.11.0 #336
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configration File (
|
|
Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.
Note 🟢 Risk threshold not exceeded. Change Summary (click to expand)The following is a summary of changes in this pull request made by me, your security buddy 🤖. Note that this summary is auto-generated and not meant to be a definitive list of security issues but rather a helpful summary from a security perspective. Summary: The provided code changes are updates to the dependencies in the From an application security perspective, these updates are generally not a major concern, as they are primarily build and development dependencies, rather than runtime dependencies. Updates to build dependencies are typically less critical than updates to runtime dependencies, as they are only used during the build process and not included in the final application. However, it's always important to review dependency updates, even for build dependencies, to ensure there are no known security vulnerabilities or breaking changes that could affect the application. Additionally, it's recommended to review the release notes or changelog for the new versions to understand the changes and potential impact on the application. Finally, it's a good practice to have a comprehensive test suite and perform thorough testing after updating dependencies to ensure the application continues to function as expected. Files Changed:
Powered by DryRun Security |
dependabot
bot
force-pushed
the
dependabot/cargo/tonic-build-0.11.0
branch
4 times, most recently
from
55b4fc7 to
d743d94
Compare
dependabot
bot
force-pushed
the
dependabot/cargo/tonic-build-0.11.0
branch
3 times, most recently
from
58f4572 to
0251fdf
Compare
Bumps [tonic-build](https://github.com/hyperium/tonic) from 0.9.2 to 0.11.0. - [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md) - [Commits](hyperium/tonic@v0.9.2...v0.11.0) --- updated-dependencies: - dependency-name: tonic-build dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/cargo/tonic-build-0.11.0
branch
from
0251fdf to
b78bf84
Compare
|
Superseded by #384. |
Bumps tonic-build from 0.9.2 to 0.11.0.
Changelog
Sourced from tonic-build's changelog.
Commits
ea8cd3fchore: prepare v0.11.0 release (#1626)209fcbechore(ci): fix udeps warning errors (#1627)4263f87feat(tls): Implement AsMut for Certificate (#1621)23106ddchore(tls): Update to rustls 0.22.0 (#1509)2a2809bUpdate Cargo.toml (#1622)4227468Update helloworld-tutorial.md - Fix Clippy lints (#1617)4859a73Add connection timeout to connect_with_connector_lazy (#1619)227b169web: fix invalid bit header error message (#1618)c30cb78chore(reflection): Make prost-types dependency optional (#1610)f714f42Repair rust-analyzer for tonic files (#1604)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)