deps: bump the cargo-patch-and-minor group across 1 directory with 4 updates

[dependabot]

Bumps the cargo-patch-and-minor group with 4 updates in the / directory: bstr, sevenz-rust2, time and anyhow.

Updates bstr from 1.12.1 to 1.12.3

Commits

• cabbfe3 1.12.3
• 11d6fac msrv: decrease to 1.65
• c857a1c 1.12.2
• e4c6498 doc: clarify the case where there is no valid UTF-8 prefix (#204)
• 8481908 doc: add alias to fields and Fields
• 6f089f3 lint: add set -u to regex generation scripts
• 1396d35 docs: fix spelling mistake
• 94cdd94 lint: add #[must_use] to ByteSlice::replace[n]
• 155fc93 deps: switch serde to serde_core
• bf0bf16 perf: implement Iterator::count for Chars
• Additional commits viewable in compare view

Updates sevenz-rust2 from 0.21.0 to 0.21.1

Changelog

Sourced from sevenz-rust2's changelog.

0.21.1 - 2026-06-23

Fixed

• Fix security issue were malicious 7z files could write files outside the destination directory. Reported by @​lintowe (#116)

Commits

• ef760b6 7z files could write files outside the destination directory
• 3ce5d2a Bump actions/checkout from 6 to 7
• 92ea436 Fix new clippy linter issues
• See full diff in compare view

Updates time from 0.3.49 to 0.3.51

Release notes

Sourced from time's releases.

v0.3.51

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.51 [2026-06-22]

Fixed

• time compiles with macros enabled. This version is otherwise identical to v0.3.50.

0.3.50 [2026-06-22] [YANKED]

This version was yanked because it would not compile when the macros feature was enabled.

Added

• Timestamp type

Fixed

• [year] in a runtime-parsed version 3 format description when the large-dates feature is not enabled now succeeds. This previously failed due to a missing #[cfg].

Performance

• Further gains when parsing with the non-deprecated parts of the RFC 2822 well-known format
• Gains when formatting with the ISO 8601 well-known format
• Date arithmetic is improved in common situations

Commits

• 4ae4926 v0.3.51 release
• 88eece3 v0.3.50 release
• e1aa9ed Remove unused imports
• 6f64473 Add regression test for issue 773
• 9f8d7da Improve performance of ISO 8601 formatting
• 356975c Share parsing components with different versions
• 2850178 Improve RFC 2822 fast path
• 1f6fa79 Add #[inline] to trivial method
• 7e4fd30 Add fast path for Date arithmetic
• a928f2d Avoid range error when not using large-dates
• Additional commits viewable in compare view

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions