chore(deps): bump the cargo-dependencies group across 1 directory with 38 updates

Cargo.toml

@@ -11,7 +11,7 @@ rust-version = "1.95"
 repository = "https://github.com/storytold/craft-libs"
 
 [workspace.dependencies]
-acadrust = "=0.6.6"
+acadrust = "=0.6.8"
 log = "0.4"
 # internal: add each crate here as `craft-<name> = { path = "crates/<name>" }`
 craft-platform = { path = "crates/platform" }
@@ -162,7 +162,7 @@ craft-webp = { path = "crates/webp" }
 egui = { version = "0.37", default-features = false }
 md5 = { package = "md-5", version = "0.10", default-features = false }
 jxl-oxide = { version = "0.12", default-features = false }
-jixel = "=0.3.4"
+jixel = "=0.5.7"
 rayon = "1"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"

crates/cms/Cargo.toml

@@ -19,4 +19,4 @@ md5 = { workspace = true }
 rayon = { workspace = true }
 
 [dev-dependencies]
-moxcms = "0.8"
+moxcms = "0.9"

crates/dialogs/Cargo.toml

@@ -12,7 +12,7 @@ repository.workspace = true
 # through pkg-config unless winit's `dlopen` is in the build too; the apps' own rfd keeps it on.
 [dependencies]
 raw-window-handle = "0.6.2"
-rfd = { version = "0.17.2", default-features = false, features = ["xdg-portal"] }
+rfd = { version = "0.18.0", default-features = false, features = ["xdg-portal"] }
 
 # The free-standing Open and Folder panel (`beginWithCompletionHandler:`). rfd and winit already
 # use these.

crates/doc-binary/Cargo.toml

@@ -24,7 +24,7 @@ thiserror = { workspace = true }
 [dev-dependencies]
 # Test files are written with an independent compound-file writer, so craft-cfb's reader is
 # checked against another implementation's output.
-cfb = "0.15"
+cfb = "0.16"
 craft-wordmodel = { workspace = true, features = ["test-support"] }
 proptest = { workspace = true }
 serde_json = "1"

crates/docx/Cargo.toml

@@ -21,7 +21,7 @@ base64 = "0.23"
 chrono = { version = "0.4.45", default-features = false, features = ["std"] }
 log = "0.4"
 # The streaming readers of the Flat OPC file and of kept parts (not yet on craft-xml's pull reader).
-quick-xml = { version = "0.41", default-features = false }
+quick-xml = { version = "0.42", default-features = false }
 thiserror = { workspace = true }
 unicode-bidi = "0.3"
 zeroize = "1"

crates/font-catalog/Cargo.toml

@@ -15,17 +15,17 @@ default = ["system"]
 system = ["dep:fontique"]
 
 [dependencies]
-skrifa = { version = "0.47", default-features = false, features = ["std"] }
+skrifa = { version = "0.48", default-features = false, features = ["std"] }
 thiserror = { workspace = true }
 
 [target.'cfg(not(target_arch = "wasm32"))'.dependencies]
-fontique = { version = "0.11.1", default-features = false, features = ["system", "fontconfig-dlopen"], optional = true }
+fontique = { version = "0.12.0", default-features = false, features = ["system", "fontconfig-dlopen"], optional = true }
 
 [target.'cfg(windows)'.dependencies]
-windows-registry = "0.6"
+windows-registry = "0.100"
 
 [dev-dependencies]
-write-fonts = "0.54"
+write-fonts = "0.56"
 
 [lints]
 workspace = true

crates/font-store/Cargo.toml

@@ -18,7 +18,7 @@ flate2 = { version = "1", default-features = false, features = ["rust_backend"]
 serde = { workspace = true }
 serde_json = { workspace = true }
 sha2 = "0.10"
-skrifa = { version = "0.47", default-features = false, features = ["std"] }
+skrifa = { version = "0.48", default-features = false, features = ["std"] }
 thiserror = { workspace = true }
 
 # The store and the network are native only; the web keeps fonts elsewhere.
@@ -35,7 +35,7 @@ tar = { version = "0.4", default-features = false }
 ureq = { version = "3", default-features = false, features = ["rustls", "gzip"] }
 
 [dev-dependencies]
-write-fonts = "0.54"
+write-fonts = "0.56"
 
 [lints]
 workspace = true

crates/fonts-build/Cargo.toml

@@ -13,7 +13,7 @@ repository.workspace = true
 subset = ["dep:skera", "dep:skrifa"]
 
 [dependencies]
-skera = { version = "0.8", optional = true }
+skera = { version = "0.10", optional = true }
 skrifa = { version = "0.48", default-features = false, features = ["std"], optional = true }
 
 [dev-dependencies]

crates/i18n/Cargo.toml

@@ -12,12 +12,12 @@ repository.workspace = true
 # version, hence `~2.3`.
 fixed_decimal = { version = "0.7.2", default-features = false }
 icu_decimal = { version = "~2.3", default-features = false, features = ["serde"] }
-icu_locale_core = { version = "~2.3", default-features = false }
+icu_locale_core = { version = "~2.4", default-features = false }
 icu_locale_fallback = { version = "~2.3", default-features = false, features = ["compiled_data"] }
 icu_plurals = { version = "~2.3", default-features = false, features = ["serde"] }
-icu_provider = { version = "~2.3", default-features = false, features = ["sync"] }
+icu_provider = { version = "~2.4", default-features = false, features = ["sync"] }
 icu_provider_adapters = { version = "~2.3", default-features = false }
-icu_provider_blob = { version = "~2.3", default-features = false }
+icu_provider_blob = { version = "~2.4", default-features = false }
 writeable = "0.6"
 log = "0.4"
 sys-locale = "0.3"
@@ -32,7 +32,7 @@ sys-locale = { version = "0.3", features = ["js"] }
 
 # The regional format (Region::system); safe registry reads, MIT OR Apache-2.0.
 [target.'cfg(windows)'.dependencies]
-windows-registry = "0.6"
+windows-registry = "0.100"
 
 # The current locale (Region::system); already in the apps' Cargo.lock through eframe.
 [target.'cfg(target_vendor = "apple")'.dependencies]

crates/image-codecs/Cargo.toml

@@ -28,7 +28,7 @@ flate2 = { version = "1.1.10", default-features = false, features = ["zlib-rs",
 image-webp = "0.2"
 zune-jpeg = "0.5"
 zune-core = "0.5"
-jpeg-encoder = "0.6"
+jpeg-encoder = "0.7"
 craft-jpeg = { workspace = true }
 craft-metadata = { workspace = true }
 zune-jpegxl = { version = "=0.5.2", default-features = false, features = ["std"] }

crates/jpeg/Cargo.toml

@@ -15,5 +15,5 @@ thiserror = { workspace = true }
 
 [dev-dependencies]
 # Reference encoder and baseline decoder for the comparison tests.
-jpeg-encoder = "0.6"
+jpeg-encoder = "0.7"
 zune-jpeg = "0.5"

crates/metadata/Cargo.toml

@@ -13,7 +13,7 @@ workspace = true
 [dependencies]
 craft-tiff = { workspace = true }
 serde = { workspace = true }
-quick-xml = "0.41"
+quick-xml = "0.42"
 chrono = { workspace = true }
 # JPEG XL `brob` metadata boxes
 brotli-decompressor = { version = "6", default-features = false, features = ["std"] }

crates/odf/Cargo.toml

@@ -23,7 +23,7 @@ aes = "0.9"
 sha1 = "0.11"
 sha2 = "0.11"
 hmac = "0.13"
-getrandom = "0.3"
+getrandom = "0.4"
 zeroize = "1"
 
 [features]

crates/offcrypto/Cargo.toml

@@ -19,7 +19,7 @@ aes = "0.9"
 sha1 = "0.11"
 sha2 = "0.11"
 hmac = "0.13"
-getrandom = "0.3"
+getrandom = "0.4"
 zeroize = "1"
 
 [target.'cfg(all(target_arch = "wasm32", target_os = "unknown"))'.dependencies]

crates/openpgp/Cargo.toml

@@ -17,7 +17,7 @@ pgp = { version = "=0.21.0", default-features = false }
 thiserror = { workspace = true }
 # rPGP's generation of RustCrypto digests (MIT OR Apache-2.0).
 sha2 = { version = "0.10", default-features = false }
-sha3 = { version = "0.10", default-features = false }
+sha3 = { version = "0.12", default-features = false }
 
 [target.'cfg(target_arch = "wasm32")'.dependencies]
 # Random numbers in the browser, which rPGP's dependencies ask for even when it only checks.
@@ -26,7 +26,7 @@ pgp = { version = "=0.21.0", default-features = false, features = ["wasm"] }
 [dev-dependencies]
 proptest = { workspace = true }
 # Keys and signatures made in the tests, from a seed: the random numbers rPGP 0.21 takes.
-rand = { version = "0.8", default-features = false, features = ["std", "std_rng"] }
-sha1 = { version = "0.10", default-features = false }
-ed25519-dalek = { version = "2", default-features = false }
-rsa = { version = "0.9", default-features = false }
+rand = { version = "0.10", default-features = false, features = ["std", "std_rng"] }
+sha1 = { version = "0.11", default-features = false }
+ed25519-dalek = { version = "3", default-features = false }
+rsa = { version = "0.10", default-features = false }

crates/pkcs7/Cargo.toml

@@ -32,7 +32,7 @@ ecdsa = { version = "0.17", default-features = false, features = ["algorithm", "
 ed25519-dalek = "3.0.0"
 # Verification only on native targets (RSA private-key operations use aws-lc-rs).
 crypto-bigint = { version = "0.7.11", default-features = false, features = ["alloc"] }
-rsa = { version = "=0.10.0-rc.18", default-features = false, features = ["std", "hazmat"] }
+rsa = { version = "=0.10.0", default-features = false, features = ["std", "hazmat"] }
 pbkdf2 = { version = "0.13", default-features = false, features = ["hmac"] }
 hmac = "0.13"
 aes = "0.9"

crates/stream-codecs/Cargo.toml

@@ -12,9 +12,9 @@ workspace = true
 
 [dependencies]
 # CCITT Group 4 encoding (ITU-T T.6). MIT.
-fax = "0.2.7"
+fax = "0.3.0"
 # CCITT fax decoding, the decoder the vendored PDF reader uses. MIT OR Apache-2.0.
-hayro-ccitt = { version = "0.3", default-features = false }
+hayro-ccitt = { version = "0.5", default-features = false }
 # JBIG2 decoding, the decoder the vendored PDF reader uses (the workspace patches it to `vendor/hayro-jbig2`).
 hayro-jbig2 = { version = "=0.3.0", default-features = false, features = ["std"] }
 thiserror = { workspace = true }

crates/svg/Cargo.toml

@@ -22,10 +22,10 @@ vectorcraft-geom = { workspace = true }
 vectorcraft-pathops = { workspace = true }
 # The full SVG parser (Apache-2.0 OR MIT). The one version every Craft app uses: apps depend on
 # craft-svg's `tree` feature and take usvg from its re-export, never directly.
-usvg = { version = "=0.48.1", default-features = false, optional = true }
+usvg = { version = "=0.49.0", default-features = false, optional = true }
 # Rendering the parsed tree uses the matching renderer version. Keep it behind an opt-in feature
 # so callers that only need bounded SVG text/tree parsing do not pull in raster backends.
-resvg = { version = "=0.48.1", default-features = false, features = ["text", "raster-images"], optional = true }
+resvg = { version = "=0.49.0", default-features = false, features = ["text", "raster-images"], optional = true }
 
 [features]
 # `craft_svg::tree`: usvg behind the bounded entry point.

crates/text/Cargo.toml

@@ -12,7 +12,7 @@ workspace = true
 
 [dependencies]
 hypher = { version = "0.1.8", default-features = false, features = ["alloc"], optional = true }
-miniz_oxide = { version = "0.8", optional = true }
+miniz_oxide = { version = "0.9", optional = true }
 unicode-general-category = { version = "1.1", optional = true }
 unicode-linebreak = { version = "0.1.5", optional = true }
 unicode-segmentation = { version = "1.13", optional = true }

crates/ui/Cargo.toml

@@ -18,13 +18,13 @@ epaint = { version = "0.37", default-features = false }
 log = "0.4"
 serde = { version = "1", features = ["derive"], optional = true }
 # Same version as epaint's, for reading a face's character map.
-skrifa = { version = "0.44", default-features = false, features = ["std"] }
+skrifa = { version = "0.48", default-features = false, features = ["std"] }
 
 [target.'cfg(not(target_arch = "wasm32"))'.dependencies]
 # Screenshot and input tests of an app's screens (the screen-testing feature).
 egui_kittest = { version = "0.37", features = ["snapshot", "wgpu"], optional = true }
 # The versions egui_system_font_provider 0.37 uses.
-fontique = { version = "0.11.1", default-features = false, features = ["system", "fontconfig-dlopen"], optional = true }
+fontique = { version = "0.12.0", default-features = false, features = ["system", "fontconfig-dlopen"], optional = true }
 unicode-script = { version = "0.5.8", optional = true }
 
 # Fetching served fonts (`fonts::UiFonts::served_faces`); already in every eframe web build.

crates/update/Cargo.toml

@@ -24,7 +24,7 @@ image = { version = "0.25", default-features = false, features = ["png"], option
 serde = { workspace = true }
 serde_json = { workspace = true }
 log = "0.4"
-getrandom = "0.3"
+getrandom = "0.4"
 tempfile = "3"
 sha2 = "0.10"
 ureq = { version = "3.4", default-features = false, features = ["rustls-no-provider", "_ring", "gzip", "platform-verifier"] }
@@ -48,7 +48,7 @@ plist = "1"
 rustix = { version = "1.1", default-features = false, features = ["std", "fs", "process"] }
 
 [target.'cfg(target_os = "windows")'.dependencies]
-winreg = "0.55"
+winreg = "0.56"
 dunce = "1"
 # `deflate-flate2` with flate2's default miniz_oxide backend, not zip's `deflate` (zopfli and
 # zlib-rs): Cargo unifies flate2's features across an app, and zlib-rs would switch the whole

crates/xfl/Cargo.toml

@@ -11,5 +11,5 @@ repository.workspace = true
 workspace = true
 
 [dependencies]
-miniz_oxide = "0.8"
+miniz_oxide = "0.9"
 thiserror = { workspace = true }

crates/xls/Cargo.toml

@@ -15,7 +15,7 @@ craft-cfb = { workspace = true }
 craft-sheet = { workspace = true }
 # RC4 and RC4 CryptoAPI encryption ([MS-OFFCRYPTO] 2.3.5, 2.3.6).
 md5 = { workspace = true }
-sha1 = { version = "0.10", default-features = false }
+sha1 = { version = "0.11", default-features = false }
 # zlib-wrapped metafiles in the drawing group.
 miniz_oxide = "0.9"
 thiserror = { workspace = true }

crates/xml/Cargo.toml

@@ -11,5 +11,5 @@ repository.workspace = true
 workspace = true
 
 [dependencies]
-quick-xml = { version = "0.41", default-features = false }
+quick-xml = { version = "0.42", default-features = false }
 thiserror = { workspace = true }