fix(deps): update rust

[bootc-bot]

This PR contains the following updates:

Package	Type	Update	Change
bcvk-qemu	dependencies	digest	c1adfa9 → 22a4223
clap_complete	dependencies	patch	4.6.2 → 4.6.5
composefs-ctl	workspace.dependencies	digest	e277075 → 552808a
hyper (source)	workspace.dependencies	minor	1.9.0 → 1.10.1
log	workspace.dependencies	patch	0.4.29 → 0.4.31
openssl	workspace.dependencies	patch	0.10.78 → 0.10.80
pin-project	dependencies	patch	1.1.11 → 1.1.13
rexpect	dependencies	patch	0.7.0 → 0.7.1
serde_json	workspace.dependencies	patch	1.0.149 → 1.0.150
shlex	workspace.dependencies	patch	2.0.0 → 2.0.1
tar	dependencies	patch	0.4.45 → 0.4.46
tokio (source)	workspace.dependencies	patch	1.52.1 → 1.52.3
uuid	dependencies	patch	1.23.1 → 1.23.2

---

Release Notes

clap-rs/clap (clap_complete)

v4.6.5

Compare Source

v4.6.4

Compare Source

v4.6.3

Compare Source

hyperium/hyper (hyper)

v1.10.1

Compare Source

Bug Fixes

• http1: fix busy loop when peer half-closes and open body (#​4086) (c6cb906f, closes #​4085)

v1.10.0

Compare Source

Bug Fixes

• http1:
  • send error when dispatcher is dropped mid-body (#​4069) (b7a679ba, closes #​3995, #​4016)
  • fix reading large bodies on 32-bit systems (#​4056) (b12f6525, closes #​4055)
  • fix rare missed write wakeup on connections v2 (743a3ba0)
• http2:
  • do not reserve capacity before body data is available (#​4061) (99f24345, closes #​4003)
  • reading trailers shouldn't propagate NO_ERROR from early response (#​3998) (e5ad96b1)

Features

• http2:
  • add reset_stream_duration() client option (#​4068) (156a6f6a, closes #​2599)
  • Add 'header_table_size()' method to server builder (#​4062) (6c9182c4)

rust-lang/log (log)

v0.4.31

Compare Source

v0.4.30

Compare Source

What's Changed

• Support capturing of std::net types by @​KodrAus in #​724

New Contributors

• @​V0ldek made their first contribution in #​720
• @​woodruffw made their first contribution in #​723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

• MSRV is bumped to 1.71.0 in #​723

rust-openssl/rust-openssl (openssl)

v0.10.80

Compare Source

What's Changed

• Prefer Homebrew openssl@​4 and stop looking for openssl@​1.1 by @​alex in #​2633
• Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-padding by @​alex in #​2638
• Release openssl 0.10.80 and openssl-sys 0.9.116 by @​alex in #​2639

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.79...openssl-v0.10.80

v0.10.79

Compare Source

What's Changed

• Bump actions/cache from 5.0.4 to 5.0.5 by @​dependabot[bot] in #​2610
• Try to fix OpenSSL 1.1.0l download by @​botovq in #​2614
• Require &mut BigNumContextRef for EcPointRef mul/invert by @​alex in #​2615
• Fix UB in EcGroupRef::generator on groups without a generator by @​alex in #​2617
• Replace use libc::*; with targeted imports in openssl-sys by @​alex in #​2618
• Add PKeyRef::is_a and KeyType for name-based key identification by @​reaperhulk in #​2619
• Add PKey::{public,private}_key_from_raw_bytes_ex by @​reaperhulk in #​2620
• Bump MSRV to 1.80 by @​reaperhulk in #​2622
• Drop once_cell in favor of std::sync::{LazyLock, OnceLock} by @​reaperhulk in #​2623
• Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import by @​reaperhulk in #​2621
• parallelize more builds in CI for cold caches by @​reaperhulk in #​2625
• Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction by @​reaperhulk in #​2626
• Fix process abort when verify/PSK callbacks fire after SSL_CTX swap by @​alex in #​2624
• Bind OSSL_PARAM_modified and use it for seed_into by @​reaperhulk in #​2628
• Add PkeyCtxRef::set_context_string for ML-DSA by @​reaperhulk in #​2629
• Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders by @​alex in #​2631
• Fix output buffer overflow for AES key-wrap-with-padding ciphers by @​alex in #​2630
• Release openssl 0.10.79 and openssl-sys 0.9.115 by @​reaperhulk in #​2632

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.78...openssl-v0.10.79

taiki-e/pin-project (pin-project)

v1.1.13

Compare Source

• Suppress clippy::missing_trait_methods lint in generated code.

v1.1.12

Compare Source

• Documentation improvements.

rust-cli/rexpect (rexpect)

v0.7.1

Compare Source

Fixes

• Avoid char boundary panics with NBReader::try_read

serde-rs/json (serde_json)

v1.0.150

Compare Source

• Reject non-string enum object keys (#​1324, thanks @​puneetdixit200)

comex/rust-shlex (shlex)

v2.0.1

• Fixes a compile error when building the documentation.

composefs/tar-rs (tar)

v0.4.46

Compare Source

Security

• archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm) by @​cgwalters in #​454

See also GHSA-3cv2-h65g-fgmm

Other changes

• ci: Fix and re-enable reverse dependency testing by @​cgwalters in #​444
• Update astral-tokio-tar requirement from 0.5 to 0.6 by @​dependabot[bot] in #​446
• Update some links by @​atouchet in #​445
• Add support of absolute paths by @​zxvfc in #​426
• docs: Expand notes on concurrent mutations and following symlinks by @​cgwalters in #​453
• Update repo links by @​cgwalters in #​451
• ci: Add crates.io trusted publishing workflow by @​cgwalters in #​456
• Release 0.4.46 by @​cgwalters in #​455

New Contributors

• @​dependabot[bot] made their first contribution in #​446
• @​atouchet made their first contribution in #​445
• @​zxvfc made their first contribution in #​426

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

tokio-rs/tokio (tokio)

v1.52.3: Tokio v1.52.3

Compare Source

1.52.3 (May 8th, 2026)

Fixed

• sync: fix underflow in mpsc channel len() (#​8062)
• sync: notify receivers in mpsc OwnedPermit::release() method (#​8075)
• sync: require that an RwLock has max_readers != 0 (#​8076)
• sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#​8074)

v1.52.2: Tokio v1.52.2

Compare Source

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#​7431), due to its performance impact. (#​8100)

uuid-rs/uuid (uuid)

v1.23.2

Compare Source

What's Changed

• Improve error messages for ambiguous formats by @​KodrAus in #​882
• Prepare for 1.23.2 release by @​KodrAus in #​883

Full Changelog: uuid-rs/uuid@v1.23.1...v1.23.2

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.