Merge branch 'main' into kdy1/update-cargo-mono

Author: kdy1

.github/workflows/CI.yml

@@ -51,7 +51,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: EmbarkStudios/cargo-deny-action@v1
+      - uses: EmbarkStudios/cargo-deny-action@v2
 
   cargo-check:
     name: Check

Cargo.lock

@@ -38,12 +38,12 @@ once_cell                 = "1.21.3"
 phf                       = "0.11.3"
 proc-macro2               = "1.0.94"
 quote                     = "1.0.40"
-rand                      = "0.8.5"
+rand                      = "0.8.6"
 rand_xorshift             = "0.3"
 rayon                     = "1.10.0"
 regex                     = "1.11.1"
 reqwest                   = "0.12.15"
-rkyv                      = "0.8.10"
+rkyv                      = { version = "0.8.16", default-features = false, features = ["bytecheck"] }
 rustc-hash                = "2.1.1"
 schemars                  = "0.8.22"
 scoped-tls                = "1"
@@ -60,5 +60,5 @@ tracing                   = "0.1.41"
 tracing-subscriber        = "0.3.19"
 triomphe                  = "0.1.14"
 url                       = "2.5.4"
-bytes = "1.10.1"
+bytes = "1.11.1"
 ascii = "1.1.0"

Cargo.toml

@@ -6,7 +6,7 @@ include     = ["Cargo.toml", "src/**/*.rs"]
 license     = { workspace = true }
 name        = "bytes-str"
 repository  = { workspace = true }
-version     = "0.2.7"
+version     = "0.2.8"
 
 [features]
 rkyv  = ["dep:rkyv", "rkyv/bytes-1"]

crates/bytes-str/Cargo.toml

@@ -123,8 +123,12 @@ impl BytesString {
     /// Splits the string into two at the given index.
     ///
     /// Returns a newly allocated String. `self` contains bytes at indices
-    /// greater than `at`, and the returned string contains bytes at indices
-    /// less than `at`.
+    /// less than `at`, and the returned string contains bytes at indices
+    /// greater than or equal to `at`.
+    ///
+    /// # Panics
+    ///
+    /// Panics if `at` does not lie on a char boundary.
     ///
     /// # Examples
     ///
@@ -139,6 +143,8 @@ impl BytesString {
     /// assert_eq!(other, "llo");
     /// ```
     pub fn split_off(&mut self, at: usize) -> Self {
+        assert!(self.is_char_boundary(at));
+
         Self {
             bytes: self.bytes.split_off(at),
         }
@@ -940,6 +946,19 @@ mod tests {
         let other = s.split_off(5);
         assert_eq!(s.as_str(), "hello");
         assert_eq!(other.as_str(), "");
+
+        // Test unicode boundaries
+        let mut s = BytesString::from("한국어");
+        let other = s.split_off(6);
+        assert_eq!(s.as_str(), "한국");
+        assert_eq!(other.as_str(), "어");
+    }
+
+    #[test]
+    #[should_panic]
+    fn test_split_off_panic_on_char_boundary() {
+        let mut s = BytesString::from("é");
+        s.split_off(1); // Should panic as it's not on a char boundary
     }
 
     #[test]

crates/bytes-str/src/byte_string.rs

@@ -9,6 +9,7 @@
 # The values provided in this template are the default values that will be used
 # when any section or field is not specified in your own configuration
 
+[graph]
 # If 1 or more target triples (and optionally, target_features) are specified,
 # only the specified targets will be checked when running `cargo deny check`.
 # This means, if a particular package is only ever used as a target specific
@@ -27,16 +28,10 @@ targets = []
 db-path = "~/.cargo/advisory-db"
 # The url(s) of the advisory databases to use
 db-urls = ["https://github.com/rustsec/advisory-db"]
-# The lint level for security vulnerabilities
-vulnerability = "deny"
-# The lint level for unmaintained crates
-unmaintained = "warn"
+# Whether unmaintained advisories should fail the check
+unmaintained = "none"
 # The lint level for crates that have been yanked from their source registry
 yanked = "warn"
-# The lint level for crates with security notices. Note that as of
-# 2019-12-17 there are no security notice advisories in
-# https://github.com/rustsec/advisory-db
-notice = "warn"
 # A list of advisory IDs to ignore. Note that ignored advisories will still
 # output a note when they are encountered.
 ignore = [
@@ -58,8 +53,6 @@ ignore = [
 # More documentation for the licenses section can be found here:
 # https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
 [licenses]
-# The lint level for crates which do not have a detectable license
-unlicensed = "deny"
 # List of explictly allowed licenses
 # See https://spdx.org/licenses/ for list of possible licenses
 # [possible values: any SPDX 3.11 short identifier (+ optional exception)].
@@ -75,24 +68,6 @@ allow = [
   "Unicode-DFS-2016",
   "Unicode-3.0",
 ]
-# List of explictly disallowed licenses
-# See https://spdx.org/licenses/ for list of possible licenses
-# [possible values: any SPDX 3.11 short identifier (+ optional exception)].
-deny = []
-# Lint level for licenses considered copyleft
-copyleft = "deny"
-# Blanket approval or denial for OSI-approved or FSF Free/Libre licenses
-# * both - The license will be approved if it is both OSI-approved *AND* FSF
-# * either - The license will be approved if it is either OSI-approved *OR* FSF
-# * osi-only - The license will be approved if is OSI-approved *AND NOT* FSF
-# * fsf-only - The license will be approved if is FSF *AND NOT* OSI-approved
-# * neither - This predicate is ignored and the default lint level is used
-allow-osi-fsf-free = "neither"
-# Lint level used when no other predicates are matched
-# 1. License isn't in the allow or deny lists
-# 2. License isn't copyleft
-# 3. License isn't OSI/FSF, or allow-osi-fsf-free = "neither"
-default = "deny"
 # The confidence threshold for detecting a license from license text.
 # The higher the value, the more closely the license text must be to the
 # canonical license text of a valid SPDX license file.