deps(rust): bump the cargo group across 1 directory with 3 updates

[dependabot]

Bumps the cargo group with 3 updates in the / directory: rustls, webpki-roots and libc.

Updates rustls from 0.23.41 to 0.23.42

Commits

• 411fb02 Bump version to 0.23.42
• aff9845 implement rfc 9149 ticket_request extension
• 8bd3d1b server: add max_tls13_tickets configuration
• 4cce222 Address new std_instead_of_core in nightly
• d3ffdc1 Address new std_instead_of_core in nightly
• 75d1b7a Take semver-compatible dependency updates
• See full diff in compare view

Updates webpki-roots from 1.0.8 to 1.0.9

Release notes

Sourced from webpki-roots's releases.

1.0.9

Changes:

• Add "Telia EC TLS Root CA v3" and "Telia RSA TLS Root CA v3" - https://bugzilla.mozilla.org/show_bug.cgi?id=2047804
• Add "SECOM TLS ECC Root CA 2024" and "SECOM TLS RSA Root CA 2024" - https://bugzilla.mozilla.org/show_bug.cgi?id=1943001
• Remove "Atos TrustedRoot 2011" - https://bugzilla.mozilla.org/show_bug.cgi?id=2017374

What's Changed

• Take webpki-root-certs lockfile update by @​weifanglab in rustls/webpki-roots#125
• 1.0.9: upstream updates by @​ctz in rustls/webpki-roots#126

New Contributors

• @​weifanglab made their first contribution in rustls/webpki-roots#125

Full Changelog: rustls/webpki-roots@v/1.0.8...v/1.0.9

Commits

• 0a553db 1.0.9: upstream updates (#126)
• 1ce667b Take webpki-root-certs lockfile update (#125)
• See full diff in compare view

Updates libc from 0.2.186 to 0.2.188

Release notes

Sourced from libc's releases.

0.2.188

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

• uClibc now supports a similar configuration option:

  RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

As a reminder, these options are under active development and may change in the future (hence the "unstable" in the name). It likely that we will harmonize everything under a single configuration option before considering them stable.

Support

• Add support for aarch64-unknown-linux-pauthtest (#5065)
• Add support for new QNX targets (#5241)
• Better document breaking change policy and recommended usage (#5179)

Added

• Android: Add POSIX_SPAWN_* constants (#5104)
• Android: Add getpwent, setpwent, and endpwent (#5160)
• Android: Add preadv2 and pwritev2 (#5157)
• Android: Add seccomp_notif* structures (#5224)
• Android: Add timer_[create, delete, getoverrun, gettime, settime] (#5108)

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.188 - 2026-07-21

Changed

• Restore Send and Sync for DIR (35b062263401)

These were removed in 0.2.187 because libc does not actually make Send and Sync guarantees about DIR (or other extern types), but this caused some crates to break. The traits are added back for now to allow time to migrate, but will be removed again in the future; please make sure your crates are not relying on libc::DIR: Send or libc::DIR: Sync.

0.2.187 - 2026-07-20

This release contains a number of improvements related to 64-bit time_t configuration. Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

• The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

• uClibc now supports a similar configuration option:

  RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

As a reminder, these options are under active development and may change in the future (hence the "unstable" in the name). It likely that we will harmonize everything under a single configuration option before considering them stable.

Support

• Add support for aarch64-unknown-linux-pauthtest (#5065)
• Add support for new QNX targets (#5241)
• Better document breaking change policy and recommended usage (#5179)

Added

• Android: Add POSIX_SPAWN_* constants (#5104)
• Android: Add getpwent, setpwent, and endpwent (#5160)

... (truncated)

Commits

• 7b7b771 libc: Release 0.2.188
• ba6a6b5 [0.2] Restore Send and Sync for DIR
• ee05190 libc: Release 0.2.187
• 13b2218 unix: add preadv2 and pwritev2 to android
• abc9903 docs: Improve the pull request template and CONTRIBUTING.md
• c452b48 util: Restructure to use one class per subcommand
• cbc70c9 nuttx: more document comments
• 2589ea3 nuttx: add TCP_MAXSEG definitions
• 6be50c1 nuttx: add pipe2 definitions
• 4500344 nuttx: add poll definitions
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.