chore(deps): bump the cargo-minor-patch group with 5 updates

[dependabot]

Bumps the cargo-minor-patch group with 5 updates:

Package	From	To
anyhow	1.0.102	1.0.103
arc-swap	1.9.1	1.9.2
aws-lc-rs	1.17.0	1.17.1
redis	1.2.4	1.3.0
time	0.3.51	0.3.53

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates arc-swap from 1.9.1 to 1.9.2

Changelog

Sourced from arc-swap's changelog.

1.9.2

• Document RefCnt must not panic (#208).

Commits

• See full diff in compare view

Updates aws-lc-rs from 1.17.0 to 1.17.1

Release notes

Sourced from aws-lc-rs's releases.

aws-lc-rs v1.17.1

🎉 AWS-LC FIPS v3 Module Has Been Validated

The AWS-LC FIPS v3 module has been awarded FIPS 140-3 validation by NIST's CMVP:

• [Certificate #5314](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5314) (static)
• [Certificate #5298](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5298) (dynamic)

Seek guidance from a local FIPS compliance expert regarding requirements for your deployment environments. Please consult the Security Policies associated with our certificates if you have questions.

aws-lc-fips-sys (utilized via the fips feature of aws-lc-rs) currently uses the validated FIPS v3 module.

• In the upcoming aws-lc-rs v1.18.0 release, we plan to switch aws-lc-fips-sys to our FIPS v4 branch.

What's Changed

• Support linking against a system-installed AWS-LC:
  • Set AWS_LC_SYS_SYSTEM_DIR or let pkg-config / OPENSSL_* environment variables auto-detect an existing AWS-LC installation instead of building from source by @​justsmth in aws/aws-lc-rs#1129
  • Support system-installed AWS-LC FIPS library for aws-lc-fips-sys by @​justsmth in aws/aws-lc-rs#1143
  • Auto-detect system AWS-LC from OPENSSL_* and pkg-config by @​justsmth in aws/aws-lc-rs#1156
  • Gate system AWS-LC on a declared minimum version by @​justsmth in aws/aws-lc-rs#1152
• Implement Send/Sync for RSA hazmat encryption key types by @​justsmth in aws/aws-lc-rs#1128
• Add Salt::none constructor for HKDF by @​justsmth in aws/aws-lc-rs#1135
• Add wasm32-unknown-emscripten build and test support by @​justsmth in aws/aws-lc-rs#1059
• Report specific key rejection reasons for invalid RSA key sizes by @​justsmth in aws/aws-lc-rs#1153

Upstream AWS-LC (v5.1.0)

aws-lc-sys now aligns with AWS-LC v5.1.0 (previously v1.73.0). Notable upstream changes include:

• ML-DSA native assembly backends for x86_64 and aarch64, imported from mldsa-native by @​jakemas in aws/aws-lc#3195 and aws/aws-lc#3219
• Security hardening: stack secret zeroing, tightened PKCS7/OCSP/ASN.1 error handling (Various PRs)

Build Improvements

• Fix memcmp_check build failure when CFLAGS contains LTO flags by @​justsmth in aws/aws-lc-rs#1134
• Fix missing poly_Rq_mul symbol in Linux x86_64 build by @​Lebei2046 in aws/aws-lc-rs#1130
• Apply -ffile-prefix-map to jitterentropy builder by @​justsmth in aws/aws-lc-rs#1139
• Select compiler flag dialect by driver mode, not target ABI by @​justsmth in aws/aws-lc-rs#1147

Issues Being Closed

• RSA hazmat encryption key types missing Send/Sync -- aws/aws-lc-rs#1125
• RSA key rejection reports generic Unspecified for invalid key sizes -- aws/aws-lc-rs#1082
• Build failure when CFLAGS contains LTO flags (Windows/clang) -- aws/aws-lc-rs#1132
• cargo-xwin (clang-cl) jitterentropy build failure on x86_64-pc-windows-msvc -- aws/aws-lc-rs#1146
• Support system-provided AWS-LC library -- aws/aws-lc-rs#936
• cpu_arm_linux.c assumes sys/auxv.h and getauxval (uclibc targets) -- aws/aws-lc-rs#1108
• jitterentropy embeds absolute paths to files -- aws/aws-lc-rs#1137

Other Merged PRs

• Add ML-DSA aarch64 native assembly to CC builder scripts by @​jakemas in aws/aws-lc-rs#1113
• Clarify HKDF info concatenation and encoding responsibility by @​justsmth in aws/aws-lc-rs#1145
• CI: support zig cross compile for arm32 by @​justsmth in aws/aws-lc-rs#1124
• fix(clippy): fix truncate warnings by @​justsmth in aws/aws-lc-rs#1126
• ci: replace dtolnay/rust-toolchain with direct rustup invocations by @​justsmth in aws/aws-lc-rs#1133

... (truncated)

Commits

• 741dbf5 Prepare aws-lc-rs v1.17.1 (#1164)
• e6d42b8 Prepare aws-lc-sys v0.42.0 (#1162)
• bd7abf5 Harden GitHub Actions workflows against script injection (#1161)
• 93b0123 Add wasm32-unknown-emscripten build and test support (#1059)
• 7b8a0e7 feat(system-lib): auto-detect system AWS-LC from OPENSSL_* and pkg-config (#1...
• a95c524 Prepare aws-lc-fips-sys v0.13.15 (#1158)
• 00e016a Bump actions/checkout from 6 to 7 (#1157)
• e7568de fix(system-lib): gate system AWS-LC on a declared minimum version (#1152)
• dfe4525 fix(builder): select flag dialect by compiler driver mode, not target ABI (#1...
• 26838da rsa: report specific key rejection for invalid sizes (#1153)
• Additional commits viewable in compare view

Updates redis from 1.2.4 to 1.3.0

Release notes

Sourced from redis's releases.

redis-1.3.0

Changes & Bug fixes

Add numbered databases support for the cluster client (redis-rs/redis-rs#2146 by @​virratanasangpunth) fix(cluster): clamp retry backoff upper bound after min-wait floor (redis-rs/redis-rs#2158 by @​nihohit) docs/ci: add wasm32-wasip2 build support for tokio-comp (redis-rs/redis-rs#2153 by @​Prashantsinghchouhan) Add Bloom filter support (redis-rs/redis-rs#2117 by @​somechris)

CI & operational improvements

tests/version: Parse all available versions (Valkey, modules, ...) (Version refactor 6/10) (redis-rs/redis-rs#2143 by @​somechris) tests/version: Add disjunctive (OR) and conjunctive (AND) matchers (Version refactor 7/10) (redis-rs/redis-rs#2144 by @​somechris) tests/version: Drop Redis binary version parsing (Version refactor 8/10) (redis-rs/redis-rs#2145 by @​somechris) tests: Drop VERSION from version constants (version refactor 9/10) (redis-rs/redis-rs#2147 by @​somechris) Fix flakey object tests (redis-rs/redis-rs#2160 by @​nihohit) tests: Add test guards for Valkey servers (Version refactor 10/10) (redis-rs/redis-rs#2148 by @​somechris)

New Contributors

• @​virratanasangpunth made their first contribution in redis-rs/redis-rs#2146
• @​Prashantsinghchouhan made their first contribution in redis-rs/redis-rs#2153

Full Changelog: redis-rs/redis-rs@redis-1.2.4...redis-1.3.0

Commits

• 207cc89 Prepare version (#2166)
• c34fb33 Add redisbloom's Bloom filter support (#2117)
• 5c6ca0a tests: Add test guards for Valkey servers (#2148)
• e891f7f docs/ci: add wasm32-wasip2 build support for tokio-comp (#2153)
• 7d066c6 Fix flakey object tests (#2160)
• b571eb1 tests: Clean up version constants (#2147)
• b9249f6 tests/version: Drop Redis binary version parsing (#2145)
• 406ad76 tests/version: Add disjunctive (OR) and conjunctive (AND) matchers (#2144)
• 1372807 feat(redis_test): add new commands after mock redis connection is instantiate...
• 201d1be fix(cluster): clamp retry backoff upper bound after min-wait floor (#2158)
• Additional commits viewable in compare view

Updates time from 0.3.51 to 0.3.53

Release notes

Sourced from time's releases.

v0.3.53

See the changelog for details.

v0.3.52

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.53 [2026-07-01]

There are no publicly-facing changes in this release. It solely works around the cookie crate relying on an implementation detail of time that was never part of the public API (and thus subject to semver guarantees). The internal API has been reverted to the extent necessary for cookie to compile. This measure is temporary; the internal change will be re-applied in an yet-to-be-determined future release.

0.3.52 [2026-06-30]

Fixed

• Subsecond values in the time! macro are parsed using the textual representation, ensuring accuracy. Previously, they were parsed using the floating point representation, which could result in a loss of precision and even invalid values.
• The date! macro could previously create an invalid value that would then panic at compile time. The macro now emits a proper error instead.
• When parsing an invalid format description, an edge case would inadvertently panic. This now returns an error as intended.

Added

• Support default values when parsing

Commits

• 0ae2f84 v0.3.53 release
• cea8c96 Avoid issue with cookie crate temporarily
• 55e1f2b Require private type to properly seal traits
• 7cf4780 v0.3.52 release
• 0e5b04f Fix trusted publishing workflow
• 6e4140a Support default values when parsing
• 10ac36a Add more doctests to Timestamp
• 6b0d468 Restore lexer depth on the unclosed-bracket error path
• 0abc06d Add trusted publishing
• 43cf0c0 Preferentially group shards by target
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.