build(deps): bump serde-saphyr from 0.0.11 to 1.0.1

[dependabot]

Bumps serde-saphyr from 0.0.11 to 1.0.1.

Release notes

Sourced from serde-saphyr's releases.

1.0.1 maintenance release

• Fix #170 regression on local type tags
• By fixing granit-parser (use its release 1.0.1), explicitly fix #169 (large scalar deserialization performance regression)

This release is fully API compatible with 1.0.0 and must be a drop-in replacement.

1.0.0 - first real release

From this release onward, we are adopting the 1.x.x semantic versioning (SemVer) scheme. This means that API changes will be clearly reflected in the version number: the major version indicates breaking changes, the minor version indicates backward-compatible additions, and the patch version indicates backward-compatible fixes. The current compatibility status is indicated by the accompanying badge.

This release adds some #[track_caller] and #[must_use] annotations where looks reasonable. There are not many other changes that is exactly the point: the crate seems serving community well enough.

1.0.0-rc.1 release preview

From this release onward, we are adopting the 1.x.x semantic versioning (SemVer) scheme. This means that API changes will be clearly reflected in the version number: the major version indicates breaking changes, the minor version indicates backward-compatible additions, and the patch version indicates backward-compatible fixes. The current compatibility status is indicated by the accompanying badge.

Some breaking changes were made at this point because this is the last good time to streamline the API. Please raise any issues you find with the API changes, or if you would like to propose something. The goal of the release preview is exactly not to go 2.x.x next week after release.

• Options, SerializerOptions, Budget, and AliasLimits are now #[non_exhaustive]. Construct them with options!, ser_options!, budget!, and alias_limits!.
• Removed the deprecated to_writer and to_writer_with_options APIs. Use to_fmt_writer* for fmt::Write or to_io_writer* for io::Write.
• API compatibility check no guards compatibility with 1.0.0

Also

• Fix core tag enforcement. In the previous version, !!str 42 is accepted as i32(42), and !!int true is accepted as bool(true). Core tag handling is now hardened, and such constructs no longer pass.
• Fix: budget callbacks were sometimes not delivered on immediate breaches

0.0.29 Hardening release

• Summarizing results of automated fuzzing and static analysis, robustness against malformed (bad intent) YAML input was further hardened.
• Docker-compose, whose syntax serde-saphyr emulates, supports property nesting, so implemented nesting support for serde-saphyr as well. In the previous release, "${SET:-${B}}" with SET=value resolves to "value}".
• Fixed incorrect acceptance on Rust's float grammar (inf/Infinity/nan). YAML 1.2 only recognizes the .inf/.nan forms.
• Fixed caret misaligned in secondary snippet windows when line numbers exceed one digit
• FoldStr wrapping now cares not to start a continuation line with a tab
• Error reporting has been improved, showing location in some cases where previous versions were unable.
• Remove base64 create from deserializer dependencies (faster build)
• New version of (also hardened) granit-parser 0.0.7.

0.0.28 Property interpolation extensions and even faster builds

Significant extension of property interpolation ( @​CommanderStorm)

• Added support for default property interpolation in plain scalars: ${NAME:-default} now resolves to default when NAME is unset or explicitly empty.
• ${VAR}: Values that must be configured (DB URLs, API keys). An unset var is a misconfiguration, not something to paper over -> a loud error at parse time
• ${VAR-fallback}: Empty value is meaningful and distinct from "not configured". F.ex. PREFIX="" -> "no prefix".
• ${VAR:-fallback}: The "regular" default, so f.ex. ${PORT:-8080}
• ${VAR+text}: F.ex. ${DEBUG+--verbose} emits the flag whenever DEBUG exists in the environment, regardless of value.
• ${VAR:+text}: Same as above, but differentiating empty <-> null

Also

• Fix #120 LastWins not honored when deserializing struct. This was implemented and well tested, but only with maps.
• Reduced owning of comment strings (parsing very heavily commented YAML while discarding comments should be lighter on resources).
• Fixed indentation enforcement (@​CommanderStorm), making sure it also works for multiline scalars.
• Fixed tuple serialization (@​CommanderStorm)
• New SingleQuoted<..> and DoubleQuoted<..> wrappers to emit quoted strings. SingleQuoted may provide additional safety, as control characters will be rejected (with error), rather than written as YAML escape sequences. NullableTilde<T> is like Option and emits tilde ( ~ ) rather than null.

... (truncated)

Commits

• 05720d4 Prepare to release 1.0.1
• bff2b55 Fix br 1 (#171)
• 0e90430 Bump validator from 0.20.0 to 0.21.0 (#168)
• 1b357a7 Prepare to release 1.0.0
• ad5889e Move to .rc.2
• cf58c9c Renived derived Debug from Error that is not very useful, forwarding to Displ...
• d39ba62 Renived derived Debug from Error that is not very useful, forwarding to Displ...
• eba8a51 Added #[track_caller] annotations
• b3ce5a1 Added #[must_use] annotations
• 808c8ea Update validator
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)