build(deps): bump the rust-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the rust-dependencies group with 5 updates in the / directory:

Package	From	To
reqwest	0.13.4	0.13.5
hidapi	2.6.6	2.6.7
eframe	0.36.1	0.36.2
tray-icon	0.24.2	0.25.0
serialport	4.9.0	4.10.1

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

• fix(blocking): preserve version and extensions in TryFromhttp::Request by @​wwhsaber in seanmonstar/reqwest#3050
• Remove unnecessary clones by @​FranciscoTGouveia in seanmonstar/reqwest#3052
• Add Referrer and Referrer Policy methods to WASM Request API by @​Billy-Sheppard in seanmonstar/reqwest#3049
• chore(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in seanmonstar/reqwest#3058
• feat: add Error::is_dns() to identify DNS resolution failures by @​JoakoI98 in seanmonstar/reqwest#3057
• Fix blocking client timeout panic by @​V-Mann-Nick in seanmonstar/reqwest#3060
• Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @​FalkWoldmann in seanmonstar/reqwest#3063
• feat: Add ClientBuilder::http1_max_headers by @​smaeda-ks in seanmonstar/reqwest#3065
• feat: expose the negotiated TLS version via TlsInfo by @​dennisameling in seanmonstar/reqwest#3067
• fix(error): detect timeouts wrapped in body decode errors by @​raphaelroshan in seanmonstar/reqwest#3064
• Remove unnecessary clones and a cast by @​FranciscoTGouveia in seanmonstar/reqwest#3071
• chore(deps): upgrade base64 to 0.23 by @​paolobarbolini in seanmonstar/reqwest#3074
• perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @​spellsaif in seanmonstar/reqwest#3085
• fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @​spellsaif in seanmonstar/reqwest#3084
• src/async_impl/request.rs_improved_doc_for_json_fn: by @​Athleteg in seanmonstar/reqwest#3082
• fix: proxy could use wrong credentials if many matched by @​seanmonstar in seanmonstar/reqwest#3098

New Contributors

• @​wwhsaber made their first contribution in seanmonstar/reqwest#3050
• @​FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052
• @​Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049
• @​JoakoI98 made their first contribution in seanmonstar/reqwest#3057
• @​V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060
• @​FalkWoldmann made their first contribution in seanmonstar/reqwest#3063
• @​smaeda-ks made their first contribution in seanmonstar/reqwest#3065
• @​raphaelroshan made their first contribution in seanmonstar/reqwest#3064
• @​spellsaif made their first contribution in seanmonstar/reqwest#3085
• @​Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

• de55373 v0.13.5
• 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
• 9f06fd2 docs: improve description of JSON method (#3082)
• 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
• ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
• 4e9a3c7 chore: add pull request template for human-written content
• 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
• 221abe9 chore: Remove unnecessary clones and a cast (#3071)
• 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
• fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
• Additional commits viewable in compare view

Updates hidapi from 2.6.6 to 2.6.7

Commits

• See full diff in compare view

Updates eframe from 0.36.1 to 0.36.2

Release notes

Sourced from eframe's releases.

0.36.2 - TextEdit::event_filter and bugfixes

egui is an easy-to-use immediate mode GUI for Rust that runs on both web and native.

Try it now: https://www.egui.rs/

egui development is sponsored by Rerun, a startup building an SDK for visualizing streams of multimodal data.

⭐ Added

• Add TextEdit::event_filter #8530 by @​emilk

🔧 Changed

• Fallback window_title_frame to window_frame when unspecified #8400 by @​rustbasic
• Don't revert external changes to a focused DragValue #8403 by @​teddytennant

🐛 Fixed

• Match image file extensions case-insensitively #8430 by @​emilk
• Fix rendering of thin, angled rectangles #8482 by @​emilk
• Fix zero-duration value animations returning the previous value #8469 by @​cuishuang
• Fix panic in hit-test when a widget rect contains a NaN #8479 by @​emilk
• Properly respect min_size in TextEdit #8420 by @​lucasmerlin

Changelog

Sourced from eframe's changelog.

0.36.2 - 2026-09-08

⭐ Added

• Add TextEdit::event_filter #8530 by @​emilk

🔧 Changed

• Fallback window_title_frame to window_frame when unspecified #8400 by @​rustbasic
• Don't revert external changes to a focused DragValue #8403 by @​teddytennant

🐛 Fixed

• Match image file extensions case-insensitively #8430 by @​emilk
• Fix rendering of thin, angled rectangles #8482 by @​emilk
• Fix zero-duration value animations returning the previous value #8469 by @​cuishuang
• Fix panic in hit-test when a widget rect contains a NaN #8479 by @​emilk
• Properly respect min_size in TextEdit #8420 by @​lucasmerlin

Commits

• 49682f8 Release 0.36.2 - Assorted fixes
• 459f98a Add TextEdit::event_filter (#8530)
• d19ed82 Add new render_every_step flag to egui_kittest (#8487)
• a3146e7 Properly respect min_size in TextEdit (#8420)
• d417c2f Simplify and optimize Color32::from_rgba_unmultiplied (#8427)
• c0b9996 Fix panic in hit-test when a widget rect contains a NaN (#8479)
• f63b4d0 Fix zero-duration value animations returning the previous value (#8469)
• 7505692 Fix rendering of thin, angled rectangles (#8482)
• ca7f0f2 eframe: apply ViewportBuilder::with_monitor on the glow backend (#8302)
• 07b042b Fix transparent child viewports on Windows with glow (#8423)
• Additional commits viewable in compare view

Updates tray-icon from 0.24.2 to 0.25.0

Release notes

Sourced from tray-icon's releases.

tray-icon v0.25.0

[0.25.0]

• c648db3 (#201 by @​dfaust) Add a GTK-free ksni StatusNotifierItem backend for Linux and BSD.
• c1990d6 (#361 by @​amrbashir) Separate the Linux/BSD libappindicator and ksni tray backends from muda's GTK backend features, and expose muda features with a muda- prefix.
• 1c23131 (#352 by @​Legend-Master) On macOS, updated objc2-* dependencies to 0.3.2
• 95fc3cc (#366 by @​dylanh724) Add TrayIconBuilder::with_guid / TrayIconAttributes::guid to register the icon with a stable NOTIFYICONDATA.guidItem on Windows, so the user's "always show in taskbar" setting survives the executable being replaced by an update.

Updating crates.io index
   Packaging tray-icon v0.25.0 (/home/runner/work/tray-icon/tray-icon)
warning: ignoring example `egui` as `examples/egui.rs` is not included in the published package
warning: ignoring example `tao` as `examples/tao.rs` is not included in the published package
warning: ignoring example `winit` as `examples/winit.rs` is not included in the published package
    Updating crates.io index
    Packaged 25 files, 261.1KiB (63.0KiB compressed)
   Verifying tray-icon v0.25.0 (/home/runner/work/tray-icon/tray-icon)
 Downloading crates ...
  Downloaded adler2 v2.0.0
  Downloaded option-ext v0.2.0
  Downloaded atk-sys v0.18.2
  Downloaded autocfg v1.4.0
  Downloaded atk v0.18.2
  Downloaded bitflags v2.13.1
  Downloaded crossbeam-channel v0.5.15
  Downloaded heck v0.4.1
  Downloaded glib-sys v0.18.1
  Downloaded gdk-sys v0.18.2
  Downloaded heck v0.5.0
  Downloaded glib-macros v0.18.5
  Downloaded memoffset v0.9.1
  Downloaded gobject-sys v0.18.0
  Downloaded gtk3-macros v0.18.2
  Downloaded indexmap v2.14.2
  Downloaded target-lexicon v0.12.16
  Downloaded libappindicator v0.9.0
  Downloaded libloading v0.7.4
  Downloaded libxdo v0.6.0
  Downloaded proc-macro-error-attr v1.0.4
  Downloaded libappindicator-sys v0.9.0
  Downloaded pango v0.18.3
  Downloaded gio v0.18.4
  Downloaded memchr v2.8.3
  Downloaded pkg-config v0.3.34
  Downloaded slab v0.4.9
  Downloaded dirs-sys v0.5.0
  Downloaded miniz_oxide v0.8.3
</tr></table> 

... (truncated)

Changelog

Sourced from tray-icon's changelog.

[0.25.0]

• c648db3 (#201 by @​dfaust) Add a GTK-free ksni StatusNotifierItem backend for Linux and BSD.
• c1990d6 (#361 by @​amrbashir) Separate the Linux/BSD libappindicator and ksni tray backends from muda's GTK backend features, and expose muda features with a muda- prefix.
• 1c23131 (#352 by @​Legend-Master) On macOS, updated objc2-* dependencies to 0.3.2
• 95fc3cc (#366 by @​dylanh724) Add TrayIconBuilder::with_guid / TrayIconAttributes::guid to register the icon with a stable NOTIFYICONDATA.guidItem on Windows, so the user's "always show in taskbar" setting survives the executable being replaced by an update.

Commits

• 40247bf chore: pin muda to 0.20
• 7e1bc7e apply version updates (#353)
• 95fc3cc feat(windows): add stable GUID identity for tray icons (NIF_GUID / guidItem) ...
• 0114db5 refactor: use ksni as fallback when both backends are enabled (#364)
• b9fcea1 refactor: make ksni and appindicator exclusivity error to just a warning with...
• c1990d6 refactor: prefix forwarded muda feature flags with muda- prefix (#361)
• c648db3 feat: add ksni backend (#201)
• 77c96c4 ci: add explicit workflow permissions (#359)
• 1c23131 chore(deps): update objc2-* crates to 0.3.2 (#352)
• See full diff in compare view

Updates serialport from 4.9.0 to 4.10.1

Changelog

Sourced from serialport's changelog.

[4.10.1] - 2026-09-08

Fixed

• Fix builds for Linux/PowerPC which got broken with [4.10.0]. #375 #376

[4.10.0] - 2026-08-24

Added

• Provide USB port location in terms of bus and port chain via UsbPortInfo and Location. #222 #350 #360
• Add new target illumos. #347

Changed

• Return error instead of panicking when reading inconsistent input/output baudrates on some POSIX targets. #368

Fixed

• Accept dashes in serial number parsing on Windows. #351 #370

Commits

• 41496a9 Release 4.10.1
• eb51adc Bump CI checkout to v7
• 3607b1b Add changelog for fixing builds for Linux/PowerPC
• ac4aa90 Add CI builds for Linux/PowerPC 64 bit
• 3a924c8 Fix compilation on PPC
• 53ac54b Clean up spacing around Illumos MSRV CI check
• 036562b Enable semver checks for Illumos in CI
• 44d0809 Bump version after release
• cdbe8ed Release 4.10
• 2013f09 Add changelog for dashes in Windows serial numbers
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.