[dependabot]

Bumps the rust group with 3 updates: xattr, rustix and jiff.

Updates xattr from 1.6.1 to 1.7.0

Release notes

Sourced from xattr's releases.

Release v1.7.0

• Fix to support a breaking change in rustix 1.1.6.
• Exclude CI scripts from the published package.

Commits

• c0d3de0 Release 1.7.0
• e348b03 Refresh apt metadata in Android CI (#132)
• 794a4fb Fix xattr after rustix 1.1.6. (#127)
• 75d6138 build(deps): bump dtolnay/rust-toolchain (#116)
• 781f42a build(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.2 (#115)
• 0279bbc build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#112)
• 7f3adc4 build(deps): bump vmactions/midnightbsd-vm from 1.0.4 to 1.0.5 (#119)
• 19aa45c build(deps): bump vmactions/netbsd-vm from 1.4.6 to 1.4.7 (#120)
• dfbf01e build(deps): bump vmactions/netbsd-vm from 1.4.3 to 1.4.6 (#117)
• fdb7840 build(deps): bump vmactions/freebsd-vm from 1.5.2 to 1.5.3 (#118)
• Additional commits viewable in compare view

Updates rustix from 1.1.5 to 1.1.6

Commits

• 4a563ad chore: Release rustix version 1.1.6
• 8e6aaa6 Merge commit from fork
• 4686873 fix: expose additional termios output mode flags (#1709)
• c9ad9d3 fix(net): don't trust cmsg_len past the end of a truncated control buffer (...
• 98358af Avoid constructing a zero Pid in tcgetpgrp on non-Linux targets (#1710)
• 664aeae fix(net): use IPPROTO_IPV6 for IPV6_MULTICAST_HOPS (#1692)
• bf78ee6 freebsd: Fix cfg gates for FreeBSD 12 (#1707)
• b3d81bd Fix fallocate on Apple platforms. (#1708)
• 915ab6f fix(fs): Set proper inotify WatchFlags values on libc backend (#1714)
• 52d5db7 Use 32-bit UID/GID syscalls on arm, sparc, and x86 (#1716)
• Additional commits viewable in compare view

Updates jiff from 0.2.38 to 0.2.39

Changelog

Sourced from jiff's changelog.

0.2.39 (2026-11-02)

This release gathers a smattering of performance improvements and bug fixes.

Enhancements:

• #646: Added optional serde support to jiff-sqlx.
• #659: Update the Windows time zone names.
• #665: Avoid allocating IANA name during a Zoned::strftime call.
• #666: Avoid a second offset lookup when adding calendar units.

Bug fixes:

• #645: Fix Timestamp::from_nanosecond panic on out-of-range input.
• #649: Fix optional deserializers dropping null under #[serde(flatten)].
• #652: Tweak "lossless" wording for round-tripping Zoned values.
• #654: Fixes a panic when printing some very large durations.
• #660: Fixes a bug where parsing some very large spans gave an incorrect result.
• #668: Fixes a panic in Span::total for a zero span with a calendar unit.

Commits

• 5d0c3cf ci: avoid cargo publish --workspace
• 354aa65 ci: revert to previous state
• c17f9b4 ci: debug, part 1
• 3a7d664 release: 0.2.39
• 902feab github: add trusted publishing workflow
• 88ec008 test: make some small tweaks to the test scripts
• 76458be zoned: be more precise about "lossless" claim
• 5a76d82 sqlx: added optional Serde support
• 9ea4c2b zic: correct field name in zic AT parse error
• 9cfd78f core: fix Timestamp::from_nanosecond panic on out-of-range input
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[wow]

@dependabot rebase

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.