From e4184d8b3871e5e5487e0010c75925d9c5ed19af Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 4 Jan 2022 11:05:02 -0800 Subject: [PATCH] Bump serde_yaml from 0.8.21 to 0.8.23 in /packer (#3157) Summary: Bumps [serde_yaml](https://github.com/dtolnay/serde-yaml) from 0.8.21 to 0.8.23.
Release notes

Sourced from serde_yaml's releases.

0.8.23

0.8.22

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=serde_yaml&package-manager=cargo&previous-version=0.8.21&new-version=0.8.23)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `dependabot rebase` will rebase this PR - `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `dependabot merge` will merge this PR after your CI passes on it - `dependabot squash and merge` will squash and merge this PR after your CI passes on it - `dependabot cancel merge` will cancel a previously requested merge and block automerging - `dependabot reopen` will reopen this PR if it is closed - `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request resolved: https://github.com/facebook/flipper/pull/3157 Reviewed By: antonk52 Differential Revision: D33403878 Pulled By: passy fbshipit-source-id: 345fc6c4d8e319624b835f5fa3f29efc54501240 --- packer/Cargo.lock | 12 +++--------- packer/Cargo.toml | 2 +- 2 files changed, 4 insertions(+), 10 deletions(-) diff --git a/packer/Cargo.lock b/packer/Cargo.lock index 4f8e1afdb..ae2b9be86 100644 --- a/packer/Cargo.lock +++ b/packer/Cargo.lock @@ -210,12 +210,6 @@ dependencies = [ "winapi", ] -[[package]] -name = "dtoa" -version = "0.4.7" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "88d7ed2934d741c6b37e33e3832298e8850b53fd2d2bea03873375596c7cea4e" - [[package]] name = "either" version = "1.6.1" @@ -627,12 +621,12 @@ dependencies = [ [[package]] name = "serde_yaml" -version = "0.8.21" +version = "0.8.23" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d8c608a35705a5d3cdc9fbe403147647ff34b921f8e833e49306df898f9b20af" +checksum = "a4a521f2940385c165a24ee286aa8599633d162077a54bdcae2a6fd5a7bfa7a0" dependencies = [ - "dtoa", "indexmap", + "ryu", "serde", "yaml-rust", ] diff --git a/packer/Cargo.toml b/packer/Cargo.toml index 2316d92f3..d03a26461 100644 --- a/packer/Cargo.toml +++ b/packer/Cargo.toml @@ -14,7 +14,7 @@ clap = "2.34.0" shellexpand = "2.1.0" tar = "0.4.38" serde = { version = "1.0.132", features = ["derive"] } -serde_yaml = "0.8.21" +serde_yaml = "0.8.23" anyhow = "1.0.52" sha2 = "0.10.0" data-encoding = "2.3.2"