build(deps): bump the cargo group with 9 updates

[dependabot]

Bumps the cargo group with 9 updates:

Package	From	To
brioche-pack	f50ea96	dc3fd1c
serde_json	1.0.150	1.0.151
libc	0.2.186	0.2.189
clap	4.6.2	4.6.3
cc	1.3.0	1.4.0
clap_derive	4.6.1	4.6.3
fastrand	2.4.1	2.5.0
time	0.3.53	0.3.54
time-macros	0.2.31	0.2.32

Updates brioche-pack from f50ea96 to dc3fd1c

Commits

• dc3fd1c Build(deps): bump the cargo group with 16 updates (#493)
• d8e4bdd Build(deps): bump actions/setup-node from 6 to 7 (#492)
• See full diff in compare view

Updates serde_json from 1.0.150 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

• Add RawValue::from_string_unchecked (#1331, thanks @​WonderLawrence)

Commits

• de85007 Release 1.0.151
• 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
• 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
• cf16f75 Add RawValue::from_string_unchecked
• 827a315 Update actions/upload-artifact@v6 -> v7
• cea36a5 Update actions/checkout@v6 -> v7
• See full diff in compare view

Updates libc from 0.2.186 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

• Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
• Linux SPARC: Enable the clone3 syscall (#4980)
• Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

• Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

• Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
• NuttX: Fix wchar_t definition under Arm (#5245)
• Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

• uClibc now supports a similar configuration option:

  RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

• Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
• Linux SPARC: Enable the clone3 syscall (#4980)
• Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

• Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

• Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
• NuttX: Fix wchar_t definition under Arm (#5245)
• Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
• uClibc now supports a similar configuration option:

... (truncated)

Commits

• ef0906e libc: Release 0.2.189
• 5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
• 3e51062 psp: Fix overflowing_literals warnings
• e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
• 63221b3 macros: Require safe in safe_f! invocations
• 707ab52 macros: Require unsafe in f! invocations
• 8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
• 8427909 windows: Add back link names for time-related symbols
• b4863fa nuttx: fix wchar_t definition under arm
• 41c683d nuttx: mirror type definitions
• Additional commits viewable in compare view

Updates clap from 4.6.2 to 4.6.3

Release notes

Sourced from clap's releases.

v4.6.3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

Changelog

Sourced from clap's changelog.

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

Commits

• 7e0bcca chore: Release
• 0f09905 docs: Update changelog
• 9706951 Merge pull request #6353 from truffle-dev/feat-completer-arg-index
• ac0d148 feat(complete): Index-aware ValueCompleter
• 1565a3c test(complete): Cover indexed multi-value case
• 48fc10a Merge pull request #6350 from stefankreutz/missing_docs
• 7d4c353 docs: Hint at clippy's missing docs lint
• f6a6701 chore(deps): Update Rust Stable to v1.95 (#6347)
• ac5fda6 chore: Release
• b73c627 docs: Update changelog
• Additional commits viewable in compare view

Updates cc from 1.3.0 to 1.4.0

Release notes

Sourced from cc's releases.

cc-v1.4.0

Added

• support trim paths with clang-cl.exe (#1799)

Changelog

Sourced from cc's changelog.

1.4.0 - 2026-07-24

Added

• support trim paths with clang-cl.exe (#1799)

Commits

• 413c4ec chore(cc): release v1.4.0 (#1803)
• 3dcd9ce feat: support trim paths with clang-cl.exe (#1799)
• 8896876 Bump release-plz/action from 0.5.130 to 0.5.131 (#1798)
• See full diff in compare view

Updates clap_derive from 4.6.1 to 4.6.3

Release notes

Sourced from clap_derive's releases.

v4.6.3

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

v4.6.2

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Changelog

Sourced from clap_derive's changelog.

[4.6.3] - 2026-07-20

Fixes

• (derive) Allow "literal".function() as attribute values

[4.6.2] - 2026-07-15

Fixes

• (help) Say alias when there is only one

Commits

• 12e50b3 chore: Release
• d6267d5 docs: Update changelog
• 99a4018 Merge pull request #6413 from arihant2math/issue/6412
• f181417 fix: Require literal attribute values
• 9011fa5 test(derive): Show bad literal
• 0838e82 chore: Release
• f8553c9 docs: Update changelog
• 308f18b Merge pull request #6400 from Benjas333/fix/nushell_completions
• 7dd8df1 fix(clap_complete_nushell): Disable gen last-args
• e63b8ec test(clap_complete_nushell): Add last-args test
• Additional commits viewable in compare view

Updates fastrand from 2.4.1 to 2.5.0

Release notes

Sourced from fastrand's releases.

v2.5.0

• Update getrandom to 0.4. (#131)

Changelog

Sourced from fastrand's changelog.

Version 2.5.0

• Update getrandom to 0.4. (#131)

Commits

• 7a1cc2c Release 2.5.0
• 0c8cc7e Bump getrandom to 0.4 (#131)
• 6c4e800 chore: fix grammatical errors in documentation comments (#119)
• 9013cd4 Update some URLs in Readme (#127)
• See full diff in compare view

Updates time from 0.3.53 to 0.3.54

Release notes

Sourced from time's releases.

v0.3.54

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.54 [2026-07-20]

Added

• PrimitiveDateTime has been renamed to PlainDateTime.
• Duration has been renamed to SignedDuration.
• Iteration is now possible over Date, Month, and Weekday. Relevant iterator methods have been overridden to ensure maximum performance.

For both PlainDateTime and SignedDuration, a non-deprecated type alias has been added for backwards compatibility. The new names should be preferred.

Changed

• The associated metadata type (for powerfmt implementations) for various types has been changed to () and made public. This guarantees that no additional metadata will be present.

Performance

• More gains when parsing RFC 2822.

Commits

• d1c55a4 v0.3.54 release
• 2fb04c4 Add ability to iterate over Weekdays
• 00779fa Add ability to iterate over Months
• b99c5c2 Add ability to iterate over Dates
• 41eea5b Lint on missing panic documentation
• 5a0bdd8 Replace optimizing loop with linear pass
• 687d4a9 Address clippy lints
• 6bf0055 Add LLM policy
• 81f9fe0 Rename Duration to SignedDuration
• 058efae Rename internals for PlainDateTime
• Additional commits viewable in compare view

Updates time-macros from 0.2.31 to 0.2.32

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[jaudiger]

Looks good to me 🚀