rooch icon indicating copy to clipboard operation
rooch copied to clipboard

chore(deps): bump chrono from 0.4.40 to 0.4.41

Open dependabot[bot] opened this issue 8 months ago • 2 comments

Bumps chrono from 0.4.40 to 0.4.41.

Release notes

Sourced from chrono's releases.

v0.4.41

What's Changed

Commits
  • d1de1d9 Bump version to 0.4.41
  • e2bd1d1 Add support for lenient format strings (#1693)
  • 2c95b0a Tweak expression to avoid repetition
  • ebeef99 TimeZone::from_posix_tz: Treat empty TZ variable as UTC
  • dc068f0 Tweak style on NaiveWeek fixes
  • b267a4f Implemented consistent Hash and Eq trait for NaiveWeek
  • 7c0bd13 Apply suggestions from clippy 1.86
  • 104cdc7 Bump MSRV to 1.62
  • 6a85301 Upgrade to windows-bindgen 0.61
  • 265c79b Tweak WeekdaySet method order
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot[bot] avatar Apr 29 '25 18:04 dependabot[bot]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
rooch-portal-v2.1 ✅ Ready (Inspect) Visit Preview 💬 Add feedback May 16, 2025 4:22am
test-portal ✅ Ready (Inspect) Visit Preview 💬 Add feedback May 16, 2025 4:22am
1 Skipped Deployment
Name Status Preview Comments Updated (UTC)
rooch ⬜️ Ignored (Inspect) Visit Preview May 16, 2025 4:22am

vercel[bot] avatar Apr 29 '25 18:04 vercel[bot]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
cargo/chrono 0.4.41 :green_circle: 6.1
Details
CheckScoreReason
Binary-Artifacts:green_circle: 10no binaries found in the repo
Maintained:green_circle: 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Code-Review:green_circle: 6Found 13/21 approved changesets -- score normalized to 6
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Packaging:warning: -1packaging workflow not detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy:warning: 0security policy file not detected
License:green_circle: 9license file detected
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Fuzzing:green_circle: 10project is fuzzed
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • Cargo.lock

github-actions[bot] avatar Apr 29 '25 18:04 github-actions[bot]

@dependabot rebase

baichuan3 avatar May 16 '25 04:05 baichuan3