From e023676f9b6c381cfebdc6ee76be5376c0ba490b Mon Sep 17 00:00:00 2001
From: Linuxuser67 <41808005+Linuxuser67@users.noreply.github.com>
Date: Mon, 26 Oct 2026 17:20:54 +0100
Subject: [PATCH 1/7] chore(deps): prepare latest stable dependency refresh

---
 .../refresh-stable-dependencies-once.yml      | 35 +++++++++++++++++++
 Cargo.toml                                    |  4 +--
 2 files changed, 37 insertions(+), 2 deletions(-)
 create mode 100644 .github/workflows/refresh-stable-dependencies-once.yml

diff --git a/.github/workflows/refresh-stable-dependencies-once.yml b/.github/workflows/refresh-stable-dependencies-once.yml
new file mode 100644
index 000000000..da27be64d
--- /dev/null
+++ b/.github/workflows/refresh-stable-dependencies-once.yml
@@ -0,0 +1,35 @@
+name: One-shot stable dependency refresh
+
+on:
+  push:
+    branches:
+      - dependency-update-latest-stable-2026-10
+
+# This temporary workflow only runs for the dedicated dependency-update branch.
+permissions:
+  contents: write
+
+jobs:
+  refresh:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
+      - name: Update every compatible crates.io dependency to its latest stable release
+        run: cargo update
+      - name: Validate the resolved lockfile
+        run: cargo metadata --locked --format-version 1 > /dev/null
+      - name: Regenerate the Flatpak offline source manifest
+        run: python3 build-aux/gen-cargo-sources.py
+      - name: Commit dependency updates and remove this temporary workflow
+        env:
+          BRANCH: dependency-update-latest-stable-2026-10
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git rm .github/workflows/refresh-stable-dependencies-once.yml
+          git add Cargo.lock build-aux/cargo-sources.json
+          git diff --cached --check
+          git diff --cached --stat
+          git commit -m "chore(deps): update stable Cargo dependencies"
+          git push origin "HEAD:refs/heads/$BRANCH"
diff --git a/Cargo.toml b/Cargo.toml
index fd5481c3c..4996f6321 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -29,7 +29,7 @@ axum = { version = "0.8", features = ["json"] }
 sha2 = "0.11"
 # HMAC-SHA256 for the browser-extension pairing handshake (extension_server).
 hmac = "0.13"
-tokio = { version = "~1.53.3", default-features = false, features = ["rt", "rt-multi-thread", "sync", "time", "fs", "io-util", "macros", "net", "process"] }
+tokio = { version = "~1.54.1", default-features = false, features = ["rt", "rt-multi-thread", "sync", "time", "fs", "io-util", "macros", "net", "process"] }
 futures-util = "0.3.34"
 getrandom = "=0.4.3"
 reqwest = { version = "0.13.5", default-features = false, features = ["rustls", "stream", "socks", "cookies", "gzip", "brotli", "deflate"] }
@@ -43,7 +43,7 @@ gettext-rs = "0.8"
 # Video-page extraction (YouTube etc). Wrapper around the yt-dlp + ffmpeg
 # binaries: rustls keeps the rustls-only posture; no cache backend in v1
 # (metadata is refetched, CDN URLs expire in ~6h anyway).
-yt-dlp = { version = "2.8.3", default-features = false, features = ["rustls"] }
+yt-dlp = { version = "2.9.0", default-features = false, features = ["rustls"] }
 libc = "0.2"
 # Mozilla Public Suffix List for validating browser cookie domains.
 psl = "=2.1.228"

From 044221a0b7df74517fcff1e9ef54ce5da6f3c0b2 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 26 Oct 2026 16:21:28 +0000
Subject: [PATCH 2/7] chore(deps): update stable Cargo dependencies

---
 .../refresh-stable-dependencies-once.yml      |  35 ---
 Cargo.lock                                    | 163 ++++++----
 build-aux/cargo-sources.json                  | 289 ++++++++++--------
 3 files changed, 263 insertions(+), 224 deletions(-)
 delete mode 100644 .github/workflows/refresh-stable-dependencies-once.yml

diff --git a/.github/workflows/refresh-stable-dependencies-once.yml b/.github/workflows/refresh-stable-dependencies-once.yml
deleted file mode 100644
index da27be64d..000000000
--- a/.github/workflows/refresh-stable-dependencies-once.yml
+++ /dev/null
@@ -1,35 +0,0 @@
-name: One-shot stable dependency refresh
-
-on:
-  push:
-    branches:
-      - dependency-update-latest-stable-2026-10
-
-# This temporary workflow only runs for the dedicated dependency-update branch.
-permissions:
-  contents: write
-
-jobs:
-  refresh:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
-      - name: Update every compatible crates.io dependency to its latest stable release
-        run: cargo update
-      - name: Validate the resolved lockfile
-        run: cargo metadata --locked --format-version 1 > /dev/null
-      - name: Regenerate the Flatpak offline source manifest
-        run: python3 build-aux/gen-cargo-sources.py
-      - name: Commit dependency updates and remove this temporary workflow
-        env:
-          BRANCH: dependency-update-latest-stable-2026-10
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git rm .github/workflows/refresh-stable-dependencies-once.yml
-          git add Cargo.lock build-aux/cargo-sources.json
-          git diff --cached --check
-          git diff --cached --stat
-          git commit -m "chore(deps): update stable Cargo dependencies"
-          git push origin "HEAD:refs/heads/$BRANCH"
diff --git a/Cargo.lock b/Cargo.lock
index 6296e29a2..e430ae625 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -345,9 +345,9 @@ dependencies = [
 
 [[package]]
 name = "brotli"
-version = "9.0.0"
+version = "9.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8b851b75c23ca7873623d612fe49bd1989aeb03d08fb9432187eb253d3d4c6b"
+checksum = "6737ce8b81460bf9407909f73ff50bf13f7cb8577e1e76715f57ed0eba58ba44"
 dependencies = [
  "alloc-no-stdlib",
  "alloc-stdlib",
@@ -356,9 +356,9 @@ dependencies = [
 
 [[package]]
 name = "brotli-decompressor"
-version = "6.0.1"
+version = "6.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "941cd9bd4ddab83cb46fa5a2d428f1c857b24ac78cb876cf7beb710840934bd7"
+checksum = "34c6783f42c21c952ad7112b354f0ba2f10760e9decea5b1b60523d6e270faaf"
 dependencies = [
  "alloc-no-stdlib",
  "alloc-stdlib",
@@ -422,14 +422,14 @@ checksum = "ee548131103ad8f698c6725669647b9c757b3b66992dd6a026037596417bee21"
 dependencies = [
  "glib-sys",
  "libc",
- "system-deps 9.0.0",
+ "system-deps 9.0.1",
 ]
 
 [[package]]
 name = "cc"
-version = "1.9.0"
+version = "1.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "877bf67ac8e52449eb2f9e98a344ea163beb70dd1f9eebe3cc5357dcfeaee4df"
+checksum = "86e055fa6e3e40ad6187ba25b6855eeb635d5271f8e0f0e1e9a5826b8d75bea0"
 dependencies = [
  "find-msvc-tools",
  "jobserver",
@@ -648,9 +648,9 @@ dependencies = [
 
 [[package]]
 name = "ctutils"
-version = "0.4.4"
+version = "0.4.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12218662ccac37d9714f2191252553d67585b97df8c839cbe49e0bde278dc865"
+checksum = "fe3e9d21d39e6f39ff46e03d5b621424f88ee23d8a1672c6bfc9ccc7f2da4f6a"
 dependencies = [
  "cmov",
 ]
@@ -1090,7 +1090,7 @@ dependencies = [
  "glib-sys",
  "gobject-sys",
  "libc",
- "system-deps 9.0.0",
+ "system-deps 9.0.1",
 ]
 
 [[package]]
@@ -1122,7 +1122,7 @@ dependencies = [
  "libc",
  "pango-sys",
  "pkg-config",
- "system-deps 9.0.0",
+ "system-deps 9.0.1",
 ]
 
 [[package]]
@@ -1221,7 +1221,7 @@ dependencies = [
  "glib-sys",
  "gobject-sys",
  "libc",
- "system-deps 9.0.0",
+ "system-deps 9.0.1",
  "windows-sys 0.61.2",
 ]
 
@@ -1265,7 +1265,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "99b38907e67e40dec9b60f858bcada952598719cb512a13eb13d6cdcd16f8295"
 dependencies = [
  "libc",
- "system-deps 9.0.0",
+ "system-deps 9.0.1",
 ]
 
 [[package]]
@@ -1288,7 +1288,7 @@ checksum = "07595c9ba696bd9819cb6a8df39f08078f3dd679508fe052dd558492c2053834"
 dependencies = [
  "glib-sys",
  "libc",
- "system-deps 9.0.0",
+ "system-deps 9.0.1",
 ]
 
 [[package]]
@@ -1345,7 +1345,7 @@ dependencies = [
  "tracing-subscriber",
  "url",
  "yt-dlp",
- "zip",
+ "zip 8.6.0",
 ]
 
 [[package]]
@@ -1366,7 +1366,7 @@ checksum = "97842c7543828f98aa5583aa54fcda28aa84fa2b0f8c556142177f7bbb638057"
 dependencies = [
  "glib-sys",
  "libc",
- "system-deps 9.0.0",
+ "system-deps 9.0.1",
 ]
 
 [[package]]
@@ -1397,7 +1397,7 @@ dependencies = [
  "graphene-sys",
  "libc",
  "pango-sys",
- "system-deps 9.0.0",
+ "system-deps 9.0.1",
 ]
 
 [[package]]
@@ -1449,7 +1449,7 @@ dependencies = [
  "gsk4-sys",
  "libc",
  "pango-sys",
- "system-deps 9.0.0",
+ "system-deps 9.0.1",
 ]
 
 [[package]]
@@ -1662,9 +1662,9 @@ dependencies = [
 
 [[package]]
 name = "icu_collections"
-version = "2.3.0"
+version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fa68d21081c4a05d5a901a1c62add574c77048b6a1c67be3b50ce0b60d4ca513"
+checksum = "fe090a42a0d3140fed8c63263ed1fecc02422cb2f4bfe55cd8de2de1b8e105dd"
 dependencies = [
  "displaydoc",
  "potential_utf",
@@ -1676,9 +1676,9 @@ dependencies = [
 
 [[package]]
 name = "icu_locale_core"
-version = "2.3.0"
+version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d56e28588da92eee5c3201a6eff33fabdd49b62269c8938d4ff050ce4d900deb"
+checksum = "25d29b57c17c6528d0dc4c2141cfa2d08200465acb537a3909c8b9b8a4a984c0"
 dependencies = [
  "displaydoc",
  "litemap",
@@ -1689,9 +1689,9 @@ dependencies = [
 
 [[package]]
 name = "icu_normalizer"
-version = "2.3.0"
+version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12f9cf5f235641ed274641dd81c3f28d870e276763d0797aeeab72317b1c646f"
+checksum = "404a3b8c486f205c87fe7f23ab6894d84a4ad76d6e4671ae1981ba7def87c599"
 dependencies = [
  "icu_collections",
  "icu_normalizer_data",
@@ -1703,15 +1703,15 @@ dependencies = [
 
 [[package]]
 name = "icu_normalizer_data"
-version = "2.3.0"
+version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1563da1ed3e0b3bf3d74c9b85917ac9c56464d2f57242270c09c9e752f8021a0"
+checksum = "20f0088bfb7441f7a37fa0c9e20cb1e9cba1cac6b9ce8cd2a6dc44294f8e8cbc"
 
 [[package]]
 name = "icu_properties"
-version = "2.3.0"
+version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e7ca276ad3145661a65914e6daf131ca5120cd3dcee8f8f3214b8875184a148"
+checksum = "2ea83d991c56158f7cf898bf86436c1dfe7c07ee82fe88951f2695c9f37a379f"
 dependencies = [
  "displaydoc",
  "icu_collections",
@@ -1724,15 +1724,15 @@ dependencies = [
 
 [[package]]
 name = "icu_properties_data"
-version = "2.3.0"
+version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e590f038c1464a96894fd6d10127e90a8be4509f56ff7ecef851b15cee0b7caa"
+checksum = "b98f29af82d02b163fe50161388350e743bb3107cc8e8c2f7314cb505faddfcf"
 
 [[package]]
 name = "icu_provider"
-version = "2.3.1"
+version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d27bbb9d3abbefac45d55f647c9de1d44aafcd1186eb91879afef17c396c3e73"
+checksum = "413099315636c588ee8f011190b329b971a09a8fae9d157e01dcae8379468514"
 dependencies = [
  "displaydoc",
  "icu_locale_core",
@@ -2058,7 +2058,7 @@ dependencies = [
  "librqbit-utp",
  "memmap2",
  "mime_guess",
- "nix",
+ "nix 0.30.1",
  "parking_lot",
  "rand 0.10.3",
  "regex",
@@ -2367,9 +2367,9 @@ dependencies = [
 
 [[package]]
 name = "lofty"
-version = "0.25.4"
+version = "0.25.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bb21dd79145b0781f2423fda92dd807fcd3911e44b66044d86db3b11ec7accf9"
+checksum = "35d45c446382e04663705aa8e786157f64ef1fa85755d410121ffbf08f54b0db"
 dependencies = [
  "byteorder",
  "data-encoding",
@@ -2448,9 +2448,9 @@ checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
 
 [[package]]
 name = "memmap2"
-version = "0.9.11"
+version = "0.9.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d1219ed1b7f229ee7104d281dd01d6802fe28bb6e95d292942c4daacdeb798c0"
+checksum = "6b0ca1155a9ecc25aa12e8313a119f32edf0255fea2f44839c4ac0a12b2ac157"
 dependencies = [
  "libc",
 ]
@@ -2547,6 +2547,18 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "nix"
+version = "0.31.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d"
+dependencies = [
+ "bitflags 2.13.2",
+ "cfg-if",
+ "cfg_aliases",
+ "libc",
+]
+
 [[package]]
 name = "nonzero_ext"
 version = "0.3.0"
@@ -2661,9 +2673,9 @@ dependencies = [
 
 [[package]]
 name = "ogg_pager"
-version = "0.7.2"
+version = "0.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9d36b1d6964c3ac92b7aea701057e02b6b91143d70d83b20abf75a231a3c0216"
+checksum = "166611b491f939446e64c6be930843a31eb8e6798204ec3e9f57e084c18e7446"
 dependencies = [
  "byteorder",
 ]
@@ -2688,9 +2700,9 @@ checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
 
 [[package]]
 name = "ordered-float"
-version = "5.5.0"
+version = "5.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8c7c9e0d9b23589f26070720bac724174bfec1083e82f7854cdd0267518343c0"
+checksum = "7f59006ce1e204c30956638535b74d317bca99477b9356dfaec54c37f6f600ab"
 dependencies = [
  "num-traits",
  "rand 0.8.8",
@@ -2717,7 +2729,7 @@ dependencies = [
  "glib-sys",
  "gobject-sys",
  "libc",
- "system-deps 9.0.0",
+ "system-deps 9.0.1",
 ]
 
 [[package]]
@@ -3643,9 +3655,9 @@ checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
 
 [[package]]
 name = "smallvec"
-version = "1.16.3"
+version = "1.16.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b3dc8af474f516a851ff4bd12db780f948b9250ad37211e4eec0bccea54e01b"
+checksum = "d0d5d4b1981b8bbbb7aed204cae5726d683d5d6ac7e74ec54122ea28f315e7c8"
 
 [[package]]
 name = "socket2"
@@ -3741,9 +3753,9 @@ dependencies = [
 
 [[package]]
 name = "system-deps"
-version = "9.0.0"
+version = "9.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a0dae2cbca1f0ff93795713cfe0a4c02f760e3c0b8ae2ab4ec4045808ff429f"
+checksum = "db551ad38aac61d5e0343e0eeeb0163be3115c4e23b6a025959570ee0c03c67d"
 dependencies = [
  "cfg-expr",
  "heck",
@@ -3875,9 +3887,9 @@ dependencies = [
 
 [[package]]
 name = "tinystr"
-version = "0.8.4"
+version = "0.8.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b1e27c91459209c2986af3dcf603a5a74a4368754ce37414f59acc971167f643"
+checksum = "abc840c238154d58f9e86b2792261edfde565a17696e1cda1a449de27979801a"
 dependencies = [
  "displaydoc",
  "zerovec",
@@ -3891,9 +3903,9 @@ checksum = "fd3ca314f692efd6c868f8408f53fe444634a845f96c028b97d35f6a1f79f0ee"
 
 [[package]]
 name = "tokio"
-version = "1.53.3"
+version = "1.54.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e"
+checksum = "b52fd3255258d26fac7264ab5a76b53c13367136dc011d3d6ad4f8ed070396a3"
 dependencies = [
  "bytes",
  "libc",
@@ -4156,6 +4168,12 @@ version = "0.12.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "54ec2755506471f54baf5e4bb5499d8e510cc1caf271270e778a736bd2d7336c"
 
+[[package]]
+name = "typed-path"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ce898823d8cd0f028662d2f349694b1af0a5cc9be83f1d213a00d3147445e1e"
+
 [[package]]
 name = "typenum"
 version = "1.20.1"
@@ -4237,9 +4255,9 @@ checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
 
 [[package]]
 name = "uuid"
-version = "1.28.0"
+version = "1.29.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7cc1186384beb7dd8eedea376413fd654937285ea6c9cfbb928dc3043ea4b606"
+checksum = "4a0e2d11620c50695fe12bbbfde96b3477fe606e7284c22d505c12ce51214514"
 dependencies = [
  "getrandom 0.4.3",
  "js-sys",
@@ -4398,9 +4416,9 @@ dependencies = [
 
 [[package]]
 name = "webpki-root-certs"
-version = "1.0.10"
+version = "1.0.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "58ec80e73fd8baf57bf0d9615554c75348bda990d6d5bbeab964dd068319fecb"
+checksum = "e49d0e65abc00c142e8f9428da991da9f1a250c39be97459901eb12b9b49f62a"
 dependencies = [
  "rustls-pki-types",
 ]
@@ -4685,9 +4703,9 @@ checksum = "cfe53a6657fd280eaa890a3bc59152892ffa3e30101319d168b781ed6529b049"
 
 [[package]]
 name = "yoke"
-version = "0.8.3"
+version = "0.8.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "709fe23a0424b6a435d82152b1bd3fdfb0833487d5fa90d05d42762a9891fef5"
+checksum = "417ef3fcf6c300b7dbd25c85531a746931c02ad536f3cf4786ed1e88223340b3"
 dependencies = [
  "stable_deref_trait",
  "yoke-derive",
@@ -4708,9 +4726,9 @@ dependencies = [
 
 [[package]]
 name = "yt-dlp"
-version = "2.9.0"
+version = "2.9.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d16ab8bbeb1c3035e139de9a3738ac163301381d9fc365be4366372b681f8b2f"
+checksum = "00e836305d4f48f33102f15463cd38b9c5805be829d238851f1a8a1216d95b0a"
 dependencies = [
  "async-trait",
  "cfg-if",
@@ -4742,7 +4760,7 @@ dependencies = [
  "url",
  "uuid",
  "xz2",
- "zip",
+ "zip 9.1.2",
 ]
 
 [[package]]
@@ -4805,9 +4823,9 @@ dependencies = [
 
 [[package]]
 name = "zerovec"
-version = "0.11.8"
+version = "0.11.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bb0464e17806c1d976d5cba29399c7f08e516e279e2ba493f63123b5fca67dd8"
+checksum = "f58a2799cfe9a1670c7ea8edbd52ef8edb93cb37a7f83bf31ba9e35d9dae6a40"
 dependencies = [
  "yoke",
  "zerofrom",
@@ -4816,9 +4834,9 @@ dependencies = [
 
 [[package]]
 name = "zerovec-derive"
-version = "0.11.6"
+version = "0.11.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34df6fc39dbd26ddc9c10e6a2984476e13acce22e64e4487636ef494369225da"
+checksum = "c3743ddbf47738d929cd1ae2e199d40d0162979dfe31aef8ae646d2bf00bf97a"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -4835,7 +4853,24 @@ dependencies = [
  "flate2",
  "indexmap 2.14.2",
  "memchr",
- "typed-path",
+ "typed-path 0.12.4",
+ "zopfli",
+]
+
+[[package]]
+name = "zip"
+version = "9.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec2e3161de27091f18a831d9494e9c53378a34833af5c1dda35ad85849da18d6"
+dependencies = [
+ "crc32fast",
+ "flate2",
+ "getrandom 0.4.3",
+ "indexmap 2.14.2",
+ "memchr",
+ "nix 0.31.3",
+ "typed-path 0.13.0",
+ "windows-sys 0.61.2",
  "zopfli",
 ]
 
diff --git a/build-aux/cargo-sources.json b/build-aux/cargo-sources.json
index 1933b08b6..e425e04c4 100644
--- a/build-aux/cargo-sources.json
+++ b/build-aux/cargo-sources.json
@@ -431,27 +431,27 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/brotli/brotli-9.0.0.crate",
-        "sha256": "f8b851b75c23ca7873623d612fe49bd1989aeb03d08fb9432187eb253d3d4c6b",
-        "dest": "cargo/brotli-9.0.0"
+        "url": "https://static.crates.io/crates/brotli/brotli-9.1.0.crate",
+        "sha256": "6737ce8b81460bf9407909f73ff50bf13f7cb8577e1e76715f57ed0eba58ba44",
+        "dest": "cargo/brotli-9.1.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"f8b851b75c23ca7873623d612fe49bd1989aeb03d08fb9432187eb253d3d4c6b\", \"files\": {}}",
-        "dest": "cargo/brotli-9.0.0",
+        "contents": "{\"package\": \"6737ce8b81460bf9407909f73ff50bf13f7cb8577e1e76715f57ed0eba58ba44\", \"files\": {}}",
+        "dest": "cargo/brotli-9.1.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/brotli-decompressor/brotli-decompressor-6.0.1.crate",
-        "sha256": "941cd9bd4ddab83cb46fa5a2d428f1c857b24ac78cb876cf7beb710840934bd7",
-        "dest": "cargo/brotli-decompressor-6.0.1"
+        "url": "https://static.crates.io/crates/brotli-decompressor/brotli-decompressor-6.2.0.crate",
+        "sha256": "34c6783f42c21c952ad7112b354f0ba2f10760e9decea5b1b60523d6e270faaf",
+        "dest": "cargo/brotli-decompressor-6.2.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"941cd9bd4ddab83cb46fa5a2d428f1c857b24ac78cb876cf7beb710840934bd7\", \"files\": {}}",
-        "dest": "cargo/brotli-decompressor-6.0.1",
+        "contents": "{\"package\": \"34c6783f42c21c952ad7112b354f0ba2f10760e9decea5b1b60523d6e270faaf\", \"files\": {}}",
+        "dest": "cargo/brotli-decompressor-6.2.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -548,14 +548,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/cc/cc-1.9.0.crate",
-        "sha256": "877bf67ac8e52449eb2f9e98a344ea163beb70dd1f9eebe3cc5357dcfeaee4df",
-        "dest": "cargo/cc-1.9.0"
+        "url": "https://static.crates.io/crates/cc/cc-1.10.0.crate",
+        "sha256": "86e055fa6e3e40ad6187ba25b6855eeb635d5271f8e0f0e1e9a5826b8d75bea0",
+        "dest": "cargo/cc-1.10.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"877bf67ac8e52449eb2f9e98a344ea163beb70dd1f9eebe3cc5357dcfeaee4df\", \"files\": {}}",
-        "dest": "cargo/cc-1.9.0",
+        "contents": "{\"package\": \"86e055fa6e3e40ad6187ba25b6855eeb635d5271f8e0f0e1e9a5826b8d75bea0\", \"files\": {}}",
+        "dest": "cargo/cc-1.10.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -860,14 +860,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/ctutils/ctutils-0.4.4.crate",
-        "sha256": "12218662ccac37d9714f2191252553d67585b97df8c839cbe49e0bde278dc865",
-        "dest": "cargo/ctutils-0.4.4"
+        "url": "https://static.crates.io/crates/ctutils/ctutils-0.4.6.crate",
+        "sha256": "fe3e9d21d39e6f39ff46e03d5b621424f88ee23d8a1672c6bfc9ccc7f2da4f6a",
+        "dest": "cargo/ctutils-0.4.6"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"12218662ccac37d9714f2191252553d67585b97df8c839cbe49e0bde278dc865\", \"files\": {}}",
-        "dest": "cargo/ctutils-0.4.4",
+        "contents": "{\"package\": \"fe3e9d21d39e6f39ff46e03d5b621424f88ee23d8a1672c6bfc9ccc7f2da4f6a\", \"files\": {}}",
+        "dest": "cargo/ctutils-0.4.6",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -2030,92 +2030,92 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/icu_collections/icu_collections-2.3.0.crate",
-        "sha256": "fa68d21081c4a05d5a901a1c62add574c77048b6a1c67be3b50ce0b60d4ca513",
-        "dest": "cargo/icu_collections-2.3.0"
+        "url": "https://static.crates.io/crates/icu_collections/icu_collections-2.4.0.crate",
+        "sha256": "fe090a42a0d3140fed8c63263ed1fecc02422cb2f4bfe55cd8de2de1b8e105dd",
+        "dest": "cargo/icu_collections-2.4.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"fa68d21081c4a05d5a901a1c62add574c77048b6a1c67be3b50ce0b60d4ca513\", \"files\": {}}",
-        "dest": "cargo/icu_collections-2.3.0",
+        "contents": "{\"package\": \"fe090a42a0d3140fed8c63263ed1fecc02422cb2f4bfe55cd8de2de1b8e105dd\", \"files\": {}}",
+        "dest": "cargo/icu_collections-2.4.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/icu_locale_core/icu_locale_core-2.3.0.crate",
-        "sha256": "d56e28588da92eee5c3201a6eff33fabdd49b62269c8938d4ff050ce4d900deb",
-        "dest": "cargo/icu_locale_core-2.3.0"
+        "url": "https://static.crates.io/crates/icu_locale_core/icu_locale_core-2.4.0.crate",
+        "sha256": "25d29b57c17c6528d0dc4c2141cfa2d08200465acb537a3909c8b9b8a4a984c0",
+        "dest": "cargo/icu_locale_core-2.4.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"d56e28588da92eee5c3201a6eff33fabdd49b62269c8938d4ff050ce4d900deb\", \"files\": {}}",
-        "dest": "cargo/icu_locale_core-2.3.0",
+        "contents": "{\"package\": \"25d29b57c17c6528d0dc4c2141cfa2d08200465acb537a3909c8b9b8a4a984c0\", \"files\": {}}",
+        "dest": "cargo/icu_locale_core-2.4.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/icu_normalizer/icu_normalizer-2.3.0.crate",
-        "sha256": "12f9cf5f235641ed274641dd81c3f28d870e276763d0797aeeab72317b1c646f",
-        "dest": "cargo/icu_normalizer-2.3.0"
+        "url": "https://static.crates.io/crates/icu_normalizer/icu_normalizer-2.4.0.crate",
+        "sha256": "404a3b8c486f205c87fe7f23ab6894d84a4ad76d6e4671ae1981ba7def87c599",
+        "dest": "cargo/icu_normalizer-2.4.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"12f9cf5f235641ed274641dd81c3f28d870e276763d0797aeeab72317b1c646f\", \"files\": {}}",
-        "dest": "cargo/icu_normalizer-2.3.0",
+        "contents": "{\"package\": \"404a3b8c486f205c87fe7f23ab6894d84a4ad76d6e4671ae1981ba7def87c599\", \"files\": {}}",
+        "dest": "cargo/icu_normalizer-2.4.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/icu_normalizer_data/icu_normalizer_data-2.3.0.crate",
-        "sha256": "1563da1ed3e0b3bf3d74c9b85917ac9c56464d2f57242270c09c9e752f8021a0",
-        "dest": "cargo/icu_normalizer_data-2.3.0"
+        "url": "https://static.crates.io/crates/icu_normalizer_data/icu_normalizer_data-2.4.0.crate",
+        "sha256": "20f0088bfb7441f7a37fa0c9e20cb1e9cba1cac6b9ce8cd2a6dc44294f8e8cbc",
+        "dest": "cargo/icu_normalizer_data-2.4.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"1563da1ed3e0b3bf3d74c9b85917ac9c56464d2f57242270c09c9e752f8021a0\", \"files\": {}}",
-        "dest": "cargo/icu_normalizer_data-2.3.0",
+        "contents": "{\"package\": \"20f0088bfb7441f7a37fa0c9e20cb1e9cba1cac6b9ce8cd2a6dc44294f8e8cbc\", \"files\": {}}",
+        "dest": "cargo/icu_normalizer_data-2.4.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/icu_properties/icu_properties-2.3.0.crate",
-        "sha256": "7e7ca276ad3145661a65914e6daf131ca5120cd3dcee8f8f3214b8875184a148",
-        "dest": "cargo/icu_properties-2.3.0"
+        "url": "https://static.crates.io/crates/icu_properties/icu_properties-2.4.0.crate",
+        "sha256": "2ea83d991c56158f7cf898bf86436c1dfe7c07ee82fe88951f2695c9f37a379f",
+        "dest": "cargo/icu_properties-2.4.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"7e7ca276ad3145661a65914e6daf131ca5120cd3dcee8f8f3214b8875184a148\", \"files\": {}}",
-        "dest": "cargo/icu_properties-2.3.0",
+        "contents": "{\"package\": \"2ea83d991c56158f7cf898bf86436c1dfe7c07ee82fe88951f2695c9f37a379f\", \"files\": {}}",
+        "dest": "cargo/icu_properties-2.4.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/icu_properties_data/icu_properties_data-2.3.0.crate",
-        "sha256": "e590f038c1464a96894fd6d10127e90a8be4509f56ff7ecef851b15cee0b7caa",
-        "dest": "cargo/icu_properties_data-2.3.0"
+        "url": "https://static.crates.io/crates/icu_properties_data/icu_properties_data-2.4.0.crate",
+        "sha256": "b98f29af82d02b163fe50161388350e743bb3107cc8e8c2f7314cb505faddfcf",
+        "dest": "cargo/icu_properties_data-2.4.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"e590f038c1464a96894fd6d10127e90a8be4509f56ff7ecef851b15cee0b7caa\", \"files\": {}}",
-        "dest": "cargo/icu_properties_data-2.3.0",
+        "contents": "{\"package\": \"b98f29af82d02b163fe50161388350e743bb3107cc8e8c2f7314cb505faddfcf\", \"files\": {}}",
+        "dest": "cargo/icu_properties_data-2.4.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/icu_provider/icu_provider-2.3.1.crate",
-        "sha256": "d27bbb9d3abbefac45d55f647c9de1d44aafcd1186eb91879afef17c396c3e73",
-        "dest": "cargo/icu_provider-2.3.1"
+        "url": "https://static.crates.io/crates/icu_provider/icu_provider-2.4.0.crate",
+        "sha256": "413099315636c588ee8f011190b329b971a09a8fae9d157e01dcae8379468514",
+        "dest": "cargo/icu_provider-2.4.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"d27bbb9d3abbefac45d55f647c9de1d44aafcd1186eb91879afef17c396c3e73\", \"files\": {}}",
-        "dest": "cargo/icu_provider-2.3.1",
+        "contents": "{\"package\": \"413099315636c588ee8f011190b329b971a09a8fae9d157e01dcae8379468514\", \"files\": {}}",
+        "dest": "cargo/icu_provider-2.4.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -2706,14 +2706,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/lofty/lofty-0.25.4.crate",
-        "sha256": "bb21dd79145b0781f2423fda92dd807fcd3911e44b66044d86db3b11ec7accf9",
-        "dest": "cargo/lofty-0.25.4"
+        "url": "https://static.crates.io/crates/lofty/lofty-0.25.5.crate",
+        "sha256": "35d45c446382e04663705aa8e786157f64ef1fa85755d410121ffbf08f54b0db",
+        "dest": "cargo/lofty-0.25.5"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"bb21dd79145b0781f2423fda92dd807fcd3911e44b66044d86db3b11ec7accf9\", \"files\": {}}",
-        "dest": "cargo/lofty-0.25.4",
+        "contents": "{\"package\": \"35d45c446382e04663705aa8e786157f64ef1fa85755d410121ffbf08f54b0db\", \"files\": {}}",
+        "dest": "cargo/lofty-0.25.5",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -2823,14 +2823,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/memmap2/memmap2-0.9.11.crate",
-        "sha256": "d1219ed1b7f229ee7104d281dd01d6802fe28bb6e95d292942c4daacdeb798c0",
-        "dest": "cargo/memmap2-0.9.11"
+        "url": "https://static.crates.io/crates/memmap2/memmap2-0.9.12.crate",
+        "sha256": "6b0ca1155a9ecc25aa12e8313a119f32edf0255fea2f44839c4ac0a12b2ac157",
+        "dest": "cargo/memmap2-0.9.12"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"d1219ed1b7f229ee7104d281dd01d6802fe28bb6e95d292942c4daacdeb798c0\", \"files\": {}}",
-        "dest": "cargo/memmap2-0.9.11",
+        "contents": "{\"package\": \"6b0ca1155a9ecc25aa12e8313a119f32edf0255fea2f44839c4ac0a12b2ac157\", \"files\": {}}",
+        "dest": "cargo/memmap2-0.9.12",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -2963,6 +2963,19 @@
         "dest": "cargo/nix-0.30.1",
         "dest-filename": ".cargo-checksum.json"
     },
+    {
+        "type": "archive",
+        "archive-type": "tar-gzip",
+        "url": "https://static.crates.io/crates/nix/nix-0.31.3.crate",
+        "sha256": "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d",
+        "dest": "cargo/nix-0.31.3"
+    },
+    {
+        "type": "inline",
+        "contents": "{\"package\": \"cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d\", \"files\": {}}",
+        "dest": "cargo/nix-0.31.3",
+        "dest-filename": ".cargo-checksum.json"
+    },
     {
         "type": "archive",
         "archive-type": "tar-gzip",
@@ -3122,14 +3135,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/ogg_pager/ogg_pager-0.7.2.crate",
-        "sha256": "9d36b1d6964c3ac92b7aea701057e02b6b91143d70d83b20abf75a231a3c0216",
-        "dest": "cargo/ogg_pager-0.7.2"
+        "url": "https://static.crates.io/crates/ogg_pager/ogg_pager-0.8.0.crate",
+        "sha256": "166611b491f939446e64c6be930843a31eb8e6798204ec3e9f57e084c18e7446",
+        "dest": "cargo/ogg_pager-0.8.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"9d36b1d6964c3ac92b7aea701057e02b6b91143d70d83b20abf75a231a3c0216\", \"files\": {}}",
-        "dest": "cargo/ogg_pager-0.7.2",
+        "contents": "{\"package\": \"166611b491f939446e64c6be930843a31eb8e6798204ec3e9f57e084c18e7446\", \"files\": {}}",
+        "dest": "cargo/ogg_pager-0.8.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -3174,14 +3187,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/ordered-float/ordered-float-5.5.0.crate",
-        "sha256": "8c7c9e0d9b23589f26070720bac724174bfec1083e82f7854cdd0267518343c0",
-        "dest": "cargo/ordered-float-5.5.0"
+        "url": "https://static.crates.io/crates/ordered-float/ordered-float-5.5.1.crate",
+        "sha256": "7f59006ce1e204c30956638535b74d317bca99477b9356dfaec54c37f6f600ab",
+        "dest": "cargo/ordered-float-5.5.1"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"8c7c9e0d9b23589f26070720bac724174bfec1083e82f7854cdd0267518343c0\", \"files\": {}}",
-        "dest": "cargo/ordered-float-5.5.0",
+        "contents": "{\"package\": \"7f59006ce1e204c30956638535b74d317bca99477b9356dfaec54c37f6f600ab\", \"files\": {}}",
+        "dest": "cargo/ordered-float-5.5.1",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -4370,14 +4383,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/smallvec/smallvec-1.16.3.crate",
-        "sha256": "5b3dc8af474f516a851ff4bd12db780f948b9250ad37211e4eec0bccea54e01b",
-        "dest": "cargo/smallvec-1.16.3"
+        "url": "https://static.crates.io/crates/smallvec/smallvec-1.16.4.crate",
+        "sha256": "d0d5d4b1981b8bbbb7aed204cae5726d683d5d6ac7e74ec54122ea28f315e7c8",
+        "dest": "cargo/smallvec-1.16.4"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"5b3dc8af474f516a851ff4bd12db780f948b9250ad37211e4eec0bccea54e01b\", \"files\": {}}",
-        "dest": "cargo/smallvec-1.16.3",
+        "contents": "{\"package\": \"d0d5d4b1981b8bbbb7aed204cae5726d683d5d6ac7e74ec54122ea28f315e7c8\", \"files\": {}}",
+        "dest": "cargo/smallvec-1.16.4",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -4513,14 +4526,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/system-deps/system-deps-9.0.0.crate",
-        "sha256": "8a0dae2cbca1f0ff93795713cfe0a4c02f760e3c0b8ae2ab4ec4045808ff429f",
-        "dest": "cargo/system-deps-9.0.0"
+        "url": "https://static.crates.io/crates/system-deps/system-deps-9.0.1.crate",
+        "sha256": "db551ad38aac61d5e0343e0eeeb0163be3115c4e23b6a025959570ee0c03c67d",
+        "dest": "cargo/system-deps-9.0.1"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"8a0dae2cbca1f0ff93795713cfe0a4c02f760e3c0b8ae2ab4ec4045808ff429f\", \"files\": {}}",
-        "dest": "cargo/system-deps-9.0.0",
+        "contents": "{\"package\": \"db551ad38aac61d5e0343e0eeeb0163be3115c4e23b6a025959570ee0c03c67d\", \"files\": {}}",
+        "dest": "cargo/system-deps-9.0.1",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -4695,14 +4708,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/tinystr/tinystr-0.8.4.crate",
-        "sha256": "b1e27c91459209c2986af3dcf603a5a74a4368754ce37414f59acc971167f643",
-        "dest": "cargo/tinystr-0.8.4"
+        "url": "https://static.crates.io/crates/tinystr/tinystr-0.8.5.crate",
+        "sha256": "abc840c238154d58f9e86b2792261edfde565a17696e1cda1a449de27979801a",
+        "dest": "cargo/tinystr-0.8.5"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"b1e27c91459209c2986af3dcf603a5a74a4368754ce37414f59acc971167f643\", \"files\": {}}",
-        "dest": "cargo/tinystr-0.8.4",
+        "contents": "{\"package\": \"abc840c238154d58f9e86b2792261edfde565a17696e1cda1a449de27979801a\", \"files\": {}}",
+        "dest": "cargo/tinystr-0.8.5",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -4721,14 +4734,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/tokio/tokio-1.53.3.crate",
-        "sha256": "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e",
-        "dest": "cargo/tokio-1.53.3"
+        "url": "https://static.crates.io/crates/tokio/tokio-1.54.1.crate",
+        "sha256": "b52fd3255258d26fac7264ab5a76b53c13367136dc011d3d6ad4f8ed070396a3",
+        "dest": "cargo/tokio-1.54.1"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e\", \"files\": {}}",
-        "dest": "cargo/tokio-1.53.3",
+        "contents": "{\"package\": \"b52fd3255258d26fac7264ab5a76b53c13367136dc011d3d6ad4f8ed070396a3\", \"files\": {}}",
+        "dest": "cargo/tokio-1.54.1",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -5030,6 +5043,19 @@
         "dest": "cargo/typed-path-0.12.4",
         "dest-filename": ".cargo-checksum.json"
     },
+    {
+        "type": "archive",
+        "archive-type": "tar-gzip",
+        "url": "https://static.crates.io/crates/typed-path/typed-path-0.13.0.crate",
+        "sha256": "9ce898823d8cd0f028662d2f349694b1af0a5cc9be83f1d213a00d3147445e1e",
+        "dest": "cargo/typed-path-0.13.0"
+    },
+    {
+        "type": "inline",
+        "contents": "{\"package\": \"9ce898823d8cd0f028662d2f349694b1af0a5cc9be83f1d213a00d3147445e1e\", \"files\": {}}",
+        "dest": "cargo/typed-path-0.13.0",
+        "dest-filename": ".cargo-checksum.json"
+    },
     {
         "type": "archive",
         "archive-type": "tar-gzip",
@@ -5189,14 +5215,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/uuid/uuid-1.28.0.crate",
-        "sha256": "7cc1186384beb7dd8eedea376413fd654937285ea6c9cfbb928dc3043ea4b606",
-        "dest": "cargo/uuid-1.28.0"
+        "url": "https://static.crates.io/crates/uuid/uuid-1.29.0.crate",
+        "sha256": "4a0e2d11620c50695fe12bbbfde96b3477fe606e7284c22d505c12ce51214514",
+        "dest": "cargo/uuid-1.29.0"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"7cc1186384beb7dd8eedea376413fd654937285ea6c9cfbb928dc3043ea4b606\", \"files\": {}}",
-        "dest": "cargo/uuid-1.28.0",
+        "contents": "{\"package\": \"4a0e2d11620c50695fe12bbbfde96b3477fe606e7284c22d505c12ce51214514\", \"files\": {}}",
+        "dest": "cargo/uuid-1.29.0",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -5410,14 +5436,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/webpki-root-certs/webpki-root-certs-1.0.10.crate",
-        "sha256": "58ec80e73fd8baf57bf0d9615554c75348bda990d6d5bbeab964dd068319fecb",
-        "dest": "cargo/webpki-root-certs-1.0.10"
+        "url": "https://static.crates.io/crates/webpki-root-certs/webpki-root-certs-1.0.11.crate",
+        "sha256": "e49d0e65abc00c142e8f9428da991da9f1a250c39be97459901eb12b9b49f62a",
+        "dest": "cargo/webpki-root-certs-1.0.11"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"58ec80e73fd8baf57bf0d9615554c75348bda990d6d5bbeab964dd068319fecb\", \"files\": {}}",
-        "dest": "cargo/webpki-root-certs-1.0.10",
+        "contents": "{\"package\": \"e49d0e65abc00c142e8f9428da991da9f1a250c39be97459901eb12b9b49f62a\", \"files\": {}}",
+        "dest": "cargo/webpki-root-certs-1.0.11",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -5852,14 +5878,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/yoke/yoke-0.8.3.crate",
-        "sha256": "709fe23a0424b6a435d82152b1bd3fdfb0833487d5fa90d05d42762a9891fef5",
-        "dest": "cargo/yoke-0.8.3"
+        "url": "https://static.crates.io/crates/yoke/yoke-0.8.4.crate",
+        "sha256": "417ef3fcf6c300b7dbd25c85531a746931c02ad536f3cf4786ed1e88223340b3",
+        "dest": "cargo/yoke-0.8.4"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"709fe23a0424b6a435d82152b1bd3fdfb0833487d5fa90d05d42762a9891fef5\", \"files\": {}}",
-        "dest": "cargo/yoke-0.8.3",
+        "contents": "{\"package\": \"417ef3fcf6c300b7dbd25c85531a746931c02ad536f3cf4786ed1e88223340b3\", \"files\": {}}",
+        "dest": "cargo/yoke-0.8.4",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -5878,14 +5904,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/yt-dlp/yt-dlp-2.9.0.crate",
-        "sha256": "d16ab8bbeb1c3035e139de9a3738ac163301381d9fc365be4366372b681f8b2f",
-        "dest": "cargo/yt-dlp-2.9.0"
+        "url": "https://static.crates.io/crates/yt-dlp/yt-dlp-2.9.1.crate",
+        "sha256": "00e836305d4f48f33102f15463cd38b9c5805be829d238851f1a8a1216d95b0a",
+        "dest": "cargo/yt-dlp-2.9.1"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"d16ab8bbeb1c3035e139de9a3738ac163301381d9fc365be4366372b681f8b2f\", \"files\": {}}",
-        "dest": "cargo/yt-dlp-2.9.0",
+        "contents": "{\"package\": \"00e836305d4f48f33102f15463cd38b9c5805be829d238851f1a8a1216d95b0a\", \"files\": {}}",
+        "dest": "cargo/yt-dlp-2.9.1",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -5969,27 +5995,27 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/zerovec/zerovec-0.11.8.crate",
-        "sha256": "bb0464e17806c1d976d5cba29399c7f08e516e279e2ba493f63123b5fca67dd8",
-        "dest": "cargo/zerovec-0.11.8"
+        "url": "https://static.crates.io/crates/zerovec/zerovec-0.11.9.crate",
+        "sha256": "f58a2799cfe9a1670c7ea8edbd52ef8edb93cb37a7f83bf31ba9e35d9dae6a40",
+        "dest": "cargo/zerovec-0.11.9"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"bb0464e17806c1d976d5cba29399c7f08e516e279e2ba493f63123b5fca67dd8\", \"files\": {}}",
-        "dest": "cargo/zerovec-0.11.8",
+        "contents": "{\"package\": \"f58a2799cfe9a1670c7ea8edbd52ef8edb93cb37a7f83bf31ba9e35d9dae6a40\", \"files\": {}}",
+        "dest": "cargo/zerovec-0.11.9",
         "dest-filename": ".cargo-checksum.json"
     },
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/zerovec-derive/zerovec-derive-0.11.6.crate",
-        "sha256": "34df6fc39dbd26ddc9c10e6a2984476e13acce22e64e4487636ef494369225da",
-        "dest": "cargo/zerovec-derive-0.11.6"
+        "url": "https://static.crates.io/crates/zerovec-derive/zerovec-derive-0.11.7.crate",
+        "sha256": "c3743ddbf47738d929cd1ae2e199d40d0162979dfe31aef8ae646d2bf00bf97a",
+        "dest": "cargo/zerovec-derive-0.11.7"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"34df6fc39dbd26ddc9c10e6a2984476e13acce22e64e4487636ef494369225da\", \"files\": {}}",
-        "dest": "cargo/zerovec-derive-0.11.6",
+        "contents": "{\"package\": \"c3743ddbf47738d929cd1ae2e199d40d0162979dfe31aef8ae646d2bf00bf97a\", \"files\": {}}",
+        "dest": "cargo/zerovec-derive-0.11.7",
         "dest-filename": ".cargo-checksum.json"
     },
     {
@@ -6005,6 +6031,19 @@
         "dest": "cargo/zip-8.6.0",
         "dest-filename": ".cargo-checksum.json"
     },
+    {
+        "type": "archive",
+        "archive-type": "tar-gzip",
+        "url": "https://static.crates.io/crates/zip/zip-9.1.2.crate",
+        "sha256": "ec2e3161de27091f18a831d9494e9c53378a34833af5c1dda35ad85849da18d6",
+        "dest": "cargo/zip-9.1.2"
+    },
+    {
+        "type": "inline",
+        "contents": "{\"package\": \"ec2e3161de27091f18a831d9494e9c53378a34833af5c1dda35ad85849da18d6\", \"files\": {}}",
+        "dest": "cargo/zip-9.1.2",
+        "dest-filename": ".cargo-checksum.json"
+    },
     {
         "type": "archive",
         "archive-type": "tar-gzip",

From 154347568d5e4b323bd0380046bc798fcfc71482 Mon Sep 17 00:00:00 2001
From: Linuxuser67 <41808005+Linuxuser67@users.noreply.github.com>
Date: Mon, 26 Oct 2026 17:24:54 +0100
Subject: [PATCH 3/7] chore(deps): use latest stable zip and yt-dlp crates

---
 .../refresh-stable-dependencies-once.yml      | 35 +++++++++++++++++++
 Cargo.toml                                    |  4 +--
 2 files changed, 37 insertions(+), 2 deletions(-)
 create mode 100644 .github/workflows/refresh-stable-dependencies-once.yml

diff --git a/.github/workflows/refresh-stable-dependencies-once.yml b/.github/workflows/refresh-stable-dependencies-once.yml
new file mode 100644
index 000000000..3305fcdea
--- /dev/null
+++ b/.github/workflows/refresh-stable-dependencies-once.yml
@@ -0,0 +1,35 @@
+name: One-shot stable dependency refresh
+
+on:
+  push:
+    branches:
+      - dependency-update-latest-stable-2026-10
+
+# This temporary workflow only runs for the dedicated dependency-update branch.
+permissions:
+  contents: write
+
+jobs:
+  refresh:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
+      - name: Update every compatible crates.io dependency to its latest stable release
+        run: cargo update
+      - name: Validate the resolved lockfile
+        run: cargo metadata --locked --format-version 1 > /dev/null
+      - name: Regenerate the Flatpak offline source manifest
+        run: python3 build-aux/gen-cargo-sources.py
+      - name: Commit dependency updates and remove this temporary workflow
+        env:
+          BRANCH: dependency-update-latest-stable-2026-10
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git rm .github/workflows/refresh-stable-dependencies-once.yml
+          git add Cargo.lock build-aux/cargo-sources.json
+          git diff --cached --check
+          git diff --cached --stat
+          git commit -m "chore(deps): refresh latest stable dependencies"
+          git push origin "HEAD:refs/heads/$BRANCH"
diff --git a/Cargo.toml b/Cargo.toml
index 4996f6321..67685310f 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -17,7 +17,7 @@ glib = "0.22"
 gio = "0.22"
 url = "2"
 # Read the single verified Deno executable from the official release ZIP.
-zip = { version = "8.6.0", default-features = false, features = ["deflate", "deflate-flate2-zlib-rs"] }
+zip = { version = "9.1.2", default-features = false, features = ["deflate", "deflate-flate2-zlib-rs"] }
 percent-encoding = "2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
@@ -43,7 +43,7 @@ gettext-rs = "0.8"
 # Video-page extraction (YouTube etc). Wrapper around the yt-dlp + ffmpeg
 # binaries: rustls keeps the rustls-only posture; no cache backend in v1
 # (metadata is refetched, CDN URLs expire in ~6h anyway).
-yt-dlp = { version = "2.9.0", default-features = false, features = ["rustls"] }
+yt-dlp = { version = "2.9.1", default-features = false, features = ["rustls"] }
 libc = "0.2"
 # Mozilla Public Suffix List for validating browser cookie domains.
 psl = "=2.1.228"

From 03c452d32c1e7753ebfba010bb2e9573bf102385 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 26 Oct 2026 16:25:21 +0000
Subject: [PATCH 4/7] chore(deps): refresh latest stable dependencies

---
 .../refresh-stable-dependencies-once.yml      | 35 -------------------
 Cargo.lock                                    | 26 ++------------
 build-aux/cargo-sources.json                  | 26 --------------
 3 files changed, 3 insertions(+), 84 deletions(-)
 delete mode 100644 .github/workflows/refresh-stable-dependencies-once.yml

diff --git a/.github/workflows/refresh-stable-dependencies-once.yml b/.github/workflows/refresh-stable-dependencies-once.yml
deleted file mode 100644
index 3305fcdea..000000000
--- a/.github/workflows/refresh-stable-dependencies-once.yml
+++ /dev/null
@@ -1,35 +0,0 @@
-name: One-shot stable dependency refresh
-
-on:
-  push:
-    branches:
-      - dependency-update-latest-stable-2026-10
-
-# This temporary workflow only runs for the dedicated dependency-update branch.
-permissions:
-  contents: write
-
-jobs:
-  refresh:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
-      - name: Update every compatible crates.io dependency to its latest stable release
-        run: cargo update
-      - name: Validate the resolved lockfile
-        run: cargo metadata --locked --format-version 1 > /dev/null
-      - name: Regenerate the Flatpak offline source manifest
-        run: python3 build-aux/gen-cargo-sources.py
-      - name: Commit dependency updates and remove this temporary workflow
-        env:
-          BRANCH: dependency-update-latest-stable-2026-10
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git rm .github/workflows/refresh-stable-dependencies-once.yml
-          git add Cargo.lock build-aux/cargo-sources.json
-          git diff --cached --check
-          git diff --cached --stat
-          git commit -m "chore(deps): refresh latest stable dependencies"
-          git push origin "HEAD:refs/heads/$BRANCH"
diff --git a/Cargo.lock b/Cargo.lock
index e430ae625..336e57b58 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1345,7 +1345,7 @@ dependencies = [
  "tracing-subscriber",
  "url",
  "yt-dlp",
- "zip 8.6.0",
+ "zip",
 ]
 
 [[package]]
@@ -4162,12 +4162,6 @@ dependencies = [
  "syn 2.0.119",
 ]
 
-[[package]]
-name = "typed-path"
-version = "0.12.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "54ec2755506471f54baf5e4bb5499d8e510cc1caf271270e778a736bd2d7336c"
-
 [[package]]
 name = "typed-path"
 version = "0.13.0"
@@ -4760,7 +4754,7 @@ dependencies = [
  "url",
  "uuid",
  "xz2",
- "zip 9.1.2",
+ "zip",
 ]
 
 [[package]]
@@ -4843,20 +4837,6 @@ dependencies = [
  "syn 3.0.9",
 ]
 
-[[package]]
-name = "zip"
-version = "8.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2d04a6b5381502aa6087c94c669499eb1602eb9c5e8198e534de571f7154809b"
-dependencies = [
- "crc32fast",
- "flate2",
- "indexmap 2.14.2",
- "memchr",
- "typed-path 0.12.4",
- "zopfli",
-]
-
 [[package]]
 name = "zip"
 version = "9.1.2"
@@ -4869,7 +4849,7 @@ dependencies = [
  "indexmap 2.14.2",
  "memchr",
  "nix 0.31.3",
- "typed-path 0.13.0",
+ "typed-path",
  "windows-sys 0.61.2",
  "zopfli",
 ]
diff --git a/build-aux/cargo-sources.json b/build-aux/cargo-sources.json
index e425e04c4..93c1364bb 100644
--- a/build-aux/cargo-sources.json
+++ b/build-aux/cargo-sources.json
@@ -5030,19 +5030,6 @@
         "dest": "cargo/typed-builder-macro-0.23.2",
         "dest-filename": ".cargo-checksum.json"
     },
-    {
-        "type": "archive",
-        "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/typed-path/typed-path-0.12.4.crate",
-        "sha256": "54ec2755506471f54baf5e4bb5499d8e510cc1caf271270e778a736bd2d7336c",
-        "dest": "cargo/typed-path-0.12.4"
-    },
-    {
-        "type": "inline",
-        "contents": "{\"package\": \"54ec2755506471f54baf5e4bb5499d8e510cc1caf271270e778a736bd2d7336c\", \"files\": {}}",
-        "dest": "cargo/typed-path-0.12.4",
-        "dest-filename": ".cargo-checksum.json"
-    },
     {
         "type": "archive",
         "archive-type": "tar-gzip",
@@ -6018,19 +6005,6 @@
         "dest": "cargo/zerovec-derive-0.11.7",
         "dest-filename": ".cargo-checksum.json"
     },
-    {
-        "type": "archive",
-        "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/zip/zip-8.6.0.crate",
-        "sha256": "2d04a6b5381502aa6087c94c669499eb1602eb9c5e8198e534de571f7154809b",
-        "dest": "cargo/zip-8.6.0"
-    },
-    {
-        "type": "inline",
-        "contents": "{\"package\": \"2d04a6b5381502aa6087c94c669499eb1602eb9c5e8198e534de571f7154809b\", \"files\": {}}",
-        "dest": "cargo/zip-8.6.0",
-        "dest-filename": ".cargo-checksum.json"
-    },
     {
         "type": "archive",
         "archive-type": "tar-gzip",

From dde9f15f5772d002506922c05a281628e90658c6 Mon Sep 17 00:00:00 2001
From: Linuxuser67 <41808005+Linuxuser67@users.noreply.github.com>
Date: Mon, 26 Oct 2026 17:27:26 +0100
Subject: [PATCH 5/7] chore(deps): refresh pinned public suffix list

---
 .../refresh-stable-dependencies-once.yml      | 35 +++++++++++++++++++
 Cargo.toml                                    |  2 +-
 2 files changed, 36 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/refresh-stable-dependencies-once.yml

diff --git a/.github/workflows/refresh-stable-dependencies-once.yml b/.github/workflows/refresh-stable-dependencies-once.yml
new file mode 100644
index 000000000..3305fcdea
--- /dev/null
+++ b/.github/workflows/refresh-stable-dependencies-once.yml
@@ -0,0 +1,35 @@
+name: One-shot stable dependency refresh
+
+on:
+  push:
+    branches:
+      - dependency-update-latest-stable-2026-10
+
+# This temporary workflow only runs for the dedicated dependency-update branch.
+permissions:
+  contents: write
+
+jobs:
+  refresh:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
+      - name: Update every compatible crates.io dependency to its latest stable release
+        run: cargo update
+      - name: Validate the resolved lockfile
+        run: cargo metadata --locked --format-version 1 > /dev/null
+      - name: Regenerate the Flatpak offline source manifest
+        run: python3 build-aux/gen-cargo-sources.py
+      - name: Commit dependency updates and remove this temporary workflow
+        env:
+          BRANCH: dependency-update-latest-stable-2026-10
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git rm .github/workflows/refresh-stable-dependencies-once.yml
+          git add Cargo.lock build-aux/cargo-sources.json
+          git diff --cached --check
+          git diff --cached --stat
+          git commit -m "chore(deps): refresh latest stable dependencies"
+          git push origin "HEAD:refs/heads/$BRANCH"
diff --git a/Cargo.toml b/Cargo.toml
index 67685310f..027cdc3d5 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -46,7 +46,7 @@ gettext-rs = "0.8"
 yt-dlp = { version = "2.9.1", default-features = false, features = ["rustls"] }
 libc = "0.2"
 # Mozilla Public Suffix List for validating browser cookie domains.
-psl = "=2.1.228"
+psl = "=2.1.241"
 # Safe wrappers for Linux no-replace renameat2 operations.
 rustix = { version = "1.1.5", features = ["fs"] }
 thiserror = "2"

From a9b250e4d6bb7d8b7727b46e5ab1aeebfd62178c Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 26 Oct 2026 16:27:58 +0000
Subject: [PATCH 6/7] chore(deps): refresh latest stable dependencies

---
 .../refresh-stable-dependencies-once.yml      | 35 -------------------
 Cargo.lock                                    |  4 +--
 build-aux/cargo-sources.json                  | 10 +++---
 3 files changed, 7 insertions(+), 42 deletions(-)
 delete mode 100644 .github/workflows/refresh-stable-dependencies-once.yml

diff --git a/.github/workflows/refresh-stable-dependencies-once.yml b/.github/workflows/refresh-stable-dependencies-once.yml
deleted file mode 100644
index 3305fcdea..000000000
--- a/.github/workflows/refresh-stable-dependencies-once.yml
+++ /dev/null
@@ -1,35 +0,0 @@
-name: One-shot stable dependency refresh
-
-on:
-  push:
-    branches:
-      - dependency-update-latest-stable-2026-10
-
-# This temporary workflow only runs for the dedicated dependency-update branch.
-permissions:
-  contents: write
-
-jobs:
-  refresh:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
-      - name: Update every compatible crates.io dependency to its latest stable release
-        run: cargo update
-      - name: Validate the resolved lockfile
-        run: cargo metadata --locked --format-version 1 > /dev/null
-      - name: Regenerate the Flatpak offline source manifest
-        run: python3 build-aux/gen-cargo-sources.py
-      - name: Commit dependency updates and remove this temporary workflow
-        env:
-          BRANCH: dependency-update-latest-stable-2026-10
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git rm .github/workflows/refresh-stable-dependencies-once.yml
-          git add Cargo.lock build-aux/cargo-sources.json
-          git diff --cached --check
-          git diff --cached --stat
-          git commit -m "chore(deps): refresh latest stable dependencies"
-          git push origin "HEAD:refs/heads/$BRANCH"
diff --git a/Cargo.lock b/Cargo.lock
index 336e57b58..0a6e22290 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2868,9 +2868,9 @@ dependencies = [
 
 [[package]]
 name = "psl"
-version = "2.1.228"
+version = "2.1.241"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "158b8294dde3909df5a4ec68a35f8c39720151834b1f87050b87b37435150011"
+checksum = "c7319b480e204d67e759cad7886178335d26324c7c8573c126cc9dfa7350d064"
 dependencies = [
  "psl-types",
 ]
diff --git a/build-aux/cargo-sources.json b/build-aux/cargo-sources.json
index 93c1364bb..f42f7e2bc 100644
--- a/build-aux/cargo-sources.json
+++ b/build-aux/cargo-sources.json
@@ -3421,14 +3421,14 @@
     {
         "type": "archive",
         "archive-type": "tar-gzip",
-        "url": "https://static.crates.io/crates/psl/psl-2.1.228.crate",
-        "sha256": "158b8294dde3909df5a4ec68a35f8c39720151834b1f87050b87b37435150011",
-        "dest": "cargo/psl-2.1.228"
+        "url": "https://static.crates.io/crates/psl/psl-2.1.241.crate",
+        "sha256": "c7319b480e204d67e759cad7886178335d26324c7c8573c126cc9dfa7350d064",
+        "dest": "cargo/psl-2.1.241"
     },
     {
         "type": "inline",
-        "contents": "{\"package\": \"158b8294dde3909df5a4ec68a35f8c39720151834b1f87050b87b37435150011\", \"files\": {}}",
-        "dest": "cargo/psl-2.1.228",
+        "contents": "{\"package\": \"c7319b480e204d67e759cad7886178335d26324c7c8573c126cc9dfa7350d064\", \"files\": {}}",
+        "dest": "cargo/psl-2.1.241",
         "dest-filename": ".cargo-checksum.json"
     },
     {

From 93e8e821cdebb61e9cf15549a5dd6543a2794d67 Mon Sep 17 00:00:00 2001
From: Linuxuser67 <41808005+Linuxuser67@users.noreply.github.com>
Date: Mon, 26 Oct 2026 17:35:34 +0100
Subject: [PATCH 7/7] fix: handle fallible zip entry names

---
 src/video_tools.rs | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/video_tools.rs b/src/video_tools.rs
index b7ed402f4..e28ee1f22 100644
--- a/src/video_tools.rs
+++ b/src/video_tools.rs
@@ -1198,7 +1198,10 @@ fn extract_deno_archive(archive_path: &Path, dest: &Path) -> Result<(), String>
     let mut binary = archive
         .by_name("deno")
         .map_err(|error| format!("Deno archive has no deno executable: {error}"))?;
-    if binary.name() != "deno" || !binary.is_file() {
+    let entry_name = binary
+        .name()
+        .map_err(|error| format!("Deno archive entry has an invalid name: {error}"))?;
+    if entry_name.as_ref() != "deno" || !binary.is_file() {
         return Err("Deno archive entry is not the expected executable".to_string());
     }
     if binary