⬆️ Update Cargo dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anyhow	dependencies	patch	1.0.103 → 1.0.104
base64	dependencies	minor	0.22.1 → 0.23.0
futures (source)	dependencies	patch	0.3.32 → 0.3.33
lru	dependencies	patch	0.18.0 → 0.18.1
mail-parser	dependencies	patch	0.11.4 → 0.11.5
rand (source)	dependencies	patch	0.10.1 → 0.10.2
rustls	dependencies	patch	0.23.41 → 0.23.42
serde (source)	dependencies	patch	1.0.228 → 1.0.229
serde_json	dependencies	patch	1.0.150 → 1.0.151
thiserror	dependencies	patch	2.0.18 → 2.0.19
tokio (source)	dependencies	minor	1.52.3 → 1.53.1
uniffi (source)	build-dependencies	minor	0.31.0 → 0.32.0
uniffi (source)	dependencies	minor	0.31.0 → 0.32.0
webpki-roots	dependencies	patch	1.0.8 → 1.0.9

---

Release Notes

dtolnay/anyhow (anyhow)

v1.0.104

Compare Source

• Update syn dev-dependency to version 3

marshallpierce/rust-base64 (base64)

v0.23.0

Compare Source

• Added more consts for preconfigured configs and engines
• Make DecodeError::InvalidLastSymbol more clear by including the decoded value
• Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
  instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
  GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
  detection and work in no_std. The engines support the standard and URL-safe alphabets.
• Update MSRV to 1.71.0
• Add support for custom padding symbols

rust-lang/futures-rs (futures)

v0.3.33

Compare Source

• Fix ReadLine's soundness issue regarding to exception safety. (#​3020)
• Fix unsound Send impl for IterPinRef and Iter. (#​3003)
• Fix stacked borrows violation in compat01as03 implementation. (#​3012)
• Fix memory leak in FuturesUnordered::IntoIter. (#​3005)
• Add portable-atomic-alloc feature and use it in FuturesUnordered. (#​3007)
• Re-export alloc::task::Wake. (#​3010)
• Update spin to 0.12. (#​3014)

jeromefroe/lru-rs (lru)

v0.18.1

Compare Source

• Add find_and_promote method.

stalwartlabs/mail-parser (mail-parser)

v0.11.5

================================

• Fix: Address names containing LF are not parsed correctly (#​149)
• Fix: Decode the iso-8859-1 label as windows-1252 per the WHATWG Encoding Standard (#​131)
• Fix: panic with messages containing corrupted eml attachments (#​120).
• Recognize additional charset labels supported by encoding_rs (#​123)
• Added Dkim2Signature and MessageInstance to support DKIM2 headers.

rust-random/rand (rand)

v0.10.2

Compare Source

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#​1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#​1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#​1791)

serde-rs/serde (serde)

v1.0.229

Compare Source

• Update to syn 3

serde-rs/json (serde_json)

v1.0.151

Compare Source

• Add RawValue::from_string_unchecked (#​1331, thanks @​WonderLawrence)

dtolnay/thiserror (thiserror)

v2.0.19

Compare Source

• Update to syn 3

tokio-rs/tokio (tokio)

v1.53.1: Tokio v1.53.1

Compare Source

1.53.1 (July 20th, 2026)

Fixed

• signal: restore MSRV by removing OnceLock::wait from the Windows handler (#​8300)

Fixed (unstable)

• time: fix alt timer cancellation and insertion race (#​8252)

Documented

• runtime: remove dead link definition in Runtime::block_on (#​8301)

v1.53.0: Tokio v1.53.0

Compare Source

1.53.0 (July 17th, 2026)

Added

• fs: implement From<OwnedFd> and From<OwnedHandle> for File (#​8266)
• metrics: add task schedule latency metric (#​7986)
• net: add SocketAddr methods to Unix sockets (#​8144)

Changed

• io: add #[inline] to IO trait impls for in-memory types (#​8242)
• net: implement UCred::pid on FreeBSD (#​8086)
• net: support Nuttx target os (#​8259)
• signal: refactor global variables on Windows (#​8231)
• sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#​8095)
• taskdump: support taskdumps on s390x (#​8192)
• time: add #[track_caller] to timeout_at() (#​8077)
• time: consolidate mutex locks on spurious poll (#​8124)
• time: defer waker clone on spurious poll (#​8107)
• time: move lazy-registration state into Sleep (#​8132)
• tracing: remove unnecessary span clone (#​8126)

Fixed

• io: do not treat zero-length reads as EOF in Chain (#​8251)
• net: use getpeereid for QNX peer credentials (#​8270)
• runtime: avoid illegal state in FastRand (#​8078)
• sync: wake mpsc receiver when a queued reserve[_many] returns permits (#​8260)
• taskdump: skip double wake on Trace::capture/Trace::trace_with (#​8043)
• time: avoid stack overflow in runtime constructor (#​8093)
• time (alt timer): ensure timers stay in the same runtime after .reset() (#​8169)

IO uring (unstable)

• fs: use io-uring for fs::try_exists (#​8080)
• fs: use io-uring for renaming files (#​7800)
• rt: flush io-uring CQE in case of CQE overflow (#​8277)

Documented

• docs: clarify cancel safety wording (#​8181)
• fs: clarify create_dir_all succeeds if path exists (#​8149)
• io: add warning about stdout reordering with multiple handles (#​8276)
• net: document pipe try_read*/try_write* readiness behavior (#​8032)
• runtime: document interaction with fork() (#​8202)
• sync: clarify broadcast lagging semantics (#​8239)
• sync: document memory ordering guarantees for Semaphore (#​8119)
• task: explain why yield_now defers its waker (#​8254)
• time: add panic docs to timeout_at() (#​8077)
• time: fix reversed poll order in timeout doc (#​8214)

v1.52.4: Tokio v1.52.4

Compare Source

1.52.4 (July 16th, 2026)

Fixed

• runtime: don't skip the driver when before_park schedules work (#​8222)

Fixed (unstable)

• taskdump: remove crate disambiguators from output (#​8264)

mozilla/uniffi-rs (uniffi)

v0.32.0

Compare Source

⚠️ Breaking Changes ⚠️

• Kotlin and Python now fail to generate bindings when there are async primary constructors.
  Previously these languages skipped the constructor in this case or generated a constructor that always threw.
  You can get similar behavior by adding the primary constructor to the uniffi.toml excludes list in uniffi.toml (e.g. `excludes = ["MyObject.new"])
• Ruby: Force named parameters for enum constructors (#​2880)
• The --config flag now expects a global config file
  rather than a flat uniffi.toml-style override. Old-style files will produce a warning and be ignored.
  See #​2866
• [ByRef] bytes UDL arguments now map to &[u8] on the Rust side instead of &Vec<u8>. UDL-defined functions whose Rust implementations take &Vec<u8> must change to &[u8]. Proc-macro signatures (fn foo(x: &[u8])) are unchanged. On the Kotlin side, call sites must now pass a direct java.nio.ByteBuffer rather than ByteArray; migrate with ByteBuffer.allocateDirect(arr.size).put(arr).flip(). Swift (Data) and Python (bytes) call sites are unchanged. (#​2878)
• Reworked the experimental pipeline bindgen code. Any external binding generators using this will
  need to be reworked as well. See #​2787 for
  examples of how this can be done.

What's Fixed

• Fixed bug that sometimes prevented renaming items inside a submodule #​2792
• Exempted UniFfiTag from clippy::exhaustive_structs since downstream projects may depend on it #​2809
• Ruby: Code for all kinds of enums and custom types is now correctly generated #​2880 and #​2891

⚠️ Breaking Changes for external bindings authors ⚠️

• There's a new GlobalConfig struct for managing config. It replaces BindgenPathsLayer::get_config() method which has been removed. See #​2866.
• [ByRef] bytes arguments now travel across the FFI as a ForeignBytes (pointer + length) value rather than a RustBuffer. External bindings need to accept the foreign-language byte buffer at the call site and lower it to ForeignBytes for the duration of the call (no copy). (#​2878)

What's New?

• Global config file support via --config. See the docs.

• Traits can now be exported with #[uniffi::export(foreign)] for foreign-only implementations, or #[uniffi::export(rust, foreign)] for both Rust and foreign implementations. The with_foreign flag is deprecated in favor of rust, foreign.

• Recursive enums are now supported. UniFFI automatically detects when enum and record types participate in cycles — self-referential, mutually recursive, or cycling through a record — and generates appropriate bindings: indirect in Swift, forward references in Python (#​2834).

• Box<T> now automatically implements FFI traits when T implements them, allowing direct use in enum variants and function parameters without NewType wrappers (#​2808)

• Record fields can now be renamed with the proc-macro name = "new_field_name" attribute (#​2794)

• Items can be excluded from the generated bindings using uniffi.toml.

• Added mutable_records configuration option to allow specific records to remain mutable even when generate_immutable_records is enabled (Kotlin and Swift).

• Kotlin objects now have an uniffiIsDestroyed property that returns true if the Rust reference no longer exists (#​2825)

• Updated askama version to 0.15.6

• Custom Types can have docstrings in some languages (#​2853)

• Ruby: Expose standard Rust traits for generated ruby code (#​2883)

• Ruby: Add support for sync foreign traits (#​2916)

• Ruby: Add async support (#​2923)

• Added zero-copy transfer of &[u8] / [ByRef] bytes arguments from foreign code to Rust. Kotlin (java.nio.ByteBuffer, must be direct), Swift (Data), and Python (bytes-like, buffer protocol) pass byte buffers as pointer + length (ForeignBytes) rather than copying through RustBuffer. Not yet supported on Ruby, and not yet supported in async functions on any language (#​2878).

• #[uniffi::export(async_runtime = "tokio")] can now be applied to trait exports, wrapping each method's FFI scaffolding future in async_compat::Compat the same way it does for inherent impls and free functions (#​2899).

• Added support for using HashSet with proc-macros

• Allow literal number suffix with derive(uniffi::Enum)(#​2926)

All changes in v0.32.0.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.