chore(deps-rust)(deps): bump the rust-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the rust-dependencies group with 3 updates in the / directory: time, uuid and refinery.

Updates time from 0.3.47 to 0.3.49

Release notes

Sourced from time's releases.

v0.3.49

See the changelog for details.

v0.3.48

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.49 [2026-06-13]

Fixed

• Due to a long-standing bug in the Rust compiler, v0.3.48 caused a number of crates to stop compiling. A patch has been added that avoids triggering the bug.

0.3.48 [2026-06-12] [YANKED]

Security

• The number of digits parsed by [subsecond digits:1+] is capped at 32 to avoid parsing unbounded user input. Digits after the 9th have no semantic meaning.
• Explicitly specify #[repr] for Weekday. The value of the variants is relied upon in multiple locations for soundness. The practical effect of this change is nothing, as Rust has always mapped C-like enums to 0..N in memory.

Compatibility

• Non-UTF-8 formatting and parsing is deprecated without replacement. It is recommended to only format and parse valid UTF-8.
• format_description::parse is deprecated. It is recommended to use format_description::parse_borrowed::<3> or format_description::parse_owned::<3>.

Added

• All types in the unit module have a generic parameter, though this is currently not used for much. Usage will be expanded in the future.
• Comparisons between types in the unit module and the generic Unit type are permitted.
• Support for rand 0.10
• Version 3 format descriptions
  • Only UTF-8 is supported. As a side effect of this, [ignore] requires that the remaining input not begin mid-codepoint.
  • Representation is deliberately opaque to allow for arbitrary changes going forward.
  • format:false is supported on [optional] components. This is not possible in version 1 and version 2 format descriptions due to API compatibility.
  • The time::serde::format_description! macro uses a new, clearer syntax for version 3.
    • time::serde::format_description!(mod foo [Date] = "[year]-[month]-[day]");
    • Unlike version 1 and version 2 format descriptions, the type is not automatically brought into scope. You must import it yourself.
  • Nonsensical combinations of modifiers are rejected. For example, you cannot specify case-sensitivity when parsing a numerical month.
  • [year] defaults to range:standard
  • Components and modifiers are case sensitive (and always lowercase).

Changed

• The convert module has been renamed to unit.

Fixed

... (truncated)

Commits

• ff8683c v0.3.49 release
• f189886 fix: resolve E0119 trait coherence error in rustc >= 1.95.0
• 5d8737c v0.3.48 release
• 1bfca87 Use widen instead of extend in sys code
• c57284f fix: return error instead of panicking on truncated strftime padding modifier
• a74f35f Use v3 format descriptions for serde defaults
• 96ff36c Allow eliding serde format description version
• edc58b1 Permit duplicates in v1/v2 in permit_modifiers!
• a838f69 Bump codecov action
• f2f99f8 Fix unused warning
• Additional commits viewable in compare view

Updates uuid from 1.23.2 to 1.23.3

Release notes

Sourced from uuid's releases.

v1.23.3

What's Changed

• Fix up parser panic on empty input by @​KodrAus in uuid-rs/uuid#886
• Prepare for 1.23.3 release by @​KodrAus in uuid-rs/uuid#887

Full Changelog: uuid-rs/uuid@v1.23.2...v1.23.3

Commits

• 20da78b Merge pull request #887 from uuid-rs/cargo/v1.23.3
• 62232ca prepare for 1.23.3 release
• 2320c6a Merge pull request #886 from uuid-rs/fix/parser-panics
• 2d034d4 fix some invalid indexers on error reporting
• a8b9f14 update fuzz infra and run in CI
• See full diff in compare view

Updates refinery from 0.9.1 to 0.9.2

Release notes

Sourced from refinery's releases.

V0.9.2

[0.9.2] - 2026-06-09

Added

• Support for rustls as a TLS backend for tokio-postgres via the new tokio-postgres-rustls feature. #426

Changed

• Make TLS opt-in for postgres and tokio-postgres features. The postgres and tokio-postgres features no longer pull in native-tls unconditionally. Use postgres-tls and tokio-postgres-tls features for TLS support. #408
• Support rusqlite 0.39.x. #425
• Support mysql up to 0.28.x and mysql_async up to 0.37.x. #436
• Update toml dependency to 1.1.2. #430

Changelog

Sourced from refinery's changelog.

[0.9.2] - 2026-06-09

Added

• Support for rustls as a TLS backend for tokio-postgres via the new tokio-postgres-rustls feature. #426

Changed

• Make TLS opt-in for postgres and tokio-postgres features. The postgres and tokio-postgres features no longer pull in native-tls unconditionally. Use postgres-tls and tokio-postgres-tls features for TLS support. #408
• Support rusqlite 0.39.x. #425
• Support mysql up to 0.28.x and mysql_async up to 0.37.x. #436
• Update toml dependency to 1.1.2. #430

Commits

• bc1a829 Prepare 0.9.2 (#437)
• 46721b3 Bump mysql to 0.28.x and mysql_async to 0.37.x (#436)
• d6ba618 backport 0.9.1 (#423) (#434)
• 458951a Bump openssl from 0.10.78 to 0.10.80 (#432)
• 14354f5 fix (#430)
• 6074795 Allow running tokio-postgres with rustls (#426)
• f4b23ea chore: Support rusqlite 0.39.x (#425)
• fc7848f Bump openssl from 0.10.73 to 0.10.78 (#427)
• c4f819b Bump rand from 0.9.2 to 0.9.4 (#422)
• ff809c8 do not log warning on nested dirs when finding migrations (#421)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Thank you for contributing to this project with this PR, welcome to the community and the amazing world of open source!

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​refinery@​0.9.1 ⏵ 0.9.2
	cargo/​time@​0.3.47 ⏵ 0.3.49
	cargo/​uuid@​1.23.2 ⏵ 1.23.3

View full report

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.