[dependabot]

Bumps the cargo-minor-patch group with 3 updates: jiff, ureq and zip.

Updates jiff from 0.2.38 to 0.2.39

Changelog

Sourced from jiff's changelog.

0.2.39 (2026-11-02)

This release gathers a smattering of performance improvements and bug fixes.

Enhancements:

• #646: Added optional serde support to jiff-sqlx.
• #659: Update the Windows time zone names.
• #665: Avoid allocating IANA name during a Zoned::strftime call.
• #666: Avoid a second offset lookup when adding calendar units.

Bug fixes:

• #645: Fix Timestamp::from_nanosecond panic on out-of-range input.
• #649: Fix optional deserializers dropping null under #[serde(flatten)].
• #652: Tweak "lossless" wording for round-tripping Zoned values.
• #654: Fixes a panic when printing some very large durations.
• #660: Fixes a bug where parsing some very large spans gave an incorrect result.
• #668: Fixes a panic in Span::total for a zero span with a calendar unit.

Commits

• 5d0c3cf ci: avoid cargo publish --workspace
• 354aa65 ci: revert to previous state
• c17f9b4 ci: debug, part 1
• 3a7d664 release: 0.2.39
• 902feab github: add trusted publishing workflow
• 88ec008 test: make some small tweaks to the test scripts
• 76458be zoned: be more precise about "lossless" claim
• 5a76d82 sqlx: added optional Serde support
• 9ea4c2b zic: correct field name in zic AT parse error
• 9cfd78f core: fix Timestamp::from_nanosecond panic on out-of-range input
• Additional commits viewable in compare view

Updates ureq from 3.5.0 to 3.5.1

Changelog

Sourced from ureq's changelog.

3.5.1

• Bump ureq-proto to 0.7.1 (fixes to connection reuse and transfer encoding) #1224
• Send only cookie names and values in request Cookie headers #1222
• Preserve readable responses after macOS rejects timeout changes on closed sockets #1220

Commits

• 33ca9d3 3.5.1
• d1b194c Bump ureq-proto to 0.7.1
• 81d1b40 Bump ureq-proto to 0.7.0
• 0cbee9a docs: clarify body read limit defaults (#1223)
• f92baae Send only cookie names and values in the Cookie header
• f60896d Preserve readable responses after macOS timeout setter failures
• See full diff in compare view

Updates zip from 9.2.0 to 9.4.1

Release notes

Sourced from zip's releases.

v9.4.1

🐛 Bug Fixes

• Add a OwnedZipFileEntry for #177 (#1270)

🚜 Refactor

• Use boxed slices instead of Vec when growability isn't needed (#1271)

v9.4.0

🚀 Features

• Implement ZipIterable::files_with_reader (#1267)

v9.3.0

🚀 Features

• (write) implement TryFrom for PreparedZipFile (#1258)

v9.2.3

🐛 Bug Fixes

• (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

• Replace std:: with core:: where possible (#1253)

v9.2.2

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.1

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

Changelog

Sourced from zip's changelog.

9.4.1 - 2026-11-06

🐛 Bug Fixes

• Add a OwnedZipFileEntry for #177 (#1270)

🚜 Refactor

• Use boxed slices instead of Vec when growability isn't needed (#1271)

9.4.0 - 2026-11-05

🚀 Features

• Implement ZipIterable::files_with_reader (#1267)

9.3.0 - 2026-11-03

🚀 Features

• (write) implement TryFrom for PreparedZipFile (#1258)

9.2.3 - 2026-11-03

🐛 Bug Fixes

• (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

• Replace std:: with core:: where possible (#1253)

9.2.2 - 2026-11-01

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

Commits

• 96e8cce chore: release v9.4.1 (#1272)
• f1b82f2 docs(example): Fix bug in memory-tracking example where reallocations were co...
• 2308d6d refactor: Use boxed slices instead of Vec when growability isn't needed (#1271)
• b3ad5df fix: Add a OwnedZipFileEntry for #177 (#1270)
• 196b805 chore(deps): update lzma-rust2 from 0.24 to 0.25 (#1268)
• f347dd4 chore: release v9.4.0 (#1269)
• e9b7dcd feat: Implement ZipIterable::files_with_reader (#1267)
• 47765a9 docs(security): Clarify that some "vulnerabilities" are necessary for legitim...
• 53cfe46 ci(deps): bump useblacksmith/checkout from 1.8.1 to 1.8.2 (#1260)
• b66f6b1 ci(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#1262)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions