chore(deps): upgrade Rust to 1.99 and compatible dependencies

Cargo.toml

@@ -2,7 +2,7 @@
 name = "kit"
 version = "0.2.8"
 edition = "2024"
-rust-version = "1.94.0"
+rust-version = "1.99.0"
 publish = false
 
 [features]
@@ -26,9 +26,9 @@ tui = [
 ]
 
 [dependencies]
-opus-pure = { version = "=0.2.1", default-features = false, optional = true }
-str0m = { version = "=0.23.1", default-features = false, features = ["aws-lc-rs"], optional = true }
-tokio-tungstenite = { version = "=0.29.0", default-features = false, features = ["handshake"], optional = true }
+opus-pure = { version = "=0.2.2", default-features = false, optional = true }
+str0m = { version = "=0.24.0", default-features = false, features = ["aws-lc-rs"], optional = true }
+tokio-tungstenite = { version = "=0.30.0", default-features = false, features = ["handshake"], optional = true }
 a2a-protocol-client = "=0.11.0"
 a2a-protocol-server = { version = "=0.11.0", default-features = false }
 a2a-protocol-types = "=0.11.0"
@@ -57,24 +57,24 @@ axum = "=0.8.9"
 base64 = "=0.23.1"
 blake3 = "=1.8.7"
 bytes = "=1.12.1"
-clap = { version = "=4.6.6", features = ["derive"] }
+clap = { version = "=4.6.7", features = ["derive"] }
 crossterm = { version = "=0.29.0", features = ["event-stream"], optional = true }
 flate2 = "=1.1.10"
 ignore = "=0.4.33"
 futures-util = "=0.3.34"
 getrandom = "=0.4.3"
 hyper = "=1.11.1"
-hyper-util = { version = "=0.1.20", features = ["server", "http1", "http2", "tokio"] }
+hyper-util = { version = "=0.1.21", features = ["server", "http1", "http2", "tokio"] }
 image = { version = "=0.25.10", default-features = false, features = ["gif", "jpeg", "png", "webp"] }
-jsonwebtoken = { version = "=11.0.0", default-features = false, features = ["aws_lc_rs"] }
+jsonwebtoken = { version = "=11.1.0", default-features = false, features = ["aws_lc_rs"] }
 keyring = { version = "=4.2.0", default-features = false, features = ["v1"] }
-jsonschema = { version = "=0.52.1", default-features = false, features = ["idna"] }
+jsonschema = { version = "=0.58.5", default-features = false, features = ["idna"] }
 neo_frizbee = "=0.11.0"
 opentelemetry = { version = "=0.32.0", default-features = false, features = ["trace"] }
 opentelemetry-otlp = { version = "=0.32.0", default-features = false, features = ["grpc-tonic", "http-proto", "http-json", "reqwest-client", "tls-webpki-roots", "trace"] }
 opentelemetry_sdk = { version = "=0.32.1", default-features = false, features = ["experimental_trace_batch_span_processor_with_async_runtime", "rt-tokio", "trace"] }
 ratatui = { version = "=0.30.2", default-features = false, features = ["crossterm", "layout-cache"], optional = true }
-ratatui-image = { version = "=11.0.8", default-features = false, features = ["crossterm"], optional = true }
+ratatui-image = { version = "=11.1.0", default-features = false, features = ["crossterm"], optional = true }
 reqwest = { version = "=0.13.5", default-features = false, features = ["blocking", "form", "rustls", "stream"] }
 rmcp = { version = "=3.2.0", default-features = false, features = ["auth", "client"] }
 rpassword = "=7.5.4"
@@ -86,8 +86,8 @@ sha2 = "=0.11.0"
 subtle = "=2.6.1"
 tar = { version = "=0.4.46", default-features = false }
 tempfile = "=3.27.0"
-toml = "=1.1.5"
-toml_edit = { version = "=0.25.13", default-features = false, features = ["parse", "display"] }
+toml = "=1.1.6"
+toml_edit = { version = "=0.25.15", default-features = false, features = ["parse", "display"] }
 tokio = { version = "=1.53.1", features = ["fs", "io-util", "macros", "net", "process", "rt-multi-thread", "signal", "sync", "time"] }
 tokio-util = { version = "=0.7.19", features = ["compat"] }
 tower = { version = "=0.5.3", features = ["util"] }
@@ -97,7 +97,7 @@ tracing-subscriber = { version = "=0.3.23", default-features = false, features =
 unicode-segmentation = { version = "=1.13.3", optional = true }
 unicode-width = { version = "=0.2.2", optional = true }
 url = "=2.5.8"
-uuid = { version = "=1.26.0", features = ["v5"] }
+uuid = { version = "=1.26.1", features = ["v5"] }
 zip = { version = "=8.6.0", default-features = false, features = ["deflate-flate2-zlib-rs"] }
 zeroize = { version = "=1.9.0", features = ["derive"] }
 
@@ -121,7 +121,7 @@ windows-sys = { version = "=0.61.2", features = [
 ] }
 
 [dev-dependencies]
-jsonwebtoken = { version = "=11.0.0", default-features = false, features = ["aws_lc_rs", "use_pem"] }
+jsonwebtoken = { version = "=11.1.0", default-features = false, features = ["aws_lc_rs", "use_pem"] }
 tokio = { version = "=1.53.1", features = ["test-util"] }
 
 # Deny also in test builds; only test-only scopes may relax ergonomics. Crate

Dockerfile

@@ -3,7 +3,7 @@
 # Published flavors are built from the named final stages: bookworm, slim,
 # and alpine. The unqualified image uses the final `default` stage, which
 # intentionally aliases slim.
-ARG RUST_VERSION=1.94.0
+ARG RUST_VERSION=1.99.0
 ARG DEBIAN_SUITE=bookworm
 ARG ALPINE_VERSION=3.23
 ARG VERSION=source

README.md

@@ -137,7 +137,7 @@ USER kit
 
 ```sh
 git clone https://github.com/speakeasy-api/kit && cd kit
-mise install                   # Rust 1.94 with rustfmt and clippy; Python and XcodeGen on macOS
+mise install                   # Rust 1.99 with rustfmt and clippy; Python and XcodeGen on macOS
 mise run setup:linux           # Debian/Ubuntu only: C/C++, CMake, pkg-config, ALSA/PulseAudio headers (sudo)
 mise run install               # cargo install into ~/.cargo/bin
 mise run dev -- tui --root .   # cargo run; arguments pass through

mise.toml

@@ -1,7 +1,7 @@
 min_version = "2026.7.0"
 
 [tools]
-rust = { version = "1.94.0", profile = "minimal", components = "rustfmt,clippy" }
+rust = { version = "1.99.0", profile = "minimal", components = "rustfmt,clippy" }
 python = { version = "3.13", os = ["macos"] }
 # Checksum-pinned release archive; scripts/generate-macos-project.sh also verifies the binary hash.
 "http:xcodegen" = { version = "2.45.4", os = ["macos"], url = "https://github.com/yonaskolb/XcodeGen/releases/download/2.45.4/xcodegen.zip", checksum = "sha256:090ec29491aad50aec10631bf6e62253fed733c50f3aab0f5ffc86bc170bdbef", bin_path = "xcodegen/bin" }

src/managed_files.rs

@@ -480,7 +480,7 @@ impl Selection {
                     return Err("compose return exceeds file-selection traversal budget".into());
                 }
                 let mut entries = object.iter().collect::<Vec<_>>();
-                entries.sort_unstable_by(|(a, _), (b, _)| a.cmp(b));
+                entries.sort_unstable_by_key(|(a, _)| *a);
                 for (key, child) in entries {
                     if key.len() > MAX_HEADER_BYTES {
                         return Err("compose return key exceeds file-selection label budget".into());