build(deps): bump the prod group with 3 updates

[dependabot]

Bumps the prod group with 3 updates: serde, inferno and hyper.

Updates serde from 1.0.192 to 1.0.193

Release notes

Sourced from serde's releases.

v1.0.193

• Fix field names used for the deserialization of RangeFrom and RangeTo (#2653, #2654, #2655, thanks @​emilbonnek)

Commits

• 44613c7 Release 1.0.193
• c706281 Merge pull request #2655 from dtolnay/rangestartend
• 65d75b8 Add RangeFrom and RangeTo tests
• 332b0cb Merge pull request #2654 from dtolnay/rangestartend
• 8c4af41 Fix more RangeFrom / RangeEnd mixups
• 24a78f0 Merge pull request #2653 from emilbonnek/fix/range-to-from-de-mixup
• c91c334 Fix Range{From,To} deserialize mixup
• 2083f43 Update ui test suite to nightly-2023-11-19
• See full diff in compare view

Updates inferno from 0.11.18 to 0.11.19

Changelog

Sourced from inferno's changelog.

[0.11.19] - 2023-11-25

Changed

• By default, make cargo install strip all binaries. #310

Commits

• 1b61f2e Release 0.11.19 with stripped binaries
• d877809 Strip symbols of inferno binaries to decrease size by 24x (#310)
• 86131d4 Fix future-incompat
• See full diff in compare view

Updates hyper from 0.14.27 to 1.0.1

Release notes

Sourced from hyper's releases.

v1.0.1

This release "fixes" or adds a few things that should have been in 1.0.0, but were forgotten. Thus, it includes additions that would normally be a semver-minor release, but because it is so close to 1.0.0, it is released as a patch version.

Bug Fixes

• rt: implement Read/Write for Pin (#3413) (dd6d81ca, closes #3412)

Features

• rt: Make ReadBuf::new public (7161f562)

Breaking Changes

• Pin is #[fundamental], so providing a Read/Write impl for it theoretically conflicts with existing user Read/Write for Pin impls. However, those impls probably don't exist yet. (dd6d81ca)

New Contributors

• @​coolreader18 made their first contribution in hyperium/hyper#3413

v1.0.0

Be sure to checkout the upgrading guide!

Features

• client: allow !Send IO with HTTP/1 client (#3371) (cf87eda8, closes #3363)
• error:
  • Error::source() is purposefully unspecified (#3318) (502a6450, closes #2843)
  • change Display for Error to only print top error (#3312) (50f123af, closes #2844)
• ext:
  • make ReasonPhrase::from_static a const fn (d4a61e3d)
  • remove ReasonPhrase::from_bytes_unchecked() method (4021c57b)
• lib:
  • update to http 1.0 (899e92a5)
  • missing Timer will warn or panic (f3308c04, closes #3393)
  • increase MSRV to 1.63 (#3293) (e68dc961)
• rt: rename to Http2ClientConnExec and Http2ServerConnExec (52b27faa)
• server: default http1 header_read_timeout to 30 seconds (8bf26d1e)
• upgrade: introduce tracing as an optional unstable feature (#3326) (da3fc76c, closes #3319)

Bug Fixes

• client:
  • avoid double-polling a Select future (#3290) (fece9f7f, closes #3289)
  • early server response shouldn't propagate NO_ERROR (#3275) (194e6f98, closes #2872)
  • remove Send bounds for request Body (#3266) (4ace340b, closes #3184)
• ffi: fix deadlock in hyper_executor::poll_next (#3370) (0c7d03ef, closes #3369)

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.0.1 (2023-11-16)

This release "fixes" or adds a few things that should have been in 1.0.0, but were forgotten. Thus, it includes additions that would normally be a semver-minor release, but because it is so close to 1.0.0, it is released as a patch version.

Bug Fixes

• rt: implement Read/Write for Pin (#3413) (dd6d81ca, closes #3412)

Features

• rt: Make ReadBuf::new public (7161f562)

Breaking Changes

• Pin is #[fundamental], so providing a Read/Write impl for it theoretically conflicts with existing user Read/Write for Pin impls. However, those impls probably don't exist yet. (dd6d81ca)

v1.0.0 (2023-11-15)

Be sure to check out the upgrading guide.

Bug Fixes

• client:
  • avoid double-polling a Select future (#3290) (fece9f7f, closes #3289)
  • early server response shouldn't propagate NO_ERROR (#3275) (194e6f98, closes #2872)
  • remove Send bounds for request Body (#3266) (4ace340b, closes #3184)
• ffi: fix deadlock in hyper_executor::poll_next (#3370) (0c7d03ef, closes #3369)
• http2:
  • don't send keep-alive ping when idle (#3381) (429ad8a3)
  • change default server max concurrent streams to 200 (#3362) (dd638b5b, closes #3358)
• server: Respect Expect header only when http proto > 1.0 (#3294) (43d2f5c6)

Features

• client: allow !Send IO with HTTP/1 client (#3371) (cf87eda8, closes #3363)
• error:
  • Error::source() is purposefully unspecified (#3318) (502a6450, closes #2843)
  • change Display for Error to only print top error (#3312) (50f123af, closes #2844)
• ext:
  • make ReasonPhrase::from_static a const fn (d4a61e3d)
  • remove ReasonPhrase::from_bytes_unchecked() method (4021c57b)
• lib:
  • update to http 1.0 (899e92a5)

... (truncated)

Commits

• 2954280 v1.0.1
• 7161f56 feat(rt): Make ReadBuf::new public
• b855475 refactor(proto): use derive macro to implement Default for KA
• 823d2cb refactor(lib): remove redundant field name
• 33e1cbe refactor(lib): remove unneeded return
• b7e8f88 refactor(lib): remove unused cfg condition
• dd6d81c fix(rt): implement Read/Write for Pin<P> (#3413)
• a475ada docs(examples): update dependencies section
• f1bb2aa chore(ci): add minimal versions checking
• 931aee7 chore(dependencies): relax minimum tokio version to 1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[arya2]

jsonrpc-http-server hasn't upgraded its version of hyper yet, Zebra still needs to use the Body enum definition from hyper 0.14.x to implement the middleware trait.

Issue #8008 #7997 is for upgrading hyper later.

[teor2345]

jsonrpc-http-server hasn't upgraded its version of hyper yet, Zebra still needs to use the Body enum definition from hyper 0.14.x to implement the middleware trait.

Issue #8008 #7997 is for upgrading hyper later.

@arya2 let's put hyper on the dependabot reject list until that ticket is done?

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.