Update all non-major dependencies ⬆️

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
bon (source)	dependencies	minor	3.9.3 → 3.10.0
clap	dependencies	patch	4.6.4 → 4.6.6
http	dependencies	minor	1.4.2 → 1.5.0
mozilla-actions/sccache-action	action	patch	v0.0.10 → v0.0.11
musli	dependencies	minor	0.0.149 → 0.1.0
sentry (source)	dependencies	minor	0.48.0 → 0.49.0
thiserror	dependencies	patch	2.0.19 → 2.0.20

---

Release Notes

elastio/bon (bon)

v3.10.0

Compare Source

MSRV Update Notice

This release raises the minimum supported Rust version from 1.59.0 to 1.88.0. If you are on an older compiler, stay on bon@3.9.

The new MSRV also comes with the deprecation of the implied-bounds cargo feature. Implied bounds are now added by default without any feature gate, so be sure to remove that feature from your Cargo.toml if you have it enabled. It's currently a no-op, and it won't be removed until a major release, for which there are no plans yet.

The MSRV bump comes from the darling@0.24 update, which is the first version that uses syn@3.0.

Added

• Support the default switch in the on(...) clause (#​398). Thanks @​ChrisJr404 for the contribution!

Changed

• Bump MSRV to 1.88.0, move to the 2024 edition, update to syn@3.0 and darling@0.24 (#​399)
• Deprecate the implied-bounds cargo feature. Implied bounds are now generated by default (#​399)

Internal

• Regular maintenance (#​392)

clap-rs/clap (clap)

v4.6.6

Compare Source

Features

• Add Command::get_overridden_usage

v4.6.5

Compare Source

hyperium/http (http)

v1.5.0

Compare Source

• Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
• Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
• Fix uri::PathAndQuery parsing to enforce URI max length.

mozilla-actions/sccache-action (mozilla-actions/sccache-action)

v0.0.11

Compare Source

What's Changed

• Bump the github-actions group across 1 directory with 2 updates by @​dependabot[bot] in Mozilla-Actions#259
• Bump jest-circus from 29.7.0 to 30.3.0 by @​dependabot[bot] in Mozilla-Actions#256
• Bump @​actions/io from 2.0.0 to 3.0.2 by @​dependabot[bot] in Mozilla-Actions#253
• ci: verify committed dist/ matches a clean rebuild by @​potiuk in Mozilla-Actions#252
• prepare the version 0.0.11 by @​sylvestre in Mozilla-Actions#262

New Contributors

• @​potiuk made their first contribution in Mozilla-Actions#252

Full Changelog: Mozilla-Actions/sccache-action@v0.0.10...v0.0.11

getsentry/sentry-rust (sentry)

v0.49.2

Compare Source

Fixes

• Fix a bug that prevented the Curl transport from respecting Sentry rate limits (#​1279).

Deprecations

• Deprecated ClientOptions::enable_logs. The option no longer disables manually captured logs (via the logging APIs); it now only disables automatic log capture by the log-capturing integrations (tracing and log with the logs feature). To stop an integration from sending logs, configure it via its own options (#​1299).
• Deprecated ClientOptions::enable_metrics. The option is now a no-op; metrics are always enabled. To stop sending metrics, stop calling the metrics APIs (#​1300).

Fixes

• Corrected disabled tracing semantics: transactions and spans created while tracing is disabled are ignored without generating client reports, while sampling decisions received from upstream traces continue to be propagated in outgoing trace headers. An explicit 0.0 trace sample rate remains distinct from disabled tracing and continues to generate client reports for locally unsampled transactions (#​1286).

v0.49.1

Compare Source

Fixes

• Preserve floating-point fields in tracing logs as numeric attributes (#​1278).
• Fix a bug that prevented the Curl transport from respecting Sentry rate limits (#​1279).

v0.49.0

Compare Source

Breaking Changes

• ClientOptions is now #[non_exhaustive] (#​1230). The struct must now be constructed with the builder-style setters:

  // Before
  let options = sentry::ClientOptions {
      dsn: "https://examplePublicKey@o0.ingest.sentry.io/0",
      debug: true,
      release: Some("my-app@1.0.0".into()),
      ..Default::default()
  };
  
  // After
  let options = sentry::ClientOptions::new()
      .dsn("https://examplePublicKey@o0.ingest.sentry.io/0")
      .debug(true)
      .release("my-app@1.0.0");

• Updated the sentry-opentelemetry integration to support OpenTelemetry 0.32. Users of the integration must update their OpenTelemetry dependencies from 0.29 to 0.32 (#​1262).

• The logs and metrics features are now enabled by default in the sentry crate. This does not break the API, but may cause new telemetry to be sent to Sentry: log and tracing integrations can send structured logs, and applications can send metrics without adding the feature flags. Disable these features explicitly if this additional telemetry is not desired (#​1251).

• Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling.

• Removed the public ClientOptions::sample_rate field. Use ClientOptions::event_sampling_strategy to inspect the configured event sampling strategy, and use the existing ClientOptions::sample_rate(...) builder setter to configure fixed-rate sampling (#​1228).

• Removed the public ClientOptions::traces_sample_rate and ClientOptions::traces_sampler fields. Use ClientOptions::traces_sampling_strategy to inspect the configured traces sampling strategy, and use the existing ClientOptions::traces_sample_rate(...) and ClientOptions::traces_sampler(...) builder setters to configure fixed-rate and callback-based sampling (#​1227).

• EnvelopeItem now stores Event and Transaction payloads in Box values. Code that constructs or pattern-matches these variants must account for the additional indirection (#​1255).

• The sentry_log::RecordMapping enum's Event now stores the event in a Box (#​1269).

• sentry_slog::RecordMapping is now #[non_exhaustive] and the Event variant now stores a boxed Event<'static> (#​1270)

• The sentry_tracing::EventMapping enum's Event variant is now stored in a Box (#​1272)

New Features

• Added TracePropagationContext as the preferred type for Sentry trace propagation metadata. The existing SentryTrace type remains available for backwards compatibility (#​1212).
• Added Dsn::org_id, which parses the Sentry SaaS organization ID from DSN hosts such as o123.ingest.sentry.io (#​1202).
• Added ClientOptions::org_id and ClientOptions::strict_trace_continuation (#​1203). These options control how traces are continued and can help prevent traces from third-party services, which happen to be instrumented with Sentry, from being continued.

Improvements

• Improved trace continuation safety by rejecting incoming traces with incompatible sentry-org_id values when starting transactions, according to strict trace continuation rules (#​1218).

Fixes

• Restored the reqwest transport's pre-0.13 protocol features by disabling HTTP/2 and native-TLS ALPN (#​1258).
• EnvelopeError is now #[non_exhaustive] to allow adding new error variants without a breaking change (#​1254).

dtolnay/thiserror (thiserror)

v2.0.20

Compare Source

• Suppress redundant_field_names clippy lint in generated code (#​454)

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.