build(deps): bump the patch-versions group with 5 updates

[dependabot]

Bumps the patch-versions group with 5 updates:

Package	From	To
h2	0.4.14	0.4.15
log	0.4.32	0.4.33
redis	1.2.3	1.2.4
syn	2.0.117	2.0.118
webpki-roots	1.0.7	1.0.8

Updates h2 from 0.4.14 to 0.4.15

Release notes

Sourced from h2's releases.

v0.4.15

What's Changed

• fix: Discard buffered DATA when a scheduled reset is pending by @​ArniDagur in hyperium/h2#896
• fix: poll_capacity must not return Ready(Some(Ok(0))) by @​ArniDagur in hyperium/h2#898
• fix: Reject frames on streams whose HEADERS haven't been sent by @​ArniDagur in hyperium/h2#899
• chore(ci): update actions/checkout to v6 by @​seanmonstar in hyperium/h2#910
• fix: Remove unnecessary clones by @​FranciscoTGouveia in hyperium/h2#911
• fix: use HeaderMap::try_append to prevent panics on absurd amounts of headers by @​imlk0 in hyperium/h2#909
• fix: ignore library resets at connection poll loop level by @​seanmonstar in hyperium/h2#913
• fix: remove padded_len() u8 overflow in DATA frame padding release by @​seanmonstar in hyperium/h2#914
• fix: close connection when header size is way too large by @​seanmonstar in hyperium/h2#915
• Prepare v0.4.15 by @​seanmonstar in hyperium/h2#916

New Contributors

• @​FranciscoTGouveia made their first contribution in hyperium/h2#911
• @​imlk0 made their first contribution in hyperium/h2#909

Full Changelog: hyperium/h2@v0.4.14...v0.4.15

Changelog

Sourced from h2's changelog.

0.4.15 (June 15, 2026)

• Fix closing a connection when header size is "way too large" (currently x4 configured limit).
• Fix overflow calculating padding length if a DATA frame had 255 bytes of padding.
• Fix ignoring library-initiated resets in the connection state loop.
• Fix decoding panic with an absurd amount of headers and no limit to now use try_append().
• Fix rejecting frames on streams whose HEADERS have not been sent.
• Fix poll_capacity() to not return Some(Ok(0)).
• Fix discarding of buffered DATA frames when a reset is scheduled.

Commits

• 21211d0 v0.4.15
• 29e209d fix: close connection when header size is way too large (#915)
• 9231cb0 fix: remove padded_len() u8 overflow in DATA frame padding release (#914)
• d351036 fix: ignore library resets at connection poll loop level (#913)
• 4f51fff fix: use HeaderMap::try_append to prevent panics on absurd amounts of headers...
• c813cc8 refactor: remove unnecessary clones (#911)
• 810f5ae chore(ci): update actions/checkout to v6 (#910)
• d361b75 fix: Reject frames on streams whose HEADERS haven't been sent (#899)
• 93ccead fix: poll_capacity must not return Ready(Some(Ok(0))) (#898)
• 733bba7 fix: Discard buffered DATA when a scheduled reset is pending (#896)
• See full diff in compare view

Updates log from 0.4.32 to 0.4.33

Changelog

Sourced from log's changelog.

[0.4.33] - 2026-06-20

What's Changed

• Fixed key comparison by @​matteo-zeggiotti-ok in rust-lang/log#732

New Contributors

• @​matteo-zeggiotti-ok made their first contribution in rust-lang/log#732

Full Changelog: rust-lang/log@0.4.32...0.4.33

Commits

• f405739 Merge pull request #734 from rust-lang/cargo/0.4.33
• 6a24abf prepare for 0.4.33 release
• 87e0621 Merge pull request #732 from matteo-zeggiotti-ok/fix-key-comparison
• a9b5711 Review: fallback to the &str hash
• cc89cc6 Review: fixed other comparisons
• 920e7dc Review: fixed comparison on MaybeStaticStr
• 0d71d3c Fixed key comparison
• See full diff in compare view

Updates redis from 1.2.3 to 1.2.4

Release notes

Sourced from redis's releases.

redis-1.2.4

Changes & Bug fixes

• cluster: refresh topology and retry on READONLY errors (#2115 by @​alexcole)
• fix(aio): bound permit allocation by concurrency limit, not pipeline length (#2151 by @​Ali2Arslan)

CI & operational improvements

• tests/cluster_async: Switch to positive version checking (Version refactor 1/8) (#2138 by @​somechris)
• tests/basic: Switch version checks to constant (Version refactor 2/8) (#2139 by @​somechris)
• tests: Split off version code into dedicated module (Version refactor 3/10) (#2140 by @​somechris)
• tests/version: Add TestClusterVersioning trait for version handling (Version refactor 4/10) (#2141 by @​somechris)
• tests: Delegate version comparison to TestClusterVersioning (Version refactor 5/10) (#2142 by @​somechris)
• tests/version: Require ownership to check version support (Version refactor 5b/10) (#2152 by @​somechris)
• tests: Use server binary from env to detect major version (#2149 by @​somechris)

New Contributors

• @​Ali2Arslan made their first contribution in redis-rs/redis-rs#2151

Full Changelog: redis-rs/redis-rs@redis-1.2.3...redis-1.2.4

Commits

• dc54e0f Prepare version 1.2.4 (#2156)
• 452151b fix(aio): bound permit allocation by concurrency limit, not pipeline length (...
• b7f7cfe tests: Use server binary from env to detect major version (#2149)
• b0d64c5 tests/version: Require ownership to check version support (#2152)
• 33454be tests: Delegate version comparison to TestClusterVersioning (#2142)
• de53d08 tests/version: Add TestClusterVersioning trait for version handling (#2141)
• 8bb49b4 tests: Split off version code into dedicated module (#2140)
• 7e38aff cluster: refresh topology and retry on READONLY errors (#2115)
• a337eb8 tests/basic: Switch version checks to constant (Version refactor 2/8) (#2139)
• e8fa101 tests/cluster_async: Switch to positive version checking (#2138)
• See full diff in compare view

Updates syn from 2.0.117 to 2.0.118

Release notes

Sourced from syn's releases.

2.0.118

• Documentation improvements

Commits

• f033ef1 Release 2.0.118
• 45f65f7 Wrap long lint attributes
• b3f9bf8 Mirror PR 1975 from readme to crate-level rustdoc
• 97dc117 Wrap PR 1975 to 80 columns
• 0085b7a Lint repr_transparent_non_zst_fields has been removed
• 9fc1c9d Update test suite to nightly-2026-06-12
• 504bcc7 Update test suite to nightly-2026-06-09
• 353d20b Update test suite to nightly-2026-06-06
• f257a16 Update test suite to nightly-2026-05-25
• b706e6e Update test suite to nightly-2026-05-13
• Additional commits viewable in compare view

Updates webpki-roots from 1.0.7 to 1.0.8

Release notes

Sourced from webpki-roots's releases.

1.0.8

• Remove SecureSign Root CA12 root; see https://bugzilla.mozilla.org/show_bug.cgi?id=2031105

What's Changed

• Test MSRV with 1.70 by @​ctz in rustls/webpki-roots#122
• Take semver-compatible dependency updates by @​djc in rustls/webpki-roots#123
• 1.0.8: remove SecureSign Root CA12 root by @​ctz in rustls/webpki-roots#124

Full Changelog: rustls/webpki-roots@v/1.0.7...v/1.0.8

Commits

• 50729cd 1.0.8: remove SecureSign Root CA12 root (#124)
• c965c54 Take semver-compatible dependency updates (#123)
• a83a3c9 Move MSRV to 1.70 (#122)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.