chore: Bump the cargo-patch-and-minor group with 3 updates

[dependabot]

Bumps the cargo-patch-and-minor group with 3 updates: lofty, rand and thiserror.

Updates lofty from 0.25.2 to 0.25.4

Release notes

Sourced from lofty's releases.

0.25.4

What's Changed

• ID3v2: Correct growing WAV and AIFF stream sizes by @​floydnant in Serial-ATA/lofty-rs#725
• ID3v2: Reduce allocations for prepended tag writes by @​Serial-ATA in Serial-ATA/lofty-rs#726

New Contributors

• @​floydnant made their first contribution in Serial-ATA/lofty-rs#725

Full Changelog: https://github.com/Serial-ATA/lofty-rs/blob/main/CHANGELOG.md#0254---2026-09-20

0.25.3

What's Changed

• ID3v2: Fix handling of mid-stream fake tags by @​Serial-ATA in Serial-ATA/lofty-rs#722

Full Changelog: https://github.com/Serial-ATA/lofty-rs/blob/main/CHANGELOG.md#0253---2026-09-19

Changelog

Sourced from lofty's changelog.

[0.25.4] - 2026-09-20

Added

• FileLike: FileLike::splice() to replace a range of a file (PR)

Changed

• ID3v2: Prepended tag writes will no longer read the entire file into memory (PR)
  • Prepended writes will now allocate a single 64KiB buffer to work out of.

Fixed

• ID3v2: Fixed encoding of stream lengths when growing tags in IFF containers (issue) (PR)

[0.25.3] - 2026-09-19

Fixed

• ID3v2: Fixed mid-stream fake tags not seeking the writer back to the correct position (issue) (PR)

Commits

• 618731c 0.25.4
• bfa3c5a ID3v2: Reduce allocations for prepended tag writes
• 4bbdb0f Tests: Cover resizes in all supported formats
• 6576b5a ID3v2: Correct growing WAV and AIFF stream sizes
• 423ff71 0.25.3
• 67b9bfc ID3v2: Fix handling of mid-stream fake tags
• See full diff in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

• Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
• Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
• Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

• Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

• 9e7d328 Prepare rand 0.10.3 (#1840)
• f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
• ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
• c994eb1 docs: fix angle unit in quick start example (#1839)
• 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
• 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
• bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
• 521fab6 Stop pinning dependencies (#1820)
• 3f7c433 Stop pinning dependencies
• cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
• Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: InstaZDLL/waveflow-server/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 778b34ff-58eb-465f-bc0f-6f0024f13800

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}