chore(deps): bump the cargo group across 1 directory with 3 updates

[dependabot]

Updates the requirements on tokio-tungstenite, uniffi and boring to permit the latest version.
Updates tokio-tungstenite to 0.30.0

Changelog

Sourced from tokio-tungstenite's changelog.

0.30.0

• Update tungstenite to 0.30.0. See tungstenite release.

0.29.0

• Update tungstenite to 0.29.0. See tungstenite release.

0.28.0

• Update tungstenite to 0.28.0. See tungstenite release.

0.27.0

• See performance updates in tungstenite-rs.

0.26.2

• Update tungstenite, see changes here.

0.26.1

• Update tungstenite to address an issue that might cause UB in certain cases.

0.26.0

• Update tungstenite to 0.26.0 (breaking changes).

0.25.0

• Update tungstenite to 0.25.0 (important updates!).

0.24.0

• Update dependencies (TLS, tungstenite).
• Return a runtime error when WSS URLs are used without a proper TLS feature enabled.

0.23.1

• Introduce a url feature (proxies to tungstenite/url).

0.23.0

• Update tungstenite to 0.23.0.
• Disable default features on TLS crates.

0.22.0

• Update TLS dependencies.
• Update tungstenite to match 0.22.0.

... (truncated)

Commits

• 4994a07 Bump version
• 753ca72 Document cancel safety of reading from WebSocketStream (#378)
• 751d7e2 Update version number listed in Readme (#375)
• 57fc3d0 docs(CHANGELOG.md): fix tungstenite versions (#374)
• See full diff in compare view

Updates uniffi to 0.32.0

Changelog

Sourced from uniffi's changelog.

v0.32.0 (backend crates: v0.32.0) - (2026-06-30)

⚠️ Breaking Changes ⚠️

• Kotlin and Python now fail to generate bindings when there are async primary constructors. Previously these languages skipped the constructor in this case or generated a constructor that always threw. You can get similar behavior by adding the primary constructor to the uniffi.toml excludes list in uniffi.toml (e.g. `excludes = ["MyObject.new"])
• Ruby: Force named parameters for enum constructors (#2880)
• The --config flag now expects a global config file rather than a flat uniffi.toml-style override. Old-style files will produce a warning and be ignored. See #2866
• [ByRef] bytes UDL arguments now map to &[u8] on the Rust side instead of &Vec<u8>. UDL-defined functions whose Rust implementations take &Vec<u8> must change to &[u8]. Proc-macro signatures (fn foo(x: &[u8])) are unchanged. On the Kotlin side, call sites must now pass a direct java.nio.ByteBuffer rather than ByteArray; migrate with ByteBuffer.allocateDirect(arr.size).put(arr).flip(). Swift (Data) and Python (bytes) call sites are unchanged. (#2878)
• Reworked the experimental pipeline bindgen code. Any external binding generators using this will need to be reworked as well. See #2787 for examples of how this can be done.

⚠️ Breaking Changes for external bindings authors ⚠️

• The signature for CrateConfigSupplier::from_cargo_metadata_command has changed. It now inputs a MetadataCommand instance and a CargoMetadataOptions rather than just a no_deps flag.

What's Fixed

• Fixed bug that sometimes prevented renaming items inside a submodule #2792
• Exempted UniFfiTag from clippy::exhaustive_structs since downstream projects may depend on it #2809
• Fixed compile errors when exporting ambiguous method names #2937
• Ruby: Code for all kinds of enums and custom types is now correctly generated #2880 and #2891

⚠️ Breaking Changes for external bindings authors ⚠️

• There's a new GlobalConfig struct for managing config. It replaces BindgenPathsLayer::get_config() method which has been removed. See #2866.
• [ByRef] bytes arguments now travel across the FFI as a ForeignBytes (pointer + length) value rather than a RustBuffer. External bindings need to accept the foreign-language byte buffer at the call site and lower it to ForeignBytes for the duration of the call (no copy). (#2878)

What's New?

• Global config file support via --config. See the docs.

• Traits can now be exported with #[uniffi::export(foreign)] for foreign-only implementations, or #[uniffi::export(rust, foreign)] for both Rust and foreign implementations. The with_foreign flag is deprecated in favor of rust, foreign.

• Recursive enums are now supported. UniFFI automatically detects when enum and record types participate in cycles — self-referential, mutually recursive, or cycling through a record — and generates appropriate bindings: indirect in Swift, forward references in Python (#2834).

• Box<T> now automatically implements FFI traits when T implements them, allowing direct use in enum variants and function parameters without NewType wrappers (#2808)

• Record fields can now be renamed with the proc-macro name = "new_field_name" attribute (#2794)

• Items can be excluded from the generated bindings using uniffi.toml.

• Added mutable_records configuration option to allow specific records to remain mutable even when generate_immutable_records is enabled (Kotlin and Swift).

• Kotlin objects now have an uniffiIsDestroyed property that returns true if the Rust reference no longer exists (#2825)

• Updated askama version to 0.15.6

• Custom Types can have docstrings in some languages (#2853)

• Ruby: Expose standard Rust traits for generated ruby code (#2883)

• Ruby: Add support for sync foreign traits (#2916)

• Ruby: Add async support (#2923)

• Added zero-copy transfer of &[u8] / [ByRef] bytes arguments from foreign code to Rust. Kotlin (java.nio.ByteBuffer, must be direct), Swift (Data), and Python (bytes-like, buffer protocol) pass byte buffers as pointer + length (ForeignBytes) rather than copying through RustBuffer. Not yet supported on Ruby, and not yet supported in async functions on any language (#2878).

• #[uniffi::export(async_runtime = "tokio")] can now be applied to trait exports, wrapping each method's FFI scaffolding future in async_compat::Compat the same way it does for inherent impls and free functions (#2899).

• Added support for using HashSet with proc-macros

... (truncated)

Commits

• 5c7b739 chore: Release
• c4ec9d8 chore: Release
• 7d647a8 Benchmark tables
• ad9b725 Pipeline IDs
• 0f6a2bc Allow literal number suffix for uniffi::Enum (#2926)
• bc38ff4 Merge pull request #2927 from bendk/bdk/push-komxvuvksmqu
• 046d894 Merging changes from 0.31.2 back to main
• afd83b2 Loosen toml semver for uniffi_macros
• 418ab38 add async support for ruby
• 05b45b1 chore: Release
• Additional commits viewable in compare view

Updates boring to 4.22.0

Changelog

Sourced from boring's changelog.

5.2.0

• 2026-05-21 Export DEP_BORINGSSL_VERSION_MAJOR var
• 2026-04-27 Expose DTLS version constants in SslVersion

5.1.0

• 2026-04-13 Add EVP_AEAD-based detached AEAD module
• 2026-04-13 Add generic PKey private key generation API
• 2026-04-13 Add TLS 1.2 PRF module and bindings
• 2026-03-25 Add used_hello_retry_request
• 2026-03-28 Prebuilt lib export option
• 2026-03-27 Display sys crate errors using cargo::error

5.0.2

• 2026-02-13 Re-add fips-precompiled for v4 compat
• 2026-02-12 Don't add build/ to non-FIPS pre-built path
• 2026-02-13 Expose load_verify_locations like rust-openssl
• 2026-02-12 Support static MSVC runtime

5.0.1

• 2026-02-03 Make SslCredential optional
• 2026-02-10 Make ML-KEM optional
• 2026-02-10 Don't always require all headers from all versions of BoringSSL
• 2026-02-10 Ensure we don't leave unit memory if generate_key fails

5.0.0

• 2025-12-19 Update vendored boring to a newer version (2023.11 to 2025.11)
• 2025-12-20 Rework RPK/SslMethod (c2f063cf4711f15b8b417b6926496fbf1c2a03ac)
• 2025-09-29 Remove SslCurve API
• 2025-09-30 Remove the "kx-*" features
• 2025-09-25 Remove legacy FIPS options (they're controlled via BORING_BSSL_ env vars instead)
• 2026-01-05 Remove deprecated X509CheckFlags flag
• 2025-09-30 Remove "pq-experimental" Cargo feature, apply PQ patch by default + P256Kyber768Draft00
• 2026-01-05 Safe clone for X509Store
• 2025-03-08 Add set_ticket_key_callback (SSL_CTX_set_tlsext_ticket_key_cb)
• 2025-09-30 Add SslRef::curve_name()
• 2025-09-30 Expose a safe Rust interface for the session resumption callback
• 2026-01-05 Fix leaky set_ex_data() API
• 2025-12-12 Add boring specific api set_strict_cipher_list to SslContextBuilder
• 2025-11-20 Introduce SslCipherRef::protocol_id
• 2023-05-11 fix: BIO_set_retry_write when BIO_CTRL_FLUSH to allow writer returns WouldBlock on flush
• 2025-11-14 Remove blanket Eq from FFI types
• 2025-12-20 Never use the debug CRT on Windows
• 2025-02-19 X509Builder::append_extension2 -> X509Builder::append_extension
• 2025-02-19 Ssl::new_from_ref -> Ssl::new()
• 2025-02-19 Align SslStream APIs with upstream
• 2025-09-26 Remove support for Hyper v0

4.21.0

• 2026-01-05 Warn about set_curves() removal
• 2026-01-05 Deprecate set_ex_data()

... (truncated)

Commits

• 467cb51 Clippy
• cb3e7dd Bump
• ee5974c Expose load_verify_locations like rust-openssl
• f5b4448 Introduce SslCipherRef::protocol_id
• d138433 Add SslRef::curve_name()
• 3a930a3 Don't add build/ to non-FIPS pre-built path
• fec5ccf More robust int conversion
• 395f578 v4.21.1
• 64b3e14 Fix docs.rs build
• 33b36ab Release 4.21.0
• Additional commits viewable in compare view

[sourcery-ai]

Sorry @dependabot[bot], you have reached your weekly rate limit of 500000 diff characters.

Please try again later or upgrade to continue using Sourcery