build(deps): bump the rust-dependencies group with 4 updates

[dependabot]

Bumps the rust-dependencies group with 4 updates: bincode, ureq, rand and notify-rust.

Updates bincode from 1.3.3 to 3.0.0

Commits

• See full diff in compare view

Updates ureq from 2.12.1 to 3.4.2

Changelog

Sourced from ureq's changelog.

3.4.2

• Bump ureq-proto to 0.6.3 (fixes network-path references in redirects)
• Bypass pooling for request connection settings incompatible with the Agent #1201
• Try the next resolved address on unreachable/unavailable connect errors #1195

3.4.1

• Bump ureq-proto to 0.6.2 (fixes to parsing and headers) #1199
• Do not pool connections with unconsumed buffered input #1198
• Fix timeout budgets restarting and applying to later phases #1194
• Complete TLS handshake during connect so timeout_connect covers it #1193
• Speed up read_json for responses with a known, small body size #1191

3.4.0

• Seal RequestExt (technically breaking) #1189
• Send canonical Basic authentication scheme to CONNECT proxies #1185
• Establish target TLS through HTTPS CONNECT proxies #1183
• Update rustls-platform-verifier to 0.7.0 #1174
• Fix pooled connections never aging out according to max_idle_age #1172
• Strip brackets from IPv6-literal hosts before TLS SNI/ServerName #1171
• RequestExt::middleware_config for conf inside middleware #1169

3.3.0

• Bump MSRV 1.71 -> 1.85, edition 2024 #1167

3.2.1

• Switch archived utf-8 crate for utf8-zero #1163

3.2.0

• Strip Content-Encoding/Content-Length headers after decompression #1156
• Timeout per resolved ip for try_connect #1152
• Fix body header bug on redirect #1140
• ureq-proto 0.5.3 to fix unsolicited 100-continue #1139
• Make socks5:// locally resolve before calling proxy #1138
• Add socks5h:// which DOESN'T locally resolve before calling proxy #1138

3.1.4

• Set content-type with new Multipart form #1133

3.1.3

• Fix short read with multi-byte charset #1131
• Replace rustls-pemfile usage with rustls-pki-types #1122
• Support for env NO_PROXY and proxy config #1118

... (truncated)

Commits

• 2e9ef24 3.4.2
• b983841 Bump ureq-proto to 0.6.3
• 075a1d7 Respect request connection settings when pooling
• fb634de Try the next resolved address when a connect fails for that address only (#1195)
• cf4a3cd 3.4.1
• 9559d7b Bump ureq-proto to 0.6.2 (#1199)
• 9eb654c Do not pool a connection with unconsumed input (#1198)
• 5b81318 Anchor timeout budgets to phase boundaries (#1194)
• d480543 Complete TLS handshakes while connecting (#1193)
• 662410b Buffer read_json into memory when Content-Length is below the limit (#1191)
• Additional commits viewable in compare view

Updates rand from 0.8.8 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

• Document panic behavior of make_rng and add #[track_caller] (#1761)
• Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

• The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
• Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
• Use Edition 2024 and MSRV 1.85 (#1653)
• Let Fill be implemented for element types, not sliceable types (#1652)
• Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
• Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
• Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
• Remove Clone support for StdRng, ReseedingRng (#1677)
• Use postcard instead of bincode to test the serde feature (#1693)
• Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
• Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
• Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

• Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
• Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
• Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
• Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

• Removed ReseedingRng (#1722)
• Removed unused feature "nightly" (#1732)
• Removed feature small_rng (#1732)

... (truncated)

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

Updates notify-rust from 4.18.0 to 4.18.1

Release notes

Sourced from notify-rust's releases.

v4.18.1

What's Changed

• ci: check convco version by @​hoodie in hoodie/notify-rust#287
• break up modules by @​hoodie in hoodie/notify-rust#290
• fix(deps): update rust crate winrt-notification to 0.8 by @​renovate[bot] in hoodie/notify-rust#288

Full Changelog: hoodie/notify-rust@v4.18.0...v4.18.1

Changelog

Sourced from notify-rust's changelog.

v4.18.1 (2026-09-27)

Fixes

• deps: update rust crate winrt-notification to 0.8 (ecf7bfa)

Commits

• 785d836 chore: bump version
• 9406c39 Merge pull request #288 from hoodie/renovate/winrt-notification-0.x
• ecf7bfa fix(deps): update rust crate winrt-notification to 0.8
• a43900e Merge pull request #290 from hoodie/feature/break-up-modules
• d17a2a3 chore: formatting and clippy
• 8e2acf1 refactor: move handles into modules
• 357d646 refactor: move bus modules into files
• 26f658a Merge pull request #287 from hoodie/feature/ci-release
• 9e1d3b2 ci: check convco version
• 2780c64 ci: fix tag check again
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions