deps: bump the cargo-patch-and-minor group across 1 directory with 4 updates

[dependabot]

Bumps the cargo-patch-and-minor group with 4 updates in the / directory: glib, lru, reqwest and nom-exif.

Updates glib from 0.22.8 to 0.22.9

Release notes

Sourced from glib's releases.

0.22.9

Bilal Elmoussaoui:
      Bump syn to 3.0
Sebastian Dröge:

Update gir / gir-files

Regenerate with latest gir / gir-files

Fix some Rust 1.97 clippy warnings

deny: Allow duplicated syn 2.0 dependency

cairo-sys: Update to system-deps 8

pango: Add new enums

pango: Add bindings for new width attribute

pangocairo: Add new pango RenderComponent API

pango: Add v1_58 feature

pangocairo: Mark cairo context parameter as const

gio: Manually implement new UnixFDList API with correct types

glib: Add new nanosecond timeout source API

glib-macros: Use TypeFlags::empty() instead of ::NONE

glib: Use RegexMatchFlags::empty() instead of DEFAULT

gio: Only require gio 2.89 for v2_90

gio: Only return the result from spawn_blocking() from the task completion callback

glib: Drain any remaining, pending sources after MainContext::block_on()

gio: Fix new 1.98 clippy warning

cairo: Update to system-deps 9

Update Cargo.lock

deny: Remove syn 2 override

glib: Re-add default flags member for RegexMatchFlags / RegexCompileFlags without version guard

Update versions to 0.22.9
Sophie Herold:

security: Update crossbeam-epoch to 0.9.20
Yang Lin:

fix: g_free alignments return from pango_tab_array_get_tabs

fix: call g_free on the return value of g_filename_from_utf8 after the end of its lifetime

fix: Pack the return value early so that the rustc compiler can generate the drop glue on the error path when matches!(status, err)

fix: definitely memory leak happens on the paths of from_glib_none and from_glib_full
Zachary S:

glib: Use Ref(Mut)::filter_map in BoxedAnyObject::try_borrow(_mut).
Ángel Guzmán Maeso:

gio: Don't require the arguments of run() to be valid UTF-8

Commits

• 00a448f glib: Re-add default flags member for RegexMatchFlags / RegexCompileFlags wit...
• c0ce5d1 deny: Remove syn 2 override
• 1269a10 Update Cargo.lock
• 84936e9 cairo: Update to system-deps 9
• fa1e1f8 fix: definitely memory leak happens on the paths of from_glib_none and
• ac6dcaa fix: Pack the return value early so that the rustc
• 59869b2 fix: call g_free on the return value of g_filename_from_utf8 after
• 2b828d7 fix: g_free alignments return from pango_tab_array_get_tabs
• e2c8591 gio: Fix new 1.98 clippy warning
• cdd4189 gio: Don't require the arguments of run() to be valid UTF-8
• Additional commits viewable in compare view

Updates lru from 0.18.3 to 0.18.4

Changelog

Sourced from lru's changelog.

v0.18.4 - 2026-09-02

• Add retain method.

Commits

• 2504ad0 Merge pull request #245 from jeromefroe/jerome/prepare-0-18-4-release
• 419b047 Prepare 0.18.4 release
• 05ba36e Merge pull request #241 from ChrisJr404/add-retain
• d84bc5e Revert retain to the simpler removal implementation
• 36a810e Potential fix for pull request finding
• e0d578c Merge remote-tracking branch 'up/master' into add-retain
• 6e6ff26 retain: free the node returned by the map to avoid a dangling entry
• 349676f Add retain method
• See full diff in compare view

Updates reqwest from 0.13.4 to 0.13.5

Release notes

Sourced from reqwest's releases.

v0.13.5

tl;dr

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

What's Changed

• fix(blocking): preserve version and extensions in TryFromhttp::Request by @​wwhsaber in seanmonstar/reqwest#3050
• Remove unnecessary clones by @​FranciscoTGouveia in seanmonstar/reqwest#3052
• Add Referrer and Referrer Policy methods to WASM Request API by @​Billy-Sheppard in seanmonstar/reqwest#3049
• chore(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in seanmonstar/reqwest#3058
• feat: add Error::is_dns() to identify DNS resolution failures by @​JoakoI98 in seanmonstar/reqwest#3057
• Fix blocking client timeout panic by @​V-Mann-Nick in seanmonstar/reqwest#3060
• Use LookupIpStrategy::Ipv6AndIpv4 to actually prefer IPv6 when using hickory-dns by @​FalkWoldmann in seanmonstar/reqwest#3063
• feat: Add ClientBuilder::http1_max_headers by @​smaeda-ks in seanmonstar/reqwest#3065
• feat: expose the negotiated TLS version via TlsInfo by @​dennisameling in seanmonstar/reqwest#3067
• fix(error): detect timeouts wrapped in body decode errors by @​raphaelroshan in seanmonstar/reqwest#3064
• Remove unnecessary clones and a cast by @​FranciscoTGouveia in seanmonstar/reqwest#3071
• chore(deps): upgrade base64 to 0.23 by @​paolobarbolini in seanmonstar/reqwest#3074
• perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody by @​spellsaif in seanmonstar/reqwest#3085
• fix(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture::poll by @​spellsaif in seanmonstar/reqwest#3084
• src/async_impl/request.rs_improved_doc_for_json_fn: by @​Athleteg in seanmonstar/reqwest#3082
• fix: proxy could use wrong credentials if many matched by @​seanmonstar in seanmonstar/reqwest#3098

New Contributors

• @​wwhsaber made their first contribution in seanmonstar/reqwest#3050
• @​FranciscoTGouveia made their first contribution in seanmonstar/reqwest#3052
• @​Billy-Sheppard made their first contribution in seanmonstar/reqwest#3049
• @​JoakoI98 made their first contribution in seanmonstar/reqwest#3057
• @​V-Mann-Nick made their first contribution in seanmonstar/reqwest#3060
• @​FalkWoldmann made their first contribution in seanmonstar/reqwest#3063
• @​smaeda-ks made their first contribution in seanmonstar/reqwest#3065
• @​raphaelroshan made their first contribution in seanmonstar/reqwest#3064
• @​spellsaif made their first contribution in seanmonstar/reqwest#3085
• @​Athleteg made their first contribution in seanmonstar/reqwest#3082

Full Changelog: seanmonstar/reqwest@v0.13.4...v0.13.5

Changelog

Sourced from reqwest's changelog.

v0.13.5

• Add Error::is_dns() to identify errors caused by DNS resolution failures.
• Add ClientBuilder::http1_max_headers(usize) to configure the maximum number of headers accepted in an HTTP/1 response (default 100).
• Add TLS version to TlsInfo extension.
• Fix hickory-dns feature to use Ipv6AndIpv4 strategy to prefer IPv6.
• Fix sending wrong proxy-auth if multiple proxies intercept a given URL.

Commits

• de55373 v0.13.5
• 4d3fe12 fix: proxy could use wrong credentials if many matched (#3098)
• 9f06fd2 docs: improve description of JSON method (#3082)
• 5bdb2f0 perf(cookie): avoid cloning store and url on Poll::Pending in ResponseFuture:...
• ffda263 perf(body): reuse tokio::time::Sleep timer via reset() in ReadTimeoutBody (#3...
• 4e9a3c7 chore: add pull request template for human-written content
• 17e9bcb chore(deps): upgrade base64 to 0.23 (#3074)
• 221abe9 chore: Remove unnecessary clones and a cast (#3071)
• 99996a1 fix(error): detect timeouts wrapped in body decode errors (#3064)
• fc99bd5 feat: expose the negotiated TLS version via TlsInfo (#3067)
• Additional commits viewable in compare view

Updates nom-exif from 3.7.0 to 3.8.0

Changelog

Sourced from nom-exif's changelog.

nom-exif v3.8.0 (2026-09-07)

Added

• IFD namespaces — entries now report which IFD namespace they came from, via the new IfdKind enum (Tiff / Exif / Gps / Interop). This is orthogonal to IfdIndex, which continues to identify a position in the IFD chain: a GPS sub-IFD hanging off IFD0 is IfdIndex::MAIN + IfdKind::Gps.

  • ExifIterEntry::ifd_kind() on the lazy path.
  • Exif::entries() yielding the new ExifEntryRef on the eager path, plus Exif::get_by_code_in(ifd, kind, code).
  • TagOrCode::from_code_in(kind, code) and ExifTag::namespace() for namespace-aware tag resolution.
  • New ExifTag variants that were previously unnameable because their code was already taken: ProcessingSoftware, InteropIndex, InteropVersion. #68

• Interoperability sub-IFD is now parsed — InteropOffset (0xa005) is followed like ExifOffset and GPSInfo, so InteropIndex / InteropVersion entries are exposed instead of silently skipped. Files carrying an Interop IFD yield two extra entries.

Fixed

• Entries were silently dropped when two IFDs shared a tag code — sub-IFDs inherit their parent's IfdIndex, and the duplicate filter keyed on (ifd_index, code), so a GPS tag whose code also appeared in IFD0 was discarded as a duplicate. A file with 0x000b in both IFD0 (ProcessingSoftware) and the GPS IFD (GPSDOP) lost the GPS value entirely. The filter and Exif's internal storage are now keyed on (ifd_index, ifd_kind, code). #68

• Tags were labelled with another namespace's name — codes were resolved against a single flat table, so IFD0's 0x000b (ProcessingSoftware) was reported as GPSDOP. Resolution now happens within the entry's namespace. #68

• PNG metadata before a large chunk was discarded on streaming sources — metadata found before a chunk larger than the parser buffer was lost when parsing resumed after ClearAndSkip, so an eXIf chunk preceding a large IDAT returned ExifNotFound for streaming sources even though the same bytes parsed fine from memory. The PNG cursor, EXIF source, tEXt entries and source priority are now carried across retries; zero-copy eXIf ranges are preserved while the buffer grows and materialized only before destructive skips, with retained copies bounded at 64 MiB. Thanks @​nkgupta-dev.

... (truncated)

Commits

• fe72efc release: nom-exif v3.8.0 (2026-09-07) — IFD namespaces (#68) and PNG streamin...
• 6f4333c feat(exif): distinguish tags by IFD namespace (#68)
• af3bf53 fix(png): preserve metadata across streaming skips
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud