build(deps): update oneio requirement from 0.21 to 0.23

[dependabot]

Updates the requirements on oneio to permit the latest version.

Release notes

Sourced from oneio's releases.

v0.23.0

Added

• OneIo::to_lines_lossy — lossy line iterator from any Box<dyn Read + Send>
• read_lines_lossy / OneIo::read_lines_lossy — line iteration with invalid UTF-8 replaced by U+FFFD
• read_to_string_lossy / OneIo::read_to_string_lossy / read_to_string_lossy_async — full-file read with lossy UTF-8
• read_to_bytes / OneIo::read_to_bytes / read_to_bytes_async — byte-perfect read without UTF-8 validation
• --strict-utf8 CLI flag for strict UTF-8 validation in the CLI

Changed

• CLI now defaults to lossy UTF-8 reading; no longer exits on invalid byte sequences
• Documentation examples updated to use lossy APIs

Deprecated

• read_lines — use read_lines_lossy for lossy text, read_to_bytes for byte-perfect whole-file reads, or get_reader + BufReader for streaming byte processing
• read_to_string — use read_to_string_lossy or read_to_bytes
• read_to_string_async — use read_to_string_lossy_async or read_to_bytes_async

Changelog

Sourced from oneio's changelog.

v0.23.0 -- 2026-05-12

Added

• OneIo::to_lines_lossy — lossy line iterator from any Box<dyn Read + Send>
• read_lines_lossy / OneIo::read_lines_lossy — line iteration with invalid UTF-8 replaced by U+FFFD
• read_to_string_lossy / OneIo::read_to_string_lossy / read_to_string_lossy_async — full-file read with lossy UTF-8
• read_to_bytes / OneIo::read_to_bytes / read_to_bytes_async — byte-perfect read without UTF-8 validation
• --strict-utf8 CLI flag for strict UTF-8 validation in the CLI

Changed

• CLI now defaults to lossy UTF-8 reading; no longer exits on invalid byte sequences
• Documentation examples updated to use lossy APIs

Deprecated

• read_lines — use read_lines_lossy for lossy text, read_to_bytes for byte-perfect whole-file reads, or get_reader + BufReader for streaming byte processing
• read_to_string — use read_to_string_lossy or read_to_bytes
• read_to_string_async — use read_to_string_lossy_async or read_to_bytes_async

v0.22.0 -- 2026-05-01

Breaking changes

• Migrated S3 implementation from rust-s3 to rusty-s3 (sans-IO signing + reqwest HTTP)
  • s3_bucket() now returns S3Bucket instead of rust_s3::Bucket
  • s3_stats() now returns S3ObjectMetadata instead of rust_s3::serde_types::HeadObjectResult
  • Removed re-export of rust-s3 types; all S3 types are now owned by oneio
• s3_list() keeps returning Vec<String> for backward compatibility

Changed

• S3 operations now use the same reqwest HTTP client as HTTP operations (no duplicate HTTP stack)
• Single PUT uploads for files smaller than the multipart threshold (default: 5MB)
• Multipart uploads use 8MB chunks with auto-calculated part sizing for very large files
• S3Config is now a public type with endpoint/region fields
• Added ONEIO_S3_MULTIPART_THRESHOLD environment variable to configure when to use multipart upload (default: 5MB, the S3 minimum part size)

Bug fixes

• Fixed s3_copy() to use AWS Signature V4 Authorization header for S3-compatible services like R2
• Fixed digest command to work with remote URLs (HTTP, HTTPS, FTP, S3)
• Fixed s3_list() to decode URL-encoded keys returned by ListObjectsV2
• Fixed oneio s3 list CLI flag parsing by removing the -d short-flag collision

v0.21.0 -- 2026-03-27

Breaking changes

• OneIoError is now #[non_exhaustive]; match expressions without a wildcard _ arm will fail to compile
• OneIoBuilder::header() now accepts typed HeaderName/HeaderValue (infallible) instead of (K, V) -> Result<Self>
• OneIoBuilder::user_agent() now accepts a typed HeaderValue (infallible) instead of V -> Result<Self>
• oneio::download() no longer accepts an Option<reqwest::blocking::Client> parameter
• oneio::remote module is now pub(crate); create_client_with_headers is deprecated (use OneIo::builder().header_str())
• ProgressReader and ProgressCallback are no longer part of the public API

... (truncated)

Commits

• 36d1386 chore: bump version to v0.23.0
• 23a9279 Merge pull request #73 from bgpkit/dev/lossy-read
• 8021ab1 fix: address Copilot review round 2
• 7a7cded fix: address Copilot PR review comments
• 5b25a39 feat: add lossy UTF-8 reading variants and deprecate strict APIs
• 00e3d8d prepare v0.22.0 release
• 7078cce remove temporary doc
• 9db52d2 Merge pull request #71 from bgpkit/dev/migrate-to-rusty-s3
• 111ca0c ci: update actions/checkout from v4 to v5 (Node 22)
• 230140a ci: add S3 integration test job against Cloudflare R2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)