Bump the minor-and-patch group across 1 directory with 6 updates

[dependabot]

Bumps the minor-and-patch group with 6 updates in the /neurons directory:

Package	From	To
anyhow	1.0.97	1.0.100
camino	1.1.9	1.2.2
serde	1.0.219	1.0.228
serde_json	1.0.140	1.0.149
web-sys	0.3.81	0.3.85
uuid	1.16.0	1.20.0

Updates anyhow from 1.0.97 to 1.0.100

Release notes

Sourced from anyhow's releases.

1.0.100

• Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#426)

1.0.99

• Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#420)

1.0.98

• Add self.into_boxed_dyn_error() and self.reallocate_into_boxed_dyn_error_without_backtrace() methods for anyhow::Error (#415)

Commits

• 18c2598 Release 1.0.100
• f271988 Merge pull request #426 from dtolnay/clippyfmt
• 52f2115 Mark macros with clippy::format_args
• da5fd9d Raise minimum tested compiler to rust 1.76
• 211e409 Opt in to generate-macro-expansion when building on docs.rs
• b48fc02 Enforce trybuild >= 1.0.108
• d5f59fb Update ui test suite to nightly-2025-09-07
• 238415d Update ui test suite to nightly-2025-08-24
• 3bab070 Update actions/checkout@v4 -> v5
• 4249254 Order cap-lints flag in the same order as thiserror build script
• Additional commits viewable in compare view

Updates camino from 1.1.9 to 1.2.2

Release notes

Sourced from camino's releases.

camino 1.2.2

Added

On Rust 1.91 and above:

• Utf8PathBuf::add_extension
• Utf8Path::file_prefix
• Utf8Path::with_added_extension
• Utf8PathBuf::new is a const fn.

camino 1.2.1

Fixed

Replaced obsolete doc_auto_cfg with doc_cfg, to fix Rust nightly builds with the doc_cfg flag enabled.

camino 1.2.0

Changed

• MSRV updated to Rust 1.61 to support the switch to serde_core.
• camino now depends on serde_core rather than serde. This allows camino's compilation to be parallelized with serde_derive.
• serde and proptest are no longer available as features. This is technically a breaking change, but these features were already no-ops. Instead, use serde1 and proptest1 respectively.

camino 1.1.12

Added

• Utf8PathBuf::from_os_string and Utf8Path::from_os_str conversions.
• TryFrom<OsString> for Utf8PathBuf and TryFrom<&OsStr> for &Utf8Path conversions.

Thanks to BenjaminBrienen for your first contribution!

camino 1.1.11

Added

• Utf8PathBuf::leak on Rust 1.89 and above.

camino 1.1.10

Changed

• Hand-write serde implementations, dropping the dependency on serde_derive. Thanks to Enselic for initiating the discussion and for your first contribution!

Changelog

Sourced from camino's changelog.

[1.2.2] - 2025-12-14

Added

On Rust 1.91 and above:

• Utf8PathBuf::add_extension
• Utf8Path::file_prefix
• Utf8Path::with_added_extension
• Utf8PathBuf::new is a const fn.

[1.2.1] - 2025-09-29

Fixed

Replaced obsolete doc_auto_cfg with doc_cfg, to fix Rust nightly builds with the doc_cfg flag enabled.

[1.2.0] - 2025-09-14

Changed

• MSRV updated to Rust 1.61 to support the switch to serde_core.
• camino now depends on serde_core rather than serde. This allows camino's compilation to be parallelized with serde_derive.
• serde and proptest are no longer available as features. This is technically a breaking change, but these features were already no-ops. Instead, use serde1 and proptest1 respectively.

[1.1.12] - 2025-08-26

Added

• Utf8PathBuf::from_os_string and Utf8Path::from_os_str conversions.
• TryFrom<OsString> for Utf8PathBuf and TryFrom<&OsStr> for &Utf8Path conversions.

Thanks to BenjaminBrienen for your first contribution!

[1.1.11] - 2025-08-17

Added

• Utf8PathBuf::leak on Rust 1.89 and above.

[1.1.10] - 2025-06-02

Changed

• Hand-write serde implementations, dropping the dependency on serde_derive. Thanks to Enselic for initiating the discussion and for your first contribution!

Commits

• 0a908a3 [camino] version 1.2.2
• eb1d7c9 [meta] prepare release
• 679538a add Path and PathBuf methods added in Rust 1.91 (#119)
• 73c7a36 chore: minor improvement for docs (#115)
• 60f0971 attempt to fix build on older Rust versions (#116)
• 28e15db [camino] version 1.2.1
• f32d994 prepare release
• ea187e4 remove doc_auto_cfg (#114)
• b0c8086 remove references to dead features from README
• 62ddbaa [camino] version 1.2.0
• Additional commits viewable in compare view

Updates serde from 1.0.219 to 1.0.228

Release notes

Sourced from serde's releases.

v1.0.228

• Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

v1.0.227

• Documentation improvements (#2991)

v1.0.226

• Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @​Mingun)

v1.0.225

• Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @​rcrisanti)

v1.0.224

• Remove private types being suggested in rustc diagnostics (#2979)

v1.0.223

• Fix serde_core documentation links (#2978)

v1.0.222

• Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @​aytey)

v1.0.221

• Documentation improvements (#2973)
• Deprecate serde_if_integer128! macro (#2975)

v1.0.220

• Add a way for data formats to depend on serde traits without waiting for serde_derive compilation: https://docs.rs/serde_core (#2608, thanks @​osiewicz)

Commits

• a866b33 Release 1.0.228
• 5adc9e8 Merge pull request #2995 from dtolnay/rustdocflags
• ab58178 Workaround for RUSTDOCFLAGS='--cfg=docsrs'
• 415d9fc Release 1.0.227
• 7c58427 Merge pull request #2991 from dtolnay/inlinecoredoc
• 9d3410e Merge pull request #2992 from dtolnay/inplaceseed
• 2fb6748 Remove InPlaceSeed public re-export
• f8137c7 Inline serde_core into serde in docsrs mode
• b7dbf7e Merge pull request #2990 from dtolnay/integer128
• 7c83691 No longer macro_use integer128 module
• Additional commits viewable in compare view

Updates serde_json from 1.0.140 to 1.0.149

Release notes

Sourced from serde_json's releases.

v1.0.149

• Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @​b41sh)

v1.0.148

• Update zmij dependency to 1.0

v1.0.147

• Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

v1.0.146

• Set fast_arithmetic=64 for riscv64 (#1305, thanks @​Xeonacid)

v1.0.145

• Raise serde version requirement to >=1.0.220

v1.0.144

• Switch serde dependency to serde_core (#1285)

v1.0.143

• Implement Clone and Debug for serde_json::Map iterators (#1264, thanks @​xlambein)
• Implement Default for CompactFormatter (#1268, thanks @​SOF3)
• Implement FromStr for serde_json::Map (#1271, thanks @​mickvangelderen)

v1.0.142

• impl Default for &Value (#1265, thanks @​aatifsyed)

v1.0.141

• Optimize string escaping during serialization (#1273, thanks @​conradludgate)

Commits

• 4f6dbfa Release 1.0.149
• f3df680 Touch up PR 1306
• e16730f Merge pull request #1306 from b41sh/fix-float-number-display
• eeb2bcd Align arbitrary_precision number strings with zmij’s formatting
• 8b291c4 Release 1.0.148
• 1aefe15 Update to zmij 1.0
• 62d6e8d Release 1.0.147
• fd829a6 Merge pull request #1304 from dtolnay/zmij
• e757a3d Switch from ryu -> zmij for float formatting
• 75ad7e6 Release 1.0.146
• Additional commits viewable in compare view

Updates web-sys from 0.3.81 to 0.3.85

Commits

• See full diff in compare view

Updates uuid from 1.16.0 to 1.20.0

Release notes

Sourced from uuid's releases.

v1.20.0

What's Changed

• Derive Ord and PartialOrd for NonNilUuid by @​mivort in uuid-rs/uuid#854
• Implement Deserialize on adapter types by @​KodrAus in uuid-rs/uuid#855
• Deprecate macro-diagnostics by @​KodrAus in uuid-rs/uuid#856
• Prepare for 1.20.0 release by @​KodrAus in uuid-rs/uuid#857

New Contributors

• @​mivort made their first contribution in uuid-rs/uuid#854

Full Changelog: uuid-rs/uuid@v1.19.0...v1.20.0

v1.19.0

What's Changed

• Switch serde dependency to serde_core by @​paolobarbolini in uuid-rs/uuid#843
• Upgrade to 2021 edition and fix most clippy warnings by @​paolobarbolini in uuid-rs/uuid#848
• Prepare for 1.19.0 release by @​KodrAus in uuid-rs/uuid#849

Full Changelog: uuid-rs/uuid@v1.18.1...v1.19.0

v1.18.1

What's Changed

• Unsafe cleanup by @​KodrAus in uuid-rs/uuid#841
• Prepare for 1.18.1 release by @​KodrAus in uuid-rs/uuid#842

Full Changelog: uuid-rs/uuid@v1.18.0...v1.18.1

v1.18.0

What's Changed

• Fix up mismatched_lifetime_syntaxes lint by @​KodrAus in uuid-rs/uuid#837
• Conversions between Timestamp and std::time::SystemTime by @​dcormier in uuid-rs/uuid#835
• Wrap the error type used in time conversions by @​KodrAus in uuid-rs/uuid#838
• Prepare for 1.18.0 release by @​KodrAus in uuid-rs/uuid#839

New Contributors

• @​dcormier made their first contribution in uuid-rs/uuid#835

Full Changelog: uuid-rs/uuid@v1.17.0...v1.18.0

v1.17.0

What's Changed

• Added convenience implementation TryFrom for std by @​Nahuel-M in uuid-rs/uuid#819
• Update OSX builds to arm by @​KodrAus in uuid-rs/uuid#825
• Replace derive(Hash) with manual impl in Uuid by @​diopoex in uuid-rs/uuid#824
• Add wasm32v1-none Support by @​bushrat011899 in uuid-rs/uuid#828
• Prepare for 1.17.0 release by @​KodrAus in uuid-rs/uuid#829

New Contributors

... (truncated)

Commits

• c3346dd Merge pull request #857 from uuid-rs/cargo/v1.20.0
• 66eebc3 prepare for 1.20.0 release
• 3b66758 Merge pull request #856 from uuid-rs/docs/bytes-le-ordering
• e2bdd44 don't run UI tests in wasm
• b6dc7ec note that ordering applies to fields in to/from_bytes_le
• a0281cd Merge pull request #855 from uuid-rs/feat/serde-fmt
• db27b67 Merge pull request #854 from mivort/non-nil-uuid-ord
• efb06f2 implement Deserialize on adapter types
• 50d44ad Derive Ord and PartialOrd for NonNilUuid
• 7527cef Merge pull request #849 from uuid-rs/cargo/v1.19.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	web-sys@​0.3.81 ⏵ 0.3.85
	anyhow@​1.0.97 ⏵ 1.0.101
	wasm-bindgen@​0.2.104 ⏵ 0.2.108
	camino@​1.1.9 ⏵ 1.2.2	+3		+3
	uuid@​1.16.0 ⏵ 1.21.0

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		License policy violation: cargo foldhash under Zlib Location: Package overview From: ? → cargo/uuid@1.21.0 → cargo/foldhash@0.1.5 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/foldhash@0.1.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report