chore: bump the cargo group with 3 updates

[dependabot]

Bumps the cargo group with 3 updates: dirs, toml and ureq.

Updates dirs from 6.0.0 to 7.0.0

Updates toml from 1.1.4+spec-1.1.0 to 1.1.5+spec-1.1.0

Commits

• e93ed4e chore: Release
• d23436d docs: Update changelog
• 151afcd fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat (#1211)
• 26a4050 fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat
• 232f136 chore(deps): Update Prek to v0.5.1 (#1209)
• 9ee4b4e chore(deps): Update crate-ci/typos digest to 4d9c206 (#1208)
• 525f352 chore(deps): Update crate-ci/committed digest to 800a04e (#1207)
• 46043ed chore(deps): Update crate-ci/typos digest to 4d9c206
• c00e894 chore(deps): Update crate-ci/committed digest to 800a04e
• 1ae0158 chore(deps): Update Prek to v0.5.0 (#1205)
• Additional commits viewable in compare view

Updates ureq from 3.4.0 to 3.4.1

Changelog

Sourced from ureq's changelog.

3.4.1

• Bump ureq-proto to 0.6.2 (fixes to parsing and headers) #1199
• Do not pool connections with unconsumed buffered input #1198
• Fix timeout budgets restarting and applying to later phases #1194
• Complete TLS handshake during connect so timeout_connect covers it #1193
• Speed up read_json for responses with a known, small body size #1191

Commits

• cf4a3cd 3.4.1
• 9559d7b Bump ureq-proto to 0.6.2 (#1199)
• 9eb654c Do not pool a connection with unconsumed input (#1198)
• 5b81318 Anchor timeout budgets to phase boundaries (#1194)
• d480543 Complete TLS handshakes while connecting (#1193)
• 662410b Buffer read_json into memory when Content-Length is below the limit (#1191)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[mtsu-patrol]

Note

Reviewed by mtsu-patrol using glm-5.3

Patrol complete. Nothing to report within the inspected scope.

Patrol reviewed the dependency-only diff at 9ed169f. It bumps dirs 6.0.0 → 7.0.0 (via Cargo.toml) and, as lock side-effects, toml 1.1.4 → 1.1.5 and ureq 3.4.0 → 3.4.1 (ureq-proto 0.6.1 → 0.6.2). The only behavioral change in dirs 7 is preference_dir on Windows switching from the Local to the Roaming AppData known folder; fastpick uses only dirs::home_dir() and dirs::config_dir(), neither of which changed (verified against the published crate sources, diffed). config_dir() on Windows still resolves to RoamingAppData\fastpick, so no path/state/config migration and no data-loss regression. The toml bump changes internal deserializer ownership plumbing only, and the ureq bump is a documented patch with bug fixes. No behavioral regressions, data loss, permission, or concurrency issues were demonstrated. All clear — no findings.

Commit: 9ed169f9160bfaf31e5caf5e604917696ce4af34

Coverage: Cargo.toml / Cargo.lock diff (dirs 6.0.0→7.0.0, toml 1.1.4→1.1.5, ureq 3.4.0→3.4.1, ureq-proto 0.6.1→0.6.2); Uses of dirs:: in this repo (paths.rs expand(); config.rs config_dir()/home_dir) checked against the dirs 7 API surface; Downloaded and diffed dirs 6.0.0 vs 7.0.0 published crate sources: only behavioral change is Windows preference_dir (LocalAppData → RoamingAppData), unused by fastpick; dirs-sys pinned at 0.5.0 in both, matching the lock; Diffed toml 1.1.4 vs 1.1.5 sources: changes are internal (DeValue lifetime/ownership plumbing via make_owned) with no parse-semantics change evident; Reviewed ureq 3.4.1 CHANGELOG: bug fixes only (ureq-proto parsing/header fixes, connection pooling and timeout fixes)

Limitations: No Rust toolchain is available in the review environment (cargo/rustc not found), so the crate could not be built and its test suite could not be executed; conclusions are from source and published-crate diffs, not a run; The ser/mod.rs portion of the toml 1.1.4→1.1.5 diff was not fully inspected; ureq-proto 0.6.1→0.6.2 changes were only reviewed via the ureq CHANGELOG summary, not by diffing crate sources; dirs 7.0.0 MSRV/edition compatibility with fastpick's rust-version 1.88 was not verified by compilation; dirs-sys 0.5.0 itself was not re-diffed (lock shows it unchanged, so it was judged out of scope); Investigation was shortened to reserve budget for the report. Coverage is limited to the checks listed above.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.