chore(deps): update rust-minor-patch

[bug-ops]

This PR contains the following updates:

Package	Type	Update	Change	Pending
agent-client-protocol-schema	workspace.dependencies	minor	=1.5.0 → =1.6.0
anyhow	workspace.dependencies	patch	1.0.103 → 1.0.104
async-trait	workspace.dependencies	patch	0.1.89 → 0.1.91
base64	workspace.dependencies	minor	0.22.1 → 0.23.0
bytemuck	workspace.dependencies	patch	1.25.1 → 1.25.2
clap	workspace.dependencies	patch	4.6.2 → 4.6.4	4.6.5
glob	workspace.dependencies	patch	0.3.3 → 0.3.4
http	workspace.dependencies	minor	1.4.2 → 1.5.0
ignore (source)	workspace.dependencies	patch	0.4.30 → 0.4.31	0.4.32
landlock (source)	workspace.dependencies	patch	0.4.5 → 0.4.7
ollama-rs	workspace.dependencies	patch	0.3.5 → 0.3.6
reqwest012	dependencies	minor	0.12 → 0.13.4
schemars (source)	workspace.dependencies	patch	1.2.1 → 1.2.2
scrape-core	workspace.dependencies	patch	0.2.9 → 0.2.10
thiserror	workspace.dependencies	patch	2.0.18 → 2.0.19
toml	dependencies	patch	1.1.3 → 1.1.4
toml	workspace.dependencies	patch	1.1.3 → 1.1.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

agentclientprotocol/agent-client-protocol (agent-client-protocol-schema)

v1.6.0

Compare Source

Added

• (unstable) add tool call name (#​1752)
• (unstable-v2) add cancelled variant to tool call and plan item (#​1750)

dtolnay/anyhow (anyhow)

v1.0.104

Compare Source

• Update syn dev-dependency to version 3

dtolnay/async-trait (async-trait)

v0.1.91

Compare Source

• Update to syn 3 (#​299)
• Fix mutability for by-reference receivers (#​301)

v0.1.90

Compare Source

(yanked)

marshallpierce/rust-base64 (base64)

v0.23.0

Compare Source

• Added more consts for preconfigured configs and engines
• Make DecodeError::InvalidLastSymbol more clear by including the decoded value
• Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
  instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
  GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
  detection and work in no_std. The engines support the standard and URL-safe alphabets.
• Update MSRV to 1.71.0
• Add support for custom padding symbols

Lokathor/bytemuck (bytemuck)

v1.25.2

Compare Source

• implement NoUninit for char, bool, NonZero* arrays

clap-rs/clap (clap)

v4.6.4

Compare Source

Internal

• Update to syn v3

rust-lang/glob (glob)

v0.3.4

Compare Source

• Cache filename for sorting in fill_todo (#​181)
• Replace into_error method with impl Into (#​179)
• Replace tempdir with tempfile (#​176)
• Set the edition to 2021 (#​188)

hyperium/http (http)

v1.5.0

Compare Source

• Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
• Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
• Fix uri::PathAndQuery parsing to enforce URI max length.

landlock-lsm/rust-landlock (landlock)

v0.4.7

Compare Source

New API

• Added support for Landlock ABI 9:
  control connections to pathname UNIX domain sockets with the new
  AccessFs::ResolveUnix
  right (PR #​135).

v0.4.6

Compare Source

New API

• Added support for Landlock ABI 8:
  atomically apply the sandbox to all threads of the calling process with
  all_threads()
  (shared between
  RulesetCreated and
  RestrictSelf)
  (PR #​130).

pepperoni21/ollama-rs (ollama-rs)

v0.3.6

Compare Source

What's Changed

• Bump text-splitter from 0.31.0 to 0.32.0 by @​dependabot[bot] in #​351
• Bump log from 0.4.32 to 0.4.33 by @​dependabot[bot] in #​352
• Bump regex from 1.12.3 to 1.12.4 by @​dependabot[bot] in #​353
• Bump syn from 2.0.117 to 2.0.118 by @​dependabot[bot] in #​354
• Bump quote from 1.0.45 to 1.0.46 by @​dependabot[bot] in #​355
• Fix ToolType serializing as "Function" instead of "function" by @​wez in #​358

Full Changelog: pepperoni21/ollama-rs@v0.3.5...v0.3.6

seanmonstar/reqwest (reqwest012)

v0.13.4

Compare Source

• Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
• Add ClientBuilder::http2_keep_alive_* options for the blocking client.
• Add TLS 1.3 support when using native-tls backend.
• Fix redirect handling to strip sensitive headers when the scheme changes.
• Fix HTTP/3 happy-eyeball connection creation.
• Upgrade hickory-resolver to 0.26.

v0.13.3

Compare Source

• Fix CertificateRevocationList parsing of PEM values.
• Fix logging in resolver to only show host, not full URL.
• Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
• Fix HTTP/3 to handle STOP_SENDING as not an error.
• Fix HTTP/3 pool to remove timed out QUIC connections.
• Fix HTTP/3 connection establishment picking IPv4 and IPv6.
• Upgrade rustls-platform-verifier.
• (wasm) Only use wasm-bindgen on unknown-* targets.

v0.13.2

Compare Source

• Fix HTTP/2 and native-tls ALPN feature combinations.
• Fix HTTP/3 to send h3 ALPN.
• (wasm) fix RequestBuilder::json() from override previously set content-type.

v0.13.1

Compare Source

• Fixes compiling with rustls on Android targets.

v0.13.0

Compare Source

• Breaking changes:
  • rustls is now the default TLS backend, instead of native-tls.
  • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
  • rustls-tls has been renamed to rustls.
  • rustls roots features removed, rustls-platform-verifier is used by default.
    • To use different roots, call tls_certs_only(your_roots).
  • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
  • query and form are now crate features, disabled by default.
  • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
• Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
  • For example, prefer tls_backend_rustls() over use_rustls_tls().

v0.12.28

• Fix compiling on Windows if TLS and SOCKS features are not enabled.

v0.12.27

• Add ClientBuilder::windows_named_pipe(name) option that will force all requests over that Windows Named Piper.

v0.12.26

• Fix sending Accept-Encoding header only with values configured with reqwest, regardless of underlying tower-http config.

v0.12.25

• Add Error::is_upgrade() to determine if the error was from an HTTP upgrade.
• Fix sending Proxy-Authorization if only username is configured.
• Fix sending Proxy-Authorization to HTTPS proxies when the target is HTTP.
• Refactor internal decompression handling to use tower-http.

v0.12.24

• Refactor cookie handling to an internal middleware.
• Refactor internal random generator.
• Refactor base64 encoding to reduce a copy.
• Documentation updates.

v0.12.23

• Add ClientBuilder::unix_socket(path) option that will force all requests over that Unix Domain Socket.
• Add ClientBuilder::retry(policy) and reqwest::retry::Builder to configure automatic retries.
• Add ClientBuilder::dns_resolver2() with more ergonomic argument bounds, allowing more resolver implementations.
• Add http3_* options to blocking::ClientBuilder.
• Fix default TCP timeout values to enabled and faster.
• Fix SOCKS proxies to default to port 1080
• (wasm) Add cache methods to RequestBuilder.

v0.12.22

• Fix socks proxies when resolving IPv6 destinations.

v0.12.21

• Fix socks proxy to use socks4a:// instead of socks4h://.
• Fix Error::is_timeout() to check for hyper and IO timeouts too.
• Fix request Error to again include URLs when possible.
• Fix socks connect error to include more context.
• (wasm) implement Default for Body.

v0.12.20

• Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
• Fix proxy headers only using the first matched proxy.
• (wasm) Fix re-adding Error::is_status().

v0.12.19

• Fix redirect that changes the method to GET should remove payload headers.
• Fix redirect to only check the next scheme if the policy action is to follow.
• (wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

• Fix compilation when socks enabled without TLS.

v0.12.17

• Fix compilation on macOS.

v0.12.16

• Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
• Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
• Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
• Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
• Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
• Add Proxy::headers() to add extra headers that should be sent to a proxy.
• Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
• Fix HTTP/3 to support streaming request bodies.
• (wasm) Fix null bodies when calling Response::bytes_stream().

v0.12.15

• Fix Windows to support both ProxyOverride and NO_PROXY.
• Fix http3 to support streaming response bodies.
• Fix http3 dependency from public API misuse.

v0.12.14

• Fix missing fetch_mode_no_cors(), marking as deprecated when not on WASM.

v0.12.13

• Add Form::into_reader() for blocking multipart forms.
• Add Form::into_stream() for async multipart forms.
• Add support for SOCKS4a proxies.
• Fix decoding responses with multiple zstd frames.
• Fix RequestBuilder::form() from overwriting a previously set Content-Type header, like the other builder methods.
• Fix cloning of request timeout in blocking::Request.
• Fix http3 synchronization of connection creation, reducing unneccesary extra connections.
• Fix Windows system proxy to use ProxyOverride as a NO_PROXY value.
• Fix blocking read to correctly reserve and zero read buffer.
• (wasm) Add support for request timeouts.
• (wasm) Fix Error::is_timeout() to return true when from a request timeout.

v0.12.12

• (wasm) Fix compilation by not compiler tokio/time on WASM.

v0.12.11

• Fix decompression returning an error when HTTP/2 ends with an empty data frame.

v0.12.10

• Add ClientBuilder::connector_layer() to allow customizing the connector stack.
• Add ClientBuilder::http2_max_header_list_size() option.
• Fix propagating body size hint (content-length) information when wrapping bodies.
• Fix decompression of chunked bodies so the connections can be reused more often.

v0.12.9

• Add tls::CertificateRevocationLists support.
• Add crate features to enable webpki roots without selecting a rustls provider.
• Fix connection_verbose() to output read logs.
• Fix multipart::Part::file() to automatically include content-length.
• Fix proxy to internally no longer cache system proxy settings.

v0.12.8

• Add support for SOCKS4 proxies.
• Add multipart::Form::file() method for adding files easily.
• Add Body::wrap() to wrap any http_body::Body type.
• Fix the pool configuration to use a timer to remove expired connections.

v0.12.7

• Revert adding impl Service<http::Request<_>> for Client.

v0.12.6

• Add support for danger_accept_invalid_hostnames for rustls.
• Add impl Service<http::Request<Body>> for Client and &'_ Client.
• Add support for !Sync bodies in Body::wrap_stream().
• Enable happy eyeballs when hickory-dns is used.
• Fix Proxy so that HTTP(S)_PROXY values take precedence over ALL_PROXY.
• Fix blocking::RequestBuilder::header() from unsetting sensitive on passed header values.

v0.12.5

• Add blocking::ClientBuilder::dns_resolver() method to change DNS resolver in blocking client.
• Add http3 feature back, still requiring reqwest_unstable.
• Add rustls-tls-no-provider Cargo feature to use rustls without a crypto provider.
• Fix Accept-Encoding header combinations.
• Fix http3 resolving IPv6 addresses.
• Internal: upgrade to rustls 0.23.

v0.12.4

• Add zstd support, enabled with zstd Cargo feature.
• Add ClientBuilder::read_timeout(Duration), which applies the duration for each read operation. The timeout resets after a successful read.

v0.12.3

• Add FromStr for dns::Name.
• Add ClientBuilder::built_in_webpki_certs(bool) to enable them separately.
• Add ClientBuilder::built_in_native_certs(bool) to enable them separately.
• Fix sending content-length: 0 for GET requests.
• Fix response body content_length() to return value when timeout is configured.
• Fix ClientBuilder::resolve() to use lowercase domain names.

v0.12.2

• Fix missing ALPN when connecting to socks5 proxy with rustls.
• Fix TLS version limits with rustls.
• Fix not detected ALPN h2 from server with native-tls.

v0.12.1

• Fix ClientBuilder::interface() when no TLS is enabled.
• Fix TlsInfo::peer_certificate() being truncated with rustls.
• Fix panic if http2 feature disabled but TLS negotiated h2 in ALPN.
• Fix Display for Error to not include its source error.

GREsau/schemars (schemars)

v1.2.2

Compare Source

• Update to syn 3 in schemars_derive

bug-ops/scrape-rs (scrape-core)

v0.2.10

Compare Source

Fixed

• Rewrite if let/else blocks in DescendantsIter::next, find_close_tag, and
  find_self_close using the ? operator (clippy::question_mark, newly enforced
  by an updated Rust toolchain)
• Correct Node.js package name in documentation (@scrape-rs/scrape → @fast-scrape/node)
  in installation and quick-start guides

Dependencies

• Bump scraper 0.26 → 0.27
• Bump napi 3.10.3 → 3.12.0, napi-derive 3.5.9 → 3.6.1, napi-build 2.3.2 → 2.4.0
  (across several rust-minor group updates)
• Bump clap 4.6.1 → 4.6.4, regex 1.12.4 → 1.13.1, serde 1.0.228 → 1.0.229,
  serde_json 1.0.150 → 1.0.151, thiserror 2.0.18 → 2.0.19, syn 2.0.118 → 3.0.3,
  anyhow 1.0.103 → 1.0.104, memchr 2.8.2 → 2.8.3
• Bump @napi-rs/cli 3.7.2 → 3.7.3, @emnapi/core 1.11.2 → 1.11.3,
  @emnapi/runtime 1.11.2 → 1.11.3 (Node.js package)
• Bump @biomejs/biome 2.5.2 → 2.5.6 (Node.js and WASM packages)
• Bump CI actions: actions/labeler 6 → 7, actions/setup-python 6 → 7,
  actions/setup-node 6 → 7, lewagon/wait-on-check-action 1.8.1 → 1.9.0

dtolnay/thiserror (thiserror)

v2.0.19

Compare Source

• Update to syn 3

toml-rs/toml (toml)

v1.1.4

Compare Source

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[bug-ops]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --workspace
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `zeph-llm v0.22.3 (/tmp/renovate/repos/github/bug-ops/zeph/crates/zeph-llm)`
    ... which satisfies path dependency `zeph-llm` (locked to 0.22.3) of package `zeph-acp v0.22.3 (/tmp/renovate/repos/github/bug-ops/zeph/crates/zeph-acp)`
versions that meet the requirements `^0.13.4` are: 0.13.4

package `zeph-llm` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-no-provider, socks, stream, system-proxy, zstd


failed to select a version for `reqwest` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path crates/zeph-llm/Cargo.toml --workspace
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `zeph-llm v0.22.3 (/tmp/renovate/repos/github/bug-ops/zeph/crates/zeph-llm)`
    ... which satisfies path dependency `zeph-llm` (locked to 0.22.3) of package `zeph-acp v0.22.3 (/tmp/renovate/repos/github/bug-ops/zeph/crates/zeph-acp)`
versions that meet the requirements `^0.13.4` are: 0.13.4

package `zeph-llm` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-no-provider, socks, stream, system-proxy, zstd


failed to select a version for `reqwest` which could resolve this conflict

File name: fuzz/Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path fuzz/Cargo.toml --workspace
    Updating crates.io index
error: failed to select a version for `reqwest`.
    ... required by package `zeph-llm v0.22.3 (/tmp/renovate/repos/github/bug-ops/zeph/crates/zeph-llm)`
    ... which satisfies path dependency `zeph-llm` of package `zeph-index v0.22.3 (/tmp/renovate/repos/github/bug-ops/zeph/crates/zeph-index)`
    ... which satisfies path dependency `zeph-index` of package `zeph-fuzz v0.0.0 (/tmp/renovate/repos/github/bug-ops/zeph/fuzz)`
versions that meet the requirements `^0.13.4` are: 0.13.4

package `zeph-llm` depends on `reqwest` with feature `rustls-tls` but `reqwest` does not have that feature.
help: available features: __native-tls, __native-tls-alpn, __rustls, __rustls-aws-lc-rs, __tls, blocking, brotli, charset, cookies, default, default-tls, deflate, form, gzip, hickory-dns, http2, http3, json, multipart, native-tls, native-tls-no-alpn, native-tls-vendored, native-tls-vendored-no-alpn, query, rustls, rustls-no-provider, socks, stream, system-proxy, zstd


failed to select a version for `reqwest` which could resolve this conflict