build(deps): bump the cargo-minor-patch group across 1 directory with 3 updates

[dependabot]

Bumps the cargo-minor-patch group with 3 updates in the / directory: rand, hyper-util and syn.

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

• Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
• Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
• Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

• Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

• 9e7d328 Prepare rand 0.10.3 (#1840)
• f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
• ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
• c994eb1 docs: fix angle unit in quick start example (#1839)
• 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
• 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
• bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
• 521fab6 Stop pinning dependencies (#1820)
• 3f7c433 Stop pinning dependencies
• cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
• Additional commits viewable in compare view

Updates hyper-util from 0.1.20 to 0.1.21

Release notes

Sourced from hyper-util's releases.

v0.1.21

Additions

• Add crate-level documentation. (#327)
• Add client::legacy::Builder::http2_header_table_size() method. (#274)
• Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
• Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
• Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
• Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

• Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
• Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
• Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
• Fix client::pool::cache to preserve readiness with clones. (#297)
• Fix client::pool::cache to wake its waiters in FIFO order. (#298)
• Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
• Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
• Fix client::proxy::matcher handling for IP wildcards. (#309)
• The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
• Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

... (truncated)

Changelog

Sourced from hyper-util's changelog.

0.1.21 (2026-09-24)

This release bumps the minimal supported Rust version (MSRV) from 1.64 to 1.85.

This release bumps the rust edition from 2021 to 2024.

Additions

• Add crate-level documentation. (#327)
• Add client::legacy::Builder::http2_header_table_size() method. (#274)
• Add client::legacy::Builder::http2_max_concurrent_streams() method. (#274)
• Add client::legacy::Builder::http2_max_local_error_reset_streams() method. (#277)
• Add client::legacy::connect::HttpConnector::set_mark() method. (#303)
• Add rt::tracing::WithSpanExecutor<E>, hyper_util::rt::tracing::CurrentSpanExecutor<E>, and hyper_util::rt::tracing::MkSpanExecutor<E, F> executors. (#323)

Fixes

• Fix client::legacy::Client so that it properly validates CONNECT responses. (#315)
• Fix client::legacy::Client to cancel the idle interval once its pool empties. (#292)
• Fix client::legacy::Client to properly handle IPv6 addresses when using a SOCKS proxy. (#302)
• Fix client::pool::cache to preserve readiness with clones. (#297)
• Fix client::pool::cache to wake its waiters in FIFO order. (#298)
• Fix client::pool::singleton::Singleton to properly handle cancellation. (#299)
• Fix client::pool::singleton::Singleton to share errors with all waiters. (#296)
• Fix client::proxy::matcher handling for IP wildcards. (#309)
• The tokio/net feature is narrowed to the client-legacy feature flag, from the client feature flag. (#276)
• Various fixes to the client::legacy::Client's SOCKS proxying. (#302) (#307) (#308) (#310)

Changes

This release contains a minor behavioral change for users of the tracing feature flag to be aware of.

This feature flag was introduced in v0.1.11. When enabled, rt::TokioExecutor<E> began propagating the currently active tracing::Span to spawned tasks when hyper::rt::Executor::execute() is called. This caused issues for some users, due to background tasks keeping a span open for the duration of a long-lived connection.

This behavior has now been removed from rt::TokioExecutor<E> (#322) by default. A collection of executor wrappers have been added to a new rt::tracing submodule, to provide facilities for instrumenting a client or server's spawned tasks. See the module-level documentation of rt::tracing for more information.

To temporarily preserve the previous rt::TokioExecutor<E> span propagation behavior, enable the rt-tracing-exec-force feature. Note that this feature flag will be removed in a future release.

Commits

• 23a8689 v0.1.21
• cdb2346 doc(client/pool): add broken_intra_doc_links allowance (#326)
• 13b6110 chore(error): remove disabled hyper_util::error submodule (#325)
• b9ee451 docs(lib): add crate-level documentation (#327)
• d6b7d7e feat(rt/tracing): introduce tracing executors (#323)
• f2da915 feat(client): add HttpConnector::set_mark for SO_MARK (#303)
• 4dbd494 feat(rt): change TokioExecutor to not trace, add rt-tracing-exec-force feat...
• d480d9f fix(client): parse proxy CONNECT response with httparse (#315)
• 7e0958b chore(ci): simplify msrv check (#317)
• 0734568 chore(ci): update to actions/checkout@v7 (#316)
• Additional commits viewable in compare view

Updates syn from 3.0.5 to 3.0.6

Release notes

Sourced from syn's releases.

3.0.6

• Fix parsing interpolated lifetime at statement start (#2082)

Commits

• 559cab5 Release 3.0.6
• 9088cad Merge pull request #2082 from dtolnay/lifetimevar
• 3eb43bb Fix parsing interpolated lifetime at statement start
• 7b2f6f9 Add regression test for issue 2081
• d55bcd2 Update test suite to nightly-2026-09-13
• 8e37bca Resolve non_kebab_case_bins warning
• 4dfd88f Update test suite to nightly-2026-09-06
• See full diff in compare view

[krisztianfekete]

@dependabot rebase