chore(deps): update rusqlite requirement from 0.32 to 0.40

[dependabot]

Updates the requirements on rusqlite to permit the latest version.

Release notes

Sourced from rusqlite's releases.

0.40.1

What's Changed

• Fix clippy warnings #1852
• Bump bundled SQLite version to 3.53.2 #1853
• Bump hashlink version #1855
• Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

Changelog

Sourced from rusqlite's changelog.

For version 0.15.0 and above, see Releases page.

Version 0.14.0 (2018-08-17)

• BREAKING CHANGE: ToSql implementation for time::Timespec uses RFC 3339 (%Y-%m-%dT%H:%M:%S.%fZ). Previous format was %Y-%m-%d %H:%M:%S:%f %Z.
• BREAKING CHANGE: Remove potentially conflicting impl of ToSqlOutput (#313).
• BREAKING CHANGE: Replace column index/count type (i32) with usize.
• BREAKING CHANGE: Replace parameter index/count type (i32) with usize.
• BREAKING CHANGE: Replace row changes/count type (i32) with usize.
• BREAKING CHANGE: Scalar functions must be Sendable and 'static.
• Bugfix: Commit failure unhandled, database left in unusable state (#366).
• Bugfix: free_boxed_hook does not work for fn.
• Update the bundled SQLite version to 3.24.0 (#326).
• Add DropBehavior::Panic to enforce intentional commit or rollback.
• Implement sqlite3_update_hook (#260, #328), sqlite3_commit_hook and sqlite3_rollback_hook.
• Add support to unlock notification behind unlock_notify feature (#294, #331).
• Make Statement::column_index case-insensitive (#330).
• Add comment to justify &mut Connection in Transaction.
• Fix tyvar_behind_raw_pointer warnings.
• Fix handful of clippy warnings.
• Fix Connection::open documentation (#332)
• Add binding to sqlite3_get_autocommit and sqlite3_stmt_busy.
• Add binding to sqlite3_busy_timeout and sqlite3_busy_handler.
• Add binding to sqlite3_expanded_sql.
• Use rerun-if-env-changed in libsqlite3-sys (#329).
• Return an InvalidQuery error when SQL is not read only.

Version 0.13.0 (2017-11-13)

• Added ToSqlConversionFailure case to Error enum.
• Now depends on chrono 0.4, bitflags 1.0, and (optionally) cc 1.0 / bindgen 0.31.
• The ToSql/FromSql implementations for time::Timespec now include and expect fractional seconds and timezone in the serialized string.
• The RowIndex type used in Row::get is now publicly exported.
• New sqlcipher feature allows linking against SQLCipher instead of SQLite.
• Doc link in README now point to docs.rs.

Version 0.12.0 (2017-05-29)

• Defines HAVE_USLEEP when building with a bundled SQLite (#263).
• Updates dependencies to their latest versions, particularly serde to 1.0.
• Adds support for vcpkg on Windows.
• Adds ToSql impls for str and [u8].

Version 0.11.0 (2017-04-06)

• Avoid publicly exporting SQLite constants multiple times from libsqlite3-sys.
• Adds FromSql and ToSql impls for isize. Documents why usize and u64 are not included.

... (truncated)

Commits

• 6d3c282 Merge pull request #1856 from gwenn/0.40.1
• 2ba28b7 Prepare next release
• a021dc7 Merge pull request #1854 from gwenn/savepoint
• 534a149 Merge pull request #1855 from gwenn/hashlink
• 6d9764f Bump hashlink version
• fa574eb Use sqlite3_keyword_check
• 15385cc Fix SQL injection when SAVEPOINT name is tainted
• e5e48f2 Merge pull request #1853 from gwenn/3.53.2
• ac22292 Bump bundled SQLite version to 3.53.2
• c5f8828 Merge pull request #1852 from gwenn/clippy
• Additional commits viewable in compare view

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	openqbw-docs	e0916f3	Jul 21 2026, 12:52 AM

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[Nathan-D-R]

Verified and merged directly to main as d6b2eb5. The only rusqlite usage in the workspace (openqbw-cli/src/main.rs) sticks to a stable API surface across the 0.32->0.40 range -- Connection::open, transaction(), prepare(), execute()/query_map()/query_row() with params!, and execute_batch(). cargo build/clippy(-D warnings)/test/fmt all pass with zero code changes needed, and I additionally ran a standalone smoke test exercising the same call patterns against rusqlite 0.40 at runtime to confirm behavior, not just compilation. PR auto-closed by GitHub once the equivalent change landed on main.