deps(deps): bump the cargo-minor-and-patch group across 1 directory with 8 updates

[dependabot]

Bumps the cargo-minor-and-patch group with 8 updates in the / directory:

Package	From	To
clap	4.6.6	4.6.7
toml	1.1.5+spec-1.1.0	1.1.6+spec-1.1.0
console	0.16.4	0.16.6
http	1.4.1	1.5.0
hickory-proto	0.26.2	0.26.3
cc	1.4.5	1.4.6
uuid	1.26.0	1.26.1
mongodb	3.9.0	3.9.1

Updates clap from 4.6.6 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates toml from 1.1.5+spec-1.1.0 to 1.1.6+spec-1.1.0

Commits

• 572c005 chore: Release
• 66d0c53 docs: Update changelog
• 07af4e7 perf: Reduce allocations in toml_edit parsing and dumping (#1215)
• 0ff90db perf(display): Write encoded strings directly
• efb2536 perf(display): Move generated representation strings
• 075c444 refactor(display): Consolidate key-path encoding
• b48f338 perf(display): Borrow table keys during document output
• c6c1de3 perf(parser): Move completed table header keys
• ec90463 perf(parser): Borrow input when creating editable documents
• d76a48a test: Benchmark rendering generated keys and values
• Additional commits viewable in compare view

Updates console from 0.16.4 to 0.16.6

Release notes

Sourced from console's releases.

0.16.6

What's Changed

• Fix truncate_str panicking mid-character without ansi-parsing by @​lenamonj in console-rs/console#296
• perf: accelerate printable ASCII text width by @​dexhunter in console-rs/console#297
• fix: measure the truncation tail in visible columns, not raw width by @​youdie006 in console-rs/console#298
• Prepare 0.16.6 by @​djc in console-rs/console#299

0.16.5

What's Changed

• Strip OSC and DCS sequences to support e.g. OSC 8 hyperlinks over tmux. by @​khoek in console-rs/console#280

Commits

• 4329b77 Bump version to 0.16.6
• bdf46b0 utils: wrap tests in module
• 4f54213 fix: measure the truncation tail in visible columns
• ed342d0 test: consolidate text width regression coverage
• 48b99e9 perf: accelerate printable ASCII text width
• abf0358 Fix truncate_str panicking mid-character without ansi-parsing
• ac3cb73 Bump version to 0.16.5
• 97a91ae ansi: strip OSC and DCS sequences
• See full diff in compare view

Updates http from 1.4.1 to 1.5.0

Release notes

Sourced from http's releases.

v1.5.0

What's Changed

• feat(method): add QUERY method by @​seanmonstar in hyperium/http#798
• fix(uri): allow empty paths in uri::Builder by @​seanmonstar in hyperium/http#853
• perf(header,uri): faster value validation, URI parse/format, map inserts by @​geeknoid in hyperium/http#852
• fix(uri): enforce max length in PathAndQuery by @​seanmonstar in hyperium/http#856

New Contributors

• @​geeknoid made their first contribution in hyperium/http#852

Full Changelog: hyperium/http@v1.4.2...v1.5.0

v1.4.2

What's Changed

• feat(method): impl PartialOrd + Ord by @​mmirate in hyperium/http#840
• fix(uri): allow STAR paths with scheme/auth by @​seanmonstar in hyperium/http#843
• fix: reject DEL character by @​Isvane in hyperium/http#842

New Contributors

• @​mmirate made their first contribution in hyperium/http#840
• @​Isvane made their first contribution in hyperium/http#842

Full Changelog: hyperium/http@v1.4.1...v1.4.2

Changelog

Sourced from http's changelog.

1.5.0 (July 29, 2026)

• Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
• Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
• Fix uri::PathAndQuery parsing to enforce URI max length.

1.4.2 (June 8, 2026)

• Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.
• Fix Uri to properly reject DEL characters.

Commits

• 16fc9a7 v1.5.0
• e559023 fix(uri): enforce max length in PathAndQuery (#856)
• 2178e17 perf(header,uri): faster value validation, URI parse/format, map inserts (#852)
• 03c8cd7 fix(uri): allow empty paths in uri::Builder (#853)
• bb8705b feat(method): add QUERY method (#798)
• 82db5b8 v1.4.2
• a9cdbf8 fix(uri): reject DEL character (#842)
• df75ca3 fix(uri): allow STAR paths with scheme/auth (#843)
• ec3f8ce feat(method): impl PartialOrd + Ord (#840)
• See full diff in compare view

Updates hickory-proto from 0.26.2 to 0.26.3

Release notes

Sourced from hickory-proto's releases.

v0.26.3

This release fixes regressions introduced in v0.26.2 related to DNSSEC verification, QUIC servers, HTTP/3 servers, and minimum dependency versions.

What's Changed

• Fix warnings (release/0.26) by @​divergentdave in hickory-dns/hickory-dns#3877
• resolver: use lenient resolv.conf parsing by @​djc in hickory-dns/hickory-dns#3879
• backport: Fix multi rrsig validation 0.26 by @​MartB in hickory-dns/hickory-dns#3892
• Bump version to 0.26.3 by @​djc in hickory-dns/hickory-dns#3895
• Exclude accepting QUIC connections from timeouts - 0.26 branch by @​divergentdave in hickory-dns/hickory-dns#3906
• [0.26] net: fix insecure ancestor delegation by @​djc in hickory-dns/hickory-dns#3907

Full Changelog: hickory-dns/hickory-dns@v0.26.2...v0.26.3

Commits

• bd37caf net: require authenticated insecure-delegation proofs
• 5a79511 Add conformance test for regression
• c268442 net: fix ancestor delegation issues
• 9488e8e Exclude accepting QUIC connections from timeouts
• 4ad16c3 Bump version to 0.26.3
• cfab556 proto: ignore RRSIGs in DnssecSummary::from_records
• 819a6bc net: try every RRSIG before marking an RRset bogus
• 688231e resolver: use lenient resolv.conf parsing
• ca5d1a1 resolver: Fix 'unused method' with features blocklist,tls-ring
• 678b01b Fix unnecessary qualification warning
• See full diff in compare view

Updates cc from 1.4.5 to 1.4.6

Release notes

Sourced from cc's releases.

cc-v1.4.6

Fixed

• Prevent check_exe from dropping flags on the floor. (#1884)
• update fd handling to use BorrowedFd (#1882)

Other

• (deps) bump taiki-e/install-action from 2.87.2 to 2.87.4 (#1888)
• Regenerate target info (#1891)
• (deps) bump tombi-toml/setup-tombi from 1.5.0 to 1.5.1 (#1890)
• (deps) bump release-plz/action from 0.5.131 to 0.5.132 (#1889)
• Fix ci(test): make sure right toolchain is passed (#1892)
• (deps) bump tombi-toml/setup-tombi from 1.2.5 to 1.5.0 (#1885)
• (deps) bump taiki-e/install-action from 2.85.5 to 2.87.2 (#1886)
• add toml formatting check (#1879)

Changelog

Sourced from cc's changelog.

1.4.6 - 2026-09-11

Fixed

• Prevent check_exe from dropping flags on the floor. (#1884)
• update fd handling to use BorrowedFd (#1882)

Other

• (deps) bump taiki-e/install-action from 2.87.2 to 2.87.4 (#1888)
• Regenerate target info (#1891)
• (deps) bump tombi-toml/setup-tombi from 1.5.0 to 1.5.1 (#1890)
• (deps) bump release-plz/action from 0.5.131 to 0.5.132 (#1889)
• Fix ci(test): make sure right toolchain is passed (#1892)
• (deps) bump tombi-toml/setup-tombi from 1.2.5 to 1.5.0 (#1885)
• (deps) bump taiki-e/install-action from 2.85.5 to 2.87.2 (#1886)
• add toml formatting check (#1879)

Commits

• 4c76c59 chore(cc): release v1.4.6 (#1895)
• ecdd98f chore(deps): update windows-bindgen requirement from 0.66 to 0.100 (#1896)
• 9fea865 Add support for CUDA on Windows on ARM. (#1893)
• 29acb75 chore(deps): bump taiki-e/install-action from 2.87.2 to 2.87.4 (#1888)
• f0d33bb Regenerate target info (#1891)
• 1686a3d chore(deps): bump tombi-toml/setup-tombi from 1.5.0 to 1.5.1 (#1890)
• bd6b7d0 chore(deps): bump release-plz/action from 0.5.131 to 0.5.132 (#1889)
• 42adfca Fix ci(test): make sure right toolchain is passed (#1892)
• 527ec73 fix: Prevent check_exe from dropping flags on the floor. (#1884)
• fc1fb3c chore(deps): bump tombi-toml/setup-tombi from 1.2.5 to 1.5.0 (#1885)
• Additional commits viewable in compare view

Updates uuid from 1.26.0 to 1.26.1

Release notes

Sourced from uuid's releases.

v1.26.1

What's Changed

• Seat the v7 counter below the version nibble by @​lenamonj in uuid-rs/uuid#907
• Don't panic in overflowing Timestamp to SystemTime conversion by @​KodrAus in uuid-rs/uuid#909
• Prepare for 1.26.1 release by @​KodrAus in uuid-rs/uuid#910

New Contributors

• @​lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

Commits

• 9f92712 Merge pull request #910 from uuid-rs/cargo/v1.26.1
• d4df8f0 prepare for 1.26.1 release
• 5613f23 Merge pull request #909 from uuid-rs/fix/ts-conversion-overflow
• fda00eb don't panic in overflowing Timestamp to SystemTime conversion
• c82e88c Merge pull request #907 from lenamonj/v7-counter-placement
• ac065a6 Align the counter diagram
• 34ec102 Seat the v7 counter below the version nibble
• See full diff in compare view

Updates mongodb from 3.9.0 to 3.9.1

Release notes

Sourced from mongodb's releases.

v3.9.1

The MongoDB Rust driver team is pleased to announce the v3.9.1 release of the mongodb crate, now available for download from crates.io.

[!IMPORTANT] This is a security patch release for CVE-2026-88024. Upgrading is recommended for all users.

This release fixes a bug that would allow certain inputs to delete all files in a GridFS bucket.

Full Release Notes

Bugfixes

• RUST-2469 Use exact match for file ID in GridFS methods

Commits

• 16bc932 release v3.9.1 (#1792)
• See full diff in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: d73b2ec7-461e-4426-9541-3c5a1f7e798d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[proggeramlug]

Landed on main in merge train 265 (#11108), released as v0.5.1648 at 9d26936298.

Cherry-picked from this PR's head 28e4b1a2ca and validated as one tree with 15 other PRs — CI 22/22 green, all 6 gap-suite shards. A train rebase gives the commits new SHAs, so GitHub cannot auto-close the source PR; closing by hand.

Nothing needed from you. Thanks.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml