Dependabot/cargo/dependencies 0520

[houseme]

No description provided.

[houseme]

@copilot resolve the merge conflicts in this pull request

[Copilot]

Pull request overview

This PR updates workspace dependencies and CI tooling, while also introducing functional changes across SigV4 signature verification, s3s-fs conditional semantics, and the s3-tests E2E baseline pinning.

Changes:

• Bump Rust and Python dependencies (workspace crates, lockfiles, and GitHub Actions).
• Pin ceph/s3-tests to a fixed revision and reuse that pin in both CI and local E2E scripts.
• Extend SigV4 verification to optionally accept signatures computed against the raw URI path; enhance s3s-fs CopyObject/PutObject behaviors (metadata directive + conditional headers) and add integration tests.

Reviewed changes

Copilot reviewed 16 out of 18 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
Cargo.toml	Workspace dependency version bumps and feature adjustments (notably opendal, AWS SDK crates).
Cargo.lock	Lockfile refresh reflecting updated Rust dependency graph.
crates/s3s-aws/Cargo.toml	Refines aws-sdk-s3 features/default-features for the s3s-aws crate.
crates/s3s-fs/Cargo.toml	Adjusts opendal features/default-features for s3s-fs.
crates/s3s-fs/src/s3.rs	Implements conditional copy handling, metadata directive semantics, self-replace safety, and PutObject conditional handling.
crates/s3s-fs/tests/it_aws.rs	Adds AWS SDK integration tests for If-Match and conditional copy + metadata directive behaviors.
crates/s3s-wasm/Cargo.toml	Updates wasm-bindgen-test dev-dependency.
crates/s3s/src/ops/mod.rs	Threads both decoded and raw URI path into signature checking context.
crates/s3s/src/ops/signature.rs	Adds raw-path fallback verification for SigV4 (header + presigned) and extends tests.
crates/s3s/src/ops/tests.rs	Updates tests to match SignatureContext lifetime changes (borrowed paths).
crates/s3s/src/sig_v4/methods.rs	Introduces canonical request builders that can preserve raw URI paths.
pyproject.toml	Raises lxml minimum version requirement.
uv.lock	Updates Python dependency lock entries (idna, lxml, urllib3, etc.).
scripts/e2e-s3tests.sh	Uses pinned S3TESTS_REF to fetch a stable s3-tests revision.
scripts/s3tests.env	Stores the pinned ceph/s3-tests revision for CI/E2E usage.
scripts/source-s3tests-ref.sh	Shared helper to load S3TESTS_REF from env or scripts/s3tests.env.
.github/workflows/ci.yml	Clones s3-tests at the pinned revision for reproducible E2E.
.github/workflows/docs.yml	Updates GitHub Pages artifact upload action version.

[Copilot]

@copilot resolve the merge conflicts in this pull request

Resolved the merge conflicts in commit 9db44a2:

• Cargo.lock: kept HEAD's Dependabot-updated package versions (e.g. aws-lc-sys 0.41.0, cc 1.2.62) over origin/main's older versions.
• sig_v4/methods.rs: HEAD added raw_uri_path: bool while origin/main added payload: Payload<'_> to create_presigned_canonical_request_with_uri_mode. Combined both parameters; updated the two public wrapper functions to also accept and forward payload.
• ops/signature.rs: HEAD uses SignatureVerificationContext with raw-URI-path fallback; origin/main added payload-based verification (from x-amz-content-sha256) and a new v4_presigned_url_invalid_content_sha256_returns_checksum_mismatch test. Kept the raw-URI-path fallback, added the payload computation, and included the new test. All 617 unit tests pass.