Update Rust crate tempfile to 3.15.0

[renovate]

This PR contains the following updates:

Package	Type	Update	New value	References	Sourcegraph
tempfile (source)	dependencies	minor	3.15.0	homepage, source

Test plan: CI should pass with updated dependencies. No review required: this is an automated dependency update PR.

---

Release Notes

Stebalien/tempfile (tempfile)

v3.15.0

Compare Source

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#​314). This resolves a potential DoS vector (#​178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.

v3.14.0

Compare Source

• Make the wasip2 target work (requires tempfile's "nightly" feature to be enabled). #​305.
• Allow older windows-sys versions #​304.

v3.13.0

Compare Source

• Add with_suffix constructors for easily creating new temporary files with a specific suffix (e.g., a specific file extension). Thanks to @​Borgerr.
• Update dependencies (fastrand & rustix).

v3.12.0

Compare Source

• Add a keep(keep: bool) function to builder that suppresses delete-on-drop behavior (thanks to @​RalfJung).
• Update windows-sys from 0.52 to 0.59.

v3.11.0

Compare Source

• Add the ability to override the default temporary directory. This API shouldn't be used in general, but there are some cases where it's unavoidable.

v3.10.1

Compare Source

• Handle potential integer overflows in 32-bit systems when seeking/truncating "spooled" temporary files past 4GiB (2³²).
• Handle a theoretical 32-bit overflow when generating a temporary file name larger than 4GiB. Now it'll panic (on allocation failure) rather than silently succeeding due to wraparound.

Thanks to @​stoeckmann for finding and fixing both of these issues.

v3.10.0

Compare Source

• Drop redox_syscall dependency, we now use rustix for Redox.
• Add Builder::permissions for setting the permissions on temporary files and directories (thanks to @​Byron).
• Update rustix to 0.38.31.
• Update fastrand to 2.0.1.

v3.9.0

Compare Source

• Updates windows-sys to 0.52
• Updates minimum rustix version to 0.38.25

v3.8.1

Compare Source

• Update rustix to fix a potential panic on persist_noclobber on android.
• Update redox_syscall to 0.4 (on redox).
• Fix some docs typos.

v3.8.0

Compare Source

• Added with_prefix and with_prefix_in to TempDir and NamedTempFile to make it easier to create temporary files/directories with nice prefixes.
• Misc cleanups.

v3.7.1

Compare Source

• Tempfile builds on haiku again.
• Under the hood, we've switched from the unlinkat/linkat syscalls to the regular unlink/link syscalls where possible.

v3.7.0

Compare Source

BREAKING: This release updates the MSRV to 1.63. This isn't an API-breaking change (so no major
release) but it's still a breaking change for some users.

• Update fastrand from 1.6 to 2.0
• Update rustix to 0.38
• Updates the MSRV to 1.63.
• Provide AsFd/AsRawFd on wasi.

v3.6.0

Compare Source

• Update windows-sys to 0.48.
• Update rustix min version to 0.37.11
• Forward some NamedTempFile and SpooledTempFile methods to the underlying File object for
  better performance (especially vectorized writes, etc.).
• Implement AsFd and AsHandle.
• Misc documentation fixes and code cleanups.

v3.5.0

Compare Source

• Update rustix from 0.36 to 0.37.1. This makes wasi work on rust stable
• Update windows-sys, redox_syscall
• BREAKING: Remove the implementation of Write for &NamedTempFile<F> where &F: Write. Unfortunately, this can cause compile issues in unrelated code (https://github.com/Stebalien/tempfile/issues/224).

v3.4.0

Compare Source

SECURITY: Prior tempfile releases depended on remove_dir_all version 0.5.0 which was vulnerable to a TOCTOU race. This same race is present in rust versions prior to 1.58.1.

Features:

• Generalized temporary files: NamedTempFile can now abstract over different kinds of files (e.g.,
  unix domain sockets, pipes, etc.):
  • Add Builder::make and Builder::make_in for generalized temp file
    creation.
  • Add NamedTempFile::from_parts to complement NamedTempFile::into_parts.
  • Add generic parameter to NamedTempFile to support wrapping non-File types.

Bug Fixes/Improvements:

• Don't try to create a temporary file multiple times if the file path has been fully specified by
  the user (no random characters).
• NamedTempFile::persist_noclobber is now always atomic on linux when renameat_with is
  supported. Previously, it would first link the new path, then unlink the previous path.
• Fix compiler warnings on windows.

Trivia:

• Switch from libc to rustix on wasi/unix. This now makes direct syscalls instead of calling
  through libc.
• Remove remove_dir_all dependency. The rust standard library has optimized their internal version
  significantly.
• Switch to official windows-sys windows bindings.

Breaking:

• The minimum rust version is now 1.48.0.
• Mark most functions as must_use.
• Uses direct syscalls on linux by default, instead of libc.
• The new type parameter in NamedTempFile may lead to type inference issues in some cases.

---

Configuration

📅 Schedule: Branch creation - "on the 1st through 7th day of the month" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.