Update windows requirement from 0.47.0 to 0.48.0

[dependabot]

Updates the requirements on windows to permit the latest version.

Release notes

Sourced from windows's releases.

0.48.0

This release includes an update to all crates to address a target version reliability issue. This issue is detailed here: microsoft/windows-rs#2410

What's Changed

• Improve target version reliability by @​kennykerr in microsoft/windows-rs#2412

Full Changelog: microsoft/windows-rs@0.47.0...0.48.0

Commits

• 4069441 Improve target version reliability (#2412)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[astraw]

The new windows release includes some interesting changes, called windows-bindgen, as documented here microsoft/windows-rs#2399.

@kennykerr @Kijewski @djc Can I ask for your opinions if we should try to use this new windows-bindgen approach rather than simply updating the windows dependency? Should windows-bindgen in principle work for us already? We just need windows::Globalization::Calendar but I haven't followed windows-bindgen closely enough to know if it solves this case.

[djc]

I was one of the people pushing upstream for this approach, so yes, I think using windows-bindgen might help (a) reduce the amount of version churn you have to manage in this project's dependencies and (b) help reduce the download size of your dependency bundle, since Cargo features are selected after download -- so depending on windows/windows-sys will require downstream users to download all of it before discarding most of it via Cargo features.

[MarijnS95]

And so windows 0.48 dropped, while 0.47 was yanked (details: microsoft/windows-rs#2412) making this bump extra important!

I vouch for using windows-bindgen directly too, as it should rid us of some of these version bumps caused by breaking generation/metadata changes alone, and will make for a much smaller crate to be downloaded. However, that's pending @kennykerr's splitting off builtin types to windows-core since iana-time-zone uses the windows crate for its COM API, hence cannot use windows-sys nor the minimal API currently emitted by windows-bindgen.

[kennykerr]

I recommend going with 0.48 for the time being as I am still working on standalone code generation support for COM and WinRT APIs.

[Kijewski]

Released as 0.1.56. Depending on a yanked release is bad. We can switch to windows-bindgen when it's ready. For now, bumping the dependency version is good enough.