⬆️ Update Cargo dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
flate2	dependencies	patch	1.1.9 → 1.1.10
log	dependencies	patch	0.4.33 → 0.4.34
lru	dependencies	patch	0.18.2 → 0.18.5
mail-parser	dependencies	patch	0.11.6 → 0.11.9
octets	dependencies	patch	0.3.6 → 0.3.7
quiche	dependencies	minor	0.29.3 → 0.30.0
rand (source)	dependencies	patch	0.10.2 → 0.10.3
rcgen	dependencies	patch	0.14.9 → 0.14.10
reqwest	dependencies	patch	0.13.4 → 0.13.5
serde_json	dependencies	patch	1.0.151 → 1.0.152
thiserror	dependencies	patch	2.0.20 → 2.0.21
tokio (source)	dependencies	patch	1.53.1 → 1.53.2
tokio-rustls	dependencies	patch	0.26.4 → 0.26.6
tokio-test (source)	dev-dependencies	patch	0.4.5 → 0.4.6
uniffi (source)	build-dependencies	patch	0.32.0 → 0.32.2
uniffi (source)	dependencies	patch	0.32.0 → 0.32.2

---

Release Notes

rust-lang/flate2-rs (flate2)

v1.1.10

Compare Source

What's Changed

• feat: reuse zlib's decoder buffer by @​Vaiz in #​532
• feat: add reset method for read::GzDecoder and buffered::GzDecoder by @​Vaiz in #​534
• Drop cloudflare-zlib by @​kornelski in #​539
• Add a wrapper for the Crc struct by @​MikkelPaulson in #​540
• Bump miniz_oxide to 0.9 by @​oscargus in #​543
• Upgrade miniz_oxide and add unit tests of the different flush kinds by @​fintelia in #​498
• Fix infinite loop in writing gzip header/footer by @​Shnatsel in #​547
• test: generate corrupt gzip fixture at runtime by @​nanookclaw in #​550
• Reject oversized gzip extra fields by @​Byron in #​553
• Reject incomplete deflate streams at EOF by @​Guflly in #​556
• Include README.md in a private module by @​bushrat011899 in #​562
• Add no_std support using nightly alloc_io by @​bushrat011899 in #​559
• Update get_mut() documentation to make clear how 'inner` can be used by @​Byron in #​558

New Contributors

• @​Vaiz made their first contribution in #​532
• @​MikkelPaulson made their first contribution in #​540
• @​oscargus made their first contribution in #​543
• @​nanookclaw made their first contribution in #​550
• @​Guflly made their first contribution in #​556
• @​bushrat011899 made their first contribution in #​562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

rust-lang/log (log)

v0.4.34

Compare Source

jeromefroe/lru-rs (lru)

v0.18.5

Compare Source

• Specify desired hashbrown features to reduce dependencies.

v0.18.4

Compare Source

• Add retain method.

v0.18.3

Compare Source

• Add sparse constructor.

stalwartlabs/mail-parser (mail-parser)

v0.11.9

Added

• Added base64_decode_slice behind the new base64_slice feature, which adds a memchr dependency.

v0.11.8

Fixed

• HeaderName breaks rkyv serialization from <= 0.11.6.

v0.11.7

Added

• Added more IANA headers.

Fixed

• DateTime::to_timezone corrupting non-whole-hour offsets by storing leftover seconds in tz_minute (#​158)

cloudflare/quiche (octets)

v0.3.7

Compare Source

rust-random/rand (rand)

v0.10.3

Compare Source

Fixes

• Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#​1808)
• Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#​1821)
• Fix possible panic due to sampling a deserialized Uniform<char> (#​1831)

Changes

• Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#​1838)

rustls/rcgen (rcgen)

v0.14.10: 0.14.10

What's Changed

• Spec compliance bug fixes by @​cpu in #​445
• Take advantage of stable ML-DSA in aws-lc-rs by @​djc in #​447

seanmonstar/reqwest (reqwest)

v0.13.5

Compare Source

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

serde-rs/json (serde_json)

v1.0.152

Compare Source

• Preserve sign of -0 in arbitrary_precision mode (#​1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#​1347, thanks @​yuxi-liu-wired)

dtolnay/thiserror (thiserror)

v2.0.21

Compare Source

• Fix parsing of generic unit variants in display expressions (#​459)

tokio-rs/tokio (tokio)

v1.53.2: Tokio v1.53.2

Compare Source

1.53.2 (October 3rd, 2026)

Fixed

• fs: handle integer overflow in buffered relative seek (#​8574)
• io: revert "always cleanup AsyncFd registration list on deregister" (#​8540)
• process: unregister Windows wait before closing child handle (#​8564)
• rt: drop blocking pool mutex before shutting down rejected task (#​8562)
• sync: fix mpsc index wraparound in block reclamation (#​8546)
• sync: forget mpsc Permit before sending value (#​8560)
• sync: validate MAX_PERMITS in Semaphore::acquire (#​8548)
• sync: wake broadcast Sender::closed outside mutex (#​8558)
• task: drop replaced waker outside lock in JoinSet (#​8554)
• time: drop timer lock before dropping waker in clear_entry (#​8552)
• time: expire timers directly on shutdown without rotating wheel (#​8570)

Fixed (unstable)

• fs: clamp io_uring read length to u32::MAX (#​8572)
• rt: ignore current_thread task dumps from other runtimes (#​8544)
• rt: preserve io_uring context if a completion waker panics (#​8566)
• sync: fix semaphore use-after-free and permit leak on tracing panic (#​8542)
• taskdump: restore deferred leaf wakes during capture (#​8445)
• time: drop stored waker when cancelling alt timer entry (#​8550)

mozilla/uniffi-rs (uniffi)

v0.32.2

Compare Source

v0.32.1

Compare Source

What's Fixed

• Kotlin: Fixed checksum failure on aarch64 (#​2935)

All changes in v0.32.1.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.