chore(deps): Bump tokio from 1.36.0 to 1.38.0

[dependabot]

Bumps tokio from 1.36.0 to 1.38.0.

Release notes

Sourced from tokio's releases.

Tokio v1.38.0

This release marks the beginning of stabilization for runtime metrics. It stabilizes RuntimeMetrics::worker_count. Future releases will continue to stabilize more metrics.

Added

• fs: add File::create_new (#6573)
• io: add copy_bidirectional_with_sizes (#6500)
• io: implement AsyncBufRead for Join (#6449)
• net: add Apple visionOS support (#6465)
• net: implement Clone for NamedPipeInfo (#6586)
• net: support QNX OS (#6421)
• sync: add Notify::notify_last (#6520)
• sync: add mpsc::Receiver::{capacity,max_capacity} (#6511)
• sync: add split method to the semaphore permit (#6472, #6478)
• task: add tokio::task::join_set::Builder::spawn_blocking (#6578)
• wasm: support rt-multi-thread with wasm32-wasi-preview1-threads (#6510)

Changed

• macros: make #[tokio::test] append #[test] at the end of the attribute list (#6497)
• metrics: fix blocking_threads count (#6551)
• metrics: stabilize RuntimeMetrics::worker_count (#6556)
• runtime: move task out of the lifo_slot in block_in_place (#6596)
• runtime: panic if global_queue_interval is zero (#6445)
• sync: always drop message in destructor for oneshot receiver (#6558)
• sync: instrument Semaphore for task dumps (#6499)
• sync: use FIFO ordering when waking batches of wakers (#6521)
• task: make LocalKey::get work with Clone types (#6433)
• tests: update nix and mio-aio dev-dependencies (#6552)
• time: clean up implementation (#6517)
• time: lazily init timers on first poll (#6512)
• time: remove the true_when field in TimerShared (#6563)
• time: use sharding for timer implementation (#6534)

Fixed

• taskdump: allow building taskdump docs on non-unix machines (#6564)
• time: check for overflow in Interval::poll_tick (#6487)
• sync: fix incorrect is_empty on mpsc block boundaries (#6603)

Documented

• fs: rewrite file system docs (#6467)
• io: fix stdin documentation (#6581)
• io: fix obsolete reference in ReadHalf::unsplit() documentation (#6498)
• macros: render more comprehensible documentation for select! (#6468)
• net: add missing types to module docs (#6482)
• net: fix misleading NamedPipeServer example (#6590)

... (truncated)

Commits

• 14c17fc chore: prepare Tokio v1.38.0 (#6601)
• 65cbf73 chore: prepare tokio-macros v2.3.0 (#6600)
• dbf93c7 sync: fix incorrect is_empty on mpsc block boundaries (#6603)
• 873cb8a runtime: move task out of the lifo_slot in block_in_place (#6596)
• 97bb47b task: fix a typo in doc of LocalSet::run_until (#6599)
• 86658bd metrics: stabilize RuntimeMetrics::worker_count (#6556)
• 9e00b26 sync: add Notify::notify_last (#6520)
• 6c42d28 net: fix misleading NamedPipeServer example (#6590)
• 3a6fdc0 license: fix formatting and remove year in licenses (#6451)
• 2890d0c metrics: fix blocking_threads count (#6551)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
cargo/tokio	1.38.0	🟢 8.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing 🟢 10 project is fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
cargo/tokio-macros	2.3.0	🟢 8.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing 🟢 10 project is fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
cargo/tokio	1.36.0	🟢 8.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing 🟢 10 project is fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
cargo/tokio-macros	2.2.0	🟢 8.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing 🟢 10 project is fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Manifest Files

Cargo.lock

• tokio@1.38.0
• tokio-macros@2.3.0
• tokio@1.36.0
• tokio-macros@2.2.0

[dependabot]

Superseded by #75.