chore(deps): bump the prod-deps group across 1 directory with 8 updates

[dependabot]

Bumps the prod-deps group with 8 updates in the / directory:

Package	From	To
diesel	2.3.9	2.3.10
diesel-async	0.9.0	0.9.2
chrono	0.4.44	0.4.45
http	1.4.0	1.4.2
regex	1.12.3	1.12.4
uuid	1.23.1	1.23.3
config	0.15.22	0.15.24
protobuf	2.28.0	3.7.2

Updates diesel from 2.3.9 to 2.3.10

Changelog

Sourced from diesel's changelog.

[2.3.10] 2026-06-05

• Fixed a wrong value of a internal MYSQL flag
• Fixed several possible panics in the PostgreSQL deserialization code for malformed packages in the
• Fixed an issue that caused unexpected results while calling custom aggregated SQL functions twice in the SQLite backend
• Fixed a potential use after free bug in the SQLite backend while deserializing a database from a byte buffer
• Fixed potential invalid schema generation if column or table names "inject" rust code
• Fixed potential SQL injections during schema introspection via diesel print-schema
• Fixed a regression that resulted in rejecting valid combinations of ORDER BY and GROUP BY clauses

Commits

• 7b4f888 Merge pull request #5067 from weiznich/prepare_2.3.10
• bdc40a1 Prepare a 2.3.10 release
• ad149aa Merge pull request #5059 from ayarotsky/fix-order-and-group
• 5a5b6a8 Merge pull request #5064 from weiznich/bump/rust_1.96
• a535124 Merge pull request #5056 from weiznich/even_fix_more_issues
• 207391c Merge pull request #5054 from weiznich/fix_more_issues
• 60b9d3a Merge pull request #5051 from weiznich/new_sponsor
• See full diff in compare view

Updates diesel-async from 0.9.0 to 0.9.2

Release notes

Sourced from diesel-async's releases.

Diesel-Async 0.9.2

Fixed

• Improve the check if a connection is still working in our connection pool implementation by actually loading the response
• Improve mapping of SQL error states to diesel database error kinds for PostgreSQL 18 and newer

New Contributors

• @​ajesipow made their first contribution in diesel-rs/diesel_async#293
• @​DhineshKrishnan1206 made their first contribution in diesel-rs/diesel_async#294

Full Changelog: diesel-rs/diesel_async@v0.9.1...v0.9.2

You can support the development of Diesel by:

• Contributing Code, Documentation or Guides. Checkout the planing for Diesel 2.4 for open tasks.
• Providing knowledge and help to maintain the MySQL/MariaDB backend. This is currently the only in-tree backend that is not used by any maintainers, so having someone around that actually uses this backend would be very helpful for the Diesel project.
• Answering questions in our discussion forum
• Reporting bugs in our issue tracker
• Helping triaging issues in our issue tracker
• Sponsoring the maintainers.

Diesel-Async 0.9.1

Fixed

• Correctly check if a connection is a broken state (e.g. has an open transaction) for the mobc pool implementation

Full Changelog: diesel-rs/diesel_async@v0.9.1...v0.9.1

You can support the development of Diesel by:

• Contributing Code, Documentation or Guides. Checkout the planing for Diesel 2.4 for open tasks.
• Providing knowledge and help to maintain the MySQL/MariaDB backend. This is currently the only in-tree backend that is not used by any maintainers, so having someone around that actually uses this backend would be very helpful for the Diesel project.
• Answering questions in our discussion forum
• Reporting bugs in our issue tracker
• Helping triaging issues in our issue tracker
• Sponsoring the maintainers.

Changelog

Sourced from diesel-async's changelog.

[0.9.2] - 2026-06-19

• Improve the check if a connection is still working in our connection pool implementation by actually loading the response
• Improve mapping of SQL error states to diesel database error kinds for PostgreSQL 18 and newer

[0.9.1] - 2026-06-05

• Correctly check if a connection is a broken state (e.g. has an open transaction) for the mobc pool implementation

Commits

• d2f1886 Prepare a 0.9.2 release
• 39987dc Merge pull request #294 from DhineshKrishnan1206/fix/pool-ping-read-response
• 66a6877 Use get_result instead of execute for pool connection ping
• f839111 Merge pull request #293 from ajesipow/map-more-pg-errors
• 1496154 Include more CI robustness fixes from diesel
• bd5f55a Fix sqlite windows job
• e4a2a6c Fix PG install in CI
• 38914a8 Fmt
• 407e2a4 Adapt CI to run tests against postgres 17 and postgres 18
• ae45068 Add tests for postgres error conversions
• Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

• fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @​SAY-5 in chronotope/chrono#1787
• tz_data: fix tzdata locations on Android by @​caruschalalamove in chronotope/chrono#1789

Commits

• 1703382 Prepare 0.4.45 release
• 881f9ab tz_data: fix tzdata locations on Android
• f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
• c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
• 120686c Bump codecov/codecov-action from 5 to 6
• See full diff in compare view

Updates http from 1.4.0 to 1.4.2

Release notes

Sourced from http's releases.

v1.4.1

tl;dr

• Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.
• Fix Extend for HeaderMap to clamp max size hint and not overflow.
• Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.
• Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

What's Changed

• chore(header): fix clippy::assign_op_pattern by @​rxc-amzn in hyperium/http#806
• ci: pin itoa in msrv job by @​seanmonstar in hyperium/http#813
• Remove unnecessary explicit lifetimes by @​jplatte in hyperium/http#815
• chore(ci): update to actions/checkout@v6 by @​tottoto in hyperium/http#819
• tests: update to rand 0.10 by @​tottoto in hyperium/http#818
• refactor: Remove usage of float instruction by @​AurelienFT in hyperium/http#823
• refactor(uri): consolidate PathAndQuery::from_shared and from_static by @​seanmonstar in hyperium/http#825
• fix(uri): reject Path::from_shared/from_static if doesn't start with slash by @​seanmonstar in hyperium/http#826
• Rephrase comment by @​daalfox in hyperium/http#827
• Fix typo in request builder docs by @​vleksis in hyperium/http#831
• fix: clamp Extend size hint so HeaderMap reserve cannot overflow by @​SAY-5 in hyperium/http#833
• fix(headers): fix stacked borrows for IterMut/ValuesIterMut by @​seanmonstar in hyperium/http#837
• fix(header): use a set_len guard in IntoIter drop by @​seanmonstar in hyperium/http#838

New Contributors

• @​rxc-amzn made their first contribution in hyperium/http#806
• @​AurelienFT made their first contribution in hyperium/http#823
• @​daalfox made their first contribution in hyperium/http#827
• @​vleksis made their first contribution in hyperium/http#831
• @​SAY-5 made their first contribution in hyperium/http#833

Full Changelog: hyperium/http@v1.4.0...v1.4.1

Changelog

Sourced from http's changelog.

1.4.2 (June 8, 2026)

• Fix uri::Builder to allow "*" as the path when scheme and authority are also set, used in HTTP/2 requests.
• Fix Uri to properly reject DEL characters.

1.4.1 (May 25, 2026)

• Fix PathAndQuery::from_static() and from_shared() to reject inputs that do not start with /.
• Fix Extend for HeaderMap to clamp max size hint and not overflow.
• Fix header::IntoIter that could use-after-free if the generic value type could panic on drop.
• Fix header::{IterMut, ValuesIterMut} to not violate stacked borrows.

Commits

• 82db5b8 v1.4.2
• a9cdbf8 fix(uri): reject DEL character (#842)
• df75ca3 fix(uri): allow STAR paths with scheme/auth (#843)
• ec3f8ce feat(method): impl PartialOrd + Ord (#840)
• a24c968 v1.4.1
• bc3b044 fix(header): use a set_len guard in IntoIter drop (#838)
• 1b968dc fix(header): fix stacked borrows for IterMut/ValuesIterMut (#837)
• 6e2dd42 fix: clamp Extend size hint so HeaderMap reserve cannot overflow (#833)
• 68e0abb docs: fix typo in request builder docs (#831)
• 29dd307 docs(extensions): rephrase internal comment (#827)
• Additional commits viewable in compare view

Updates regex from 1.12.3 to 1.12.4

Changelog

Sourced from regex's changelog.

1.12.4 (2025-06-09)

This release includes a performance optimization for compilation of regexes with very large character classes.

Improvements:

• #1308: Avoid re-canonicalizing the entire interval set when pushing new class ranges.

Commits

• 7b96fdc 1.12.4
• 7b89cf0 deps: update to regex-syntax 0.8.11
• 1401679 regex-syntax-0.8.11
• d709000 changelog: 1.12.4
• 9825c74 syntax: avoid re-canonicalizing the entire IntervalSet on push (#1308)
• a7f2ff6 docs: clarify regex-lite word boundaries
• 2c7b172 docs: clarify unsupported Anchored::Pattern searches
• 839d16b regex-syntax-0.8.10
• c4865a0 syntax: fix negation handling in HIR translation
• d8761c0 cargo: also include benches
• Additional commits viewable in compare view

Updates uuid from 1.23.1 to 1.23.3

Release notes

Sourced from uuid's releases.

v1.23.3

What's Changed

• Fix up parser panic on empty input by @​KodrAus in uuid-rs/uuid#886
• Prepare for 1.23.3 release by @​KodrAus in uuid-rs/uuid#887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

v1.23.2

What's Changed

• Improve error messages for ambiguous formats by @​KodrAus in uuid-rs/uuid#882
• Prepare for 1.23.2 release by @​KodrAus in uuid-rs/uuid#883

Full Changelog: uuid-rs/uuid@v1.23.1...v1.23.2

Commits

• 20da78b Merge pull request #887 from uuid-rs/cargo/v1.23.3
• 62232ca prepare for 1.23.3 release
• 2320c6a Merge pull request #886 from uuid-rs/fix/parser-panics
• 2d034d4 fix some invalid indexers on error reporting
• a8b9f14 update fuzz infra and run in CI
• d119657 Merge pull request #883 from uuid-rs/cargo/v1.23.2
• 0651cfc prepare for 1.23.2 release
• e8dea0c Merge pull request #882 from uuid-rs/fix/error-msgs
• bdc429a fix up serde messages
• d4342e4 make indexes 0 based and fix up more error messages
• Additional commits viewable in compare view

Updates config from 0.15.22 to 0.15.24

Changelog

Sourced from config's changelog.

[0.15.24] - 2026-06-16

Fixes

• (json) Support u64, and not just i64

[0.15.23] - 2026-05-14

Fixes

• Environment::convert_case: correctly apply casing to each key segment

Commits

• 6314dde chore: Release config version 0.15.24
• edd5da5 docs: Update changelog
• 13c188b fix: support u64 for parse json file (#758)
• be51260 chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0 (#760)
• 1de84e0 chore(deps): Update compatible (dev) (#759)
• 8c27a5b chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
• 895c66d fix: support u64 for parse json file
• fc956b2 chore(deps): Update Rust Stable to v1.96 (#756)
• 9053d29 chore: Release config version 0.15.23
• e194797 docs: Update changelog
• Additional commits viewable in compare view

Updates protobuf from 2.28.0 to 3.7.2

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[pjenvey]

@dependabot ignore protobuf major version

[dependabot]

OK, I won't notify you about version 3.x.x of protobuf again, unless you unignore it.

[pjenvey]

@dependabot recreate

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.