Bump the cargo group across 1 directory with 6 updates

[dependabot]

Bumps the cargo group with 6 updates in the / directory:

Package	From	To
vello	0.9.0	0.10.0
parley	0.11.0	0.11.1
log	0.4.33	0.4.34
quick-xml	0.41.0	0.42.0
base64	0.23.0	0.23.1
thiserror	2.0.19	2.0.20

Updates vello from 0.9.0 to 0.10.0

Release notes

Sourced from vello's releases.

v0.10.0

Crates.io | Docs

This release has an MSRV of 1.88.

Added

• Support for gradient interpolation in the unpremultiplied alpha space. (#1268 by @​sagudev)

Changed

• Updated Skrifa to v0.44.0. (#1774 by @​LaurenzV)

Fixed

• Rendering scenes whose binning requires more than 256 bins. (#1700 by @​b0nes164)
• Image textures are now explicitly destroyed when freed, releasing their GPU resources promptly. (#1777 by @​timon-schelling)

---

This release also coincides with the release of v0.10.0 of Vello Shaders:

Crates.io | Docs

and Vello Encoding:

Crates.io | Docs

New Contributors

• @​dipeshbabu made their first contribution in linebender/vello#1666
• @​jesses-canva made their first contribution in linebender/vello#1682
• @​yezhizhen made their first contribution in linebender/vello#1732
• @​tronical made their first contribution in linebender/vello#1760
• @​timon-schelling made their first contribution in linebender/vello#1777
• @​Soundcreates made their first contribution in linebender/vello#1807

Full Changelog: linebender/vello@v0.9.0...v0.10.0

Changelog

Sourced from vello's changelog.

[0.10.0][] - 2026-08-14

This release has an [MSRV][] of 1.88.

Added

• Support for gradient interpolation in the unpremultiplied alpha space. (#1268[] by [@​sagudev][])

Changed

• Updated Skrifa to v0.44.0. (#1774[] by [@​LaurenzV][])

Fixed

• Rendering scenes whose binning requires more than 256 bins. (#1700[] by [@​b0nes164][])
• Image textures are now explicitly destroyed when freed, releasing their GPU resources promptly. (#1777[] by [@​timon-schelling][])

Commits

• fc0badd Bump vello to v0.10.0 (#1828)
• ea474c2 Don't enable WGPU in std (#1822)
• dbb3992 vello_hybrid: Prohibit dynamic indexing (#1821)
• 1a661c3 vello_hybrid: Read pixel pack buffer data into JS array first (#1814)
• 522c4ed refactor: split WESL shaders into helper modules (#1818)
• 08576de vello_hybrid: Support extend modes for external texture rects (#1813)
• 3e6bb96 vello_hybrid: Add support for setting a transparency hint for external textur...
• 016342d Run tests with debug assertions enabled (#1748)
• 5649225 vello_hybrid: Add more descriptive message if WebGl2 context creation fails (...
• 0d25341 refactor: move hybrid depth texture ownership to callers (#1810)
• Additional commits viewable in compare view

Updates parley from 0.11.0 to 0.11.1

Release notes

Sourced from parley's releases.

v0.11.1

Name	Crates.io	Docs
parley	Crates.io	Docs
parley_data	Crates.io	Docs
fontique	Crates.io	Docs

This release has an MSRV of 1.88.

Changed

Parley

• Upgrade to read-fonts 0.41, skrifa 0.44, harfrust 0.12 (#750 by @​nicoburns)

Full Changelog: linebender/parley@v0.11.0...v0.11.1

Changelog

Sourced from parley's changelog.

[0.11.1] - 2026-08-16

This release has an [MSRV] of 1.88.

Changed

Parley

• Upgrade to read-fonts 0.41, skrifa 0.44, harfrust 0.12 (by [@​nicoburns][])

Commits

• eea3503 Parley v0.11.1 release (upgrade to read-fonts 0.41, skrifa 0.44, harfrust 0.1...
• See full diff in compare view

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

• doc: Add context-logger utility to README by @​alekseysidorov in rust-lang/log#735
• Add alloc support for boxed loggers by @​malezjaa in rust-lang/log#737

New Contributors

• @​alekseysidorov made their first contribution in rust-lang/log#735
• @​malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

• doc: Add context-logger utility to README by @​alekseysidorov in rust-lang/log#735
• Add alloc support for boxed loggers by @​malezjaa in rust-lang/log#737

New Contributors

• @​alekseysidorov made their first contribution in rust-lang/log#735
• @​malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

• 8034743 Merge pull request #738 from rust-lang/cargo/0.4.34
• 7d1e24e prepare for 0.4.34 release
• 3b939b6 Merge pull request #737 from malezjaa/master
• b88266c Add alloc support for boxed loggers
• 037d7a5 doc: Add context-logger utility to README
• See full diff in compare view

Updates quick-xml from 0.41.0 to 0.42.0

Release notes

Sourced from quick-xml's releases.

v0.42.0 - String Ergonomics

What's Changed

0.42.0 -- 2026-08-22

This is a large release. The primary change is an ergonomic improvement across the entire API - quick_xml now makes use of &str and String types where possible instead of &[u8] and Vec<u8>. This requires significant refactoring of downstream code, but should result in a net simplification as well as potential performance improvements, and opens up additional opportunities in future releases.

The MSRV has been raised to 1.86. We now use Rust 2024 Edition.

Breaking Changes

• #963: Reader now validates that input is valid UTF-8 when constructing events. Non-UTF-8 input passed to Reader::from_reader() without DecodingReader will now produce Error::Encoding instead of silently passing through invalid bytes. Use DecodingReader to transcode non-UTF-8 sources.
• #963: Name types (QName, LocalName, Prefix, Namespace, PrefixDeclaration) now wrap &str instead of &[u8]. into_inner() returns &str, and AsRef<str> is implemented (AsRef<[u8]> has been removed). ResolveResult::Unknown now contains String instead of Vec<u8>, and NamespaceError variants contain String instead of Vec<u8>.
• #963: Removed the decoder: Decoder field from event types (BytesStart, BytesText, BytesCData, BytesRef) and Attributes. The decoder() method is no longer available on these types. Decode methods on events now always assume UTF-8 input. Error::missed_end() no longer takes a Decoder parameter.
• #963: Event types (BytesStart, BytesEnd, BytesText, BytesCData, BytesPI, BytesRef) now store Cow<str> internally instead of Cow<[u8]>. into_inner() on BytesText, BytesCData, BytesPI, and BytesRef now returns Cow<str>. BytesStart::set_name() now takes &str instead of &[u8].
• #963: All event types and the Event enum now implement Deref<Target = str> instead of Deref<Target = [u8]>. Explicit AsRef<str> impls are provided to avoid ambiguity.
• #963: Removed decode() methods from BytesText, BytesCData, and BytesRef. Content is already available as &str via Deref. The xml10_content(), xml11_content(), xml_content(), and html_content() methods now return Cow<str> directly instead of Result<Cow<str>, EncodingError>.
• #963: Attribute::value is now Cow<'a, str> instead of Cow<'a, [u8]>. The From<(&[u8], &[u8])> impl has been removed.
• #963: BytesDecl::version(), encoding(), and standalone() now return Cow<'_, str> instead of Cow<'_, [u8]>.
• #963: Removed Reader::decoder() method. Use Reader::encoding() instead (available with the encoding feature). Removed decoder() from the XmlRead serde trait. Removed all methods from Decoder (the struct is kept only for backward compatibility with deprecated Attribute methods).
• #980: NamespaceError::TooManyDeclarations has been renamed to TooManyBindings, and NamespaceResolver::set_max_declarations_per_element has been renamed to NamespaceResolver::set_max_namespace_bindings, and the semantic behavior has

... (truncated)

Changelog

Sourced from quick-xml's changelog.

0.42.0 -- 2026-08-22

This is a large release. The primary change is an ergonomic improvement across the entire API - quick_xml now makes use of &str and String types where possible instead of &[u8] and Vec<u8>. This requires significant refactoring of downstream code, but should result in a net simplification as well as potential performance improvements, and opens up additional opportunities in future releases.

The MSRV has been raised to 1.86. We now use Rust 2024 Edition.

Breaking Changes

• #963: Reader now validates that input is valid UTF-8 when constructing events. Non-UTF-8 input passed to Reader::from_reader() without DecodingReader will now produce Error::Encoding instead of silently passing through invalid bytes. Use DecodingReader to transcode non-UTF-8 sources.
• #963: Name types (QName, LocalName, Prefix, Namespace, PrefixDeclaration) now wrap &str instead of &[u8]. into_inner() returns &str, and AsRef<str> is implemented (AsRef<[u8]> has been removed). ResolveResult::Unknown now contains String instead of Vec<u8>, and NamespaceError variants contain String instead of Vec<u8>.
• #963: Removed the decoder: Decoder field from event types (BytesStart, BytesText, BytesCData, BytesRef) and Attributes. The decoder() method is no longer available on these types. Decode methods on events now always assume UTF-8 input. Error::missed_end() no longer takes a Decoder parameter.
• #963: Event types (BytesStart, BytesEnd, BytesText, BytesCData, BytesPI, BytesRef) now store Cow<str> internally instead of Cow<[u8]>. into_inner() on BytesText, BytesCData, BytesPI, and BytesRef now returns Cow<str>. BytesStart::set_name() now takes &str instead of &[u8].
• #963: All event types and the Event enum now implement Deref<Target = str> instead of Deref<Target = [u8]>. Explicit AsRef<str> impls are provided to avoid ambiguity.
• #963: Removed decode() methods from BytesText, BytesCData, and BytesRef. Content is already available as &str via Deref. The xml10_content(), xml11_content(), xml_content(), and html_content() methods now return Cow<str> directly instead of Result<Cow<str>, EncodingError>.
• #963: Attribute::value is now Cow<'a, str> instead of Cow<'a, [u8]>. The From<(&[u8], &[u8])> impl has been removed.
• #963: BytesDecl::version(), encoding(), and standalone() now return Cow<'_, str> instead of Cow<'_, [u8]>.
• #963: Removed Reader::decoder() method. Use Reader::encoding() instead (available with the encoding feature). Removed decoder() from the XmlRead serde trait. Removed all methods from Decoder (the struct is kept only for backward compatibility with deprecated Attribute methods).
• #980: NamespaceError::TooManyDeclarations has been renamed to TooManyBindings, and NamespaceResolver::set_max_declarations_per_element has been renamed to NamespaceResolver::set_max_namespace_bindings, and the semantic behavior has changed slightly. The default maximum has also been reduced from 256 to 128.
• #1000: DeError::UnexpectedStart renamed to DeError::MixedContent. That error is emitted when you try to deserialize boolean, number or string field from something like <field>text <tag/> another text</field>.

... (truncated)

Commits

• 36a2c52 Release 0.42.0
• a4b9fca cargo fmt
• 22c99f5 Update Rust Edition to 2024
• 83351fb Add rename = $value to a table in serde example comments
• f4db767 Clarify documentation about lifetimes of the events and attributes
• 9f4c66a Fix formatting for correct assertions in read_nodes_serde
• 6950ef7 Add GHA job to execute examples
• dbf9e3f Show XML Decl tracking in examples
• aab9452 Add writing a Decl event to the writer example
• 1573e05 Avoid trim_text(true) in the in-depth examples
• Additional commits viewable in compare view

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

• Make the tests build again on non-SIMD architectures

Commits

• 069bf70 v0.23.1
• 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
• 7cffce6 Fix testing on architectures without unsafe SIMD support
• e34f9a0 Merge pull request #308 from atouchet/com
• e9240c9 Remove outdated comment
• See full diff in compare view

Updates thiserror from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

• Suppress redundant_field_names clippy lint in generated code (#454)

Commits

• b1d5db5 Release 2.0.20
• c4c3ebd Merge pull request #454 from dtolnay/clippy
• 2266152 Suppress redundant_field_names clippy lint
• 2901cfd Raise minimum tested compiler to rust 1.88
• aa9d91f Update ui tests for version 2.0.19
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.