Bump the rust-lock group with 7 updates

[dependabot]

Bumps the rust-lock group with 7 updates:

Package	From	To
cpal	0.16.0	0.18.1
rubato	0.14.1	4.0.0
ringbuf	0.3.3	0.5.1
libloading	0.8.9	0.9.0
thread-priority	1.2.0	3.1.1
thiserror	1.0.69	2.0.18
ort	2.0.0-rc.11	2.0.0-rc.12

Updates cpal from 0.16.0 to 0.18.1

Release notes

Sourced from cpal's releases.

cpal 0.18.1

A quick follow-up to 0.18.0 primarily to fix the docs.rs build failure.

• docs.rs: Excluded pipewire, whose system dependency isn't available in that sandboxed build environment.
• WASM: Fixed the audioworklet feature failing to compile on wasm32-wasip1 and other non-browser wasm32 targets.

No API or behavioral changes.

Links

• https://crates.io/crates/cpal
• https://docs.rs/cpal/0.18.1
• https://github.com/RustAudio/cpal/releases/tag/v0.18.1
• https://github.com/RustAudio/cpal/blob/v0.18.1/CHANGELOG.md

cpal 0.18.0

Hey everyone! cpal 0.18.0 is out, bringing two long-requested native Linux backends, a unified error API, and accurate timestamps across every platform.

What's New

Native PipeWire and PulseAudio

Two new first-class backends join the Linux and BSD lineup:

• PipeWire
• PulseAudio

Enable them with the pipewire and pulseaudio Cargo features. When multiple backends are compiled in, cpal selects the best available one at runtime: PipeWire > PulseAudio > ALSA.

Unified Error API

All per-operation error enums (DevicesError, BuildStreamError, StreamError, etc.) are replaced by a single cpal::Error with a kind() getter:

match device.default_output_config() {
    Err(e) => match e.kind() {
        cpal::ErrorKind::DeviceNotAvailable => { /* ... */ }
        cpal::ErrorKind::DeviceBusy => { /* retry */ }
        _ => { /* ... */ }
    }
}

Two new error kinds make previously indistinguishable cases actionable: DeviceBusy (EBUSY/EAGAIN is retryable) and PermissionDenied for OS-level access denials. See the upgrading guide for the mapping table.

Accurate Timestamps and A/V Sync

Timestamps previously reflected when the callback fired rather than when audio would actually reach hardware. This release corrects that across every backend:

• AAudio: pipeline buffer depth accounted for; fallback to zero on error fixed

... (truncated)

Changelog

Sourced from cpal's changelog.

[0.18.1] - 2026-06-07

Fixed

• Exclude pipewire from the docs.rs build; system dependency not available in its environment.
• Fix wasm-bindgen causing compile errors on non-browser wasm32 targets such as wasm32-wasip1.

[0.18.0] - 2026-06-06

Added

• New ErrorKind variants for the unified error type: BackendError (platform error without a specific mapping); DeviceBusy (retryable device access, e.g. EBUSY/EAGAIN); DeviceChanged (audio route changed to another device); InvalidInput (invalid caller-supplied values); PermissionDenied (OS-level access denial); RealtimeDenied (real-time scheduling refused — previously only printed to stderr); ResourceExhausted (OS thread/memory limits); UnsupportedOperation (backend or device does not implement the operation).
• Device now implements PartialEq, Eq, Hash, Display, and Debug on all backends.
• realtime feature for real-time audio thread scheduling without a D-Bus build dependency.
• StreamTrait::now() to query the current instant on the stream's clock.
• StreamTrait::buffer_size() to query the stream's current buffer size in frames per callback.
• SAMPLE_RATE_CD (44100 Hz) and SAMPLE_RATE_48K (48000 Hz) constants.
• SupportedStreamConfigRange::try_with_standard_sample_rate() and with_standard_sample_rate() to select 48 kHz or 44.1 kHz from a range.
• SupportedStreamConfigRange::contains_rate() to test whether a sample rate falls within a range.
• StreamConfig and SupportedStreamConfig now implement Copy.
• BufferSize now implements Default (returns BufferSize::Default).
• SupportedBufferSize now implements Default (returns SupportedBufferSize::Unknown).
• HostTrait::device_by_id() is now backend-dispatched, allowing each host to override the default implementation.
• DSD512 sample rates added to the common rate probe list.
• AAudio: Streams now request PERFORMANCE_MODE_LOW_LATENCY with the realtime feature; reports ErrorKind::RealtimeDenied if not granted.
• ALSA: device_by_id() now accepts PCM shorthand names such as hw:0,0 and plughw:foo.
• CoreAudio: tvOS target support (Tier 3, requires nightly).
• PipeWire: New host for Linux and BSD via the native PipeWire API.
• PulseAudio: New host for Linux and BSD via the PulseAudio API.
• WASAPI: F64 sample format support.

Changed

• Changed per-operation error types (DevicesError, SupportedStreamConfigsError, etc.) and HostUnavailable into a unified Error/ErrorKind. See https://github.com/RustAudio/cpal/blob/master/UPGRADING.md.
• DeviceTrait now requires PartialEq + Eq + Hash + Debug + Display with a stable device ID.
• DeviceTrait::build_*_stream() now takes StreamConfig by value instead of &StreamConfig.
• StreamInstant API changed and extended to mirror std::time::Instant/Duration. See https://github.com/RustAudio/cpal/blob/master/UPGRADING.md for migration details.
• Streams no longer start automatically on build_*_stream(); call play() explicitly. Previously ALSA, CoreAudio, and JACK auto-started streams on creation.
• Default output and input configs now prefer 48 kHz, then 44.1 kHz, then the device maximum.

... (truncated)

Commits

• 94ecb6e fix(ci): docs.rs has libjack-jackd2-dev
• 50d9646 ci: check with all features (#1240)
• 51f96e9 chore: prepare for v0.18.1 release
• 189db47 fix: exclude pipewire from docs.rs (#1239)
• 45fe976 fix(wasm): all features without atomics
• baa3678 doc: finalize changelog and upgrading guide for v0.18 release (#1238)
• 27473ac fix(pipewire): use node.latency and re-promote RT when re-negotiated (#1236)
• 0048977 perf(alsa): optimize enumeration speed (#1233)
• 7d4aedb chore(jack): pin to >= 0.13.5 (#1231)
• d2a2688 fix(pulseaudio): use device names as id (#1228)
• Additional commits viewable in compare view

Updates rubato from 0.14.1 to 4.0.0

Release notes

Sourced from rubato's releases.

v4.0.0

What's Changed

• Split Resampler into capability traits Adjustable and Resizable by @​HEnquist in HEnquist/rubato#132
• Add Slip resampler for cheap clock-drift rate matching by @​HEnquist in HEnquist/rubato#134
• Update to audioadapter 4.0 and bump to 4.0.0 by @​HEnquist in HEnquist/rubato#133

Full Changelog: HEnquist/rubato@v3.0.0...v4.0.0

v3.0.0

What's Changed

• Documentation updates based on feedback by @​HEnquist in HEnquist/rubato#125
• Separate lifetimes for input and output by @​HEnquist in HEnquist/rubato#126
• Smarter dot products and performance simpler by @​HEnquist in HEnquist/rubato#130
• Smarter dot products by @​HEnquist in HEnquist/rubato#131

Full Changelog: HEnquist/rubato@v2.0.0...v3.0.0

v2.0.0

What's Changed

• Update dependencies, improve tests, bump to v2.0 by @​HEnquist in HEnquist/rubato#122

Full Changelog: HEnquist/rubato@v1.0.1...v2.0.0

v1.0.1

What's Changed

• Re-export audioadapter crate by @​casey in HEnquist/rubato#112
• Fix process_all length calc by @​HEnquist in HEnquist/rubato#118

New Contributors

• @​casey made their first contribution in HEnquist/rubato#113

Full Changelog: HEnquist/rubato@v1.0.0...v1.0.1

v1.0.0

• New API using the AudioAdapter crate to handle different buffer layouts and sample formats.
• Merged the FixedIn, FixedOut and FixedInOut resamplers into single types that supports all modes.
• Merged the sinc and polynomial asynchronous resamplers into one type that supports both interpolation modes.

v1.0.0-preview.0

Full Changelog: HEnquist/rubato@v0.16.2...v1.0.0-preview.0

v0.16.2

What's Changed

• Fix tests on 32-bit archs, add test by @​HEnquist in HEnquist/rubato#102

... (truncated)

Commits

• 2c2e7ba Merge pull request #133 from HEnquist/next4.0
• 64533e0 Switch to MIT OR Apache-2.0 dual license
• 7ef76cb Add resampler selection guide and fix README issues
• b7d9e9d Make README example feature-independent and stream-oriented
• 5815bb9 Merge pull request #134 from HEnquist/drift-resampler
• 7e45551 Fix out-of-bounds read on short final chunk; harden example file read
• e3fc87c Use a length-adaptive linear crossfade to hide Slip corrections
• e912257 Add adjust_ratio_f64 example for the adjustable resamplers
• 162920d Implement is_adjustable/is_resizable for Slip
• 36c00ea Apply rustfmt to fade table test
• Additional commits viewable in compare view

Updates ringbuf from 0.3.3 to 0.5.1

Commits

• See full diff in compare view

Updates libloading from 0.8.9 to 0.9.0

Commits

• dab97c5 0.9.0 release rites
• e893804 refactor: simplify null checks, remove some iffy implementations
• 4b98285 add no-std support
• See full diff in compare view

Updates thread-priority from 1.2.0 to 3.1.1

Release notes

Sourced from thread-priority's releases.

Thread Priority 3.0.0

3.0.0 on 03-09-2025

Breaking changes:

• The ThreadPriorityValue::MAX and ThreadPriorityValue::MIN are now of type ThreadPriorityValue itself, instead of u8. Addresses the issue #38.

Changelog

Sourced from thread-priority's changelog.

3.1.0, 3.1.1 on 20-06-2026

Changed the windows crate requirements from =0.61 to >=0.61 <0.63.

3.0.0 on 03-09-2025

Breaking changes:

• The ThreadPriorityValue::MAX and ThreadPriorityValue::MIN are now of type ThreadPriorityValue itself, instead of u8. Addresses the issue #38.

2.1.1 on 03-09-2025

• Corrected the git history.
• Added the changelog file to help tracking the changes.

Commits

• See full diff in compare view

Updates thiserror from 1.0.69 to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

• Make compatible with project-level needless_lifetimes = "forbid" (#443, thanks @​LucaCappelletti94)

2.0.17

• Use differently named __private module per patch release (#434)

2.0.16

• Add to "no-std" crates.io category (#429)

2.0.15

• Prevent Error::provide API becoming unavailable from a future new compiler lint (#427)

2.0.14

• Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#426)

2.0.13

• Documentation improvements

2.0.12

• Prevent elidable_lifetime_names pedantic clippy lint in generated impl (#413)

2.0.11

• Add feature gate to tests that use std (#409, #410, thanks @​Maytha8)

2.0.10

• Support errors containing a generic type parameter's associated type in a field (#408)

2.0.9

• Work around missing_inline_in_public_items clippy restriction being triggered in macro-generated code (#404)

2.0.8

• Improve support for macro-generated derive(Error) call sites (#399)

2.0.7

• Work around conflict with #[deny(clippy::allow_attributes)] (#397, thanks @​zertosh)

2.0.6

• Suppress deprecation warning on generated From impls (#396)

2.0.5

• Prevent deprecation warning on generated impl for deprecated type (#394)

2.0.4

• Eliminate needless_lifetimes clippy lint in generated From impls (#391, thanks @​matt-phylum)

2.0.3

• Support the same Path field being repeated in both Debug and Display representation in error message (#383)
• Improve error message when a format trait used in error message is not implemented by some field (#384)

2.0.2

... (truncated)

Commits

• dc0f6a2 Release 2.0.18
• 0275292 Touch up PR 443
• 3c33bc6 Merge pull request #443 from LucaCappelletti94/master
• 995939c Reproduce issue 442
• 21653d1 Made clippy lifetime allows conditional
• 45e5388 Update actions/upload-artifact@v5 -> v6
• 386aac1 Update actions/upload-artifact@v4 -> v5
• ec50561 Update actions/checkout@v5 -> v6
• 247eab5 Update name of empty_enum clippy lint
• 91b181f Raise required compiler to Rust 1.68
• Additional commits viewable in compare view

Updates ort from 2.0.0-rc.11 to 2.0.0-rc.12

Release notes

Sourced from ort's releases.

v2.0.0-rc.12

2.0.0-rc.12

💖 If you find ort useful, please consider sponsoring us on Open Collective 💖

🤔 Need help upgrading? Ask questions in GitHub Discussions or in the pyke.io Discord server!

---

This release was made possible by Rime.ai!

Authentic AI voice models for enterprise.

---

📍 Multiversioning

🚨 If you used ort with default-features = false, enable the api-24 feature to use the latest features.

The big highlight of this release is multiversioning: ort can now use any minor version of ONNX Runtime from v1.17 to v1.24. New features are gated behind api-* feature flags, like api-20 or api-24. These flags will set the minimum version of ONNX Runtime required by ort.

More info 👉 https://ort.pyke.io/setup/multiversion

🪄 Automatic device selection

With ONNX Runtime 1.22 or later, ort will now automatically use an NPU if one is available for maximum efficiency & power savings! Setting your own execution providers will override this.

This is thanks to the super cool new SessionBuilder::with_auto_device API! There's also SessionBuilder::with_devices for finer control.

👁️ CUDA 13

ort now ships builds for both CUDA 12 & CUDA 13! It should automatically detect which CUDA you're using, but if it gets it wrong, you can override it by setting the ORT_CUDA_VERSION environment variable to 12 or 13.

🩹 SessionBuilder error recovery

You can now recover from errors when building a session by calling .recover() on the error type to get the SessionBuilder back.

🛡️ Build attestations

Prebuilt binaries are now attested via GitHub Actions, so you can verify that they are untampered builds of ONNX Runtime coming straight from pyke.io.

To verify, download your binary package of choice and use the gh CLI to verify:

➜  gh attestation verify --owner pykeio ./x86_64-pc-windows-msvc+cu13.tar.lzma2
Loaded digest sha256:e96616510082108be228ad6ea026246a31650b7d446b330c6b9671fcb9ae6267 for file://./x86_64-pc-windows-msvc+cu13.tar.lzma2
Loaded 1 attestation from GitHub API
The following policy criteria will be enforced:

OIDC Issuer must match:................... https://token.actions.githubusercontent.com
Source Repository Owner URI must match:... https://github.com/pykeio

</tr></table>

... (truncated)

Commits

• f085e4c 2.0.0-rc.12
• 079ecb4 fix: one environment (#542)
• 0023124 fix(tract): support external data
• e9666c7 fix: no_std
• a08efe6 feat: manual device selection
• 771e1a5 refactor: make Outlet wrap OrtValueInfo
• a02122d fix: web, no-std
• 0fe5b25 config: silence clippy warning
• fb29790 feat: recover from SessionBuilder errors
• 831422c docs(readme): update projects
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions