build(deps): bump the rust-dependencies group with 6 updates

[dependabot]

Bumps the rust-dependencies group with 6 updates:

Package	From	To
clap	4.6.5	4.6.6
bgpkit-parser	0.19.0	0.21.0
bgpkit-broker	0.12.0	0.12.1
flate2	1.1.9	1.1.10
rusqlite	0.40.1	0.40.2
toml	0.9.12+spec-1.1.0	1.1.4+spec-1.1.0

Updates clap from 4.6.5 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

Commits

• 348cff3 chore: Release
• d478377 docs: Update changelog
• 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
• 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
• f90a966 fix(complete): Use spaces for indentation in fish
• dd4997b fix(complete): Don't glob-expand bash positionals
• 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
• 8141e11 chore(deps): Update compatible (dev) (#6398)
• 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
• 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
• See full diff in compare view

Updates bgpkit-parser from 0.19.0 to 0.21.0

Release notes

Sourced from bgpkit-parser's releases.

v0.21.0

Examples restructure

• Restructured examples/ and its README index: the README taxonomy was reorganized (Quickstart, Iteration Models, Filtering and Policy, Encoding and Export, Batch and Broker, Real-time Streams, Attributes and Metadata, Diagnostics/Dissection/Error Handling, RPKI, Standalone/WASM); bgp_open_role_pcap.rs (previously unlisted) and safi_scan.rs were indexed, and the duplicate mrt_debug.rs entry was removed. Three new examples cover previously undocumented features: dissect_mrt.rs (rendering DissectionNode trees with byte-offset gutters), ris_live_raw_full.rs (parse_ris_live_message_raw_full on an embedded real message), and encode_as_path.rs (the AsPath/As4Path variant split, EncodingError::ValueTooLarge, and the AS_TRANS migration shape).
• Updated idna_adapter dependency from =1.2.0 to =1.2.2 (#328).

Breaking changes

• DiagnosticIterator event redesign: DiagnosticEvent::Record and ::Validation merge into a single Record { record, raw, warnings } variant — an empty warnings vector means the record parsed clean, and every record now carries its original RawMrtRecord bytes (previously only Validation and ParseError did). ParseError gains a partial: Option<DissectionNode> field: a best-effort dissection tree showing how far the record's structure could be walked before the failure. Pattern matches on the old shapes must be updated.

• AttributeValue::AsPath / AttributeValue::Aggregator variant split (#329): the is_as4: bool field conflated the wire attribute type (AS_PATH type 2 vs AS4_PATH type 17; AGGREGATOR type 7 vs AS4_AGGREGATOR type 18) with the AS-number segment width, so building an announcement for a 4-octet session with is_as4: true silently emitted AS4_PATH (type 17) — an attribute RFC 6793 §4.2 reserves for 2-octet sessions. The flag is now structural, mirroring MpReachNlri/MpUnreachNlri:

  Before	After
  AttributeValue::AsPath { path, is_as4: false }	AttributeValue::AsPath(path)
  AttributeValue::AsPath { path, is_as4: true }	AttributeValue::As4Path(path)
  AttributeValue::Aggregator { asn, id, is_as4: false }	AttributeValue::Aggregator { asn, id }
  AttributeValue::Aggregator { asn, id, is_as4: true }	AttributeValue::As4Aggregator { asn, id }

  To build announcements for a 4-octet session, use AsPath (or path.into()) and pass AsnLength::Bits32 to encode_to; segments encode as 4-octet automatically. As4Path / As4Aggregator are for the RFC 6793 2-octet-session fallback and for reproducing captured migration attributes; their values always encode with 4-octet AS numbers. Serde note: the JSON shape of these variants changes from {"AsPath": {"path": ..., "is_as4": ...}} to {"AsPath": [...]} / {"As4Path": [...]}.

• Attributes::as_path() semantics: now returns only the AS_PATH (type 2) attribute value. Previously it returned whichever path attribute appeared last — preferring AS4_PATH when both were present, without merging. Use the new effective_as_path() for the RFC 6793 §4.2.3 merged path.

• Encoding errors instead of silent AS-number truncation (#329): encoding an AS number above 65535 into a 2-octet AS_PATH segment or AGGREGATOR now returns EncodingError::ValueTooLarge instead of silently writing the low 16 bits (e.g. 400644 → 7428). Substitute AS_TRANS (23456) or use As4Path / As4Aggregator explicitly. AGGREGATOR's AS-number width now follows the session's asn_len like AS_PATH, instead of the Asn value's internal 2/4-octet flag.

Added

• Byte-level dissection (Wireshark-style field trees) (#332): new opt-in dissectors produce a DissectionNode tree in which every protocol field carries its byte range. dissect_bgp_message (src/parser/bgp/dissect.rs) covers the BGP header and all five message types — UPDATE fields walk into attribute internals (AS_PATH segments, communities of all three families, MP_REACH/MP_UNREACH structure, AIGP TLVs, aggregator components) and per-prefix NLRI; dissect_mrt_record / dissect_mrt_bytes (src/parser/mrt/dissect.rs) cover the MRT common header (including ET microsecond fields), the BGP4MP subheader (message and state-change layouts, old-Zebra compat detection), and delegate into the embedded BGP message so all layers share one offset coordinate space. Dissectors are separate best-effort passes — never on default parsing paths — and never fail: truncated input yields a partial tree, which is the basis for "edit a byte, see where parsing breaks" tooling.
• DiagnosticIterator::with_dissection() (#332): upgrades the diagnostic iterator to yield DissectedDiagnosticEvent — every Record event gains the full dissection tree and its warnings become SpannedWarnings ({ span, warning }) anchored to the bytes they concern. Span correlation is post-hoc (span_record_warnings, also public): attribute-keyed warnings point at the matching bgp.attr.{code} node (Nth occurrence for duplicates), NLRI warnings at their section, with fallbacks to enclosing sections. record_validation_warnings is now public for custom investigation pipelines.
• WASM dissection and full-fidelity exports (#332): dissectBgpMessage(data, fourByteAsn?) returns the field tree for one BGP message; dissectMrtRecord(data) returns { tree, bytesRead } for one MRT record; parseBgpUpdateFull(data) returns { elems, attributes, validationWarnings } — the sibling of parseRisLiveMessageRaw for arbitrary BGP wire bytes. All three are exposed across Node.js, bundler, and web targets with TypeScript definitions (generated DissectionNode/Span/SpannedWarning types via ts-rs, plus fixtures and type-drift checks).
• Attributes::effective_as_path(): returns the RFC 6793 §4.2.3 effective AS path — AS_PATH and AS4_PATH merged when both are present, otherwise whichever exists — so callers no longer need to reimplement the merge logic. Also adds Attributes::as4_path() for raw access to the type-17 attribute.
• Full-fidelity RIS Live raw parsing (#331, #297): parse_ris_live_message_raw_full decodes a RIS Live ris_message envelope from its hex data.raw BGP wire bytes and returns RisLiveRawFull { meta, elems, attributes, validation_warnings }. Unlike the elem-only APIs, attributes preserves everything the elem conversion drops (originator ID, cluster list, AIGP, BGP Prefix-SID, raw-retained BGPSEC_PATH/ATTR_SET, ...) and validation_warnings surfaces RFC 7606 parse findings. The existing parse_ris_live_message_raw is unchanged; the full parser's elems are identical to it by construction.
• WASM RIS Live exports (#331): the @bgpkit/parser npm package now exposes parseRisLiveMessageJson(message) (RIS Live's JSON-projected UPDATE fields, no includeRaw needed) and parseRisLiveMessageRaw(message) (requires socketOptions.includeRaw = true; returns { meta, elems, attributes, validationWarnings } with full attribute fidelity) across the Node.js, bundler, and web targets. The wasm cargo feature now includes rislive.
• Generated TypeScript types for the WASM attribute surface (#331): a new opt-in ts-rs cargo feature generates Attribute, AttributeValue (fully typed common variants; opaque Record<string, unknown> for the long tail), BgpValidationWarning, Nlri, NextHopAddress, and the community types into src/wasm/js/generated/ via TS_RS_EXPORT_DIR=src/wasm/js/generated cargo test --features ts-rs,rislive. Generated files are committed. ExtendedCommunity in the shipped .d.ts is upgraded from an opaque Record<string, unknown> to the fully generated union, and the hand-written BgpElem declaration gains the previously missing unknown/deprecated fields.
• Type-drift CI (#331): a new wasm-types job regenerates the ts-rs bindings and golden JSON fixtures (src/wasm/test/fixtures/, one per AttributeValue variant plus elems, warnings, and an end-to-end RIS Live raw parse), fails on git diff, and type-checks the fixtures against the shipped .d.ts (src/wasm/test/type-check/). Any Rust model change that alters the WASM JSON output must regenerate both.
• BgpValidationWarning now implements serde::Serialize so RFC 7606 warnings can cross the WASM/JSON boundary.

Fixed

• RFC 6793 §4.2.3 AS_PATH/AS4_PATH merge now trims across segment boundaries (#330): AsPath::merge_aspath_as4path previously aligned the two paths segment-by-segment, producing wrong merges whenever segment boundaries did not line up (e.g. AS_PATH [1,2] [3,4] with AS4_PATH [9,10] merged to [9,10] [3,4] instead of [1,2] [9,10]). It now keeps exactly route_len(AS_PATH) - route_len(AS4_PATH) AS numbers from the leading part of the AS_PATH and prepends them to the whole AS4_PATH, per the RFC. This also corrects elem-level merged paths, which use the same function.
• Elem-to-attributes conversion no longer mislabels 4-octet paths as AS4_PATH: converting a BgpElem back to attributes derived is_as4 from whether the origin AS number was 4-octet, which re-encoded such paths as type 17 on any session (#329).

v0.20.0

Breaking changes

• Fallible encoding (#313): all encode paths now return Result<_, EncodingError> instead of silently truncating values that do not fit their wire-format fields. There are no panicking wrappers; callers that want the old "just give me bytes" ergonomics can .unwrap(). Migration table:

  Before	After
  Attribute::encode(asn_len) -> Bytes	-> Result<Bytes, EncodingError> (also encode_to(asn_len, &mut BytesMut))
  Attributes::encode(asn_len) -> Bytes	-> Result<Bytes, EncodingError> (also encode_to)
  BgpOpenMessage::encode() -> Bytes	-> Result<Bytes, EncodingError>
  BgpUpdateMessage::encode(asn_len) -> Bytes	-> Result<Bytes, EncodingError>

... (truncated)

Changelog

Sourced from bgpkit-parser's changelog.

v0.21.0 - 2026-08-21

Examples restructure

• Restructured examples/ and its README index: the README taxonomy was reorganized (Quickstart, Iteration Models, Filtering and Policy, Encoding and Export, Batch and Broker, Real-time Streams, Attributes and Metadata, Diagnostics/Dissection/Error Handling, RPKI, Standalone/WASM); bgp_open_role_pcap.rs (previously unlisted) and safi_scan.rs were indexed, and the duplicate mrt_debug.rs entry was removed. Three new examples cover previously undocumented features: dissect_mrt.rs (rendering DissectionNode trees with byte-offset gutters), ris_live_raw_full.rs (parse_ris_live_message_raw_full on an embedded real message), and encode_as_path.rs (the AsPath/As4Path variant split, EncodingError::ValueTooLarge, and the AS_TRANS migration shape).
• Updated idna_adapter dependency from =1.2.0 to =1.2.2 (#328).

Breaking changes

• DiagnosticIterator event redesign: DiagnosticEvent::Record and ::Validation merge into a single Record { record, raw, warnings } variant — an empty warnings vector means the record parsed clean, and every record now carries its original RawMrtRecord bytes (previously only Validation and ParseError did). ParseError gains a partial: Option<DissectionNode> field: a best-effort dissection tree showing how far the record's structure could be walked before the failure. Pattern matches on the old shapes must be updated.

• AttributeValue::AsPath / AttributeValue::Aggregator variant split (#329): the is_as4: bool field conflated the wire attribute type (AS_PATH type 2 vs AS4_PATH type 17; AGGREGATOR type 7 vs AS4_AGGREGATOR type 18) with the AS-number segment width, so building an announcement for a 4-octet session with is_as4: true silently emitted AS4_PATH (type 17) — an attribute RFC 6793 §4.2 reserves for 2-octet sessions. The flag is now structural, mirroring MpReachNlri/MpUnreachNlri:

  Before	After
  AttributeValue::AsPath { path, is_as4: false }	AttributeValue::AsPath(path)
  AttributeValue::AsPath { path, is_as4: true }	AttributeValue::As4Path(path)
  AttributeValue::Aggregator { asn, id, is_as4: false }	AttributeValue::Aggregator { asn, id }
  AttributeValue::Aggregator { asn, id, is_as4: true }	AttributeValue::As4Aggregator { asn, id }

  To build announcements for a 4-octet session, use AsPath (or path.into()) and pass AsnLength::Bits32 to encode_to; segments encode as 4-octet automatically. As4Path / As4Aggregator are for the RFC 6793 2-octet-session fallback and for reproducing captured migration attributes; their values always encode with 4-octet AS numbers. Serde note: the JSON shape of these variants changes from {"AsPath": {"path": ..., "is_as4": ...}} to {"AsPath": [...]} / {"As4Path": [...]}.

• Attributes::as_path() semantics: now returns only the AS_PATH (type 2) attribute value. Previously it returned whichever path attribute appeared last — preferring AS4_PATH when both were present, without merging. Use the new effective_as_path() for the RFC 6793 §4.2.3 merged path.

• Encoding errors instead of silent AS-number truncation (#329): encoding an AS number above 65535 into a 2-octet AS_PATH segment or AGGREGATOR now returns EncodingError::ValueTooLarge instead of silently writing the low 16 bits (e.g. 400644 → 7428). Substitute AS_TRANS (23456) or use As4Path / As4Aggregator explicitly. AGGREGATOR's AS-number width now follows the session's asn_len like AS_PATH, instead of the Asn value's internal 2/4-octet flag.

Added

• Byte-level dissection (Wireshark-style field trees) (#332): new opt-in dissectors produce a DissectionNode tree in which every protocol field carries its byte range. dissect_bgp_message (src/parser/bgp/dissect.rs) covers the BGP header and all five message types — UPDATE fields walk into attribute internals (AS_PATH segments, communities of all three families, MP_REACH/MP_UNREACH structure, AIGP TLVs, aggregator components) and per-prefix NLRI; dissect_mrt_record / dissect_mrt_bytes (src/parser/mrt/dissect.rs) cover the MRT common header (including ET microsecond fields), the BGP4MP subheader (message and state-change layouts, old-Zebra compat detection), and delegate into the embedded BGP message so all layers share one offset coordinate space. Dissectors are separate best-effort passes — never on default parsing paths — and never fail: truncated input yields a partial tree, which is the basis for "edit a byte, see where parsing breaks" tooling.
• DiagnosticIterator::with_dissection() (#332): upgrades the diagnostic iterator to yield DissectedDiagnosticEvent — every Record event gains the full dissection tree and its warnings become SpannedWarnings ({ span, warning }) anchored to the bytes they concern. Span correlation is post-hoc (span_record_warnings, also public): attribute-keyed warnings point at the matching bgp.attr.{code} node (Nth occurrence for duplicates), NLRI warnings at their section, with fallbacks to enclosing sections. record_validation_warnings is now public for custom investigation pipelines.
• WASM dissection and full-fidelity exports (#332): dissectBgpMessage(data, fourByteAsn?) returns the field tree for one BGP message; dissectMrtRecord(data) returns { tree, bytesRead } for one MRT record; parseBgpUpdateFull(data) returns { elems, attributes, validationWarnings } — the sibling of parseRisLiveMessageRaw for arbitrary BGP wire bytes. All three are exposed across Node.js, bundler, and web targets with TypeScript definitions (generated DissectionNode/Span/SpannedWarning types via ts-rs, plus fixtures and type-drift checks).
• Attributes::effective_as_path(): returns the RFC 6793 §4.2.3 effective AS path — AS_PATH and AS4_PATH merged when both are present, otherwise whichever exists — so callers no longer need to reimplement the merge logic. Also adds Attributes::as4_path() for raw access to the type-17 attribute.
• Full-fidelity RIS Live raw parsing (#331, #297): parse_ris_live_message_raw_full decodes a RIS Live ris_message envelope from its hex data.raw BGP wire bytes and returns RisLiveRawFull { meta, elems, attributes, validation_warnings }. Unlike the elem-only APIs, attributes preserves everything the elem conversion drops (originator ID, cluster list, AIGP, BGP Prefix-SID, raw-retained BGPSEC_PATH/ATTR_SET, ...) and validation_warnings surfaces RFC 7606 parse findings. The existing parse_ris_live_message_raw is unchanged; the full parser's elems are identical to it by construction.
• WASM RIS Live exports (#331): the @bgpkit/parser npm package now exposes parseRisLiveMessageJson(message) (RIS Live's JSON-projected UPDATE fields, no includeRaw needed) and parseRisLiveMessageRaw(message) (requires socketOptions.includeRaw = true; returns { meta, elems, attributes, validationWarnings } with full attribute fidelity) across the Node.js, bundler, and web targets. The wasm cargo feature now includes rislive.
• Generated TypeScript types for the WASM attribute surface (#331): a new opt-in ts-rs cargo feature generates Attribute, AttributeValue (fully typed common variants; opaque Record<string, unknown> for the long tail), BgpValidationWarning, Nlri, NextHopAddress, and the community types into src/wasm/js/generated/ via TS_RS_EXPORT_DIR=src/wasm/js/generated cargo test --features ts-rs,rislive. Generated files are committed. ExtendedCommunity in the shipped .d.ts is upgraded from an opaque Record<string, unknown> to the fully generated union, and the hand-written BgpElem declaration gains the previously missing unknown/deprecated fields.
• Type-drift CI (#331): a new wasm-types job regenerates the ts-rs bindings and golden JSON fixtures (src/wasm/test/fixtures/, one per AttributeValue variant plus elems, warnings, and an end-to-end RIS Live raw parse), fails on git diff, and type-checks the fixtures against the shipped .d.ts (src/wasm/test/type-check/). Any Rust model change that alters the WASM JSON output must regenerate both.
• BgpValidationWarning now implements serde::Serialize so RFC 7606 warnings can cross the WASM/JSON boundary.

Fixed

• RFC 6793 §4.2.3 AS_PATH/AS4_PATH merge now trims across segment boundaries (#330): AsPath::merge_aspath_as4path previously aligned the two paths segment-by-segment, producing wrong merges whenever segment boundaries did not line up (e.g. AS_PATH [1,2] [3,4] with AS4_PATH [9,10] merged to [9,10] [3,4] instead of [1,2] [9,10]). It now keeps exactly route_len(AS_PATH) - route_len(AS4_PATH) AS numbers from the leading part of the AS_PATH and prepends them to the whole AS4_PATH, per the RFC. This also corrects elem-level merged paths, which use the same function.
• Elem-to-attributes conversion no longer mislabels 4-octet paths as AS4_PATH: converting a BgpElem back to attributes derived is_as4 from whether the origin AS number was 4-octet, which re-encoded such paths as type 17 on any session (#329).

v0.20.0 - 2026-08-16

Breaking changes

• Fallible encoding (#313): all encode paths now return Result<_, EncodingError> instead of silently truncating values that do not fit their wire-format fields. There are no panicking wrappers; callers that want the old "just give me bytes" ergonomics can .unwrap(). Migration table:

  Before	After
  Attribute::encode(asn_len) -> Bytes	-> Result<Bytes, EncodingError> (also encode_to(asn_len, &mut BytesMut))
  Attributes::encode(asn_len) -> Bytes	-> Result<Bytes, EncodingError> (also encode_to)

... (truncated)

Commits

• 169ed50 fix(ci): gate ris_live_raw_full example behind rislive feature
• a397452 chore(release): prepare v0.21.0
• 41f872d Merge pull request #332 from bgpkit/feature/bgpshark-dissection
• b23f45c fix: address review on dissection PR
• ffa0872 feat: byte-level dissection trees, spanned diagnostics, and WASM exports
• 18a7ab2 Merge pull request #328 from bgpkit/dependabot/cargo/idna_adapter-eq-1.2.2
• 30b190c Merge pull request #331 from bgpkit/feature/wasm-ris-live
• 2f10ebc docs: add as4_tally example for AS4_PATH attribution
• c30e71b fix(wasm): address review on #331
• d7a34ad docs(wasm): document RIS Live exports, generated types, and drift checks
• Additional commits viewable in compare view

Updates bgpkit-broker from 0.12.0 to 0.12.1

Release notes

Sourced from bgpkit-broker's releases.

v0.12.1

Bug fixes

• Broker server now survives transient database outages (fixes the crash loop on restart) (#105)
  • Startup retries the database connection with exponential backoff instead of exiting on the first failure; a PostgreSQL restart no longer crash-loops the container until Docker's restart backoff happens to align with the database returning
  • Retries are configurable via BGPKIT_BROKER_DB_CONNECT_RETRIES (default 10) and BGPKIT_BROKER_DB_CONNECT_BACKOFF_MS (default 3000; doubles after each failure)
  • A failed latest-files read during an update round now skips that round instead of being treated as an empty database, which previously triggered a full bootstrap re-crawl of every collector on every update interval for the duration of the outage
  • /latest and /missing-collectors return 503 with the standard error body when the database read fails, instead of a misleading empty 200 response
  • LocalBrokerDb::new returns an error instead of panicking when SQLite cannot create the database file
• Fixed duplicate rows in PostgreSQL latest-file upserts (#104)
  • update_latest_files deduplicates the incoming batch by (collector, data_type) in memory before upserting, keeping the newest item per key; previously multiple same-type items from one collector in a single batch inserted duplicate rows, since the ON CONFLICT (collector_id, data_type) clause cannot deduplicate rows within a single INSERT statement

Changelog

Sourced from bgpkit-broker's changelog.

v0.12.1 - 2026-08-16

Bug fixes

• Broker server now survives transient database outages (fixes the crash loop on restart) (#105)
  • Startup retries the database connection with exponential backoff instead of exiting on the first failure; a PostgreSQL restart no longer crash-loops the container until Docker's restart backoff happens to align with the database returning
  • Retries are configurable via BGPKIT_BROKER_DB_CONNECT_RETRIES (default 10) and BGPKIT_BROKER_DB_CONNECT_BACKOFF_MS (default 3000; doubles after each failure)
  • A failed latest-files read during an update round now skips that round instead of being treated as an empty database, which previously triggered a full bootstrap re-crawl of every collector on every update interval for the duration of the outage
  • /latest and /missing-collectors return 503 with the standard error body when the database read fails, instead of a misleading empty 200 response
  • LocalBrokerDb::new returns an error instead of panicking when SQLite cannot create the database file
• Fixed duplicate rows in PostgreSQL latest-file upserts (#104)
  • update_latest_files deduplicates the incoming batch by (collector, data_type) in memory before upserting, keeping the newest item per key; previously multiple same-type items from one collector in a single batch inserted duplicate rows, since the ON CONFLICT (collector_id, data_type) clause cannot deduplicate rows within a single INSERT statement

Commits

• 16ac53f chore: bump version to 0.12.1 and update changelog
• 5377697 fix: address review on backoff growth and test portability
• 952dcca fix: survive transient database outages in serve
• 0d21c01 fix: deduplicate PostgreSQL latest-file upserts
• See full diff in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

• feat: reuse zlib's decoder buffer by @​Vaiz in rust-lang/flate2-rs#532
• feat: add reset method for read::GzDecoder and buffered::GzDecoder by @​Vaiz in rust-lang/flate2-rs#534
• Drop cloudflare-zlib by @​kornelski in rust-lang/flate2-rs#539
• Add a wrapper for the Crc struct by @​MikkelPaulson in rust-lang/flate2-rs#540
• Bump miniz_oxide to 0.9 by @​oscargus in rust-lang/flate2-rs#543
• Upgrade miniz_oxide and add unit tests of the different flush kinds by @​fintelia in rust-lang/flate2-rs#498
• Fix infinite loop in writing gzip header/footer by @​Shnatsel in rust-lang/flate2-rs#547
• test: generate corrupt gzip fixture at runtime by @​nanookclaw in rust-lang/flate2-rs#550
• Reject oversized gzip extra fields by @​Byron in rust-lang/flate2-rs#553
• Reject incomplete deflate streams at EOF by @​Guflly in rust-lang/flate2-rs#556
• Include README.md in a private module by @​bushrat011899 in rust-lang/flate2-rs#562
• Add no_std support using nightly alloc_io by @​bushrat011899 in rust-lang/flate2-rs#559
• Update get_mut() documentation to make clear how 'inner` can be used by @​Byron in rust-lang/flate2-rs#558

New Contributors

• @​Vaiz made their first contribution in rust-lang/flate2-rs#532
• @​MikkelPaulson made their first contribution in rust-lang/flate2-rs#540
• @​oscargus made their first contribution in rust-lang/flate2-rs#543
• @​nanookclaw made their first contribution in rust-lang/flate2-rs#550
• @​Guflly made their first contribution in rust-lang/flate2-rs#556
• @​bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

• ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
• fb5228d Merge pull request #559 from bushrat011899/no_std
• 6ed3ba3 Add executable no_std example
• faed8a0 Expand CI to test no_std compatibility and correctness
• 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
• 3fe1126 Centralize usage of std for error and io
• 98e313a Add GzHeader::mtime_as_duration
• 0642965 Switch to core implicit prelude and only use std where required
• 454a63c Remove left-over dbg! statement
• 2a490b7 Add runtime_detection feature
• Additional commits viewable in compare view

Updates rusqlite from 0.40.1 to 0.40.2

Release notes

Sourced from rusqlite's releases.

0.40.2

What's Changed

• Lower MSRV to 1.88.0

Full Changelog: rusqlite/rusqlite@v0.40.1...v0.40.2

Commits

• e88f112 Prepare release
• d11c76e Update main.yml
• c922ca5 Lower MSRV to 1.88.0
• See full diff in compare view

Updates toml from 0.9.12+spec-1.1.0 to 1.1.4+spec-1.1.0

Commits

• beee9fe chore: Release
• 16e2ac1 docs: Update changelog
• 89f5541 fix(toml): preserve datetimes when deserializing Value (#1194)
• 534039c fix(serde): Deserialize Value datetimes into typed targets
• 6e45cef test(serde): Reproduce Value datetime deserialization error
• 4ec099f chore: Release
• 5a47a51 docs: Update changelog
• da0911f perf(parser): Reduce over allocation by better tokens/byte ratio (#1193)
• 26eb157 perf(parser): Reduce over allocation by better tokens/byte ratio
• ca4c7bf chore(deps): Update Prek to v0.4.11 (#1191)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[downwithbgp]

@dependabot rebase

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.