chore(deps): Bump the cargo-compatible group across 1 directory with 8 updates

[dependabot]

Bumps the cargo-compatible group with 8 updates in the / directory:

Package	From	To
hyper-util	0.1.20	0.1.21
tauri	2.11.5	2.11.6
thiserror	2.0.20	2.0.21
syn	3.0.5	3.0.6
swc_ecma_ast	29.0.1	29.0.2
swc_ecma_codegen	32.0.2	32.0.3
swc_ecma_parser	45.1.3	45.1.5
encoding_rs	0.8.41	0.8.42

Updates hyper-util from 0.1.20 to 0.1.21

Release notes

Sourced from hyper-util's releases.

v0.1.21

Additions

• Add crate-level documentation. (#327)
• Add client::legacy::Builder::http2_header_table_size() method. (#274)
• Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
• Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
• Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
• Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

• Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
• Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
• Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
• Fix client::pool::cache to preserve readiness with clones. (#297)
• Fix client::pool::cache to wake its waiters in FIFO order. (#298)
• Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
• Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
• Fix client::proxy::matcher handling for IP wildcards. (#309)
• The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
• Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

... (truncated)

Changelog

Sourced from hyper-util's changelog.

0.1.21 (2026-09-24)

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

Additions

• Add crate-level documentation. (#327)
• Add client::legacy::Builder::http2_header_table_size() method. (#274)
• Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
• Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
• Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
• Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

• Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
• Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
• Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
• Fix client::pool::cache to preserve readiness with clones. (#297)
• Fix client::pool::cache to wake its waiters in FIFO order. (#298)
• Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
• Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
• Fix client::proxy::matcher handling for IP wildcards. (#309)
• The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
• Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

Commits

• 23a8689 v0.1.21
• cdb2346 doc(client/pool): add broken_intra_doc_links allowance (#326)
• 13b6110 chore(error): remove disabled hyper_util::error submodule (#325)
• b9ee451 docs(lib): add crate-level documentation (#327)
• d6b7d7e feat(rt/tracing): introduce tracing executors (#323)
• f2da915 feat(client): add HttpConnector::set_mark for SO_MARK (#303)
• 4dbd494 feat(rt): change TokioExecutor to not trace, add rt-tracing-exec-force feat...
• d480d9f fix(client): parse proxy CONNECT response with httparse (#315)
• 7e0958b chore(ci): simplify msrv check (#317)
• 0734568 chore(ci): update to actions/checkout@v7 (#316)
• Additional commits viewable in compare view

Updates tauri from 2.11.5 to 2.11.6

Release notes

Sourced from tauri's releases.

tauri v2.11.6

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1251 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1075 crate dependencies)
Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Crate:     paste

Version:   1.0.15

Warning:   unmaintained

Title:     paste - no longer maintained

Date:      2024-10-07

ID:        RUSTSEC-2024-0436

URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Crate:     rustls-pemfile

Version:   1.0.4

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustls-pemfile

Version:   2.2.0

Warning:   unmaintained

Title:     rustls-pemfile is unmaintained

Date:      2025-11-28

ID:        RUSTSEC-2025-0134

URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Crate:     rustybuzz

Version:   0.20.1

Warning:   unmaintained

Title:     rustybuzz is unmaintained

Date:      2026-07-11

ID:        RUSTSEC-2026-0206

URL:       https://rustsec.org/advisories/RUSTSEC-2026-0206
Crate:     ttf-parser

</tr></table>

... (truncated)

Commits

• 9452dde fix audit
• 7c2fe9f run covector version
• 7d71a8a add publish-hotfix workflow
• 5a87bab Merge commit from fork
• e901f1d Merge commit from fork
• See full diff in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• See full diff in compare view

Updates syn from 3.0.5 to 3.0.6

Release notes

Sourced from syn's releases.

3.0.6

• Fix parsing interpolated lifetime at statement start (#2082)

Commits

• 559cab5 Release 3.0.6
• 9088cad Merge pull request #2082 from dtolnay/lifetimevar
• 3eb43bb Fix parsing interpolated lifetime at statement start
• 7b2f6f9 Add regression test for issue 2081
• d55bcd2 Update test suite to nightly-2026-09-13
• 8e37bca Resolve non_kebab_case_bins warning
• 4dfd88f Update test suite to nightly-2026-09-06
• See full diff in compare view

Updates swc_ecma_ast from 29.0.1 to 29.0.2

Commits

• a95fcd3 chore: Publish crates with swc_core v29.0.2
• d6ac3b7 refactor(es/lexer): Remove faster path for \t (#10650)
• 1be2ca0 perf(es/parser): Optimize next_token (#10654)
• 9262a59 fix(es/parser): consider reseved ident in jsx name (#10647)
• bfd3bc5 fix(es/parser): Parse jsx entity (#10652)
• 72f51d4 chore: Update changelog
• 8ef50fd chore: Publish 1.12.4 with swc_core v29.0.1
• 0347f9f chore: Update changelog
• 9edfe83 chore: Publish 1.12.4-nightly-20250619.2 with swc_core v29.0.1
• See full diff in compare view

Updates swc_ecma_codegen from 32.0.2 to 32.0.3

Commits

• f8ff9be chore: Publish crates with swc_core v32.0.3
• 2b1ce3d feat(es/minifier): Enhance IIFE invoker for arrow functions (#10860)
• 5305486 feat(es/minifier): Drop unused rest paramters (#10857)
• See full diff in compare view

Updates swc_ecma_parser from 45.1.3 to 45.1.5

Commits

• See full diff in compare view

Updates encoding_rs from 0.8.41 to 0.8.42

Commits

• a155adc Increment version number to 0.8.42
• 6603aed Attach the multiversion crate to the std feature instead
• f718b07 docs: multiversion is compiled only with simd-accel
• 4434afa chore: pull in multiversion only when it is actually used
• 96138f6 Update main branch in URLs
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions