Update dependencies and release notes

Author: cjdsellers

.supply-chain/config.toml

@@ -926,10 +926,6 @@ criteria = "safe-to-deploy"
 version = "0.45.0"
 criteria = "safe-to-deploy"
 
-[[exemptions.der]]
-version = "0.7.10"
-criteria = "safe-to-deploy"
-
 [[exemptions.deranged]]
 version = "0.5.5"
 criteria = "safe-to-deploy"
@@ -1143,7 +1139,7 @@ version = "0.13.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.h2]]
-version = "0.4.12"
+version = "0.4.13"
 criteria = "safe-to-deploy"
 
 [[exemptions.half]]
@@ -1710,10 +1706,6 @@ criteria = "safe-to-deploy"
 version = "3.0.6"
 criteria = "safe-to-deploy"
 
-[[exemptions.pem-rfc7468]]
-version = "0.7.0"
-criteria = "safe-to-deploy"
-
 [[exemptions.pest]]
 version = "2.8.5"
 criteria = "safe-to-deploy"
@@ -1758,10 +1750,6 @@ criteria = "safe-to-deploy"
 version = "0.10.2"
 criteria = "safe-to-deploy"
 
-[[exemptions.pkg-config]]
-version = "0.3.32"
-criteria = "safe-to-deploy"
-
 [[exemptions.portable-atomic]]
 version = "1.13.0"
 criteria = "safe-to-deploy"
@@ -2027,7 +2015,7 @@ version = "1.1.3"
 criteria = "safe-to-deploy"
 
 [[exemptions.rustls]]
-version = "0.23.35"
+version = "0.23.36"
 criteria = "safe-to-deploy"
 
 [[exemptions.rustls-native-certs]]
@@ -2566,10 +2554,6 @@ criteria = "safe-to-deploy"
 version = "1.1.0"
 criteria = "safe-to-deploy"
 
-[[exemptions.utf-8]]
-version = "0.7.6"
-criteria = "safe-to-deploy"
-
 [[exemptions.uuid]]
 version = "1.19.0"
 criteria = "safe-to-deploy"
@@ -2927,7 +2911,7 @@ version = "0.5.5"
 criteria = "safe-to-deploy"
 
 [[exemptions.zmij]]
-version = "1.0.10"
+version = "1.0.11"
 criteria = "safe-to-deploy"
 
 [[exemptions.zstd]]

.supply-chain/imports.lock

@@ -290,6 +290,12 @@ who = "Benjamin Bouvier <[email protected]>"
 criteria = "safe-to-deploy"
 version = "0.1.3"
 
+[[audits.bytecode-alliance.audits.der]]
+who = "Chris Fallin <[email protected]>"
+criteria = "safe-to-deploy"
+version = "0.7.10"
+notes = "No unsafe code aside from transmutes for transparent newtypes."
+
 [[audits.bytecode-alliance.audits.digest]]
 who = "Benjamin Bouvier <[email protected]>"
 criteria = "safe-to-deploy"
@@ -480,6 +486,12 @@ criteria = "safe-to-deploy"
 delta = "0.8.5 -> 0.8.9"
 notes = "No new unsafe code, just refactorings."
 
+[[audits.bytecode-alliance.audits.pem-rfc7468]]
+who = "Chris Fallin <[email protected]>"
+criteria = "safe-to-deploy"
+version = "0.7.0"
+notes = "Only `unsafe` around a `from_utf8_unchecked`, and no IO."
+
 [[audits.bytecode-alliance.audits.percent-encoding]]
 who = "Alex Crichton <[email protected]>"
 criteria = "safe-to-deploy"
@@ -495,6 +507,26 @@ who = "Pat Hickey <[email protected]>"
 criteria = "safe-to-deploy"
 version = "0.1.0"
 
+[[audits.bytecode-alliance.audits.pkg-config]]
+who = "Pat Hickey <[email protected]>"
+criteria = "safe-to-deploy"
+version = "0.3.25"
+notes = "This crate shells out to the pkg-config executable, but it appears to sanitize inputs reasonably."
+
+[[audits.bytecode-alliance.audits.pkg-config]]
+who = "Alex Crichton <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.3.26 -> 0.3.29"
+notes = """
+No `unsafe` additions or anything outside of the purview of the crate in this
+change.
+"""
+
+[[audits.bytecode-alliance.audits.pkg-config]]
+who = "Chris Fallin <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.3.29 -> 0.3.32"
+
 [[audits.bytecode-alliance.audits.sha1]]
 who = "Andrew Brown <[email protected]>"
 criteria = "safe-to-deploy"
@@ -513,6 +545,12 @@ criteria = "safe-to-deploy"
 version = "0.2.4"
 notes = "Implements a concurrency primitive with atomics, and is not obviously incorrect"
 
+[[audits.bytecode-alliance.audits.utf-8]]
+who = "Chris Fallin <[email protected]>"
+criteria = "safe-to-deploy"
+version = "0.7.6"
+notes = "Small library that uses `unsafe` only around `str::from_utf8_unchecked` after explicitly verifying UTF-8."
+
 [[audits.bytecode-alliance.audits.vcpkg]]
 who = "Pat Hickey <[email protected]>"
 criteria = "safe-to-deploy"
@@ -2126,6 +2164,12 @@ Only functional change is to work around a bug in the negative_impls feature
 """
 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
 
+[[audits.mozilla.audits.pkg-config]]
+who = "Mike Hommey <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.3.25 -> 0.3.26"
+aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
+
 [[audits.mozilla.audits.powerfmt]]
 who = "Alex Franchuk <[email protected]>"
 criteria = "safe-to-deploy"

Cargo.lock

@@ -247,7 +247,7 @@ reqwest = { version = "0.13.1", default-features = false, features = [
 rmp-serde = "1.3.1"
 rust_decimal = "1.39.0"
 rust_decimal_macros = "1.39.0"
-rustls = { version = "0.23.35", default-features = false, features = [
+rustls = { version = "0.23.36", default-features = false, features = [
   "aws-lc-rs",
   "std",
 ] }

Cargo.toml

@@ -25,6 +25,7 @@ Released on TBD (UTC).
 - Added Binance `listenKeyExpired` event handling (#3387), thanks @Johnkhk
 - Added Deribit data client (#3368), thanks @filipmacek
 - Removed `tracing` crate from Rust codebase, migrated to `log` crate for simpler logging
+- Improved live timers to use `BTreeMap` for storage (#3392), thanks @faysou
 - Upgraded Cython to v3.2.4
 - Upgraded `tokio` crate to v1.49.0
 

RELEASES.md

@@ -15,18 +15,19 @@
 
 //! Live clock implementation using Tokio for real-time operations.
 
-use futures::Stream;
-use nautilus_core::{
-    AtomicTime, UnixNanos, consts::NAUTILUS_PREFIX, correctness::check_predicate_true,
-    time::get_atomic_clock_realtime,
-};
 use std::{
     collections::{BTreeMap, BinaryHeap},
     ops::Deref,
     pin::Pin,
     sync::Arc,
     task::{Context, Poll},
 };
+
+use futures::Stream;
+use nautilus_core::{
+    AtomicTime, UnixNanos, consts::NAUTILUS_PREFIX, correctness::check_predicate_true,
+    time::get_atomic_clock_realtime,
+};
 use ustr::Ustr;
 
 use super::timer::LiveTimer;