dependabot[bot] opened a new pull request, #7412: URL: https://github.com/apache/datafusion-comet/pull/7412
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.12.28 to 0.13.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/releases";>reqwest's releases</a>.</em></p> <blockquote> <h2>v0.13.5</h2> <h2>tl;dr</h2> <ul> <li>Add <code>Error::is_dns()</code> to identify errors caused by DNS resolution failures.</li> <li>Add <code>ClientBuilder::http1_max_headers(usize)</code> to configure the maximum number of headers accepted in an HTTP/1 response (default 100).</li> <li>Add TLS version to <code>TlsInfo</code> extension.</li> <li>Fix hickory-dns feature to use <code>Ipv6AndIpv4</code> strategy to prefer IPv6.</li> <li>Fix sending wrong proxy-auth if multiple proxies intercept a given URL.</li> </ul> <h2>What's Changed</h2> <ul> <li>fix(blocking): preserve version and extensions in TryFrom<a href="http::Request">http::Request</a> by <a href="https://github.com/wwhsaber";><code>@wwhsaber</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3050";>seanmonstar/reqwest#3050</a></li> <li>Remove unnecessary clones by <a href="https://github.com/FranciscoTGouveia";><code>@FranciscoTGouveia</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3052";>seanmonstar/reqwest#3052</a></li> <li>Add <code>Referrer</code> and <code>Referrer Policy</code> methods to WASM Request API by <a href="https://github.com/Billy-Sheppard";><code>@Billy-Sheppard</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3049";>seanmonstar/reqwest#3049</a></li> <li>chore(deps): bump actions/checkout from 6 to 7 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3058";>seanmonstar/reqwest#3058</a></li> <li>feat: add <code>Error::is_dns()</code> to identify DNS resolution failures by <a href="https://github.com/JoakoI98";><code>@JoakoI98</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3057";>seanmonstar/reqwest#3057</a></li> <li>Fix blocking client timeout panic by <a href="https://github.com/V-Mann-Nick";><code>@V-Mann-Nick</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3060";>seanmonstar/reqwest#3060</a></li> <li>Use <code>LookupIpStrategy::Ipv6AndIpv4</code> to actually prefer IPv6 when using <code>hickory-dns</code> by <a href="https://github.com/FalkWoldmann";><code>@FalkWoldmann</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3063";>seanmonstar/reqwest#3063</a></li> <li>feat: Add ClientBuilder::http1_max_headers by <a href="https://github.com/smaeda-ks";><code>@smaeda-ks</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3065";>seanmonstar/reqwest#3065</a></li> <li>feat: expose the negotiated TLS version via <code>TlsInfo</code> by <a href="https://github.com/dennisameling";><code>@dennisameling</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3067";>seanmonstar/reqwest#3067</a></li> <li>fix(error): detect timeouts wrapped in body decode errors by <a href="https://github.com/raphaelroshan";><code>@raphaelroshan</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3064";>seanmonstar/reqwest#3064</a></li> <li>Remove unnecessary clones and a cast by <a href="https://github.com/FranciscoTGouveia";><code>@FranciscoTGouveia</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3071";>seanmonstar/reqwest#3071</a></li> <li>chore(deps): upgrade base64 to 0.23 by <a href="https://github.com/paolobarbolini";><code>@paolobarbolini</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3074";>seanmonstar/reqwest#3074</a></li> <li>perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by <a href="https://github.com/spellsaif";><code>@spellsaif</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3085";>seanmonstar/reqwest#3085</a></li> <li>fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by <a href="https://github.com/spellsaif";><code>@spellsaif</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3084";>seanmonstar/reqwest#3084</a></li> <li>src/async_impl/request.rs_improved_doc_for_json_fn: by <a href="https://github.com/Athleteg";><code>@Athleteg</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3082";>seanmonstar/reqwest#3082</a></li> <li>fix: proxy could use wrong credentials if many matched by <a href="https://github.com/seanmonstar";><code>@seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3098";>seanmonstar/reqwest#3098</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/wwhsaber";><code>@wwhsaber</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3050";>seanmonstar/reqwest#3050</a></li> <li><a href="https://github.com/FranciscoTGouveia";><code>@FranciscoTGouveia</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3052";>seanmonstar/reqwest#3052</a></li> <li><a href="https://github.com/Billy-Sheppard";><code>@Billy-Sheppard</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3049";>seanmonstar/reqwest#3049</a></li> <li><a href="https://github.com/JoakoI98";><code>@JoakoI98</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3057";>seanmonstar/reqwest#3057</a></li> <li><a href="https://github.com/V-Mann-Nick";><code>@V-Mann-Nick</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3060";>seanmonstar/reqwest#3060</a></li> <li><a href="https://github.com/FalkWoldmann";><code>@FalkWoldmann</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3063";>seanmonstar/reqwest#3063</a></li> <li><a href="https://github.com/smaeda-ks";><code>@smaeda-ks</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3065";>seanmonstar/reqwest#3065</a></li> <li><a href="https://github.com/raphaelroshan";><code>@raphaelroshan</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3064";>seanmonstar/reqwest#3064</a></li> <li><a href="https://github.com/spellsaif";><code>@spellsaif</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3085";>seanmonstar/reqwest#3085</a></li> <li><a href="https://github.com/Athleteg";><code>@Athleteg</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/3082";>seanmonstar/reqwest#3082</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/seanmonstar/reqwest/compare/v0.13.4...v0.13.5";>https://github.com/seanmonstar/reqwest/compare/v0.13.4...v0.13.5</a></p> <h2>v0.13.4</h2> <h2>tl;dr</h2> <ul> <li>Add <code>ClientBuilder::tls_sslkeylogfile(bool)</code> option to allow using the related environment variable.</li> <li>Add <code>ClientBuilder::http2_keep_alive_*</code> options for the <code>blocking</code> client.</li> <li>Add TLS 1.3 support when using <code>native-tls</code> backend.</li> <li>Fix redirect handling to strip sensitive headers when the scheme changes.</li> <li>Fix HTTP/3 happy-eyeball connection creation.</li> <li>Upgrade hickory-resolver to 0.26.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md";>reqwest's changelog</a>.</em></p> <blockquote> <h2>v0.13.5</h2> <ul> <li>Add <code>Error::is_dns()</code> to identify errors caused by DNS resolution failures.</li> <li>Add <code>ClientBuilder::http1_max_headers(usize)</code> to configure the maximum number of headers accepted in an HTTP/1 response (default 100).</li> <li>Add TLS version to <code>TlsInfo</code> extension.</li> <li>Fix hickory-dns feature to use <code>Ipv6AndIpv4</code> strategy to prefer IPv6.</li> <li>Fix sending wrong proxy-auth if multiple proxies intercept a given URL.</li> </ul> <h2>v0.13.4</h2> <ul> <li>Add <code>ClientBuilder::tls_sslkeylogfile(bool)</code> option to allow using the related environment variable.</li> <li>Add <code>ClientBuilder::http2_keep_alive_*</code> options for the <code>blocking</code> client.</li> <li>Add TLS 1.3 support when using <code>native-tls</code> backend.</li> <li>Fix redirect handling to strip sensitive headers when the scheme changes.</li> <li>Fix HTTP/3 happy-eyeball connection creation.</li> <li>Upgrade hickory-resolver to 0.26.</li> </ul> <h2>v0.13.3</h2> <ul> <li>Fix CertificateRevocationList parsing of PEM values.</li> <li>Fix logging in resolver to only show host, not full URL.</li> <li>Fix hickory-dns to fallback to a default if <code>/etc/resolv.conf</code> fails.</li> <li>Fix HTTP/3 to handle <code>STOP_SENDING</code> as not an error.</li> <li>Fix HTTP/3 pool to remove timed out QUIC connections.</li> <li>Fix HTTP/3 connection establishment picking IPv4 and IPv6.</li> <li>Upgrade rustls-platform-verifier.</li> <li>(wasm) Only use wasm-bindgen on unknown-* targets.</li> </ul> <h2>v0.13.2</h2> <ul> <li>Fix HTTP/2 and native-tls ALPN feature combinations.</li> <li>Fix HTTP/3 to send h3 ALPN.</li> <li>(wasm) fix <code>RequestBuilder::json()</code> from override previously set content-type.</li> </ul> <h2>v0.13.1</h2> <ul> <li>Fixes compiling with rustls on Android targets.</li> </ul> <h1>v0.13.0</h1> <ul> <li><strong>Breaking changes</strong>: <ul> <li><code>rustls</code> is now the default TLS backend, instead of <code>native-tls</code>.</li> <li><code>rustls</code> crypto provider defaults to aws-lc instead of <em>ring</em>. (<code>rustls-no-provider</code> exists if you want a different crypto provider)</li> <li><code>rustls-tls</code> has been renamed to <code>rustls</code>.</li> <li>rustls roots features removed, <code>rustls-platform-verifier</code> is used by default. <ul> <li>To use different roots, call <code>tls_certs_only(your_roots)</code>.</li> </ul> </li> <li><code>native-tls</code> now includes ALPN. To disable, use <code>native-tls-no-alpn</code>.</li> <li><code>query</code> and <code>form</code> are now crate features, disabled by default.</li> <li>Long-deprecated methods and crate features have been removed (such as <code>trust-dns</code>, which was renamed <code>hickory-dns</code> a while ago).</li> </ul> </li> <li>Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/seanmonstar/reqwest/commit/de55373434f07f42926599dbb5a88550d8e55112";><code>de55373</code></a> v0.13.5</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/4d3fe121f99f74f912b9a39d789f06f13688c8c8";><code>4d3fe12</code></a> fix: proxy could use wrong credentials if many matched (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/3098";>#3098</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/9f06fd28abe53e5ff84a091825ea5ce8984b51e0";><code>9f06fd2</code></a> docs: improve description of JSON method (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/3082";>#3082</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/5bdb2f0eaaa4b2cf047e9d227c02d55ac2aa4732";><code>5bdb2f0</code></a> perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/ffda2631e705547cd5bd209b7b01c6aaf25133ae";><code>ffda263</code></a> perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/3";>#3</a>...</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/4e9a3c7c8af164e6be24f481b51d697353e06ecb";><code>4e9a3c7</code></a> chore: add pull request template for human-written content</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/17e9bcb51c46edebfb6f5f2f5184b51dac4b3a7d";><code>17e9bcb</code></a> chore(deps): upgrade base64 to 0.23 (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/3074";>#3074</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/221abe9ec921e22fe1bafaed47b51b03bed4b7c3";><code>221abe9</code></a> chore: Remove unnecessary clones and a cast (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/3071";>#3071</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/99996a1b3db5e7e27ce58512be42c581a9a8a7cb";><code>99996a1</code></a> fix(error): detect timeouts wrapped in body decode errors (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/3064";>#3064</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/fc99bd5b15c72c65f615848d7b048df94aeadcd9";><code>fc99bd5</code></a> feat: expose the negotiated TLS version via <code>TlsInfo</code> (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/3067";>#3067</a>)</li> <li>Additional commits viewable in <a href="https://github.com/seanmonstar/reqwest/compare/v0.12.28...v0.13.5";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
