Bump the all group across 1 directory with 10 updates

[dependabot]

Bumps the all group with 10 updates in the / directory:

Package	From	To
anyhow	1.0.97	1.0.98
bzip2	0.5.2	0.6.0
clap	4.5.32	4.5.40
flate2	1.1.0	1.1.2
once_cell	1.21.1	1.21.3
os_pipe	1.2.1	1.2.2
reqwest	0.12.15	0.12.21
tempfile	3.19.0	3.20.0
zip	2.4.2	4.2.0
rand	0.9.0	0.9.1

Updates anyhow from 1.0.97 to 1.0.98

Release notes

Sourced from anyhow's releases.

1.0.98

• Add self.into_boxed_dyn_error() and self.reallocate_into_boxed_dyn_error_without_backtrace() methods for anyhow::Error (#415)

Commits

• 709fe86 Release 1.0.98
• cbc1ad2 Merge pull request #415 from dtolnay/intodyn
• e1a2017 Add 2 different conversions to Box<dyn Error + Send + Sync + 'static>
• 29f2edd Merge pull request #416 from dtolnay/oldnostd
• 2244db8 Omit unused object_boxed from vtable in old no-std rustc
• 213a9c2 Merge pull request #414 from dtolnay/nightly
• 02aa6b6 Make all nightly go through the module that was probed
• See full diff in compare view

Updates bzip2 from 0.5.2 to 0.6.0

Release notes

Sourced from bzip2's releases.

v0.6.0

Highlights

This release switches to libbz2-rs-sys as the default bzip2 backend. It is written in rust, making it much easier to cross-compile. The new implementation is also more performant.

The rust implementation does not export C symbols by default. An explicit dependency on libbz2-rs-sys and setting the export-symbols feature flag will fix that if needed.

The bzip2-sys feature flag can be used to continue to use the C backend (either the system library of a C version built from source).

This is a breaking release, given that we want this update to be opt-in. We've used the occasion to perform an MSRV bump to 1.82.0. The libbz2-rs-sys crate has the bzip2-1.0.6 license. Arguably, that is the license that bzip2-sys should have had too, given that it is just a wrapper of the original bzip2 (and libbz2-rs-sys is a derivative work). You may need to allow this license when using cargo-deny.

What's Changed

• Release 0.6.0 by @​folkertdev in trifectatechfoundation/bzip2-rs#141

Full Changelog: trifectatechfoundation/bzip2-rs@v0.5.2...v0.6.0

Commits

• 71d5b03 Release 0.6.0
• See full diff in compare view

Updates clap from 4.5.32 to 4.5.40

Release notes

Sourced from clap's releases.

v4.5.39

[4.5.39] - 2025-05-27

Fixes

• (help) Show short flag aliases before long
• (help) Merge the short and long flag alias lists

v4.5.38

[4.5.38] - 2025-05-11

Fixes

• (help) When showing aliases, include leading -- or -

v4.5.37

[4.5.37] - 2025-04-18

Features

• Added ArgMatches::try_clear_id()

v4.5.36

[4.5.36] - 2025-04-11

Fixes

• (help) Revert 4.5.35's "Don't leave space for shorts if there are none" for now

v4.5.35

[4.5.35] - 2025-04-01

Fixes

• (help) Align positionals and flags when put in the same help_heading
• (help) Don't leave space for shorts if there are none

v4.5.34

[4.5.34] - 2025-03-27

Fixes

• (help) Don't add extra blank lines with flatten_help(true) and subcommands without arguments

v4.5.33

[4.5.33] - 2025-03-26

Fixes

• (error) When showing the usage of a suggestion for an unknown argument, don't show the group

Changelog

Sourced from clap's changelog.

[4.5.40] - 2025-06-09

Features

• Support quoted ids in arg!() macro (e.g. arg!("check-config": ...))

[4.5.39] - 2025-05-27

Fixes

• (help) Show short flag aliases before long
• (help) Merge the short and long flag alias lists

[4.5.38] - 2025-05-11

Fixes

• (help) When showing aliases, include leading -- or -

[4.5.37] - 2025-04-18

Features

• Added ArgMatches::try_clear_id()

[4.5.36] - 2025-04-11

Fixes

• (help) Revert 4.5.35's "Don't leave space for shorts if there are none" for now

[4.5.35] - 2025-04-01

Fixes

• (help) Align positionals and flags when put in the same help_heading
• (help) Don't leave space for shorts if there are none

[4.5.34] - 2025-03-27

Fixes

• (help) Don't add extra blank lines with flatten_help(true) and subcommands without arguments

[4.5.33] - 2025-03-26

Fixes

• (error) When showing the usage of a suggestion for an unknown argument, don't show the group

Commits

• cff27db chore: Release
• 4ef4124 docs: Update changelog
• ca89617 Merge pull request #5848 from jennings/jennings/push-xolwzyoornps
• 99b6391 fix(complete): Fix PowerShell dynamic completion
• ed2360f chore: Release
• 196a14b docs: Update changelog
• cd622ab Merge pull request #5846 from ribru17/alias_fn_dedup
• 48ff72b fix(complete): Deduplicate bash subcmd cases
• b1b6f17 Merge pull request #5843 from epage/link
• 5900216 fix(derive): Update link for derive attributes
• Additional commits viewable in compare view

Updates flate2 from 1.1.0 to 1.1.2

Release notes

Sourced from flate2's releases.

1.1.2

What's Changed

• feat: simplify manual bits extraction and an unneeded reref by @​CosminPerRam in rust-lang/flate2-rs#484
• chore: update deps by @​CosminPerRam in rust-lang/flate2-rs#485
• feat: solve remaining clippy warnings and add it to CI by @​CosminPerRam in rust-lang/flate2-rs#487
• ci: add audit check by @​CosminPerRam in rust-lang/flate2-rs#488
• feat: revert most recent deps updates by @​CosminPerRam in rust-lang/flate2-rs#489
• upgrade zlib-rs to version 0.5.1 by @​folkertdev in rust-lang/flate2-rs#490

Full Changelog: rust-lang/flate2-rs@1.1.1...1.1.2

1.1.1

This release should be smaller and thus faster to download. Additionally, when using the zlib-rs backend, duplicate symbol issues shouldn't occur anymore.

What's Changed

• docs: Update README to promote zlib-rs by @​Xuanwo in rust-lang/flate2-rs#470
• Update miniz_oxide to 0.8.5 by @​oyvindln in rust-lang/flate2-rs#475
• Remove stale CHANGELOG.md by @​jayvdb in rust-lang/flate2-rs#476
• More informative README on backends by @​Shnatsel in rust-lang/flate2-rs#480
• Rewrite outdated backend notes in lib.rs by @​Shnatsel in rust-lang/flate2-rs#481
• upgrade zlib-rs to version 0.5.0 by @​folkertdev in rust-lang/flate2-rs#482

New Contributors

• @​Xuanwo made their first contribution in rust-lang/flate2-rs#470
• @​jayvdb made their first contribution in rust-lang/flate2-rs#476

Full Changelog: rust-lang/flate2-rs@1.1.0...1.1.1

Commits

• ac4d950 Merge pull request #490 from folkertdev/update-zlib-rs-0.5.1
• e38e16f upgrade zlib-rs to version 0.5.1
• 76cc0cc Merge pull request #489 from CosminPerRam/feat/revert_updates
• 8f52350 Revert "chore: update deps"
• df11207 Merge pull request #488 from CosminPerRam/ci/audit
• a8872d7 ci: rename audit job
• 190750c ci: add audit check
• c2c78de solve remaining clippy warnings and add it to CI (#487)
• 306e909 Merge pull request #485 from CosminPerRam/chore/update_deps
• 29d8194 Merge pull request #484 from CosminPerRam/feat/simplify_manual_conversion
• Additional commits viewable in compare view

Updates once_cell from 1.21.1 to 1.21.3

Changelog

Sourced from once_cell's changelog.

1.21.3

• Outline more initialization in race: #284, #285.

1.21.2

• Relax success ordering from AcqRel to Release in race: #278.

Commits

• 29e3d93 Merge pull request #286 from briansmith/b/once-ref-dry
• a206950 Prepare for 1.21.3 release.
• 17d4a9b DRY race::OnceRef::{get_or_try_init, set}.
• 01b1d56 Merge pull request #285 from briansmith/b/once-ref-cold
• a851cc4 Mark initialization of OnceRef::get_or_try_init cold.
• 2447a93 Merge pull request #281 from briansmith/b/init-inner
• c294d64 Merge pull request #280 from briansmith/b/self
• 5f0fdd4 Merge pull request #283 from briansmith/b/cast_mut
• 899e319 Merge pull request #284 from briansmith/b/dry-get
• 90da60b Mark initialization of OnceBox::get_or_try_init cold.
• Additional commits viewable in compare view

Updates os_pipe from 1.2.1 to 1.2.2

Commits

• f9b3115 bump version to 1.2.2
• 7b37556 mention that Rust 1.87 added std::io::pipe()
• 7245b4c mark unsafe ops in unsafe functions
• 3f29ad3 clarify when reads and writes block
• See full diff in compare view

Updates reqwest from 0.12.15 to 0.12.21

Release notes

Sourced from reqwest's releases.

v0.12.20

Highlights

• Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
• Fix proxy headers only using the first matched proxy.
• (wasm) Fix re-adding Error::is_status().

What's Changed

• fix(client): apply authorization header to first matching proxy only by @​0x676e67 in seanmonstar/reqwest#2714
• wasm: re-add Error::is_status() by @​seanmonstar in seanmonstar/reqwest#2720
• properly match error variants in test by @​Ruben2424 in seanmonstar/reqwest#2721
• refactor: reduce size of Pending request future by @​seanmonstar in seanmonstar/reqwest#2725
• feat: add tcp_user_timeout builder option by @​seanmonstar in seanmonstar/reqwest#2724
• refactor: use hyper-util Socks connectors by @​seanmonstar in seanmonstar/reqwest#2726
• Remove some unused dependencies by @​DaniPopes in seanmonstar/reqwest#2716

New Contributors

• @​DaniPopes made their first contribution in seanmonstar/reqwest#2716

Full Changelog: seanmonstar/reqwest@v0.12.19...v0.12.20

v0.12.19

What's Changed

• refactor: report custom reason phrase in error message by @​chanbengz in seanmonstar/reqwest#2697
• fix: only check scheme after Policy return follow by @​linyihai in seanmonstar/reqwest#2710
• ci: check cookies feature on wasm target by @​seanmonstar in seanmonstar/reqwest#2711
• fix(redirect): Using tower-http patch to fix invalid content-length header by @​linyihai in seanmonstar/reqwest#2709

Full Changelog: seanmonstar/reqwest@v0.12.18...v0.12.19

v0.12.18

What's Changed

• Fix compilation when socks enabled without TLS.

v0.12.17

What's Changed

• build: Fix compilation issues on macOS by @​0x676e67 in seanmonstar/reqwest#2696

v0.12.16

Highlights

• Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
• Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
• Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
• Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
• Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
• Add Proxy::headers() to add extra headers that should be sent to a proxy.
• Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.12.21

• Fix socks proxy to use socks4a:// instead of socks4h://.
• Fix Error::is_timeout() to check for hyper and IO timeouts too.
• Fix request Error to again include URLs when possible.
• Fix socks connect error to include more context.
• (wasm) implement Default for Body.

v0.12.20

• Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
• Fix proxy headers only using the first matched proxy.
• (wasm) Fix re-adding Error::is_status().

v0.12.19

• Fix redirect that changes the method to GET should remove payload headers.
• Fix redirect to only check the next scheme if the policy action is to follow.
• (wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

• Fix compilation when socks enabled without TLS.

v0.12.17

• Fix compilation on macOS.

v0.12.16

• Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
• Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
• Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
• Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
• Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
• Add Proxy::headers() to add extra headers that should be sent to a proxy.
• Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
• Fix HTTP/3 to support streaming request bodies.
• (wasm) Fix null bodies when calling Response::bytes_stream().

Commits

• See full diff in compare view

Updates tempfile from 3.19.0 to 3.20.0

Changelog

Sourced from tempfile's changelog.

3.20.0

This release mostly unifies the behavior/capabilities around "keeping" temporary files:

• Rename Builder::keep(bool) (via deprecation) to Builder::disable_cleanup(bool) to make it clear that behaves differently from NamedTempFile::keep(). The former disables automatic cleanup while the latter consumes the NamedTempFile object entirely and unsets the "temporary file" attribute (on Windows).
• Rename TempDir::into_path (via deprecation) to TempDir::keep to mirror NamedTempFile::keep.
• Add TempDir::disable_cleanup, NamedTempFile::disable_cleanup, and TempPath::disable_cleanup making it possible to disable automatic cleanup in-place after creating a temporary file/directory (equivalent to calling Builder::disable_cleanup before creating the file/directory).

Additionally, it adds a few spooled temporary file features:

• Add SpooledTempFile::into_file for turning a SpooledTempFile into a regular unnamed temporary file, writing it to the backing storage ("rolling" it) if it was still stored in-memory.
• Add spooled_tempfile_in and SpooledTempFile::new_in methods for creating spooled temporary files in a specific directory. This makes it possible to choose the backing device for your spooled temporary file which is rather important on Linux where the default temporary directory is likely backed by memory (defeating the entire point of having a spooled temporary file).

Finally, this release improves documentation, especially the top-level documentation explaining which temporary file type to use.

BREAKING for those with deny(warnings):

• Builder::keep deprecated in favor of Builder::disable_cleanup.
• TempDir::into_path is deprecated in favor of TempDir::keep.

BREAKING:

3.19.1

• Don't unlink temporary files immediately on Windows (fixes #339). Unfortunately, this seemed to corrupt the file object (possibly a Windows kernel bug) in rare cases and isn't strictly speaking necessary.

Commits

• 99ffea6 chore: release v3.20.0 (#358)
• bd2b267 feat: make it possible to disable cleanup in-place after creation (#355)
• 3b30099 ci: really check docs for warnings (#357)
• f701f52 ci: check docs (#356)
• d34afe9 doc: improve SpooledData documentation
• 6deb42e doc: make it easier to pick the correct tempfile constructor/type
• e284782 feat: allow creating spooled temporary files in a specific directory (#353)
• 07edc31 feat: implement SpooledTempFile::into_file (#352)
• b122355 fix: add must_use attribute to TempDir::keep (#351)
• cbd1e97 feat: rename TempDir::into_path to TempDir::keep (#349)
• Additional commits viewable in compare view

Updates zip from 2.4.2 to 4.2.0

Release notes

Sourced from zip's releases.

v4.2.0

🚀 Features

• Write ZIP file to stream (#246)

v4.1.0

🚀 Features

• Add has_overlapping_files method

v4.0.0

🐛 Bug Fixes

• Allow extraction of Zip64 where "Version needed to extract" is higher than "Version made by" (#356)

⚙️ Miscellaneous Tasks

• Revert nt-time upgrade (would increase MSRV)
• Revert constant_time_eq update (would increase MSRV)
• Update fully-qualified names of liblzma imports

v3.0.0

🐛 Bug Fixes

• return correct offset in SeekableTake::seek (#342)
• When only zopfli is available, decompression of deflate should not be possible (#348)
• Specify flate2 dependency of the deflate-flate2 feature. (#345)

⚙️ Miscellaneous Tasks

• drop unused crossbeam-utils dependency (#339)
• fix typo
• remove deflate-flate2 dependency on specific backend
• [breaking] Drop deprecated deflate-miniz feature flag (#351)

v2.6.1

🐛 Bug Fixes

• avoid scanning through all local file headers while opening an archive (#281)

v2.6.0

🚀 Features

• Add support for time::PrimitiveDateTime (#322)
• Add jiff integration (#323)

🐛 Bug Fixes

• improve error message for duplicated file (#277)

... (truncated)

Changelog

Sourced from zip's changelog.

4.2.0 - 2025-06-21

🚀 Features

• Write ZIP file to stream (#246)

4.1.0 - 2025-06-14

🚀 Features

• Add has_overlapping_files method

4.0.0 - 2025-05-21

🐛 Bug Fixes

• Allow extraction of Zip64 where "Version needed to extract" is higher than "Version made by" (#356)

⚙️ Miscellaneous Tasks

• Revert nt-time upgrade (would increase MSRV)
• Revert constant_time_eq update (would increase MSRV)
• Update fully-qualified names of liblzma imports

3.0.0 - 2025-05-14

🐛 Bug Fixes

• return correct offset in SeekableTake::seek (#342)
• When only zopfli is available, decompression of deflate should not be possible (#348)
• Specify flate2 dependency of the deflate-flate2 feature. (#345)

⚙️ Miscellaneous Tasks

• drop unused crossbeam-utils dependency (#339)
• fix typo
• remove deflate-flate2 dependency on specific backend
• [breaking] Drop deprecated deflate-miniz feature flag (#351)

2.6.1 - 2025-04-03

🐛 Bug Fixes

• avoid scanning through all local file headers while opening an archive (#281)

2.5.0 - 2025-03-23

🚀 Features

• Add support for time::PrimitiveDateTime (#322)

... (truncated)

Commits

• 3a92c78 chore: release v4.2.0 (#365)
• 3f34acd Add StreamWriter::into_inner() (#367)
• 44c0315 Include magic signature when writing data descriptors (#368)
• 027cbb7 feat: Write ZIP file to stream (#246)
• 6ad5924 chore: release v4.1.0 (#362)
• 157084a style: Fix Clippy warnings
• 0a40f71 style: Simplify expression for range overlap
• 5eff99f feat: Add has_overlapping_files method
• b87a248 chore: release v4.0.0 (#357)
• 2514c4c fix: Allow extraction of Zip64 where "Version needed to extract" is higher th...
• Additional commits viewable in compare view

Updates rand from 0.9.0 to 0.9.1

Changelog

Sourced from rand's changelog.

[0.9.1] - 2025-04-17

Security and unsafe

• Revise "not a crypto library" policy again (#1565)
• Remove zerocopy dependency from rand (#1579)

Fixes

• Fix feature simd_support for recent nightly rust (#1586)

Changes

• Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

• Add rand::distr::Alphabetic distribution. (#1587)
• Re-export rand_core (#1604)

Commits

• ec6d5c0 Prepare rand_core v0.9.1 (#1591)
• 6a06056 rand_core: introduce an UnwrapMut wrapper (#1589)
• 8929123 Add Alphabetic distribution (#1587)
• 06b1642 Remove unnecessary underscore from `impl<T, const N: usize> Distribution<[T; ...
• 49d76cd rename extract to extract_lane (#1586)
• e0a70fd Change to use array::from_fn in Distribution\<[T; N]> for StandardUniform ...
• 0bc3f65 Move rand distr (#1577)
• 2677c49 Revise "not a crypto library" policy and SECURITY.md (#1565)
• bfd1826 SeedableRng docs: add note on (lack of) reproducibility (#1572)
• c01aee7 Fix some links (#1571)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions