chore(deps): bump the cargo-safe group with 8 updates

[dependabot]

Bumps the cargo-safe group with 8 updates:

Package	From	To
uuid	1.25.0	1.26.0
flate2	1.1.9	1.1.10
mongodb	3.8.1	3.8.2
jaq-core	3.1.0	3.1.1
jaq-std	3.0.2	3.0.3
jaq-json	2.0.2	2.0.3
wat	1.257.1	1.258.0
argon2	0.6.0-rc.8	0.6.0

Updates uuid from 1.25.0 to 1.26.0

Release notes

Sourced from uuid's releases.

v1.26.0

What's Changed

• Add ContextV7::with_additional_precision_bits by @​ChrisJr404 in uuid-rs/uuid#904
• Prepare for 1.26.0 release by @​KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

Commits

• cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
• 34e4f49 don't test macros under miri
• d9e7242 update nightly used for miri
• ec16819 prepare for 1.26.0 release
• 162cd20 Merge pull request #904 from ChrisJr404/v7-additional-precision-bits
• 97eceff Add ContextV7::with_additional_precision_bits for microsecond clocks
• See full diff in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

• feat: reuse zlib's decoder buffer by @​Vaiz in rust-lang/flate2-rs#532
• feat: add reset method for read::GzDecoder and buffered::GzDecoder by @​Vaiz in rust-lang/flate2-rs#534
• Drop cloudflare-zlib by @​kornelski in rust-lang/flate2-rs#539
• Add a wrapper for the Crc struct by @​MikkelPaulson in rust-lang/flate2-rs#540
• Bump miniz_oxide to 0.9 by @​oscargus in rust-lang/flate2-rs#543
• Upgrade miniz_oxide and add unit tests of the different flush kinds by @​fintelia in rust-lang/flate2-rs#498
• Fix infinite loop in writing gzip header/footer by @​Shnatsel in rust-lang/flate2-rs#547
• test: generate corrupt gzip fixture at runtime by @​nanookclaw in rust-lang/flate2-rs#550
• Reject oversized gzip extra fields by @​Byron in rust-lang/flate2-rs#553
• Reject incomplete deflate streams at EOF by @​Guflly in rust-lang/flate2-rs#556
• Include README.md in a private module by @​bushrat011899 in rust-lang/flate2-rs#562
• Add no_std support using nightly alloc_io by @​bushrat011899 in rust-lang/flate2-rs#559
• Update get_mut() documentation to make clear how 'inner` can be used by @​Byron in rust-lang/flate2-rs#558

New Contributors

• @​Vaiz made their first contribution in rust-lang/flate2-rs#532
• @​MikkelPaulson made their first contribution in rust-lang/flate2-rs#540
• @​oscargus made their first contribution in rust-lang/flate2-rs#543
• @​nanookclaw made their first contribution in rust-lang/flate2-rs#550
• @​Guflly made their first contribution in rust-lang/flate2-rs#556
• @​bushrat011899 made their first contribution in rust-lang/flate2-rs#562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits

• ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
• fb5228d Merge pull request #559 from bushrat011899/no_std
• 6ed3ba3 Add executable no_std example
• faed8a0 Expand CI to test no_std compatibility and correctness
• 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
• 3fe1126 Centralize usage of std for error and io
• 98e313a Add GzHeader::mtime_as_duration
• 0642965 Switch to core implicit prelude and only use std where required
• 454a63c Remove left-over dbg! statement
• 2a490b7 Add runtime_detection feature
• Additional commits viewable in compare view

Updates mongodb from 3.8.1 to 3.8.2

Release notes

Sourced from mongodb's releases.

v3.8.2

The MongoDB Rust driver team is pleased to announce the v3.8.2 release of the mongodb crate, now available for download from crates.io.

[!IMPORTANT] This is a security patch release for CVE-2026-81526. Upgrading is recommended for all users.

This release fixes a bug that would allow Client::bulk_write to write to a different database than the one specified in a write model's namespace.

Full Release Notes

Bugfixes

• RUST-2467 / CVE-2026-81526: Validate database and collection name arguments against "." and NUL bytes

Commits

• 78b87a5 release 3.8.2 (#1778)
• See full diff in compare view

Updates jaq-core from 3.1.0 to 3.1.1

Release notes

Sourced from jaq-core's releases.

3.1.1

This release features a new man page that is now generated by jaq itself. Apart from demonstrating jaq's XHTML processing capabilities, this serves to lift jaq's build dependency on Pandoc (01mf02/jaq#442). To quote @​alerque, jaq's Arch Linux package maintainer: "For any other project I'd say this was an absurd way to work around not wanting to use a standard tool. I guess for this project to dog food itself is ... chaotic genius?" This comment alone was nearly worth the endeavour.

Furthermore, this release makes it possible to disable a few dependencies when using jaq via its API (#448, thanks to @​kleinesfilmroellchen!), and handles broken pipes more gracefully 01mf02/jaq#445.

New Contributors

• @​kleinesfilmroellchen made their first contribution in 01mf02/jaq#448

Full Changelog: 01mf02/jaq@v3.1.0...v3.1.1

Commits

• c866e70 Update version numbers.
• d6d7b0e Update dependencies.
• 56f21d3 Merge pull request #456 from 01mf02/hide-tests
• f3125af Add missing comma.
• 63deaa8 Add link to documentation.
• 2eeccf0 Merge pull request #458 from 01mf02/escape-errors
• f26fd2f Escape errors on playground and handle colors correctly again.
• d5ffa6d Merge pull request #445 from 01mf02/broken-pipe
• 0855d95 Remove --run-tests from list of documented flags.
• fc907af Document.
• Additional commits viewable in compare view

Updates jaq-std from 3.0.2 to 3.0.3

Commits

• See full diff in compare view

Updates jaq-json from 2.0.2 to 2.0.3

Commits

• See full diff in compare view

Updates wat from 1.257.1 to 1.258.0

Release notes

Sourced from wat's releases.

v1.258.0

What's Changed

• Document that --realloc-via-memory-grow only affects adapters by @​Lstarsky0 in bytecodealliance/wasm-tools#2613
• fix: remap type indices of {stream,future}.cancel-{read,write} by @​rvolosatovs in bytecodealliance/wasm-tools#2615
• Remove post-return hooks, adjust sync task hooks by @​alexcrichton in bytecodealliance/wasm-tools#2619
• Add wasip3 compat to wit-dylib by @​alexcrichton in bytecodealliance/wasm-tools#2617
• Rebuild libdl.so without __wasi_init_tp import by @​alexcrichton in bytecodealliance/wasm-tools#2616
• Release wasm-tools 1.258.0 by @​github-actions[bot] in bytecodealliance/wasm-tools#2620

Full Changelog: bytecodealliance/wasm-tools@v1.257.1...v1.258.0

Commits

• 5c6d31c Release wasm-tools 1.258.0 (#2620)
• 242aaa7 Rebuild libdl.so without __wasi_init_tp import (#2616)
• 43baa25 Add wasip3 compat to wit-dylib (#2617)
• 0a2c043 Remove post-return hooks, adjust sync task hooks (#2619)
• a7ef477 fix: remap type indices of {stream,future}.cancel-{read,write} (#2615)
• ef6cb38 Document that --realloc-via-memory-grow only affects adapters (#2613)
• See full diff in compare view

Updates argon2 from 0.6.0-rc.8 to 0.6.0

Commits

• b1e0ad6 argon2 v0.6.0 (#931)
• c0d2aca argon2: bump blake2 to v0.11 (#929)
• d9c628b Cargo.lock: bump dependencies (#930)
• 0b31c1c Cargo.toml: use password-hash crate release (#920)
• 420cbc9 build(deps): bump rust-lang/crates-io-auth-action from 1.0.4 to 1.0.5 (#912)
• 3a88540 build(deps): bump actions/checkout from 6 to 7 (#913)
• 90b974f build(deps): bump the all-deps group with 5 updates (#914)
• 82c688f build(deps): bump the all-deps group across 1 directory with 18 updates (#911)
• b2cef17 build(deps): bump the all-deps group with 6 updates (#902)
• 2c16e5a build(deps): bump the all-deps group with 7 updates (#901)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions