chore(deps): bump the rust group across 1 directory with 7 updates

[dependabot]

Bumps the rust group with 7 updates in the / directory:

Package	From	To
base64	0.22.1	0.23.1
bitflags	2.13.1	2.13.2
phf	0.13.1	0.14.0
rand	0.10.2	0.10.3
tokio-tungstenite	0.29.0	0.30.0
ulid	1.2.1	3.0.0
uuid	1.26.0	1.26.1

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

• Make the tests build again on non-SIMD architectures

0.23.0

• Added more consts for preconfigured configs and engines
• Make DecodeError::InvalidLastSymbol more clear by including the decoded value
• Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
• Update MSRV to 1.71.0
• Add support for custom padding symbols

Commits

• 069bf70 v0.23.1
• 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
• 7cffce6 Fix testing on architectures without unsafe SIMD support
• e34f9a0 Merge pull request #308 from atouchet/com
• e9240c9 Remove outdated comment
• 9e9220a v0.23.0
• 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
• fbec5f1 Document no trailing trailing bits
• 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
• f10b7e2 Update deps & edition
• Additional commits viewable in compare view

Updates bitflags from 2.13.1 to 2.13.2

Release notes

Sourced from bitflags's releases.

2.13.2

What's Changed

• Flags: adjust order of elements in manual implementation example by @​DanielEScherzer in bitflags/bitflags#494
• Re-pull const declarations outside of nested const by @​KodrAus in bitflags/bitflags#496
• Prepare for 2.13.2 release by @​KodrAus in bitflags/bitflags#497

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Changelog

Sourced from bitflags's changelog.

2.13.2

What's Changed

• Flags: adjust order of elements in manual implementation example by @​DanielEScherzer in bitflags/bitflags#494
• Re-pull const declarations outside of nested const by @​KodrAus in bitflags/bitflags#496

Full Changelog: bitflags/bitflags@2.13.1...2.13.2

Commits

• 80ce9b5 Merge pull request #497 from bitflags/cargo/2.13.2
• 5822493 prepare for 2.13.2 release
• 48f4f1a Merge pull request #496 from bitflags/fix/rustc-ice
• 2c0b042 re-pull const declarations outside of nested const
• c3f8d31 Merge pull request #494 from DanielEScherzer/flags-docs-example
• 0fc3762 Flags: adjust order of elements in manual implementation example
• See full diff in compare view

Updates phf from 0.13.1 to 0.14.0

Commits

• 1620d16 Prepare 0.14.0 release (#424)
• e312645 chore(deps): update actions/checkout action to v7 (#423)
• 3df600c chore(deps): update rust crate syn to v2.0.118 (#422)
• 808b4c2 chore(deps): update actions/checkout action to v6.0.3 (#421)
• 4ffa9f0 fix: implement PhfEq to address tuple lifetime issue (#420)
• 2b64a06 fix: require suffixed int on parsing (#419)
• 0335793 chore(deps): update embarkstudios/cargo-deny-action action to v2.0.20 (#418)
• 28aa587 chore(deps): update embarkstudios/cargo-deny-action action to v2.0.19 (#417)
• dbd34de feat: add FmtConst support for Vec/slice keys (#416)
• 8125795 feat: migrate to 2024 edition (#415)
• Additional commits viewable in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

• Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
• Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
• Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

• Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

• 9e7d328 Prepare rand 0.10.3 (#1840)
• f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
• ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
• c994eb1 docs: fix angle unit in quick start example (#1839)
• 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
• 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
• bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
• 521fab6 Stop pinning dependencies (#1820)
• 3f7c433 Stop pinning dependencies
• cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
• Additional commits viewable in compare view

Updates tokio-tungstenite from 0.29.0 to 0.30.0

Changelog

Sourced from tokio-tungstenite's changelog.

0.30.0

• Update tungstenite to 0.30.0. See tungstenite release.

Commits

• 4994a07 Bump version
• 753ca72 Document cancel safety of reading from WebSocketStream (#378)
• 751d7e2 Update version number listed in Readme (#375)
• 57fc3d0 docs(CHANGELOG.md): fix tungstenite versions (#374)
• See full diff in compare view

Updates ulid from 1.2.1 to 3.0.0

Commits

• 90992f5 Bump version to v3.0.0
• 1d6ad4e Enable warn(keyword_idents) and replace gen usages
• 82c545a Fix wasm32 build
• a30176c Cleanup in prep for release
• 1af7ec8 bump version to v2.0.0
• 13b3614 Cleanup clippy warnings
• ce49f86 Add the ability for Generator to overflow
• 5fe66d5 Remove deprecated method
• 4ac1cf7 Rename Ulid::new -> Ulid::gen; add Ulid::max
• 926ebfa Update rand to v0.10
• Additional commits viewable in compare view

Updates uuid from 1.26.0 to 1.26.1

Release notes

Sourced from uuid's releases.

v1.26.1

What's Changed

• Seat the v7 counter below the version nibble by @​lenamonj in uuid-rs/uuid#907
• Don't panic in overflowing Timestamp to SystemTime conversion by @​KodrAus in uuid-rs/uuid#909
• Prepare for 1.26.1 release by @​KodrAus in uuid-rs/uuid#910

New Contributors

• @​lenamonj made their first contribution in uuid-rs/uuid#907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

Commits

• 9f92712 Merge pull request #910 from uuid-rs/cargo/v1.26.1
• d4df8f0 prepare for 1.26.1 release
• 5613f23 Merge pull request #909 from uuid-rs/fix/ts-conversion-overflow
• fda00eb don't panic in overflowing Timestamp to SystemTime conversion
• c82e88c Merge pull request #907 from lenamonj/v7-counter-placement
• ac065a6 Align the counter diagram
• 34ec102 Seat the v7 counter below the version nibble
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Summary by cubic

Bumps 7 Rust dependencies in the rust dependency group. Most are minor or patch updates, but ulid jumps two major versions (1.2.1 → 3.0.0) with breaking API changes. No source files changed, so the codebase compiles unchanged with the new versions.

Performance

• base64 0.23.1 adds SIMD-accelerated engines that fall back to the scalar engine on unsupported architectures.

Breaking changes and fixes

• ulid 3.0.0 renames Ulid::new to Ulid::gen and removes a deprecated method; future code must use the new name.
• rand 0.10.3 fixes panics on WeightedIndex with infinite float weights and on Uniform::new_inclusive with large finite float ranges.
• uuid 1.26.1 no longer panics when converting overflowing timestamps to SystemTime.

^{Written for commit 6ae0044. Summary will update on new commits.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	bitflags@​2.13.1 ⏵ 2.13.2
	rand@​0.10.2 ⏵ 0.10.3
	tokio-tungstenite@​0.29.0 ⏵ 0.30.0
	ulid@​1.2.1 ⏵ 3.0.0
	uuid@​1.26.0 ⏵ 1.26.1	+1

View full report

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.