This release adds combinators for combining filters.
Additionally, this release also updates the thread-local crate to v1.1.4,
fixing warnings for the security advisory RUSTSEC-2022-0006. Note that
previous versions of tracing-subscriber did not use any of the thread-local
crate's APIs effected by the vulnerability. However, updating the version fixes
warnings emitted by cargo audit and similar tools.
Added
filter: Added combinators for combining filters (#1578)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/LGUG2Z/komorebi/pull/105
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 2/1/2022
**Status:** ✅ Merged
**Merged:** 2/1/2022
**Merged by:** [@LGUG2Z](https://github.com/LGUG2Z)
**Base:** `master` ← **Head:** `dependabot/cargo/tracing-subscriber-0.3.7`
---
### 📝 Commits (1)
- [`d9a31d3`](https://github.com/LGUG2Z/komorebi/commit/d9a31d371c03b68626cb4bd0b30667c679c201d4) chore(deps): bump tracing-subscriber from 0.3.6 to 0.3.7
### 📊 Changes
**1 file changed** (+6 additions, -6 deletions)
<details>
<summary>View changed files</summary>
📝 `Cargo.lock` (+6 -6)
</details>
### 📄 Description
Bumps [tracing-subscriber](https://github.com/tokio-rs/tracing) from 0.3.6 to 0.3.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/tokio-rs/tracing/releases">tracing-subscriber's releases</a>.</em></p>
<blockquote>
<h2>tracing-subscriber 0.3.7</h2>
<p>This release adds combinators for combining filters.</p>
<p>Additionally, this release also updates the <code>thread-local</code> crate to v1.1.4,
fixing warnings for the security advisory <a href="https://rustsec.org/advisories/RUSTSEC-2022-0006">RUSTSEC-2022-0006</a>. Note that
previous versions of <code>tracing-subscriber</code> did not use any of the <code>thread-local</code>
crate's APIs effected by the vulnerability. However, updating the version fixes
warnings emitted by <code>cargo audit</code> and similar tools.</p>
<h3>Added</h3>
<ul>
<li><strong>filter</strong>: Added combinators for combining filters (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1578">#1578</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li><strong>registry</strong>: Updated <code>thread-local</code> to v1.1.4 (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1858">#1858</a>)</li>
</ul>
<p>Thanks to new contributor <a href="https://github.com/matze"><code>@matze</code></a> for contributing to this release!</p>
<p><a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1578">#1578</a>: <a href="https://github-redirect.dependabot.com/tokio-rs/tracing/pull/1578">tokio-rs/tracing#1578</a>
<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1858">#1858</a>: <a href="https://github-redirect.dependabot.com/tokio-rs/tracing/pull/1858">tokio-rs/tracing#1858</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/tokio-rs/tracing/commit/24ee184dc79379fafbcf0681508d1019be1853fe"><code>24ee184</code></a> subscriber: prepare to release v0.3.7 (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1860">#1860</a>)</li>
<li><a href="https://github.com/tokio-rs/tracing/commit/dc546ebff2a665b2ae0e481d138531c5320f2e2b"><code>dc546eb</code></a> subscriber: update thread_local to 1.1.4 (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1858">#1858</a>)</li>
<li><a href="https://github.com/tokio-rs/tracing/commit/5ddbd4efd227ec73eb59ca87079757efe75f399d"><code>5ddbd4e</code></a> subscriber: add combinators for combining filters (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1578">#1578</a>)</li>
<li><a href="https://github.com/tokio-rs/tracing/commit/5d086345018d66ffce35cbdb84b0ecd31f6c40fd"><code>5d08634</code></a> core: add initial support for <code>valuable</code> field values (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1608">#1608</a>)</li>
<li><a href="https://github.com/tokio-rs/tracing/commit/71fc562f324566ff460bf489f415afaad81e76e2"><code>71fc562</code></a> appender: bump MSRV to 1.53.0 (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1851">#1851</a>)</li>
<li><a href="https://github.com/tokio-rs/tracing/commit/af254a172f3a1012aa38ce25fe080d5cfb41465a"><code>af254a1</code></a> journald: prepare to release 0.2.2 (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1838">#1838</a>)</li>
<li>See full diff in <a href="https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.6...tracing-subscriber-0.3.7">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/LGUG2Z/komorebi/pull/105
Author: @dependabot[bot]
Created: 2/1/2022
Status: ✅ Merged
Merged: 2/1/2022
Merged by: @LGUG2Z
Base:
master← Head:dependabot/cargo/tracing-subscriber-0.3.7📝 Commits (1)
d9a31d3chore(deps): bump tracing-subscriber from 0.3.6 to 0.3.7📊 Changes
1 file changed (+6 additions, -6 deletions)
View changed files
📝
Cargo.lock(+6 -6)📄 Description
Bumps tracing-subscriber from 0.3.6 to 0.3.7.
Release notes
Sourced from tracing-subscriber's releases.
Commits
24ee184subscriber: prepare to release v0.3.7 (#1860)dc546ebsubscriber: update thread_local to 1.1.4 (#1858)5ddbd4esubscriber: add combinators for combining filters (#1578)5d08634core: add initial support forvaluablefield values (#1608)71fc562appender: bump MSRV to 1.53.0 (#1851)af254a1journald: prepare to release 0.2.2 (#1838)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.