fix(deps): update all dependencies

[platform-engineering-bot]

This PR contains the following updates:

Package	Type	Update	Change
EmbarkStudios/cargo-deny-action	action	major	v1 -> v2
actions/checkout	action	major	v3 -> v4
indexmap	dependencies	minor	2.6.0 -> 2.7.1
quay.io/fedora/fedora-bootc	container	major	41 -> 42
tempfile (source)	workspace.dependencies	minor	3.14.0 -> 3.15.0
tokio (source)	workspace.dependencies	minor	1.41.1 -> 1.43.0
uuid	dependencies	minor	1.11.1 -> 1.12.1

---

Release Notes

EmbarkStudios/cargo-deny-action (EmbarkStudios/cargo-deny-action)

v2

Compare Source

actions/checkout (actions/checkout)

v4

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

indexmap-rs/indexmap (indexmap)

v2.7.1

Compare Source

• Added #[track_caller] to functions that may panic.
• Improved memory reservation for insert_entry.

v2.7.0

Compare Source

• Added methods Entry::insert_entry and VacantEntry::insert_entry, returning
  an OccupiedEntry after insertion.

Stebalien/tempfile (tempfile)

v3.15.0

Compare Source

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#​314). This resolves a potential DoS vector (#​178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.

tokio-rs/tokio (tokio)

v1.43.0: Tokio v1.43.0

Compare Source

1.43.0 (Jan 8th, 2025)

Added

• net: add UdpSocket::peek methods (#​7068)
• net: add support for Haiku OS (#​7042)
• process: add Command::into_std() (#​7014)
• signal: add SignalKind::info on illumos (#​6995)
• signal: add support for realtime signals on illumos (#​7029)

Fixed

• io: don't call set_len before initializing vector in Blocking (#​7054)
• macros: suppress clippy::needless_return in #[tokio::main] (#​6874)
• runtime: fix thread parking on WebAssembly (#​7041)

Changes

• chore: use unsync loads for unsync_load (#​7073)
• io: use Buf::put_bytes in Repeat read impl (#​7055)
• task: drop the join waker of a task eagerly (#​6986)

Changes to unstable APIs

• metrics: improve flexibility of H2Histogram Configuration (#​6963)
• taskdump: add accessor methods for backtrace (#​6975)

Documented

• io: clarify ReadBuf::uninit allows initialized buffers as well (#​7053)
• net: fix ambiguity in TcpStream::try_write_vectored docs (#​7067)
• runtime: fix LocalRuntime doc links (#​7074)
• sync: extend documentation for watch::Receiver::wait_for (#​7038)
• sync: fix typos in OnceCell docs (#​7047)

v1.42.0: Tokio v1.42.0

Compare Source

1.42.0 (Dec 3rd, 2024)

Added

• io: add AsyncFd::{try_io, try_io_mut} (#​6967)

Fixed

• io: avoid ptr->ref->ptr roundtrip in RegistrationSet (#​6929)
• runtime: do not defer yield_now inside block_in_place (#​6999)

Changes

• io: simplify io readiness logic (#​6966)

Documented

• net: fix docs for tokio::net::unix::{pid_t, gid_t, uid_t} (#​6791)
• time: fix a typo in Instant docs (#​6982)

uuid-rs/uuid (uuid)

v1.12.1

Compare Source

What's Changed

• Fix links to namespaces in documentation by @​cstyles in https://github.com/uuid-rs/uuid/pull/789
• use inherent to_be_bytes and to_le_bytes methods by @​Vrtgs in https://github.com/uuid-rs/uuid/pull/788
• Reduce bitshifts in from_u64_pair by @​KodrAus in https://github.com/uuid-rs/uuid/pull/790
• prepare for 1.12.1 release by @​KodrAus in https://github.com/uuid-rs/uuid/pull/791

New Contributors

• @​cstyles made their first contribution in https://github.com/uuid-rs/uuid/pull/789
• @​Vrtgs made their first contribution in https://github.com/uuid-rs/uuid/pull/788

Full Changelog: uuid-rs/uuid@1.12.0...1.12.1

v1.12.0

Compare Source

⚠️ Possible Breakage

This release includes additional PartialEq implementations on Uuid, which can break inference in some cases.

What's Changed

• feat: Add NonZeroUuid type for optimized Option<Uuid> representation by @​ab22593k in https://github.com/uuid-rs/uuid/pull/779
• Finalize NonNilUuid by @​KodrAus in https://github.com/uuid-rs/uuid/pull/783
• Prepare for 1.12.0 release by @​KodrAus in https://github.com/uuid-rs/uuid/pull/784

New Contributors

• @​ab22593k made their first contribution in https://github.com/uuid-rs/uuid/pull/779

Full Changelog: uuid-rs/uuid@1.11.1...1.12.0

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[cgwalters]

Hmm this is a big mix of stuff...including things we don't want for now such as bumping fedora:41 -> fedora:42 (need to figure out how to teach renovate about pre-release versions there).

The biggest problem here is at least our renovate config doesn't understand Rust semver compatibility rules; the indexmap, uuid etc. bumps should have gone in with the other PR type.

Digging in I think we're inheriting from this global config
https://github.com/platform-engineering-org/.github/blob/main/default.json