chore(deps): bump rusqlite from 0.31.0 to 0.40.1

[dependabot]

Bumps rusqlite from 0.31.0 to 0.40.1.

Release notes

Sourced from rusqlite's releases.

0.40.1

What's Changed

• Fix clippy warnings #1852
• Bump bundled SQLite version to 3.53.2 #1853
• Bump hashlink version #1855
• Fix SQL injection when SAVEPOINT name is tainted #1854

Full Changelog: rusqlite/rusqlite@v0.40.0...v0.40.1

0.40.0

What's Changed

• Breaking changes: Replace VTab macros by constructors #1823
• Breaking changes: Fix VTab::best_index #1824
• Asserts on VTab::connect aux and args #1825
• Breaking changes: Fix VTab::connect / create #1826
• Breaking changes: Allow opting out of using sqlite-wasm-rs on wasm32-unknown-unknown #1828, #1829
• Derive Default for SeriesTabCursor/ArrayTabCursor #1830
• Update link to pre-update hook #1831
• Breaking changes: Fix VTab::connect #1832
• impl From for FromSqlError #1833
• Breaking changes: Fix vtab::dequote #1835
• Bump bundled SQLCipher to version 4.14.0 #1837
• sqlite3_set_errmsg #1752
• Bump sqlite3-parser version #1838
• Fix UB in ToSqlOutput::from_rc #1839
• Ensure miri doesn't complain #1840
• Bump to actions/checkout@v6 #1842
• Add support to UtcDateTime #1843, #1844
• Bump bundled SQLite version to 3.53.1 #1848
• Replace some cfg(not by cfg_select #1850

Full Changelog: rusqlite/rusqlite@v0.39.0...v0.40.0

0.39.0

What's Changed

• Fix constraints on VTab Aux data #1778, #1771
• Fix docs.rs generation #1779
• Fix a small typo in rollback_hook docstring #1780
• Fix some warnings from Intellij #1781
• Minimal doc for features #1783
• Clear hooks only for owning connections #1785, #1784
• Fix link to SQLite C Interface, Prepare Flags #1787
• Comment functions which are not usable from a loadable extension #1789
• Factorize code #1792
• Update getrandom to 0.4 #1798
• Update Cargo.toml #1800
• Fix appveyor #1807
• Add support to unix timestamp for chrono, jiff and time #1808, #1803
• fix(trace): check that the sql string pointer is not NULL #1805
• Bump bundled SQLite version to 3.51.3 #1818

... (truncated)

Commits

• 6d3c282 Merge pull request #1856 from gwenn/0.40.1
• 2ba28b7 Prepare next release
• a021dc7 Merge pull request #1854 from gwenn/savepoint
• 534a149 Merge pull request #1855 from gwenn/hashlink
• 6d9764f Bump hashlink version
• fa574eb Use sqlite3_keyword_check
• 15385cc Fix SQL injection when SAVEPOINT name is tainted
• e5e48f2 Merge pull request #1853 from gwenn/3.53.2
• ac22292 Bump bundled SQLite version to 3.53.2
• c5f8828 Merge pull request #1852 from gwenn/clippy
• Additional commits viewable in compare view

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	opentimstdf-docs	6b770cd	Jul 21 2026, 12:41 AM

[Nathan-D-R]

Merged manually in 7ae1f71 (branch + --no-ff merge at 3b335d4 — commit-workflow, not a PR merge, per how we're closing out this repo's Dependabot backlog).

Bumped rusqlite to 0.40.1 as proposed (Cargo.lock diff matches this PR's exactly). This spans nine minor releases (0.32-0.40), so I went through each release's breaking-change notes before merging:

• 0.32.0: SQLITE_OPEN_EXRESCODE on by default (extended result codes) — we never match on the inner SQLite error code, only wrap rusqlite::Error with #[from], so unaffected.
• 0.35.0: prepare()/execute() now reject multi-statement SQL — all our queries are single-statement, unaffected.
• 0.38.0: u64/usize ToSql/FromSql impls disabled by default — we only ever bind/read u32 (frame_id, target_id, precursor_id) and cast through i64 in codec::frame_from_row, never u64/usize directly, so unaffected. Statement cache made optional, but we never use prepare_cached.
• 0.40.0: VTab macro breakage — we don't use virtual tables.

No source changes were needed. Verified before merging: cargo build/clippy (workspace, all-targets, -D warnings matching CI's RUSTFLAGS)/test/fmt --check all pass, including the roundtrip tests that exercise Reader against real PRIDE-sourced bundles through the Mutex path. cargo audit clean too.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.