[dependabot]

Bumps the rust-dependencies group with 8 updates in the / directory:

Package	From	To
html5ever	0.39.0	0.40.1
arboard	3.6.1	3.7.0
serde_json	1.0.151	1.0.154
muda	0.21.1	0.21.2
objc2	0.5.3	0.6.5
objc2-foundation	0.2.2	0.3.2
getrandom	0.3.4	0.4.3
sha2	0.10.9	0.11.1

Updates html5ever from 0.39.0 to 0.40.1

Commits

• See full diff in compare view

Updates arboard from 3.6.1 to 3.7.0

Release notes

Sourced from arboard's releases.

v3.7.0

What's Changed

• Return a conversion failure error when CGImageCreate fails by @​complexspaces in 1Password/arboard#205
• Properly encode/decode MIME=text/uri-list by @​luca020400 in 1Password/arboard#217
• Increase windows-sys lower bound to 0.62 by @​T-256 in 1Password/arboard#220
• Add example to Get and Set by @​Its-Just-Nans in 1Password/arboard#224
• Add a wait_once to support waiting for just one clipboard request by @​joshtriplett in 1Password/arboard#213

New Contributors

• @​luca020400 made their first contribution in 1Password/arboard#217
• @​T-256 made their first contribution in 1Password/arboard#220
• @​Its-Just-Nans made their first contribution in 1Password/arboard#224
• @​joshtriplett made their first contribution in 1Password/arboard#213

Full Changelog: 1Password/arboard@v3.6.1...v3.7.0

Commits

• 5f5c863 Release 3.7.0
• ab9663b Add example demonstrating wait_once
• b9000b1 Add a wait_once to support waiting for just one clipboard request
• 2ea0ff6 wayland: Factor out option setting into a method
• b7e47c8 Update lib.rs
• 2b2050e Bump step-security/setup-rust-toolchain from 1.16.1 to 2.0.0
• 6b09682 Bump step-security/harden-runner from 2.20.0 to 2.21.1
• 9f7b05c Bump actions/checkout from 4.3.1 to 7.0.0
• 890e919 Apply GitHub Actions security best practices
• d7c6cc9 bump windows-sys lower bound
• Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

• Support preserve_order in no_std builds (#1333, thanks @​razmser)

v1.0.153

• Report invalid UTF-8 at the first bad byte (#1345, thanks @​00200200)

v1.0.152

• Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
• Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @​yuxi-liu-wired)

Commits

• 20572a6 Release 1.0.154
• a91bfaf Fix RandomState links in map documentation
• 3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
• 4b2d726 Release 1.0.153
• 83335ee Touch up PR 1345
• 4b4810a Resolve range_plus_one pedantic clippy lint
• 8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
• 452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
• c9f1e3b Release 1.0.152
• 854fc70 Touch up PR 1347
• Additional commits viewable in compare view

Updates muda from 0.21.1 to 0.21.2

Release notes

Sourced from muda's releases.

muda v0.21.2

[0.21.2]

• 1802a0d (#430 by @​wonfen) On Windows, Fix menu items going dead after a process has created about 64.5k menus and items.

Updating crates.io index
   Packaging muda v0.21.2 (/home/runner/work/muda/muda)
warning: ignoring example `tao` as `examples/tao.rs` is not included in the published package
warning: ignoring example `winit` as `examples/winit.rs` is not included in the published package
warning: ignoring example `winit_gtk4` as `examples/winit_gtk4.rs` is not included in the published package
warning: ignoring example `wry` as `examples/wry.rs` is not included in the published package
    Updating crates.io index
    Packaged 58 files, 649.2KiB (137.3KiB compressed)
   Verifying muda v0.21.2 (/home/runner/work/muda/muda)
 Downloading crates ...
  Downloaded autocfg v1.5.1
  Downloaded atk-sys v0.18.2
  Downloaded bitflags v2.13.1
  Downloaded atk v0.18.2
  Downloaded cairo-rs v0.18.5
  Downloaded futures-task v0.3.33
  Downloaded gdk-pixbuf-sys v0.18.0
  Downloaded futures-io v0.3.33
  Downloaded dpi v0.1.2
  Downloaded equivalent v1.0.2
  Downloaded futures-macro v0.3.33
  Downloaded cairo-sys-rs v0.18.2
  Downloaded field-offset v0.3.6
  Downloaded gobject-sys v0.18.0
  Downloaded gtk3-macros v0.18.2
  Downloaded heck v0.4.1
  Downloaded proc-macro-error-attr v1.0.4
  Downloaded serde_spanned v0.6.9
  Downloaded toml_datetime v0.6.3
  Downloaded proc-macro-crate v2.0.2
  Downloaded version_check v0.9.5
  Downloaded proc-macro-crate v1.3.1
  Downloaded memoffset v0.9.1
  Downloaded rustc_version v0.4.1
  Downloaded heck v0.5.0
  Downloaded futures-core v0.3.33
  Downloaded futures-executor v0.3.33
  Downloaded gdk-pixbuf v0.18.5
  Downloaded slab v0.4.12
  Downloaded proc-macro-error v1.0.4
  Downloaded system-deps v6.2.2
</tr></table> 

... (truncated)

Changelog

Sourced from muda's changelog.

[0.21.2]

• 1802a0d (#430 by @​wonfen) On Windows, Fix menu items going dead after a process has created about 64.5k menus and items.

Commits

• 33dfdf7 apply version updates (#431)
• 1802a0d fix(windows): recycle menu command ids to keep them within 16 bits (#430)
• See full diff in compare view

Updates objc2 from 0.5.3 to 0.6.5

Commits

• d7d2fa2 Bump objc2 0.6.4 -> 0.6.5
• ed5d37c Cherry-pick #862 for objc2 v0.6.5
• 8852b42 Bump objc2 0.6.3 -> 0.6.4
• 2d39cba Cherry-pick ae1c875 for objc2 v0.6.4
• 2ace80b Cherry-pick relevant parts of 9bd26ee for objc2 v0.6.4
• 6780851 Bump dispatch2 0.3.0 -> 0.3.1
• ad96317 Cherry-pick e429f0a for dispatch2 v0.3.1
• ee273d9 Cherry-pick a4821be for dispatch2 v0.3.1
• b4167b5 Fix documentation on docs.rs
• f5df468 Bump objc2 0.6.1 -> 0.6.2
• Additional commits viewable in compare view

Updates objc2-foundation from 0.2.2 to 0.3.2

Commits

• 8b04944 Merge pull request #536 from madsmtm/new-versions
• a7ca37c Remove production-readyness warning from README
• 611e5f1 Don't require AppKit in UI tests
• 8e3ff12 Fix unstable-c-unwind tests
• cfc226e Fix flaky UI test
• e2abb0d Show diff for UI tests
• 6fef80d Fix tests on aarch64 / with newer LLVM
• 3cfb7c8 Fix doc test on NSMutableDictionary
• 1eb0c10 Bump icrate version 0.0.4 -> 0.1.0
• 6712bb1 Bump block2 version 0.3.0 -> 0.4.0
• Additional commits viewable in compare view

Updates getrandom from 0.3.4 to 0.4.3

Changelog

Sourced from getrandom's changelog.

0.4.3 - 2026-06-17

Added

• wasm64-unknown-unknown target support for wasm_js backend #848

Changed

• Drop wasip2 and wasip3 dependencies in favor of manual bindings #830

#830: rust-random/getrandom#830 #848: rust-random/getrandom#848

0.4.2 - 2026-03-03

Changed

• Bump r-efi dependency to v6 #814

Fixed

• Read errno only when it is set #810
• Check the return value of ProcessPrng on Windows #811

#810: rust-random/getrandom#810 #811: rust-random/getrandom#811 #814: rust-random/getrandom#814

0.4.1 - 2026-02-03

Fixed

• Documentation build on docs.rs #801

#801: rust-random/getrandom#801

0.4.0 - 2026-02-02

Added

• RawOsError type alias #739
• SysRng behind new feature sys_rng #751
• WASIp3 support #779
• extern_impl opt-in backend #786 #794
• Motor OS support #797

Changed

• Use Edition 2024 and MSRV 1.85 #749

#739: rust-random/getrandom#739 #749: rust-random/getrandom#749 #751: rust-random/getrandom#751 #779: rust-random/getrandom#779

... (truncated)

Commits

• 5e7cd57 Release v0.4.3 (#853)
• 1ea268a Use manual bindings for WASIp2/3 (#830)
• f7290b0 Update Cargo.lock (#852)
• 16ce801 Update Cargo.lock (#850)
• e5adfca Add wasm64-unknown-unknown support for wasm_js backend (#848)
• 626df8d Update Cargo.lock (#846)
• 4a01cb2 Update Cargo.lock (#841)
• f87bf39 Update Cargo.lock (#836)
• eadb879 ci: re-enable build job for x86_64-pc-cygwin (#832)
• d715d73 CI: Reduce the number of packages that are updated for wasip2 MSRV test (#825)
• Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.1

Commits

• 138dc5a Release sha2 v0.11.1 (#927)
• cf01056 sha2: fix unsafe_op_in_unsafe_fn lint, bump MSRV to 1.88 (#926)
• 7c59cad Update Cargo.lock (#921)
• f57b947 streebog: tweak internal implementation (#925)
• 336611f Fix cargo::manual_readme lint (#924)
• 1df8877 md2: fix clippy::needless_range_loop lint (#923)
• 6075989 sha2: fix loading of round constants on AArch64 backends (#922)
• eadfd90 Update Cargo.lock (#913)
• fa30840 blake2 v0.11.0 (#911)
• f6c786d ci: bump the all-deps group across 1 directory with 3 updates (#896)
• Additional commits viewable in compare view