fix(deps): update rust dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anyhow	dependencies	patch	1.0.103 → 1.0.104
async-trait	dependencies	patch	0.1.89 → 0.1.92
base64	dependencies	minor	0.22 → 0.23
clap	dependencies	patch	4.6.1 → 4.6.6
ctor	dependencies	patch	1.0.8 → 1.0.13
futures (source)	dependencies	patch	0.3.32 → 0.3.34
globset (source)	dependencies	patch	0.4.19 → 0.4.20
http	dependencies	minor	1.4.2 → 1.5.0
keyring (source)	dependencies	patch	4.1.5 → 4.1.6
serde (source)	dependencies	patch	1.0.228 → 1.0.229
serde_json	dependencies	patch	1.0.150 → 1.0.151
thiserror	dependencies	patch	2.0.18 → 2.0.20
tokio (source)	dependencies	minor	1.52.3 → 1.53.1
tokio-util (source)	dependencies	patch	0.7.18 → 0.7.19

---

Release Notes

dtolnay/anyhow (anyhow)

v1.0.104

Compare Source

• Update syn dev-dependency to version 3

dtolnay/async-trait (async-trait)

v0.1.92

Compare Source

• Resolve double_must_use clippy lint in generated code (#​303)

v0.1.91

Compare Source

v0.1.90

Compare Source

• Update to syn 3

marshallpierce/rust-base64 (base64)

v0.23.1

Compare Source

• Make the tests build again on non-SIMD architectures

v0.23.0

Compare Source

• Added more consts for preconfigured configs and engines
• Make DecodeError::InvalidLastSymbol more clear by including the decoded value
• Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
  instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
  GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
  detection and work in no_std. The engines support the standard and URL-safe alphabets.
• Update MSRV to 1.71.0
• Add support for custom padding symbols

clap-rs/clap (clap)

v4.6.6

Compare Source

Features

• Add Command::get_overridden_usage

v4.6.5

Compare Source

v4.6.4

Compare Source

Internal

• Update to syn v3

v4.6.3

Compare Source

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

Compare Source

Fixes

• (help) Say alias when there is only one

mmastrac/linktime (ctor)

v1.0.13

Compare Source

What's Changed

• Bumped internal proc macro minimum version to pick up consistent 64-bit hash chunks (#​508) and the cross-crate section-name fix (#​509) (should not result in any downstream visible changes)
• Document crate_path and re-exports by @​mmastrac in mmastrac/rust-ctor#514

Full Changelog: mmastrac/linktime@ctor-1.0.12...ctor-1.0.13

v1.0.12

Compare Source

What's Changed

• Bumped internal proc macro minimum version to pick up PR #​495 (should not result in any downstream visible changes)

Full Changelog: mmastrac/linktime@ctor-1.0.11...ctor-1.0.12

v1.0.11

Compare Source

What's Changed

• Pointer-align the Apple ctor anchor by @​mmastrac in #​503

Full Changelog: mmastrac/linktime@ctor-1.0.10...ctor-1.0.11

v1.0.10

Compare Source

What's Changed

• Split Static::deref's slow path into cold fn by @​yvt in #​501

New Contributors

• @​yvt made their first contribution in #​501

Full Changelog: mmastrac/linktime@ctor-1.0.9...ctor-1.0.10

v1.0.9

Compare Source

What's Changed

• Ensure that Apple-platform staticlibs always keep the primary priority ctor (fixed by @​mmastrac in #​498, reported in #​496 by @​tylerhawkes)

Full Changelog: mmastrac/linktime@ctor-1.0.8...ctor-1.0.9

rust-lang/futures-rs (futures)

v0.3.34

Compare Source

• Preserve cloned waker identity. (#​3032)
• Updato syn to 3. (#​3028)

v0.3.33

Compare Source

• Fix ReadLine's soundness issue regarding to exception safety. (#​3020)
• Fix unsound Send impl for IterPinRef and Iter. (#​3003)
• Fix stacked borrows violation in compat01as03 implementation. (#​3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#​3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#​3007)
• Re-export alloc::task::Wake. (#​3010)
• Update spin to 0.12. (#​3014)

BurntSushi/ripgrep (globset)

v0.4.20

Compare Source

hyperium/http (http)

v1.5.0

Compare Source

• Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
• Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
• Fix uri::PathAndQuery parsing to enforce URI max length.

open-source-cooperative/keyring-rs (keyring)

v4.1.6: : fix concurrent initialization bug

Compare Source

This release fixes #​343, a bug in concurrent initialization of the v1 default credential store (thanks @​bbmediaco for reporting this). As part of this fix, there's an added feature: you can now query the exact result of the default credential store creation, as well as force it to happen without creating an entry.

What's Changed

• Bump dependencies by @​stevelr in #​344
• Prepare the release of v4.1.6 by @​brotskydotcom in #​345

Full Changelog: open-source-cooperative/keyring-rs@v4.1.5...v4.1.6

serde-rs/serde (serde)

v1.0.229

Compare Source

• Update to syn 3

serde-rs/json (serde_json)

v1.0.151

Compare Source

• Add RawValue::from_string_unchecked (#​1331, thanks @​WonderLawrence)

dtolnay/thiserror (thiserror)

v2.0.20

Compare Source

• Suppress redundant_field_names clippy lint in generated code (#​454)

v2.0.19

Compare Source

• Update to syn 3

tokio-rs/tokio (tokio)

v1.53.1: Tokio v1.53.1

Compare Source

1.53.1 (July 20th, 2026)

Fixed

• signal: restore MSRV by removing OnceLock::wait from the Windows handler (#​8300)

Fixed (unstable)

• time: fix alt timer cancellation and insertion race (#​8252)

Documented

• runtime: remove dead link definition in Runtime::block_on (#​8301)

v1.53.0: Tokio v1.53.0

Compare Source

1.53.0 (July 17th, 2026)

Added

• fs: implement From<OwnedFd> and From<OwnedHandle> for File (#​8266)
• metrics: add task schedule latency metric (#​7986)
• net: add SocketAddr methods to Unix sockets (#​8144)

Changed

• io: add #[inline] to IO trait impls for in-memory types (#​8242)
• net: implement UCred::pid on FreeBSD (#​8086)
• net: support Nuttx target os (#​8259)
• signal: refactor global variables on Windows (#​8231)
• sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#​8095)
• taskdump: support taskdumps on s390x (#​8192)
• time: add #[track_caller] to timeout_at() (#​8077)
• time: consolidate mutex locks on spurious poll (#​8124)
• time: defer waker clone on spurious poll (#​8107)
• time: move lazy-registration state into Sleep (#​8132)
• tracing: remove unnecessary span clone (#​8126)

Fixed

• io: do not treat zero-length reads as EOF in Chain (#​8251)
• net: use getpeereid for QNX peer credentials (#​8270)
• runtime: avoid illegal state in FastRand (#​8078)
• sync: wake mpsc receiver when a queued reserve[_many] returns permits (#​8260)
• taskdump: skip double wake on Trace::capture/Trace::trace_with (#​8043)
• time: avoid stack overflow in runtime constructor (#​8093)
• time (alt timer): ensure timers stay in the same runtime after .reset() (#​8169)

IO uring (unstable)

• fs: use io-uring for fs::try_exists (#​8080)
• fs: use io-uring for renaming files (#​7800)
• rt: flush io-uring CQE in case of CQE overflow (#​8277)

Documented

• docs: clarify cancel safety wording (#​8181)
• fs: clarify create_dir_all succeeds if path exists (#​8149)
• io: add warning about stdout reordering with multiple handles (#​8276)
• net: document pipe try_read*/try_write* readiness behavior (#​8032)
• runtime: document interaction with fork() (#​8202)
• sync: clarify broadcast lagging semantics (#​8239)
• sync: document memory ordering guarantees for Semaphore (#​8119)
• task: explain why yield_now defers its waker (#​8254)
• time: add panic docs to timeout_at() (#​8077)
• time: fix reversed poll order in timeout doc (#​8214)

v1.52.4: Tokio v1.52.4

Compare Source

1.52.4 (July 16th, 2026)

Fixed

• runtime: don't skip the driver when before_park schedules work (#​8222)

Fixed (unstable)

• taskdump: remove crate disambiguators from output (#​8264)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.