fix(deps): update rust

[bootc-bot]

This PR contains the following updates:

Package	Type	Update	Change
anyhow	workspace.dependencies	patch	1.0.102 → 1.0.103
bcvk-qemu	dependencies	digest	22a4223 → 92ee5ce
camino	workspace.dependencies	patch	1.2.2 → 1.2.4
chrono	workspace.dependencies	patch	0.4.44 → 0.4.45
clap_complete	dependencies	patch	4.6.5 → 4.6.7
composefs-ctl	workspace.dependencies	digest	6a34615 → a29622c
hyper (source)	workspace.dependencies	minor	1.9.0 → 1.10.1
indicatif	workspace.dependencies	patch	0.18.4 → 0.18.6
itertools	dependencies	minor	0.14.0 → 0.15.0
log	workspace.dependencies	patch	0.4.29 → 0.4.33
openssl	workspace.dependencies	patch	0.10.78 → 0.10.81
rand (source)	dependencies	patch	0.10.1 → 0.10.2
regex	workspace.dependencies	minor	1.12.3 → 1.13.0
rexpect	dependencies	patch	0.7.0 → 0.7.1
serde_json	workspace.dependencies	patch	1.0.149 → 1.0.150
tokio (source)	workspace.dependencies	patch	1.52.1 → 1.52.3
uuid	dependencies	patch	1.23.3 → 1.23.4
which	dependencies	patch	8.0.3 → 8.0.4

---

Release Notes

dtolnay/anyhow (anyhow)

v1.0.103

Compare Source

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#​451, #​452)

camino-rs/camino (camino)

v1.2.4

Compare Source

Added

Methods to convert between Box<Utf8Path> and Box<Path>:

• From<Box<Utf8Path>> for Box<Path> (as of release, not documented due to rust-lang/rust#158466).
• Utf8Path::into_std_boxed_path(self: Box<Self>)
• Utf8Path::from_boxed_path(path: Box<Path>)
• TryFrom<Box<Path>> for Box<Utf8Path>

Thanks nicopap for your first contribution!

v1.2.3

Compare Source

Performance improvements

• Utf8Path::hash now delegates to std::path::Path::hash, resulting in hashing requiring ~2x fewer instructions. Thanks stormslowly for your first contribution!

chronotope/chrono (chrono)

v0.4.45: 0.4.45

Compare Source

What's Changed

• fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @​SAY-5 in #​1787
• tz_data: fix tzdata locations on Android by @​caruschalalamove in #​1789

clap-rs/clap (clap_complete)

v4.6.7

Compare Source

v4.6.6

Compare Source

hyperium/hyper (hyper)

v1.10.1

Compare Source

Bug Fixes

• http1: fix busy loop when peer half-closes and open body (#​4086) (c6cb906f, closes #​4085)

v1.10.0

Compare Source

Bug Fixes

• http1:
  • send error when dispatcher is dropped mid-body (#​4069) (b7a679ba, closes #​3995, #​4016)
  • fix reading large bodies on 32-bit systems (#​4056) (b12f6525, closes #​4055)
  • fix rare missed write wakeup on connections v2 (743a3ba0)
• http2:
  • do not reserve capacity before body data is available (#​4061) (99f24345, closes #​4003)
  • reading trailers shouldn't propagate NO_ERROR from early response (#​3998) (e5ad96b1)

Features

• http2:
  • add reset_stream_duration() client option (#​4068) (156a6f6a, closes #​2599)
  • Add 'header_table_size()' method to server builder (#​4062) (6c9182c4)

console-rs/indicatif (indicatif)

v0.18.6

Compare Source

What's Changed

• fix: correctly detect dumb terminal on Windows by @​ugur-eren in #​818

v0.18.5

Compare Source

What's Changed

• Upgrade to rand 0.10 by @​djc in #​768
• multi: document common MultiProgress bugs + behavior (#​595) by @​chris-laplante in #​786
• Use div_duration_f64 by @​ChrisDenton in #​792
• Clear the rest of line after drawing to the terminal by @​ChrisDenton in #​790
• Fix ProgressDrawTarget.is_stderr() for MultiProgress by @​kojiishi in #​803
• Fix height and filler when wrapped at the middle of wide characters by @​kojiishi in #​799
• fix: respect NO_COLOR and TERM=dumb environment variable by @​ValentinLeTallec in #​808
• Fix stray comma after minus sign in HumanFloatCount by @​sueun-dev in #​815
• Fix HumanFloatCount dropping the fractional part by @​greymoth-jp in #​816
• style module cleanup by @​djc in #​813
• Drop screenshots from MultiProgress documentation by @​djc in #​817

rust-itertools/itertools (itertools)

v0.15.0

Compare Source

Breaking

• Restructure Position as struct instead of enum (#​1042, #​1043)
• Canonicalize all_equal_value's error type (#​1032)

Added

• Add *_with_hasher adaptors (#​1007)
• Add strip_prefix and strip_prefix_by methods (#​1104)

Changed

• Remove Clone bounds from tuple_combinations and array_combinations(#​1011)
• must_use for collect_vec (#​1009)
• Make izip! temporary friendly (#​1021)
• Add array_combinations_with_replacement (#​1033)
• Implement Debug for remaining public types (#​1038)
• Specialize ExactlyOneError::count (#​1046)
• Implement PeekingNext for more types, in particular vec::IntoIter (#​1059, #​1073)
• Fix PadUsing::next_back (#​1082)
• Introduce [circular_]array_windows, deprecate tuple_windows (#​1086)
• Deprecate tuple_combinations (replaced by array_combinations) (#​1085)

Notable Internal Changes

• Make into_group_map code more idiomatic (#​1027)
• Fix clippy lints (#​1017, #​1029, #​1076, #​1099)

rust-lang/log (log)

v0.4.33

Compare Source

v0.4.32

Compare Source

What's Changed

• Support Value -> string conversions with kv + std features instead of kv_std by @​tisonkun in #​729

Full Changelog: rust-lang/log@0.4.31...0.4.32

v0.4.31

Compare Source

What's Changed

• Support Value -> string conversions with kv + std features instead of kv_std by @​tisonkun in #​729

Full Changelog: rust-lang/log@0.4.31...0.4.32

v0.4.30

Compare Source

What's Changed

• Leverage static str key when possible by @​tisonkun in #​727

New Contributors

• @​Isvane made their first contribution in #​726

Full Changelog: rust-lang/log@0.4.30...0.4.31

rust-openssl/rust-openssl (openssl)

v0.10.81

Compare Source

What's Changed

• Bump aws-ls-sys to 0.41 by @​joshgodsiff in #​2640
• Add brainpoolP224r1 and brainpoolP224t1 NID constants by @​sfarestam-iproov in #​2642
• x509: add minimal support for CRL building by @​DavidFontaineOcd in #​2538
• add mldsa.h to the boringssl bindgen by @​reaperhulk in #​2650
• Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string by @​alex in #​2652
• Fix verify_mode() panic on unmodeled verify mode bits by @​alex in #​2651
• Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​2653
• Release openssl 0.10.81 and openssl-sys 0.9.117 by @​reaperhulk in #​2655

New Contributors

• @​joshgodsiff made their first contribution in #​2640
• @​sfarestam-iproov made their first contribution in #​2642
• @​DavidFontaineOcd made their first contribution in #​2538

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.80...openssl-v0.10.81

v0.10.80

Compare Source

What's Changed

• Prefer Homebrew openssl@​4 and stop looking for openssl@​1.1 by @​alex in #​2633
• Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-padding by @​alex in #​2638
• Release openssl 0.10.80 and openssl-sys 0.9.116 by @​alex in #​2639

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.79...openssl-v0.10.80

v0.10.79

Compare Source

What's Changed

• Bump actions/cache from 5.0.4 to 5.0.5 by @​dependabot[bot] in #​2610
• Try to fix OpenSSL 1.1.0l download by @​botovq in #​2614
• Require &mut BigNumContextRef for EcPointRef mul/invert by @​alex in #​2615
• Fix UB in EcGroupRef::generator on groups without a generator by @​alex in #​2617
• Replace use libc::*; with targeted imports in openssl-sys by @​alex in #​2618
• Add PKeyRef::is_a and KeyType for name-based key identification by @​reaperhulk in #​2619
• Add PKey::{public,private}_key_from_raw_bytes_ex by @​reaperhulk in #​2620
• Bump MSRV to 1.80 by @​reaperhulk in #​2622
• Drop once_cell in favor of std::sync::{LazyLock, OnceLock} by @​reaperhulk in #​2623
• Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import by @​reaperhulk in #​2621
• parallelize more builds in CI for cold caches by @​reaperhulk in #​2625
• Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction by @​reaperhulk in #​2626
• Fix process abort when verify/PSK callbacks fire after SSL_CTX swap by @​alex in #​2624
• Bind OSSL_PARAM_modified and use it for seed_into by @​reaperhulk in #​2628
• Add PkeyCtxRef::set_context_string for ML-DSA by @​reaperhulk in #​2629
• Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders by @​alex in #​2631
• Fix output buffer overflow for AES key-wrap-with-padding ciphers by @​alex in #​2630
• Release openssl 0.10.79 and openssl-sys 0.9.115 by @​reaperhulk in #​2632

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79

rust-random/rand (rand)

v0.10.2

Compare Source

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#​1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#​1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#​1791)

rust-lang/regex (regex)

v1.13.0

Compare Source

===================
This release includes a new API, a regex! macro, for lazy compilation of
a regex from a string literal. If you use regexes a lot, it's likely you've
already written one exactly like it. The new macro can be used like this:

use regex::regex;

fn is_match(line: &str) -> bool {
    // The regex will be compiled approximately once and reused automatically.
    // This avoids the footgun of using `Regex::new` here, which would
    // guarantee that it would be compiled every time this routine is called.
    // This would likely make this routine much slower than it needs to be.
    regex!(r"bar|baz").is_match(line)
}

let hay = "\
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";

let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

• #​709:
  Add a new regex! macro for efficient and automatic reuse of a compiled regex.

v1.12.4

Compare Source

===================
This release includes a performance optimization for compilation of regexes
with very large character classes.

Improvements:

• #​1308:
  Avoid re-canonicalizing the entire interval set when pushing new class ranges.

rust-cli/rexpect (rexpect)

v0.7.1

Compare Source

Fixes

• Avoid char boundary panics with NBReader::try_read

serde-rs/json (serde_json)

v1.0.150

Compare Source

• Reject non-string enum object keys (#​1324, thanks @​puneetdixit200)

tokio-rs/tokio (tokio)

v1.52.3: Tokio v1.52.3

Compare Source

1.52.3 (May 8th, 2026)

Fixed

• sync: fix underflow in mpsc channel len() (#​8062)
• sync: notify receivers in mpsc OwnedPermit::release() method (#​8075)
• sync: require that an RwLock has max_readers != 0 (#​8076)
• sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#​8074)

v1.52.2: Tokio v1.52.2

Compare Source

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#​7431), due to its performance impact. (#​8100)

uuid-rs/uuid (uuid)

v1.23.4

Compare Source

What's Changed

• Fix up name of fuzz script in readme by @​KodrAus in #​888
• document fixes by @​frostyplanet in #​889
• Prepare for 1.23.4 release by @​KodrAus in #​890

New Contributors

• @​frostyplanet made their first contribution in #​889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

harryfei/which-rs (which)

v8.0.4

Compare Source

• On Windows we now emit a NonFatalError if the PATHEXT environment variable is not populated, and the query did not specify a file extension.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.