[PR #144] [CLOSED] Update tokio requirement from 0.2.22 to 0.3.1 #268

New issue

Closed

opened 2026-02-27 20:24:01 +03:00 by kerem · 0 comments

kerem commented

2026-02-27 20:24:01 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/ramsayleung/rspotify/pull/144
Author: @dependabot[bot]
Created: 10/22/2020
Status: ❌ Closed

Base: master ← Head: dependabot/cargo/tokio-0.3.1

📝 Commits (1)

c02ddde Update tokio requirement from 0.2.22 to 0.3.1

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 Cargo.toml (+1 -1)

📄 Description

Updates the requirements on tokio to permit the latest version.

Release notes

Sourced from tokio's releases.

Tokio v0.3.1

This release fixes a use-after-free in the IO driver. Additionally, the read_buf and write_buf methods have been added back to the IO traits, as the bytes crate is now on track to reach version 1.0 together with Tokio.

Fixed

net: fix use-after-free (#3019).

fs: ensure buffered data is written on shutdown (#3009).

Added

io: copy_buf() (#2884).

io: AsyncReadExt::read_buf(), AsyncReadExt::write_buf() for working with Buf/BufMut (#3003).

rt: Runtime::spawn_blocking() (#2980).

sync: watch::Sender::is_closed() (#2991).

Commits

d14cbf9 chore: prepare v0.3.1 release (#3021)
8bfb1c9 sync: revert Clone impl for broadcast::Receiver (#3020)
b48fec9 net: fix use-after-free in slab compaction (#3019)
8dbc3c7 io: add AsyncReadExt::read_buf (#3003)
7fbfa9b tokio: deduplicate spawn_blocking (#3017)
7d7b79e sync: add is_closed method to watch sender (#2991)
8f37544 io: explain how to determine number of bytes read in AsyncRead (#3011)
43d0714 sync: remove extra clone in Semaphore::[try_]acquire_owned (#3015)
16e272e fs: flush on shutdown (#3009)
6d99e1c util: prevent read buffer from being swapped during a read_poll (#2993)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/ramsayleung/rspotify/pull/144 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 10/22/2020 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/cargo/tokio-0.3.1` --- ### 📝 Commits (1) - [`c02ddde`](https://github.com/ramsayleung/rspotify/commit/c02dddea3f37c6814d96b875566e76b6bdf2abcc) Update tokio requirement from 0.2.22 to 0.3.1 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `Cargo.toml` (+1 -1) </details> ### 📄 Description Updates the requirements on [tokio](https://github.com/tokio-rs/tokio) to permit the latest version. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tokio-rs/tokio/releases">tokio's releases</a>.</em></p> <blockquote> <h2>Tokio v0.3.1</h2> <p>This release fixes a use-after-free in the IO driver. Additionally, the <code>read_buf</code> and <code>write_buf</code> methods have been added back to the IO traits, as the bytes crate is now on track to reach version 1.0 together with Tokio.</p> <h3>Fixed</h3> <ul> <li>net: fix use-after-free (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/3019">#3019</a>).</li> <li>fs: ensure buffered data is written on shutdown (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/3009">#3009</a>).</li> </ul> <h3>Added</h3> <ul> <li>io: <code>copy_buf()</code> (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/2884">#2884</a>).</li> <li>io: <code>AsyncReadExt::read_buf()</code>, <code>AsyncReadExt::write_buf()</code> for working with <code>Buf</code>/<code>BufMut</code> (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/3003">#3003</a>).</li> <li>rt: <code>Runtime::spawn_blocking()</code> (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/2980">#2980</a>).</li> <li>sync: <code>watch::Sender::is_closed()</code> (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/2991">#2991</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tokio-rs/tokio/commit/d14cbf91162d1ae2976a67a43e1f06cda1c21e29"><code>d14cbf9</code></a> chore: prepare v0.3.1 release (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/3021">#3021</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/8bfb1c92ceadd04f847d98ed482e7e59a3074954"><code>8bfb1c9</code></a> sync: revert Clone impl for broadcast::Receiver (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/3020">#3020</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/b48fec96551ac95768b76102703c4039a64c1168"><code>b48fec9</code></a> net: fix use-after-free in slab compaction (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/3019">#3019</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/8dbc3c79379f2243fc04d444239d009c1c610016"><code>8dbc3c7</code></a> io: add <code>AsyncReadExt::read_buf</code> (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/3003">#3003</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/7fbfa9b649b16de6096eb673f8debfb900618987"><code>7fbfa9b</code></a> tokio: deduplicate spawn_blocking (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/3017">#3017</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/7d7b79e1d53cacc24fb6c28ea67b25c7261e21de"><code>7d7b79e</code></a> sync: add is_closed method to watch sender (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/2991">#2991</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/8f37544a79ae7c694de6b3b7208ee06bdc86c308"><code>8f37544</code></a> io: explain how to determine number of bytes read in AsyncRead (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/3011">#3011</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/43d071489837a154dd56b42176c637b635e1891f"><code>43d0714</code></a> sync: remove extra clone in Semaphore::[try_]acquire_owned (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/3015">#3015</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/16e272ea4bcfbdc5aa3a0e36e9a3d3a639af4473"><code>16e272e</code></a> fs: flush on shutdown (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/3009">#3009</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/6d99e1c7dec4c6a37c4c7bf2801bc82cc210351d"><code>6d99e1c</code></a> util: prevent read buffer from being swapped during a read_poll (<a href="https://github-redirect.dependabot.com/tokio-rs/tokio/issues/2993">#2993</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tokio-rs/tokio/compare/tokio-0.2.22...tokio-0.3.1">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>