chore(deps): update rust crate git2 to 0.19.0

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
git2	workspace.dependencies	minor	0.18.1 -> 0.19.0

---

Release Notes

rust-lang/git2-rs (git2)

v0.19.0

Compare Source

0.18.3...0.19.0

Added

• Added opts functions to control server timeouts (get_server_connect_timeout_in_milliseconds, set_server_connect_timeout_in_milliseconds, get_server_timeout_in_milliseconds, set_server_timeout_in_milliseconds), and add ErrorCode::Timeout.
  #​1052

Changed

• ❗ Updated to libgit2 1.8.1
  #​1032
• Reduced size of the Error struct.
  #​1053

Fixed

• Fixed some callbacks to relay the error from the callback to libgit2.
  #​1043

v0.18.3

Compare Source

0.18.2...0.18.3

Added

• Added opts:: functions to get / set libgit2 mwindow options
  #​1035

Changed

• Updated examples to use clap instead of structopt
  #​1007

v0.18.2

Compare Source

0.18.1...0.18.2

Added

• Added opts::set_ssl_cert_file and opts::set_ssl_cert_dir for setting Certificate Authority file locations.
  #​997
• Added TreeIter::nth which makes jumping ahead in the iterator more efficient.
  #​1004
• Added Repository::find_commit_by_prefix to find a commit by a shortened hash.
  #​1011
• Added Repository::find_tag_by_prefix to find a tag by a shortened hash.
  #​1015
• Added Repository::find_object_by_prefix to find an object by a shortened hash.
  #​1014

Changed

• ❗ Updated to libgit2 1.7.2.
  This fixes CVE-2024-24575 and CVE-2024-24577.
  #​1017

---

Configuration

📅 Schedule: Branch creation - "before 5am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --workspace
    Updating crates.io index
error: failed to select a version for `libgit2-sys`.
    ... required by package `cargo v0.76.0 (/tmp/renovate/repos/github/X-oss-byte/Cargo.io)`
    ... which satisfies path dependency `cargo` (locked to 0.76.0) of package `benchsuite v0.0.0 (/tmp/renovate/repos/github/X-oss-byte/Cargo.io/benches/benchsuite)`
versions that meet the requirements `^0.16.1` are: 0.16.1+1.7.1, 0.16.2+1.7.2

the package `libgit2-sys` links to the native library `git2`, but it conflicts with a previous package which links to `git2` as well:
package `libgit2-sys v0.17.0+1.8.1`
    ... which satisfies dependency `libgit2-sys = "^0.17.0"` of package `git2 v0.19.0`
    ... which satisfies dependency `git2 = "^0.19.0"` of package `xtask-bump-check v0.0.0 (/tmp/renovate/repos/github/X-oss-byte/Cargo.io/crates/xtask-bump-check)`
Only one package in the dependency graph may specify the same links value. This helps ensure that only one copy of a native library is linked in the final binary. Try to adjust your dependencies so that only one package uses the `links = "git2"` value. For more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links.

failed to select a version for `libgit2-sys` which could resolve this conflict

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[changeset-bot]

⚠️ No Changeset found

Latest commit: e703a4f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[sourcery-ai]

We have skipped reviewing this pull request. Here's why:

• It seems to have been created by a bot (hey, renovate-bot!). We assume it knows what it's doing!
• We don't review packaging changes - Let us know if you'd like us to change this.