Update Rust crate tempfile to 3.23.0

[renovate]

This PR contains the following updates:

Package	Type	Update	New value	References	Sourcegraph
tempfile (source)	dependencies	minor	3.23.0	homepage, source

Test plan: CI should pass with updated dependencies. No review required: this is an automated dependency update PR.

---

Release Notes

Stebalien/tempfile (tempfile)

v3.23.0

Compare Source

• Remove need for the "nightly" feature to compile with "wasip2".

v3.22.0

Compare Source

• Updated windows-sys requirement to allow version 0.61.x
• Remove unstable-windows-keep-open-tempfile feature.

v3.21.0

Compare Source

• Updated windows-sys requirement to allow version 0.60.x

v3.20.0

Compare Source

This release mostly unifies the behavior/capabilities around "keeping" temporary files:

• Rename Builder::keep(bool) (via deprecation) to Builder::disable_cleanup(bool) to make it clear that behaves differently from NamedTempFile::keep(). The former disables automatic cleanup while the latter consumes the NamedTempFile object entirely and unsets the "temporary file" attribute (on Windows).
• Rename TempDir::into_path (via deprecation) to TempDir::keep to mirror NamedTempFile::keep.
• Add TempDir::disable_cleanup, NamedTempFile::disable_cleanup, and TempPath::disable_cleanup making it possible to disable automatic cleanup in-place after creating a temporary file/directory (equivalent to calling Builder::disable_cleanup before creating the file/directory).

Additionally, it adds a few spooled temporary file features:

• Add SpooledTempFile::into_file for turning a SpooledTempFile into a regular unnamed temporary file, writing it to the backing storage ("rolling" it) if it was still stored in-memory.
• Add spooled_tempfile_in and SpooledTempFile::new_in methods for creating spooled temporary files in a specific directory. This makes it possible to choose the backing device for your spooled temporary file which is rather important on Linux where the default temporary directory is likely backed by memory (defeating the entire point of having a spooled temporary file).

Finally, this release improves documentation, especially the top-level documentation explaining which temporary file type to use.

BREAKING for those with deny(warnings):

• Builder::keep deprecated in favor of Builder::disable_cleanup.
• TempDir::into_path is deprecated in favor of TempDir::keep.

v3.19.1

Compare Source

• Don't unlink temporary files immediately on Windows (fixes #​339). Unfortunately, this seemed to corrupt the file object (possibly a Windows kernel bug) in rare cases and isn't strictly speaking necessary.

v3.19.0

Compare Source

• Remove direct dependency on cfg-if. It's still in the tree, but we didn't really need to use it in this crate.
• Add an unstable feature (unstable-windows-keep-open-tempfile) to test a potential fix to #​339.

v3.18.0

Compare Source

• Update rustix to 1.0.0.
• Make NamedTempFile::persist_noclobber atomic on Apple operating systems. It's now atomic on MacOS, Windows, and Linux (depending on the OS version and filesystem used).

v3.17.1

Compare Source

• Fix build with windows-sys 0.52. Unfortunately, we have no CI for older windows-sys versions at the moment...

v3.17.0

Compare Source

• Make sure to use absolute paths in when creating unnamed temporary files (avoids a small race in the "immediate unlink" logic) and in Builder::make_in (when creating temporary files of arbitrary types).
• Prevent a theoretical crash that could (maybe) happen when a temporary file is created from a drop function run in a TLS destructor. Nobody has actually reported a case of this happening in practice and I have been unable to create this scenario in a test.
• When reseeding with getrandom, use platform (e.g., CPU) specific randomness sources where possible.
• Clarify some documentation.
• Unlink unnamed temporary files on windows immediately when possible instead of waiting for the handle to be closed. We open files with "Unix" semantics, so this is generally possible.

v3.16.0

Compare Source

• Update getrandom to 0.3.0 (thanks to @​paolobarbolini).
• Allow windows-sys versions 0.59.x in addition to 0.59.0 (thanks @​ErichDonGubler).
• Improved security documentation (thanks to @​n0toose for collaborating with me on this).

v3.15.0

Compare Source

Re-seed the per-thread RNG from system randomness when we repeatedly fail to create temporary files (#​314). This resolves a potential DoS vector (#​178) while avoiding getrandom in the common case where it's necessary. The feature is optional but enabled by default via the getrandom feature.

For libc-free builds, you'll either need to disable this feature or opt-in to a different getrandom backend.

v3.14.0

Compare Source

• Make the wasip2 target work (requires tempfile's "nightly" feature to be enabled). #​305.
• Allow older windows-sys versions #​304.

v3.13.0

Compare Source

• Add with_suffix constructors for easily creating new temporary files with a specific suffix (e.g., a specific file extension). Thanks to @​Borgerr.
• Update dependencies (fastrand & rustix).

v3.12.0

Compare Source

• Add a keep(keep: bool) function to builder that suppresses delete-on-drop behavior (thanks to @​RalfJung).
• Update windows-sys from 0.52 to 0.59.

v3.11.0

Compare Source

• Add the ability to override the default temporary directory. This API shouldn't be used in general, but there are some cases where it's unavoidable.

v3.10.1

Compare Source

• Handle potential integer overflows in 32-bit systems when seeking/truncating "spooled" temporary files past 4GiB (2³²).
• Handle a theoretical 32-bit overflow when generating a temporary file name larger than 4GiB. Now it'll panic (on allocation failure) rather than silently succeeding due to wraparound.

Thanks to @​stoeckmann for finding and fixing both of these issues.

v3.10.0

Compare Source

• Drop redox_syscall dependency, we now use rustix for Redox.
• Add Builder::permissions for setting the permissions on temporary files and directories (thanks to @​Byron).
• Update rustix to 0.38.31.
• Update fastrand to 2.0.1.

v3.9.0

Compare Source

• Updates windows-sys to 0.52
• Updates minimum rustix version to 0.38.25

v3.8.1

Compare Source

• Update rustix to fix a potential panic on persist_noclobber on android.
• Update redox_syscall to 0.4 (on redox).
• Fix some docs typos.

v3.8.0

Compare Source

• Added with_prefix and with_prefix_in to TempDir and NamedTempFile to make it easier to create temporary files/directories with nice prefixes.
• Misc cleanups.

v3.7.1

Compare Source

• Tempfile builds on haiku again.
• Under the hood, we've switched from the unlinkat/linkat syscalls to the regular unlink/link syscalls where possible.

v3.7.0

Compare Source

BREAKING: This release updates the MSRV to 1.63. This isn't an API-breaking change (so no major
release) but it's still a breaking change for some users.

• Update fastrand from 1.6 to 2.0
• Update rustix to 0.38
• Updates the MSRV to 1.63.
• Provide AsFd/AsRawFd on wasi.

v3.6.0

Compare Source

• Update windows-sys to 0.48.
• Update rustix min version to 0.37.11
• Forward some NamedTempFile and SpooledTempFile methods to the underlying File object for
  better performance (especially vectorized writes, etc.).
• Implement AsFd and AsHandle.
• Misc documentation fixes and code cleanups.

v3.5.0

Compare Source

• Update rustix from 0.36 to 0.37.1. This makes wasi work on rust stable
• Update windows-sys, redox_syscall
• BREAKING: Remove the implementation of Write for &NamedTempFile<F> where &F: Write. Unfortunately, this can cause compile issues in unrelated code (#​224).

v3.4.0

Compare Source

SECURITY: Prior tempfile releases depended on remove_dir_all version 0.5.0 which was vulnerable to a TOCTOU race. This same race is present in rust versions prior to 1.58.1.

Features:

• Generalized temporary files: NamedTempFile can now abstract over different kinds of files (e.g.,
  unix domain sockets, pipes, etc.):
  • Add Builder::make and Builder::make_in for generalized temp file
    creation.
  • Add NamedTempFile::from_parts to complement NamedTempFile::into_parts.
  • Add generic parameter to NamedTempFile to support wrapping non-File types.

Bug Fixes/Improvements:

• Don't try to create a temporary file multiple times if the file path has been fully specified by
  the user (no random characters).
• NamedTempFile::persist_noclobber is now always atomic on linux when renameat_with is
  supported. Previously, it would first link the new path, then unlink the previous path.
• Fix compiler warnings on windows.

Trivia:

• Switch from libc to rustix on wasi/unix. This now makes direct syscalls instead of calling
  through libc.
• Remove remove_dir_all dependency. The rust standard library has optimized their internal version
  significantly.
• Switch to official windows-sys windows bindings.

Breaking:

• The minimum rust version is now 1.48.0.
• Mark most functions as must_use.
• Uses direct syscalls on linux by default, instead of libc.
• The new type parameter in NamedTempFile may lead to type inference issues in some cases.

---

Configuration

📅 Schedule: Branch creation - "on the 1st through 7th day of the month" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.