build(deps): bump the cargo group across 1 directory with 39 updates

[dependabot]

Bumps the cargo group with 38 updates in the / directory:

Package	From	To
thiserror	1.0.69	2.0.18
anyhow	1.0.102	1.0.103
uuid	1.23.3	1.23.4
arrow-array	53.4.0	58.3.0
arrow-schema	53.4.1	58.3.0
parquet	53.4.0	58.3.0
cron	0.15.0	0.17.0
tauri-build	2.6.2	2.6.3
aes-gcm	0.10.3	0.11.0
getrandom	0.2.17	0.4.2
sha2	0.10.9	0.11.0
zip	2.4.2	8.6.0
rustls	0.23.40	0.23.41
webpki-roots	0.26.11	1.0.7
rustls-native-certs	0.7.3	0.8.4
jsonwebtoken	9.3.1	10.4.0
hmac	0.12.1	0.13.0
scylla	0.13.2	1.7.0
redis	0.27.6	1.3.0
toml	0.8.2	1.1.2+spec-1.1.0
rskafka	0.5.0	0.6.0
apache-avro	0.17.0	0.21.0
async-nats	0.37.0	0.49.1
quick-xml	0.36.2	0.40.1
lapin	2.5.5	4.10.0
suppaftp	8.0.4	10.0.0
russh	0.54.5	0.60.1
wasmi	0.40.0	1.1.0
boa_engine	0.19.1	0.20.0
mail-parser	0.11.3	0.11.4
rustls-connector	0.21.11	0.23.6
adbc_core	0.16.0	0.19.0
arrow-flight	53.4.0	55.2.0
prost	0.13.5	0.14.4
rand	0.8.6	0.10.1
vortex	0.75.0	0.76.0
arrow-select	58.3.0	59.0.0
notify-debouncer-mini	0.6.0	0.7.0

Updates thiserror from 1.0.69 to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

• Make compatible with project-level needless_lifetimes = "forbid" (#443, thanks @​LucaCappelletti94)

2.0.17

• Use differently named __private module per patch release (#434)

2.0.16

• Add to "no-std" crates.io category (#429)

2.0.15

• Prevent Error::provide API becoming unavailable from a future new compiler lint (#427)

2.0.14

• Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#426)

2.0.13

• Documentation improvements

2.0.12

• Prevent elidable_lifetime_names pedantic clippy lint in generated impl (#413)

2.0.11

• Add feature gate to tests that use std (#409, #410, thanks @​Maytha8)

2.0.10

• Support errors containing a generic type parameter's associated type in a field (#408)

2.0.9

• Work around missing_inline_in_public_items clippy restriction being triggered in macro-generated code (#404)

2.0.8

• Improve support for macro-generated derive(Error) call sites (#399)

2.0.7

• Work around conflict with #[deny(clippy::allow_attributes)] (#397, thanks @​zertosh)

2.0.6

• Suppress deprecation warning on generated From impls (#396)

2.0.5

• Prevent deprecation warning on generated impl for deprecated type (#394)

2.0.4

• Eliminate needless_lifetimes clippy lint in generated From impls (#391, thanks @​matt-phylum)

2.0.3

• Support the same Path field being repeated in both Debug and Display representation in error message (#383)
• Improve error message when a format trait used in error message is not implemented by some field (#384)

2.0.2

... (truncated)

Commits

• dc0f6a2 Release 2.0.18
• 0275292 Touch up PR 443
• 3c33bc6 Merge pull request #443 from LucaCappelletti94/master
• 995939c Reproduce issue 442
• 21653d1 Made clippy lifetime allows conditional
• 45e5388 Update actions/upload-artifact@v5 -> v6
• 386aac1 Update actions/upload-artifact@v4 -> v5
• ec50561 Update actions/checkout@v5 -> v6
• 247eab5 Update name of empty_enum clippy lint
• 91b181f Raise required compiler to Rust 1.68
• Additional commits viewable in compare view

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates uuid from 1.23.3 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

• Fix up name of fuzz script in readme by @​KodrAus in uuid-rs/uuid#888
• document fixes by @​frostyplanet in uuid-rs/uuid#889
• Prepare for 1.23.4 release by @​KodrAus in uuid-rs/uuid#890

New Contributors

• @​frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits

• 3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
• cba53d0 prepare for 1.23.4 release
• e347af4 Merge pull request #889 from frostyplanet/main
• e9bf55c doc: Fix broken link warnings
• 5351af4 doc: Enable feature flag label for docs.rs
• 1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
• c9619f6 fix up name of fuzz script in readme
• See full diff in compare view

Updates arrow-array from 53.4.0 to 58.3.0

Release notes

Sourced from arrow-array's releases.

arrow 58.3.0

Changelog

58.3.0 (2026-05-07)

Full Changelog

Implemented enhancements:

• Add DatePart::from_str API #9930 [arrow]
• should use DictionaryArray::with_values instead of try_new on the dictionary fast path #9889 [arrow]
• [arrow-string] add concat_elements for BinaryViewArray and FixedSizeBinary #9875 [arrow]
• Expose eq ignore ascii case from arrow-string #9870 [arrow]
• Configurable data page v2 compression threshold #9827 [parquet]

Fixed bugs:

• [arrow-cast] incorrect Time32 -> Time64 conversion #9851 [arrow]
• Panic when reading malformed compact-Thrift bool fields in Parquet page metadata #9839 [parquet]
• Parquet DeltaBitPackDecoder::skip could panic on "non-standard" miniblocks #9793 [parquet]

Documentation updates:

• docs: Add guidance for AI assisted submissions to CONTRIBUTING.md #9892 (etseidl)
• Update release schedule on README #9881 (alamb)
• Add more documentation for FixedSizeBinary arrays #9866 [arrow] (alamb)
• Minor: document why FixedSizeBinary offset is always 0 #9861 [arrow] (alamb)
• docs: Update contributing guidelines with benchmark results #9782 (alamb)

Closed issues:

... (truncated)

Changelog

Sourced from arrow-array's changelog.

Changelog

59.0.0 (2026-06-04)

Full Changelog

Breaking changes:

• chore: Remove some deprecated Arrow functions from the public API #10040 [arrow] (etseidl)
• chore: Remove some deprecated functions from parquet crate #10035 [parquet] (etseidl)
• Replace From<Vec<_>> impls with TryFroms for FixedSizeBinaryArray #10019 [parquet] [arrow] (quantumish)
• Use Thrift macro to generate Parquet LogicalType serialization code #9997 [parquet] (etseidl)
• refactor: make BloomFilterProperties fpp/ndv private with accessors #9969 [parquet] (CuteChuanChuan)
• Remove deprecated parquet::format module and thrift dependency #9962 [parquet] (jhorstmann)
• generic channel support for FlightClient #9933 [arrow] [arrow-flight] (rumenov)
• Add CompressionCodec Thrift enum for Parquet metadata #9864 [parquet] (etseidl)
• [Variant] remove BorrowedShreddingState #9791 (sdf-jkl)
• Remove deprecated legacy like kernels in arrow-string #9674 [arrow] (AdamGS)

Implemented enhancements:

• Allow casting plain struct to dictionary encoded struct #10038 [arrow]
• Optimize arrow-flight #10029
• Align buffers when importing via from_ffi / ArrowArrayStreamReader #10028 [arrow]
• Switch Parquet LogicalType enum to macro generated version #9995 [parquet]
• Future proof Parquet Thrift parser #9973 [parquet]
• Add DatePart 1-indexed variants #9964 [arrow]
• perf: Rework Parquet Thrift handling of boolean fields #9946 [parquet]
• Add benchmarks for REE to parquet #9935 [parquet] [arrow]
• (re) Allow Large FixedSizeBinaryArrays #9906 [arrow]
• Add a is_normalized flag to DictionaryArray #9841

... (truncated)

Commits

• 913bab2 Prepare for 58.3.0 release (#9893)
• 3384f64 chore(deps): bump actions/labeler from 6.0.1 to 6.1.0 (#9932)
• cc5a256 impl FromStr for DatePart (#9931)
• 97ff198 feat(arrow-string): concat_elements for view, fixed binary (#9876)
• ded985c fix(arrow-csv): bound RecordDecoder::flush offset accumulation (#9886)
• 7f6524d fix(parquet): bound schema num_children before Vec::with_capacity (#9884)
• 5bf8912 [arrow-string]: add like::eq_ascii_ignore_case kernel (#9871)
• 8091f3f [arrow-array] Use consistent value_length name in FixedSizeBinaryArray (#9905)
• 1d89737 fix(parquet): Prevent negative list sizes in Thrift compact protocol parser (...
• 3790d88 Pre-size dedup HashTable in GenericByteDictionaryBuilder::with_capacity (#9908)
• Additional commits viewable in compare view

Updates arrow-schema from 53.4.1 to 58.3.0

Release notes

Sourced from arrow-schema's releases.

arrow 58.3.0

Changelog

58.3.0 (2026-05-07)

Full Changelog

Implemented enhancements:

• Add DatePart::from_str API #9930 [arrow]
• should use DictionaryArray::with_values instead of try_new on the dictionary fast path #9889 [arrow]
• [arrow-string] add concat_elements for BinaryViewArray and FixedSizeBinary #9875 [arrow]
• Expose eq ignore ascii case from arrow-string #9870 [arrow]
• Configurable data page v2 compression threshold #9827 [parquet]

Fixed bugs:

• [arrow-cast] incorrect Time32 -> Time64 conversion #9851 [arrow]
• Panic when reading malformed compact-Thrift bool fields in Parquet page metadata #9839 [parquet]
• Parquet DeltaBitPackDecoder::skip could panic on "non-standard" miniblocks #9793 [parquet]

Documentation updates:

• docs: Add guidance for AI assisted submissions to CONTRIBUTING.md #9892 (etseidl)
• Update release schedule on README #9881 (alamb)
• Add more documentation for FixedSizeBinary arrays #9866 [arrow] (alamb)
• Minor: document why FixedSizeBinary offset is always 0 #9861 [arrow] (alamb)
• docs: Update contributing guidelines with benchmark results #9782 (alamb)

Closed issues:

... (truncated)

Changelog

Sourced from arrow-schema's changelog.

Changelog

59.0.0 (2026-06-04)

Full Changelog

Breaking changes:

• chore: Remove some deprecated Arrow functions from the public API #10040 [arrow] (etseidl)
• chore: Remove some deprecated functions from parquet crate #10035 [parquet] (etseidl)
• Replace From<Vec<_>> impls with TryFroms for FixedSizeBinaryArray #10019 [parquet] [arrow] (quantumish)
• Use Thrift macro to generate Parquet LogicalType serialization code #9997 [parquet] (etseidl)
• refactor: make BloomFilterProperties fpp/ndv private with accessors #9969 [parquet] (CuteChuanChuan)
• Remove deprecated parquet::format module and thrift dependency #9962 [parquet] (jhorstmann)
• generic channel support for FlightClient #9933 [arrow] [arrow-flight] (rumenov)
• Add CompressionCodec Thrift enum for Parquet metadata #9864 [parquet] (etseidl)
• [Variant] remove BorrowedShreddingState #9791 (sdf-jkl)
• Remove deprecated legacy like kernels in arrow-string #9674 [arrow] (AdamGS)

Implemented enhancements:

• Allow casting plain struct to dictionary encoded struct #10038 [arrow]
• Optimize arrow-flight #10029
• Align buffers when importing via from_ffi / ArrowArrayStreamReader #10028 [arrow]
• Switch Parquet LogicalType enum to macro generated version #9995 [parquet]
• Future proof Parquet Thrift parser #9973 [parquet]
• Add DatePart 1-indexed variants #9964 [arrow]
• perf: Rework Parquet Thrift handling of boolean fields #9946 [parquet]
• Add benchmarks for REE to parquet #9935 [parquet] [arrow]
• (re) Allow Large FixedSizeBinaryArrays #9906 [arrow]
• Add a is_normalized flag to DictionaryArray #9841

... (truncated)

Commits

• 913bab2 Prepare for 58.3.0 release (#9893)
• 3384f64 chore(deps): bump actions/labeler from 6.0.1 to 6.1.0 (#9932)
• cc5a256 impl FromStr for DatePart (#9931)
• 97ff198 feat(arrow-string): concat_elements for view, fixed binary (#9876)
• ded985c fix(arrow-csv): bound RecordDecoder::flush offset accumulation (#9886)
• 7f6524d fix(parquet): bound schema num_children before Vec::with_capacity (#9884)
• 5bf8912 [arrow-string]: add like::eq_ascii_ignore_case kernel (#9871)
• 8091f3f [arrow-array] Use consistent value_length name in FixedSizeBinaryArray (#9905)
• 1d89737 fix(parquet): Prevent negative list sizes in Thrift compact protocol parser (...
• 3790d88 Pre-size dedup HashTable in GenericByteDictionaryBuilder::with_capacity (#9908)
• Additional commits viewable in compare view

Updates parquet from 53.4.0 to 58.3.0

Release notes

Sourced from parquet's releases.

arrow 58.3.0

Changelog

58.3.0 (2026-05-07)

Full Changelog

Implemented enhancements:

• Add DatePart::from_str API #9930 [arrow]
• should use DictionaryArray::with_values instead of try_new on the dictionary fast path #9889 [arrow]
• [arrow-string] add concat_elements for BinaryViewArray and FixedSizeBinary #9875 [arrow]
• Expose eq ignore ascii case from arrow-string #9870 [arrow]
• Configurable data page v2 compression threshold #9827 [parquet]

Fixed bugs:

• [arrow-cast] incorrect Time32 -> Time64 conversion #9851 [arrow]
• Panic when reading malformed compact-Thrift bool fields in Parquet page metadata #9839 [parquet]
• Parquet DeltaBitPackDecoder::skip could panic on "non-standard" miniblocks #9793 [parquet]

Documentation updates:

• docs: Add guidance for AI assisted submissions to CONTRIBUTING.md #9892 (etseidl)
• Update release schedule on README #9881 (alamb)
• Add more documentation for FixedSizeBinary arrays #9866 [arrow] (alamb)
• Minor: document why FixedSizeBinary offset is always 0 #9861 [arrow] (alamb)
• docs: Update contributing guidelines with benchmark results #9782 (alamb)

Closed issues:

... (truncated)

Changelog

Sourced from parquet's changelog.

Changelog

59.0.0 (2026-06-04)

Full Changelog

Breaking changes:

• chore: Remove some deprecated Arrow functions from the public API #10040 [arrow] (etseidl)
• chore: Remove some deprecated functions from parquet crate #10035 [parquet] (etseidl)
• Replace From<Vec<_>> impls with TryFroms for FixedSizeBinaryArray #10019 [parquet] [arrow] (quantumish)
• Use Thrift macro to generate Parquet LogicalType serialization code #9997 [parquet] (etseidl)
• refactor: make BloomFilterProperties fpp/ndv private with accessors #9969 [parquet] (CuteChuanChuan)
• Remove deprecated parquet::format module and thrift dependency #9962 [parquet] (jhorstmann)
• generic channel support for FlightClient #9933 [arrow] [arrow-flight] (rumenov)
• Add CompressionCodec Thrift enum for Parquet metadata #9864 [parquet] (etseidl)
• [Variant] remove BorrowedShreddingState #9791 (sdf-jkl)
• Remove deprecated legacy like kernels in arrow-string #9674 [arrow] (AdamGS)

Implemented enhancements:

• Allow casting plain struct to dictionary encoded struct #10038 [arrow]
• Optimize arrow-flight #10029
• Align buffers when importing via from_ffi / ArrowArrayStreamReader #10028 [arrow]
• Switch Parquet LogicalType enum to macro generated version #9995 [parquet]
• Future proof Parquet Thrift parser #9973 [parquet]
• Add DatePart 1-indexed variants #9964 [arrow]
• perf: Rework Parquet Thrift handling of boolean fields #9946 [parquet]
• Add benchmarks for REE to parquet #9935 [parquet] [arrow]
• (re) Allow Large FixedSizeBinaryArrays #9906 [arrow]
• Add a is_normalized flag to DictionaryArray #9841

... (truncated)

Commits

• 913bab2 Prepare for 58.3.0 release (#9893)
• 3384f64 chore(deps): bump actions/labeler from 6.0.1 to 6.1.0 (#9932)
• cc5a256 impl FromStr for DatePart (#9931)
• 97ff198 feat(arrow-string): concat_elements for view, fixed binary (#9876)
• ded985c fix(arrow-csv): bound RecordDecoder::flush offset accumulation (#9886)
• 7f6524d fix(parquet): bound schema num_children before Vec::with_capacity (#9884)
• 5bf8912 [arrow-string]: add like::eq_ascii_ignore_case kernel (#9871)
• 8091f3f [arrow-array] Use consistent value_length name in FixedSizeBinaryArray (#9905)
• 1d89737 fix(parquet): Prevent negative list sizes in Thrift compact protocol parser (...
• 3790d88 Pre-size dedup HashTable in GenericByteDictionaryBuilder::with_capacity (#9908)
• Additional commits viewable in compare view

Updates cron from 0.15.0 to 0.17.0

Commits

• See full diff in compare view

Updates tauri-build from 2.6.2 to 2.6.3

Release notes

Sourced from tauri-build's releases.

tauri-build v2.6.3

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1133 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1085 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Crate:     atk-sys

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0416

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0416
Crate:     fxhash

Version:   0.2.1

Warning:   unmaintained

Title:     fxhash - no longer maintained

Date:      2025-09-05

ID:        RUSTSEC-2025-0057

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     gdk

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0412

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0412
Crate:     gdk-sys

Version:   0.18.2

Warning:   unmaintained

Title:     gtk-rs GTK3 bindings - no longer maintained

Date:      2024-03-04

ID:        RUSTSEC-2024-0418

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0418
Crate:     gdkwayland-sys

</tr></table>

... (truncated)

Commits

• See full diff in compare view

Updates aes-gcm from 0.10.3 to 0.11.0

Commits

• a10b56f aes-gcm v0.11.0 (#852)
• f042e9c aead-stream v0.6.0 (#851)
• b29735a Adopt Trusted Publishing (#854)
• a1fe43f xaes-256-gcm: enable and fix workspace level lints (#850)
• 8cf876f eax: remove toplevel lint attributes (#849)
• 4661ddf ocb3: enable and fix workspace-level lints (#848)
• c821431 eax: enable and fix workspace-level lints (#847)
• d3684bb deoxys: enable and fix workspace-level lints (#846)
• 5e016e2 chacha20poly1305: enable and fix workspace-level lints (#845)
• b3524d3 ccm: enable and fix workspace-level lints (#844)
• Additional commits viewable in compare view

Updates getrandom from 0.2.17 to 0.4.2

Changelog

Sourced from getrandom's changelog.

0.4.2 - 2026-03-03

Changed

• Bump r-efi dependency to v6 #814

Fixed

• Read errno only when it is set #810
• Check the return value of ProcessPrng on Windows #811

#810: rust-random/getrandom#810 #811: rust-random/getrandom#811 #814: rust-random/getrandom#814

0.4.1 - 2026-02-03

Fixed

• Documentation build on docs.rs #801

#801: rust-random/getrandom#801

0.4.0 - 2026-02-02

Added

• RawOsError type alias #739
• SysRng behind new feature sys_rng #751
• WASIp3 support #779
• extern_impl opt-in backend #786 #794
• Motor OS support #797

Changed

• Use Edition 2024 and MSRV 1.85 #749

#739: rust-random/getrandom#739 #749: rust-random/getrandom#749 #751: rust-random/getrandom#751 #779: rust-random/getrandom#779 #786: rust-random/getrandom#786 #794: rust-random/getrandom#794 #797: rust-random/getrandom#797

[0.3.4] - 2025-10-14

Major change to wasm_js backend

Now, when the wasm_js feature is enabled, the wasm_js backend will be used by default. Users of wasm32-unknown-unknown targeting JavaScript environments like the Web and Node.js will no longer need to specify:

... (truncated)

Commits

• 4d82673 Release v0.4.2 (#821)
• 158fdd4 build(deps): bump the all-deps group with 3 updates (#818)
• 5b0adcc changelog: fix Motor OS PR link (#816)
• f19d321 changelog: move version links to relevant sections (#815)
• b83c779 Avoid accessing errno on unexpected return values. (#810)
• 3d1b151 Update r-efi to v6 (#814)
• 73c17f7 windows: check return value of ProcessPrng (#811)
• 7589557 Update Cargo.lock (#809)
• 6dfd5cb Unify lazy types (#804)
• 5e6b022 Update Cargo.lock (#806)
• Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

• ffe0939 Release sha2 0.11.0 (#806)
• 8991b65 Use the standard order of the [package] section fields (#807)
• 3d2bc57 sha2: refactor backends (#802)
• faa55fb sha3: bump keccak to v0.2 (#803)
• d3e6489 sha3 v0.11.0-rc.9 (#801)
• bbf6f51 sha2: tweak backend docs (#800)
• 155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
• ed514f2 Use published version of keccak v0.2 (#799)
• 702bcd8 Migrate to closure-based keccak (#796)
• 827c043 sha3 v0.11.0-rc.8 (#794)
• Additional commits viewable in compare view

Updates zip from 2.4.2 to 8.6.0

Release notes

Sourced from zip's releases.

v8.6.0

🚀 Features

• add compression not supported as enum error (#774)

🐛 Bug Fixes

• allow for [u8] as filename (#775)

🚜 Refactor

• mark ZipFlags as non-exhaustive and add test for HasZipMetadata (#777)
• use and simplify is_dir (#776)

v8.5.1

🚜 Refactor

• change magic finder to stack buffer (#763)
• simplify extra field parsing (#764)

v8.5.0

🐛 Bug Fixes

• remove zip64 comment and add zip64 extensible data sector (#747)

🚜 Refactor

• remove useless magic in struct (