From 78cd463b5816751b714cd2c0e8ce26d14cfad25d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 9 Dec 2024 12:02:46 -0800
Subject: [PATCH 1/2] Bump pyo3 from 0.22.5 to 0.23.3 (#151)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [pyo3](https://github.com/pyo3/pyo3) from 0.22.5 to 0.23.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pyo3/pyo3/releases">pyo3's
releases</a>.</em></p>
<blockquote>
<h2>PyO3 0.23.3</h2>
<p><strong><em>This release is a soundness fix for PyO3 0.23.0 through
0.23.2.</em></strong></p>
<p>In PyO3 0.23.0 the <code>PYO3_CONFIG_FILE</code> environment variable
used to configure builds regressed such that changing the environment
variable would no longer trigger PyO3 to reconfigure and recompile. In
combination with workflows using tools such as <code>maturin</code> to
build for multiple versions in a single build, this leads to Python
wheels being compiled against the wrong Python API version.</p>
<p>All users who distribute artefacts for multiple Python versions are
encouraged to update and rebuild with PyO3 0.23.3. Affected wheels
produced from PyO3 0.23.0 through 0.23.2 are highly unstable and will
crash the Python interpreter in unpredictable ways.</p>
<p>Aside from this fix, PyO3 0.23.3 contains some fixes to link
configuration for Python 3.13t on Windows.</p>
<p>Thank you to the following contributors for the improvements:</p>
<p><a
href="https://github.com/davidhewitt"><code>@​davidhewitt</code></a>
<a href="https://github.com/Icxolu"><code>@​Icxolu</code></a>
<a href="https://github.com/kemingy"><code>@​kemingy</code></a></p>
<h2>PyO3 0.23.2</h2>
<p>This release fixes a build failure when attempting to compile for
free-threaded Python when the <code>abi3</code> or
<code>abi3-pyxx</code> features are enabled. With this fix, the compile
will now ignore (with a warning) the <code>abi3</code> and
<code>abi3-pyxx</code> flags (as is the case when compiling for PyPy, as
neither support <code>abi3</code>).</p>
<p>This release also iterates upon the new <code>IntoPyObject</code>
trait by adding an <code>IntoPyObjectExt</code> helper trait with some
common convenience functions.</p>
<p>Finally, a compile failure related to
<code>ambiguous_associated_items</code> lint errors inside generated
<code>#[pyclass]</code> and <code>#[derive(IntoPyObject)]</code> output
has been fixed.</p>
<p>Thank you to the following contributors for the improvements:</p>
<p><a
href="https://github.com/davidhewitt"><code>@​davidhewitt</code></a>
<a href="https://github.com/LilyFoote"><code>@​LilyFoote</code></a>
<a href="https://github.com/ngoldbaum"><code>@​ngoldbaum</code></a></p>
<h2>PyO3 0.23.1</h2>
<p>This is a re-release of PyO3 0.23.0 with corrections to fix docs.rs
builds.</p>
<p>Thanks <a
href="https://github.com/yotamofek"><code>@​yotamofek</code></a> for the
reports &amp; fixes!</p>
<h2>PyO3 0.23.0</h2>
<p>This release is a significant iteration to both PyO3's internals and
API with two major enhancements:</p>
<ul>
<li>Support for Python 3.13t, also known as &quot;free-threaded
Python&quot;.</li>
<li>A new trait <code>IntoPyObject</code>, which unifies the existing
to-Python conversion traits <code>IntoPy</code> and
<code>ToPyObject</code> while also allowing new optimizations and proper
error handling. The new trait also has a
<code>#[derive(IntoPyObject)]</code> macro.</li>
</ul>
<p>While both of these new features have undergone extensive design, it
will be no surprise to find teething issues. All feedback is encouraged
so that we can follow up with iterative improvements for these new
features in future releases.</p>
<p>On top of the major additions, the removal of the &quot;GIL
Refs&quot; API deprecated in PyO3 0.21 is now complete. A number of PyO3
APIs have had new simpler names introduced now that the PyO3 API is no
longer in a migration phase (for example <code>PyTuple::new_bound</code>
is now simplified to <code>PyTuple::new</code>).</p>
<p>Beyond that, PyO3 0.23 contains nearly 5 months of incremental
improvements, bug fixes and smaller features that have been implemented
while the major work of this release was ongoing.</p>
<p>Please consult the <a
href="https://pyo3.rs/v0.23.0/migration.html">migration guide</a> for
help upgrading.</p>
<p>Thank you to everyone who contributed code, documentation, design
ideas, bug reports, and feedback. The following contributors' commits
are included in this release:</p>
<p><a href="https://github.com/abrisco"><code>@​abrisco</code></a>
<a
href="https://github.com/adamcavendish"><code>@​adamcavendish</code></a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md">pyo3's
changelog</a>.</em></p>
<blockquote>
<h2>[0.23.3] - 2024-12-03</h2>
<h3>Packaging</h3>
<ul>
<li>Bump optional <code>python3-dll-a</code> dependency to 0.2.11. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4749">#4749</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix unresolved symbol link failures on Windows when compiling for
Python 3.13t with <code>abi3</code> features enabled. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4733">#4733</a></li>
<li>Fix unresolved symbol link failures on Windows when compiling for
Python 3.13t using the <code>generate-import-lib</code> feature. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4749">#4749</a></li>
<li>Fix compile-time regression in PyO3 0.23.0 where changing
<code>PYO3_CONFIG_FILE</code> would not reconfigure PyO3 for the new
interpreter. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4758">#4758</a></li>
</ul>
<h2>[0.23.2] - 2024-11-25</h2>
<h3>Added</h3>
<ul>
<li>Add <code>IntoPyObjectExt</code> trait. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4708">#4708</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix compile failures when building for free-threaded Python when the
<code>abi3</code> or <code>abi3-pyxx</code> features are enabled. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4719">#4719</a></li>
<li>Fix <code>ambiguous_associated_items</code> lint error in
<code>#[pyclass]</code> and <code>#[derive(IntoPyObject)]</code> macros.
<a href="https://redirect.github.com/PyO3/pyo3/pull/4725">#4725</a></li>
</ul>
<h2>[0.23.1] - 2024-11-16</h2>
<p>Re-release of 0.23.0 with fixes to docs.rs build.</p>
<h2>[0.23.0] - 2024-11-15</h2>
<h3>Packaging</h3>
<ul>
<li>Drop support for PyPy 3.7 and 3.8. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4582">#4582</a></li>
<li>Extend range of supported versions of <code>hashbrown</code>
optional dependency to include version 0.15. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4604">#4604</a></li>
<li>Bump minimum version of <code>eyre</code> optional dependency to
0.6.8. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4617">#4617</a></li>
<li>Bump minimum version of <code>hashbrown</code> optional dependency
to 0.14.5. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4617">#4617</a></li>
<li>Bump minimum version of <code>indexmap</code> optional dependency to
2.5.0. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4617">#4617</a></li>
<li>Bump minimum version of <code>num-complex</code> optional dependency
to 0.4.6. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4617">#4617</a></li>
<li>Bump minimum version of <code>chrono-tz</code> optional dependency
to 0.10. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4617">#4617</a></li>
<li>Support free-threaded Python 3.13t. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4588">#4588</a></li>
</ul>
<h3>Added</h3>
<ul>
<li>Add <code>IntoPyObject</code> (fallible) conversion trait to convert
from Rust to Python values. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4060">#4060</a></li>
<li>Add <code>#[pyclass(str=&quot;&lt;format string&gt;&quot;)]</code>
option to generate <code>__str__</code> based on a <code>Display</code>
implementation or format string. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4233">#4233</a></li>
<li>Implement <code>PartialEq</code> for <code>Bound&lt;'py,
PyInt&gt;</code> with <code>u8</code>, <code>u16</code>,
<code>u32</code>, <code>u64</code>, <code>u128</code>,
<code>usize</code>, <code>i8</code>, <code>i16</code>, <code>i32</code>,
<code>i64</code>, <code>i128</code> and <code>isize</code>. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4317">#4317</a></li>
<li>Implement <code>PartialEq&lt;f64&gt;</code> and
<code>PartialEq&lt;f32&gt;</code> for <code>Bound&lt;'py,
PyFloat&gt;</code>. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4348">#4348</a></li>
<li>Add <code>as_super</code> and <code>into_super</code> methods for
<code>Bound&lt;T: PyClass&gt;</code>. <a
href="https://redirect.github.com/PyO3/pyo3/pull/4351">#4351</a></li>
<li>Add FFI definitions <code>PyCFunctionFast</code> and
<code>PyCFunctionFastWithKeywords</code> <a
href="https://redirect.github.com/PyO3/pyo3/pull/4415">#4415</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/PyO3/pyo3/commit/b5599dcdb0f24274988e3136f04895bfd67f6a40"><code>b5599dc</code></a>
release: 0.23.3</li>
<li><a
href="https://github.com/PyO3/pyo3/commit/a423c79f0d73956696eedbc7716bd04b080def94"><code>a423c79</code></a>
fix <code>PYO3_CONFIG_FILE</code> env var not requesting rebuilds (<a
href="https://redirect.github.com/pyo3/pyo3/issues/4758">#4758</a>)</li>
<li><a
href="https://github.com/PyO3/pyo3/commit/9c862e58e30c4843ac360031ce8f83bceb47a8f7"><code>9c862e5</code></a>
fix another <code>unsafe_op_in_unsafe_fn</code> trigger (<a
href="https://redirect.github.com/pyo3/pyo3/issues/4753">#4753</a>)</li>
<li><a
href="https://github.com/PyO3/pyo3/commit/5c681ca7ea5bb7044029ae987471b83b5e1f809f"><code>5c681ca</code></a>
support python3-dll-a free-threaded generation (<a
href="https://redirect.github.com/pyo3/pyo3/issues/4749">#4749</a>)</li>
<li><a
href="https://github.com/PyO3/pyo3/commit/3cb0b87aeedd639044f7e3b1007ad71b85f7f275"><code>3cb0b87</code></a>
ci: test debug builds using 3.13.0 (<a
href="https://redirect.github.com/pyo3/pyo3/issues/4750">#4750</a>)</li>
<li><a
href="https://github.com/PyO3/pyo3/commit/9714eabfc3a23f4de3fc6967fd41a9afc43cb1ef"><code>9714eab</code></a>
don't link to abi3 dll on windows for free-threaded build (<a
href="https://redirect.github.com/pyo3/pyo3/issues/4733">#4733</a>)</li>
<li><a
href="https://github.com/PyO3/pyo3/commit/a75242547b41fee1784130fa0f9c52bfde179aab"><code>a752425</code></a>
add missing CHANGELOG entry for 4589 (<a
href="https://redirect.github.com/pyo3/pyo3/issues/4744">#4744</a>)</li>
<li><a
href="https://github.com/PyO3/pyo3/commit/d3f79cf8df536a4a39c38571d7b2297ac96bbbdc"><code>d3f79cf</code></a>
ci: updates for Rust 1.83 (<a
href="https://redirect.github.com/pyo3/pyo3/issues/4741">#4741</a>)</li>
<li><a
href="https://github.com/PyO3/pyo3/commit/42bd0e5d7cbbdc2641b6c3368cc7659d34795cff"><code>42bd0e5</code></a>
Update class.md (<a
href="https://redirect.github.com/pyo3/pyo3/issues/4739">#4739</a>)</li>
<li><a
href="https://github.com/PyO3/pyo3/commit/824ba56849b02ca1c0b81c677197ee5f2e5ef1d3"><code>824ba56</code></a>
fix clippy beta (<a
href="https://redirect.github.com/pyo3/pyo3/issues/4737">#4737</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pyo3/pyo3/compare/v0.22.5...v0.23.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyo3&package-manager=cargo&previous-version=0.22.5&new-version=0.23.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 Cargo.lock | 20 ++++++++++----------
 Cargo.toml |  2 +-
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 39de5e4..9255493 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1379,9 +1379,9 @@ dependencies = [
 
 [[package]]
 name = "pyo3"
-version = "0.22.5"
+version = "0.23.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3d922163ba1f79c04bc49073ba7b32fd5a8d3b76a87c955921234b8e77333c51"
+checksum = "e484fd2c8b4cb67ab05a318f1fd6fa8f199fcc30819f08f07d200809dba26c15"
 dependencies = [
  "anyhow",
  "cfg-if",
@@ -1398,9 +1398,9 @@ dependencies = [
 
 [[package]]
 name = "pyo3-build-config"
-version = "0.22.5"
+version = "0.23.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bc38c5feeb496c8321091edf3d63e9a6829eab4b863b4a6a65f26f3e9cc6b179"
+checksum = "dc0e0469a84f208e20044b98965e1561028180219e35352a2afaf2b942beff3b"
 dependencies = [
  "once_cell",
  "target-lexicon",
@@ -1408,9 +1408,9 @@ dependencies = [
 
 [[package]]
 name = "pyo3-ffi"
-version = "0.22.5"
+version = "0.23.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94845622d88ae274d2729fcefc850e63d7a3ddff5e3ce11bd88486db9f1d357d"
+checksum = "eb1547a7f9966f6f1a0f0227564a9945fe36b90da5a93b3933fc3dc03fae372d"
 dependencies = [
  "libc",
  "pyo3-build-config",
@@ -1418,9 +1418,9 @@ dependencies = [
 
 [[package]]
 name = "pyo3-macros"
-version = "0.22.5"
+version = "0.23.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e655aad15e09b94ffdb3ce3d217acf652e26bbc37697ef012f5e5e348c716e5e"
+checksum = "fdb6da8ec6fa5cedd1626c886fc8749bdcbb09424a86461eb8cdf096b7c33257"
 dependencies = [
  "proc-macro2",
  "pyo3-macros-backend",
@@ -1430,9 +1430,9 @@ dependencies = [
 
 [[package]]
 name = "pyo3-macros-backend"
-version = "0.22.5"
+version = "0.23.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae1e3f09eecd94618f60a455a23def79f79eba4dc561a97324bf9ac8c6df30ce"
+checksum = "38a385202ff5a92791168b1136afae5059d3ac118457bb7bc304c197c2d33e7d"
 dependencies = [
  "heck 0.5.0",
  "proc-macro2",
diff --git a/Cargo.toml b/Cargo.toml
index 81ddfe8..659a774 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -9,7 +9,7 @@ name = "sourmash_plugin_directsketch"
 crate-type = ["cdylib"]
 
 [dependencies]
-pyo3 = { version = "0.22.5", features = ["extension-module", "anyhow"] }
+pyo3 = { version = "0.23.3", features = ["extension-module", "anyhow"] }
 rayon = "1.10.0"
 serde = { version = "1.0.204", features = ["derive"] }
 sourmash = { version = "0.16.0"}

From e499675beafd63373ac690fefcd41337da8f42aa Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 10 Dec 2024 06:33:14 -0800
Subject: [PATCH 2/2] Bump tokio from 1.41.0 to 1.42.0 (#150)

---
 Cargo.lock | 4 ++--
 Cargo.toml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 9255493..5ba4cdd 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2061,9 +2061,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.41.0"
+version = "1.42.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "145f3413504347a2be84393cc8a7d2fb4d863b375909ea59f2158261aa258bbb"
+checksum = "5cec9b21b0450273377fc97bd4c33a8acffc8c996c987a7c5b319a0083707551"
 dependencies = [
  "backtrace",
  "bytes",
diff --git a/Cargo.toml b/Cargo.toml
index 659a774..a3fca06 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -23,7 +23,7 @@ anyhow = "1.0.90"
 camino = "1.1.7"
 csv = "1.3.0"
 reqwest = { version = "0.12.8", features = ["json", "stream"] }
-tokio = { version = "1.41.0", features = ["full"] }
+tokio = { version = "1.42.0", features = ["full"] }
 tokio-util = "0.7.11"
 regex = "1.11.0"
 chrono = "0.4.32"