Bump syn from 1.0.39 to 1.0.42

[dependabot-preview]

Bumps syn from 1.0.39 to 1.0.42.

Release notes

Sourced from syn's releases.

1.0.42

• Fix several bugs involving unusual suffixes on integer and floating point literal tokens (#898, #899, #900)

1.0.41

• Fix panic on printing an incomplete (having fewer path segments than originally parsed with) qualified path (ExprPath, PatPath, TypePath containing QSelf) (#891, thanks @taiki-e)
• Fix panic triggered by syntactically invalid overflowing negative float literal after . in a field access position, e.g. let _ = obj.-0.9E999999 (#895, thanks @sameer)
• Enable using parse_macro_input! with a Parser function rather than type having a Parse impl (#896, thanks @sbrocket)

1.0.40

• Fix panic on parsing float literals having both an exponent and a suffix beginning with 'e' or 'E', such as 9e99e999 (#893)

Commits

• 528e923 Release 1.0.42
• 4323d02 Update proc-macro2 requirement to 1.0.23
• 60cdc4a Remove literal special cases for f32/f64 suffix
• 136f418 Resolve while_let_on_iterator Clippy lint
• 7be06fb Better handling of integers that look almost like a float
• 2361ebd Add test of integer literal with float-looking suffix
• b39963f Require at least one hex digit in unicode escape
• efdecd9 Suppress clippy manual_strip lint
• 018d224 Disallow underscore before first digit of \u escape
• f639281 Limit \u to 6 hex digits, not counting underscores
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #204.