chore(deps): update rust dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anyhow	dependencies	patch	1.0.103 → 1.0.104
async-trait	dependencies	patch	0.1.89 → 0.1.92
aws-config	dependencies	minor	1.8.18 → 1.10.1
aws-sdk-s3	dev-dependencies	minor	1.137.0 → 1.141.0
aws-sdk-s3	dependencies	minor	1.137.0 → 1.141.0
aws-smithy-mocks	dev-dependencies	minor	0.2 → 0.3
aws-smithy-runtime-api	dev-dependencies	minor	1.12.3 → 1.14.0
aws-smithy-types	dependencies	minor	1.5.0 → 1.6.2
bytesize	dependencies	minor	2.4.2 → 2.7.0
camino	dependencies	patch	1.2.4 → 1.2.5
clap	dependencies	patch	4.6.1 → 4.6.6
ctor	dependencies	patch	1.0.8 → 1.0.13
futures (source)	dependencies	patch	0.3.32 → 0.3.34
keyring (source)	dependencies	patch	4.1.4 → 4.1.6
regex	dependencies	minor	1.12.4 → 1.13.1
rmcp	dev-dependencies	minor	2.1.0 → 2.2.0
rmcp	dependencies	minor	2.1.0 → 2.2.0
schemars (source)	dependencies	patch	1.2.1 → 1.2.2
serde (source)	dependencies	patch	1.0.228 → 1.0.229
serde_json	dependencies	patch	1.0.150 → 1.0.151
serde_with	dependencies	minor	3.21.0 → 3.22.0
tokio (source)	dependencies	minor	1.52.3 → 1.53.1
tokio-util (source)	dependencies	patch	0.7.18 → 0.7.19
toml	dependencies	patch	1.1.2+spec-1.1.0 → 1.1.4
uuid	dependencies	minor	1.23.4 → 1.24.0

---

Release Notes

dtolnay/anyhow (anyhow)

v1.0.104

Compare Source

• Update syn dev-dependency to version 3

dtolnay/async-trait (async-trait)

v0.1.92

Compare Source

• Resolve double_must_use clippy lint in generated code (#​303)

v0.1.91

Compare Source

v0.1.90

Compare Source

• Update to syn 3

bytesize-rs/bytesize (bytesize)

v2.7.0

Compare Source

• Remove no-alloc support because it removed ByteSize::display() when default features were disabled.

v2.6.0

Compare Source

• Add display styles for IEC and SI bit units.

v2.5.0

Compare Source

• Honor precision when a width is set with formatting args.
• Add #[no_alloc] support.

camino-rs/camino (camino)

v1.2.5

Compare Source

Fixed

Removed unnecessary files from the package.

clap-rs/clap (clap)

v4.6.6

Compare Source

Features

• Add Command::get_overridden_usage

v4.6.5

Compare Source

v4.6.4

Compare Source

Internal

• Update to syn v3

v4.6.3

Compare Source

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

Compare Source

Fixes

• (help) Say alias when there is only one

mmastrac/linktime (ctor)

v1.0.13

Compare Source

What's Changed

• Bumped internal proc macro minimum version to pick up consistent 64-bit hash chunks (#​508) and the cross-crate section-name fix (#​509) (should not result in any downstream visible changes)
• Document crate_path and re-exports by @​mmastrac in mmastrac/rust-ctor#514

Full Changelog: mmastrac/linktime@ctor-1.0.12...ctor-1.0.13

v1.0.12

Compare Source

What's Changed

• Bumped internal proc macro minimum version to pick up PR #​495 (should not result in any downstream visible changes)

Full Changelog: mmastrac/linktime@ctor-1.0.11...ctor-1.0.12

v1.0.11

Compare Source

What's Changed

• Pointer-align the Apple ctor anchor by @​mmastrac in #​503

Full Changelog: mmastrac/linktime@ctor-1.0.10...ctor-1.0.11

v1.0.10

Compare Source

What's Changed

• Split Static::deref's slow path into cold fn by @​yvt in #​501

New Contributors

• @​yvt made their first contribution in #​501

Full Changelog: mmastrac/linktime@ctor-1.0.9...ctor-1.0.10

v1.0.9

Compare Source

What's Changed

• Ensure that Apple-platform staticlibs always keep the primary priority ctor (fixed by @​mmastrac in #​498, reported in #​496 by @​tylerhawkes)

Full Changelog: mmastrac/linktime@ctor-1.0.8...ctor-1.0.9

rust-lang/futures-rs (futures)

v0.3.34

Compare Source

• Preserve cloned waker identity. (#​3032)
• Updato syn to 3. (#​3028)

v0.3.33

Compare Source

• Fix ReadLine's soundness issue regarding to exception safety. (#​3020)
• Fix unsound Send impl for IterPinRef and Iter. (#​3003)
• Fix stacked borrows violation in compat01as03 implementation. (#​3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#​3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#​3007)
• Re-export alloc::task::Wake. (#​3010)
• Update spin to 0.12. (#​3014)

open-source-cooperative/keyring-rs (keyring)

v4.1.6: : fix concurrent initialization bug

Compare Source

This release fixes #​343, a bug in concurrent initialization of the v1 default credential store (thanks @​bbmediaco for reporting this). As part of this fix, there's an added feature: you can now query the exact result of the default credential store creation, as well as force it to happen without creating an entry.

What's Changed

• Bump dependencies by @​stevelr in #​344
• Prepare the release of v4.1.6 by @​brotskydotcom in #​345

Full Changelog: open-source-cooperative/keyring-rs@v4.1.5...v4.1.6

v4.1.5: : Compatibility release

Compare Source

Rust 1.97 introduced a new clippy lint that fired on the CLI example. This release fixes that problem.

This release also takes the recent bug fix to the Apple native credential store.

There are no functional changes in this release.

What's Changed

• Fix new clippy warnings introduced in Rust 1.97 by @​brotskydotcom in #​338

Full Changelog: open-source-cooperative/keyring-rs@v4.1.4...v4.1.5

rust-lang/regex (regex)

v1.13.1

Compare Source

===================
This is a release that fixes a bug where incorrect regex match offsets could be
reported. Note that this doesn't impact whether a match occurs or not, just
where it occurs. The match offsets are still valid for slicing, they just may
not refer to the correct leftmost-first match. See
#​1364 for (many) more details.

Bug fixes:

• #​1354:
  Fixes previously unsound reverse suffix and inner optimizations.

v1.13.0

Compare Source

===================
This release includes a new API, a regex! macro, for lazy compilation of
a regex from a string literal. If you use regexes a lot, it's likely you've
already written one exactly like it. The new macro can be used like this:

use regex::regex;

fn is_match(line: &str) -> bool {
    // The regex will be compiled approximately once and reused automatically.
    // This avoids the footgun of using `Regex::new` here, which would
    // guarantee that it would be compiled every time this routine is called.
    // This would likely make this routine much slower than it needs to be.
    regex!(r"bar|baz").is_match(line)
}

let hay = "\
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";

let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

• #​709:
  Add a new regex! macro for efficient and automatic reuse of a compiled regex.

modelcontextprotocol/rust-sdk (rmcp)

v2.2.0

Compare Source

Added

• reject auth servers lacking S256 PKCE support (#​955)

Fixed

• pass client conformance suite (#​960)
• don't respond to cancelled requests (#​957)
• fail orphaned streamable HTTP responses on reinit (#​914)
• address 2025-11-25 conformance audit findings (#​951)

GREsau/schemars (schemars)

v1.2.2

Compare Source

• Update to syn 3 in schemars_derive

serde-rs/serde (serde)

v1.0.229

Compare Source

• Update to syn 3

serde-rs/json (serde_json)

v1.0.151

Compare Source

• Add RawValue::from_string_unchecked (#​1331, thanks @​WonderLawrence)

jonasbb/serde_with (serde_with)

v3.22.0: serde_with v3.22.0

Compare Source

Added

• Add support for jiff v0.2 behind the new jiff_0_2 feature flag (#​936)
  jiff::SignedDuration works with DurationSeconds and its variants.
  jiff::Timestamp, jiff::Zoned, and jiff::civil::DateTime work with TimestampSeconds and its variants.
  Deserializing a jiff::Zoned uses the system time zone, like chrono::DateTime<Local>.

Fixed

• Extend the GHSA-7gcf-g7xr-8hxj fix to the duplicate-key-prevention collections.
  The rust::sets_duplicate_value_is_error, rust::maps_duplicate_key_is_error, rust::sets_last_value_wins, and rust::maps_first_key_wins adapters created their backing sets/maps with with_capacity_and_hasher using the raw deserializer size_hint, bypassing the size_hint_cautious cap added in #​966 (the clippy.toml disallowed_methods lint only covers Vec::with_capacity, not with_capacity_and_hasher, so these sites were not flagged).
  Attacker-controlled input claiming a huge length could panic with Hash table capacity overflow before a single element was read. All such constructions now route through size_hint_cautious.

tokio-rs/tokio (tokio)

v1.53.1: Tokio v1.53.1

Compare Source

1.53.1 (July 20th, 2026)

Fixed

• signal: restore MSRV by removing OnceLock::wait from the Windows handler (#​8300)

Fixed (unstable)

• time: fix alt timer cancellation and insertion race (#​8252)

Documented

• runtime: remove dead link definition in Runtime::block_on (#​8301)

v1.53.0: Tokio v1.53.0

Compare Source

1.53.0 (July 17th, 2026)

Added

• fs: implement From<OwnedFd> and From<OwnedHandle> for File (#​8266)
• metrics: add task schedule latency metric (#​7986)
• net: add SocketAddr methods to Unix sockets (#​8144)

Changed

• io: add #[inline] to IO trait impls for in-memory types (#​8242)
• net: implement UCred::pid on FreeBSD (#​8086)
• net: support Nuttx target os (#​8259)
• signal: refactor global variables on Windows (#​8231)
• sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#​8095)
• taskdump: support taskdumps on s390x (#​8192)
• time: add #[track_caller] to timeout_at() (#​8077)
• time: consolidate mutex locks on spurious poll (#​8124)
• time: defer waker clone on spurious poll (#​8107)
• time: move lazy-registration state into Sleep (#​8132)
• tracing: remove unnecessary span clone (#​8126)

Fixed

• io: do not treat zero-length reads as EOF in Chain (#​8251)
• net: use getpeereid for QNX peer credentials (#​8270)
• runtime: avoid illegal state in FastRand (#​8078)
• sync: wake mpsc receiver when a queued reserve[_many] returns permits (#​8260)
• taskdump: skip double wake on Trace::capture/Trace::trace_with (#​8043)
• time: avoid stack overflow in runtime constructor (#​8093)
• time (alt timer): ensure timers stay in the same runtime after .reset() (#​8169)

IO uring (unstable)

• fs: use io-uring for fs::try_exists (#​8080)
• fs: use io-uring for renaming files (#​7800)
• rt: flush io-uring CQE in case of CQE overflow (#​8277)

Documented

• docs: clarify cancel safety wording (#​8181)
• fs: clarify create_dir_all succeeds if path exists (#​8149)
• io: add warning about stdout reordering with multiple handles (#​8276)
• net: document pipe try_read*/try_write* readiness behavior (#​8032)
• runtime: document interaction with fork() (#​8202)
• sync: clarify broadcast lagging semantics (#​8239)
• sync: document memory ordering guarantees for Semaphore (#​8119)
• task: explain why yield_now defers its waker (#​8254)
• time: add panic docs to timeout_at() (#​8077)
• time: fix reversed poll order in timeout doc (#​8214)

v1.52.4: Tokio v1.52.4

Compare Source

1.52.4 (July 16th, 2026)

Fixed

• runtime: don't skip the driver when before_park schedules work (#​8222)

Fixed (unstable)

• taskdump: remove crate disambiguators from output (#​8264)

toml-rs/toml (toml)

v1.1.4

Compare Source

v1.1.3

Compare Source

uuid-rs/uuid (uuid)

v1.24.0

Compare Source

What's Changed

• feat(fmt): support encoding into MaybeUninit buffers by @​weifanglab in #​892
• Prepare for 1.24.0 release by @​KodrAus in #​896

New Contributors

• @​weifanglab made their first contribution in #​892

Full Changelog: uuid-rs/uuid@v1.23.5...v1.24.0

v1.23.5

Compare Source

What's Changed

• doc: Fix broken link by @​frostyplanet in #​891
• perf: Optimize UUID hex parsing and formatting by @​geeknoid in #​894
• Prepare for 1.23.5 release by @​KodrAus in #​895

New Contributors

• @​geeknoid made their first contribution in #​894

Full Changelog: uuid-rs/uuid@v1.23.4...v1.23.5

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.