[dependabot]

Bumps the cargo group with 4 updates: rustls, zstd, rustls-native-certs and arboard.

Updates rustls from 0.23.45 to 0.23.46

Commits

• f04804f Delay saving KX hint until handshake confirmation
• 049d39b Bump version to 0.23.46
• 6d0ba08 Eliminate secret from impl Debug for ServerSessionValue
• 2b82b81 unbuffered: update TLS 1.3 traffic keys before exhausting them
• 74343e7 conn: update TLS 1.3 traffic keys within fragmented writes
• 795eea7 Advance the HPKE sequence only after seal succeeds
• d67cb71 stream: provide backpressure while buffering received plaintext
• 7a69ade util: fuse flushes from connections with errors
• 493d089 conn: fuse writes for connections with errors
• db00e01 util: keep flushing after short writes
• Additional commits viewable in compare view

Updates zstd from 0.14.0 to 0.14.2

Commits

• 1e52c7e Release zstd 0.14.2
• 42fc51f Add reader-preserving fallible decoder constructors
• 78170db Add Decoder::into_inner for reader recovery without additional input
• 9167d35 Release zstd 0.14.1, zstd-safe 8.1.0, and zstd-sys 2.1.1
• b59becf Propagate C API deprecations through Rust bindings and wrappers
• d8a325a Simplify Rust allocator constructors and test support
• 594e743 Delegate panicking dictionary constructors to fallible variants
• 779d39a Add fallible constructors for prepared dictionaries
• fc5d2b7 Merge pull request #379 from gyscos/fix/pr-378-rust-allocator
• 18028cd Count actual newline bytes in dictionary training samples
• Additional commits viewable in compare view

Updates rustls-native-certs from 0.8.4 to 0.8.5

Release notes

Sourced from rustls-native-certs's releases.

0.8.5

Avoid unnecessary work by keeping track of duplicate files on Unix systems.

What's Changed

• Read each file in cert directories only once by @​PeterUlb in rustls/rustls-native-certs#256
• Prepare 0.8.5 by @​djc in rustls/rustls-native-certs#257

Commits

• 4bcc4bb Bump version to 0.8.5
• 2d13547 Take semver-compatible dependency updates
• c231965 Read each file in cert directories only once
• da7d23d build(deps): bump rustls from 0.23.44 to 0.23.45 in the crates-io group
• 3f866a2 build(deps): bump rustls from 0.23.43 to 0.23.44 in the crates-io group
• e7d065e build(deps): bump rustls-webpki in the crates-io group
• 1196259 build(deps): bump rustls-webpki in the crates-io group
• 589e968 build(deps): bump rustls from 0.23.42 to 0.23.43 in the crates-io group
• 1d93e38 build(deps): bump serial_test from 3.5.0 to 4.0.1 in the crates-io group
• a54aba3 build(deps): bump the crates-io group with 2 updates
• Additional commits viewable in compare view

Updates arboard from 3.6.1 to 3.7.0

Release notes

Sourced from arboard's releases.

v3.7.0

What's Changed

• Return a conversion failure error when CGImageCreate fails by @​complexspaces in 1Password/arboard#205
• Properly encode/decode MIME=text/uri-list by @​luca020400 in 1Password/arboard#217
• Increase windows-sys lower bound to 0.62 by @​T-256 in 1Password/arboard#220
• Add example to Get and Set by @​Its-Just-Nans in 1Password/arboard#224
• Add a wait_once to support waiting for just one clipboard request by @​joshtriplett in 1Password/arboard#213

New Contributors

• @​luca020400 made their first contribution in 1Password/arboard#217
• @​T-256 made their first contribution in 1Password/arboard#220
• @​Its-Just-Nans made their first contribution in 1Password/arboard#224
• @​joshtriplett made their first contribution in 1Password/arboard#213

Full Changelog: 1Password/arboard@v3.6.1...v3.7.0

Commits

• 5f5c863 Release 3.7.0
• ab9663b Add example demonstrating wait_once
• b9000b1 Add a wait_once to support waiting for just one clipboard request
• 2ea0ff6 wayland: Factor out option setting into a method
• b7e47c8 Update lib.rs
• 2b2050e Bump step-security/setup-rust-toolchain from 1.16.1 to 2.0.0
• 6b09682 Bump step-security/harden-runner from 2.20.0 to 2.21.1
• 9f7b05c Bump actions/checkout from 4.3.1 to 7.0.0
• 890e919 Apply GitHub Actions security best practices
• d7c6cc9 bump windows-sys lower bound
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.