Skip to content

Commit 657758d

Browse files
chore(deps): Bump regex from 1.8.3 to 1.8.4 (#17601)
Bumps [regex](https://github.com/rust-lang/regex) from 1.8.3 to 1.8.4. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/regex/blob/master/CHANGELOG.md">regex's changelog</a>.</em></p> <blockquote> <h1>1.8.4 (2023-06-05)</h1> <p>This is a patch release that fixes a bug where <code>(?-u:\B)</code> was allowed in Unicode regexes, despite the fact that the current matching engines can report match offsets between the code units of a single UTF-8 encoded codepoint. That in turn means that match offsets that split a codepoint could be reported, which in turn results in panicking when one uses them to slice a <code>&amp;str</code>.</p> <p>This bug occurred in the transition to <code>regex 1.8</code> because the underlying syntactical error that prevented this regex from compiling was intentionally removed. That's because <code>(?-u:\B)</code> will be permitted in Unicode regexes in <code>regex 1.9</code>, but the matching engines will guarantee to never report match offsets that split a codepoint. When the underlying syntactical error was removed, no code was added to ensure that <code>(?-u:\B)</code> didn't compile in the <code>regex 1.8</code> transition release. This release, <code>regex 1.8.4</code>, adds that code such that <code>Regex::new(r&quot;(?-u:\B)&quot;)</code> returns to the <code>regex &lt;1.8</code> behavior of not compiling. (A <code>bytes::Regex</code> can still of course compile it.)</p> <p>Bug fixes:</p> <ul> <li>[BUG <a href="https://redirect.github.com/rust-lang/regex/issues/1006">#1006</a>](<a href="https://redirect.github.com/rust-lang/regex/issues/1006">rust-lang/regex#1006</a>): Fix a bug where <code>(?-u:\B)</code> was allowed in Unicode regexes, and in turn could lead to match offsets that split a codepoint in <code>&amp;str</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rust-lang/regex/commit/5a34a39b72d85730065d3ffe4ce3715f2731e49a"><code>5a34a39</code></a> 1.8.4</li> <li><a href="https://github.com/rust-lang/regex/commit/407f6d3254525823a0981e00f5922940c28818ab"><code>407f6d3</code></a> changelog: 1.8.4</li> <li><a href="https://github.com/rust-lang/regex/commit/b2ca9c16dab559697ef152913a75479d7382efc1"><code>b2ca9c1</code></a> compile: make Regex::new(r&quot;(?-u:\B)&quot;) fail again</li> <li>See full diff in <a href="https://github.com/rust-lang/regex/compare/1.8.3...1.8.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=regex&package-manager=cargo&previous-version=1.8.3&new-version=1.8.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 7a55210 commit 657758d

File tree

5 files changed

+6
-6
lines changed

5 files changed

+6
-6
lines changed

Cargo.lock

+2-2
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

Cargo.toml

+1-1
Original file line numberDiff line numberDiff line change
@@ -293,7 +293,7 @@ rand = { version = "0.8.5", default-features = false, features = ["small_rng"] }
293293
rand_distr = { version = "0.4.3", default-features = false }
294294
rdkafka = { version = "0.31.0", default-features = false, features = ["tokio", "libz", "ssl", "zstd"], optional = true }
295295
redis = { version = "0.23.0", default-features = false, features = ["connection-manager", "tokio-comp", "tokio-native-tls-comp"], optional = true }
296-
regex = { version = "1.8.3", default-features = false, features = ["std", "perf"] }
296+
regex = { version = "1.8.4", default-features = false, features = ["std", "perf"] }
297297
roaring = { version = "0.10.1", default-features = false, optional = true }
298298
seahash = { version = "4.1.0", default-features = false }
299299
semver = { version = "1.0.17", default-features = false, features = ["serde", "std"], optional = true }

lib/codecs/Cargo.toml

+1-1
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ memchr = { version = "2", default-features = false }
1717
once_cell = { version = "1.18", default-features = false }
1818
ordered-float = { version = "3.7.0", default-features = false }
1919
prost = { version = "0.11.8", default-features = false, features = ["std"] }
20-
regex = { version = "1.8.3", default-features = false, features = ["std", "perf"] }
20+
regex = { version = "1.8.4", default-features = false, features = ["std", "perf"] }
2121
serde = { version = "1", default-features = false, features = ["derive"] }
2222
serde_json = { version = "1", default-features = false }
2323
smallvec = { version = "1", default-features = false, features = ["union"] }

lib/vector-core/Cargo.toml

+1-1
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ proptest = { version = "1.2", optional = true }
3838
prost-types = { version = "0.11", default-features = false }
3939
prost = { version = "0.11", default-features = false, features = ["std"] }
4040
quanta = { version = "0.11.1", default-features = false }
41-
regex = { version = "1.8.3", default-features = false, features = ["std", "perf"] }
41+
regex = { version = "1.8.4", default-features = false, features = ["std", "perf"] }
4242
ryu = { version = "1", default-features = false }
4343
serde = { version = "1.0.163", default-features = false, features = ["derive", "rc"] }
4444
serde_json = { version = "1.0.96", default-features = false }

vdev/Cargo.toml

+1-1
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ os_info = { version = "3.7.0", default-features = false }
3030
# watch https://github.com/epage/anstyle for official interop with Clap
3131
owo-colors = { version = "3.5.0", features = ["supports-colors"] }
3232
paste = "1.0.12"
33-
regex = { version = "1.8.3", default-features = false, features = ["std", "perf"] }
33+
regex = { version = "1.8.4", default-features = false, features = ["std", "perf"] }
3434
reqwest = { version = "0.11", features = ["json", "blocking"] }
3535
serde = { version = "1.0", features = ["derive"] }
3636
serde_json = "1.0.96"

0 commit comments

Comments
 (0)