chore(deps): update cargo dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
clap	dependencies	patch	4.6.6 → 4.6.7
flate2	dependencies	patch	1.1.9 → 1.1.10
rand (source)	dev-dependencies	patch	0.10.2 → 0.10.3
reqwest	dependencies	patch	0.13.4 → 0.13.5
thiserror	dependencies	patch	2.0.20 → 2.0.21
toml	dependencies	patch	1.1.4+spec-1.1.0 → 1.1.6
toml_edit	dependencies	patch	0.25.13+spec-1.1.0 → 0.25.15

---

Release Notes

clap-rs/clap (clap)

v4.6.7

Compare Source

rust-lang/flate2-rs (flate2)

v1.1.10

Compare Source

What's Changed

• feat: reuse zlib's decoder buffer by @​Vaiz in #​532
• feat: add reset method for read::GzDecoder and buffered::GzDecoder by @​Vaiz in #​534
• Drop cloudflare-zlib by @​kornelski in #​539
• Add a wrapper for the Crc struct by @​MikkelPaulson in #​540
• Bump miniz_oxide to 0.9 by @​oscargus in #​543
• Upgrade miniz_oxide and add unit tests of the different flush kinds by @​fintelia in #​498
• Fix infinite loop in writing gzip header/footer by @​Shnatsel in #​547
• test: generate corrupt gzip fixture at runtime by @​nanookclaw in #​550
• Reject oversized gzip extra fields by @​Byron in #​553
• Reject incomplete deflate streams at EOF by @​Guflly in #​556
• Include README.md in a private module by @​bushrat011899 in #​562
• Add no_std support using nightly alloc_io by @​bushrat011899 in #​559
• Update get_mut() documentation to make clear how 'inner` can be used by @​Byron in #​558

New Contributors

• @​Vaiz made their first contribution in #​532
• @​MikkelPaulson made their first contribution in #​540
• @​oscargus made their first contribution in #​543
• @​nanookclaw made their first contribution in #​550
• @​Guflly made their first contribution in #​556
• @​bushrat011899 made their first contribution in #​562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

rust-random/rand (rand)

v0.10.3

Compare Source

Fixes

• Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#​1808)
• Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#​1821)
• Fix possible panic due to sampling a deserialized Uniform<char> (#​1831)

Changes

• Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#​1838)

seanmonstar/reqwest (reqwest)

v0.13.5

Compare Source

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

dtolnay/thiserror (thiserror)

v2.0.21

Compare Source

• Fix parsing of generic unit variants in display expressions (#​459)

toml-rs/toml (toml)

v1.1.6

Compare Source

v1.1.5

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 5pm,every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: c6b5a4cc-4c90-4435-a4f9-79767ae234d3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​thiserror@​2.0.20 ⏵ 2.0.21
	cargo/​reqwest@​0.13.4 ⏵ 0.13.5
	cargo/​clap@​4.6.6 ⏵ 4.6.7
	cargo/​flate2@​1.1.9 ⏵ 1.1.10
	cargo/​rand@​0.10.2 ⏵ 0.10.3
	cargo/​toml@​1.1.4%2Bspec-1.1.0 ⏵ 1.1.6+spec-1.1.0
	cargo/​toml_edit@​0.25.13%2Bspec-1.1.0 ⏵ 0.25.15+spec-1.1.0

View full report

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud