chore(deps): bump cddl from 0.10.1 to 0.10.7

[dependabot]

Bumps cddl from 0.10.1 to 0.10.7.

Release notes

Sourced from cddl's releases.

v0.10.7

What's Changed

A large release. Eleven community contributions to the parser and validator, a full sweep of the security backlog, and every open issue closed.

🐛 Validator and parser fixes

Eleven fixes from @​SebastienGllmt (dcSpark), merged with authorship intact:

• Control operators are now enforced on uint instead of short-circuiting @​SebastienGllmt (#620)
• Array validation follows sequence semantics @​SebastienGllmt (#621)
• Ranges support non-uint bounds @​SebastienGllmt (#622)
• Bignum types (bigint / biguint / bignint) work as CBOR map keys and values @​SebastienGllmt (#642)
• Optional keys accept empty maps and reject invalid keys @​SebastienGllmt (#644)
• Float map keys match correctly @​SebastienGllmt (#645)
• Floats validate as number @​SebastienGllmt (#646)
• * any => any is supported in maps @​SebastienGllmt (#647)
• Type-choice and group-choice comments attach to the right node @​SebastienGllmt (#617)
• A colon member key is no longer misparsed as an arrow key when => appears in the value @​SebastienGllmt (#618)
• Radix literals lex correctly @​SebastienGllmt (#637)

#646 introduces NumericKind in src/validator/mod.rs. Because number = int / float, is_ident_integer_data_type and is_ident_float_data_type are not mutually exclusive; both are now deprecated in favour of ident_numeric_kind.

🐛 Issue fixes

• Wildcard map entries are no longer order-dependent (#643). { * tstr => int, * int => int } rejected input that the same two entries in the opposite order accepted, because each entry errored on keys belonging to other entries. Strictness is unchanged.
• bstr encodes as a CBOR byte string (major type 2) rather than an array of integers (#638).
• The tagged prelude types encode as CBOR tags (#639): tdate 0, time 1, uri 32, b64url 33, b64legacy 34, regexp 35. The generated helper is format-aware, so JSON output is unchanged and untagged input is still accepted.
• Maps with more than one wildcard entry compile (#640) — every entry was previously emitted as a field named entries.
• Enums whose choices are all string literals now round-trip. kind = "a" / "b" was generated as unit variants under #[serde(untagged)], which serde deserializes from null only, so these enums could not deserialize a string at all.
• MemberKey behaviour for arrow-form keys is documented and locked in with tests (#619). No behaviour change: MemberKey::Value has no is_cut field and renders with a trailing :, so 0 ^ => uint and 0 => uint cannot be represented by it without loss.

🚀 cddl-derive configuration (#641)

Four opt-in options, accepted by both cddl_typegen! and #[cddl]. Defaults reproduce previous behaviour exactly.

Option	Effect
any_type = "<path>"	Rust type for CDDL any (default serde_json::Value)
non_exhaustive = true	#[non_exhaustive] on generated structs and enums
other_variant = true	Other(String) catch-all on generated enums
substitute("k" = "<path>")	replace generated types with hand-written ones

A substitute key is either a rule name, which replaces every reference and drops that rule's definition, or a rule-qualified field name, which replaces a single field.

New dependencies of generated code, pulled in only when the schema uses the relevant construct: serde_with for bstr, ciborium for the tagged prelude types.

🔒 Security

All 32 open Dependabot advisories resolved (1 critical, 22 high, 8 moderate, 1 low) across the cddl-lsp, cddl-lsp/client, cddl-lsp/server and www workspaces (#664). npm audit reports 0 vulnerabilities in all four.

... (truncated)

Commits

• 938a931 Merge pull request #667 from anweiss/release/0.10.7
• 359c595 chore: update stale version references in docs and source
• 5fe836d chore: bump version to 0.10.7
• db4ea55 Merge pull request #666 from anweiss/fix/issues
• 354bdee test: gate new integration tests off wasm32
• 1ff16a0 feat(cddl-derive): configuration options for generated code
• 39aceb0 Merge branch 'main' into fix/issues
• 6f159d6 Merge pull request #647 from dcSpark/fix-any-key-openness
• 7356bf1 Merge branch 'main' into fix/issues
• c9920de Merge pull request #665 from anweiss/deps/cargo-bumps
• Additional commits viewable in compare view