deps(rust): bump the cargo group across 1 directory with 9 updates

[dependabot]

Bumps the cargo group with 9 updates in the /fuzz directory:

Package	From	To
clap	4.6.5	4.6.6
clap_complete	4.6.8	4.6.9
clap_mangen	0.3.0	0.3.3
pg_query	6.1.1	6.2.0
redb	4.1.0	4.2.0
tokio-rustls	0.26.4	0.26.5
rustls	0.23.43	0.23.44
base64	0.23.0	0.23.1
tower-http	0.7.0	0.7.1

Updates clap from 4.6.5 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

Commits

• 348cff3 chore: Release
• d478377 docs: Update changelog
• 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
• 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
• f90a966 fix(complete): Use spaces for indentation in fish
• dd4997b fix(complete): Don't glob-expand bash positionals
• 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
• 8141e11 chore(deps): Update compatible (dev) (#6398)
• 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
• 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
• See full diff in compare view

Updates clap_complete from 4.6.8 to 4.6.9

Commits

• 715b812 chore: Release
• 89e6e9b docs: Update changelog
• 3918cb4 Merge pull request #6468 from sjh9714/fix-bash-posix-fn-name
• 526c819 Merge pull request #6469 from latent-9/docs/fix-derive-reference-link
• b2bd685 docs(clap_derive): Fix derive reference link
• ecee8a4 fix(complete): Name the function after fn_name
• 6dd2e5a test(complete): Show POSIX bash will not source
• 4684d7a chore: Release
• 51d50ad docs: Update changelog
• 3bc3622 Merge pull request #6457 from bl4ck4t/master
• Additional commits viewable in compare view

Updates clap_mangen from 0.3.0 to 0.3.3

Commits

• 5b81f10 chore: Release
• 7b02708 docs: Update changelog
• 6689200 Merge pull request #6482 from codeAnqiang-ma/fix/mangen-hidden-positional-syn...
• 07c6fd2 fix(mangen): Hide hidden positionals from the SYNOPSIS
• 2003b34 test(mangen): Show hidden positionals in the SYNOPSIS
• 8e50ec8 chore: Release
• 1f7ca4e chore: Update transitive clap
• 3e790f2 docs: Update changelog
• 0b83f87 Merge pull request #6477 from antoniszymanski/master
• dee8b8e fix(clap_complete_nushell): Set argument type to directory for `ValueHint::...
• Additional commits viewable in compare view

Updates pg_query from 6.1.1 to 6.2.0

Changelog

Sourced from pg_query's changelog.

6.2.0 2026-07-29

• Upgrade to libpg_query 17-6.2.2
• Add pg_query::summary function
  • This uses the new pg_query_summary C function that significantly improves performance when you need metadata (like a list of referenced tables) but don't need the full parse tree.
• NodeEnum: Improve performance when iterating over parse tree using nodes and nodes_mut
• Fix build caching issues in build.rs script

Commits

• See full diff in compare view

Updates redb from 4.1.0 to 4.2.0

Release notes

Sourced from redb's releases.

4.2.0

New features

• Add an experimental cursor API, behind the experimental_cursor feature flag: Table::lower_bound_mut() and Table::upper_bound_mut() return a CursorMut pointing at a gap between entries, modeled on the standard library's BTreeMap cursors. Inserting sorted data through its insert_before() method can be around 3x faster than calling insert() with the same data; insert_after() inserts through the gap in descending order at the same speed. ReadableTable::lower_bound() and ReadableTable::upper_bound() return a read-only Cursor. The feature is unstable and may change incompatibly, or be removed, in any release.
• Add ReadOnlyTable::get_owned(), ReadOnlyTable::range_owned(), ReadOnlyMultimapTable::get_owned(), and ReadOnlyMultimapTable::range_owned(), which return the new OwnedAccessGuard, OwnedRange, OwnedMultimapValue, and OwnedMultimapRange types. These keep the read transaction alive until they are dropped, including the guards yielded by the iterators, which may outlive the iterator that produced them.
• Add Table::entry() and the associated Entry, OccupiedEntry, and VacantEntry types, mirroring std::collections::BTreeMap::entry. Supports or_insert, or_insert_with, or_insert_with_key, and_modify, and the usual OccupiedEntry / VacantEntry accessors.
• Add ExtractIf::close() to explicitly finalize an extract iterator without removing unread entries.

Optimizations

• Improve write performance: Durability::None commits are about 2x faster, and writes that do not split a page are about 15% faster for single-key Durability::None commits and about 6% faster for batched writes.
• Improve write performance when tables of a single WriteTransaction are modified concurrently from multiple threads. Writes to separate tables previously serialized on internal locks and could be slower than writing from a single thread; they now scale with the number of threads. Up to about 4x faster.
• Optimize Table::pop_first() and Table::pop_last() to be about 2x faster.
• Optimize inserting in ascending key order. A table loaded in key order occupies about half as much space, and loads faster.
• Optimize Table::retain(), Table::retain_in(), Table::extract_if(), and Table::extract_from_if(). Benchmarks on large tables show a 30-100x speedup for retaining and an 18-65x speedup for extracting, depending on the fraction of entries affected. Iterating an extract iterator from both ends no longer degrades removal batching.
• Avoid unnecessary write amplification when removing a value that is not present from a multimap table. Such a removal is now a no-op.

Minor improvements

• Table::retain(), Table::retain_in(), Table::extract_if(), and Table::extract_from_if() now poison the write transaction if their predicate panics or an internal error prevents removals from being applied, causing WriteTransaction::commit() to return CommitError::TransactionPoisoned. After an extract iterator returns an error, later calls keep returning an error instead of continuing.
• Enable file space reclamation during non-durable transactions performed while a savepoint exists.
• Reuse pages freed by a durable write transaction in the next write transaction when no live read transaction or savepoint still needs them. Previously, pages were not reused for one additional transaction.

... (truncated)

Changelog

Sourced from redb's changelog.

4.2.0 - 2026-08-17

New features

• Add an experimental cursor API, behind the experimental_cursor feature flag: Table::lower_bound_mut() and Table::upper_bound_mut() return a CursorMut pointing at a gap between entries, modeled on the standard library's BTreeMap cursors. Inserting sorted data through its insert_before() method can be around 3x faster than calling insert() with the same data; insert_after() inserts through the gap in descending order at the same speed. ReadableTable::lower_bound() and ReadableTable::upper_bound() return a read-only Cursor. The feature is unstable and may change incompatibly, or be removed, in any release.
• Add ReadOnlyTable::get_owned(), ReadOnlyTable::range_owned(), ReadOnlyMultimapTable::get_owned(), and ReadOnlyMultimapTable::range_owned(), which return the new OwnedAccessGuard, OwnedRange, OwnedMultimapValue, and OwnedMultimapRange types. These keep the read transaction alive until they are dropped, including the guards yielded by the iterators, which may outlive the iterator that produced them.
• Add Table::entry() and the associated Entry, OccupiedEntry, and VacantEntry types, mirroring std::collections::BTreeMap::entry. Supports or_insert, or_insert_with, or_insert_with_key, and_modify, and the usual OccupiedEntry / VacantEntry accessors.
• Add ExtractIf::close() to explicitly finalize an extract iterator without removing unread entries.

Optimizations

• Improve write performance: Durability::None commits are about 2x faster, and writes that do not split a page are about 15% faster for single-key Durability::None commits and about 6% faster for batched writes.
• Improve write performance when tables of a single WriteTransaction are modified concurrently from multiple threads. Writes to separate tables previously serialized on internal locks and could be slower than writing from a single thread; they now scale with the number of threads. Up to about 4x faster.
• Optimize Table::pop_first() and Table::pop_last() to be about 2x faster.
• Optimize inserting in ascending key order. A table loaded in key order occupies about half as much space, and loads faster.
• Optimize Table::retain(), Table::retain_in(), Table::extract_if(), and Table::extract_from_if(). Benchmarks on large tables show a 30-100x speedup for retaining and an 18-65x speedup for extracting, depending on the fraction of entries affected. Iterating an extract iterator from both ends no longer degrades removal batching.
• Avoid unnecessary write amplification when removing a value that is not present from a multimap table. Such a removal is now a no-op.

Minor improvements

• Table::retain(), Table::retain_in(), Table::extract_if(), and Table::extract_from_if() now poison the write transaction if their predicate panics or an internal error prevents removals from being applied, causing WriteTransaction::commit() to return CommitError::TransactionPoisoned. After an extract iterator returns an error, later calls keep returning an error instead of continuing.
• Enable file space reclamation during non-durable transactions performed while a savepoint exists.
• Reuse pages freed by a durable write transaction in the next write transaction when no live read transaction or savepoint still needs them. Previously, pages were not reused for one additional

... (truncated)

Commits

• 23b6ba0 Bump version to 4.2.0
• a382aa4 Update changelog
• e433e52 Update the post-commit epilogue's pages in place
• cff6e50 Report the repeated benchmark read phases as a single row
• e01dfab Report benchmark results as rates rather than durations
• 553cacd Build without std
• 55735f8 Call StorageBackend::close() when opening a database fails
• 927c2e4 Report backend failures through crate::io::Error
• 2471234 Report malformed freed-page records instead of panicking
• d0d9ed8 Generate a lockfile in test_wasi when one is missing
• Additional commits viewable in compare view

Updates tokio-rustls from 0.26.4 to 0.26.5

Release notes

Sourced from tokio-rustls's releases.

0.26.5

What's Changed

• Exclude bad test keys from the published package by @​weiznich in rustls/tokio-rustls#140
• chore: improve code comments clarity by @​xibeiyoumian in rustls/tokio-rustls#152
• client/server timeout examples, doc pass hinting towards timeouts. by @​cpu in rustls/tokio-rustls#187
• return more data at once from TlsStream::poll_read by @​trinity-1686a in rustls/tokio-rustls#198

Commits

• f8832d2 Bump version to 0.26.5
• c0fad2f return more data at once from TlsStream::poll_read (#198)
• edc7306 build(deps): bump futures-util from 0.3.33 to 0.3.34
• baeadaa build(deps): bump rcgen from 0.14.8 to 0.14.9
• 1e138ad build(deps): bump taiki-e/cache-cargo-install-action from 3.0.7 to 3.0.8
• b4ecff6 build(deps): bump taiki-e/cache-cargo-install-action from 3 to 3.0.7
• f47a689 build(deps): bump rustls from 0.23.42 to 0.23.43
• e25578e build(deps): bump tokio from 1.53.0 to 1.53.1
• d2a6d98 server: add rustdoc hinting towards timeout wrapping
• c2e9b4a client: add rustdoc hinting towards timeout wrapping
• Additional commits viewable in compare view

Updates rustls from 0.23.43 to 0.23.44

Commits

• 64ad386 Bump version to 0.23.44
• 1efbf66 bogo: remove PostQuantum setup
• e78162f aws-lc-rs: add support for ML-DSA signatures
• d880772 bogo: extract Options::provider() helper
• 87201d6 bogo: force all callers to get provider from Options
• 93657e3 server: limit 1.2 certificate requests to 1.2-compatible signature schemes
• bbd3c9a client: avoid sending 1.3-only signature schemes if no cipher suites configured
• eb57688 tls12: require known signature algorithm
• e7a9cef tls12: send illegal_parameter alert for kx signed with wrong algorithm
• 06a546d bogo: take latest
• Additional commits viewable in compare view

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

• Make the tests build again on non-SIMD architectures

Commits

• 069bf70 v0.23.1
• 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
• 7cffce6 Fix testing on architectures without unsafe SIMD support
• e34f9a0 Merge pull request #308 from atouchet/com
• e9240c9 Remove outdated comment
• See full diff in compare view

Updates tower-http from 0.7.0 to 0.7.1

Release notes

Sourced from tower-http's releases.

tower-http-0.7.1

Added

• fs: add ServeDir::redirect_to_trailing_slash() to serve directory indexes directly instead of first redirecting to the trailing-slash path. The redirect remains the default (#728)
• fs: add ignore_multi_range_requests() to ServeDir and ServeFile, serving the full representation when a request asks for multiple byte ranges. The existing 416 Range Not Satisfiable response remains the default (#727)
• request-id: the constructors and accessors on the request-id layers, services, and RequestId are now const fn, so they can be used in const context (#716)

Changed

• fs: the minimum http-range-header requirement is now 0.4.2 (#661)

Fixed

• behavioral change: fs: make ServeDir::try_call propagate expected filesystem I/O errors when no fallback is configured, as documented, instead of converting them to 404 Not Found responses (#718)
• decompression: don't end the body when a data frame with no remaining bytes arrives after the decompressor reports end-of-stream. Trailers following such a frame were dropped and could not be recovered (#722)
• decompression: return a body error when a data frame with remaining bytes arrives after the decompressor reports end-of-stream, rather than silently truncating. This regressed in 0.7.0 (#712)
• fs: multipart range requests are now rejected before range validation, so they consistently return 416 Range Not Satisfiable with a Cannot serve multipart range requests body instead of a generic unsatisfiable-range response (#661)
• fs: range error responses no longer carry representation headers such as Content-Type and Content-Encoding (#727)
• set-header: SetMultipleResponseHeadersLayer and SetMultipleResponseHeader are now Clone regardless of the response body type, matching the fix applied to the request-side types in 0.7.0 (#714)

#661: tower-rs/tower-http#661 #712: tower-rs/tower-http#712 #714: tower-rs/tower-http#714 #716: tower-rs/tower-http#716 #718: tower-rs/tower-http#718 #722: tower-rs/tower-http#722 #727: tower-rs/tower-http#727 #728: tower-rs/tower-http#728

All the changes

• chore(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in tower-rs/tower-http#708
• fix(compression): reject non-empty data frames after codec is EOF by @​seanmonstar in tower-rs/tower-http#712
• Remove Clone derivations from SetMultipleResponseHeader* types by @​skeet70 in tower-rs/tower-http#714
• feat(request-id): Allow request-id constructor in const context by @​tottoto in tower-rs/tower-http#716
• fs: Avoid unnecessary conversions between SystemTime and HttpDate by @​tottoto in tower-rs/tower-http#717
• fs: Use HeaderValue::is_empty to check for empty values by @​tottoto in tower-rs/tower-http#720
• fs: Use HeaderValue::to_str for date headers by @​tottoto in tower-rs/tower-http#721

... (truncated)

Commits

• c941451 chore(release): prepare 0.7.1 (#729)
• 9697702 chore(deps): bump taiki-e/install-action from 2.86.3 to 2.86.8 (#730)
• e2582e2 Allow ignoring multi-range requests (#727)
• 888f7fe feat(services): configure directory redirects (#728)
• 5ad7654 chore(deps): bump taiki-e/install-action from 2.85.12 to 2.86.3 (#726)
• d154adb fix: reject multipart ranges before validation (#661)
• d9e5c8a ci: Update to cargo-check-external-types 0.5.0 (#724)
• 90c072b Propagate ServeDir::try_call I/O errors (#718)
• 860922e fix(decompression): don't end the body on an empty data frame (#722)
• 8532252 docs(example)/custom future with multiple bodies (#711)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.