chore(deps): bump the patch-updates group across 1 directory with 8 updates

[dependabot]

Bumps the patch-updates group with 8 updates in the / directory:

Package	From	To
rand	0.10.1	0.10.2
uuid	1.23.3	1.23.5
jiff	0.2.28	0.2.32
quinn	0.11.9	0.11.11
rustls	0.23.40	0.23.41
mdns-sd	0.20.0	0.20.1
md5	0.8.0	0.8.1
bytes	1.12.0	1.12.1

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

Updates uuid from 1.23.3 to 1.23.5

Release notes

Sourced from uuid's releases.

v1.23.5

What's Changed

• doc: Fix broken link by @​frostyplanet in uuid-rs/uuid#891
• perf: Optimize UUID hex parsing and formatting by @​geeknoid in uuid-rs/uuid#894
• Prepare for 1.23.5 release by @​KodrAus in uuid-rs/uuid#895

New Contributors

• @​geeknoid made their first contribution in uuid-rs/uuid#894

Full Changelog: uuid-rs/uuid@v1.23.4...v1.23.5

v1.23.4

What's Changed

• Fix up name of fuzz script in readme by @​KodrAus in uuid-rs/uuid#888
• document fixes by @​frostyplanet in uuid-rs/uuid#889
• Prepare for 1.23.4 release by @​KodrAus in uuid-rs/uuid#890

New Contributors

• @​frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits

• 5dc6b3d Merge pull request #895 from uuid-rs/cargo/v1.23.5
• 5a7dfe5 prepare for 1.23.5 release
• 9b4bfc8 Merge pull request #894 from geeknoid/main
• 5acc5a5 perf: Optimize UUID hex parsing and formatting
• 1e5d867 Merge pull request #891 from frostyplanet/doc
• 49310f0 doc: Fix broken link
• 3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
• cba53d0 prepare for 1.23.4 release
• e347af4 Merge pull request #889 from frostyplanet/main
• e9bf55c doc: Fix broken link warnings
• Additional commits viewable in compare view

Updates jiff from 0.2.28 to 0.2.32

Changelog

Sourced from jiff's changelog.

0.2.32 (2026-07-08)

This release updates Jiff's bundled copy of the [IANA Time Zone Database] to 2026c. See the 2026c release announcement for more details.

0.2.31 (2026-06-29)

This release fixes a minor bug in tests that prevents the crate from running through standard build processes in Linux distributions downstream.

• #594: Fix imports in recently added tests.

0.2.30 (2026-06-29)

This release fixes a safety soundness bug in Jiff's lower level printing APIs. There is also a nice performance improvement to civil::Date::weekday, which also improves downstread routines like civil::Date::nth_weekday and datetime<-->timestamp conversions in some cases.

Enhancements:

• #591: Improve the performance of weekday calculations from Gregorian dates by 30-50%.

Bug fixes:

• #592: Fix safety soundness bug when using a non-empty String destination buffer with lower level printing APIs inside of jiff::fmt.

0.2.29 (2026-06-20)

This release adds support for [defmt], which is a highly efficient logging framework that targets resource-constrained devices, like microcontrollers.

Enhancements:

• #505: Add support for the defmt crate by implementing defmt::Format on the principle public types in Jiff.
• #584: Add Zoned::UNIX_EPOCH as a constant.
• #587: Change the Debug output for civil::ISOWeekDate to match the Debug output

... (truncated)

Commits

• bc70277 0.2.32
• 0ac41e2 jiff-tzdb-0.1.8
• 11965f4 scripts: fix tzdb-update script
• fbc46ba jiff-tzdb: update to tzdb 2026c
• fff100d scripts: squash shellcheck bleating
• 8a13102 jiff-tzdb-0.1.7
• 8fb795f 0.2.31
• 528207f changelog: 0.2.31
• 91ee475 test: use crate::… instead of jiff::… in a couple of lib tests
• 4c3a86e 0.2.30
• Additional commits viewable in compare view

Updates quinn from 0.11.9 to 0.11.11

Release notes

Sourced from quinn's releases.

quinn-proto 0.11.11

What's Changed

• Prefer sending extra ping again by @​flub in quinn-rs/quinn#2172
• fix: Do not produce tail-loss probes larger than segment size by @​flub in quinn-rs/quinn#2167
• Avoid inference hazard for integer comparisons by @​djc in quinn-rs/quinn#2188
• fix: respecting max_datagrams in poll_transmit by @​filipe-cantarelli in quinn-rs/quinn#2185
• Bump the quinn-proto version to 0.11.11 for release by @​faern in quinn-rs/quinn#2209

Commits

• a7499b8 Bump versions for release
• 7c1970f proto: yield error on too many gaps in assembler
• fe5ac49 congestion: avoid double-reducing CUBIC fast convergence
• c1e903b fix(quinn): handle overdue timers without polling the async timer
• b3b20e1 quinn-udp: allow to use windows-sys 0.61
• 6f03ca3 quinn-proto: drop Initials silently when saturated
• 41c8527 quinn: fix ref count logic for ConnectionRef and EndpointRef
• 73ea1dd Remove RecvStreams from blocked_readers on stop
• cf16bfd Early return in RecvStream::drop()
• af2e4e5 Fix the (pre-existing) rightward drift by inverting conditions
• Additional commits viewable in compare view

Updates rustls from 0.23.40 to 0.23.41

Commits

• 642a103 ci: drop Taplo job
• 752c144 Drop nightly clippy tests
• 8d8611a Fix new clippy::useless-borrows-in-formatting
• ebf3297 Fix new clippy::manual_clear
• 46808e7 ci: sync cargo-check-external-types nightly
• 041a8d2 Cargo deny: allow RUSTSEC-2026-0173
• 62e220e Take semver-compatible dependency updates
• 3c14696 Upgrade to hickory-resolver 0.26
• 848a2cc connect-tests: delete ech.rs
• 5ce9cac Bump version to 0.23.41
• Additional commits viewable in compare view

Updates mdns-sd from 0.20.0 to 0.20.1

Release notes

Sourced from mdns-sd's releases.

v0.20.1

This is a small feature and maintenance release.

New features

• Add IfKind::Predicate and a new IfPredicate type, allowing interfaces to be selected with a custom predicate function (e.g. matching by interface name pattern). (#474, commit fd72146)

What's Changed

• chore(deps): update by @​CosminPerRam in keepsimple1/mdns-sd#454
• Add IfPredicate for more flexible interface filtering by @​MAlba124 in keepsimple1/mdns-sd#474
• prepare for a new release 0.20.1 by @​keepsimple1 in keepsimple1/mdns-sd#475

New Contributors

• @​MAlba124 made their first contribution in keepsimple1/mdns-sd#474

Full Changelog: keepsimple1/mdns-sd@v0.20.0...v0.20.1

Changelog

Sourced from mdns-sd's changelog.

Version 0.20.1 (2026-06-28)

This is a small feature and maintenance release.

New features

• Add IfKind::Predicate and a new IfPredicate type, allowing interfaces to be selected with a custom predicate function (e.g. matching by interface name pattern). (#474, commit fd72146)

Other changes

• chore(deps): update dependencies. (#454, commit 06bdad1)

All changes

• fd72146 2026-06-22 Add IfPredicate for more flexible interface filtering (#474) (MAlba124)
• 06bdad1 2026-06-16 chore(deps): update (#454) (CosminPerRam)

Thanks and welcome our new contributor @​MAlba124 !

Commits

• c91cd35 prepare for a new release 0.20.1 (#475)
• fd72146 Add IfPredicate for more flexible interface filtering (#474)
• 06bdad1 chore(deps): update (#454)
• See full diff in compare view

Updates md5 from 0.8.0 to 0.8.1

Commits

• See full diff in compare view

Updates bytes from 1.12.0 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Commits

• 76c0fbb Release bytes v1.12.1 (#838)
• 924c82b Handle unwinding from Box::new (#837)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.