chore(deps): bump the rust-dependencies group across 1 directory with 6 updates

[dependabot]

Bumps the rust-dependencies group with 6 updates in the / directory:

Package	From	To
blake3	1.8.6	1.8.7
toml	1.1.4+spec-1.1.0	1.1.5+spec-1.1.0
rustls	0.23.43	0.23.44
yaml-rust2	0.11.0	0.12.0
zstd	0.13.3	0.14.0
rcgen	0.14.9	0.14.10

Updates blake3 from 1.8.6 to 1.8.7

Release notes

Sourced from blake3's releases.

1.8.7

version 1.8.7

Changes since 1.8.6:

• Remove the arrayref dependency. Unfortunately the crates.io owner was compromised.

Commits

• f3149ec version 1.8.7
• b65bcb7 add #[allow(deprecated)] annotations to fix nightly/beta warnings
• 483a220 fix warnings related to not using MAX constants
• ba02549 Codex: remove arrayref
• See full diff in compare view

Updates toml from 1.1.4+spec-1.1.0 to 1.1.5+spec-1.1.0

Commits

• e93ed4e chore: Release
• d23436d docs: Update changelog
• 151afcd fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat (#1211)
• 26a4050 fix(de): Ensure DeValue::make_owned includes DeInteger/DeFloat
• 232f136 chore(deps): Update Prek to v0.5.1 (#1209)
• 9ee4b4e chore(deps): Update crate-ci/typos digest to 4d9c206 (#1208)
• 525f352 chore(deps): Update crate-ci/committed digest to 800a04e (#1207)
• 46043ed chore(deps): Update crate-ci/typos digest to 4d9c206
• c00e894 chore(deps): Update crate-ci/committed digest to 800a04e
• 1ae0158 chore(deps): Update Prek to v0.5.0 (#1205)
• Additional commits viewable in compare view

Updates rustls from 0.23.43 to 0.23.44

Commits

• 64ad386 Bump version to 0.23.44
• 1efbf66 bogo: remove PostQuantum setup
• e78162f aws-lc-rs: add support for ML-DSA signatures
• d880772 bogo: extract Options::provider() helper
• 87201d6 bogo: force all callers to get provider from Options
• 93657e3 server: limit 1.2 certificate requests to 1.2-compatible signature schemes
• bbd3c9a client: avoid sending 1.3-only signature schemes if no cipher suites configured
• eb57688 tls12: require known signature algorithm
• e7a9cef tls12: send illegal_parameter alert for kx signed with wrong algorithm
• 06a546d bogo: take latest
• Additional commits viewable in compare view

Updates yaml-rust2 from 0.11.0 to 0.12.0

Changelog

Sourced from yaml-rust2's changelog.

v0.12.0

Changes:

• The minimum supported Rust version is now v1.85.0.
• hashlink was upgraded to v0.12.1.
• quickcheck (dev-only dependency) was upgraded to v1.1.0.
• toml (dev-only dependency) was upgraded to v1.1.4.
• (#79) corrected the documentation for Marker::index.

v0.11.1

Changes:

• (#78) Fix parsing short YAML documents to avoid infinite loops.

Commits

• 0ed0fc7 yaml-rust v0.12.0
• 0534dad scanner: correct the docstring that referenced chars
• 3088af9 Merge pull request #77 from renovate/actions-checkout-7.x
• 37d313f deps: upgrade hashlink to v0.12.1
• 5cbacee bench_compare: update toml to v1.1.4
• 1fc3b71 cargo: update quickcheck to v1.1.0
• 69a602d scanner: apply clippy fixes
• fd9acf6 cargo: bump the MSRV to 1.74.0
• 8316be6 yaml-rust2 v0.11.1
• 4d61e99 CHANGELOG: update for v0.11.1
• Additional commits viewable in compare view

Updates zstd from 0.13.3 to 0.14.0

Commits

• 648acb4 Avoid let...else in the seekable callbacks
• e1152c1 Bump versions for the next release
• 7caed6e Derive the usual traits on ResetDirective
• bf7b1f7 Refuse to reuse a context an error may have left undefined
• 1565618 Check the target, not the host, for MSVC
• 8315a62 Return Ok(0) from Read::read for an empty buffer
• a7cfa93 Keep the std gate on the Cursor WriteBuf impl
• 9bf1692 Say why the Send and Sync impls hold
• 681bcc3 Don't truncate Cursor positions on 32-bit targets
• d5a1fdd Don't hand out a &mut Seekable from AdvancedSeekable
• Additional commits viewable in compare view

Updates rcgen from 0.14.9 to 0.14.10

Release notes

Sourced from rcgen's releases.

0.14.10

What's Changed

• Spec compliance bug fixes by @​cpu in rustls/rcgen#445
• Take advantage of stable ML-DSA in aws-lc-rs by @​djc in rustls/rcgen#447

Commits

• f4a3b16 Bump version to 0.14.10
• dea3d4d Upgrade to botan 0.13
• 788b093 Upgrade to pem 4
• 7ce21f4 Take advantage of stable ML-DSA in aws-lc-rs
• e2dba45 Remove unused RSASSA-PSS signature algorithm
• 37070de Omit reasonCode unspecified(0) from CRL entry extensions
• b247a87 Write extensions for certs that only set KeyUsage or CRLDP
• 85eafdd Reject empty CRL distribution point URIs
• 3a99b50 Encode CRL invalidityDate as GeneralizedTime
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: cce6ee0a-3b47-4bd9-9fe8-1362eb52aa4e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}