chore(deps)(deps): bump the cargo-minor-and-patch group across 1 directory with 5 updates

[dependabot]

Bumps the cargo-minor-and-patch group with 5 updates in the / directory:

Package	From	To
uuid	1.23.3	1.23.4
rand	0.10.1	0.10.2
bytes	1.11.1	1.12.0
rustls	0.23.40	0.23.41
jsonschema	0.46.5	0.46.10

Updates uuid from 1.23.3 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

• Fix up name of fuzz script in readme by @​KodrAus in uuid-rs/uuid#888
• document fixes by @​frostyplanet in uuid-rs/uuid#889
• Prepare for 1.23.4 release by @​KodrAus in uuid-rs/uuid#890

New Contributors

• @​frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits

• 3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
• cba53d0 prepare for 1.23.4 release
• e347af4 Merge pull request #889 from frostyplanet/main
• e9bf55c doc: Fix broken link warnings
• 5351af4 doc: Enable feature flag label for docs.rs
• 1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
• c9619f6 fix up name of fuzz script in readme
• See full diff in compare view

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

Updates bytes from 1.11.1 to 1.12.0

Release notes

Sourced from bytes's releases.

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

• 91402ce Release bytes v1.12.0 (#831)
• 2256e6d chore: add safety comments on unsafe blocks (#827)
• 245adff Pass vtable data by value (#826)
• 00cc5ff Implement BytesMut::extend_from_within (#818)
• 5b79d31 Merge tag 'v1.11.1'
• 804ee6d Make try_unsplit method public (#746)
• fd426ca Exclude development scripts from published package (#810)
• b4ed70d Add test for copy_to_bytes() -> BytesMut avoiding clone (#809)
• 94e4291 Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capac...
• acd1e0f Fix get_int if nbytes is zero (#806)
• See full diff in compare view

Updates rustls from 0.23.40 to 0.23.41

Commits

• 642a103 ci: drop Taplo job
• 752c144 Drop nightly clippy tests
• 8d8611a Fix new clippy::useless-borrows-in-formatting
• ebf3297 Fix new clippy::manual_clear
• 46808e7 ci: sync cargo-check-external-types nightly
• 041a8d2 Cargo deny: allow RUSTSEC-2026-0173
• 62e220e Take semver-compatible dependency updates
• 3c14696 Upgrade to hickory-resolver 0.26
• 848a2cc connect-tests: delete ech.rs
• 5ce9cac Bump version to 0.23.41
• Additional commits viewable in compare view

Updates jsonschema from 0.46.5 to 0.46.10

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.46.10

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[Ruby] Release 0.46.10

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[Rust] Release 0.46.10

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[Python] Release 0.46.9

Fixed

• Stack overflow while preparing a registry containing deeply nested schema documents.

[Ruby] Release 0.46.9

Fixed

• Stack overflow while preparing a registry containing deeply nested schema documents.

[Rust] Release 0.46.9

Fixed

• multipleOf incorrectly rounds integer instances above 2^53 to f64 before the divisibility check on builds without the arbitrary-precision feature.
• Stack overflow while preparing a registry containing deeply nested schema documents.

[Python] Release 0.46.8

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[Ruby] Release 0.46.8

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[Rust] Release 0.46.8

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[Python] Release 0.46.7

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.46.10] - 2026-07-05

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[0.46.9] - 2026-07-02

Fixed

• multipleOf incorrectly rounds integer instances above 2^53 to f64 before the divisibility check on builds without the arbitrary-precision feature.
• Stack overflow while preparing a registry containing deeply nested schema documents.

[0.46.8] - 2026-07-01

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[0.46.7] - 2026-06-30

Fixed

• idn-hostname format accepted A-labels that decode to a disallowed code point (e.g. xn--7a).

[0.46.6] - 2026-06-24

Added

• IntoRegistryResource for Arc<Value>. #1129

Fixed

• prefixItems incorrectly recognised as a known keyword in Draft 2019-09 and earlier (it is 2020-12 only).
• pattern validation errors displayed the internally translated regex instead of the original schema pattern. #1149

Commits

• 6b7087e chore(ruby): Release 0.46.10
• a722ef5 chore(python): Release 0.46.10
• ecaecea chore(rust): Release 0.46.10
• 571e22b fix: Incorrect unevaluatedProperties and unevaluatedItems results when a ...
• 99cbafc chore: Unify codecov configs
• 91037c6 fix: Stack overflow with a self-referential $dynamicRef combined with `unev...
• a743a33 chore(ruby): Release 0.46.9
• 099cdd0 chore(python): Release 0.46.9
• b6c58f4 chore(rust): Release 0.46.9
• 1d78785 refactor: Extract jsonschema-regex crate
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: cargo, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.