Bump the cargo group with 5 updates

[dependabot]

Bumps the cargo group with 5 updates:

Package	From	To
base64	0.22.1	0.23.1
quinn-proto	0.11.18	0.11.19
quinn-udp	0.5.15	0.5.16
tokio-rustls	0.26.5	0.26.6
yoke-derive	0.8.3	0.8.4

Updates base64 from 0.22.1 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

• Make the tests build again on non-SIMD architectures

0.23.0

• Added more consts for preconfigured configs and engines
• Make DecodeError::InvalidLastSymbol more clear by including the decoded value
• Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime detection and work in no_std. The engines support the standard and URL-safe alphabets.
• Update MSRV to 1.71.0
• Add support for custom padding symbols

Commits

• 069bf70 v0.23.1
• 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
• 7cffce6 Fix testing on architectures without unsafe SIMD support
• e34f9a0 Merge pull request #308 from atouchet/com
• e9240c9 Remove outdated comment
• 9e9220a v0.23.0
• 870326e Merge pull request #306 from marshallpierce/mp/trailing-bits-docs
• fbec5f1 Document no trailing trailing bits
• 0a23549 Merge pull request #305 from marshallpierce/mp/edition-2021
• f10b7e2 Update deps & edition
• Additional commits viewable in compare view

Updates quinn-proto from 0.11.18 to 0.11.19

Release notes

Sourced from quinn-proto's releases.

quinn-proto 0.11.19

Fixes several advisories:

• MAX_STREAM_DATA frame opens streams over the stream limit
• Retry packet with a long token panics or exhausts client memory

What's Changed

• 0.11.x updates by @​djc in quinn-rs/quinn#2882
• backport: fix: make handshake_data cancellation-safe by @​robertkiel in quinn-rs/quinn#2881
• backport: fix: potential CID leak in connect() by @​robertkiel in quinn-rs/quinn#2878
• backport: fix: cleanup state if transmit failed by @​robertkiel in quinn-rs/quinn#2879
• backport: fix: stale waker in blocked_readers by @​robertkiel in quinn-rs/quinn#2880
• quinn-proto: Pad Initial datagrams to the configured minimum MTU (0.11) by @​idevelop in quinn-rs/quinn#2894
• [0.11.x] quinn: Wake wait_idle when the endpoint driver is dropped by @​njaremko in quinn-rs/quinn#2902
• Prepare 0.11.19 by @​djc in quinn-rs/quinn#2905

Commits

• 8192ed3 udp: bump version to 0.5.16
• 6862d3d udp: backport receive error handling to 0.11.x
• 78d30dc proto: bump version to 0.11.19
• 73114d8 Check MAX_STREAM_DATA on remote bidi streams against limit
• a6e78d1 proto: reserve close frame space after large Initial headers
• 74c33ff proto: reject Initial tokens that prevent packet construction
• f97fb5a quinn: Wake wait_idle when the endpoint driver is dropped
• 8ada074 quinn-proto: Pad Initial datagrams to the configured minimum MTU
• 16ecc70 fix: stale waker in blocked_readers
• 12d7f07 fix: cleanup state if transmit failed
• Additional commits viewable in compare view

Updates quinn-udp from 0.5.15 to 0.5.16

Release notes

Sourced from quinn-udp's releases.

quinn-udp 0.5.16

Fixes an advisory:

recv_single() can spin after a truncated datagram

What's Changed

• Prepare 0.11.19 by @​djc in quinn-rs/quinn#2905

Commits

• 8192ed3 udp: bump version to 0.5.16
• 6862d3d udp: backport receive error handling to 0.11.x
• 78d30dc proto: bump version to 0.11.19
• 73114d8 Check MAX_STREAM_DATA on remote bidi streams against limit
• a6e78d1 proto: reserve close frame space after large Initial headers
• 74c33ff proto: reject Initial tokens that prevent packet construction
• f97fb5a quinn: Wake wait_idle when the endpoint driver is dropped
• 8ada074 quinn-proto: Pad Initial datagrams to the configured minimum MTU
• 16ecc70 fix: stale waker in blocked_readers
• 12d7f07 fix: cleanup state if transmit failed
• Additional commits viewable in compare view

Updates tokio-rustls from 0.26.5 to 0.26.6

Release notes

Sourced from tokio-rustls's releases.

0.26.6

0.26.5 added an optimization to batch multiple reads which could swallow some errors. Buffer errors so that they propagate to the caller as soon as the caller next reads from the stream.

What's Changed

• Buffer and propagate errors from transport by @​dtolnay in rustls/tokio-rustls#205
• Prepare 0.26.6 by @​djc in rustls/tokio-rustls#206

Commits

• 8aebb7c Bump version to 0.26.6
• 6f8509a Rename buffered_err to error
• bd0494d Buffer and propagate errors from transport
• a781340 Add regression test for issue 204
• 9d0dae6 build(deps): bump rustls from 0.23.44 to 0.23.45
• 0ad049e build(deps): bump rustls from 0.23.43 to 0.23.44
• 4f913c7 build(deps): bump rcgen from 0.14.9 to 0.14.10
• See full diff in compare view

Updates yoke-derive from 0.8.3 to 0.8.4

Changelog

Sourced from yoke-derive's changelog.

Changelog

icu4x 2.3.x

Several crates have had patch releases in the 2.3 stream:

• Components
  • (2.3.1) icu
    • Remove dev-dependency on unpublished crate icu_host_info (unicode-org#8404)
  • (2.3.1) icu_collator
    • Fix panic when a contraction contracts a starter, does not contract a following non-starter, and the non-starter starts another contraction. Occurs in Burmese. (unicode-org#8380)
  • (2.3.1) icu_locale
    • Remove unnecessary dependencies on icu_pattern when unstable feature is not enabled (unicode-org#8397)
• Data model and providers
  • (2.3.1) icu_provider
    • Improve performance of data loading that uses locale fallback (unicode-org#8406)
  • (2.3.1) icu_provider_source
    • Fix checksum on 32-bit systems (unicode-org#8401)
• FFI
  • General
    • Upate to Diplomat 0.16.1 (unicode-org#8411)
  • (2.3.1) icu_capi
    • Add missing docs to properties (unicode-org#8407)
  • (2.3.2) icu_capi
    • Add missing stability annotations (unicode-org#8462)
  • (2.3.1) Dart
    • Add Error and Exception to classes/enums which are used as errors and exceptions (rust-diplomat/diplomat#1220) (unicode-org#8411)
  • (2.3.2) Dart
    • Cache downloaded pre-built binaries (unicode-org#8426)
    • Add missing stability annotations (unicode-org#8462)
  • (2.3.1) NPM
    • Add validation to arguments to assure type correctness (rust-diplomat/diplomat#902) (unicode-org#8411)
  • (2.3.2) NPM
    • Add missing stability annotations (unicode-org#8462)
• Utils
  • (0.2.2) databake-derive
    • Update to syn@3 dependency (unicode-org#8293)
  • (0.8.3) yoke-derive
    • Update to syn@3 dependency (unicode-org#8293)
  • (0.8.4) yoke-derive
    • Declare MSRV
  • (0.1.8) zerofrom-derive
    • Update to syn@3 dependency (unicode-org#8293)
  • (0.11.5, 0.11.6) zerovec-derive
    • (0.11.5) Fix soundness issue around multi element buffer validation in ULE derives (unicode-org#8393)
    • (0.11.6) Fix when building with MIRIFLAGS=-Zmiri-tree-borrows (unicode-org#8391)
  • (0.11.8) zerovec
    • Fix length check in impl ULE for [T; N] (unicode-org#8400)

icu4x 2.3

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions