[dependabot]

Bumps the cargo group with 8 updates:

Package	From	To
async-compression	0.4.51	0.4.52
brotli-decompressor	6.2.0	6.3.0
cc	1.10.0	1.11.1
compression-codecs	0.4.46	0.4.47
crc32fast	1.5.3	1.5.4
flate2	1.1.10	1.1.11
mime	0.3.17	0.3.18
smallvec	1.16.4	1.16.5

Updates async-compression from 0.4.51 to 0.4.52

Release notes

Sourced from async-compression's releases.

async-compression-v0.4.52

Fixed

• (gzip) validate and consume FHCRC header bytes (#511)

Other

• (clippy) Suppress clippy lint for macro-generated fields (#509)

Commits

• e637664 chore: release (#510)
• 7cbbb7b fix(gzip): validate and consume FHCRC header bytes (#511)
• 5bc8fed chore(clippy): Suppress clippy lint for macro-generated fields (#509)
• 7ab7d10 chore(deps): bump rust-lang/crates-io-auth-action from 1.0.5 to 1.0.6 (#507)
• 04a9843 chore(deps): bump MarcoIeni/release-plz-action from 0.5.139 to 0.5.147 (#508)
• 29ae167 chore(deps): bump taiki-e/install-action from 2.87.21 to 2.88.0 (#506)
• See full diff in compare view

Updates brotli-decompressor from 6.2.0 to 6.3.0

Commits

• 8d92107 version bump
• 5646fad Command loop: distance root windows, branchless NPOSTFIX > 0, and 32-bit tuning
• 82a519f Speed up decoder setup and add a 32-bit bit reader
• bb6668f Limit test allocations with atomics instead of a thread-local
• 407f85d Fold the one-shot allocation tests into the default allocator test
• 61dbe68 Restore the Rust 1.47 build floor in the command loop
• 9f9c422 Batch literal decoding in non-streaming command loop
• 950b4fb Unify command loop over <const SAFE: bool> with BitReaderSlice
• 67d2180 Decouple distance ringbuffer, wrap-copy, and literal block helpers from &mut ...
• b3eba49 Decouple dictionary copy helpers from &mut BrotliState
• Additional commits viewable in compare view

Updates cc from 1.10.0 to 1.11.1

Release notes

Sourced from cc's releases.

cc-v1.11.1

Fixed

• (target-parsing) wasm32-none-component (#2056)

cc-v1.11.0

Added

• add reproducible CodeView and source path remapping (#2071)

Fixed

• pass .cc sources to cl.exe as one -Tp<path> argument (#2063)
• pass -march=x86-64 to GCC on x86_64 Linux (#2061)

Changelog

Sourced from cc's changelog.

1.11.1 - 2026-11-06

Fixed

• (target-parsing) wasm32-none-component (#2056)

1.11.0 - 2026-10-30

Added

• add reproducible CodeView and source path remapping (#2071)

Fixed

• pass .cc sources to cl.exe as one -Tp<path> argument (#2063)
• pass -march=x86-64 to GCC on x86_64 Linux (#2061)

Commits

• 401b5a6 chore(cc): release v1.11.1 (#2087)
• f8de725 ci(deps): bump tombi-toml/setup-tombi from 1.9.7 to 1.9.8 (#2085)
• 3844867 ci(deps): bump tombi-toml/setup-tombi from 1.9.6 to 1.9.7 (#2083)
• 3a0f2a3 ci(deps): bump release-plz/action from 0.5.146 to 0.5.147 (#2081)
• 568f5e1 chore(ci): Install cuda for ubuntu-26.04 (#2082)
• 499d43e fix(target-parsing): wasm32-none-component (#2056)
• 995643d ci(deps): bump tombi-toml/setup-tombi from 1.9.1 to 1.9.6 (#2077)
• 0e224ff ci(deps): bump release-plz/action from 0.5.145 to 0.5.146 (#2079)
• 67e9f6d ci(deps): update rusqlite requirement from 0.40.0 to 0.41.0 (#2080)
• fe52971 chore(cc): release v1.11.0 (#2076)
• Additional commits viewable in compare view

Updates compression-codecs from 0.4.46 to 0.4.47

Release notes

Sourced from compression-codecs's releases.

compression-codecs-v0.4.47

Fixed

• (gzip) validate and consume FHCRC header bytes (#511)

Commits

• e637664 chore: release (#510)
• 7cbbb7b fix(gzip): validate and consume FHCRC header bytes (#511)
• 5bc8fed chore(clippy): Suppress clippy lint for macro-generated fields (#509)
• 7ab7d10 chore(deps): bump rust-lang/crates-io-auth-action from 1.0.5 to 1.0.6 (#507)
• 04a9843 chore(deps): bump MarcoIeni/release-plz-action from 0.5.139 to 0.5.147 (#508)
• 29ae167 chore(deps): bump taiki-e/install-action from 2.87.21 to 2.88.0 (#506)
• See full diff in compare view

Updates crc32fast from 1.5.3 to 1.5.4

Commits

• 118796a Release 1.5.4
• 3400e3b aarch64: merge the 3-way streams with precomputed shift tables (#76)
• b9e3b49 aarch64: read words without align_to (#74)
• 6b9d674 baseline: fold 8- and 4-byte tails with the slicing tables (#72)
• 7bfe6b1 Bounds-check the x86 SIMD loads (#73)
• c963d3d Deny unsafe code outside the SIMD backends (#75)
• 9ecaae9 Mark the x86 feature detection #[inline] (#71)
• d28c588 Load the final partial block without a stack copy (#70)
• c438f1c Inline the Hasher constructor and update path (#69)
• See full diff in compare view

Updates flate2 from 1.1.10 to 1.1.11

Release notes

Sourced from flate2's releases.

v1.1.11

Fixed

• fixup! Complete sync flushes across output buffer boundaries (#581)
• Separate gzip header reads from compressed data
• Defer gzip input errors without losing read progress
• Preserve gzip header progress on input read errors (#571)

Other

• Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• Merge pull request #577 from rust-lang/fix-loop
• Setup trusted publishing for the flate2 crate
• Complete sync flushes across output buffer boundaries (#581)
• Fix "can by extended" typos in deflate and zlib write docs
• Merge pull request #579 from NUAAwqy/docs/fix-double-space
• Fix double space in read module doc comment
• Add missing preposition in README description
• Cover decoder retries across the output buffer boundary
• Drain output before refilling the buffer
• Clarify partial-write buffering behavior
• Avoid shifting buffered output on partial writes
• Merge pull request #567 from ndossche/more-asserts
• Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
• Fix encoder writes hanging after try_finish (#576)
• Avoid panicking when dropping unfinished compressors
• Merge pull request #565 from HDauven/zlib-rs-uninit-output
• still allow resetting incomplete write decoders
• Assert return result of reset calls
• Reject incomplete streams in write decoders
• Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
• review
• Reject incomplete streams when finishing write-side decoders
• Preserve window size and gzip mode across Decompress::reset
• preserve runtime detection in backend examples (#570)
• Make miniz_oxide dictionary clearing explicit on reset
• Harden miniz_oxide decompressor reset
• Deduplicate zlib-rs flush conversions
• Use native zlib-rs uninitialized output

Changelog

Sourced from flate2's changelog.

1.1.11 - 2026-11-06

Fixed

• fixup! Complete sync flushes across output buffer boundaries (#581)
• Separate gzip header reads from compressed data
• Defer gzip input errors without losing read progress
• Preserve gzip header progress on input read errors (#571)

Other

• Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• Merge pull request #577 from rust-lang/fix-loop
• Setup trusted publishing for the flate2 crate
• Complete sync flushes across output buffer boundaries (#581)
• Fix "can by extended" typos in deflate and zlib write docs
• Merge pull request #579 from NUAAwqy/docs/fix-double-space
• Fix double space in read module doc comment
• Add missing preposition in README description
• Cover decoder retries across the output buffer boundary
• Drain output before refilling the buffer
• Clarify partial-write buffering behavior
• Avoid shifting buffered output on partial writes
• Merge pull request #567 from ndossche/more-asserts
• Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
• Fix encoder writes hanging after try_finish (#576)
• Avoid panicking when dropping unfinished compressors
• Merge pull request #565 from HDauven/zlib-rs-uninit-output
• still allow resetting incomplete write decoders
• Assert return result of reset calls
• Reject incomplete streams in write decoders
• Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
• review
• Reject incomplete streams when finishing write-side decoders
• Preserve window size and gzip mode across Decompress::reset
• preserve runtime detection in backend examples (#570)
• Make miniz_oxide dictionary clearing explicit on reset
• Harden miniz_oxide decompressor reset
• Deduplicate zlib-rs flush conversions
• Use native zlib-rs uninitialized output

Commits

• cd06529 chore: release v1.1.11
• 6ff4098 Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• 5f68913 Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• 5582d95 fixup! Complete sync flushes across output buffer boundaries (#581)
• d05c7c4 Merge pull request #577 from rust-lang/fix-loop
• 5c7ee7a Merge pull request #583 from Kobzol/trusted-publishing
• cc527c6 Setup trusted publishing for the flate2 crate
• 54f49cd Merge pull request #580 from NUAAwqy/fix/can-by-extended-typo
• 491df15 Complete sync flushes across output buffer boundaries (#581)
• a7a1161 Fix "can by extended" typos in deflate and zlib write docs
• Additional commits viewable in compare view

Updates mime from 0.3.17 to 0.3.18

Commits

• 89e3ef4 v0.3.18
• c8eb7e2 fix: correct mime equality of unicode parameters
• 9d00207 fix: use a loop instead of recursion to prevent stack overflow
• 17321cc style: add explicit lifetimes
• 3610d80 Replace unmaintained/outdated GitHub Actions (#150)
• 6842ffc migrate CI from Travis CI to GitHub Actions (and make it happy) (#149)
• 563350c Remove unwanted test (#147)
• See full diff in compare view

Updates smallvec from 1.16.4 to 1.16.5

Release notes

Sourced from smallvec's releases.

v1.16.5

What's Changed

• ci: port v2 CI to v1 by @​alejandro-vaz in smallvec/smallvec#853

Full Changelog: smallvec/smallvec@v1.16.4...v1.16.5

Commits

• 6e90005 ci: port v2 CI to v1 (#853)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions