deps: bump the rust-minor group across 1 directory with 5 updates

[dependabot]

Bumps the rust-minor group with 5 updates in the / directory:

Package	From	To
bytes	1.11.1	1.12.0
memmap2	0.9.10	0.9.11
io-uring	0.7.12	0.7.13
rustls	0.23.40	0.23.41
webpki-roots	1.0.7	1.0.8

Updates bytes from 1.11.1 to 1.12.0

Release notes

Sourced from bytes's releases.

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

• 91402ce Release bytes v1.12.0 (#831)
• 2256e6d chore: add safety comments on unsafe blocks (#827)
• 245adff Pass vtable data by value (#826)
• 00cc5ff Implement BytesMut::extend_from_within (#818)
• 5b79d31 Merge tag 'v1.11.1'
• 804ee6d Make try_unsplit method public (#746)
• fd426ca Exclude development scripts from published package (#810)
• b4ed70d Add test for copy_to_bytes() -> BytesMut avoiding clone (#809)
• 94e4291 Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capac...
• acd1e0f Fix get_int if nbytes is zero (#806)
• See full diff in compare view

Updates memmap2 from 0.9.10 to 0.9.11

Changelog

Sourced from memmap2's changelog.

[0.9.11] - 2026-06-22

Fixed

• Fix unchecked pointer arithmatic in advice_range, unchecked_advise_range, flush_range and flush_async_range.

Changed

• Bump the MSRV from 1.63 to 1.65.

Commits

• 7d76ad3 Merge pull request #171 from RazrFalcon/release/v0.9.11
• 34f87ab Bump version to 0.9.11
• de56043 Merge pull request #170 from RazrFalcon/fix-unchecked-pointer-math
• 8b31409 Bump MSRV to 1.65 (to follow libc).
• cee7cf0 Fix unchecked pointer math.
• e741b00 Merge pull request #166 from andybalaam/typo-crated
• 28fdcdd Fix typo 'crated' -> 'created'
• See full diff in compare view

Updates io-uring from 0.7.12 to 0.7.13

Commits

• 6789e17 release 0.7.13 (#401)
• f3d3663 Add register_napi/unregister_napi methods (#397)
• d8356f9 io-uring-test: fix flaky epoll_wait_race short-read assertion (#400)
• eb8557c Add Parameters::is_feature_no_iowait accessor (#399)
• 03539b3 Add register_buffers_clone for cloning registered buffers (#396)
• c58afbf feat: add ioprio method for Send and Recv (#394)
• See full diff in compare view

Updates rustls from 0.23.40 to 0.23.41

Commits

• 642a103 ci: drop Taplo job
• 752c144 Drop nightly clippy tests
• 8d8611a Fix new clippy::useless-borrows-in-formatting
• ebf3297 Fix new clippy::manual_clear
• 46808e7 ci: sync cargo-check-external-types nightly
• 041a8d2 Cargo deny: allow RUSTSEC-2026-0173
• 62e220e Take semver-compatible dependency updates
• 3c14696 Upgrade to hickory-resolver 0.26
• 848a2cc connect-tests: delete ech.rs
• 5ce9cac Bump version to 0.23.41
• Additional commits viewable in compare view

Updates webpki-roots from 1.0.7 to 1.0.8

Release notes

Sourced from webpki-roots's releases.

1.0.8

• Remove SecureSign Root CA12 root; see https://bugzilla.mozilla.org/show_bug.cgi?id=2031105

What's Changed

• Test MSRV with 1.70 by @​ctz in rustls/webpki-roots#122
• Take semver-compatible dependency updates by @​djc in rustls/webpki-roots#123
• 1.0.8: remove SecureSign Root CA12 root by @​ctz in rustls/webpki-roots#124

Full Changelog: rustls/webpki-roots@v/1.0.7...v/1.0.8

Commits

• 50729cd 1.0.8: remove SecureSign Root CA12 root (#124)
• c965c54 Take semver-compatible dependency updates (#123)
• a83a3c9 Move MSRV to 1.70 (#122)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.