chore(deps): bump the rust-minor-patch group across 1 directory with 3 updates

[dependabot]

Bumps the rust-minor-patch group with 3 updates in the /reference-apps/rust directory: mongodb, redis and lapin.

Updates mongodb from 3.8.2 to 3.9.1

Release notes

Sourced from mongodb's releases.

v3.9.1

The MongoDB Rust driver team is pleased to announce the v3.9.1 release of the mongodb crate, now available for download from crates.io.

[!IMPORTANT] This is a security patch release for CVE-2026-88024. Upgrading is recommended for all users.

This release fixes a bug that would allow certain inputs to delete all files in a GridFS bucket.

Full Release Notes

Bugfixes

• RUST-2469 Use exact match for file ID in GridFS methods

v3.9.0

The MongoDB Rust driver team is pleased to announce the v3.9.0 release of the mongodb crate, now available for download from crates.io.

This release adds support for the new baseBackoffMS server error field. The driver now uses the value for baseBackoffMS reported by the server in its retry backoff calculations. This new feature is part of MongoDB's Intelligent Workload Management (IWM) and is available on MongoDB Atlas server versions 9.0+.

Full Release Notes

New Features

• RUST-2409 CSFLE/QE Support for HTTP Proxies (#1756)
• RUST-2412 Send afterClusterTime on writes in causally-consistent sessions (#1742)
• RUST-2446 Use baseBackoffMS in retry backoff calculations (#1749)
• RUST-2133 Allow custom aws credential provider (#1781)

Improvements

• RUST-1820 Use raw documents and smart truncation for tracing and otel (#1757)
• RUST-2396 Report timeout errors for convenient transactions (#1759)
• RUST-2411 Remove support for MongoDB 4.2 (#1770)

Bugfixes

• RUST-2492 Check for inherited unacknowledged write concerns (#1787)

Commits

• 16bc932 release v3.9.1 (#1792)
• e72eafb RUST-2443 Update version numbers for 3.9.0 (#1789)
• 4406554 RUST-2133 Allow custom aws credential provider (#1781)
• fe6a8cd RUST-2492 Check for inherited unacknowledged write concerns (#1787)
• 01cdcf0 RUST-1740 Break up rest of evergreen config (#1786)
• 7b6e67c RUST-2491 Fix libmongocrypt unversioned install and failing tests (#1785)
• af37d75 Bump the rust-dependencies group across 1 directory with 21 updates (#1784)
• 74eb7bb RUST-2411 Remove support for MongoDB 4.2 (#1770)
• 9a0639e minor: pin rustfmt to a specific nightly release (#1783)
• 57d51e9 RUST-2467 Validate database and collection name arguments against "." and NUL...
• Additional commits viewable in compare view

Updates redis from 1.6.0 to 1.7.0

Release notes

Sourced from redis's releases.

redis-1.7.0

1.7.0 (2026-09-05)

Changes & Bug fixes

• Add the FT.CREATE command builder and index schema (WIP) by @​StefanPalashev in redis-rs/redis-rs#2303
• Add support for the INCREX command by @​StefanPalashev in redis-rs/redis-rs#2216
• Switch to combine version with opaque fix by @​somechris in redis-rs/redis-rs#2322
• Report the underlying error from the r2d2 is_valid health check by @​AbhinavMir in redis-rs/redis-rs#2321
• MultiplexedConnection: Fix reporting errors on RESP3 & Unix by @​nihohit in redis-rs/redis-rs#2350

CI & operational improvements

• ci: Bump minor server versions to latest by @​somechris in redis-rs/redis-rs#2357
• spelling: Change infos to info by @​somechris in redis-rs/redis-rs#2374
• Fix latest nightly lints by @​nihohit in redis-rs/redis-rs#2378
• docs: Split development parts in README.md into dedicated documents by @​somechris in redis-rs/redis-rs#2331

Commits

• 2a29a8f prepare version (#2384)
• 81ab2d0 Fix latest nightly lints (#2378)
• 6acae34 spelling: Change infos to info (#2374)
• ca46fbf build(deps): bump log from 0.4.33 to 0.4.34 (#2368)
• 3e7b187 build(deps): bump tokio from 1.52.3 to 1.53.1 (#2363)
• 97f2db5 build(deps): bump syn from 2.0.114 to 3.0.3 (#2372)
• 89d8717 build(deps): bump async-native-tls from 0.5.0 to 0.6.0 (#2371)
• 059c888 build(deps): bump rand from 0.10.1 to 0.10.2 (#2370)
• 067c3a9 build(deps): bump taiki-e/install-action from 2.85.4 to 2.87.1 (#2369)
• e91b031 build(deps): bump rustls from 0.23.40 to 0.23.43 (#2366)
• Additional commits viewable in compare view

Updates lapin from 4.10.0 to 4.11.0

Changelog

Sourced from lapin's changelog.

4.11.0 (2026-09-08)

Bug Fixes

• Properly retry initial connection when recover is enabled

Commits

• 0dc84fc v4.11.0
• c225973 Restart the initial protocol handshake after a TCP half-close
• 2d4f939 Reject pending connection steps when initializing recovery
• a2db8b7 update Cargo.lock
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions