⬆️ Update Rust Crates

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anyhow	dependencies	patch	1.0.102 → 1.0.103
axum	dependencies	patch	0.8.8 → 0.8.9
chrono	dependencies	patch	0.4.44 → 0.4.45
clap	dependencies	patch	4.6.0 → 4.6.1
config	dependencies	patch	0.15.22 → 0.15.25
dashmap	dependencies	minor	6.1.0 → 6.2.1
hmac	dependencies	minor	0.12 → 0.13
jsonwebtoken	dependencies	minor	10.3.0 → 10.4.0
maxminddb	dependencies	minor	0.27 → 0.29
rand (source)	dependencies	patch	0.10.0 → 0.10.2
reqwest	dependencies	patch	0.13.2 → 0.13.4
serde_json	dependencies	patch	1.0.149 → 1.0.150
sha2	dependencies	minor	0.10 → 0.11
sqlx	dependencies	minor	0.8 → 0.9
tokio	dependencies	minor	1.50.0 → 1.52.3
tower-http	dependencies	minor	0.6 → 0.7

---

Release Notes

chronotope/chrono (chrono)

v0.4.45: 0.4.45

Compare Source

What's Changed

• fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @​SAY-5 in #​1787
• tz_data: fix tzdata locations on Android by @​caruschalalamove in #​1789

xacrimon/dashmap (dashmap)

v6.2.1

Compare Source

This is an interim maintenance release for the existing v6 branch before v7 can be released. This bumps the MSRV to 1.85 and updates dependencies to their latest versions.

oschwald/maxminddb-rust (maxminddb)

v0.29.0

Compare Source

• Breaking: Metadata::build_time() now returns
  Result<SystemTime, MaxMindDbError> instead of panicking on
  unrepresentable timestamps, and databases whose build_epoch cannot be
  represented as SystemTime are rejected as invalid during open and verify.
• Breaking: Reader::metadata is now private. Use Reader::metadata() to
  access validated metadata by shared reference.
• Breaking: Opening a database now rejects unsupported major format versions,
  unsupported IP versions, and zero-node search trees. Minor format versions
  are still accepted for forward compatibility.
• Fixed: within() and networks() now handle IPv6 databases without an
  IPv4 subtree without reading terminal data nodes as tree nodes or
  panicking while formatting low IPv6 networks.
• Fixed: Skipping ignored or unknown fields now enforces data-section
  bounds and the maximum nesting depth instead of accepting truncated
  values or overflowing the stack on deeply nested corrupt data.
• Internal: Added focused benchmarks for network iteration and serde
  unknown-field skipping, plus metadata build-time conversion, to guard
  performance-sensitive fixes.
• Documentation: Fixed intra-doc links so docs build with warnings denied,
  and added a CI check to keep them passing.

v0.28.1

Compare Source

• Fixed: Databases with an impossible declared search tree size are now
  rejected during open/verify instead of causing runaway allocation
  during validation.
• Fixed: within() now rejects IPv6 CIDRs on IPv4-only databases instead
  of yielding unrelated networks.
• Fixed: Verification now rejects truncated scalar/string payloads instead
  of skipping past them and reporting the database as valid.
• Fixed: LookupResult::network() now uses the reader's measured IPv4
  subtree depth instead of assuming it always begins at bit 96.

v0.28.0

Compare Source

• Performance improvement: Faster search-tree traversal by dispatching
  on the database's record size to monomorphized node readers, replacing
  per-step branching on the record size.
• Performance improvement: Direct deserialization of scalars, sequences,
  maps, and structs through dedicated fast paths instead of routing
  through deserialize_any.
• Performance improvement: IPv4 and IPv6 lookups dispatch to dedicated
  paths, avoiding per-call address-kind checks on the hot path.
• Behavior change: Deserializing a database array into a tuple or
  tuple struct now returns a decoding error when the lengths do not
  match. Previously the mismatch was silently ignored.
• Fixed: A corrupt data pointer that would underflow during resolution
  now returns an InvalidDatabase error instead of panicking.

rust-random/rand (rand)

v0.10.2

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#​1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#​1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#​1791)

v0.10.1

Compare Source

This release includes a fix for a soundness bug; see #​1763.

Changes

• Document panic behavior of make_rng and add #[track_caller] (#​1761)
• Deprecate feature log (#​1763)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --package anyhow@1.0.102 --precise 1.0.103
    Updating crates.io index
error: failed to select a version for `sqlx`.
    ... required by package `lynx v0.1.0 (/tmp/renovate/repos/github/BTreeMap/Lynx)`
versions that meet the requirements `^0.9` are: 0.9.0

package `lynx` depends on `sqlx` with feature `runtime-tokio-rustls` but `sqlx` does not have that feature.
help: available features: _rt-async-global-executor, _rt-async-std, _rt-smol, _rt-tokio, _sqlite, _unstable-all-types, _unstable-docs, all-databases, any, bigdecimal, bit-vec, bstr, chrono, default, derive, ipnet, ipnetwork, json, mac_address, macros, migrate, mysql, mysql-rsa, postgres, regexp, runtime-async-global-executor, runtime-async-std, runtime-smol, runtime-tokio, rust_decimal, sqlite, sqlite-bundled, sqlite-deserialize, sqlite-load-extension, sqlite-preupdate-hook, sqlite-unbundled, sqlite-unlock-notify, sqlx-macros, sqlx-mysql, sqlx-postgres, sqlx-sqlite, sqlx-toml, time, tls-native-tls, tls-none, tls-rustls, tls-rustls-aws-lc-rs, tls-rustls-ring, tls-rustls-ring-native-roots, tls-rustls-ring-webpki, uuid


failed to select a version for `sqlx` which could resolve this conflict