Update cargo (CVE fixes included)

[weihanglo]

8 commits in 082503982ea0fb7a8fd72210427d43a2e2128a63..73ba3f35e0205844418260722c11602113179c4a
2022-09-13 17:49:38 +0000 to 2022-09-18 06:38:16 +0000

• Revert "Clarify when cargo detects changes" (Revert "Clarify when cargo detects changes" cargo#11107)
• Fix links to workspace inheritance headings in workspace docs (Fix links to workspace inheritance headings in workspace docs cargo#11103)
• docs(ref): Clarify workspace settings (docs(ref): Clarify workspace settings cargo#11082)
• Update comment about ResolveVersion default version (Update comment about ResolveVersion default version cargo#11095)
• [master] Run reach_max_unpack_size test only on debug build ([master] Run reach_max_unpack_size test only on debug build cargo#11091)
• Clarify when cargo detects changes (Clarify when cargo detects changes cargo#11092)
• [master] Fix for GHSA-rfj2-q3h3-hm5j and GHSA-2hvr-h6gw-qrxp ([master] Fix for CVE-2022-36113 and CVE-2022-36114 cargo#11089)
• Expose cargo add internals as edit API (Expose cargo add internals as edit API cargo#11059)

[rustbot]

Some changes occurred in src/tools/cargo

cc @ehuss

[rust-highfive]

r? @ehuss

(rust-highfive has picked a reviewer for you, use r? to override)

[rust-highfive]

⚠️ Warning ⚠️

• These commits modify submodules.

[ehuss]

Thanks!

@bors r+ p=5

[bors]

📌 Commit 6d02f78 has been approved by ehuss

It is now in the queue for this repository.

[bors]

⌛ Testing commit 6d02f78 with merge a57a6ac...

[bors]

☀️ Test successful - checks-actions
Approved by: ehuss
Pushing a57a6ac to master...

[rust-timer]

Finished benchmarking commit (a57a6ac): comparison URL.

Overall result: no relevant changes - no action needed

@rustbot label: -perf-regression

Instruction count

This benchmark run did not return any relevant results for this metric.

Max RSS (memory usage)

Results

This is a less reliable metric that may be of interest but was not used to determine the overall result at the top of this comment.

	mean1	range	count2
Regressions ❌ (primary)	-	-	0
Regressions ❌ (secondary)	3.4%	[2.5%, 4.3%]	2
Improvements ✅ (primary)	-1.2%	[-1.2%, -1.2%]	1
Improvements ✅ (secondary)	-	-	0
All ❌✅ (primary)	-1.2%	[-1.2%, -1.2%]	1

Cycles

Results

This is a less reliable metric that may be of interest but was not used to determine the overall result at the top of this comment.

	mean1	range	count2
Regressions ❌ (primary)	2.2%	[2.2%, 2.2%]	1
Regressions ❌ (secondary)	2.1%	[2.1%, 2.1%]	1
Improvements ✅ (primary)	-	-	0
Improvements ✅ (secondary)	-	-	0
All ❌✅ (primary)	2.2%	[2.2%, 2.2%]	1

Footnotes

1. the arithmetic mean of the percent change ↩ ↩²

2. number of relevant changes ↩ ↩²