Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): Bump regex from 1.8.3 to 1.8.4 (#17601)
Bumps [regex](https://github.com/rust-lang/regex) from 1.8.3 to 1.8.4. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rust-lang/regex/blob/master/CHANGELOG.md">regex's changelog</a>.</em></p> <blockquote> <h1>1.8.4 (2023-06-05)</h1> <p>This is a patch release that fixes a bug where <code>(?-u:\B)</code> was allowed in Unicode regexes, despite the fact that the current matching engines can report match offsets between the code units of a single UTF-8 encoded codepoint. That in turn means that match offsets that split a codepoint could be reported, which in turn results in panicking when one uses them to slice a <code>&str</code>.</p> <p>This bug occurred in the transition to <code>regex 1.8</code> because the underlying syntactical error that prevented this regex from compiling was intentionally removed. That's because <code>(?-u:\B)</code> will be permitted in Unicode regexes in <code>regex 1.9</code>, but the matching engines will guarantee to never report match offsets that split a codepoint. When the underlying syntactical error was removed, no code was added to ensure that <code>(?-u:\B)</code> didn't compile in the <code>regex 1.8</code> transition release. This release, <code>regex 1.8.4</code>, adds that code such that <code>Regex::new(r"(?-u:\B)")</code> returns to the <code>regex <1.8</code> behavior of not compiling. (A <code>bytes::Regex</code> can still of course compile it.)</p> <p>Bug fixes:</p> <ul> <li>[BUG <a href="https://redirect.github.com/rust-lang/regex/issues/1006">#1006</a>](<a href="https://redirect.github.com/rust-lang/regex/issues/1006">rust-lang/regex#1006</a>): Fix a bug where <code>(?-u:\B)</code> was allowed in Unicode regexes, and in turn could lead to match offsets that split a codepoint in <code>&str</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rust-lang/regex/commit/5a34a39b72d85730065d3ffe4ce3715f2731e49a"><code>5a34a39</code></a> 1.8.4</li> <li><a href="https://github.com/rust-lang/regex/commit/407f6d3254525823a0981e00f5922940c28818ab"><code>407f6d3</code></a> changelog: 1.8.4</li> <li><a href="https://github.com/rust-lang/regex/commit/b2ca9c16dab559697ef152913a75479d7382efc1"><code>b2ca9c1</code></a> compile: make Regex::new(r"(?-u:\B)") fail again</li> <li>See full diff in <a href="https://github.com/rust-lang/regex/compare/1.8.3...1.8.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=regex&package-manager=cargo&previous-version=1.8.3&new-version=1.8.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information