chore(deps): bump the patch-updates group across 1 directory with 7 updates

[dependabot]

Bumps the patch-updates group with 7 updates in the / directory:

Package	From	To
rand	0.10.1	0.10.2
uuid	1.23.3	1.23.4
jiff	0.2.28	0.2.31
quinn	0.11.9	0.11.11
rustls	0.23.40	0.23.41
mdns-sd	0.20.0	0.20.1
bytes	1.12.0	1.12.1

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

Updates uuid from 1.23.3 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

• Fix up name of fuzz script in readme by @​KodrAus in uuid-rs/uuid#888
• document fixes by @​frostyplanet in uuid-rs/uuid#889
• Prepare for 1.23.4 release by @​KodrAus in uuid-rs/uuid#890

New Contributors

• @​frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits

• 3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
• cba53d0 prepare for 1.23.4 release
• e347af4 Merge pull request #889 from frostyplanet/main
• e9bf55c doc: Fix broken link warnings
• 5351af4 doc: Enable feature flag label for docs.rs
• 1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
• c9619f6 fix up name of fuzz script in readme
• See full diff in compare view

Updates jiff from 0.2.28 to 0.2.31

Changelog

Sourced from jiff's changelog.

0.2.31 (2026-06-29)

This release fixes a minor bug in tests that prevents the crate from running through standard build processes in Linux distributions downstream.

• #594: Fix imports in recently added tests.

0.2.30 (2026-06-29)

This release fixes a safety soundness bug in Jiff's lower level printing APIs. There is also a nice performance improvement to civil::Date::weekday, which also improves downstread routines like civil::Date::nth_weekday and datetime<-->timestamp conversions in some cases.

Enhancements:

• #591: Improve the performance of weekday calculations from Gregorian dates by 30-50%.

Bug fixes:

• #592: Fix safety soundness bug when using a non-empty String destination buffer with lower level printing APIs inside of jiff::fmt.

0.2.29 (2026-06-20)

This release adds support for [defmt], which is a highly efficient logging framework that targets resource-constrained devices, like microcontrollers.

Enhancements:

• #505: Add support for the defmt crate by implementing defmt::Format on the principle public types in Jiff.
• #584: Add Zoned::UNIX_EPOCH as a constant.
• #587: Change the Debug output for civil::ISOWeekDate to match the Debug output style of other primitive datetime types.

Bug fixes:

• #525: Fix a bug that prevented time zone lookups when using an on-disk time zone database on Windows.
• #539:

... (truncated)

Commits

• 8fb795f 0.2.31
• 528207f changelog: 0.2.31
• 91ee475 test: use crate::… instead of jiff::… in a couple of lib tests
• 4c3a86e 0.2.30
• 5cb4c43 changelog: 0.2.30
• 9e8f1fc fmt: add missing SAFETY comment
• 90823a4 tz: beef up the safety comment in the emscripten call
• fadac1c tz: drop use of dlerror
• 62db326 fmt: fix soundness bug
• df6885d civil: fast weekday calculation
• Additional commits viewable in compare view

Updates quinn from 0.11.9 to 0.11.11

Release notes

Sourced from quinn's releases.

quinn-proto 0.11.11

What's Changed

• Prefer sending extra ping again by @​flub in quinn-rs/quinn#2172
• fix: Do not produce tail-loss probes larger than segment size by @​flub in quinn-rs/quinn#2167
• Avoid inference hazard for integer comparisons by @​djc in quinn-rs/quinn#2188
• fix: respecting max_datagrams in poll_transmit by @​filipe-cantarelli in quinn-rs/quinn#2185
• Bump the quinn-proto version to 0.11.11 for release by @​faern in quinn-rs/quinn#2209

Commits

• a7499b8 Bump versions for release
• 7c1970f proto: yield error on too many gaps in assembler
• fe5ac49 congestion: avoid double-reducing CUBIC fast convergence
• c1e903b fix(quinn): handle overdue timers without polling the async timer
• b3b20e1 quinn-udp: allow to use windows-sys 0.61
• 6f03ca3 quinn-proto: drop Initials silently when saturated
• 41c8527 quinn: fix ref count logic for ConnectionRef and EndpointRef
• 73ea1dd Remove RecvStreams from blocked_readers on stop
• cf16bfd Early return in RecvStream::drop()
• af2e4e5 Fix the (pre-existing) rightward drift by inverting conditions
• Additional commits viewable in compare view

Updates rustls from 0.23.40 to 0.23.41

Commits

• 642a103 ci: drop Taplo job
• 752c144 Drop nightly clippy tests
• 8d8611a Fix new clippy::useless-borrows-in-formatting
• ebf3297 Fix new clippy::manual_clear
• 46808e7 ci: sync cargo-check-external-types nightly
• 041a8d2 Cargo deny: allow RUSTSEC-2026-0173
• 62e220e Take semver-compatible dependency updates
• 3c14696 Upgrade to hickory-resolver 0.26
• 848a2cc connect-tests: delete ech.rs
• 5ce9cac Bump version to 0.23.41
• Additional commits viewable in compare view

Updates mdns-sd from 0.20.0 to 0.20.1

Release notes

Sourced from mdns-sd's releases.

v0.20.1

This is a small feature and maintenance release.

New features

• Add IfKind::Predicate and a new IfPredicate type, allowing interfaces to be selected with a custom predicate function (e.g. matching by interface name pattern). (#474, commit fd72146)

What's Changed

• chore(deps): update by @​CosminPerRam in keepsimple1/mdns-sd#454
• Add IfPredicate for more flexible interface filtering by @​MAlba124 in keepsimple1/mdns-sd#474
• prepare for a new release 0.20.1 by @​keepsimple1 in keepsimple1/mdns-sd#475

New Contributors

• @​MAlba124 made their first contribution in keepsimple1/mdns-sd#474

Full Changelog: keepsimple1/mdns-sd@v0.20.0...v0.20.1

Changelog

Sourced from mdns-sd's changelog.

Version 0.20.1 (2026-06-28)

This is a small feature and maintenance release.

New features

• Add IfKind::Predicate and a new IfPredicate type, allowing interfaces to be selected with a custom predicate function (e.g. matching by interface name pattern). (#474, commit fd72146)

Other changes

• chore(deps): update dependencies. (#454, commit 06bdad1)

All changes

• fd72146 2026-06-22 Add IfPredicate for more flexible interface filtering (#474) (MAlba124)
• 06bdad1 2026-06-16 chore(deps): update (#454) (CosminPerRam)

Thanks and welcome our new contributor @​MAlba124 !

Commits

• c91cd35 prepare for a new release 0.20.1 (#475)
• fd72146 Add IfPredicate for more flexible interface filtering (#474)
• 06bdad1 chore(deps): update (#454)
• See full diff in compare view

Updates bytes from 1.12.0 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Commits

• 76c0fbb Release bytes v1.12.1 (#838)
• 924c82b Handle unwinding from Box::new (#837)
• See full diff in compare view

[forkwright]

cargo deny fails on this group: error[duplicate]: found 2 duplicate entries for crate 'flume' (plus transitive windows-* duplicates). One of the 7 patch bumps splits flume into two versions, which the bans policy rejects. Held — not merging red per policy. Needs the culprit bump excluded from the group (dependabot will regroup) or a scoped deny skip once the benign-vs-real split is confirmed. Low priority vs. the current lifecycle keystone; revisiting after.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.