build(deps): bump url from 2.5.3 to 2.5.6 (#38879)

Bumps [url](https://github.com/servo/rust-url) from 2.5.3 to 2.5.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/servo/rust-url/releases">url's
releases</a>.</em></p>
<blockquote>
<h2>v2.5.5</h2>
<h2>What's Changed</h2>
<ul>
<li>ci: downgrade crates when building for Rust 1.67.0 by <a
href="https://github.com/mxinden"><code>@​mxinden</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1003">servo/rust-url#1003</a></li>
<li>ci: run unit tests with sanitizers by <a
href="https://github.com/mxinden"><code>@​mxinden</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1002">servo/rust-url#1002</a></li>
<li>fix small typo by <a
href="https://github.com/hkBst"><code>@​hkBst</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1011">servo/rust-url#1011</a></li>
<li>chore: fix clippy errors on main by <a
href="https://github.com/dsherret"><code>@​dsherret</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1019">servo/rust-url#1019</a></li>
<li>perf: remove heap allocation in parse_query by <a
href="https://github.com/dsherret"><code>@​dsherret</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1020">servo/rust-url#1020</a></li>
<li>perf: slightly improve parsing a port by <a
href="https://github.com/dsherret"><code>@​dsherret</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1022">servo/rust-url#1022</a></li>
<li>perf: improve to_file_path() by <a
href="https://github.com/dsherret"><code>@​dsherret</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1018">servo/rust-url#1018</a></li>
<li>perf: make parse_scheme slightly faster by <a
href="https://github.com/dsherret"><code>@​dsherret</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1025">servo/rust-url#1025</a></li>
<li>update LICENSE-MIT by <a
href="https://github.com/wmjae"><code>@​wmjae</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1029">servo/rust-url#1029</a></li>
<li>perf: url encode path segments in longer string slices by <a
href="https://github.com/dsherret"><code>@​dsherret</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1026">servo/rust-url#1026</a></li>
<li>Disable the default features on serde by <a
href="https://github.com/rilipco"><code>@​rilipco</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1033">servo/rust-url#1033</a></li>
<li>docs: base url relative join by <a
href="https://github.com/tisonkun"><code>@​tisonkun</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1013">servo/rust-url#1013</a></li>
<li>perf: remove heap allocation in parse_host by <a
href="https://github.com/dsherret"><code>@​dsherret</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1021">servo/rust-url#1021</a></li>
<li>Update tests to Unicode 16.0 by <a
href="https://github.com/hsivonen"><code>@​hsivonen</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1045">servo/rust-url#1045</a></li>
<li>Add some some basic functions to <code>Mime</code> by <a
href="https://github.com/mrobinson"><code>@​mrobinson</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1047">servo/rust-url#1047</a></li>
<li>ran <code>cargo clippy --fix -- -Wclippy::use_self</code> by <a
href="https://github.com/mrobinson"><code>@​mrobinson</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1048">servo/rust-url#1048</a></li>
<li>Fix MSRV and clippy CI by <a
href="https://github.com/Manishearth"><code>@​Manishearth</code></a> in
<a
href="https://redirect.github.com/servo/rust-url/pull/1058">servo/rust-url#1058</a></li>
<li>Update <code>Url::domain</code> docs to show that it includes
subdomain by <a
href="https://github.com/supercoolspy"><code>@​supercoolspy</code></a>
in <a
href="https://redirect.github.com/servo/rust-url/pull/1057">servo/rust-url#1057</a></li>
<li>set_hostname should error when encountering colon ':' by <a
href="https://github.com/edgul"><code>@​edgul</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1060">servo/rust-url#1060</a></li>
<li>version bump to 2.5.5 by <a
href="https://github.com/edgul"><code>@​edgul</code></a> in <a
href="https://redirect.github.com/servo/rust-url/pull/1061">servo/rust-url#1061</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/mxinden"><code>@​mxinden</code></a> made
their first contribution in <a
href="https://redirect.github.com/servo/rust-url/pull/1003">servo/rust-url#1003</a></li>
<li><a href="https://github.com/hkBst"><code>@​hkBst</code></a> made
their first contribution in <a
href="https://redirect.github.com/servo/rust-url/pull/1011">servo/rust-url#1011</a></li>
<li><a href="https://github.com/wmjae"><code>@​wmjae</code></a> made
their first contribution in <a
href="https://redirect.github.com/servo/rust-url/pull/1029">servo/rust-url#1029</a></li>
<li><a href="https://github.com/rilipco"><code>@​rilipco</code></a> made
their first contribution in <a
href="https://redirect.github.com/servo/rust-url/pull/1033">servo/rust-url#1033</a></li>
<li><a href="https://github.com/tisonkun"><code>@​tisonkun</code></a>
made their first contribution in <a
href="https://redirect.github.com/servo/rust-url/pull/1013">servo/rust-url#1013</a></li>
<li><a
href="https://github.com/supercoolspy"><code>@​supercoolspy</code></a>
made their first contribution in <a
href="https://redirect.github.com/servo/rust-url/pull/1057">servo/rust-url#1057</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/servo/rust-url/compare/v2.5.4...v2.5.5">https://github.com/servo/rust-url/compare/v2.5.4...v2.5.5</a></p>
<h2>v2.5.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Revert &quot;Normalize URL paths: convert /.//p, /..//p, and //p to
p (<a
href="https://redirect.github.com/servo/rust-url/issues/943">#943</a>)&quot;
by <a href="https://github.com/valenting"><code>@​valenting</code></a>
in <a
href="https://redirect.github.com/servo/rust-url/pull/999">servo/rust-url#999</a></li>
<li>Updates the MSRV to 1.63 required though the libc v0.2.164
dependency</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/servo/rust-url/compare/v2.5.3...v2.5.4">https://github.com/servo/rust-url/compare/v2.5.3...v2.5.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/servo/rust-url/commits">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=url&package-manager=cargo&previous-version=2.5.3&new-version=2.5.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Martin Robinson <mrobinson@igalia.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Martin Robinson <mrobinson@igalia.com>

Cargo.lock

@@ -9185,9 +9185,9 @@ checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
 
 [[package]]
 name = "url"
-version = "2.5.3"
+version = "2.5.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d157f1b96d14500ffdc1f10ba712e780825526c03d9a49b4d0324b0d9113ada"
+checksum = "08bc136a29a3d1758e07a9cca267be308aeebf5cfd5a10f3f67ab2097683ef5b"
 dependencies = [
  "form_urlencoded",
  "idna",

deny.toml

@@ -12,10 +12,6 @@ feature-depth = 1
 # https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
 [advisories]
 ignore = [
-    # This has been yanked, but upgrading to the next version breaks some WPT tests.
-    # It needs investigation.
-    "url@2.5.3",
-
     # The crate `paste` is no longer maintained.
     "RUSTSEC-2024-0436",
 ]

tests/wpt/meta/url/url-setters-a-area.window.js.ini

@@ -1,5 +1,3 @@
-[url-setters-a-area.window.html?include=javascript]
-
 [url-setters-a-area.window.html?include=mailto]
   [<area>: Setting <mailto:me@example.net>.pathname = '/foo' Cannot-be-a-base don’t have a path]
     expected: FAIL
@@ -26,18 +24,6 @@
 
 
 [url-setters-a-area.window.html?exclude=(file|javascript|mailto)]
-  [<a>: Setting <http://example.net/path>.hostname = 'example.com:8080' : delimiter invalidates entire value]
-    expected: FAIL
-
-  [<area>: Setting <http://example.net/path>.hostname = 'example.com:8080' : delimiter invalidates entire value]
-    expected: FAIL
-
-  [<a>: Setting <http://example.net:8080/path>.hostname = 'example.com:' : delimiter invalidates entire value]
-    expected: FAIL
-
-  [<area>: Setting <http://example.net:8080/path>.hostname = 'example.com:' : delimiter invalidates entire value]
-    expected: FAIL
-
   [<a>: Setting <foo:///some/path>.pathname = '' Non-special URLs with an empty host can have their paths erased]
     expected: FAIL
 
@@ -103,3 +89,21 @@
 
   [<area>: Setting <https://domain.com:3000>.port = '\n\n\t\t']
     expected: FAIL
+
+  [<a>: Setting <non-spec:/>.pathname = '/.//p' Serialize /. in path]
+    expected: FAIL
+
+  [<area>: Setting <non-spec:/>.pathname = '/.//p' Serialize /. in path]
+    expected: FAIL
+
+  [<a>: Setting <non-spec:/>.pathname = '/..//p']
+    expected: FAIL
+
+  [<area>: Setting <non-spec:/>.pathname = '/..//p']
+    expected: FAIL
+
+  [<a>: Setting <non-spec:/>.pathname = '//p']
+    expected: FAIL
+
+  [<area>: Setting <non-spec:/>.pathname = '//p']
+    expected: FAIL

tests/wpt/meta/url/url-setters.any.js.ini

@@ -5,12 +5,6 @@
   expected: CRASH
 
 [url-setters.any.html?exclude=(file|javascript|mailto)]
-  [URL: Setting <http://example.net/path>.hostname = 'example.com:8080' : delimiter invalidates entire value]
-    expected: FAIL
-
-  [URL: Setting <http://example.net:8080/path>.hostname = 'example.com:' : delimiter invalidates entire value]
-    expected: FAIL
-
   [URL: Setting <foo:///some/path>.pathname = '' Non-special URLs with an empty host can have their paths erased]
     expected: FAIL
 
@@ -50,8 +44,18 @@
   [URL: Setting <https://domain.com:3000>.port = '\n\n\t\t']
     expected: FAIL
 
+  [URL: Setting <non-spec:/>.pathname = '/.//p' Serialize /. in path]
+    expected: FAIL
+
+  [URL: Setting <non-spec:/>.pathname = '/..//p']
+    expected: FAIL
+
+  [URL: Setting <non-spec:/>.pathname = '//p']
+    expected: FAIL
+
+  [URL: Setting <non-spec:/.//>.pathname = 'p' Drop /. from path]
+    expected: FAIL
 
-[url-setters.any.worker.html?include=javascript]
 
 [url-setters.any.worker.html?include=file]
   [URL: Setting <file://monkey/>.pathname = '\\\\' File URLs and (back)slashes]
@@ -64,17 +68,7 @@
     expected: FAIL
 
 
-[url-setters.any.html?include=javascript]
-
-[url-setters.any.html?include=mailto]
-
 [url-setters.any.worker.html?exclude=(file|javascript|mailto)]
-  [URL: Setting <http://example.net/path>.hostname = 'example.com:8080' : delimiter invalidates entire value]
-    expected: FAIL
-
-  [URL: Setting <http://example.net:8080/path>.hostname = 'example.com:' : delimiter invalidates entire value]
-    expected: FAIL
-
   [URL: Setting <foo:///some/path>.pathname = '' Non-special URLs with an empty host can have their paths erased]
     expected: FAIL
 
@@ -123,8 +117,18 @@
   [URL: Setting <https://domain.com:3000>.port = '\n\n\t\t']
     expected: FAIL
 
+  [URL: Setting <non-spec:/>.pathname = '/.//p' Serialize /. in path]
+    expected: FAIL
+
+  [URL: Setting <non-spec:/>.pathname = '/..//p']
+    expected: FAIL
+
+  [URL: Setting <non-spec:/>.pathname = '//p']
+    expected: FAIL
+
+  [URL: Setting <non-spec:/.//>.pathname = 'p' Drop /. from path]
+    expected: FAIL
 
-[url-setters.any.worker.html?include=mailto]
 
 [url-setters.any.html?include=file]
   [URL: Setting <file://monkey/>.pathname = '\\\\' File URLs and (back)slashes]