Skip to content

Bump tempfile from 3.26.0 to 3.27.0#7

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/tempfile-3.27.0
Closed

Bump tempfile from 3.26.0 to 3.27.0#7
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/tempfile-3.27.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 30, 2026

Bumps tempfile from 3.26.0 to 3.27.0.

Changelog

Sourced from tempfile's changelog.

3.27.0

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

  1. TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
  2. The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @​meng-xu-cs for reporting this issue.

Commits
  • 5c8fa12 chore: release 3.27.0
  • e34e574 test: disable uds conflict test on redox
  • 772c795 test: add CWD guards
  • 2632fb9 fix: resolve relative paths when constructing TempPath
  • See full diff in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Mar 30, 2026
FrogSnot added a commit that referenced this pull request Apr 8, 2026
Dependencies updated:
- rand 0.8 -> 0.10 (thread_rng() -> rng(), RngCore -> Rng)
- indicatif 0.17 -> 0.18
- criterion 0.5 -> 0.8 (black_box -> std::hint::black_box)
- sha2 0.10 -> 0.11
- libc 0.2.182 -> 0.2.184
- tar 0.4.44 -> 0.4.45
- clap 4.5.60 -> 4.6.0
- tempfile 3.26.0 -> 3.27.0

Code changes:
- Migrate rand API (5 call sites across engine, archive, tests, benches)
- Fix clippy::needless_borrows_for_generic_args in tests
- Use std::hint::black_box instead of deprecated criterion::black_box
- Update README rand references

Closes #1, #2, #3, #4, #5, #7, #9, #11, #12, #13
Supersedes #6 (replaced by #12)
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.26.0 to 3.27.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](Stebalien/tempfile@v3.26.0...v3.27.0)

---
updated-dependencies:
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/tempfile-3.27.0 branch from 63a9993 to e7cb48d Compare April 8, 2026 22:42
@FrogSnot
Copy link
Copy Markdown
Owner

FrogSnot commented Apr 8, 2026

Included in v1.0.3.

@FrogSnot FrogSnot closed this Apr 8, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 8, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/cargo/tempfile-3.27.0 branch April 8, 2026 22:43
FrogSnot added a commit that referenced this pull request Apr 8, 2026
Dependencies updated:
- rand 0.8 -> 0.10 (thread_rng() -> rng(), RngCore -> Rng)
- indicatif 0.17 -> 0.18
- criterion 0.5 -> 0.8 (black_box -> std::hint::black_box)
- sha2 0.10 -> 0.11
- libc 0.2.182 -> 0.2.184
- tar 0.4.44 -> 0.4.45
- clap 4.5.60 -> 4.6.0
- tempfile 3.26.0 -> 3.27.0

Code changes:
- Migrate rand API (5 call sites across engine, archive, tests, benches)
- Fix clippy::needless_borrows_for_generic_args in tests
- Use std::hint::black_box instead of deprecated criterion::black_box
- Update README rand references

Closes #1, #2, #3, #4, #5, #7, #9, #11, #12, #13
Supersedes #6 (replaced by #12)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant