⬆️ Update Rust Crates

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
anyhow	dependencies	patch	1.0.102 → 1.0.104
async-trait	dependencies	patch	0.1.89 → 0.1.91
axum	dependencies	patch	0.8.8 → 0.8.9
base64	dependencies	minor	0.22 → 0.23
chrono	dependencies	patch	0.4.44 → 0.4.45
clap	dependencies	patch	4.6.0 → 4.6.4
config	dependencies	patch	0.15.22 → 0.15.25
dashmap	dependencies	minor	6.1.0 → 6.2.1
hmac	dependencies	minor	0.12 → 0.13
maxminddb	dependencies	minor	0.27 → 0.30
rand (source)	dependencies	patch	0.10.0 → 0.10.2
reqwest	dependencies	patch	0.13.2 → 0.13.4
rust-embed	dependencies	minor	8.11.0 → 8.12.0
serde (source)	dependencies	patch	1.0.228 → 1.0.229
serde_json	dependencies	patch	1.0.149 → 1.0.151
sha2	dependencies	minor	0.10 → 0.11
sqlx	dependencies	minor	0.8 → 0.9
statrs	build-dependencies	minor	0.18 → 0.19
statrs	dependencies	minor	0.18 → 0.19
thiserror	dependencies	patch	2.0.18 → 2.0.19
tokio (source)	dependencies	minor	1.50.0 → 1.53.1
tower-http	dependencies	minor	0.6 → 0.7

---

Release Notes

dtolnay/anyhow (anyhow)

v1.0.104

Compare Source

• Update syn dev-dependency to version 3

v1.0.103

Compare Source

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#​451, #​452)

dtolnay/async-trait (async-trait)

v0.1.91

Compare Source

v0.1.90

Compare Source

• Update to syn 3

tokio-rs/axum (axum)

v0.8.9

Compare Source

• added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#​3597)
• changed: Update minimum rust version to 1.80 (#​3620)
• fixed: Set connect endpoint on correct field in MethodRouter (#​3656)
• fixed: Return specific error message when multipart body limit is exceeded (#​3611)

marshallpierce/rust-base64 (base64)

v0.23.0

Compare Source

• Added more consts for preconfigured configs and engines
• Make DecodeError::InvalidLastSymbol more clear by including the decoded value
• Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
  instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
  GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
  detection and work in no_std. The engines support the standard and URL-safe alphabets.
• Update MSRV to 1.71.0
• Add support for custom padding symbols

chronotope/chrono (chrono)

v0.4.45: 0.4.45

Compare Source

What's Changed

• fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @​SAY-5 in #​1787
• tz_data: fix tzdata locations on Android by @​caruschalalamove in #​1789

clap-rs/clap (clap)

v4.6.4

Compare Source

Internal

• Update to syn v3

v4.6.3

Compare Source

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

Compare Source

Fixes

• (help) Say alias when there is only one

v4.6.1

Compare Source

Fixes

• (derive) Ensure rebuilds happen when an read env variable is changed

rust-cli/config-rs (config)

v0.15.25

Compare Source

Fixes

• (ron) Support u64, and not just i64

v0.15.24

Compare Source

Fixes

• (json) Support u64, and not just i64

v0.15.23

Compare Source

Fixes

• Environment::convert_case: correctly apply casing to each key segment

xacrimon/dashmap (dashmap)

v6.2.1

Compare Source

This is an interim maintenance release for the existing v6 branch before v7 can be released. This bumps the MSRV to 1.85 and updates dependencies to their latest versions.

RustCrypto/MACs (hmac)

v0.13.0

Compare Source

oschwald/maxminddb-rust (maxminddb)

v0.30.0

Compare Source

• Added deserialize_any_with_raw_strings() for Serde-based format adapters
  to validate MMDB strings while constructing another runtime's native string
  type, avoiding duplicate UTF-8 validation without unsafe Rust. Adapters
  remain responsible for strict UTF-8 validation.
• Fixed network iteration on cyclic or over-deep corrupt search trees so it
  returns an error instead of looping indefinitely.
• Fixed decode_path() error rendering for extreme negative indexes and
  reduced path traversal header parsing.
• Removed decoder logging checks from hot deserialization paths.
• Fixed verify() to validate shared data-section pointer targets once, reject
  pointer cycles, invalid scalar encodings, and impossible container sizes.

v0.29.0

Compare Source

• Breaking: Metadata::build_time() now returns
  Result<SystemTime, MaxMindDbError> instead of panicking on
  unrepresentable timestamps, and databases whose build_epoch cannot be
  represented as SystemTime are rejected as invalid during open and verify.
• Breaking: Reader::metadata is now private. Use Reader::metadata() to
  access validated metadata by shared reference.
• Breaking: Opening a database now rejects unsupported major format versions,
  unsupported IP versions, and zero-node search trees. Minor format versions
  are still accepted for forward compatibility.
• Fixed: within() and networks() now handle IPv6 databases without an
  IPv4 subtree without reading terminal data nodes as tree nodes or
  panicking while formatting low IPv6 networks.
• Fixed: Skipping ignored or unknown fields now enforces data-section
  bounds and the maximum nesting depth instead of accepting truncated
  values or overflowing the stack on deeply nested corrupt data.
• Internal: Added focused benchmarks for network iteration and serde
  unknown-field skipping, plus metadata build-time conversion, to guard
  performance-sensitive fixes.
• Documentation: Fixed intra-doc links so docs build with warnings denied,
  and added a CI check to keep them passing.

v0.28.1

Compare Source

• Fixed: Databases with an impossible declared search tree size are now
  rejected during open/verify instead of causing runaway allocation
  during validation.
• Fixed: within() now rejects IPv6 CIDRs on IPv4-only databases instead
  of yielding unrelated networks.
• Fixed: Verification now rejects truncated scalar/string payloads instead
  of skipping past them and reporting the database as valid.
• Fixed: LookupResult::network() now uses the reader's measured IPv4
  subtree depth instead of assuming it always begins at bit 96.

v0.28.0

Compare Source

• Performance improvement: Faster search-tree traversal by dispatching
  on the database's record size to monomorphized node readers, replacing
  per-step branching on the record size.
• Performance improvement: Direct deserialization of scalars, sequences,
  maps, and structs through dedicated fast paths instead of routing
  through deserialize_any.
• Performance improvement: IPv4 and IPv6 lookups dispatch to dedicated
  paths, avoiding per-call address-kind checks on the hot path.
• Behavior change: Deserializing a database array into a tuple or
  tuple struct now returns a decoding error when the lengths do not
  match. Previously the mismatch was silently ignored.
• Fixed: A corrupt data pointer that would underflow during resolution
  now returns an InvalidDatabase error instead of panicking.

rust-random/rand (rand)

v0.10.2

Compare Source

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#​1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#​1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#​1791)

v0.10.1

Compare Source

This release includes a fix for a soundness bug; see #​1763.

Changes

• Document panic behavior of make_rng and add #[track_caller] (#​1761)
• Deprecate feature log (#​1763)

seanmonstar/reqwest (reqwest)

v0.13.4

Compare Source

• Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
• Add ClientBuilder::http2_keep_alive_* options for the blocking client.
• Add TLS 1.3 support when using native-tls backend.
• Fix redirect handling to strip sensitive headers when the scheme changes.
• Fix HTTP/3 happy-eyeball connection creation.
• Upgrade hickory-resolver to 0.26.

v0.13.3

Compare Source

• Fix CertificateRevocationList parsing of PEM values.
• Fix logging in resolver to only show host, not full URL.
• Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
• Fix HTTP/3 to handle STOP_SENDING as not an error.
• Fix HTTP/3 pool to remove timed out QUIC connections.
• Fix HTTP/3 connection establishment picking IPv4 and IPv6.
• Upgrade rustls-platform-verifier.
• (wasm) Only use wasm-bindgen on unknown-* targets.

serde-rs/serde (serde)

v1.0.229

Compare Source

• Update to syn 3

serde-rs/json (serde_json)

v1.0.151

Compare Source

• Add RawValue::from_string_unchecked (#​1331, thanks @​WonderLawrence)

v1.0.150

Compare Source

• Reject non-string enum object keys (#​1324, thanks @​puneetdixit200)

RustCrypto/hashes (sha2)

v0.11.0

Compare Source

launchbadge/sqlx (sqlx)

v0.9.0

Compare Source

Important Announcements

New Github Organization

Shortly after this release is published, the SQLx repository will be transferred to a new GitHub organization:
https://github.com/transact-rs/

This is because SQLx has not been owned or maintained by LaunchBadge, LLC. for a few years now, and has since been
informally transferred to the collective ownership of its principal authors. Moving the repository to a new
organization makes this change more clear, and also allows for potentially inviting outside collaborators.

Cargo.lock Removed from Tracking

The Cargo.lock has been removed from tracking in Git. CI should now always test with the latest versions of
all dependencies by default, alongside our pass that checks with cargo generate-lockfile -Z minimal-versions.

This should eliminate the need for any PRs that update dependencies to also update Cargo.lock or
contend with an endless stream of merge conflicts against it.

N.B. cargo install --locked sqlx-cli will no longer work. However, cargo install sqlx-cli has always
used the latest dependencies by default, ignoring the lockfile, so most users should not be affected. For users
requiring reproducible builds, consider maintaining your own lockfile instead; historically, we only ran cargo update
sporadically, so relying on SQLx's lockfile offered few guarantees anyway.

See the manual page for cargo install for details.

Breaking

As per our MSRV policy, the supported Rust version for this release cycle is 1.94.0.

• [#​3383]: feat: create sqlx.toml format [[@​abonander]]
  • SQLx and sqlx-cli now support per-crate configuration files (sqlx.toml)
  • New functionality includes, but is not limited to:
    • Rename DATABASE_URL for a crate (for multi-database workspaces)
    • Set global type overrides for the macros (supporting custom types)
    • Rename or relocate the _sqlx_migrations table (for multiple crates using the same database)
    • Set characters to ignore when hashing migrations (e.g. ignore whitespace)
  • More to be implemented in future releases.
  • Enable feature sqlx-toml to use.
    • sqlx-cli has it enabled by default, but sqlx does not.
    • Default features of library crates can be hard to completely turn off because of feature unification,
      so it's better to keep the default feature set as limited as possible.
      This is something we learned the hard way.
  • Guide: see sqlx::_config module in documentation.
  • Reference: [Link]
  • Examples (written for Postgres but can be adapted to other databases; PRs welcome!):
    • Multiple databases using DATABASE_URL renaming and global type overrides: [Link]
    • Multi-tenant database using _sqlx_migrations renaming and multiple schemas: [Link]
    • Force use of chrono when time is enabled (e.g. when using tower-sessions-sqlx-store): [Link]
      • Forcing bigdecimal when rust_decimal is enabled is also shown, but problems with chrono/time are more common.
  • Breaking changes:
    • Significant changes to the Migrate trait
    • sqlx::migrate::resolve_blocking() is now #[doc(hidden)] and thus SemVer-exempt.
• [#​3486]: fix(logs): Correct spelling of aquired_after_secs tracing field [[@​iamjpotts]]
  • Breaking behavior change: implementations parsing tracing logs from SQLx will need to update the spelling.
• [#​3495]: feat(postgres): remove lifetime from PgAdvisoryLockGuard [[@​bonsairobo]]
• [#​3526]: Return &mut Self from the migrator set_ methods [[@​nipunn1313]]
  • Minor breaking change: Migrator::set_ignore_missing and set_locking now return &mut Self instead of &Self
    which may break code in rare circumstances.
• [#​3541]: Postgres: force generic plan for better nullability inference. [[@​joeydewaal]]
  • Breaking change: may alter the output of the query!() macros for certain queries in Postgres.
• [#​3613]: fix: RawSql lifetime issues [[@​abonander]]
  • Breaking change: adds DB type parameter to all methods of RawSql
• [#​3670]: Bump ipnetwork to v0.21.1 [[@​BeauGieskens]]
• [#​3674]: Implement Decode, Encode and Type for Box, Arc, Cow and Rc [[@​joeydewaal]]
  • Breaking change: impl Decode for Cow now always decodes Cow::Owned, lifetime is unlinked
  • See this discussion for motivation: #​3674 (comment)
• [#​3723]: Add SqlStr [[@​joeydewaal]]
  • Breaking change: all query*() functions now take impl SqlSafeStr
    which is only implemented for &'static str and AssertSqlSafe.
    For all others, wrap in AssertSqlSafe(<query>).
  • This, along with [#​3960], finally allows returning owned queries as the type will be Query<'static, DB>.
  • SqlSafeStr trait is deliberately similar to std::panic::UnwindSafe,
    serving as a speedbump to warn users about naïvely building queries with format!()
    while allowing a workaround for advanced usage that is easy to spot on code review.
• [#​3800]: Escape PostgreSQL Options [[@​V02460]]
  • Breaking behavior change: options passed to PgConnectOptions::options() are now automatically escaped.
    Manual escaping of options is no longer necessary and may cause incorrect behavior.
• [#​3821]: Groundwork for 0.9.0-alpha.1 [[@​abonander]]
  • Increased MSRV to 1.86 and set rust-version
  • Deleted deprecated combination runtime+TLS features (e.g. runtime-tokio-native-tls)
  • Deleted re-export of unstable TransactionManager trait in sqlx.
    • Not technically a breaking change because it's #[doc(hidden)],
      but it will break SeaORM if not proactively fixed.
• [#​3924]: breaking(mysql): assume all non-binary collations compatible with str [[@​abonander]]
  • Text (or text-like) columns which previously were inferred to be Vec<u8> will be inferred to be String
    (this should ultimately fix more code than it breaks).
  • SET NAMES utf8mb4 COLLATE utf8_general_ci is no longer sent by default; instead, SET NAMES utf8mb4 is sent to
    allow the server to select the appropriate default collation (since this is version- and configuration-dependent).
  • MySqlConnectOptions::charset() and ::collation() now imply ::set_names(true) because they don't do anything otherwise.
  • Setting charset doesn't change what's sent in the Protocol::HandshakeResponse41 packet as that normally only
    matters for error messages before SET NAMES is sent.
    The default collation if set_names = false is utf8mb4_general_ci.
  • See this comment for details.
  • Incidental breaking change: RawSql::fetch_optional() now returns sqlx::Result<Option<DB::Row>>
    instead of sqlx::Result<DB::Row>. Whoops.
• [#​3928]: breaking(sqlite): libsqlite3-sys versioning, feature flags, safety changes [[@​abonander]]
  • SemVer policy changes: libsqlite3-sys version is now specified using a range.
    The maximum of the range may now be increased in any backwards-compatible release.
    The minimum of the range may only be increased in major releases.
    If you have libsqlite3-sys in your dependencies, Cargo should choose a compatible version automatically.
    If otherwise unconstrained, Cargo should choose the latest version supported.
  • SQLite extension loading (including through the new sqlx-toml feature) is now unsafe.
  • Added new non-default features corresponding to conditionally compiled SQLite APIs:
    • sqlite-deserialize enabling SqliteConnection::serialize() and SqliteConnection::deserialize()
    • sqlite-load-extension enabling SqliteConnectOptions::extension() and ::extension_with_entrypoint()
    • sqlite-unlock-notify enables internal use of sqlite3_unlock_notify()
  • SqliteValue and SqliteValueRef changes:
    • The sqlite3_value* interface reserves the right to be stateful.
      Without protection, any call could theoretically invalidate values previously returned, leading to dangling pointers.
    • SqliteValue is now !Sync and SqliteValueRef is !Send to prevent data races from concurrent accesses.
      • Instead, clone or wrap the SqliteValue in Mutex, or convert the SqliteValueRef to an owned value.
    • SqliteValue and any derived SqliteValueRefs now internally track if that value has been used to decode a
      borrowed &[u8] or &str and errors if it's used to decode any other type.
    • This is not expected to affect the vast majority of usages, which should only decode a single type
      per SqliteValue/SqliteValueRef.
    • See new docs on SqliteValue for details.
• [#​3949]: Postgres: move PgLTree::from to From<Vec<PgLTreeLabel>> implementation [[@​JerryQ17]]
• [#​3957]: refactor(sqlite): do not borrow bound values, delete lifetime on SqliteArguments [[@​iamjpotts]]
• [#​3958]: refactor(any): Remove lifetime parameter from AnyArguments [[@​iamjpotts]]
• [#​3960]: refactor(core): Remove lifetime parameter from Arguments trait [[@​iamjpotts]]
• [#​3993]: Unescape PostgreSQL passfile password [[@​V02460]]
  • Previously, .pgpass file handling did not process backslash-escapes in the password part.
    Now it does, which may change what password is sent to the server.
• [#​4008]: make #[derive(sqlx::Type)] automatically generate impl PgHasArrayType by default for newtype structs [[@​papaj-na-wrotkach]]
  • Manual implementations of PgHasArrayType for newtypes will conflict with the generated one.
    Delete the manual impl or add #[sqlx(no_pg_array)] where conflicts occur.
• [#​4077]: breaking: make offline optional to allow building without serde [[@​CathalMullan]]
• [#​4094]: Bump bit-vec to v0.8 [[@​zennozenith]]
• [#​4142]: feat(mysql): add mysql-rsa feature for non-TLS RSA auth [[@​dertin]]
  • Connections requiring RSA password encryption now need to enable the mysql-rsa feature
    or an error will be generated at runtime. RSA encryption is only used for plaintext (non-TLS) connections.
• [#​4255]: breaking(any+mysql): correctly convert text and blob types to AnyTypeInfo [[@​abonander]]

Added

• [#​3641]: feat(Postgres): support nested domain types [[@​joeydewaal]]
• [#​3651]: Add PgBindIter for encoding and use it as the implementation encoding &[T] [[@​tylerhawkes]]
• [#​3675]: feat: implement Encode, Decode, Type for Arc<str> and Arc<[u8]> (and Rc equivalents) [[@​joeydewaal]]
• [#​3791]: Smol+async global executor 1.80 dev [[@​martin-kolarik]]
  • Adds runtime-smol and runtime-async-global-executor features to replace usages of the deprecated async-std crate.
• [#​3859]: Add more JsonRawValue encode/decode impls. [[@​Dirbaio]]
• [#​3881]: CLi: made cli-lib modules publicly available for other crates [[@​silvestrpredko]]
• [#​3889]: Compile-time support for external drivers [[@​bobozaur]]
• [#​3917]: feat(sqlx.toml): support SQLite extensions in macros and sqlx-cli [[@​djarb]]
• [#​3918]: Feature: Add exclusion violation error kind [[@​barskern]]
• [#​3971]: Allow single-field named structs to be transparent [[@​Xiretza]]
• [#​4015]: feat(sqlite): no_tx migration support [[@​AlexTMjugador]]
• [#​4020]: Add Migrator::with_migrations() constructor [[@​xb284524239]]
• [#​3846]: Add the possibility to skip migrations [[@​Dosenpfand]]
• [#​4107]: Add SQLite extension entrypoint config to sqlx.toml, update SQLite extension example [[@​supleed2]]
• [#​4118]: [postgres] Display line number in error message [[@​mousetail]]
• [#​4123]: feat: add Json::into_inner() [[@​chrxn1c]]
• [#​4153]: Add on unimplemented diagnostic to SqlStr [[@​joeydewaal]]
• [#​4167]: add sqlite serialize/deserialize example [[@​mattrighetti]]
• [#​4228]: sqlx-postgres: Make PgNotification struct clone [[@​michaelvanstraten]]

Changed

• [#​3525]: Remove unnecessary boxfutures [[@​joeydewaal]]
• [#​3867]: sqlx-postgres: Bump etcetera to 0.10.0 [[@​miniduikboot]]
• [#​3709]: chore: replace once_cell OnceCell/Lazy with std OnceLock/LazyLock [[@​paolobarbolini]]
• [#​3890]: feat: Unify Debug implementations across PgRow, MySqlRow and SqliteRow [[@​davidcornu]]
• [#​3911]: chore: upgrade async-io to v2.4.1 [[@​zebrapurring]]
• [#​3938]: Move QueryLogger back [[@​joeydewaal]]
• [#​3956]: chore(sqlite): Remove unused test of removed git2 feature [[@​iamjpotts]]
• [#​3962]: Give SQLX_OFFLINE_DIR from environment precedence in macros [[@​psionic-k]]
• [#​3968]: chore(ci): Add timeouts to ci jobs [[@​iamjpotts]]
• [#​4002]: sqlx-postgres(tests): cleanup 2 unit tests. [[@​joeydewaal]]
• [#​4022]: refactor: tweaks after #​3791 [[@​abonander]]
• [#​4257]: Prefer to give real data to .bind() in README.md [[@​sobolevn]]
• [#​4042]: Update to webpki-roots 1 [[@​tottoto]]
• [#​4072]: chore: update hashlink to v0.11.0 [[@​anmolitor]]
• [#​4143]: Bump whoami to v2 [[@​tisonkun]]
• [#​4161]: sqlx-sqlite: relax libsqlite3-sys constraint to allow 0.36.x [[@​darioAnongba]]
• [#​4173]: ci: check direct minimal versions [[@​ricochet]]
  • Note: reverted in 0.9.0 release but still listed for contributor credit. See end of PR thread for details.
• [#​4189]: Bump flume to 0.12.0 [[@​opoplawski]]
• [#​4223]: test(sqlite): add regression test for ORDER BY + LIMIT nullability (#​4147) [[@​barry3406]]
• [#​4230]: chore: Update to cargo_metadata 0.23 [[@​tottoto]]
• [#​4233]: Change reference to dotenvy [[@​graemer957]]
• [#​4235]: chore: Update to validator 0.20 [[@​tottoto]]
• [#​4253]: chore: update example to axum 0.8 [[@​tottoto]]
• Release PR:
  • Upgraded all Rust-Crypto crates, rand
  • Upgraded etcetera to 0.11.0
  • Increased max of libsqlite3-sys version range to <0.38.0

Fixed

• [#​3840]: Fix docs.rs build of sqlx-sqlite [[@​gferon]]
• [#​3848]: fix(macros): don't mutate environment variables [[@​joeydewaal]]
• [#​3856]: fix(macros): slightly improve unsupported type error message [[@​dyc3]]
• [#​3857]: fix(mysql): validate parameter count for prepared statements [[@​cvzx]]
• [#​3861]: Fix NoHostnameTlsVerifier for rustls 0.23.24 and above [[@​elichai]]
• [#​3863]: Use unnamed statement in pg when not persistent [[@​ThomWright]]
• [#​3874]: Further reduce dependency on futures and futures-util [[@​paolobarbolini]]
• [#​3886]: fix: use Executor::fetch in QueryAs::fetch [[@​bobozaur]]
• [#​3910]: feat(ok): add correct handling of ok packets in MYSQL implementation [[@​0xfourzerofour]]
• [#​3914]: fix: regenerate test certificates [[@​abonander]]
• [#​3915]: fix: spec_error is used by try_from derive [[@​saiintbrisson]]
• [#​3919]: fix[sqlx-postgres]: do a checked_mul to prevent panic'ing [[@​nhatcher-frequenz]]
• [#​3923]: sqlx-mysql: Fix bug in cleanup test db's. [[@​joeydewaal]]
• [#​3950]: chore: Fix warnings for custom postgres_## cfg flags [[@​iamjpotts]]
• [#​3952]: Pool.close: close all connections before returning [[@​jpmelos]]
• [#​3975]: fix documentation for rustls native root certificates [[@​2ndDerivative]]
• [#​3977]: refactor(ci): Use separate job for postgres ssl auth tests [[@​iamjpotts]]
• [#​3980]: Correctly ROLLBACK transaction when dropped during BEGIN. [[@​kevincox]]
• [#​3981]: SQLite: fix transaction level accounting with bad custom command. [[@​kevincox]]
• [#​3986]: chore(core): Fix docstring for Query::try_bind [[@​iamjpotts]]
• [#​3987]: chore(deps): Resolve deprecation warning for chrono Date and ymd methods [[@​iamjpotts]]
• [#​3988]: refactor(sqlite): Resolve duplicate test target warning for macros.rs [[@​iamjpotts]]
• [#​3989]: chore(deps): Set default-features=false on sqlx in workspace.dependencies [[@​iamjpotts]]
• [#​3991]: fix(sqlite): regression when decoding nulls [[@​abonander]]
• [#​4006]: PostgreSQL SASL – run SHA256 in a blocking executor [[@​ThomWright]]
• [#​4007]: fix(compose): use OS-assigned ports for all conatiners [[@​papaj-na-wrotkach]]
• [#​4009]: Drop cached db connections in macros upon hitting an error [[@​swlynch99]]
• [#​4024]: fix(sqlite) Migrate revert with no-transaction [[@​Dosenpfand]]
• [#​4027]: native tls handshake: build TlsConnector in blocking threadpool [[@​daviduebler]]
• [#​4053]: fix(macros): smarter .env loading, caching, and invalidation [[@​abonander]]
  • Additional credit to [[@​AlexTMjugador]] ([#​4018]) and [[@​Diggsey]] ([#​4039]) for their proposed solutions
    which served as a useful comparison.
• [#​4068]: Fix typo in migration example from 'uesrs' to 'users' [[@​squidpickles]]
• [#​4069]: fix some spelling issues [[@​joeydewaal]]
• [#​4086]: fix(mysql): Work around for Issue #​2206 (ColumnNotFound error when querying) [[@​duelafn]]
• [#​4088]: (Fix) Handle nullability of SQLite rowid alias columns [[@​Lege19]]
• [#​4100]: postgres: update pgpass path on windows [[@​joeydewaal]]
• [#​4134]: fix CI: replace removed macOS runner, deprecated use of Command::cargo_bin() [[@​abonander]]
• [#​4136]: Ensure Deterministic Migration Order [[@​aoengin]]
• [#​4158]: Fix panic in JSONB decoder on invalid version byte [[@​jrey8343]]
• [#​4165]: sqlx-postgres: fix correct operator precedence in byte length check [[@​cuiweixie]]
• [#​4171]: fix(postgres): remove home crate in favor of std::env::home_dir [[@​ricochet]]
• [#​4172]: fix(sqlx-cli): bump openssl minimum to 0.10.46 [[@​ricochet]]
• [#​4176]: fix(mysql): return error instead of panic on truncated OK packet [[@​cvzx]]
• [#​4199]: fix(postgres): make advisory lock cancel safe [[@​joeydewaal]]
• [#​4201]: Fix SCRAM password SASLprep [[@​var4yn]]
• [#​4202]: fix: replace from_utf8_unchecked with from_utf8_lossy in SqliteError [[@​joaquinhuigomez]]
• [#​4203]: fix: use sqlite3_value_text for REGEXP to match SQLite coercion [[@​joaquinhuigomez]]
• [#​4219]: sqlite: lossily coerce invalid UTF-8 in custom collation callback [[@​joaquinhuigomez]]
• [#​4221]: fix: replace from_utf8_unchecked with from_utf8 in SQLite column name handling [[@​barry3406]]
• [#​4226]: fix(postgres): use non-prepared statements for metadata queries [[@​abonander]]
• [#​4227]: fix(macros-core): update unstable proc_macro APIs for recent nightly [[@​barry3406]]
• [#​4234]: fix: Use correct path in error when failing to create tmp dir in prepare [[@​Miesvanderlippe]]
• [#​4245]: fix(mysql): repair caching_sha2_password fast-auth path [[@​altmannmarcelo]]
• [#​4251]: fix(tls): potential deadlock in StdSocket::poll_ready() [[@​abonander]]

statrs-dev/statrs (statrs)

v0.19.0

Compare Source

Added

• Add initial no_std support
• gate density estimation behind a "kde" feature
• add first implementation of kernel density estimation.
• add bandwith support for knn density estimation.
• add a more generic implementation of knn density estimation.
• add knn density estimation with kdtree rs tree.
• add OnlineMoments accumulator using Welford
• Add WebAssembly RNG support and update nalgebra
• (distribution) narrow error type to avoid trait object
• (distribution) add non-panicking try_inverse_cdf
• autofix.ci for lint and fmt
• (geometric) finer panic bounds
• (function) add comprehensive kernel suite for KDE and smoothing (#​193)
• update to 2024 edition, apply formatting and fix new clippy lints
• [breaking] rely on prec module for precision needs and consts for math constants
• use crate::prec macro assertions in tests instead of approx directly
• (prec) write macros that delegate to approx using our defaults
• add std feature
• rename cov_chol_decomp to clone_cov_chol_decomp and return a cloned matrix
• add methods for covariance decomposition, mean, covariance, and precision in MultivariateNormal
• add accessor methods to various distribution
• (stats_tests) implement KS test
• enhance Levy distribution with comprehensive documentation and methods
• add Levy distribution
• (stats_tests) implement chisquare
• (stats_tests) implement skewtest
• (stats_tests) implement mannwhitneyu
• (stats_tests) implement ttest_onesample
• (stats_tests) implement f_oneway

Fixed

• format assertion message with precision
• fail autofix when clippy --fix can't clear every lint
• drop PAT from autofix-ci.yml
• make autofix clippy match other parts of ci
• Automate MSRV lockfile updates
• update to rand 0.10 and use seeded rng for tests
• fix imports and add some tests.
• kernel density computation.
• drop excess precision requirements
• wrap online stats with iter_statistics for #​376
• Refresh MSRV lockfile
• Leave getrandom backend selection to applications
• Use valid order statistics benchmark inputs
• correct entropy formulas for Pareto, Geometric, StudentsT, and Dirichlet
• safeguard Gamma::inverse_cdf Newton step for shape < 1
• compute Multinomial pmf/ln_pmf in log space to avoid NaN for large n
• post updates to rand
• update usage after rand dep update
• restore missing normalization of Dirichlet samples
• unblock PR 364 CI
• remove unused testing imports
• use core instead of std in KDE
• (fmt) apply 2024 formatting to KDE
• (clippy) use constants provided by core
• (clippy) fix clippy failures in CI
• (distribution_tests) pass if only one numerical relationship between pdf and cdf numerically close
• change tests to rely on relative precision for math lib independence
• Gate some stats_tests behind std feature
• Use core over std where possible
• update examples in mu and cov methods to use correct types from nalgebra
• exact implementation of Bernoulli cdf
• one more condition in inverse_cdf to account for small enough probabilities.
• feature gate exact KS test one-sample method

Other

• add some geometric pathological tests
• enable autofix to use same clippy as other ci
• Verify df one density integral
• Cover chi-squared boundary behavior
• update lock MSRV for kde deps change
• module docs and feature doc
• add paper reference and simple usage docs
• document DensityError variants and mark non_exhaustive
• add use of one dimensional gaussian kernel function.
• density functions borrowing evaluation pointS instead of owning them.
• some refactoring.
• add performance bench.
• add performance bench.
• [autofix.ci] apply automated fixes
• sample Multinomial via sequential conditional Binomial instead of categorical-style draw-and-scan
• add characterization tests for Multinomial::sample before algorithm change
• share binary-search lookup between Categorical::sample and inverse_cdf
• derive Categorical::sf from cdf instead of storing it
• Categorical now stores normalized values
• Update dependencies and GitHub Actions
• Converge the default continuous inverse_cdf
• Align autofix toolchain with MSRV
• Cover geometric inverse CDF overflow guards
• how to release
• wire up release-plz for crates.io publishing

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.