Update Rust crate neon-build to 0.10.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
neon-build	build-dependencies	minor	0.3.1 -> 0.10.1

---

Release Notes

neon-bindings/neon (neon-build)

v0.10.1

Compare Source

Fix a soundness hole in JsArrayBuffer::external
and JsBuffer::external (#​897).

Thanks to @​Cassy343 for finding the issue!

In previous versions of Neon, it was possible to create a JsArrayBuffer or JsBuffer that references data without the 'static lifetime.

pub fn soundness_hole(mut cx: FunctionContext) -> JsResult<JsArrayBuffer> {
    let mut data = vec![0u8, 1, 2, 3];

    // Creating an external from `&mut [u8]` instead of `Vec<u8>` since there is a blanket impl
    // of `AsMut<T> for &mut T`
    let buf = JsArrayBuffer::external(&mut cx, data.as_mut_slice());

    // `buf` is still holding a reference to `data`!
    drop(data);

    Ok(buf)
}

v0.10.0

Compare Source

See the Neon 0.10 Migration Guide for more details about new features and breaking changes.

Features

• New buffer borrowing API
• Added JoinHandle for Channel::send
• JsPromise and TaskBuilder
• Handle panics and exceptions in Channels and Tasks
• Function call / construct builders
  and simplify low level call
• Create functions from closures

Minor Improvements

• Performance improvements
• Rename N-API to Node-API in docs to match Node changes
• Remove unused cslice dependency
• Switch to syn-mid for faster compile times
• Downcast in Object::get
• Added migration guide
• Added Object::get_opt and Object::get_value

Fixes

• [Safety] Make it harder to store and forge Throw
• [Soundness] Make JsValue types !Copy
• [Soundness] Tag Root with instance id
• create-neon no longer leaves partial project on disk
• Fix legacy backend on Electron and Windows
• FreeBSD support on legacy backend

Internal Improvements

• Replace Electron tests with Playwright
• Re-organize Neon into an npm workspace
• Fix crates.io badge
• Doc test fixes
• Fix broken link in the README

v0.9.1

Compare Source

• Expose the Finalize trait as neon::types::Finalize so that docs are visible
• Improved docs and build scripts in create-neon to make release builds more
  discoverable (#​771)
• Update nan to fix an Electron 13 incompatibility (#​778)

v0.9.0

Compare Source

Performance

Channel, formerly EventQueue, are now cloneable. Clones share a backing queue to take advantage of an optimization in Node threadsafe functions. Additionally, when specifying Node API 6 or higher (napi-6), calling cx.channel() will return a shared queue (#​739).

The change may cause a performance regression in some pathological use cases (#​762).

Deprecation

EventQueue and EventQueueError have been renamed to Channel and ChannelError respectively to clarify their function and similarity to Rust channels. The types are available as deprecated aliases (#​752).

Docs

• Document error causes for Channel::try_send docs (#​767)
• Document neon::object (#​740)

Fixes

• Fix usage of a removed API in legacy buffers (#​769)

v0.8.3

Compare Source

• Fix crash caused by non-thread safety in napi_threadsafefunction on early termination (#​744)
• Fix memory leak in Root (#​750)

v0.8.2

Compare Source

• More docs improvements
• Added a deprecation warning to neon new (#​722)

v0.8.1

Compare Source

• Fix legacy-backend for Node 16 (#​715)
• Various docs improvements

v0.8.0

Compare Source

Fixes

• as_slice and as_mut_slice properly handle a null pointer from an empty buffer (#​681)
• Global drop queue added to avoid panics on N-API 6+ when dropping a Root (#​700)

Features

• Added neon::reflect::eval (#​692)
• Added create-neon for creating an N-API project (#​690)
• Added details to the README.md generated by create-neon (#​697)

Improvements

• Switched N-API tests to cargo-cp-artifact (#​687)
• Added impl<T: Finalize> Finalize for Option<T> (#​680)
• Added a N-API migration guide (#​685)

Housekeeping

• Lint fixes (#​609)
• Lint CI enforcement and cargo fmt (#​698)

v0.7.1

Compare Source

Features

• Added JsDate to N-API backend (#​639)
• Implement JsBuffer::unitialized for N-API backend (#​664)

Fixes

• Do not panic if a Root is leaked after the event loop has stopped (#​677)
• Stubs for features that will not be implemented in the N-API backend are removed (#​663)
• Fix doc URL link (#​663)

v0.7.0

Compare Source

N-API

Version Selection

Neon supports a large number of different Node versions which may have different N-API requirements. Neon now supports selecting the minimum required N-API version required by a module. For example, for N-API Version 4:

neon = { version = "0.7", default-features = false, features = ["napi-4"] }

If the Neon module is loaded in an older version of Node that does not support that N-API version, a panic message will inform the user.

Threadsafe Functions

A prerelease version of EventQueue for calling into the main JavaScript thread from Rust threads can be enabled with the event-queue-api feature flag. The API is considered unstable and may change in the future until the RFC is merged.

v0.6.0

Compare Source

The cx.try_catch(..) API has been updated to return T: Sized instead of T: Value (#​631). This API is strictly more powerful and allows users to return both JavaScript and Rust values from try_catch closures.

N-API

• N-API symbols are now loaded dynamically (#​646)
• Build process for N-API is greatly simplified by leveraging dynamic loading (#​647)

v0.5.3

Compare Source

Bug Fixes

Upgrade node-gyp (#​623)

• Fix Windows Node 15
• Fix Apple M1

Features

Added neon::main macro as a replacement for register_module! (#​636)

Known Issues

Builds occassionally fail with Windows, Node 15 and npm 7 (#​642)

v0.5.2

Compare Source

CLI

Added support for additional arguments passed to cargo build. Resolves #​471.

neon build --release -- --features awesome

N-API

• Improved arguments performance
• Add redirect and NPM_CONFIG_DISTURL support

v0.5.1

Compare Source

Performance

• smallvec is used for collecting arguments and yields a small performance gain when calling JsFunction

Broader Support

Thanks to @​staltz, neon now builds for both iOS and Android with nodejs-mobile.

v0.5.0

Compare Source

Re-publish

Versions 0.4.1 and 0.4.2 included a breaking change in neon-runtime. At the time, this was considered acceptable because neon-runtime is considered an internal crate and not part of the public API. However, it was discovered, after publishing, that neon-serde, a commonly used crate in the neon ecosystem, contained a direct dependency on neon-runtime. In order to best support users, versions 0.4.1 and 0.4.2 were "yanked" and re-published as 0.5.0.

Additionally, the team is working with the authors of neon-serde to remove the dependency on neon-runtime to prevent future issues.

Bug Fixes

• Fix stack overflow in DowncastError Display impl (#​606)

v0.4.2

Compare Source

Unpublished / Yanked

Bug Fixes

• Fix memory leak and race condition in EventHandler

v0.4.1

Compare Source

Unpublished / Yanked

Features

Try Catch

Added the cx.try_catch API of RFC 29. This feature is behind the try-catch-api feature flag.

Bug Fixes

• Pass async_context to node::MakeCallback (#​498)
• Cache bust neon if node version changes (#​388)
• Fix debug builds in windows (#​400)
• Fix cross compiling architectures (#​491)
• Fix neon new hanging on Windows (#​537)

CI Improvements

The Neon Project now uses Github Actions thanks to @​lhr0909! As part of this change, CI now runs on all of our supported platforms (macOS, Windows, linux) and Node versions.

v0.4.0

Compare Source

v0.3.3

Compare Source

Hot fix for neon build in projects with many dependencies.

v0.3.2

Compare Source

Bug fixes and Small Features

• Disable node module registration on test build, allowing cargo test to be used on neon modules
• Added support for alternate CARGO_TARGET_DIR locations (e.g., workspaces)
• Added macros to neon::prelude to improve ergonomics in Rust 2018
• Link win_delay_hook when building with electron-build-env, fixing Windows Electron
• Fixed missing __cxa_pure_virtual on Linux
• Copy native files into OUT_DIR and build there to fix cargo publish and follow best practices
• Eliminated mem::uniitialized() usage, reducing warnings and fixing an instance of undefined behavior

Potentially Breaking

The macOS link arguments were moved from neon-cli to neon-build. This is more idiomatic, but makes neon-build required for macOS builds where it was unnecessary before.

Since neon-build has been included in the project template since 0.1 this change was not deemed significant enough to warrant a major revision.

N-API

Neon 0.3.2 lays the groundwork for the next major revision. Development of Neon against an ABI stable Node API (N-API) will occur on main.

• Added legacy-runtime and n-api feature flags for toggling neon runtime
• Moved the legacy runtime to nodejs-sys crate
• Stubbed required n-api implementation
• Added feature flag to neon-cli to help configuring n-api projects

---

Configuration

📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: native/Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path native/Cargo.toml --workspace
error: failed to acquire package cache lock

Caused by:
  failed to open: /home/ubuntu/.cargo/.package-cache

Caused by:
  failed to create directory `/home/ubuntu/.cargo`

Caused by:
  File exists (os error 17)