Bump the cargo-dependencies group with 5 updates

[dependabot]

Bumps the cargo-dependencies group with 5 updates:

Package	From	To
chrono	0.4.33	0.4.34
clap	4.4.18	4.5.0
git2	0.18.1	0.18.2
octocrab	0.33.3	0.34.0
toml	0.8.9	0.8.10

Updates chrono from 0.4.33 to 0.4.34

Release notes

Sourced from chrono's releases.

0.4.34

Notable changes

• In chrono 0.4.34 we finished the work to make all methods const where doing so is supported by rust 1.61.
• We renamed the Duration type to TimeDelta. This removes the confusion between chrono's type and the later Duration type in the standard library. It will remain available under the old name as a type alias for compatibility.
• The Windows implementation of Local is rewritten. The new version avoids panics when the date is outside of the range supported by windows (the years 1601 to 30828), and gives more accurate results during DST transitions.
• The Display format of TimeDelta is modified to conform better to ISO 8601. Previously it converted all values greater than 24 hours to a value with days. This is not correct, as doing so changes the duration from an 'accurate' to a 'nominal' representation to use ISO 8601 terms.

Fixes

• Add missing range check in TimeDelta::milliseconds (#1385, thanks @​danwilliams)
• Remove check for DurationExceedsTimestamp in DurationRound (#1403, thanks @​joroKr21)
• Fix localized formatting with %X ((chronotope/pure-rust-locales#12, #1420)
• Windows: base implementation on GetTimeZoneInformationForYear (#1017)

Additions

• Add TimeDelta::try_milliseconds (#1385, thanks @​danwilliams)
• Add TimeDelta::new (#1337)
• Add StrftimeItems::{parse, parse_to_owned} and more documentation (#1184)
• More standard traits and documentation for format::Locale (via chronotope/pure-rust-locales#8)

Changes

• Rename Duration to TimeDelta, add type alias (#1406)
• Make TimeDelta methods const (#1337)
• Make remaining methods of NaiveDate, NaiveWeek, NaiveTime and NaiveDateTime const where possible (#1337)
• Make methods on DateTime const where possible (#1400)
• Make Display format of TimeDelta conform better to ISO 8601 (#1328)

Documentation

• Fix the formatting of timestamp_micros's Example doc (#1338 via #1386, thanks @​emikitas)
• Specify branch for GitHub Actions badge and fix link (#1388)
• Don't mention some deprecated methods in docs (#1395)
• Remove stray documentation from main (#1397)
• Improved documentation of TimeDelta constructors (#1385, thanks @​danwilliams)

Internal

• Switch branch names: 0.4.x releases are the main branch, work on 0.5 happens in the 0.5.x branch (#1390, #1402).
• Don't use deprecated method in impl Arbitrary for DateTime and set up CI test (#1336)
• Remove workaround for Rust < 1.61 (#1393)
• Bump codecov/codecov-action from 3 to 4 (#1404)
• Remove partial support for handling -0000 offset (#1411)
• Move TOO_LONG error out of parse_internal (#1419)

Thanks to all contributors on behalf of the chrono team, @​djc and @​pitdicker!

Commits

• dc19606 Prepare 0.4.34
• 58a2149 Add StrftimeItems::parse_to_owned
• 59eeb8c Add StrftimeItems::parse
• 79de122 Add more documentation to StrftimeItems::new_with_locale
• 5b7cf85 Add more documentation to StrftimeItems::new
• be6af79 Make Display format of TimeDelta conform better to ISO 8601
• d1cf0e9 Add test for issue 651
• 0ef34e4 Extend test to more distant dates
• fc67f3e Remove obsolete test
• acb693a Windows: rewrite using GetTimeZoneInformationForYear
• Additional commits viewable in compare view

Updates clap from 4.4.18 to 4.5.0

Changelog

Sourced from clap's changelog.

[4.5.0] - 2024-02-08

Compatibility

• Update MSRV to 1.74

Commits

• a751c5f chore: Release
• 9ec6c94 chore: Release
• 0735119 docs: Update changelog
• c4d3959 Merge pull request #5344 from epage/encode
• f750e57 fix(lex): Use new-ish OsStr API
• 1d9a554 Merge pull request #5343 from epage/msrv
• 4b45d36 chore: Update MSRV to 1.74
• 55b1f94 Merge pull request #5342 from epage/divan
• ea77b98 test(complete): Make it order independent
• b0fea2b test(bench): Switch to divan
• Additional commits viewable in compare view

Updates git2 from 0.18.1 to 0.18.2

Changelog

Sourced from git2's changelog.

0.18.2 - 2024-02-06

0.18.1...0.18.2

Added

• Added opts::set_ssl_cert_file and opts::set_ssl_cert_dir for setting Certificate Authority file locations. #997
• Added TreeIter::nth which makes jumping ahead in the iterator more efficient. #1004
• Added Repository::find_commit_by_prefix to find a commit by a shortened hash. #1011
• Added Repository::find_tag_by_prefix to find a tag by a shortened hash. #1015
• Added Repository::find_object_by_prefix to find an object by a shortened hash. #1014

Changed

• ❗ Updated to libgit2 1.7.2. This fixes CVE-2024-24575 and CVE-2024-24577. #1017

Commits

• 987c4e6 Merge pull request #1018 from ehuss/changelog
• 57dc89c Update changelog for next release.
• 9e57876 Merge pull request #1017 from weihanglo/libgit2-1.7.2
• 173232a Merge pull request #1014 from Brooooooklyn/master
• 4f9b2c5 Merge pull request #1015 from Brooooooklyn/lookup-tag-prefix
• e10093e Add link to libgit2 in sys changelog.
• e4cba79 chore: update libgit2 submodule to 1.7.2
• 223945f Allow find object by prefix
• 15e61e4 Allow find tag by prefix hash
• 93dc901 Merge pull request #1016 from giraugh/patch-1
• Additional commits viewable in compare view

Updates octocrab from 0.33.3 to 0.34.0

Release notes

Sourced from octocrab's releases.

v0.34.0

Other

• Upgrade http/hyper 1.0 (#564)

v0.33.4

Other

• Don't send Authorization headers to third-party services. (#562)
• Added tests for repos().merges() (#560)

Changelog

Sourced from octocrab's changelog.

0.34.0 - 2024-02-07

Other

• Upgrade http/hyper 1.0 (#564)

0.33.4 - 2024-02-06

Other

• Don't send Authorization headers to third-party services. (#562)
• Added tests for repos().merges() (#560)

Commits

• 255a1cf chore: release (#565)
• f350014 Upgrade http/hyper 1.0 (#564)
• 59be97c chore: release (#561)
• 3ce474a Don't send Authorization headers to third-party services. (#562)
• 9a31198 Added tests for repos().merges() (#560)
• See full diff in compare view

Updates toml from 0.8.9 to 0.8.10

Commits

• 7f3e276 chore: Release
• 07c8c2c docs: Update changelog
• 10392d5 chore: Release
• 4592fe4 docs: Update changelog
• b7bd3a4 Merge pull request #675 from epage/dotted-key
• 89d1416 fix(edit): Preserve previous line decor on leaf key
• 4e89856 fix(edit): Don't include decor in Key's Display
• 35e5326 Merge pull request #674 from epage/refactor
• 0aca85b refactor(encode): Remove trait abstraction
• 16c8353 test(edit): Show dotted-key comment bug
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[DanNixon]

@dependabot rebase

[dependabot]

Superseded by #51.