Bump the minor-changes group with 6 updates

[dependabot]

Bumps the minor-changes group with 6 updates:

Package	From	To
quick-xml	0.30.0	0.31.0
bytecount	0.6.4	0.6.7
serde	1.0.189	1.0.190
tracing	0.1.39	0.1.40
clap	4.4.6	4.4.7
tempfile	3.8.0	3.8.1

Updates quick-xml from 0.30.0 to 0.31.0

Release notes

Sourced from quick-xml's releases.

Support serve >=1.0.181, various serde fixes and async writer

What's Changed

MSRV bumped to 1.56! Crate now uses Rust 2021 edition.

⚠️ BREAKING CHANGE! Serde's enum representation was changed (it was buggy anyway) to ensure compatibility with serde >= 1.0.181.

New Features

• #545: Resolve well-known namespaces (xml and xmlns) to their appropriate URIs. Also, enforce namespace constraints related to these well-known namespaces.
• #635: Add support for async ElementWriter operations.

Bug Fixes

• #660: Fixed incorrect deserialization of xs:lists from empty tags (<tag/> or <tag></tag>). Previously an DeError::UnexpectedEof") was returned in that case.
• #580: Fixed incorrect deserialization of vectors of newtypes from sequences of tags.
• #661: More string handling of serialized primitive values (booleans, numbers, strings, unit structs, unit variants). <int>123<something-else/></int> is no longer valid content. Previously all data after 123 up to closing tag would be silently skipped.
• #567: Fixed incorrect deserialization of vectors of enums from sequences of tags.
• #671: Fixed deserialization of empty simpleTypes (for example, attributes) into Option fields: now they are always deserialized as Some("").

Misc Changes

• #643: Bumped MSRV to 1.56. In practice the previous MSRV was incorrect in many cases.
• #643: Adopted Rust 2021 edition.
• #545: Added new Error variant -- Error::InvalidPrefixBind.
• #651: Relax requirement for version of arbitrary dependency -- we're actually compatible with version 1.0.0 and up.
• #649: Make features linkable and reference them in the docs.
• #619: Allow to raise application errors in ElementWriter::write_inner_content (and newly added ElementWriter::write_inner_content_async of course).
• #662: Get rid of some allocations during serde deserialization.
• #665: Improve serialization of xs:lists when some elements serialized to an empty string.
• #630: Fixed compatibility with serde >= 1.0.181

New Contributors

• @​wt made their first contribution in tafia/quick-xml#545
• @​tevoinea made their first contribution in tafia/quick-xml#635
• @​dev-ardi made their first contribution in tafia/quick-xml#647

Full Changelog: tafia/quick-xml@v0.30.0...v0.31.0

Changelog

Sourced from quick-xml's changelog.

0.31.0 -- 2023-10-22

MSRV bumped to 1.56! Crate now uses Rust 2021 edition.

Enum representation was changed (it was buggy anyway) to ensure compatibility with serde >= 1.0.181

New Features

• #545: Resolve well-known namespaces (xml and xmlns) to their appropriate URIs. Also, enforce namespace constraints related to these well-known namespaces.
• #635: Add support for async ElementWriter operations.

Bug Fixes

• #660: Fixed incorrect deserialization of xs:lists from empty tags (<tag/> or <tag></tag>). Previously an DeError::UnexpectedEof") was returned in that case
• #580: Fixed incorrect deserialization of vectors of newtypes from sequences of tags.
• #661: More string handling of serialized primitive values (booleans, numbers, strings, unit structs, unit variants). <int>123<something-else/></int> is no longer valid content. Previously all data after 123 up to closing tag would be silently skipped.
• #567: Fixed incorrect deserialization of vectors of enums from sequences of tags.
• #671: Fixed deserialization of empty simpleTypes (for example, attributes) into Option fields: now they are always deserialized as Some("").

Misc Changes

• #643: Bumped MSRV to 1.56. In practice the previous MSRV was incorrect in many cases.
• #643: Adopted Rust 2021 edition.
• #545: Added new Error variant -- Error::InvalidPrefixBind.
• #651: Relax requirement for version of arbitrary dependency -- we're actually compatible with version 1.0.0 and up.
• #649: Make features linkable and reference them in the docs.
• #619: Allow to raise application errors in ElementWriter::write_inner_content (and newly added ElementWriter::write_inner_content_async of course).
• #662: Get rid of some allocations during serde deserialization.
• #665: Improve serialization of xs:lists when some elements serialized to an empty string.
• #630: Fixed compatibility with serde >= 1.0.181

#545: tafia/quick-xml#545 #567: tafia/quick-xml#567 #580: tafia/quick-xml#580 #619: tafia/quick-xml#619 #630: tafia/quick-xml#630 #635: tafia/quick-xml#635 #643: tafia/quick-xml#643 #649: tafia/quick-xml#646 #651: tafia/quick-xml#651 #660: tafia/quick-xml#660 #661: tafia/quick-xml#661

... (truncated)

Commits

• 120e074 Release 0.31.0
• 440e8fe Merge pull request #672 from Mingun/fix-671
• ab8d519 Always deserialize simpleTypes (for example, attribute values) as Some(...)
• 569ac22 Merge pull request #669 from Mingun/fix-serde181-compatibility
• 78b7bc0 Restore compatibility with serde >=1.0.181
• 40a06a1 Replace chapter "Enum::Unit Variants As a Text" with "Enum Representations"
• 478e19a Fix serialization of $text variants in $text fields
• 6ef01ec Change deserialization of enums
• 11fa348 Change serialization of enums in ElementSerializer and document it
• 01650ee Change expected enum representation in tests according to new policy
• Additional commits viewable in compare view

Updates bytecount from 0.6.4 to 0.6.7

Commits

• See full diff in compare view

Updates serde from 1.0.189 to 1.0.190

Release notes

Sourced from serde's releases.

v1.0.190

• Preserve NaN sign when deserializing f32 from f64 or vice versa (#2637)

Commits

• edb1a58 Release 1.0.190
• 11c2917 Merge pull request #2637 from dtolnay/nansign
• 6ba9c12 Float copysign does not exist in libcore yet
• d2fcc34 Ensure f32 deserialized from f64 and vice versa preserve NaN sign
• a091a07 Add float NaN tests
• bb4135c Fix unused imports
• 8de84b7 Resolve get_first clippy lint
• 9cdf332 Remove 'remember to update' reminder from Cargo.toml
• See full diff in compare view

Updates tracing from 0.1.39 to 0.1.40

Release notes

Sourced from tracing's releases.

tracing 0.1.40

This release fixes a potential stack use-after-free in the Instrument::into_inner method. Only uses of this method are affected by this bug.

Fixed

• Use mem::ManuallyDrop instead of mem::forget in Instrument::into_inner (#2765)

#2765: tokio-rs/tracing#2765

Thanks to @​cramertj and @​manishearth for finding and fixing this issue!

Commits

• 15600a3 tracing: prepare to release v0.1.40
• 20a1762 tracing: use ManuallyDrop instead of mem::forget (#2765)
• See full diff in compare view

Updates clap from 4.4.6 to 4.4.7

Changelog

Sourced from clap's changelog.

[4.4.7] - 2023-10-24

Performance

• Reduced code size

Commits

• 9bfa5a3 chore: Release
• 38b5a2f chore: Release
• e485448 docs: Update changelog
• f801a03 Merge pull request #5181 from alexcrichton/smaller-is-number
• 9a9aabc refactor: Reduce code size of testing tokens if they're a number
• 1b84314 Merge pull request #5176 from epage/dep
• dcced5a chore: Bump completest
• f4319bc Merge pull request #5174 from kpreid/patch-1
• 71c1e59 docs: Fix doc link to Arg::trailing_var_arg
• deebc1f Merge pull request #5172 from epage/style
• Additional commits viewable in compare view

Updates tempfile from 3.8.0 to 3.8.1

Changelog

Sourced from tempfile's changelog.

3.8.1

• Update rustix to fix a potential panic on persist_noclobber on android.
• Update redox_syscall to 0.4 (on redox).
• Fix some docs typos.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions