deps: bump the cargo-patch-and-minor group across 1 directory with 6 updates

[dependabot]

Bumps the cargo-patch-and-minor group with 6 updates in the / directory:

Package	From	To
thiserror	2.0.20	2.0.21
lazy_static	1.5.0	1.5.1
wincode	0.6.1	0.6.2
tokio-rustls	0.26.5	0.26.6
hyper-util	0.1.20	0.1.21
smallvec	1.16.1	1.16.2

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• See full diff in compare view

Updates lazy_static from 1.5.0 to 1.5.1

Commits

• See full diff in compare view

Updates wincode from 0.6.1 to 0.6.2

Release notes

Sourced from wincode's releases.

wincode@v0.6.2

What's Changed

• chore(doc): Better document validation requirements of context::Len by @​cpubot in anza-xyz/wincode#428
• refactor(schema): validate String UTF-8 before allocating by @​kskalski in anza-xyz/wincode#432
• fix(io): Fix zero-length reads for std Cursor past EOF by @​cpubot in anza-xyz/wincode#433
• build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 by @​dependabot[bot] in anza-xyz/wincode#431
• feat(io): Support deserialization limit by @​cpubot in anza-xyz/wincode#427
• bench: stabilize benchmark cross-build timings and ease assembly inspection by @​kskalski in anza-xyz/wincode#440
• build(deps): bump smallvec from 1.15.1 to 1.16.0 by @​dependabot[bot] in anza-xyz/wincode#451
• build(deps): bump ecow from 0.2.6 to 0.3.1 by @​dependabot[bot] in anza-xyz/wincode#450
• feat(collections): support strict map/set decoding by @​surajk-m in anza-xyz/wincode#435
• perf(derive): drop the initialized prefix with a check per field by @​kskalski in anza-xyz/wincode#455
• fix(schema): check size before allocating for Vec by @​2501babe in anza-xyz/wincode#463
• fix(schema): check size before allocating for bumpalo Vec and SmallVec by @​kskalski in anza-xyz/wincode#472
• feat(containers): update heap slices to use decode_into_container_t by @​cpubot in anza-xyz/wincode#471
• chore: bump wincode to 0.6.2 by @​cpubot in anza-xyz/wincode#473

New Contributors

• @​surajk-m made their first contribution in anza-xyz/wincode#435
• @​2501babe made their first contribution in anza-xyz/wincode#463

Full Changelog: https://github.com/anza-xyz/wincode/compare/wincode@v0.6.1...wincode@v0.6.2

Commits

• 963c386 chore: bump wincode to 0.6.2 (#473)
• 9817fbb feat(containers): update heap slices to use decode_into_container_t (#471)
• 2f02f9f fix(schema): check size before allocating for bumpalo Vec and SmallVec (#472)
• 0891dd9 fix(schema): check size before allocating for Vec (#463)
• 9a56191 perf(derive): drop the initialized prefix with a check per field (#455)
• 0cf05e9 feat(collections): support strict map/set decoding (#435)
• 736d919 build(deps): bump ecow from 0.2.6 to 0.3.1 (#450)
• f6a7732 build(deps): bump smallvec from 1.15.1 to 1.16.0 (#451)
• ba0d86d bench: stabilize benchmark cross-build timings and ease assembly inspection (...
• c8f5e92 feat(io): Support deserialization limit (#427)
• Additional commits viewable in compare view

Updates tokio-rustls from 0.26.5 to 0.26.6

Release notes

Sourced from tokio-rustls's releases.

0.26.6

0.26.5 added an optimization to batch multiple reads which could swallow some errors. Buffer errors so that they propagate to the caller as soon as the caller next reads from the stream.

What's Changed

• Buffer and propagate errors from transport by @​dtolnay in rustls/tokio-rustls#205
• Prepare 0.26.6 by @​djc in rustls/tokio-rustls#206

Commits

• 8aebb7c Bump version to 0.26.6
• 6f8509a Rename buffered_err to error
• bd0494d Buffer and propagate errors from transport
• a781340 Add regression test for issue 204
• 9d0dae6 build(deps): bump rustls from 0.23.44 to 0.23.45
• 0ad049e build(deps): bump rustls from 0.23.43 to 0.23.44
• 4f913c7 build(deps): bump rcgen from 0.14.9 to 0.14.10
• See full diff in compare view

Updates hyper-util from 0.1.20 to 0.1.21

Release notes

Sourced from hyper-util's releases.

v0.1.21

Additions

• Add crate-level documentation. (#327)
• Add client::legacy::Builder::http2_header_table_size() method. (#274)
• Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
• Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
• Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
• Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

• Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
• Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
• Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
• Fix client::pool::cache to preserve readiness with clones. (#297)
• Fix client::pool::cache to wake its waiters in FIFO order. (#298)
• Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
• Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
• Fix client::proxy::matcher handling for IP wildcards. (#309)
• The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
• Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

... (truncated)

Changelog

Sourced from hyper-util's changelog.

0.1.21 (2026-09-24)

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

Additions

• Add crate-level documentation. (#327)
• Add client::legacy::Builder::http2_header_table_size() method. (#274)
• Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
• Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
• Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
• Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

• Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
• Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
• Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
• Fix client::pool::cache to preserve readiness with clones. (#297)
• Fix client::pool::cache to wake its waiters in FIFO order. (#298)
• Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
• Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
• Fix client::proxy::matcher handling for IP wildcards. (#309)
• The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
• Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

Commits

• 23a8689 v0.1.21
• cdb2346 doc(client/pool): add broken_intra_doc_links allowance (#326)
• 13b6110 chore(error): remove disabled hyper_util::error submodule (#325)
• b9ee451 docs(lib): add crate-level documentation (#327)
• d6b7d7e feat(rt/tracing): introduce tracing executors (#323)
• f2da915 feat(client): add HttpConnector::set_mark for SO_MARK (#303)
• 4dbd494 feat(rt): change TokioExecutor to not trace, add rt-tracing-exec-force feat...
• d480d9f fix(client): parse proxy CONNECT response with httparse (#315)
• 7e0958b chore(ci): simplify msrv check (#317)
• 0734568 chore(ci): update to actions/checkout@v7 (#316)
• Additional commits viewable in compare view

Updates smallvec from 1.16.1 to 1.16.2

Release notes

Sourced from smallvec's releases.

v1.16.2

What's Changed

• Backport v2’s retain implementation to v1 by @​charliermarsh in servo/rust-smallvec#596
• Fix element ownership tracking with may_dangle by @​charliermarsh in servo/rust-smallvec#594
• Fix Cargo manual_readme warning by @​Rayan-and-beyond in servo/rust-smallvec#608
• chore: bump version by @​alejandro-vaz in servo/rust-smallvec#617

New Contributors

• @​Rayan-and-beyond made their first contribution in servo/rust-smallvec#608

Full Changelog: servo/rust-smallvec@v1.16.1...v1.16.2

Commits

• ccf5fc7 chore: bump version (#617)
• af207cc Merge pull request #608 from Rayan-and-beyond/fix/manual-readme-warning-606
• cda4b73 Merge pull request #594 from astral-sh/charlie/codex-fix-may-dangle
• d0556cb Merge pull request #596 from astral-sh/charlie/codex-v1-compact
• f73914c Flatten retain tests into the unit test module
• 954d599 Move retain tests into the unit test module
• 8d93633 Remove added retain benchmark harness
• 88c6bfa Limit compaction optimization to retain
• b9ef17d Fix element ownership tracking with may_dangle
• 42029c2 Compact retained elements directly in retain and dedup_by
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.