[PR #105] [MERGED] chore(deps): bump tracing-subscriber from 0.3.6 to 0.3.7 #746

Closed
opened 2026-01-05 14:52:49 +01:00 by adam · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/LGUG2Z/komorebi/pull/105
Author: @dependabot[bot]
Created: 2/1/2022
Status: Merged
Merged: 2/1/2022
Merged by: @LGUG2Z

Base: masterHead: dependabot/cargo/tracing-subscriber-0.3.7


📝 Commits (1)

  • d9a31d3 chore(deps): bump tracing-subscriber from 0.3.6 to 0.3.7

📊 Changes

1 file changed (+6 additions, -6 deletions)

View changed files

📝 Cargo.lock (+6 -6)

📄 Description

Bumps tracing-subscriber from 0.3.6 to 0.3.7.

Release notes

Sourced from tracing-subscriber's releases.

tracing-subscriber 0.3.7

This release adds combinators for combining filters.

Additionally, this release also updates the thread-local crate to v1.1.4, fixing warnings for the security advisory RUSTSEC-2022-0006. Note that previous versions of tracing-subscriber did not use any of the thread-local crate's APIs effected by the vulnerability. However, updating the version fixes warnings emitted by cargo audit and similar tools.

Added

  • filter: Added combinators for combining filters (#1578)

Fixed

  • registry: Updated thread-local to v1.1.4 (#1858)

Thanks to new contributor @​matze for contributing to this release!

#1578: tokio-rs/tracing#1578 #1858: tokio-rs/tracing#1858

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/LGUG2Z/komorebi/pull/105 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/1/2022 **Status:** ✅ Merged **Merged:** 2/1/2022 **Merged by:** [@LGUG2Z](https://github.com/LGUG2Z) **Base:** `master` ← **Head:** `dependabot/cargo/tracing-subscriber-0.3.7` --- ### 📝 Commits (1) - [`d9a31d3`](https://github.com/LGUG2Z/komorebi/commit/d9a31d371c03b68626cb4bd0b30667c679c201d4) chore(deps): bump tracing-subscriber from 0.3.6 to 0.3.7 ### 📊 Changes **1 file changed** (+6 additions, -6 deletions) <details> <summary>View changed files</summary> 📝 `Cargo.lock` (+6 -6) </details> ### 📄 Description Bumps [tracing-subscriber](https://github.com/tokio-rs/tracing) from 0.3.6 to 0.3.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tokio-rs/tracing/releases">tracing-subscriber's releases</a>.</em></p> <blockquote> <h2>tracing-subscriber 0.3.7</h2> <p>This release adds combinators for combining filters.</p> <p>Additionally, this release also updates the <code>thread-local</code> crate to v1.1.4, fixing warnings for the security advisory <a href="https://rustsec.org/advisories/RUSTSEC-2022-0006">RUSTSEC-2022-0006</a>. Note that previous versions of <code>tracing-subscriber</code> did not use any of the <code>thread-local</code> crate's APIs effected by the vulnerability. However, updating the version fixes warnings emitted by <code>cargo audit</code> and similar tools.</p> <h3>Added</h3> <ul> <li><strong>filter</strong>: Added combinators for combining filters (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1578">#1578</a>)</li> </ul> <h3>Fixed</h3> <ul> <li><strong>registry</strong>: Updated <code>thread-local</code> to v1.1.4 (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1858">#1858</a>)</li> </ul> <p>Thanks to new contributor <a href="https://github.com/matze"><code>@​matze</code></a> for contributing to this release!</p> <p><a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1578">#1578</a>: <a href="https://github-redirect.dependabot.com/tokio-rs/tracing/pull/1578">tokio-rs/tracing#1578</a> <a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1858">#1858</a>: <a href="https://github-redirect.dependabot.com/tokio-rs/tracing/pull/1858">tokio-rs/tracing#1858</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tokio-rs/tracing/commit/24ee184dc79379fafbcf0681508d1019be1853fe"><code>24ee184</code></a> subscriber: prepare to release v0.3.7 (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1860">#1860</a>)</li> <li><a href="https://github.com/tokio-rs/tracing/commit/dc546ebff2a665b2ae0e481d138531c5320f2e2b"><code>dc546eb</code></a> subscriber: update thread_local to 1.1.4 (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1858">#1858</a>)</li> <li><a href="https://github.com/tokio-rs/tracing/commit/5ddbd4efd227ec73eb59ca87079757efe75f399d"><code>5ddbd4e</code></a> subscriber: add combinators for combining filters (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1578">#1578</a>)</li> <li><a href="https://github.com/tokio-rs/tracing/commit/5d086345018d66ffce35cbdb84b0ecd31f6c40fd"><code>5d08634</code></a> core: add initial support for <code>valuable</code> field values (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1608">#1608</a>)</li> <li><a href="https://github.com/tokio-rs/tracing/commit/71fc562f324566ff460bf489f415afaad81e76e2"><code>71fc562</code></a> appender: bump MSRV to 1.53.0 (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1851">#1851</a>)</li> <li><a href="https://github.com/tokio-rs/tracing/commit/af254a172f3a1012aa38ce25fe080d5cfb41465a"><code>af254a1</code></a> journald: prepare to release 0.2.2 (<a href="https://github-redirect.dependabot.com/tokio-rs/tracing/issues/1838">#1838</a>)</li> <li>See full diff in <a href="https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.6...tracing-subscriber-0.3.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tracing-subscriber&package-manager=cargo&previous-version=0.3.6&new-version=0.3.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
adam added the pull-request label 2026-01-05 14:52:49 +01:00
adam closed this issue 2026-01-05 14:52:49 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/komorebi#746