Bump url from 2.5.2 to 2.5.3

[dependabot]

Bumps url from 2.5.2 to 2.5.3.

Release notes

Sourced from url's releases.

v2.5.3

What's Changed

• fix: enable wasip2 feature for wasm32-wasip2 target by @​brooksmtownsend in servo/rust-url#960
• Fix idna tests with no_std by @​cjwatson in servo/rust-url#963
• Fix debugger_visualizer test failures. by @​valenting in servo/rust-url#967
• Add AsciiSet::EMPTY and boolean operators by @​joshka in servo/rust-url#969
• mention why we pin unicode-width by @​Manishearth in servo/rust-url#972
• refactor and add tests for percent encoding by @​joshka in servo/rust-url#977
• Add a test for and fix issue #974 by @​hansl in servo/rust-url#975
• no_std support for the url crate by @​domenukk in servo/rust-url#831
• Normalize URL paths: convert /.//p, /..//p, and //p to p by @​theskim in servo/rust-url#943
• support Hermit by @​m-mueller678 in servo/rust-url#985
• fix: support wasm32-wasip2 on the stable channel by @​brooksmtownsend in servo/rust-url#983
• Improve serde error output by @​konstin in servo/rust-url#982
• OSS-Fuzz: Add more fuzzer by @​arthurscchan in servo/rust-url#988
• Merge idna-v1x to main by @​hsivonen in servo/rust-url#990

New Contributors

• @​brooksmtownsend made their first contribution in servo/rust-url#960
• @​cjwatson made their first contribution in servo/rust-url#963
• @​joshka made their first contribution in servo/rust-url#969
• @​hansl made their first contribution in servo/rust-url#975
• @​theskim made their first contribution in servo/rust-url#943
• @​m-mueller678 made their first contribution in servo/rust-url#985
• @​konstin made their first contribution in servo/rust-url#982
• @​arthurscchan made their first contribution in servo/rust-url#988

Full Changelog: servo/rust-url@v2.5.2...v2.5.3

Commits

• 8a683ff Merge idna-v1x to main (#990)
• 08a3268 OSS-Fuzz: Add more fuzzers (#988)
• 5d363cc Improve serde error output (#982)
• 30e6258 fix: support wasm32-wasip2 on stable channel (#983)
• bf089c4 support hermit (#985)
• b08a655 Normalize URL paths: convert /.//p, /..//p, and //p to p (#943)
• ebd5cfb no_stdsupport for the url crate (#831)
• 7eccac9 Add a test for and fix issue #974 (#975)
• 710e1e7 refactor and add tests for percent encoding (#977)
• 6050a6e mention why we pin unicode-width (#972)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[jorendorff]

Sigh, this brings in a bunch of heavy new dependencies, because it aims to support some Unicode stuff I don't understand.

url depends on idna_adaptor which depends on idna which brings in a bunch of ICU libraries. There is a workaround available, idna_adaptor, but I think it's up to the end user to find it and use it.

[hendrikvanantwerpen]

@jorendorff Should this even have a Cargo.lock in the repo, since it's a library? Without it, dependabot would certainly be less noisy.

[jorendorff]

@jorendorff Should this even have a Cargo.lock in the repo, since it's a library? Without it, dependabot would certainly be less noisy.

Committing Cargo.lock is optional for library crates. It doesn't affect downstream users. It does affect what happens in CI. I think we should keep it because CI is more deterministic that way, and if a point release of a dependency ever does break us, we'll find out about it in the dependabot PR to update that dependency, rather than the next time we want to merge some other unrelated change, or when a user complains.