chore(rust): bump the cargo group across 1 directory with 5 updates

[dependabot]

Bumps the cargo group with 5 updates in the / directory:

Package	From	To
anyhow	1.0.102	1.0.104
fastrand	2.4.1	2.5.0
libc	0.2.185	0.2.189
rodio	0.21.1	0.22.2
gif	0.13.3	0.14.2

Updates anyhow from 1.0.102 to 1.0.104

Release notes

Sourced from anyhow's releases.

1.0.104

• Update syn dev-dependency to version 3

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 1dbe186 Release 1.0.104
• f6479f8 Update to syn 3
• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates fastrand from 2.4.1 to 2.5.0

Release notes

Sourced from fastrand's releases.

v2.5.0

• Update getrandom to 0.4. (#131)

Changelog

Sourced from fastrand's changelog.

Version 2.5.0

• Update getrandom to 0.4. (#131)

Commits

• 7a1cc2c Release 2.5.0
• 0c8cc7e Bump getrandom to 0.4 (#131)
• 6c4e800 chore: fix grammatical errors in documentation comments (#119)
• 9013cd4 Update some URLs in Readme (#127)
• See full diff in compare view

Updates libc from 0.2.185 to 0.2.189

Release notes

Sourced from libc's releases.

0.2.189

Added

• Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
• Linux SPARC: Enable the clone3 syscall (#4980)
• Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

• Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

• Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
• NuttX: Fix wchar_t definition under Arm (#5245)
• Windows: Add back link names for time-related symbols (#5300)

0.2.188

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

• uClibc now supports a similar configuration option:

  RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.189 - 2026-07-21

Added

• Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#5270)
• Linux SPARC: Enable the clone3 syscall (#4980)
• Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#5274)

Deprecated

• Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)

Fixed

• Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
• NuttX: Fix wchar_t definition under Arm (#5245)
• Windows: Add back link names for time-related symbols (#5300)

0.2.188 - 2026-07-21

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits
• uClibc now supports a similar configuration option:

... (truncated)

Commits

• ef0906e libc: Release 0.2.189
• 5a79f76 riscv32-musl: Rename padding fields to avoid a conflict
• 3e51062 psp: Fix overflowing_literals warnings
• e352fdd emscripten: add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessa...
• 63221b3 macros: Require safe in safe_f! invocations
• 707ab52 macros: Require unsafe in f! invocations
• 8e40c94 Enable clone3() syscall on sparc-linux and sparc64-linux
• 8427909 windows: Add back link names for time-related symbols
• b4863fa nuttx: fix wchar_t definition under arm
• 41c683d nuttx: mirror type definitions
• Additional commits viewable in compare view

Updates rodio from 0.21.1 to 0.22.2

Changelog

Sourced from rodio's changelog.

Version [0.22.2] (2026-03-05)

Fixed

• Incorrectly set system default audio buffer size breaks playback. We no longer use the system default (introduced in 0.22 through cpal upgrade) and instead set a safe buffer duration.
• Audio output fallback picked null device leading to no output.
• Mixer did not actually add sources sometimes.

Added

• Added Opus support via symphonia-adapter-libopus.
• Third-party Symphonia codecs can be registered with DecoderBuilder::with_symphonia_decoder.

Version [0.22.1] (2026-02-22)

Fixed

• docs.rs could not build the documentation.

Version [0.22] (2026-02-20)

Added

• Chirp and Empty now implement Iterator::size_hint and ExactSizeIterator.
• SamplesBuffer now implements ExactSizeIterator.
• Zero now implements try_seek, total_duration and Copy.
• Added Source::is_exhausted() helper method to check if a source has no more samples.
• Added Red noise generator that is more practical than Brownian noise.
• Added std_dev() to WhiteUniform and WhiteTriangular.
• Added a macro nz! which facilitates creating NonZero's for SampleRate and ChannelCount.
• Adds a new input source: Microphone.
• Adds a new method on source: record which collects all samples into a SamplesBuffer.
• Adds wav_to_writer which writes a Source to a writer.
• Added supported for I24 output (24-bit samples on 4 bytes storage).
• Added audio dithering support with dither feature (enabled by default):
  • Four dithering algorithms: TPDF, RPDF, GPDF, and HighPass
  • DitherAlgorithm enum for algorithm selection
  • Source::dither() function for applying dithering
• Added 64bit feature to opt-in to 64-bit sample precision (f64).
• Added SampleRateConverter::inner to get underlying iterator by ref.
• Added Resample source for high-quality sample rate conversion.
• Added FromIter source that wraps a sample iterator.
• Added ChannelCountConverter::inner() for immutable access to the underlying iterator.
• ChannelCountConverter now implements Source.
• Added FromIter::{inner, inner_mut, into_inner} accessor methods.

Fixed

... (truncated)

Commits

• a352fb5 Release 0.22.2
• 84aafdc Update CHANGELOG.md for 0.22.2 release
• b96b2af Merge pull request #862 from RustAudio/filter-out-null
• 54a99a8 filter out null in sink fallback
• 1a659cb document default buffer size/latency
• 338d0d8 better-limit-buffersize
• cdbbeba Merge pull request #861 from RustAudio/microphone-fixedsource
• b1fcf7b Microphone implements FixedSource
• f41bc47 Merge pull request #856 from RustAudio/default-buffer-size
• 5c519ce Merge pull request #858 from Keinsleif/fix/seek_on_skip_duration
• Additional commits viewable in compare view

Updates gif from 0.13.3 to 0.14.2

Changelog

Sourced from gif's changelog.

v0.14.2

Bugfixes:

• Correctly recognize extension blocks that only have a terminator block, i.e. are completely empty. This affects Comment as most extensions have some minimum required data (e.g. Application Identifier, …). Such images might have erratically failed to parse, interpreting the following block type as a sub-block length.

v0.14.1

Features:

• Added Frame::from_grayscale_with_alpha to efficiently generate a palette for LumaA pixels.
• Added Decoder::current_frame_info to re-query the next_frame_info without advancing the frame.

Enhancements:

• The palette for Frame::from_rgba_speed now handles multiple transparent colors, i.e. non-premultiplied alpha, by normalizing fully transparent pixels to one transparent entry. This leads to a better distributed palette.

v0.14.0

• EncodingError and DecodingError are now #[non_exhaustive]
• Modified several error paths to return a new variant of EncodingError instead of boxing them into an io::Error, several return Result types are adjusted accordingly.
• The Decoded enum no longer communicates data from decoded sub-blocks such as the repetition count. It now only contains the meta information on framing and extension data. This ensures we are yielding less often for performance.
• last_ext was renamed to last_extension_sub_block for clarity.
• The Decoder will now collect XMP and ICC metadata subblocks, making them available after decoding.

Commits

• a0127e2 Merge pull request #229 from image-rs/release-0.14.2
• 10793cf Release notes for 0.14.2
• 5116dcd Merge pull request #228 from davidalecrim1/fix-empty-extension-sub-block
• f0f52cb Fix empty sub-block terminator in extension parsing
• c1a6c4f Merge pull request #227 from image-rs/release-0.14.1
• 07c0409 Changelog and notes for 0.14.1
• a603ed1 Merge pull request #226 from image-rs/current-frame-info
• 090e0b9 Add Decoder::current_frame_info
• 9d292eb Merge pull request #224 from Muccarini/flatten_transparent_pixels
• d1dea3d Merge pull request #223 from Shnatsel/encode-la8
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[stephenlclarke]

Validated the Rodio 0.22 compatibility update: formatting, all targets tests, and GitHub checks pass.