chore(deps): bump the rust-patch group with 6 updates

[dependabot]

Bumps the rust-patch group with 6 updates:

Package	From	To
cc	1.2.58	1.2.61
rustls	0.23.37	0.23.39
rustc-hash	2.1.1	2.1.2
napi	3.8.4	3.8.5
napi-derive	3.5.3	3.5.4
rand	0.10.0	0.10.1

Updates cc from 1.2.58 to 1.2.61

Release notes

Sourced from cc's releases.

cc-v1.2.61

Other

• fix OutputKind::Capture documentation (#1705)

cc-v1.2.60

Fixed

• (ar) suppress warnings from D modifier probe (#1700)

cc-v1.2.59

Fixed

• (ar) deterministic archives with D modifier (#1697)

Other

• Regenerate target info (#1698)
• Fix target abi parsing for sanitiser targets (#1695)

Changelog

Sourced from cc's changelog.

1.2.61 - 2026-04-24

Other

• fix OutputKind::Capture documentation (#1705)

1.2.60 - 2026-04-10

Fixed

• (ar) suppress warnings from D modifier probe (#1700)

1.2.59 - 2026-04-03

Fixed

• (ar) deterministic archives with D modifier (#1697)

Other

• Regenerate target info (#1698)
• Fix target abi parsing for sanitiser targets (#1695)

Commits

• 360f691 chore(cc): release v1.2.61 (#1707)
• 17a2788 Bump taiki-e/install-action from 2.75.16 to 2.75.17 (#1706)
• da52db7 command_helpers.rs: fix OutputKind::Capture documentation (#1705)
• ee64d58 Bump taiki-e/install-action from 2.75.4 to 2.75.5 (#1703)
• 78cf7e4 CI: Hash-pin all actions, apply other suggestions from zizmor (#1702)
• 7cad9f5 chore(cc): release v1.2.60 (#1701)
• c15c3eb fix(ar): suppress warnings from D modifier probe (#1700)
• f4c5ac7 chore(cc): release v1.2.59 (#1699)
• 9cfcecb Regenerate target info (#1698)
• 025d046 fix(ar): deterministic archives with D modifier (#1697)
• Additional commits viewable in compare view

Updates rustls from 0.23.37 to 0.23.39

Commits

• 0541605 Cargo: version 0.23.38 -> 0.23.39
• 860798e Cargo: update semver compat deps
• 7b37468 Take semver-compatible dependency updates
• 6134204 Adapt to updated nightly features
• d4b3ec5 Apply suggestions from clippy 1.95
• 6b116bc Bump version of rustls
• a1da268 client: allow skipping selected ALPN validation
• 5b3ef11 Fix ambiguous panic! warning
• 0f0fbf5 Fix clippy::result_large_err
• 7e99b52 Update semver-compatible dependencies
• See full diff in compare view

Updates rustc-hash from 2.1.1 to 2.1.2

Changelog

Sourced from rustc-hash's changelog.

2.1.2

• Refactor byte hashing to remove unreachable panic

Commits

• fdb275c Merge pull request #67 from Noratrieb/new-version
• acafa43 Prepare 2.1.2
• 140e525 Merge pull request #65 from morrisonlevi/split_first_chunk
• f061387 style: use consistent range format
• 211455c refactor!: use split_first_chunk to help optimizer
• 464a82f Merge pull request #63 from estebank/const-Default
• 2170d5e On nightly, impl const Default
• 1a998d5 Merge pull request #62 from CryZe/128-bit-on-more-platforms
• 6849c16 Use 128-bit Widening Multiply on More Platforms
• See full diff in compare view

Updates napi from 3.8.4 to 3.8.5

Release notes

Sourced from napi's releases.

napi-v3.8.5

Fixed

• (napi) preserve generator class methods (#3231)
• (deps) update rust crate ctor to v0.10.0 (#3224)
• (deps) disable ctor priority feature (#3209)
• (deps) update rust crate ctor to v0.9.1 (#3204)
• (napi) handle ThreadsafeFunction callback errors gracefully during shutdown (#3188)
• (napi) populate Error::cause from ThreadsafeFunction callee-handled callbacks (#3162)
• correct typo in Either error message ("non" → "none") (#3183)

Commits

• 78eb068 chore: release (#3184)
• 490f7d5 build(deps): bump follow-redirects from 1.15.11 to 1.16.0 (#3237)
• d5c3c43 chore(release): publish
• d1e5b17 fix(cli): include napi9 in interactive new prompt (#3235)
• 0cb8eef fix(wasm-runtime): preserve full bigint values in fs proxy codec (#3233)
• 44aa08f fix(napi): preserve generator class methods (#3231)
• bdc492a chore(deps): update dependency oxc-parser to ^0.125.0 (#3230)
• daabe32 fix(cli): use target cwd for pre-publish git log lookup (#3228)
• 23abb8a fix(cli): remove stale browser metadata in non-WASI new projects (#3229)
• ce170eb fix(cli): apply enableTypeDef when generating new projects (#3214)
• Additional commits viewable in compare view

Updates napi-derive from 3.5.3 to 3.5.4

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.5.4

Fixed

• (deps) update rust crate ctor to v0.10.0 (#3224)
• (deps) disable ctor priority feature (#3209)
• (deps) update rust crate ctor to v0.9.1 (#3204)

Commits

• 78eb068 chore: release (#3184)
• 490f7d5 build(deps): bump follow-redirects from 1.15.11 to 1.16.0 (#3237)
• d5c3c43 chore(release): publish
• d1e5b17 fix(cli): include napi9 in interactive new prompt (#3235)
• 0cb8eef fix(wasm-runtime): preserve full bigint values in fs proxy codec (#3233)
• 44aa08f fix(napi): preserve generator class methods (#3231)
• bdc492a chore(deps): update dependency oxc-parser to ^0.125.0 (#3230)
• daabe32 fix(cli): use target cwd for pre-publish git log lookup (#3228)
• 23abb8a fix(cli): remove stale browser metadata in non-WASI new projects (#3229)
• ce170eb fix(cli): apply enableTypeDef when generating new projects (#3214)
• Additional commits viewable in compare view

Updates rand from 0.10.0 to 0.10.1

Changelog

Sourced from rand's changelog.

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

• Document panic behavior of make_rng and add #[track_caller] (#1761)
• Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

Commits

• 27ff4cb Prepare v0.10.1: deprecate feature log (#1763)
• 98d0638 make_rng: document panic and add #[track_caller] (#1761)
• 54e5eaa Fix doc error (#1758)
• 1ce4c08 Bump itoa from 1.0.17 to 1.0.18 in the all-deps group (#1756)
• ccb734b docs: fix typo in doc comment (#1754)
• 357eb7d Bump libc from 0.2.182 to 0.2.183 in the all-deps group (#1753)
• 5e77fe5 Fix trait references in documentation (#1752)
• da89185 Bump the all-deps group with 3 updates (#1751)
• 50516ff Bump the all-deps group with 2 updates (#1749)
• fd71de9 Bump the all-deps group with 2 updates (#1747)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Assignees

The following users could not be added as assignees: aramhammoudeh. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.