fix(deps): bump the cargo-minor-and-patch-dependencies group across 1 directory with 7 updates

[dependabot]

Bumps the cargo-minor-and-patch-dependencies group with 6 updates in the / directory:

Package	From	To
eyre	0.6.12	0.6.14
futures	0.3.33	0.3.34
rcgen	0.14.8	0.14.9
serde_with	3.21.0	3.22.0
uint	0.10.0	0.10.1
moka	0.12.15	0.12.16

Updates eyre from 0.6.12 to 0.6.14

Commits

• b7014af 0.6.14
• 704488e Revert "Make ContextCompat consistent and non-ambiguous with WrapErr (#138, #...
• 3ce35d4 Backport future incompat fix, release 0.6.13 (#296)
• 41042dc Bump to 0.6.13
• 4564219 Remove pyo3 feature (#278)
• f5f5d90 Don't emit trailing semicolon from bail! (#294)
• 154c8de Eliminate pointer->reference->pointer during downcast (#286)
• d83c1e7 Use std backtrace on stable (#284)
• 786879d Add default type parameter value of T = () to eyre::Result\<T> (#273)
• 8c27860 Fix compile probe and nightly backtraces (#160)
• Additional commits viewable in compare view

Updates futures from 0.3.33 to 0.3.34

Release notes

Sourced from futures's releases.

0.3.34

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

Changelog

Sourced from futures's changelog.

0.3.34 - 2026-08-11

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

Commits

• 705e6b5 Release 0.3.34
• 616dac7 compat: Inline RawWaker clone function
• 4176369 Inline remaining RawWaker clone functions
• f17a895 Fix cloned FuturesUnordered waker identity
• 51d62ad macro: bump syn to v3 (#3028)
• 9e26177 ci: Reduce timeout-minutes
• b2d0983 tsan: Enable Adaptive Delay
• f733d0e Miri: Ignore compat tests
• e5def2f Rename default branch to main
• See full diff in compare view

Updates futures-util from 0.3.33 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

Commits

• 705e6b5 Release 0.3.34
• 616dac7 compat: Inline RawWaker clone function
• 4176369 Inline remaining RawWaker clone functions
• f17a895 Fix cloned FuturesUnordered waker identity
• 51d62ad macro: bump syn to v3 (#3028)
• 9e26177 ci: Reduce timeout-minutes
• b2d0983 tsan: Enable Adaptive Delay
• f733d0e Miri: Ignore compat tests
• e5def2f Rename default branch to main
• See full diff in compare view

Updates rcgen from 0.14.8 to 0.14.9

Release notes

Sourced from rcgen's releases.

0.14.9

Previous versions generated DER that is strictly incompatible with the spec, writing an explicit false value for IsCa::ExplicitNoCa where this should be omitted (as it's the default).

What's Changed

• doc: amend description to point to CertificateParams for additional explanation by @​mcr in rustls/rcgen#433
• Omit default cA flag value as required by spec by @​djc in rustls/rcgen#444

Commits

• 7ca88d2 rcgen: bump version to 0.14.9
• f3cdedc Omit default cA flag value as required by spec
• 0a2200d Deduplicate CA extensions writing logic
• adaa1a2 Deduplicate eKU writing logic
• edc6bb6 rustls-cert-gen: fix useless_borrows_in_formatting findings
• 86ae909 Bump actions/cache from 5 to 6
• 54082a6 Fix non-compliant PKCS#8 v2 Ed25519 test key encoding
• bee639a Bump actions/checkout from 6 to 7
• d012e2c doc: extend CertificateSigningRequest docs/interinks
• 0c565ed ci: sync cargo-check-external-types nightly
• Additional commits viewable in compare view

Updates serde_with from 3.21.0 to 3.22.0

Release notes

Sourced from serde_with's releases.

serde_with v3.22.0

Added

• Add support for jiff v0.2 behind the new jiff_0_2 feature flag (#936) jiff::SignedDuration works with DurationSeconds and its variants. jiff::Timestamp, jiff::Zoned, and jiff::civil::DateTime work with TimestampSeconds and its variants. Deserializing a jiff::Zoned uses the system time zone, like chrono::DateTime<Local>.

Fixed

• Extend the GHSA-7gcf-g7xr-8hxj fix to the duplicate-key-prevention collections. The rust::sets_duplicate_value_is_error, rust::maps_duplicate_key_is_error, rust::sets_last_value_wins, and rust::maps_first_key_wins adapters created their backing sets/maps with with_capacity_and_hasher using the raw deserializer size_hint, bypassing the size_hint_cautious cap added in #966 (the clippy.toml disallowed_methods lint only covers Vec::with_capacity, not with_capacity_and_hasher, so these sites were not flagged). Attacker-controlled input claiming a huge length could panic with Hash table capacity overflow before a single element was read. All such constructions now route through size_hint_cautious.

Commits

• 88f576a Bump version to 3.22.0 (#991)
• 931e664 Bump version to 3.22.0
• e26930e Bump github/codeql-action from 4.37.3 to 4.37.4 in the github-actions group (...
• 92cd5a0 Bump github/codeql-action in the github-actions group
• 32be66f Guard with_capacity_and_hasher against untrusted size_hint (DoS) (#971)
• 33871cd Merge branch 'master' into fix/duplicate-key-impls-capacity-overflow
• bb1e064 Change function position within impl (#968)
• 202d3dd Improve the time unit macros to remove unnecessary repetition and make the co...
• b347efb Move the use_duration_signed_ser/*_de macros utils
• 6590545 chrono_0_4: Implement the same time unit macro cleanup as jiff_0_2
• Additional commits viewable in compare view

Updates uint from 0.10.0 to 0.10.1

Commits

• 3030a6d Move memory stats gathering from polkadot to parity-util-mem (#588)
• c031b09 kvdb api uses now template argument P: AsRef\<Path> instead of &str (#579)
• 8a1739a add to kvdb-rocksdb create_if_missing config option (#576)
• 916a382 release rlp 0.5.1 and kvdb-rocksdb 0.12.1 (#575)
• bd6bb46 bump rocksdb to 6.20.3 (#573)
• faad8b6 update rustfmt config to match substrate (#570)
• a9dbe62 rlp: fix bool encoding/decoding (#572)
• 2d571df decommission parity-crypto (#566)
• a05ef25 primitive-types/impl-codec: Bump to include new `parity_scale_codec::MaxEncod...
• 84a7d26 start removing stuff (#561)
• Additional commits viewable in compare view

Updates moka from 0.12.15 to 0.12.16

Release notes

Sourced from moka's releases.

v0.12.16

Version 0.12.16

Fixed

• Fixed a bug where cache eviction could stall permanently when the cache was configured with the non-default LRU eviction policy (EvictionPolicy::lru()) by a race between insert and remove operations on the same key (#592gh-pull-0592 by @​kim-jhyeon, reported in #590gh-issue-0590):
  • This bug was introduced in v0.12.0 and affected sync::Cache, sync::SegmentedCache and future::Cache.
  • A race between applying a write recording for an entry and concurrently removing that entry from the internal concurrent hash table could leave an orphaned node at the front of the LRU queue. Once present, no entry was ever evicted again and the cache grew unboundedly past max_capacity.
  • The same race also affected the default TinyLFU eviction policy, but with a milder symptom: each occurrence permanently leaked one phantom entry slot, causing entry_count and weighted_size to over-report and the usable capacity to shrink by one entry per occurrence. Fixed by the same change.

Changed

• Worked around a ThreadSanitizer false positive (#602gh-pull-0602):
  • Replaced the standalone fence(Acquire) in the internal MiniArc's drop path with an Acquire load of the reference count, so that downstream projects can now run ThreadSanitizer on code using Moka without hitting this false positive.
  • std::sync::Arc has a similar workaround.
• Raised the minimum version of the crossbeam-epoch crate from v0.9.18 to v0.9.20 to avoid the following advisory (#603gh-pull-0603):
  • [RUSTSEC-2026-0204] crossbeam-epoch: invalid pointer dereference in fmt::Pointer for Atomic and Shared
  • Moka is not affected by this advisory because it never formats these pointer types. However, raising the minimum version prevents downstream lockfiles from resolving to an affected crossbeam-epoch version via Moka.

Changelog

Sourced from moka's changelog.

Version 0.12.16

Fixed

• Fixed a bug where cache eviction could stall permanently when the cache was configured with the non-default LRU eviction policy (EvictionPolicy::lru()) by a race between insert and remove operations on the same key (#592[gh-pull-0592] by [@​kim-jhyeon][gh-kim-jhyeon], reported in #590[gh-issue-0590]):
  • This bug was introduced in v0.12.0 and affected sync::Cache, sync::SegmentedCache and future::Cache.
  • A race between applying a write recording for an entry and concurrently removing that entry from the internal concurrent hash table could leave an orphaned node at the front of the LRU queue. Once present, no entry was ever evicted again and the cache grew unboundedly past max_capacity.
  • The same race also affected the default TinyLFU eviction policy, but with a milder symptom: each occurrence permanently leaked one phantom entry slot, causing entry_count and weighted_size to over-report and the usable capacity to shrink by one entry per occurrence. Fixed by the same change.

Changed

• Worked around a ThreadSanitizer false positive (#602[gh-pull-0602]):
  • Replaced the standalone fence(Acquire) in the internal MiniArc's drop path with an Acquire load of the reference count, so that downstream projects can now run ThreadSanitizer on code using Moka without hitting this false positive.
  • std::sync::Arc has a similar workaround.
• Raised the minimum version of the crossbeam-epoch crate from v0.9.18 to v0.9.20 to avoid the following advisory (#603[gh-pull-0603]):
  • [RUSTSEC-2026-0204] crossbeam-epoch: invalid pointer dereference in fmt::Pointer for Atomic and Shared
  • Moka is not affected by this advisory because it never formats these pointer types. However, raising the minimum version prevents downstream lockfiles from resolving to an affected crossbeam-epoch version via Moka.

Commits

• a616ec1 Merge pull request #604 from moka-rs/chore/bump-v0.12.16
• 3b140a6 Bump the version to v0.12.16
• 51b802d Merge pull request #603 from moka-rs/bump-crossbeam-epoch-floor
• 4f90716 Raise the minimum crossbeam-epoch version to 0.9.20
• 08d0e04 Merge pull request #602 from moka-rs/gh600-tsan-workaround
• 14447a7 Restructure the v0.12.16 TSan workaround CHANGELOG entry
• 7b14c37 Avoid a TSan false positive by replacing the fence in MiniArc::drop
• 05b37c6 Merge pull request #599 from moka-rs/gh590-deterministic-tests
• fc31858 Replace private doc references in gh590 test comments
• 5743592 Improve the v0.12.16 CHANGELOG entry
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions