Build(deps): bump the cargo group with 7 updates

[dependabot]

Bumps the cargo group with 7 updates:

Package	From	To
async-compression	0.4.44	0.4.46
reqwest	0.13.4	0.13.5
aws-config	1.11.0	1.12.0
aws-types	1.5.0	1.6.0
serde_with	3.22.0	3.23.0
zstd	0.13.3	0.14.0
aws-runtime	1.9.1	1.9.2

Updates async-compression from 0.4.44 to 0.4.46

Release notes

Sourced from async-compression's releases.

async-compression-v0.4.46

Other

• Return UnexpectedEof when deflate64 does not progress (#483)

async-compression-v0.4.45

Other

• (deps) update zstd requirement from 0.13 to 0.14 (#481)

Commits

• 3f2a600 chore: release (#484)
• b22cd69 Return UnexpectedEof when deflate64 does not progress (#483)
• d8c1b47 chore: release (#482)
• 9ffc96c chore(deps): update zstd requirement from 0.13 to 0.14 (#481)
• See full diff in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

• fix(blocking): preserve version and extensions in TryFromhttp::Request by @​wwhsaber in seanmonstar/reqwest#3050
• Remove unnecessary clones by @​FranciscoTGouveia in seanmonstar/reqwest#3052
• Add Referrer and Referrer Policy methods to WASM Request API by @​Billy-Sheppard in seanmonstar/reqwest#3049
• chore(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in seanmonstar/reqwest#3058
• feat: add Error::is_dns() to identify DNS resolution failures by @​JoakoI98 in seanmonstar/reqwest#3057
• Fix blocking client timeout panic by @​V-Mann-Nick in seanmonstar/reqwest#3060
• Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @​FalkWoldmann in seanmonstar/reqwest#3063
• feat: Add ClientBuilder::http1_max_headers by @​smaeda-ks in seanmonstar/reqwest#3065
• feat: expose the negotiated TLS version via TlsInfo by @​dennisameling in seanmonstar/reqwest#3067
• fix(error): detect timeouts wrapped in body decode errors by @​raphaelroshan in seanmonstar/reqwest#3064
• Remove unnecessary clones and a cast by @​FranciscoTGouveia in seanmonstar/reqwest#3071
• chore(deps): upgrade base64 to 0.23 by @​paolobarbolini in seanmonstar/reqwest#3074
• perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @​spellsaif in seanmonstar/reqwest#3085
• fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @​spellsaif in seanmonstar/reqwest#3084
• src/async_impl/request.rs_improved_doc_for_json_fn: by @​Athleteg in seanmonstar/reqwest#3082
• fix: proxy could use wrong credentials if many matched by @​seanmonstar in seanmonstar/reqwest#3098

New Contributors

• @​wwhsaber made their first contribution in seanmonstar/reqwest#3050
• @​FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052
• @​Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049
• @​JoakoI98 made their first contribution in seanmonstar/reqwest#3057
• @​V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060
• @​FalkWoldmann made their first contribution in seanmonstar/reqwest#3063
• @​smaeda-ks made their first contribution in seanmonstar/reqwest#3065
• @​raphaelroshan made their first contribution in seanmonstar/reqwest#3064
• @​spellsaif made their first contribution in seanmonstar/reqwest#3085
• @​Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

• de55373 v0.13.5
• 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
• 9f06fd2 docs: improve description of JSON method (#3082)
• 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
• ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
• 4e9a3c7 chore: add pull request template for human-written content
• 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
• 221abe9 chore: Remove unnecessary clones and a cast (#3071)
• 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
• fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
• Additional commits viewable in compare view

Updates aws-config from 1.11.0 to 1.12.0

Commits

• See full diff in compare view

Updates aws-types from 1.5.0 to 1.6.0

Changelog

Sourced from aws-types's changelog.

September 3rd, 2026

New this release:

• 🎉 (all, smithy-rs#4756, @​amodam-user) aws_smithy_types::Blob now implements Display and renders its contents as a lowercase hex-encoded string in both Display and Debug output. Previously, the derived Debug implementation delegated to the underlying byte buffer, producing noisy [u8, u8, ...]-style output in service logs. Hex encoding keeps the payload legible without requiring the @sensitive trait for non-sensitive binary fields.
• 🎉 (all, smithy-rs#4812) Add configurable Serde deserialization for generated model types in codegen-serde.
• 🐛 (server, smithy-rs#4803, @​MinisculeGirraffe) Fix code generation for constrained unions that have a member named error. Such a member generates an Error variant that shadowed the TryFrom::Error associated type in the generated TryFrom implementation, making every Self::Error path ambiguous and producing a crate that did not compile. The generated code now refers to the constraint violation type by name.
• 🐛 (client, @​lauzadis) Fix telemetry input capture code generation for required string members when nullabilityCheckMode is set to SERVER.

Contributors Thank you for your contributions! ❤

• @​MinisculeGirraffe (smithy-rs#4803)
• @​amodam-user (smithy-rs#4756)
• @​lauzadis

August 21st, 2026

New this release:

• 🐛 (client, aws-sdk-rust#1451, @​shrey4796) Update the lru dependency to 0.18.2 to address RUSTSEC-2026-0253.

Contributors Thank you for your contributions! ❤

• @​shrey4796 (aws-sdk-rust#1451)

August 19th, 2026

New this release:

• 🎉 (client, smithy-rs#4767) Add a deterministic connection-level test harness to the wire-mock feature under aws_smithy_http_client::test_util::wire::connection. It supports per-connection HTTP/1.1 scripts, raw socket actions, synchronization gates, and recorded connection events.
• 🎉 (client) Add pool_max_idle_per_host setter to HTTP client Builder and ConnectorBuilder, exposing hyper's pool_max_idle_per_host setting to control the maximum number of idle connections kept alive per host.

August 12th, 2026

New this release:

• 🎉 (all, smithy-rs#4758) Blob now stores its contents as Bytes and provides from_maybe_shared and into_bytes methods to avoid copies in Bytes-based protocol paths.

• 🎉 (client) Add opt-in capture of selected operation-input members for telemetry. Naming input members via Config::builder().emit_input_attributes([...]) makes the SDK capture those members' values into the ConfigBag (as CapturedTelemetryAttributes) during read_before_execution, before the input is consumed by serialization. Any interceptor can then read a value via cfg.load::<CapturedTelemetryAttributes>(), without threading it through a task_local!. Only string-valued, non-@sensitive members are eligible; capture is off by default.

  use aws_smithy_types::telemetry::CapturedTelemetryAttributes;
  // Opt in to capturing the S3 Bucket input member.

... (truncated)

Commits

• See full diff in compare view

Updates serde_with from 3.22.0 to 3.23.0

Release notes

Sourced from serde_with's releases.

serde_with v3.23.0

Changed

• Update syn and darling dependencies to use syn v3 (#992)
• Update dev-dependencies to newer versions (#993)
• Update base64 to a newer version. This should not have any API change, but some error messages might change. (#993)
• serde_as can now parse cfg_attr(true, ...) and cfg_attr(false, ...) (#995) true/false are new literals as of Rust 1.88 but need to be parsed explicitly with the syn types. This is used when emitting schemars annotations.

Commits

• ea5dfdc Bump version to v3.23.0 (#1005)
• e52e85b Bump version to v3.23.0
• 39955b6 Bump rmp dev-dependency (#1004)
• b51e5fb Bump rmp dev-dependency
• ef598c6 Use setup-rust-toolchain v2 instead of v1 (#1003)
• 9ea2658 Fix cargo lint about workspace lints being inherited in the test crate
• e5ad81a Use setup-rust-toolchain v2 instead of v1
• 8100141 Bump the github-actions group across 1 directory with 2 updates (#1002)
• 940f4a6 Bump jsonschema from 0.49.8 to 0.52.0 (#1001)
• 6f42b94 Bump the github-actions group across 1 directory with 2 updates
• Additional commits viewable in compare view

Updates zstd from 0.13.3 to 0.14.0

Commits

• 648acb4 Avoid let...else in the seekable callbacks
• e1152c1 Bump versions for the next release
• 7caed6e Derive the usual traits on ResetDirective
• bf7b1f7 Refuse to reuse a context an error may have left undefined
• 1565618 Check the target, not the host, for MSVC
• 8315a62 Return Ok(0) from Read::read for an empty buffer
• a7cfa93 Keep the std gate on the Cursor WriteBuf impl
• 9bf1692 Say why the Send and Sync impls hold
• 681bcc3 Don't truncate Cursor positions on 32-bit targets
• d5a1fdd Don't hand out a &mut Seekable from AdvancedSeekable
• Additional commits viewable in compare view

Updates aws-runtime from 1.9.1 to 1.9.2

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions