chore(deps)(deps): bump the rust-dependencies group with 6 updates

[dependabot]

Bumps the rust-dependencies group with 6 updates:

Package	From	To
clap	4.6.0	4.6.1
pulldown-cmark	0.13.1	0.13.3
uuid	1.22.0	1.23.1
axum	0.8.8	0.8.9
open	5.3.3	5.3.4
lettre	0.11.19	0.11.21

Updates clap from 4.6.0 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

• (derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

• (derive) Ensure rebuilds happen when an read env variable is changed

Commits

• 1420275 chore: Release
• d2c817d docs: Update changelog
• f88c94e Merge pull request #6341 from epage/sep
• acbb822 fix(complete): Reduce risk of conflict with actual subcommands
• a49fadb refactor(complete): Pull out subcommand separator
• ddc008b Merge pull request #6332 from epage/update
• 497dc50 chore: Update compatible dependencies
• dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
• 54bdaa3 chore(deps): Update j178/prek-action action to v2
• f0d30d9 chore: Release
• Additional commits viewable in compare view

Updates pulldown-cmark from 0.13.1 to 0.13.3

Commits

• b0e6f65 chore: bump pulldown-cmark version in Cargo.lock
• ed2ee59 chore: bump pulldown-cmark version
• 676afd2 fix: wrong wikilink end-offset
• bad7926 chore: bump pulldown-cmark in Cargo.lock
• f67922d fix: bump tar to 0.4.45 for security purposes
• See full diff in compare view

Updates uuid from 1.22.0 to 1.23.1

Release notes

Sourced from uuid's releases.

v1.23.1

What's Changed

• Remove deprecated msrv feature from wasm-bindgen dependency by @​guybedford in uuid-rs/uuid#877
• fix: Timestamp::from_gregorian deprecation note by @​aznashwan in uuid-rs/uuid#878
• Prepare for 1.23.1 release by @​KodrAus in uuid-rs/uuid#879

New Contributors

• @​guybedford made their first contribution in uuid-rs/uuid#877
• @​aznashwan made their first contribution in uuid-rs/uuid#878

Full Changelog: uuid-rs/uuid@v1.23.0...v1.23.1

v1.23.0

What's Changed

• feat: add support for 'hyphenated' format in the serde module by @​FrenchDilettante in uuid-rs/uuid#865
• Fix a number of bugs in time-related code by @​KodrAus in uuid-rs/uuid#872
• Reword invalid char error message by @​KodrAus in uuid-rs/uuid#873
• Impl cleanups by @​KodrAus in uuid-rs/uuid#874
• Use LazyLock to synchronize v1/v6 context initialization by @​KodrAus in uuid-rs/uuid#875
• Prepare for 1.23.0 release by @​KodrAus in uuid-rs/uuid#876

New Contributors

• @​FrenchDilettante made their first contribution in uuid-rs/uuid#865

Special thanks

@​meng-xu-cs raised a series of bugs against the timestamp logic in uuid using automated tooling. The issues themselves were reasonably and responsibly presented and the end result is a better uuid library for everyone. Thanks!

Deprecations

This release includes the following deprecations:

• Context: Renamed to ContextV1
• Timestamp::from_gregorian: Renamed to Timestamp::from_gregorian_time

Change to Version::Max

Version::Max's u8 representation has changed from 0xff to 0x0f to match the value returned by Uuid::get_version_num.

Change to Uuid::get_version for the max UUID

Uuid::get_version will only return Some(Version::Max) if the UUID is actually the max UUID (all bytes are 0xff). Previously it would return Some if only the version field was 0x0f. This change matches the behaviour of the nil UUID, which only returns Some(Version::Nil) if the UUID is the nil UUID (all bytes are 0x00).

Full Changelog: uuid-rs/uuid@v1.22.0...v1.23.0

Commits

• ca0c85f Merge pull request #879 from uuid-rs/cargo/v1.23.1
• b4db015 prepare for 1.23.1 release
• 771069d Merge pull request #878 from aznashwan/fix-from-gregorian-deprecation-note
• 80994a2 fix: Timestamp::from_gregorian deprecation note
• 90c5be8 Merge pull request #877 from guybedford/remove-wasm-bindgen-msrv
• 8b8c4f4 Remove deprecated feature from wasm-bindgen dependency
• 00ab922 Merge pull request #876 from uuid-rs/cargo/v1.23.0
• 726ba45 prepare for 1.23.0 release
• 996dade Merge pull request #875 from uuid-rs/fix/context-ordering
• e140479 simplify a use stmt
• Additional commits viewable in compare view

Updates axum from 0.8.8 to 0.8.9

Release notes

Sourced from axum's releases.

axum-v0.8.9

• added: WebSocketUpgrade::{requested_protocols, set_selected_protocol} for more flexible subprotocol selection (#3597)
• changed: Update minimum rust version to 1.80 (#3620)
• fixed: Set connect endpoint on correct field in MethodRouter (#3656)
• fixed: Return specific error message when multipart body limit is exceeded (#3611)

#3597: tokio-rs/axum#3597 #3620: tokio-rs/axum#3620 #3656: tokio-rs/axum#3656 #3611: tokio-rs/axum#3611

Commits

• c59208c revert axum-core changelog changes
• 99068f5 Revert "Fix IntoResponse for tuples overriding error response codes (#3603)"
• 23d7098 Revert "axum-core 0.5.6"
• e8a39ad axum-macros 0.5.1
• 6e9a249 axum-extra 0.12.6
• 0ec9041 axum 0.8.9
• c3fcebb axum-core 0.5.6
• a8790fc update release notes
• 26ba7bb docs: consolidate state management docs in crate root (#3683)
• 9fc59ef Update to tokio-tungstenite 0.29 (#3689)
• Additional commits viewable in compare view

Updates open from 5.3.3 to 5.3.4

Release notes

Sourced from open's releases.

v5.3.4

Bug Fixes

• align with_detached() implementation with with() On macOS, /usr/bin/open is natively detached. This commit changes with_detached to use the same logic as with() .avoid double detachment to prevent silent failure

Commit Statistics

• 6 commits contributed to the release.
• 1 commit was understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 1 time to make code idiomatic.

Commit Details

• Uncategorized
  • Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure (7db5738)
  • Align with_detached() implementation with with() (8e122d4)
  • Merge pull request #117 from ChrisDenton/absolute (20ea175)
  • Thanks clippy (on Windows) (7faae87)
  • Enable clippy deny on CI, with all features, but allow incompatible MRSV there (1ab9c47)
  • Use absolute instead of canonicalize (5604cee)

Changelog

Sourced from open's changelog.

5.3.4 (2026-04-19)

Bug Fixes

• align with_detached() implementation with with() On macOS, /usr/bin/open is natively detached. This commit changes with_detached to use the same logic as with() .avoid double detachment to prevent silent failure

Commit Statistics

• 6 commits contributed to the release.
• 1 commit was understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 1 time to make code idiomatic.

Commit Details

• Uncategorized
  • Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure (7db5738)
  • Align with_detached() implementation with with() (8e122d4)
  • Merge pull request #117 from ChrisDenton/absolute (20ea175)
  • Thanks clippy (on Windows) (7faae87)
  • Enable clippy deny on CI, with all features, but allow incompatible MRSV there (1ab9c47)
  • Use absolute instead of canonicalize (5604cee)

Commits

• 7bd519c Release open v5.3.4
• 7db5738 Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure
• 8e122d4 fix(macos): align with_detached() implementation with with()
• 20ea175 Merge pull request #117 from ChrisDenton/absolute
• 7faae87 Thanks clippy (on Windows)
• 1ab9c47 Enable clippy deny on CI, with all features, but allow incompatible MRSV there
• 5604cee Use absolute instead of canonicalize
• See full diff in compare view

Updates lettre from 0.11.19 to 0.11.21

Release notes

Sourced from lettre's releases.

v0.11.21

Features

• Add rustls-no-provider support (#1134)
• Add message_iter to AsyncConnection and Connection (#1116)

v0.11.20

Upgrade notes

• MSRV is now 1.85 #1130

Features

• Add Address::new_dangerous #1107

Misc

• Replace chumsky with nom for email address parsing #1099
• Upgrade to Rust 2024 edition #1130
• Upgrade boring and tokio-boring to v5 #1130

Changelog

Sourced from lettre's changelog.

v0.11.21 (2026-04-04)

Features

• Add rustls-no-provider support (#1134)
• Add message_iter to AsyncConnection and Connection (#1116)

#1116: lettre/lettre#1116 #1134: lettre/lettre#1134

v0.11.20 (2026-03-28)

Upgrade notes

• MSRV is now 1.85 (#1130)

Features

• Add Address::new_dangerous (#1107)

Misc

• Replace chumsky with nom for email address parsing (#1099)
• Upgrade to Rust 2024 edition (#1130)
• Upgrade boring and tokio-boring to v5 (#1130)

#1099: lettre/lettre#1099 #1107: lettre/lettre#1107 #1130: lettre/lettre#1130

Commits

• 1ab3a65 Prepare v0.11.21
• 396a242 feat: add rustls-no-provider support
• 3722083 feat(transport-smtp): add message_iter to AsyncConnection and Connection
• 134b720 Prepare v0.11.20
• 3321bff refactor: replace chumsky with nom
• 7d5f52d feat: add Address::new_unchecked
• b905242 build(deps): upgrade maud to v0.27
• 80297f4 build(deps): upgrade criterion to v0.7
• 47f3837 build(deps): upgrade boring to v5
• a4c26e9 style: fix boring deprecation warning
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.