fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
clap	dev-dependencies	minor	4.5.57 → 4.6.0
futures (source)	workspace.dependencies	patch	0.3.31 → 0.3.32
maturin (changelog)	project.dependencies	minor	==1.11.5 → ==1.12.6
opentelemetry-otlp (source)	dev-dependencies	patch	0.31.0 → 0.31.1
pin-project-lite	dependencies	patch	0.2.16 → 0.2.17
pyo3	dependencies	patch	0.28.0 → 0.28.3
tokio (source)	dev-dependencies	minor	1.49.0 → 1.51.0
tokio (source)	workspace.dependencies	minor	1.49.0 → 1.51.0

---

Release Notes

clap-rs/clap (clap)

v4.6.0

Compare Source

Compatibility

• Update MSRV to 1.85

v4.5.61

Compare Source

Internal

• Update dependencies

v4.5.60

Compare Source

Fixes

• (help) Quote empty default values, possible values

v4.5.59

Compare Source

Fixes

• Command::ignore_errors no longer masks help/version on subcommands

v4.5.58

Compare Source

rust-lang/futures-rs (futures)

v0.3.32

Compare Source

• Bump MSRV of utility crates to 1.71. (#​2989)
• Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#​2925)
• Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#​2929)
• Add FuturesOrdered::clear (#​2927)
• Add mpsc::*Receiver::recv (#​2947)
• Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#​2944)
• Implement FusedStream for sink::With (#​2948)
• Add no_std support for shared (#​2868)
• Make Mutex::new() const (#​2956)
• Add #[clippy::has_significant_drop] to guards (#​2967)
• Remove dependency to pin-utils (#​2929)
• Remove dependency on num_cpus (#​2946)
• Performance improvements (#​2983)
• Documentation improvements (#​2925, #​2926, #​2940, #​2971)

pyo3/maturin (maturin)

v1.12.6

Compare Source

• Sync legacy_py.rs with upstream PyPI warehouse legacy.py (#​3053)
• Keep cargo build artifact at original path after staging (#​3054)

v1.12.5

Compare Source

• Feat: include debug info files (.pdb, .dSYM, .dwp) in wheels (#​3024)
• Fix wrong abi3 tag for conditional cargo features enabled pyo3 abi3 feature (#​3029)
• Fix: maturin build --sdist wheel name/layout for excluded workspace crates (#​3031)
• Fix: preserve wheel output dir when building from unpacked sdist (#​3036)
• Feat: add python-implementation condition to conditional features (#​3038)
• Update zip to 8.1 (#​3039)
• Use the latest version of github actions (#​3040)
• Use renovate and pinned hashes for GitHub Actions (#​3043)
• Chore(deps): update taiki-e/install-action digest to 7410117 (#​3046)
• Chore(deps): update dtolnay/rust-toolchain digest to efa25f7 (#​3045)
• Chore(deps): update actions/attest-build-provenance action to v4 (#​3047)
• Use mmap for faster warn_missing_py_init (#​2950)

v1.12.4

Compare Source

• Upgrade memmap2 version (#​3021)
• Fix: platform tag detection for Android targets (#​3023)
• Fix: only ignore maturin-generated native libraries on all platforms (#​3025)
• Fix: ignore develop artifacts for all binding types during build (#​3026)
• Feat: support conditional cargo features based on Python version (#​3027)

v1.12.3

Compare Source

• Ci: set crt-static for riscv64 and loongarch64 musl targets (#​3009)
• Fix: support maturin develop on Windows ARM with x86 Python (#​3011)
• Fix: exclude external_packages bindings from uniffi wheels (#​3013)
• Update cargo-zigbuild to 0.22.1 (#​3015)
• Feat: build wheels from sdist with --sdist flag (#​3014)
• Feat: add include-import-lib option to bundle Windows import libraries in wheels (#​3017)
• Fix: auditwheel external lib check respects musllinux and reports symbol versions (#​3019)

v1.12.2

Compare Source

• Fix: allow absolute paths for --sbom-include (#​3004)

v1.12.1

Compare Source

• Fix crates.io trusted publishing
• Replace addnab/docker-run-action with direct docker run command
• Document SBOM support in user guide
• Add --sbom-include CLI argument for additional SBOM files (#​2999)
• Fix: resolve include patterns relative to python-source for sdist and wheel (#​3000)
• Feat: log external shared libraries and their dependents before patchelf
• Feat: support including OUT_DIR assets in wheel builds (#​3001)
• Add test case for uniffi with multiple crates (#​2839)

v1.12.0

Compare Source

• Use pypi compatibility validation for own CI (#​2929)
• Update toml crates for toml 1.1 support (#​2934)
• Fix editable install for binary projects with Python modules (#​2938)
• Release to crates.io only after the builds passed (#​2939)
• Use mymindstorm/setup-emsdk@v14 in generated GitHub Actions workflow (#​2941)
• Filter linked_paths by KIND and linked_libs (#​2949)
• Update bytes to 1.11.1 (#​2960)
• Normalize wheel distribution names to match the PyPA spec (#​2954)
• Allow build loongarch64 and riscv64 for musllinux (#​2963)
• Strip excluded cargo targets in sdist (#​2964)
• Normalize wheel RECORD paths (on Windows) (#​2965)
• Bump MSRV to 1.88.0 (#​2966)
• Support MATURIN_STRIP env var and --strip true/false to override pyproject.toml (#​2968)
• Fix: copy bin artifacts before auditwheel repair to avoid rerun failures (#​2969)
• Fix: rewrite python-source in pyproject.toml when building sdist (#​2972)
• Fix: resolve wheel include patterns relative to project root (#​2973)
• Fix: always include workspace Cargo.toml in sdist (#​2974)
• Refactor: simplify source_distribution.rs (#​2976)
• Feat: support PEP 735 dependency groups in develop command (#​2978)
• Fix license file handling for workspace-level license files (#​2970)
• Support PEP 739 build-details.json when cross compiling (#​2979)
• Fix .libs directory name for namespace packages (#​2981)
• Fix: exclude duplicate python source files from sdist for workspace members (#​2982)
• Fix: remove default-members from workspace Cargo.toml in sdist (#​2983)
• Fix: correctly filter workspace members in sdist by directory path (#​2984)
• Feat: Add PEP 770 SBOM support (#​2980)
• Error when python-source is set but Python module is missing (#​2986)
• Feat: add auditwheel SBOM for grafted shared libraries (#​2985)
• Fix sdist duplicate README error when readme is in both Cargo.toml and pyproject.toml (#​2987)
• Fix: support python-source pointing outside Rust source directory (#​2988)
• Relax ziglang dependency version requirement (#​2990)
• Stop adding link-native-libraries flag by default in Emscripten platform in latest Rust (#​2991)
• Fix: platform.system() on Android for Python 3.13+ (#​2992)
• Document more environment variables in user guide
• Fix: check external libs for glibc version when determining platform tag (#​2993)
• Update cargo-zigbuild to 0.22.0 (#​2994)
• Sbom: filter to bindings crate only and upgrade to CycloneDX v1.5 (#​2995)
• Upgrade ureq to 3.2.0 and migrate to built-in multipart (#​2997)

open-telemetry/opentelemetry-rust (opentelemetry-otlp)

v0.31.1: opentelemetry-otlp 0.31.1

Compare Source

What's Changed

• feat(OTLP): add tls-ring, tls-aws-lc, and tls-provider-agnostic feature flags [patch release v0.31.1] by @​lalitb in #​3426

Full Changelog: open-telemetry/opentelemetry-rust@v0.31.0...opentelemetry-otlp-0.31.1

taiki-e/pin-project-lite (pin-project-lite)

v0.2.17

Compare Source

• Enable release immutability.

pyo3/pyo3 (pyo3)

v0.28.3

Compare Source

Fixed

• Fix compile error with #[pyclass(get_all)] on a type named Probe. #​5837
• Fix compile error in debug builds related to _Py_NegativeRefcount with Python < 3.12. #​5847
• Fix a race condition where Python::attach or try_attach could return before site.py had finished running. #​5903
• Fix unsoundness in PyBytesWriter::write_vectored with Python 3.15 prerelease versions. #​5907
• Fix deadlock in .into_pyobject() implementation for C-like #[pyclass] enums. #​5928

v0.28.2

Compare Source

Fixed

• Fix complex enum __qualname__ not using python name #​5815
• Fix FFI definition PyType_GetTypeDataSize (was incorrectly named PyObject_GetTypeDataSize). #​5819
• Fix memory corruption when subclassing native types with abi3 feature on Python 3.12+ (newly enabled in PyO3 0.28.0). #​5823

v0.28.1

Compare Source

Fixed

• Fix *args / **kwargs support in experimental-async feature (regressed in 0.28.0). #​5771
• Fix clippy::declare_interior_mutable_const warning inside #[pyclass] generated code on enums. #​5772
• Fix ambiguous_associated_items compilation error when deriving FromPyObject or using #[pyclass(from_py_object)] macro on enums with Error variant. #​5784
• Fix __qualname__ for complex #[pyclass] enum variants to include the enum name. #​5796
• Fix missing std::sync::atomic::Ordering import for targets without atomic64. #​5808

tokio-rs/tokio (tokio)

v1.51.0: Tokio v1.51.0

Compare Source

1.51.0 (April 3rd, 2026)

Added

• net: implement get_peer_cred on Hurd (#​7989)
• runtime: add tokio::runtime::worker_index() (#​7921)
• runtime: add runtime name (#​7924)
• runtime: stabilize LocalRuntime (#​7557)
• wasm: add wasm32-wasip2 networking support (#​7933)

Changed

• runtime: steal tasks from the LIFO slot (#​7431)

Fixed

• docs: do not show "Available on non-loom only." doc label (#​7977)
• macros: improve overall macro hygiene (#​7997)
• sync: fix notify_waiters priority in Notify (#​7996)
• sync: fix panic in Chan::recv_many when called with non-empty vector on closed channel (#​7991)

v1.50.0: Tokio v1.50.0

Compare Source

1.50.0 (Mar 3rd, 2026)

Added

• net: add TcpStream::set_zero_linger (#​7837)
• rt: add is_rt_shutdown_err (#​7771)

Changed

• io: add optimizer hint that memchr returns in-bounds pointer (#​7792)
• io: implement vectored writes for write_buf (#​7871)
• runtime: panic when event_interval is set to 0 (#​7838)
• runtime: shorten default thread name to fit in Linux limit (#​7880)
• signal: remember the result of SetConsoleCtrlHandler (#​7833)
• signal: specialize windows Registry (#​7885)

Fixed

• io: always cleanup AsyncFd registration list on deregister (#​7773)
• macros: remove (most) local use declarations in tokio::select! (#​7929)
• net: fix GET_BUF_SIZE constant for target_os = "android" (#​7889)
• runtime: avoid redundant unpark in current_thread scheduler (#​7834)
• runtime: don't park in current_thread if before_park defers waker (#​7835)
• io: fix write readiness on ESP32 on short writes (#​7872)
• runtime: wake deferred tasks before entering block_in_place (#​7879)
• sync: drop rx waker when oneshot receiver is dropped (#​7886)
• runtime: fix double increment of num_idle_threads on shutdown (#​7910, #​7918, #​7922)

Unstable

• fs: check for io-uring opcode support (#​7815)
• runtime: avoid lock acquisition after uring init (#​7850)

Documented

• docs: update outdated unstable features section (#​7839)
• io: clarify the behavior of AsyncWriteExt::shutdown() (#​7908)
• io: explain how to flush stdout/stderr (#​7904)
• io: fix incorrect and confusing AsyncWrite documentation (#​7875)
• rt: clarify the documentation of Runtime::spawn (#​7803)
• rt: fix missing quotation in docs (#​7925)
• runtime: correct the default thread name in docs (#​7896)
• runtime: fix event_interval doc (#​7932)
• sync: clarify RwLock fairness documentation (#​7919)
• sync: clarify that recv returns None once closed and no more messages (#​7920)
• task: clarify when to use spawn_blocking vs dedicated threads (#​7923)
• task: doc that task drops before JoinHandle completion (#​7825)
• signal: guarantee that listeners never return None (#​7869)
• task: fix task module feature flags in docs (#​7891)
• task: fix two typos (#​7913)
• task: improve the docs of Builder::spawn_local (#​7828)
• time: add docs about auto-advance and when to use sleep (#​7858)
• util: fix typo in docs (#​7926)

---

Configuration

📅 Schedule: Branch creation - On day 1 of the month, every 3 months ( * * 1 */3 * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.