chore(deps): bump the minor-and-patch group with 7 updates

[dependabot]

Bumps the minor-and-patch group with 7 updates:

Package	From	To
tokio	1.49.0	1.52.1
chrono	0.4.43	0.4.44
anyhow	1.0.101	1.0.102
clap	4.5.60	4.6.1
open	5.3.3	5.3.4
image	0.25.9	0.25.10
tempfile	3.25.0	3.27.0

Updates tokio from 1.49.0 to 1.52.1

Release notes

Sourced from tokio's releases.

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

• runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Tokio v1.52.0

1.52.0 (April 14th, 2026)

Added

• io: AioSource::register_borrowed for I/O safety support (#7992)
• net: add try_io function to unix::pipe sender and receiver types (#8030)

Added (unstable)

• runtime: Builder::enable_eager_driver_handoff setting enable eager hand off of the I/O and time drivers before polling tasks (#8010)
• taskdump: add trace_with() for customized task dumps (#8025)
• taskdump: allow impl FnMut() in trace_with instead of just fn() (#8040)
• fs: support io_uring in AsyncRead for File (#7907)

Changed

• runtime: improve spawn_blocking scalability with sharded queue (#7757)
• runtime: use compare_exchange_weak() in worker queue (#8028)

Fixed

• runtime: overflow second half of tasks when local queue is filled instead of first half (#8029)

Documented

• docs: fix typo in oneshot::Sender::send docs (#8026)
• docs: hide #[tokio::main] attribute in the docs of sync::watch (#8035)
• net: add docs on ConnectionRefused errors with UDP sockets (#7870)

#7757: tokio-rs/tokio#7757 #7870: tokio-rs/tokio#7870 #7907: tokio-rs/tokio#7907 #7992: tokio-rs/tokio#7992 #8010: tokio-rs/tokio#8010 #8025: tokio-rs/tokio#8025 #8026: tokio-rs/tokio#8026 #8028: tokio-rs/tokio#8028 #8029: tokio-rs/tokio#8029

... (truncated)

Commits

• 905c146 chore: prepare to release v1.52.1 (#8059)
• 56aaa43 rt: revert #7757 to fix regression in spawn_blocking (#8057)
• 57ff47a ci: update trybuild to expect output from rustc 1.95.0 (#8058)
• 812de3e ci: bump taiki-e/cache-cargo-install-action from 1 to 3 (#8053)
• ba82e73 ci: use Dependabot to keep github actions up to date (#8052)
• 2e85f9d ci: replace cirrus-ci with freebsd-vm (#8041)
• a7e1cd8 ci: update GitHub Actions workflows to use latest tool versions (#8047)
• 5f7be0a chore: perpare 1.52.0 (#8045)
• 36d12d2 taskdump: allow impl FnMut() in taskdumps instead of just fn() (#8040)
• f943312 fs: support io-uring in AsyncRead for File (#7907)
• Additional commits viewable in compare view

Updates chrono from 0.4.43 to 0.4.44

Release notes

Sourced from chrono's releases.

0.4.44

What's Changed

• docs: match MSRV with Cargo.toml contents by @​coryan in chronotope/chrono#1772
• Add track_caller to non-deprecated functions by @​svix-jplatte in chronotope/chrono#1774

Commits

• c14b459 Bump version to 0.4.44
• ea832c5 Add track_caller to non-deprecated functions
• cfae889 Fix panic message in to_rfc2822
• f8900b5 docs: match MSRV with Cargo.toml contents
• See full diff in compare view

Updates anyhow from 1.0.101 to 1.0.102

Release notes

Sourced from anyhow's releases.

1.0.102

• Remove backtrace dependency (#438, #439, #440, #441, #442)

Commits

• 5c657b3 Release 1.0.102
• e737fb6 Merge pull request #442 from dtolnay/backtrace
• 7fe62b5 Further simply backtrace conditional compilation
• c8cb5ca Merge pull request #441 from dtolnay/backtrace
• de27df7 Delete CI use of --features=backtrace
• 9b67e5d Merge pull request #440 from dtolnay/backtrace
• efdb11a Simplify std_backtrace conditional code
• b8a9a70 Merge pull request #439 from dtolnay/backtrace
• a42fc2c Remove feature = "backtrace" conditional code
• 2a2a3ce Re-word backtrace feature comment
• Additional commits viewable in compare view

Updates clap from 4.5.60 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

• (derive) Ensure rebuilds happen when an read env variable is changed

Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

• (derive) Ensure rebuilds happen when an read env variable is changed

[4.6.0] - 2026-03-12

Compatibility

• Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

• Update dependencies

Commits

• 1420275 chore: Release
• d2c817d docs: Update changelog
• f88c94e Merge pull request #6341 from epage/sep
• acbb822 fix(complete): Reduce risk of conflict with actual subcommands
• a49fadb refactor(complete): Pull out subcommand separator
• ddc008b Merge pull request #6332 from epage/update
• 497dc50 chore: Update compatible dependencies
• dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
• 54bdaa3 chore(deps): Update j178/prek-action action to v2
• f0d30d9 chore: Release
• Additional commits viewable in compare view

Updates open from 5.3.3 to 5.3.4

Release notes

Sourced from open's releases.

v5.3.4

Bug Fixes

• align with_detached() implementation with with() On macOS, /usr/bin/open is natively detached. This commit changes with_detached to use the same logic as with() .avoid double detachment to prevent silent failure

Commit Statistics

• 6 commits contributed to the release.
• 1 commit was understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 1 time to make code idiomatic.

Commit Details

• Uncategorized
  • Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure (7db5738)
  • Align with_detached() implementation with with() (8e122d4)
  • Merge pull request #117 from ChrisDenton/absolute (20ea175)
  • Thanks clippy (on Windows) (7faae87)
  • Enable clippy deny on CI, with all features, but allow incompatible MRSV there (1ab9c47)
  • Use absolute instead of canonicalize (5604cee)

Changelog

Sourced from open's changelog.

5.3.4 (2026-04-19)

Bug Fixes

• align with_detached() implementation with with() On macOS, /usr/bin/open is natively detached. This commit changes with_detached to use the same logic as with() .avoid double detachment to prevent silent failure

Commit Statistics

• 6 commits contributed to the release.
• 1 commit was understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 1 time to make code idiomatic.

Commit Details

• Uncategorized
  • Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure (7db5738)
  • Align with_detached() implementation with with() (8e122d4)
  • Merge pull request #117 from ChrisDenton/absolute (20ea175)
  • Thanks clippy (on Windows) (7faae87)
  • Enable clippy deny on CI, with all features, but allow incompatible MRSV there (1ab9c47)
  • Use absolute instead of canonicalize (5604cee)

Commits

• 7bd519c Release open v5.3.4
• 7db5738 Merge pull request #119 from benzeneringlq/fix-macos-detach-silent-failure
• 8e122d4 fix(macos): align with_detached() implementation with with()
• 20ea175 Merge pull request #117 from ChrisDenton/absolute
• 7faae87 Thanks clippy (on Windows)
• 1ab9c47 Enable clippy deny on CI, with all features, but allow incompatible MRSV there
• 5604cee Use absolute instead of canonicalize
• See full diff in compare view

Updates image from 0.25.9 to 0.25.10

Changelog

Sourced from image's changelog.

Version 0.25.10

Features:

• Added GenericImage::copy_from_samples that can be implemented for images that can be efficiently filled from a matrix-layout of samples. Its default implementation will not defer to copy_from, consider implementing this if you specialized the latter.
• Added GenericImageView::to_pixel_view that can be implemented to describe the buffer in terms our FlatSamples matrix layout, if applicable. This allows algorithms over generic images to run a specialized version where they can be more efficient over an raw input slice.
• Added ImageBuffer::from_raw_bgr{,a} to efficiently byte-swap images into the RGBA layout of the buffer (#2596).
• Added ExtendedColorType::Rgb5x1 to represent 5-bit colors as from TGA (#2609).
• Added metadata::LoopCount and AnimationDecoder::loop_count to query if animations should repeat in a uniform manner (gif, webp, avif) (#2719, #2786).
• load_from_memory now utilizes format detection hooks if any are applicable.

Structural changes:

• Various changes that reduce the compile time of image on codegen by reducing the number of monomorphizations (#2804, #2800, #2807).
• GenericImage::copy_from's default implementation tries copy_from_samples first if the source can be successfully cast with to_pixel_view.
• <ImageBuffer as GenericImage>::copy_from is now must faster for ImageBuffer when the source implements GenericImageView::to_pixel_view.
• <SubImage<_> as GenericImage>::copy_from inherits the previously mentioned optimizations for pixel sources when the inner type provides them. It also provides to_pixel_view based on the inner type.
• ImageBuffer::as_flat_samples no longer requires AsRef<[P::Subpixel]> for the underlying container, just Deref (#2777).

Bug fixes:

• Fixed a panic in TGA where indices have more bits than mapped colors (#2673).

Notable decoder changes:

• Bump tiff to 0.11, supporting planar layout images (#2743).
• ICC profiles can now be written for TIFF files (#2746)
• Update ravif to 0.13, supporting EXIF (#2733).
• Update jpeg-encoder to 0.7 bringing SIMD acceleration (#2736).
• The pnm decoder decodes binary data quicker with fewer allocations (#2797).
• The tga decoder handles 5-bit data and colormaps correctly (#2608, #2609).

Compatibility notes (new section):

• Bump rust-version to 1.88.
• Registered hooks now normalize the file extension they are registered against to ascii-lowercase. It is no longer necessary to register all such variants. This may conflate two hooks that previously hooked the same format with different casing.

Commits

• 76e5718 Merge pull request #2836 from image-rs/version-0.25.10
• 38b81dc Change notes for 0.25.10
• 2fb9e61 Merge pull request #2835 from image-rs/ravif-tiff-integration
• 4263471 Bump ravif/dav1d versions
• a7781b3 Merge pull request #2833 from image-rs/backport-from-bgra
• 6ea7369 Adjust bounds on from_raw_rgb
• dd60a60 Add utility from_raw_bgr{,a} for ImageBuffer
• 933251a Merge pull request #2832 from image-rs/backport-moxcms
• 02c039e Update to moxcms 0.8.0 per reviewer feedback
• 6ac2dd6 Allow moxcms 0.8.x versions
• Additional commits viewable in compare view

Updates tempfile from 3.25.0 to 3.27.0

Changelog

Sourced from tempfile's changelog.

3.27.0

This release adds TempPath::try_from_path and deprecates TempPath::from_path.

Prior to this release, TempPath::from_path made no attempts to convert relative paths into absolute paths. The following code would have deleted the wrong file:

let tmp_path = TempPath::from_path("foo")
std::env::set_current_dir("/some/other/path").unwrap();
drop(tmp_path);

Now:

1. TempPath::from_path will attempt to convert relative paths into absolute paths. However, this isn't always possible as we need to call std::env::current_dir, which can fail. If we fail to convert the relative path to an absolute path, we simply keep the relative path.
2. The TempPath::try_from_path behaves exactly like TempPath::from_path, except that it returns an error if we fail to convert a relative path into an absolute path (or if the passed path is empty).

Neither function attempt to verify the existence of the file in question.

Thanks to @​meng-xu-cs for reporting this issue.

3.26.0

• Support NamedTempFile::persist on RedoxOS (#393) (thanks to @​Andy-Python-Programmer).

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions