Bump cachebox from 5.2.3 to 6.2.5

[dependabot]

Bumps cachebox from 5.2.3 to 6.2.5.

Release notes

Sourced from cachebox's releases.

Release v6.2.5

This is a patch release that improves cache iterators and fixes LRUCache iteration safety, with a small dependency bump and README updates.

Changes

• #74: Iterators returned by keys(), values(), items(), and related views now support len() and bool(). They report how many items are still left to yield (for TTLCache / VTTLCache, expired entries are skipped). Typing stubs document this as CacheIterator.
• #76: LRUCache now bumps the generation version when a read promotes an entry (moves it to most-recently-used). Previously a hit could reorder the list without invalidating live iterators, so concurrent iteration during promotion was not detected correctly. Hits that do not move the entry (already MRU) still skip the bump.
• PyO3 updated from 0.29.1 to 0.29.2.
• #72: README updates and cleanup.

Special Thanks To

• @​Malkiz223 for #74 and #76 • @​chirizxc for #72

Full Changelog: v6.2.4...v6.2.5

Release v6.2.4

This is a patch release that fixes two important correctness and stability issues.

Bug Fixes

• #67 / #68: setdefault_with no longer runs the factory while holding the internal lock.
  Previously, if the factory triggered a GC pass (which also needs the same lock), the whole process could freeze. The key is now looked up under the lock, the lock is released, the factory runs, and the lock is re-acquired only to insert (with a re-check).
  Note: If two threads miss the same key at the same time, the factory may run twice; the first inserted value is kept and returned to both callers.

• #69 / #70: Iterators returned by keys(), values(), and items() now hold a strong reference to the cache.
  Previously they only kept a raw cursor, so a cache that was no longer referenced elsewhere could be freed while the iterator was still alive, causing use-after-free (access violation or silently wrong results). This is fixed for all seven cache types with no performance regression.

Special Thanks To

• @​Malkiz223 for finding and fixing both issues in #68 and #70.

Full Changelog: v6.2.3...v6.2.4

Release v6.2.3

This release improves the internal linked-list implementation used by LRU policy, updates the CI pipeline, and applies various project/metadata cleanups.

Changes

• Optimized the internal doubly-linked list (linked_list) used by LRU policy. The new implementation uses a sentinel-based intrusive design with a free-list for node reuse, reducing allocation overhead and improving performance.
• Updated and modernized the CI workflows (interpreters, platforms, actions versions, etc.).
• Added zizmor and typos checks to CI.
• Sorted PyPI classifiers, formatted pyproject.toml, and expanded project.urls.
• Rust dependencies updated.
• Added rust-toolchain.toml and various formatting/cleanup changes across the codebase.

Special Thanks To

... (truncated)

Commits

• a8e19b1 Bump version to 6.2.5
• f842ca1 Update pyo3 dependency
• c2d05d1 Merge pull request #76 from Malkiz223/lru_read_promotion
• e7a0785 Merge pull request #74 from Malkiz223/iterator_len_bool
• 8cfc248 Bump the generation when a read promotes an LRUCache entry
• 0fdbb64 Test len across the ring wrap
• 7ef071c Remove iter now inherited from typing.Iterator
• f98fe36 Subclass typing.Iterator in the CacheIterator stub
• 8e756db Merge pull request #72 from chirizxc/patch-4
• 3ddcd52 Add len and bool to cache iterators
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.12%. Comparing base (a7773ca) to head (1ed5fff).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8404      +/-   ##
==========================================
- Coverage   71.09%   70.12%   -0.98%     
==========================================
  Files         305      305              
  Lines       31934    31934              
==========================================
- Hits        22705    22394     -311     
- Misses       9229     9540     +311     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.