chore(deps): Bump the all-cargo-version-updates group with 6 updates

[dependabot]

Bumps the all-cargo-version-updates group with 6 updates:

Package	From	To
actix-http	3.10.0	3.11.0
actix-web	4.10.2	4.11.0
brotli	7.0.0	8.0.1
clap	4.5.37	4.5.38
subst	0.3.7	0.3.8
tempfile	3.19.1	3.20.0

Updates actix-http from 3.10.0 to 3.11.0

Release notes

Sourced from actix-http's releases.

actix-http: v3.11.0

• Update brotli dependency to 8.

Commits

• 69dda5c ci: fix msrv job
• 1b4b61d chore(awc): prepare release 3.7.0
• 2c55d65 chore(actix-web): prepare release 4.11.0
• 276f5d5 chore(actix-http): prepare release 3.11.0
• 5f3c028 chore: narrow tokio dep to account for RUSTSEC-2025-0023
• 3d3b31e fix: svg files should be compressed (#3486)
• 3147aac feat: do not use host header on http2 for guard (#3525)
• 079400a build: add clippy-msrv recipe
• a49f055 build(deps): update url requirement from 2.1 to 2.5.4 (#3527)
• 55268b6 fix: improve logger header values printing
• Additional commits viewable in compare view

Updates actix-web from 4.10.2 to 4.11.0

Release notes

Sourced from actix-web's releases.

actix-web: v4.11.0

• Add Logger::log_level() method.
• Improve handling of non-UTF-8 header values in Logger middleware.
• Add HttpServer::shutdown_signal() method.
• Mark HttpServer as #[must_use].
• Allow SVG images to be compressed by the Compress middleware.
• Ignore Host header in Host guard when connection protocol is HTTP/2.
• Re-export mime dependency.
• Update brotli dependency to 8.

Commits

• 69dda5c ci: fix msrv job
• 1b4b61d chore(awc): prepare release 3.7.0
• 2c55d65 chore(actix-web): prepare release 4.11.0
• 276f5d5 chore(actix-http): prepare release 3.11.0
• 5f3c028 chore: narrow tokio dep to account for RUSTSEC-2025-0023
• 3d3b31e fix: svg files should be compressed (#3486)
• 3147aac feat: do not use host header on http2 for guard (#3525)
• 079400a build: add clippy-msrv recipe
• a49f055 build(deps): update url requirement from 2.1 to 2.5.4 (#3527)
• 55268b6 fix: improve logger header values printing
• Additional commits viewable in compare view

Updates brotli from 7.0.0 to 8.0.1

Commits

• See full diff in compare view

Updates clap from 4.5.37 to 4.5.38

Release notes

Sourced from clap's releases.

v4.5.38

[4.5.38] - 2025-05-11

Fixes

• (help) When showing aliases, include leading -- or -

Changelog

Sourced from clap's changelog.

[4.5.38] - 2025-05-11

Fixes

• (help) When showing aliases, include leading -- or -

Commits

• 2920fb0 chore: Release
• 8902627 docs: Update changelog
• 79d696f Merge pull request #5813 from epage/ignore
• 479df35 fix(parser): Fill in defaults on ignored error
• a1d69ca refactor(parser): Split up parsing from post-processing
• 6827841 test(parser): Show bad ignore_errors defaulting case
• 76d0049 test(parser): Verify defaulting on errors
• 3f5c05c test(parser): Ensure we are actually testing ignore_errors
• ba4745d chore(ci): Fix use of permissions
• 22944b4 chore(ci): Use matrix for tracking the runner
• Additional commits viewable in compare view

Updates subst from 0.3.7 to 0.3.8

Changelog

Sourced from subst's changelog.

Version 0.3.8 - 2025-05-09

• [fix][minor] Fix out-of-bounds read when input string ends with a dollar sign.

Commits

• 2931f9a Bump version to 0.3.8.
• 818f87e Update CHANGELOG.
• 89c93ed Merge pull request #33 from kaspar030/fix-panic-dollar-eos
• 7c14437 fix: properly handle $ at end of input
• aa697ca Merge pull request #32 from kaspar030/bump-cache-action
• 75e9814 ci: bump actions/cache to v4
• See full diff in compare view

Updates tempfile from 3.19.1 to 3.20.0

Changelog

Sourced from tempfile's changelog.

3.20.0

This release mostly unifies the behavior/capabilities around "keeping" temporary files:

• Rename Builder::keep(bool) (via deprecation) to Builder::disable_cleanup(bool) to make it clear that behaves differently from NamedTempFile::keep(). The former disables automatic cleanup while the latter consumes the NamedTempFile object entirely and unsets the "temporary file" attribute (on Windows).
• Rename TempDir::into_path (via deprecation) to TempDir::keep to mirror NamedTempFile::keep.
• Add TempDir::disable_cleanup, NamedTempFile::disable_cleanup, and TempPath::disable_cleanup making it possible to disable automatic cleanup in-place after creating a temporary file/directory (equivalent to calling Builder::disable_cleanup before creating the file/directory).

Additionally, it adds a few spooled temporary file features:

• Add SpooledTempFile::into_file for turning a SpooledTempFile into a regular unnamed temporary file, writing it to the backing storage ("rolling" it) if it was still stored in-memory.
• Add spooled_tempfile_in and SpooledTempFile::new_in methods for creating spooled temporary files in a specific directory. This makes it possible to choose the backing device for your spooled temporary file which is rather important on Linux where the default temporary directory is likely backed by memory (defeating the entire point of having a spooled temporary file).

Finally, this release improves documentation, especially the top-level documentation explaining which temporary file type to use.

BREAKING for those with deny(warnings):

• Builder::keep deprecated in favor of Builder::disable_cleanup.
• TempDir::into_path is deprecated in favor of TempDir::keep.

BREAKING:

Commits

• 99ffea6 chore: release v3.20.0 (#358)
• bd2b267 feat: make it possible to disable cleanup in-place after creation (#355)
• 3b30099 ci: really check docs for warnings (#357)
• f701f52 ci: check docs (#356)
• d34afe9 doc: improve SpooledData documentation
• 6deb42e doc: make it easier to pick the correct tempfile constructor/type
• e284782 feat: allow creating spooled temporary files in a specific directory (#353)
• 07edc31 feat: implement SpooledTempFile::into_file (#352)
• b122355 fix: add must_use attribute to TempDir::keep (#351)
• cbd1e97 feat: rename TempDir::into_path to TempDir::keep (#349)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions