build(deps): bump rumqttd from 0.13.0 to 0.19.0

[dependabot]

Bumps rumqttd from 0.13.0 to 0.19.0.

Release notes

Sourced from rumqttd's releases.

rumqttd-0.19.0

What's New?

• 🔐 Extensible external authentication by @​nathansizemore in bytebeamio/rumqtt#761

You can hook custom function for authentication using client id, username and password. This custom function can be extended as per need, for e.g. fetching credentials from DB, using tokens or spawning processes, etc. see example for setup.

• 🔑 Add support for ECC keys when configuring TLS in rumqttd by @​AlexandreCassagne in bytebeamio/rumqtt#743

Previously only RSA keys were accepted, but now you can specify any TLS key formats currently supported by rustls, like ECC, PKCS8 to name a few.

---

Changes

Configuration related

• v4 config is optional by @​swanandx in bytebeamio/rumqtt#736

user can specify v4 and/or v5 config. Specifying [v4.x] in rumqttd.toml is no longer mandatory, those who wish to only use v5 can now only include [v5.x] in config.

• console configuration is optional by @​swanandx in bytebeamio/rumqtt#737

specifying [console] in rumqttd.toml is now optional and can be safely removed if you don't wish to use console.

• CA certificate is optional if client auth is disabled

capath in tls config is only required is client authentication will be used ( see "verify-client-cert" feature below to know more ). Warning will be logged if the feature is disabled and capath is being ignored.

Feature related

• websocket feature is enabled by default by @​swanandx in bytebeamio/rumqtt#734

rumqttd will log a warning if [ws.x] is specified in config but getting ignored due to websocket feature is disabled.

• "websockets" feature is removed in favour of "websocket"

• client auth is featured gated behind "verify-client-cert" by @​de-sh in bytebeamio/rumqtt#756

mutual TLS ( mTLS ) or client authentication, which is done verifying by certificates provided client is now optional with use-rustls. capath specifying CA certificate must be present in config file if client auth is enabled. To enable client auth, you need to enable verify-client-cert features ( disabled by default to match behavior of use-native-tls )

Others

• Console endpoint /config prints Router Config instead of returning console settings by @​swanandx in bytebeamio/rumqtt#727
• Update tungstenite and dependencies to fix CVE by @​swanandx in bytebeamio/rumqtt#730

... (truncated)

Changelog

Sourced from rumqttd's changelog.

rumqttc v0.19.0

• MQTTv5: Add processing of missing Mqtt subscribe options (#536)
• Fix examples to stop printing error in loop (#540)
• MQTTv5!: Remove Connect from ConnectionError::StateError (#541)
• MQTTv5: Send last_will and login info with connect (#478)

rumqttd v0.12.1

• Remove build.rs as it is not required now (#544)
• Stress test router to against 10k connections (#511)
• Make router::Meter public (#521)
• Expose prometheus scraping endpoints for router metricss (#522)
• Make configuration file optional for running the broker and add subcommand to generate default configuration file (#523)
• Use CA path in correct argument position (#529)
• Support retransmission after reconnect (#534)

misc

• Remove rumqttd-old in favour of rumqttd (#530)
• Optimize Github CI workflow (#526)
• Revamp Readme and rename demo.toml to rumqttd.toml (#532)

---

R18

---

rumqttc v0.18.0

• Add support for native-tls within rumqttc (#501)
• Fixed panicking in recv_timeout and try_recv by entering tokio runtime context (#492, #497)
• Removed unused dependencies and updated version of some of used libraries to fix dependabots warning (#475)

rumqttd v0.12.0-beta.2

• Add meters related to router, subscriptions, and connections (#508)
• Allow multi-tenancy validation for mtls clients with Org set in certificates (#505)
• Add tracing for structured, context-aware logging (#499, #503)
• Add the ablity to change log levels and filters dynamically at runtime (#499)
• Added properties field to Unsubscribe, UnsubAck, and Disconnect packets so its consistent with other packets. (#480)
• Changed default segment size in demo config to 100MB (#484)
• Allow subscription on topic's starting with test (#494)

---

R17

---

rumqttc v0.17.0

• Reimplement v5 with old EvenLoop design (#464)
• Implement recv, try_recv, recv_timeout for Connection (#458)
• Improve filter validation (#453)

... (truncated)

Commits

• 5ae632c chore: release rumqttd v0.19.0
• 7c3e189 feat(rumqttd): Example for external authentication setup (#765)
• 99b2142 chore: fix rust-cache in CI with proper key and global RUSTFLAG (#764)
• aa92939 chore: move rust-version from workspace to respective crates (#763)
• 68736bd chore(rumqttc): Lower the MSRV to Rust version 1.64.0 (#762)
• aba0456 feat(rumqttd): external auth capabilities with function pointer (#761)
• fdfe9ab drain pending Request from channel while cleanup (#760)
• 323c2f8 build(deps): bump openssl from 0.10.57 to 0.10.60 (#759)
• 22d7fae feat(rumqttc): optional client certificates while using native-tls (#758)
• 8499789 feat(rumqttd): verify-client-cert to feature gate rustls client auth (#756)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[qwandor]

@dependabot rebase