deps: bump the deps group across 1 directory with 8 updates

[dependabot]

Bumps the deps group with 7 updates in the / directory:

Package	From	To
facet	0.33.0	0.42.0
blake3	1.8.2	1.8.3
clap_complete	4.5.64	4.5.65
indexmap	2.12.1	2.13.0
turso	0.4.1	0.4.2
libc	0.2.179	0.2.180
signal-hook	0.3.18	0.4.1

Updates facet from 0.33.0 to 0.42.0

Release notes

Sourced from facet's releases.

facet-args-v0.42.0

Added

• implement Facet for core::convert::Infallible

Fixed

• mark function pointers as invariant to prevent lifetime UB
• (soundness) make OxRef::new and OxMut::new unsafe

Other

• (bytestring) simplify ByteString impl with vtable_direct! macro
• Fix #1629: Preserve custom HTML elements during parse/serialize roundtrip
• Add facet-validate crate for field validation during deserialization
• Add rust_decimal::Decimal support + fix XML type inference
• Add rust_decimal::Decimal support to facet-core
• Add Facet implementation for smol_str::SmolStr
• Set up release-plz with synchronized versions and trusted publishing
• Add facet_no_doc cfg for global doc string stripping
• Fix facet-pretty to respect skip_serializing_if and add HTML roundtrip tests
• Add html::text attribute for enum variants and comprehensive roundtrip test
• Fix inconsistent Shape hash (issue #1574)
• Fix soundness issue: Attr can contain non-Sync data
• Require 'static for Opaque Facet impl
• (facet-core) simplify Ox API by requiring T: Facet
• fix broken intra-doc link to Peek in facet-core
• Improve AGENTS.md, closes #1551

facet-assert-v0.42.0

Added

• implement Facet for core::convert::Infallible

Fixed

• mark function pointers as invariant to prevent lifetime UB
• (soundness) make OxRef::new and OxMut::new unsafe

Other

• (bytestring) simplify ByteString impl with vtable_direct! macro
• Fix #1629: Preserve custom HTML elements during parse/serialize roundtrip
• Add facet-validate crate for field validation during deserialization
• Add rust_decimal::Decimal support + fix XML type inference
• Add rust_decimal::Decimal support to facet-core
• Add Facet implementation for smol_str::SmolStr
• Set up release-plz with synchronized versions and trusted publishing
• Add facet_no_doc cfg for global doc string stripping
• Fix facet-pretty to respect skip_serializing_if and add HTML roundtrip tests

... (truncated)

Changelog

Sourced from facet's changelog.

0.42.0 - 2026-01-06

Added

• implement Facet for core::convert::Infallible

Fixed

• mark function pointers as invariant to prevent lifetime UB
• (soundness) make OxRef::new and OxMut::new unsafe

Other

• (bytestring) simplify ByteString impl with vtable_direct! macro
• Fix #1629: Preserve custom HTML elements during parse/serialize roundtrip
• Add facet-validate crate for field validation during deserialization
• Add rust_decimal::Decimal support + fix XML type inference
• Add rust_decimal::Decimal support to facet-core
• Add Facet implementation for smol_str::SmolStr
• Set up release-plz with synchronized versions and trusted publishing
• Add facet_no_doc cfg for global doc string stripping
• Fix facet-pretty to respect skip_serializing_if and add HTML roundtrip tests
• Add html::text attribute for enum variants and comprehensive roundtrip test
• Fix inconsistent Shape hash (issue #1574)
• Fix soundness issue: Attr can contain non-Sync data
• Require 'static for Opaque Facet impl
• (facet-core) simplify Ox API by requiring T: Facet
• fix broken intra-doc link to Peek in facet-core
• Improve AGENTS.md, closes #1551

Commits

• 243647a Fix workspace deps for release-plz
• 1b91217 chore: release v0.42.0
• 1f019f7 Improve trusted publishing tooling
• 3a4d7a1 fix: mark function pointers as invariant to prevent lifetime UB
• 23085e3 Fix nested flattened field deserialization (#1656)
• 671f3df Add test for issue #1656
• 7a45513 fix: make Peek constructors unsafe to prevent untrusted vtable UB
• 1861963 fix: update compile test expected error message
• 34492fc fix: make Partial::alloc_shape() unsafe to prevent UB from untrusted shapes
• b2b62c9 feat: implement Facet for core::convert::Infallible
• Additional commits viewable in compare view

Updates blake3 from 1.8.2 to 1.8.3

Release notes

Sourced from blake3's releases.

1.8.3

version 1.8.3

Changes since 1.8.2:

• Add Hash::as_slice.
• Update to the 2024 Edition and bump the MSRV to 1.85.
• Fix a set of Miri failures in the intrinsics implementations. We were computing (though not dereferencing) an out-of-bounds pointer using add rather than wrapping_add. I'm not aware of any observable consequences of this bug. See BLAKE3-team/BLAKE3#507.
• CPU feature detection on x86/x86-64 no longer requires the std Cargo feature in the blake3 crate.
• Build fixes in the C implementation for macOS and Cygwin, and various improvements to the CMake build.

Commits

• 8b829b6 version 1.8.3
• 7d6e242 update to the 2024 edition
• 0b64ce2 bump constant_time_eq version to 0.4.2
• 890050c Fix Cygwin build by skipping blake3_xof_many_avx512
• 308b95d Add Hash::as_slice() for convenient serialization to bytes
• eae9bf3 Revert "pin generic-array to the un-deprecated version"
• 185f1db pin generic-array to the un-deprecated version
• c54ee7e add a warning to the --check doc
• 2f341f1 update ccache reference to official release notes URL
• 8bec2fb chore: make some documents clearer (#528)
• Additional commits viewable in compare view

Updates clap_complete from 4.5.64 to 4.5.65

Commits

• a99bd42 chore: Release
• 485d781 docs: Update changelog
• 0acc8c8 Merge pull request #6209 from saiarcot895/fix-optional-value-option-zsh
• 6c2cff6 fix: Allow optional value arguments for Zsh shell completion
• 58723e5 test: Generate completions with multi/optional value options
• 4ecbf54 chore: Release
• f04062b docs: Update changelog
• d68caa8 Merge pull request #6205 from maheshbansod/default-val-no-desc
• a062eaf fix: Default vals on new line if possible values
• 15509af test: Demonstrate default value ui bug on no desc
• See full diff in compare view

Updates indexmap from 2.12.1 to 2.13.0

Changelog

Sourced from indexmap's changelog.

2.13.0 (2026-01-07)

• Implemented Clone for IntoKeys and IntoValues.
• Added map::Slice::split_at_checked and split_at_mut_checked.
• Added set::Slice::split_at_checked.

Commits

• a4aba99 Merge pull request #431 from cuviper/release-2.13.0
• e345f3a Release 2.13.0
• e6b677b Merge pull request #430 from cuviper/split_at_checked
• 61c9d53 Add Slice::split_at_checked and split_at_mut_checked
• 8b8d350 Merge pull request #426 from cuviper/clone-intokv
• 88efd0c impl Clone for IntoKeys and IntoValues
• 3b6d04b Merge pull request #425 from cuviper/inner-core
• eb30eb1 Move crate::map::core to crate::inner
• See full diff in compare view

Updates turso from 0.4.1 to 0.4.2

Release notes

Sourced from turso's releases.

0.4.2 -- 2026-01-07

Release Notes

Fixed

• core/mvcc: rollback index rows (Pere Diaz Bou)
• core/vdbe: check negative root pages with integrity_check (Pere Diaz Bou)
• Track WAL state in savepoints for proper rollback (Pavan Nambi)
• Reset checkpoint state when PRAGMA wal_checkpoint fails (Jussi Saurio)
• fix/checkpoint: always read page1 from db file when truncating (Jussi Saurio)
• Fix WAL truncate checkpoint discarding uncheckpointed frames (Jussi Saurio)

Install turso_cli 0.4.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.4.2/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.4.2/turso_cli-installer.ps1 | iex"

Download turso_cli 0.4.2

File	Platform	Checksum
turso_cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
turso_cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
turso_cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
turso_cli-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
turso_cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Changelog

Sourced from turso's changelog.

0.4.2 -- 2026-01-07

Fixed

• core/mvcc: rollback index rows (Pere Diaz Bou)
• core/vdbe: check negative root pages with integrity_check (Pere Diaz Bou)
• Track WAL state in savepoints for proper rollback (Pavan Nambi)
• Reset checkpoint state when PRAGMA wal_checkpoint fails (Jussi Saurio)
• fix/checkpoint: always read page1 from db file when truncating (Jussi Saurio)
• Fix WAL truncate checkpoint discarding uncheckpointed frames (Jussi Saurio)

Commits

• 055e082 Turso 0.4.2
• 2841ef3 Update CHANGELOG.md
• de427d5 Merge 'core/mvcc: rollback index rows ' from Pere Diaz Bou
• 18cd7ec Merge 'core/vdbe: check negative root pages with integrity_check' from Pere...
• dcc0031 Merge 'Track WAL state in savepoints for proper rollback' from Pavan Nambi
• 6bff0f9 Merge 'fix/checkpoint: always read page1 from db file when truncating' from J...
• 2e3127d Merge 'Fix WAL truncate checkpoint discarding uncheckpointed frames' from Jus...
• 7756aea Merge 'Reset checkpoint state when PRAGMA wal_checkpoint fails' from Jussi Sa...
• See full diff in compare view

Updates turso_core from 0.4.1 to 0.4.2

Release notes

Sourced from turso_core's releases.

0.4.2 -- 2026-01-07

Release Notes

Fixed

• core/mvcc: rollback index rows (Pere Diaz Bou)
• core/vdbe: check negative root pages with integrity_check (Pere Diaz Bou)
• Track WAL state in savepoints for proper rollback (Pavan Nambi)
• Reset checkpoint state when PRAGMA wal_checkpoint fails (Jussi Saurio)
• fix/checkpoint: always read page1 from db file when truncating (Jussi Saurio)
• Fix WAL truncate checkpoint discarding uncheckpointed frames (Jussi Saurio)

Install turso_cli 0.4.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.4.2/turso_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.4.2/turso_cli-installer.ps1 | iex"

Download turso_cli 0.4.2

File	Platform	Checksum
turso_cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
turso_cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
turso_cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
turso_cli-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
turso_cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Changelog

Sourced from turso_core's changelog.

0.4.2 -- 2026-01-07

Fixed

• core/mvcc: rollback index rows (Pere Diaz Bou)
• core/vdbe: check negative root pages with integrity_check (Pere Diaz Bou)
• Track WAL state in savepoints for proper rollback (Pavan Nambi)
• Reset checkpoint state when PRAGMA wal_checkpoint fails (Jussi Saurio)
• fix/checkpoint: always read page1 from db file when truncating (Jussi Saurio)
• Fix WAL truncate checkpoint discarding uncheckpointed frames (Jussi Saurio)

Commits

• 055e082 Turso 0.4.2
• 2841ef3 Update CHANGELOG.md
• de427d5 Merge 'core/mvcc: rollback index rows ' from Pere Diaz Bou
• 18cd7ec Merge 'core/vdbe: check negative root pages with integrity_check' from Pere...
• dcc0031 Merge 'Track WAL state in savepoints for proper rollback' from Pavan Nambi
• 6bff0f9 Merge 'fix/checkpoint: always read page1 from db file when truncating' from J...
• 2e3127d Merge 'Fix WAL truncate checkpoint discarding uncheckpointed frames' from Jus...
• 7756aea Merge 'Reset checkpoint state when PRAGMA wal_checkpoint fails' from Jussi Sa...
• See full diff in compare view

Updates libc from 0.2.179 to 0.2.180

Release notes

Sourced from libc's releases.

0.2.180

Added

• QNX: Add missing BPF and ifreq structures (#4769)

Fixed

• Linux, L4Re: address soundness issues of CMSG_NXTHDR (#4903)
• Linux-like: Handle zero-sized payload differences in CMSG_NXTHDR (#4903)
• Musl: Fix incorrect definitions of struct stat on some 32-bit architectures (#4914)
• NetBSD: RISC-V 64: Correct mcontext type definitions (#4886)
• uClibc: Re-enable __SIZEOF_PTHREAD_COND_T on non-L4Re uclibc (#4915)
• uClibc: Restructure Linux netlink module to resolve build errors (#4915)

Changelog

Sourced from libc's changelog.

0.2.180 - 2026-01-08

Added

• QNX: Add missing BPF and ifreq structures (#4769)

Fixed

• Linux, L4Re: address soundness issues of CMSG_NXTHDR (#4903)
• Linux-like: Handle zero-sized payload differences in CMSG_NXTHDR (#4903)
• Musl: Fix incorrect definitions of struct stat on some 32-bit architectures (#4914)
• NetBSD: RISC-V 64: Correct mcontext type definitions (#4886)
• uClibc: Re-enable __SIZEOF_PTHREAD_COND_T on non-L4Re uclibc (#4915)
• uClibc: Restructure Linux netlink module to resolve build errors (#4915)

Commits

• 4b38c69 chore: release libc 0.2.180
• 300e643 qnx: add missing BPF and ifreq structures
• 12fd831 ci: Add rtems to basic tier 3 checks
• b062844 Only test addresses of cmsghdrs that are multiples of the size of cmsghdr.
• 676a4f8 linux: Move membarrier.h constants to src/new
• 0803fae linux: Restructure netlink to src/new
• 72f4c1a uclibc: Re-enable __SIZEOF_PTHREAD_COND_T on non-L4Re uclibc
• 757e55a netbsd/riscv64.rs: make changes so that this builds again.
• 042f118 musl: Fix incorrect definitions of struct stat on some architectures
• 03755c4 linux, emscripten, android, l4re: handle zero-sized payload differences in CM...
• Additional commits viewable in compare view

Updates signal-hook from 0.3.18 to 0.4.1

Changelog

Sourced from signal-hook's changelog.

0.4.1

• Don't pin specific dependency versions accidentally.

0.4.0

• Changed the low_level::pipe to look OwnedFd instead of IntoRawFd, to enforce ownership of the file descriptor (#196).

signal-hook-registry-1.4.8

• Restore errno on signal handler exit (#194, #191).

signal-hook-registry-1.4.7

• Using earlier monopolization to reduce binary size (#190).

signal-hook-mio-0.2.5

• Allow mio 1.1

signal-hook-registry-1.4.6

• Reword/improve the safety requirements docs for register (#178).

signal-hook-1.3.18

• Release the special-case removal of AIX for top-level signal-hook too (#169, #176).

signal-hook-async-std-0.3.0

• Bump async-std to 0.2 (#172).

signal-hook-registry-1.4.5

• Fix windows build (#174).

signal-hook-registry-1.4.4

• Get rid of a warning.

signal-hook-registry-1.4.3

• Remove special-case for AIX (#169).

signal-hook-mio-0.2.4

• Support for mio 1.0

... (truncated)

Commits

• 85f8c75 Version 0.4.1 (don't pin dep versions)
• 6e44722 Version bump to 0.4.0
• 80cc0cf Update dependencies
• 2f67df6 Fix some links & link tests
• bbcecf8 Adjust tests for higher minimal rust version
• 09d1e08 I/O safety
• 115d998 Simplify tests
• 4d5fd6a Version registry 1.4.8
• e04514e Merge pull request #194 from hanna-kruppe/save-restore-errno
• 2f3c6e4 save and restore errno
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.