[dependabot]

Bumps the patch-level group with 6 updates in the / directory:

Package	From	To
thiserror	2.0.19	2.0.21
clap	4.6.4	4.6.7
rusty_jpeg	0.4.1	0.4.7
fontdue	0.9.4	0.9.5
rusty_alloc	2.2.5	2.2.7
rusty_h264	0.16.0	0.16.1

Updates thiserror from 2.0.19 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

2.0.20

• Suppress redundant_field_names clippy lint in generated code (#454)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• Additional commits viewable in compare view

Updates clap from 4.6.4 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates rusty_jpeg from 0.4.1 to 0.4.7

Release notes

Sourced from rusty_jpeg's releases.

v0.4.7

The ESP32 release: no_std + alloc, a decoder that reads a slice, an encoder that writes into a caller buffer (SliceWriter), packed YUYV input, and a fix for optimized Huffman tables with restart intervals. The full account is in CHANGES.md.

v0.4.6

The ESP32 release: no_std + alloc, a decoder that reads a slice, an encoder that writes into a caller buffer (SliceWriter), packed YUYV input, and a fix for optimized Huffman tables with restart intervals. The full account is in CHANGES.md.

v0.4.5

The ESP32 release: no_std + alloc, a decoder that reads a slice, an encoder that writes into a caller buffer (SliceWriter), packed YUYV input, and a fix for optimized Huffman tables with restart intervals. The full account is in CHANGES.md.

v0.4.4

The ESP32 release: no_std + alloc, a decoder that reads a slice, an encoder that writes into a caller buffer (SliceWriter), packed YUYV input, and a fix for optimized Huffman tables with restart intervals. The full account is in CHANGES.md.

v0.4.3

The ESP32 release: no_std + alloc, a decoder that reads a slice, an encoder that writes into a caller buffer (SliceWriter), packed YUYV input, and a fix for optimized Huffman tables with restart intervals. The full account is in CHANGES.md.

v0.4.2

The ESP32 release: no_std + alloc, a decoder that reads a slice, an encoder that writes into a caller buffer (SliceWriter), packed YUYV input, and a fix for optimized Huffman tables with restart intervals. The full account is in CHANGES.md.

Changelog

Sourced from rusty_jpeg's changelog.

0.4.7 - 2026-10-24

Fixed

• (decode) ColorTransform::None returns components interleaved, not per-row planes

0.4.6 - 2026-10-23

Other

• (decode) single-band output renders straight into a zeroed image

0.4.5 - 2026-10-23

Other

• (decode) reuse component planes across decodes on the same thread

0.4.4 - 2026-10-22

Fixed

• (decode) select_worker compared width x width, not width x height

Other

• (decode) don't thread a decode the process can only run on one core
• (decode) one-lookup DC differences
• (decode) render the RGB image into uninitialised capacity instead of zero-filling it first
• (decode) 9-bit first-level Huffman lookup (was 8)
• (decode) end-of-block in the fast AC table, and carry "DC only" from the entropy decoder
• (decode) AVX2 4:2:0 fancy upsampling, 16 sample pairs per step
• (decode) run the RGB output stage in row bands across threads in the default (threaded) mode
• (decode) AVX2 YCbCr->RGB, 16 pixels per step, bit-identical to SSSE3
• (decode) row-band RGB output stage — static upsampler dispatch, one set of line buffers, luma read in place, vectorizable H2V2/H2V1
• satisfy clippy 1.99 (div_ceil, single-element loop)
• 3,686 active installs

0.4.3 - 2026-10-17

Other

• bump rusty_alloc-api to =2.2.6 (#11)
• Merge pull request #7 from Remade-With-Rust/chore/release-plz-0-5-139
• 3,262 active installs

0.4.2 - 2026-10-08

Other

... (truncated)

Commits

• 9ec9aa8 chore: release v0.4.7
• db48e80 Merge pull request #21 from Remade-With-Rust/fix/colortransform-none-interleave
• d4964c2 fix(decode): ColorTransform::None returns components interleaved, not per-row...
• b5154dc Merge pull request #19 from Remade-With-Rust/release-plz-2026-10-23T01-54-37Z
• fb855b0 chore: release v0.4.6
• 7938d82 Merge pull request #18 from Remade-With-Rust/perf/single-band-direct
• cbaa527 perf(decode): single-band output renders straight into a zeroed image
• acc465b Merge pull request #16 from Remade-With-Rust/release-plz-2026-10-23T00-49-19Z
• 0ee9f2c chore: release v0.4.5
• 512be6d Merge pull request #15 from Remade-With-Rust/perf/plane-reuse
• Additional commits viewable in compare view

Updates fontdue from 0.9.4 to 0.9.5

Changelog

Sourced from fontdue's changelog.

[0.9.5] - 2026-10-18

Fixed

• deprecated core::f32::MAX/MIN usage replaced with f32::MAX/MIN
• Removed std::vec::from_elem usage, it was undocumented

Commits

• See full diff in compare view

Updates rusty_alloc from 2.2.5 to 2.2.7

Release notes

Sourced from rusty_alloc's releases.

rusty_alloc-api-v2.2.6

Fixed

• Picks up rusty_alloc 2.2.6: a merged free span no longer hides a decommitted neighbour (Windows, purging on). This crate's code is unchanged.

rusty_alloc-v2.2.6

Fixed

• A merged free span no longer hides a decommitted neighbour (Windows, purging on). When a freed span merged with an already-purged neighbour and the merged span was not re-purged as a whole (the purge failed, or purging had been switched off at runtime), the merged span kept a clear purged flag over the neighbour's decommitted memory, and the next allocation wrote to it: an access violation, reproduced as STATUS_ACCESS_VIOLATION. The merged span now keeps the flag if any part of it was purged, so it is re-committed before reuse. Cost: about 2 instructions per span free. Mechanism B of docs/plans/recommit-failure-ignored.md.

Commits

• 3e95fa4 Merge pull request #56 from Remade-With-Rust/fix/exit-hang-2.2.7
• b1211b1 chore: release v2.2.7 -- the ExitProcess hang fix alone, on 2.2.6
• 8956990 fix(init): skip heap teardown once ExitProcess has begun
• 61ae839 chore: release v2.2.6 -- the merged-span purge fix alone, on 2.2.5
• 967161c fix(segment): a merged free span keeps its neighbour's purged flag
• See full diff in compare view

Updates rusty_h264 from 0.16.0 to 0.16.1

Changelog

Sourced from rusty_h264's changelog.

Changelog

All notable changes to this project are documented here. The format is loosely based on Keep a Changelog; this project uses Semantic Versioning.

Unreleased

Security

Security-relevant changes are called out under this heading in every release, so a consumer deciding whether an upgrade is urgent does not have to read a diff.

• The decoder carries no production panic path. All 47 .unwrap()/.expect() sites in rusty_h264-decoder were removed. None was on the bitstream parse path -- they were lock poisoning, worker channels and internal invariants -- but a decoder eating attacker-controlled bytes should have no unwind primitive at all. Adds DecodeError::Internal (a breaking addition to a public enum). clippy::unwrap_used is now denied on every crate that reads untrusted input, so this cannot regress.
• Release builds enable overflow-checks. A silent wraparound on an offset derived from a hostile bitstream is now an abort rather than a wrong read.
• Windows binaries enable Control Flow Guard. The shipped PE goes DllCharacteristics 0x8160 -> 0xc160: ASLR, high-entropy ASLR, DEP and CFG.
• Two unwrap()s removed from rusty_h264-common's deblock path, found by the new lint policy.
• rust-version corrected from 1.80 to 1.85. The declared MSRV was wrong -- the code uses Option::is_none_or (1.82+), so consumers on 1.80/1.81 hit a compile error instead of cargo's clear "requires rustc 1.85" message.
• First full hardening audit (41 gates x 8 units): SECURITY.md, docs/threat-model.md, deny.toml, Cargo.lock now tracked, an SBOM, a coverage-guided fuzz suite, and a per-crate status table in every README.

Fixed

• P pictures with the loop filter off no longer lose their bottom macroblock row (#15). A slice ending in a run of P_Skip macroblocks leaves the run pending as a deferred span, and only deblock flushed it; with disable_deblocking_filter_idc == 1 (which x264 also writes on its own at low QP) the span was never reconstructed, leaving zero samples that later P pictures copied forward. Finalization now flushes deferred work when the filter is off. Gated by tests/nodeblock_skip_tail.rs against ffmpeg.

Commits

• 1a3d065 release: 0.16.1 -- the no_std decoder fix and the 2.2.6 allocator pin, alone,...
• See full diff in compare view

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.