fix(deps): update all - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
bytes	workspace.dependencies	minor	1.10.1 -> 1.11.0
clap	workspace.dependencies	patch	4.5.47 -> 4.5.53
ctor	dependencies	minor	0.5 -> 0.6
hyper (source)	workspace.dependencies	minor	1.7.0 -> 1.8.1
hyper-util (source)	workspace.dependencies	patch	0.1.16 -> 0.1.18
json-patch	dependencies	minor	4.0.0 -> 4.1.0
quick-xml	workspace.dependencies	patch	0.38.3 -> 0.38.4
regex	workspace.dependencies	minor	1.11.2 -> 1.12.2
reqwest	dependencies	patch	0.12.23 -> 0.12.24
rustls	workspace.dependencies	patch	0.23.31 -> 0.23.35
rustls-platform-verifier	workspace.dependencies	patch	0.6.1 -> 0.6.2
serde_json	workspace.dependencies	patch	1.0.144 -> 1.0.145
tempfile (source)	dev-dependencies	minor	3.22.0 -> 3.23.0
tokio (source)	workspace.dependencies	minor	1.47.1 -> 1.48.0
version-compare (source)	workspace.dependencies	patch	0.2.0 -> 0.2.1

---

Release Notes

tokio-rs/bytes (bytes)

v1.11.0

Compare Source

• Bump MSRV to 1.57 (#​788)

Fixed

• fix: BytesMut only reuse if src has remaining (#​803)
• Specialize BytesMut::put::<Bytes> (#​793)
• Reserve capacity in BytesMut::put (#​794)
• Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#​795)

Internal changes

• Guarantee address in slice() for empty slices. (#​780)
• Rename Vtable::to_* -> Vtable::into_* (#​776)
• Fix latest clippy warnings (#​787)
• Ignore BytesMut::freeze doctest on wasm (#​790)
• Move drop_fn of from_owner into vtable (#​801)

clap-rs/clap (clap)

v4.5.53

Compare Source

v4.5.52

Compare Source

Fixes

• Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup

v4.5.51

Compare Source

Fixes

• (help) Correctly calculate padding for short flags that take a value
• (help) Don't panic on short flags using ArgAction::Count

v4.5.50

Compare Source

Features

• Accept Cow where String and &str are accepted

v4.5.49

Compare Source

Fixes

• (help) Correctly wrap when ANSI escape codes are present

v4.5.48

Compare Source

Documentation

• Add a new CLI Concepts document as another way of framing clap
• Expand the typed_derive cookbook entry

hyperium/hyper (hyper)

v1.8.1

Compare Source

Bug Fixes

• http1: fix consuming extra CPU from previous change (#​3977) (4492f31e)

v1.8.0

Compare Source

Bug Fixes

• http1: fix rare missed write wakeup on connections (#​3952) (2377b893)
• http2: fix internals of HTTP/2 CONNECT upgrades (#​3967) (58e0e7dc, closes #​3966)

Features

• rt: add Timer::now() method to allow overriding the instant returned (#​3965) (5509ebe6)

Breaking Changes

• The HTTP/2 client connection no longer allows an executor
  that can not spawn itself.

  This was an oversight originally. The client connection will now include spawning
  a future that keeps a copy of the executor to spawn other futures. Thus, if it is
  !Send, it needs to spawn !Send futures. The likelihood of executors that match
  the previously allowed behavior should be very remote.

  There is also technically a semver break in here, which is that the
  Http2ClientConnExec trait no longer dyn-compatible, because it now expects to
  be Clone. This should not break usage of the conn builder, because it already
  separately had E: Clone bounds. If someone were using dyn Http2ClientConnExec,
  that will break. However, there is no purpose for doing so, and it is not usable
  otherwise, since the trait only exists to propagate bounds into hyper. Thus, the
  breakage should not affect anyone.
  (58e0e7dc)

hyperium/hyper-util (hyper-util)

v0.1.18

Compare Source

• Fix rt::TokioTimer to support Tokio's paused time.
• Fix client::proxy::match::Matcher to parse auth without passwords.

v0.1.17

Compare Source

• Fix legacy::Client to allow absolute-form URIs when Connected::proxy(true) is passed and the scheme is https.

idubrov/json-patch (json-patch)

v4.1.0

Compare Source

tafia/quick-xml (quick-xml)

v0.38.4

Compare Source

New Features

• #​353: Add ability to serialize textual content as CDATA sections in Serializer.
  Everywhere where the text node may be created, a CDATA section(s) could be produced instead.
  See the new Serializer::text_format() method.

Bug Fixes

• #​912: Fix deserialization of numbers, booleans and characters that is space-wrapped, for example
  <int> 42 </int>. That space characters are usually indent added during serialization and
  other XML serialization libraries trims them

Misc Changes

• #​901: Fix running tests on 32-bit architecture
• #​909: Avoid some allocations in the Serializer

rust-lang/regex (regex)

v1.12.2

Compare Source

===================
This release fixes a cargo doc breakage on nightly when --cfg docsrs is
enabled. This caused documentation to fail to build on docs.rs.

Bug fixes:

• BUG #​1305:
  Switches the doc_auto_cfg feature to doc_cfg on nightly for docs.rs builds.

v1.12.1

Compare Source

===================
This release makes a bug fix in the new regex::Captures::get_match API
introduced in 1.12.0. There was an oversight with the lifetime parameter
for the Match returned. This is technically a breaking change, but given
that it was caught almost immediately and I've yanked the 1.12.0 release,
I think this is fine.

v1.12.0

Compare Source

===================
This release contains a smattering of bug fixes, a fix for excessive memory
consumption in some cases and a new regex::Captures::get_match API.

Improvements:

• FEATURE #​1146:
  Add Capture::get_match for returning the overall match without unwrap().

Bug fixes:

• BUG #​1083:
  Fixes a panic in the lazy DFA (can only occur for especially large regexes).
• BUG #​1116:
  Fixes a memory usage regression for large regexes (introduced in regex 1.9).
• BUG #​1195:
  Fix universal start states in sparse DFA.
• BUG #​1295:
  Fixes a panic when deserializing a corrupted dense DFA.
• BUG 8f5d9479:
  Make regex_automata::meta::Regex::find consistently return None when
  WhichCaptures::None is used.

v1.11.3

Compare Source

===================
This is a small patch release with an improvement in memory usage in some
cases.

Improvements:

• BUG #​1297:
  Improve memory usage by trimming excess memory capacity in some spots.

seanmonstar/reqwest (reqwest)

v0.12.24

Compare Source

• Refactor cookie handling to an internal middleware.
• Refactor internal random generator.
• Refactor base64 encoding to reduce a copy.
• Documentation updates.

serde-rs/json (serde_json)

v1.0.145

Compare Source

• Raise serde version requirement to >=1.0.220

Stebalien/tempfile (tempfile)

v3.23.0

Compare Source

• Remove need for the "nightly" feature to compile with "wasip2".

tokio-rs/tokio (tokio)

v1.48.0: Tokio v1.48.0

Compare Source

1.48.0 (October 14th, 2025)

The MSRV is increased to 1.71.

Added

• fs: add File::max_buf_size (#​7594)
• io: export Chain of AsyncReadExt::chain (#​7599)
• net: add SocketAddr::as_abstract_name (#​7491)
• net: add TcpStream::quickack and TcpStream::set_quickack (#​7490)
• net: implement AsRef<Self> for TcpStream and UnixStream (#​7573)
• task: add LocalKey::try_get (#​7666)
• task: implement Ord for task::Id (#​7530)

Changed

• deps: bump windows-sys to version 0.61 (#​7645)
• fs: preserve max_buf_size when cloning a File (#​7593)
• macros: suppress clippy::unwrap_in_result in #[tokio::main] (#​7651)
• net: remove PollEvented noise from Debug formats (#​7675)
• process: upgrade Command::spawn_with to use FnOnce (#​7511)
• sync: remove inner mutex in SetOnce (#​7554)
• sync: use UnsafeCell::get_mut in Mutex::get_mut and RwLock::get_mut (#​7569)
• time: reduce the generated code size of Timeout<T>::poll (#​7535)

Fixed

• macros: fix hygiene issue in join! and try_join! (#​7638)
• net: fix copy/paste errors in udp peek methods (#​7604)
• process: fix error when runtime is shut down on nightly-2025-10-12 (#​7672)
• runtime: use release ordering in wake_by_ref() even if already woken (#​7622)
• sync: close the broadcast::Sender in broadcast::Sender::new() (#​7629)
• sync: fix implementation of unused RwLock::try_* methods (#​7587)

Unstable

• tokio: use cargo features instead of --cfg flags for taskdump and io_uring (#​7655, #​7621)
• fs: support io_uring in fs::write (#​7567)
• fs: support io_uring with File::open() (#​7617)
• fs: support io_uring with OpenOptions (#​7321)
• macros: add local runtime flavor (#​7375, #​7597)

Documented

• io: clarify the zero capacity case of AsyncRead::poll_read (#​7580)
• io: fix typos in the docs of AsyncFd readiness guards (#​7583)
• net: clarify socket gets closed on drop (#​7526)
• net: clarify the behavior of UCred::pid() on Cygwin (#​7611)
• net: clarify the supported platform of set_reuseport() and reuseport() (#​7628)
• net: qualify that SO_REUSEADDR is only set on Unix (#​7533)
• runtime: add guide for choosing between runtime types (#​7635)
• runtime: clarify the behavior of Handle::block_on (#​7665)
• runtime: clarify the edge case of Builder::global_queue_interval() (#​7605)
• sync: clarify bounded channel panic behavior (#​7641)
• sync: clarify the behavior of tokio::sync::watch::Receiver (#​7584)
• sync: document cancel safety on SetOnce::wait (#​7506)
• sync: fix the docs of parking_lot feature flag (#​7663)
• sync: improve the docs of UnboundedSender::send (#​7661)
• sync: improve the docs of sync::watch (#​7601)
• sync: reword allocation failure paragraph in broadcast docs (#​7595)
• task: clarify the behavior of several spawn_local methods (#​7669)
• task: clarify the task ID reuse guarantees (#​7577)
• task: improve the example of poll_proceed (#​7586)

v1.47.2

Compare Source

timvisee/version-compare (version-compare)

v0.2.1

Compare Source

• Hide cfg(tarpaulin) warning during compilation

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.