chore(deps): bump reqwest from 0.13.4 to 0.13.5 in /src-tauri - #341
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 6589f62cd0
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| [[package]] | ||
| name = "reqwest" | ||
| version = "0.13.4" | ||
| version = "0.13.5" |
There was a problem hiding this comment.
This version bump also introduces base64 0.23.1, but THIRD_PARTY_LICENSES_RUST.txt still lists only reqwest 0.13.4 and the older base64 versions. Consequently, the unconditional node scripts/check-dependency-inventory.mjs --rust CI step will report both new components as missing, and packaged installers would retain stale dependency notices. Regenerate and commit the Rust license inventory alongside the lockfile.
AGENTS.md reference: AGENTS.md:L198-L199
Useful? React with 👍 / 👎.
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.13.4 to 0.13.5. - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.4...v0.13.5) --- updated-dependencies: - dependency-name: reqwest dependency-version: 0.13.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
6589f62 to
7ae7c9e
Compare
|
Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits. |
|
Superseded by #386, which consolidates this bump with the other seven Dependabot PRs into a single change. Consolidating means the license regeneration and the compatibility-surface reseal happen once rather than eight times — and each of these PRs would have gone stale the moment any other landed, since they all touch pinned files. The same version bump is carried in #386 with no change to what is being updated. Closing as superseded, not rejected. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps reqwest from 0.13.4 to 0.13.5.
Release notes
Sourced from reqwest's releases.
Changelog
Sourced from reqwest's changelog.
Commits
de55373v0.13.54d3fe12fix: proxy could use wrong credentials if many matched (#3098)9f06fd2docs: improve description of JSON method (#3082)5bdb2f0perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...ffda263perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...4e9a3c7chore: add pull request template for human-written content17e9bcbchore(deps): upgrade base64 to 0.23 (#3074)221abe9chore: Remove unnecessary clones and a cast (#3071)99996a1fix(error): detect timeouts wrapped in body decode errors (#3064)fc99bd5feat: expose the negotiated TLS version viaTlsInfo(#3067)