chore(deps): bump the patch group across 1 directory with 7 updates

[dependabot]

Bumps the patch group with 7 updates in the / directory:

Package	From	To
thiserror	2.0.18	2.0.19
bytes	1.12.0	1.12.1
rustc-hash	2.1.2	2.1.3
serde	1.0.228	1.0.229
serde_json	1.0.150	1.0.151
libc	0.2.186	0.2.189
webpki-roots	1.0.6	1.0.9

Updates thiserror from 2.0.18 to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

• Update to syn 3

Commits

• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
• c50e387 chore: improve thiserror maintenance path
• d4a2507 Raise minimum tested compiler to rust 1.85
• 99e8a6c Unpin CI miri toolchain
• 9ac165c Pin CI miri to nightly-2026-02-11
• Additional commits viewable in compare view

Updates bytes from 1.12.0 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Commits

• 76c0fbb Release bytes v1.12.1 (#838)
• 924c82b Handle unwinding from Box::new (#837)
• See full diff in compare view

Updates rustc-hash from 2.1.2 to 2.1.3

Changelog

Sourced from rustc-hash's changelog.

2.1.3

• Use derive_const to fix feature = "nightly" build
• Internally update to rand 0.9

Commits

• c13e7cc Merge pull request #78 from Noratrieb/new-version-2-1-3
• 4c3fabd Bump to 2.1.3
• 3f1c099 Merge pull request #64 from DaniPopes/rand-0.9
• 07c3f48 Merge pull request #77 from DaniPopes/const-update
• cbf0baf Use derive_const in nightly feature
• c74d2b3 Update to rand 0.9
• See full diff in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• See full diff in compare view

Updates libc from 0.2.186 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

• Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
• Linux SPARC: Enable the clone3 syscall (#4980)
• Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

• Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

• Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
• NuttX: Fix wchar_t definition under Arm (#5245)
• Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

• uClibc now supports a similar configuration option:

  RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

• Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
• Linux SPARC: Enable the clone3 syscall (#4980)
• Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

• Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

• Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
• NuttX: Fix wchar_t definition under Arm (#5245)
• Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
• uClibc now supports a similar configuration option:

... (truncated)

Commits

• ef0906e libc: Release 0.2.189
• 5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
• 3e51062 psp: Fix overflowing_literals warnings
• e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
• 63221b3 macros: Require safe in safe_f! invocations
• 707ab52 macros: Require unsafe in f! invocations
• 8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
• 8427909 windows: Add back link names for time-related symbols
• b4863fa nuttx: fix wchar_t definition under arm
• 41c683d nuttx: mirror type definitions
• Additional commits viewable in compare view

Updates webpki-roots from 1.0.6 to 1.0.9

Release notes

Sourced from webpki-roots's releases.

1.0.9

Changes:

• Add "Telia EC TLS Root CA v3" and "Telia RSA TLS Root CA v3" - https://bugzilla.mozilla.org/show_bug.cgi?id=2047804
• Add "SECOM TLS ECC Root CA 2024" and "SECOM TLS RSA Root CA 2024" - https://bugzilla.mozilla.org/show_bug.cgi?id=1943001
• Remove "Atos TrustedRoot 2011" - https://bugzilla.mozilla.org/show_bug.cgi?id=2017374

What's Changed

• Take webpki-root-certs lockfile update by @​weifanglab in rustls/webpki-roots#125
• 1.0.9: upstream updates by @​ctz in rustls/webpki-roots#126

New Contributors

• @​weifanglab made their first contribution in rustls/webpki-roots#125

Full Changelog: rustls/webpki-roots@v/1.0.8...v/1.0.9

1.0.8

• Remove SecureSign Root CA12 root; see https://bugzilla.mozilla.org/show_bug.cgi?id=2031105

What's Changed

• Test MSRV with 1.70 by @​ctz in rustls/webpki-roots#122
• Take semver-compatible dependency updates by @​djc in rustls/webpki-roots#123
• 1.0.8: remove SecureSign Root CA12 root by @​ctz in rustls/webpki-roots#124

Full Changelog: rustls/webpki-roots@v/1.0.7...v/1.0.8

1.0.7

For their April 2026 root store changes, Mozilla has made more changes than usual:

These changes are part of Mozilla’s ongoing root store maintenance under the Mozilla Root Store Policy (MRSP), including §7.4 (Root CA Lifecycles) and §7.5.3 (Transition Plans). They reflect a combination of lifecycle-based transitions, CA operator requests, and alignment with intended certificate usage, including retiring older or less suitable root certificates, enforcing clear separation of trust purposes (e.g., TLS vs. S/MIME), and reducing unnecessary trust surface in the Web PKI ecosystem. Collectively, these actions help to ensure that root certificates are relied upon only for their intended and actively maintained use cases, or are retired in accordance with established distrust timelines.

This removes:

• CN=Certigna O=Dhimyotis
• CN=COMODO Certification Authority O=COMODO CA Limited
• CN=DigiCert Assured ID Root CA O=DigiCert Inc OU=www.digicert.com
• CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com
• CN=DigiCert High Assurance EV Root CA O=DigiCert Inc OU=www.digicert.com
• CN=FIRMAPROFESIONAL CA ROOT-A WEB O=Firmaprofesional SA
• CN=GTS Root R2 O=Google Trust Services LLC
• CN=QuoVadis Root CA 2 O=QuoVadis Limited
• CN=QuoVadis Root CA 3 O=QuoVadis Limited
• CN=Secure Global CA O=SecureTrust Corporation
• CN=SecureTrust CA O=SecureTrust Corporation
• CN=SwissSign Gold CA - G2 O=SwissSign AG
• CN=TeliaSonera Root CA v1 O=TeliaSonera
• CN=Trustwave Global Certification Authority O=Trustwave Holdings, Inc.
• CN=Trustwave Global ECC P256 Certification Authority O=Trustwave Holdings, Inc.
• CN=Trustwave Global ECC P384 Certification Authority O=Trustwave Holdings, Inc.

... (truncated)

Commits

• 0a553db 1.0.9: upstream updates (#126)
• 1ce667b Take webpki-root-certs lockfile update (#125)
• 50729cd 1.0.8: remove SecureSign Root CA12 root (#124)
• c965c54 Take semver-compatible dependency updates (#123)
• a83a3c9 Move MSRV to 1.70 (#122)
• be94846 Update dependencies (#119)
• 76476f9 Prepare 1.0.7 (#120)
• ed392f4 Take semver-compatible updates (#118)
• ec8b744 Take semver-compatible dependency updates (#117)
• 84a0c23 Take semver-compatible dependency updates (#116)
• See full diff in compare view

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}