[dependabot]

Bumps the crates-minor-patch group with 4 updates in the / directory: tokio, uuid, flate2 and toml.

Updates tokio from 1.53.3 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

• time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

• fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
• net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
• runtime: add Builder::max_io_events_per_busy_tick (#8410)
• runtime: stabilize tokio::runtime::worker_index() (#8431)
• sync: add SemaphorePermit::semaphore() (#8482)
• sync: add blocking_acquire methods to Semaphore (#8269)
• sync: add watch::Receiver::is_closed (#8481)
• wasm: support JSPI for Emscripten target (#8285, #8627)
• wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

• fs: reject zero in File::set_max_buf_size (#8449)
• io: make copy_buf cooperative (#8459)
• io: panic when BufReader or BufStream is created with zero capacity (#8494)
• io: panic when in-memory pipe is created with zero capacity (#8397)
• io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
• io: support vectored writes in Sink (#8663)
• net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
• net: start accepted sockets as readable and writable (#8435)
• net: support UCred on Fuchsia (#8257)
• process: use mio::unix::pipe for Unix child stdio (#8603)
• runtime: cache-pad the shared injection queue and idle state (#8622)
• runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
• runtime: make enable_io available whenever rt is enabled (#8387)
• runtime: move block_in_place setup into a non-generic function (#8315)
• runtime: move the multi-thread inject queue to its own mutex (#8382)
• runtime: panic when max_io_events_per_tick is zero (#8476)
• runtime: suggest .await in nested block_on panic message (#8501)
• sync: avoid atomic reader count in broadcast slots (#8357)
• sync: use acquire/release orderings in Notify (#8325)
• time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

• b53b200 chore: prepare Tokio v1.54.1 (#8693)
• 5ed619b time: revert "remove the runtime handle from timers" (#8692)
• 66d34e4 chore: prepare Tokio v1.54.0 (#8667)
• 0d322ce io: support vectored writes in sink (#8663)
• 4167c56 codec: expose I/O sources from codec errors (#8665)
• cdd9dae fs: propagate iouring stress test failures (#8644)
• 52ac781 ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)
• 4890d02 stream: implement FusedStream for JoinSetStream (#8629)
• a6bd8e1 wasm: check Emscripten version when using JSPI (#8627)
• 9dd749d Merge 'tokio-1.53.3' into 'master' (#8641)
• Additional commits viewable in compare view

Updates uuid from 1.26.1 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

• Add versioned constructors to NonNilUuid by @​RanaPriyansh in uuid-rs/uuid#919
• Prepare for 1.29.0 release by @​KodrAus in uuid-rs/uuid#920

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

v1.28.0

What's Changed

• Add optional serde format adapters by @​RanaPriyansh in uuid-rs/uuid#916
• Prepare for 1.28.0 release by @​KodrAus in uuid-rs/uuid#918

New Contributors

• @​RanaPriyansh made their first contribution in uuid-rs/uuid#916

Full Changelog: uuid-rs/uuid@v1.27.0...v1.28.0

v1.27.0

What's Changed

• Accept case-insensitive urn:uuid: prefixes when parsing by @​jaideeppyne in uuid-rs/uuid#912
• Fix ordering of V7 UUIDs created by earlier seconds with later subsec nanos by @​KodrAus in uuid-rs/uuid#915
• Prepare for 1.27.0 release by @​KodrAus in uuid-rs/uuid#917

New Contributors

• @​jaideeppyne made their first contribution in uuid-rs/uuid#912

Full Changelog: uuid-rs/uuid@v1.26.1...v1.27.0

Commits

• 4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
• a3631fd prepare for 1.29.0 release
• 304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
• d49f963 Reuse existing version tests for NonNilUuid constructors
• 2f02404 Add versioned constructors to NonNilUuid
• 276c236 Merge pull request #918 from uuid-rs/cargo/v1.28.0
• 4b3b9f5 prepare for 1.28.0 release
• cbf9c81 Merge pull request #916 from RanaPriyansh/fix/optional-serde-adapters-840
• 784a022 Inline expected tokens in optional compact serde test
• a5678c3 Simplify optional serde adapter tests to option tokens
• Additional commits viewable in compare view

Updates flate2 from 1.1.10 to 1.1.11

Release notes

Sourced from flate2's releases.

v1.1.11

Fixed

• fixup! Complete sync flushes across output buffer boundaries (#581)
• Separate gzip header reads from compressed data
• Defer gzip input errors without losing read progress
• Preserve gzip header progress on input read errors (#571)

Other

• Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• Merge pull request #577 from rust-lang/fix-loop
• Setup trusted publishing for the flate2 crate
• Complete sync flushes across output buffer boundaries (#581)
• Fix "can by extended" typos in deflate and zlib write docs
• Merge pull request #579 from NUAAwqy/docs/fix-double-space
• Fix double space in read module doc comment
• Add missing preposition in README description
• Cover decoder retries across the output buffer boundary
• Drain output before refilling the buffer
• Clarify partial-write buffering behavior
• Avoid shifting buffered output on partial writes
• Merge pull request #567 from ndossche/more-asserts
• Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
• Fix encoder writes hanging after try_finish (#576)
• Avoid panicking when dropping unfinished compressors
• Merge pull request #565 from HDauven/zlib-rs-uninit-output
• still allow resetting incomplete write decoders
• Assert return result of reset calls
• Reject incomplete streams in write decoders
• Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
• review
• Reject incomplete streams when finishing write-side decoders
• Preserve window size and gzip mode across Decompress::reset
• preserve runtime detection in backend examples (#570)
• Make miniz_oxide dictionary clearing explicit on reset
• Harden miniz_oxide decompressor reset
• Deduplicate zlib-rs flush conversions
• Use native zlib-rs uninitialized output

Changelog

Sourced from flate2's changelog.

1.1.11 - 2026-11-06

Fixed

• fixup! Complete sync flushes across output buffer boundaries (#581)
• Separate gzip header reads from compressed data
• Defer gzip input errors without losing read progress
• Preserve gzip header progress on input read errors (#571)

Other

• Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• Merge pull request #577 from rust-lang/fix-loop
• Setup trusted publishing for the flate2 crate
• Complete sync flushes across output buffer boundaries (#581)
• Fix "can by extended" typos in deflate and zlib write docs
• Merge pull request #579 from NUAAwqy/docs/fix-double-space
• Fix double space in read module doc comment
• Add missing preposition in README description
• Cover decoder retries across the output buffer boundary
• Drain output before refilling the buffer
• Clarify partial-write buffering behavior
• Avoid shifting buffered output on partial writes
• Merge pull request #567 from ndossche/more-asserts
• Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
• Fix encoder writes hanging after try_finish (#576)
• Avoid panicking when dropping unfinished compressors
• Merge pull request #565 from HDauven/zlib-rs-uninit-output
• still allow resetting incomplete write decoders
• Assert return result of reset calls
• Reject incomplete streams in write decoders
• Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
• review
• Reject incomplete streams when finishing write-side decoders
• Preserve window size and gzip mode across Decompress::reset
• preserve runtime detection in backend examples (#570)
• Make miniz_oxide dictionary clearing explicit on reset
• Harden miniz_oxide decompressor reset
• Deduplicate zlib-rs flush conversions
• Use native zlib-rs uninitialized output

Commits

• cd06529 chore: release v1.1.11
• 6ff4098 Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• 5f68913 Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• 5582d95 fixup! Complete sync flushes across output buffer boundaries (#581)
• d05c7c4 Merge pull request #577 from rust-lang/fix-loop
• 5c7ee7a Merge pull request #583 from Kobzol/trusted-publishing
• cc527c6 Setup trusted publishing for the flate2 crate
• 54f49cd Merge pull request #580 from NUAAwqy/fix/can-by-extended-typo
• 491df15 Complete sync flushes across output buffer boundaries (#581)
• a7a1161 Fix "can by extended" typos in deflate and zlib write docs
• Additional commits viewable in compare view

Updates toml from 1.1.8+spec-1.1.0 to 1.2.0+spec-1.1.0

Commits

• 8ffe3c5 chore: Release
• fa51878 docs: Update changelog
• f8ad91e perf(serde): Reuse key allocations (#1261)
• fe51467 perf(serde): Reuse key allocations
• 7024319 perf(writer): Expand coverage of the fast path (#1259)
• be196a8 perf(writer): Expand coverage of the fast path
• 932704c perf(serde): Pre-allocate serialization buffers (#1258)
• 52b563d perf(serde): Pre-allocate serialization buffers
• e346a79 perff(writer): Add key and string fast paths (#1257)
• ab695e6 perf(writer): Add a fast path for writing string types
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions