deps: Bump vgi-rpc from 0.5.0 to 0.7.0

[dependabot]

Bumps vgi-rpc from 0.5.0 to 0.7.0.

Changelog

Sourced from vgi-rpc's changelog.

[0.7.0] — 2026-06-26

Headline: the crate now builds for wasm32-wasi (a VGI worker can be compiled to WebAssembly and served over stdio/TCP under a WASI runtime), with no change to native builds.

• Added a lightweight stream-codec feature (serde + bincode only, no server stack) and moved stream_codec behind it instead of http. The core dispatch path uses stream_codec, so it must be available without the axum/tokio HTTP stack (which does not compile to wasm). http re-includes it.
• Fixed std::process::id() aborting on wasm32-wasi ("no pids on this platform"): access_log::random_stream_id and the unary id helper fall back to 0 under cfg(wasm32) — time + counter already disambiguate within the single wasm process.

[0.6.0] — 2026-06-26

Headline: a raw-TCP socket transport — the network analog of the existing Unix-socket transport, speaking the same raw Arrow-IPC framing without the HTTP envelope.

• Added serve_tcp (server) and TcpTransport + RpcClient::tcp_connect (client), plus TransportKind::Tcp. Binds loopback (127.0.0.1) by default; port 0 auto-selects. TCP_NODELAY enabled; optional idle self-termination mirroring the Unix serve loop. No auth/TLS — trusted networks only; use HTTP otherwise.
• The conformance worker gains --tcp [HOST:]PORT, emitting a TCP:<host>:<port> discovery line. Verified at full conformance parity with the --unix baseline via the Python vgi-rpc-test --tcp harness.

[0.3.0] — 2026-06-18

Headline: a new vgi-rpc-client crate — a blocking, dynamic, schema-first client for the canonical wire protocol — validated by running the Python reference conformance suite against it across pipe / subprocess / unix / HTTP / shm, driving the Rust, Python, and Go conformance servers.

• Added the vgi-rpc-client crate. RpcClient (unary / producer / exchange / cancel / describe / transport_options) over the byte-stream transports (subprocess, AF_UNIX, pipe, shm) plus an HttpClient. HTTP production surface: transparent external-location resolution, sticky sessions (with a session stack for nesting), 413 request-externalization via vended upload URLs, 415/zstd request-codec negotiation, a default request timeout, and connection-level retry on idempotent calls (never on exchange). The lockstep stream session opens its output reader lazily so it is compatible with both the Rust server (writes the output schema first) and the Python server (reads the input schema first). Native tests cover in-process round-trips and HTTP fault injection (timeout / retry / garbage responses).
• Added a lightweight external cargo feature on vgi-rpc (zstd only, no axum/tokio server stack) so a client can reuse the external-location module;

... (truncated)

Commits

• bc267f2 release: 0.7.0 — wasm-buildable (stream-codec feature, wasi process::id fix)
• 3c8878e feat: wasm-compatible build (stream-codec feature + wasi process::id fallbacks)
• e01223c release: 0.6.0 — raw-TCP socket transport
• 87ec06c rpc: add raw-TCP socket transport (TcpTransport / serve_tcp / tcp_connect)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like vgi-rpc is up-to-date now, so this is no longer needed.