Bump moka from 0.12.11 to 0.12.13

[dependabot]

Bumps moka from 0.12.11 to 0.12.13.

Release notes

Sourced from moka's releases.

Moka 0.12.13

Version 0.12.13

Fixed

• Fixed/mitigated use-after-free issues in the hierarchical timer wheels when Expiry returns None (Issue #565gh-issue-0565, reported by @​sharksforarms).
  • Fixed a bug that caused freed timer nodes to remain in the timer wheels in some edge cases (#566gh-pull-0566 by @​powergee).
  • The mitigation added to v0.12.12 was enhanced by atomically reading the expiration state to prevent rare race conditions that could cause use-after-free issues (#570gh-pull-0570).
• Fixed Expiry::expire_after_update not clearing expiration time for expired entries (future::Cache: #549gh-pull-0549, by @​singulared, sync::Cache: #564gh-pull-0564).

Moka 0.12.12

Version 0.12.12

Bumped the minimum supported Rust version (MSRV) to 1.71.1, released on August 3, 2023 (#555gh-pull-0555).

Fixed

• Mitigated use-after-free panic in the hierarchical timer wheels when Expiry returns None (#548[gh-pull-0548], by @​awarus).
• Fixed a subtle undefined behavior in the internal deque::move_to_back method (found by Miri) (#553gh-pull-0553).

Added

• impl Expiry for some types (#519[gh-pull-0519], by @​koushiro).

Removed

• Removed several unneeded files from the published package (#541[gh-pull-0541], by @​weiznich).
• Removed the once_cell crate from the dependencies (#520[gh-pull-0520], by @​Expyron).
• Removed the rustc_version crate from the dev-dependencies (#554gh-pull-0554).

... (truncated)

Changelog

Sourced from moka's changelog.

Version 0.12.13

Fixed

• Fixed/mitigated use-after-free issues in the hierarchical timer wheels when Expiry returns None (Issue #565[gh-issue-0565], reported by [@​sharksforarms][gh-sharksforarms]).
  • Fixed a bug that caused freed timer nodes to remain in the timer wheels in some edge cases (#566[gh-pull-0566] by [@​powergee][gh-powergee]).
  • The mitigation added to v0.12.12 was enhanced by atomically reading the expiration state to prevent rare race conditions that could cause use-after-free issues (#570[gh-pull-0570]).
• Fixed Expiry::expire_after_update not clearing expiration time for expired entries (future::Cache: #549[gh-pull-0549], by [@​singulared][gh-singulared], sync::Cache: #564[gh-pull-0564]).

Version 0.12.12

Bumped the minimum supported Rust version (MSRV) to 1.71.1, released on August 3, 2023 (#555[gh-pull-0555]).

Fixed

• Mitigated use-after-free issues in the hierarchical timer wheels when Expiry returns None (#548[gh-pull-0548], by [@​awarus][gh-awarus]).
• Fixed a subtle undefined behavior in the internal deque::move_to_back method (found by Miri) (#553[gh-pull-0553]).

Added

• impl Expiry for some types (#519[gh-pull-0519], by [@​koushiro][gh-koushiro]).

Removed

• Removed several unneeded files from the published package (#541[gh-pull-0541], by [@​weiznich][gh-weiznich]).
• Removed the once_cell crate from the dependencies (#520[gh-pull-0520], by [@​Expyron][gh-Expyron]).
• Removed the rustc_version crate from the dev-dependencies (#554[gh-pull-0554]).

Commits

• b5bdb4c Merge pull request #571 from moka-rs/exclude-lint-config
• e8dff1f Add .markdownlint.json to the exclude files of the crate package
• c6bcdb6 Merge pull request #570 from moka-rs/mitigate-timewheel-toctou-issue
• 2aaa2e5 Add .markdowlint.json to change the Markdown indents to four spaces
• 04b2460 Update the changelog
• 4f053aa Refactor duration comparison code for unit testing in both sync and future
• ee982db A minor doc comment fix
• 49978c5 Try not to break the gen bits when adjusting timestamps that collide with the...
• f1b6ec1 Prevent set_timer_node to re-read expiry_gen from expiration_state()
• e959b7f Ensure that set_expiration_time accidentally pack real timestamp equal
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)