build(deps): bump the cargo group across 1 directory with 5 updates

[dependabot]

Bumps the cargo group with 5 updates in the / directory:

Package	From	To
reqwest	0.13.2	0.13.3
tokio	1.52.0	1.52.1
napi	3.8.4	3.8.6
napi-derive	3.5.3	3.5.5
zip	8.5.1	8.6.0

Updates reqwest from 0.13.2 to 0.13.3

Release notes

Sourced from reqwest's releases.

v0.13.3

tl;dr

• Fix CertificateRevocationList parsing of PEM values.
• Fix logging in resolver to only show host, not full URL.
• Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
• Fix HTTP/3 to handle STOP_SENDING as not an error.
• Fix HTTP/3 pool to remove timed out QUIC connections.
• Fix HTTP/3 connection establishment picking IPv4 and IPv6.
• Upgrade rustls-platform-verifier.
• (wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

• Update docs.rs Features by @​JamesWiresmith in seanmonstar/reqwest#2961
• fix: fallback to hickory_resolver's default config if reading /etc/resolv.conf fails by @​monosans in seanmonstar/reqwest#2797
• fix: remove timeout con by @​cuiweixie in seanmonstar/reqwest#2967
• http3: handle stop_sending without error by @​anuraaga in seanmonstar/reqwest#2978
• resolve: debug log to change only host by @​lms0806 in seanmonstar/reqwest#2992
• Edit reference link by @​lms0806 in seanmonstar/reqwest#2996
• docs: more accurate about default HTTP2 window sizes by @​seanmonstar in seanmonstar/reqwest#3007
• [HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 by @​lyuzichong in seanmonstar/reqwest#3006
• Upgrade rustls-platform-verifier by @​jplatte in seanmonstar/reqwest#3010
• use wasm-bindgen ecosystem only for wasm32-unknown-* target by @​Ludea in seanmonstar/reqwest#3000
• fix rustls crl pem parsing by @​Threated in seanmonstar/reqwest#3013
• docs(retry): include ReqRep in docsrs by @​seanmonstar in seanmonstar/reqwest#3020

New Contributors

• @​JamesWiresmith made their first contribution in seanmonstar/reqwest#2961
• @​monosans made their first contribution in seanmonstar/reqwest#2797
• @​cuiweixie made their first contribution in seanmonstar/reqwest#2967
• @​anuraaga made their first contribution in seanmonstar/reqwest#2978
• @​lms0806 made their first contribution in seanmonstar/reqwest#2992
• @​lyuzichong made their first contribution in seanmonstar/reqwest#3006
• @​Ludea made their first contribution in seanmonstar/reqwest#3000

Full Changelog: seanmonstar/reqwest@v0.13.2...v0.13.3

Changelog

Sourced from reqwest's changelog.

v0.13.3

• Fix CertificateRevocationList parsing of PEM values.
• Fix logging in resolver to only show host, not full URL.
• Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
• Fix HTTP/3 to handle STOP_SENDING as not an error.
• Fix HTTP/3 pool to remove timed out QUIC connections.
• Fix HTTP/3 connection establishment picking IPv4 and IPv6.
• Upgrade rustls-platform-verifier.
• (wasm) Only use wasm-bindgen on unknown-* targets.

Commits

• a9a88c4 v0.13.3
• f3f6d9d docs(retry): include ReqRep in docsrs (#3020)
• 5f9c231 fix rustls CRL PEM parsing (#3013)
• 11d835d use wasm-bindgen ecosystem only for wasm32-unknown-* target (#3000)
• 1f72916 Upgrade rustls-platform-verifier (#3010)
• 5d5bf35 [HTTP/3] Optimize IPv6 fallback and enforce HTTPS scheme #2911 (#3006)
• 93dc1b2 docs: more accurate about default HTTP2 window sizes (#3007)
• c5e50f0 docs: update outdated link in comments
• b25611f resolve: debug log to change only host (#2992)
• ca1f479 http3: handle stop_sending without error (#2978)
• Additional commits viewable in compare view

Updates tokio from 1.52.0 to 1.52.1

Release notes

Sourced from tokio's releases.

Tokio v1.52.1

1.52.1 (April 16th, 2026)

Fixed

• runtime: revert #7757 to fix [a regression]#8056 that causes spawn_blocking to hang (#8057)

#7757: tokio-rs/tokio#7757 #8056: tokio-rs/tokio#8056 #8057: tokio-rs/tokio#8057

Commits

• 905c146 chore: prepare to release v1.52.1 (#8059)
• 56aaa43 rt: revert #7757 to fix regression in spawn_blocking (#8057)
• 57ff47a ci: update trybuild to expect output from rustc 1.95.0 (#8058)
• 812de3e ci: bump taiki-e/cache-cargo-install-action from 1 to 3 (#8053)
• ba82e73 ci: use Dependabot to keep github actions up to date (#8052)
• 2e85f9d ci: replace cirrus-ci with freebsd-vm (#8041)
• a7e1cd8 ci: update GitHub Actions workflows to use latest tool versions (#8047)
• See full diff in compare view

Updates napi from 3.8.4 to 3.8.6

Release notes

Sourced from napi's releases.

napi-v3.8.6

Fixed

• (deps) update rust crate ctor to 0.11.0 (#3270)
• (napi) Convert #[ctor] calls to declarative form to remove all features (#3257)

Other

• (napi) skip duplicate validation (#3268)
• (napi) clarify unsafe function invariants (#3267)

napi-v3.8.5

Fixed

• (napi) preserve generator class methods (#3231)
• (deps) update rust crate ctor to v0.10.0 (#3224)
• (deps) disable ctor priority feature (#3209)
• (deps) update rust crate ctor to v0.9.1 (#3204)
• (napi) handle ThreadsafeFunction callback errors gracefully during shutdown (#3188)
• (napi) populate Error::cause from ThreadsafeFunction callee-handled callbacks (#3162)
• correct typo in Either error message ("non" → "none") (#3183)

Commits

• 5ed87dd chore: release (#3259)
• 84105d9 fix(deps): update rust crate ctor to 0.11.0 (#3270)
• 20e9072 chore(deps): update dependency ava to v8 (#3269)
• 29215a9 build(deps): bump postcss from 8.5.8 to 8.5.12 (#3266)
• ab8a86b perf(napi): skip duplicate validation (#3268)
• 837d122 docs(napi): clarify unsafe function invariants (#3267)
• 9c6f720 chore(deps): update dependency oxc-parser to ^0.128.0 (#3265)
• 1ca6522 fix(napi-derive): only FnArgs unpacks tuple to variadic params (#3264)
• f3466fa fix(deps): update dependency dockerode to v5 (#3260)
• ba6597b fix(napi): Convert #[ctor] calls to declarative form to remove all features (...
• Additional commits viewable in compare view

Updates napi-derive from 3.5.3 to 3.5.5

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.5.5

Fixed

• (deps) update rust crate ctor to 0.11.0 (#3270)
• (napi) Convert #[ctor] calls to declarative form to remove all features (#3257)

napi-derive-v3.5.4

Fixed

• (deps) update rust crate ctor to v0.10.0 (#3224)
• (deps) disable ctor priority feature (#3209)
• (deps) update rust crate ctor to v0.9.1 (#3204)

Commits

• 5ed87dd chore: release (#3259)
• 84105d9 fix(deps): update rust crate ctor to 0.11.0 (#3270)
• 20e9072 chore(deps): update dependency ava to v8 (#3269)
• 29215a9 build(deps): bump postcss from 8.5.8 to 8.5.12 (#3266)
• ab8a86b perf(napi): skip duplicate validation (#3268)
• 837d122 docs(napi): clarify unsafe function invariants (#3267)
• 9c6f720 chore(deps): update dependency oxc-parser to ^0.128.0 (#3265)
• 1ca6522 fix(napi-derive): only FnArgs unpacks tuple to variadic params (#3264)
• f3466fa fix(deps): update dependency dockerode to v5 (#3260)
• ba6597b fix(napi): Convert #[ctor] calls to declarative form to remove all features (...
• Additional commits viewable in compare view

Updates zip from 8.5.1 to 8.6.0

Release notes

Sourced from zip's releases.

v8.6.0

🚀 Features

• add compression not supported as enum error (#774)

🐛 Bug Fixes

• allow for [u8] as filename (#775)

🚜 Refactor

• mark ZipFlags as non-exhaustive and add test for HasZipMetadata (#777)
• use and simplify is_dir (#776)

Changelog

Sourced from zip's changelog.

8.6.0 - 2026-04-25

🚀 Features

• add compression not supported as enum error (#774)

🐛 Bug Fixes

• allow for [u8] as filename (#775)

🚜 Refactor

• mark ZipFlags as non-exhaustive and add test for HasZipMetadata (#777)
• use and simplify is_dir (#776)

Commits

• 771dfc5 chore: release v8.6.0 (#781)
• 8e480cc chore(deps): update sha1 requirement from 0.10 to 0.11 (#767)
• 2513bbe chore(deps): update aes requirement from 0.8 to 0.9 (#787)
• 957e240 ci(deps): bump actions/cache from 5.0.4 to 5.0.5 (#786)
• 0329d9d fix: allow for [u8] as filename (#775)
• ddcf854 ci(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#788)
• 42323a8 ci(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (#785)
• 901014a ci(deps): bump crate-ci/typos from 1.45.0 to 1.45.1 (#784)
• 07702d4 feat: add compression not supported as enum error (#774)
• 2d0c46b ci(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#783)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.60%. Comparing base (e9ef191) to head (776f093).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #314   +/-   ##
=======================================
  Coverage   92.60%   92.60%           
=======================================
  Files          26       26           
  Lines        4339     4339           
=======================================
  Hits         4018     4018           
  Misses        321      321           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.