deps(deps): bump lru from 0.12.5 to 0.18.1

[dependabot]

Bumps lru from 0.12.5 to 0.18.1.

Changelog

Sourced from lru's changelog.

v0.18.1 - 2026-07-09

• Add find_and_promote method.

v0.18.0 - 2026-04-27

• Fix unconstrained lifetime in get_or_insert_mut_ref.

v0.17.0 - 2026-04-14

• Upgrade hashbrown to 0.17.0 and update MSRV to 1.85.0.

v0.16.4 - 2026-04-13

• Add get_or_insert_with_key and variants.

v0.16.3 - 2026-01-07

• Fix Stacked Borrows violation in IterMut.

v0.16.2 - 2025-10-14

• Upgrade hashbrown dependency to 0.16.0.

v0.16.1 - 2025-09-08

• Fix Clone for unbounded cache.

v0.16.0 - 2025-07-02

• Implement Clone for caches with custom hashers.

v0.15.0 - 2025-06-26

• Return bool from promote and demote to indicate whether key was found.

v0.14.0 - 2025-04-12

• Use NonZeroUsize::MAX instead of unwrap(), and update MSRV to 1.70.0.

v0.13.0 - 2025-01-27

• Add peek_mru and pop_mru methods, upgrade dependency on hashbrown to 0.15.2, and update MSRV to 1.65.0.

Commits

• c6620d1 Merge pull request #237 from jeromefroe/jerome/prepare-0-18-1-release
• da3c0fc Prepare 0.18.1 release
• 1166263 Merge pull request #236 from pixmaip/find-and-promote
• 2daba12 Apply suggestions from code review
• 2ea00dc feat: add find_and_promote API
• dac07e3 Merge pull request #234 from jeromefroe/jerome/prepare-0-18-0-release
• 0335315 Prepare 0.18.0 release
• e40bbdc Merge pull request #233 from paolobarbolini/get_or_insert_mut_ref-unconstrain...
• a615a5b Fix unconstrained lifetime in LruCache::get_or_insert_mut_ref
• 13321a9 Merge pull request #232 from jeromefroe/jerome/prepare-0-17-0-release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[JerryIdoko]

resolve conflicts @app/dependabot

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.