chore(deps): bump the dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the dependencies group with 3 updates in the /rust directory: chrono, js-sys and rust_xlsxwriter.

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

• fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @​SAY-5 in chronotope/chrono#1787
• tz_data: fix tzdata locations on Android by @​caruschalalamove in chronotope/chrono#1789

Commits

• 1703382 Prepare 0.4.45 release
• 881f9ab tz_data: fix tzdata locations on Android
• f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
• c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
• 120686c Bump codecov/codecov-action from 5 to 6
• See full diff in compare view

Updates js-sys from 0.3.95 to 0.3.100

Commits

• See full diff in compare view

Updates rust_xlsxwriter from 0.94.0 to 0.95.0

Changelog

Sourced from rust_xlsxwriter's changelog.

[0.95.0] - 2026-05-09

Added

• Added an optional dependency on the zmij crate to speed up writing numeric worksheet data. The feature flag is zmij.

  This feature gives an appoximate 10% performance increase in writing numeric data to a worksheet. See the performance analysis in [Issue #170]. The performance is better than the [ryu] crate, which is by the same author and has the same interface. As such, the ryu feature/crate is deprecated in favour of the zmij feature/crate.

  [Issue #170]: jmcnamara/rust_xlsxwriter#170

[0.94.1] - 2026-05-06

Fixed

• Fixed issue where escaped URLs were double escaped due to case-sensitivity.

  [Issue #175].

  [Issue #175]: jmcnamara/rust_xlsxwriter#175

• Fixed issue where chart titles containing brackets were ignored and not added.

  [Issue #173].

  [Issue #173]: jmcnamara/rust_xlsxwriter#173

Commits

• d22a6e7 release: 0.95.0
• 994fe4f feature: add optional zmij crate support
• 1ba584b release: 0.94.1
• f9188e9 clippy: update for v1.95
• 3faa749 url: fix check for escaped urls
• fa298ae chart: allow brackets in chart title
• 9a34c82 utility: minor refactor
• See full diff in compare view

Updates wasm-bindgen from 0.2.118 to 0.2.123

Release notes

Sourced from wasm-bindgen's releases.

0.2.123

Added

• Added the maxAge attribute to the CookieInit dictionary in web-sys, matching the current Cookie Store API specification. #5169

• The js-sys futures codegen opt-in can now also be enabled via the WASM_BINDGEN_USE_JS_SYS=1 environment variable, in addition to --cfg=wasm_bindgen_use_js_sys. This works on stable when --target is in use, where Cargo does not propagate the cfg to host proc-macros. #5164

Changed

• JsOption<T> now treats only undefined as empty, aligning it with TypeScript's strict T | undefined semantics and with Option<T>'s wire shape (None ↔ undefined). Previously is_empty, as_option, into_option, unwrap, expect, unwrap_or_default, and unwrap_or_else treated both null and undefined as absent; JS null is now a distinct present value. The impl<T> UpcastFrom<Null> for JsOption<T> is removed (Undefined still models absence), and the Debug/Display absent placeholder changed from "null" to "undefined". Code relying on null → None should return undefined from the JS side, or check explicitly with val.as_option().filter(|v| !v.is_null()). #5170

Fixed

• Removed invalid js_sys::Array<T> to js_sys::ArrayTuple<(...)> upcasts. ArrayTuple encodes a fixed tuple arity, while a plain JavaScript array does not prove that arity statically.

• Fixed incorrect variance in &mut reference upcasting. &mut T upcasts were covariant in the pointee, so a &mut T could be widened to a &mut of a supertype and used to write back a value the original type would not accept, leaving a reference whose static type no longer matches the value it points to. Mutable references are now invariant in their pointee: &mut T only upcasts to &mut Target when both Target: UpcastFrom<T> and T: UpcastFrom<Target> hold. This rejects the invalid widening but is a breaking change for callers that relied on widening &mut references. #5176

• Fixed WASI targets (wasm32-wasip1/wasm32-wasip2) emitting unresolved __wbindgen_placeholder__ imports, which broke component linking. The codegen and runtime gates now exclude target_os = "wasi" (restoring the pre-0.2.115 stub behavior), including the panic = "unwind" paths in wasm-bindgen-futures. #5175

... (truncated)

Changelog

Sourced from wasm-bindgen's changelog.

0.2.123

Added

• Added the maxAge attribute to the CookieInit dictionary in web-sys, matching the current Cookie Store API specification. #5169

• The js-sys futures codegen opt-in can now also be enabled via the WASM_BINDGEN_USE_JS_SYS=1 environment variable, in addition to --cfg=wasm_bindgen_use_js_sys. This works on stable when --target is in use, where Cargo does not propagate the cfg to host proc-macros. #5164

Changed

• JsOption<T> now treats only undefined as empty, aligning it with TypeScript's strict T | undefined semantics and with Option<T>'s wire shape (None ↔ undefined). Previously is_empty, as_option, into_option, unwrap, expect, unwrap_or_default, and unwrap_or_else treated both null and undefined as absent; JS null is now a distinct present value. The impl<T> UpcastFrom<Null> for JsOption<T> is removed (Undefined still models absence), and the Debug/Display absent placeholder changed from "null" to "undefined". Code relying on null → None should return undefined from the JS side, or check explicitly with val.as_option().filter(|v| !v.is_null()). #5170

Fixed

• Removed invalid js_sys::Array<T> to js_sys::ArrayTuple<(...)> upcasts. ArrayTuple encodes a fixed tuple arity, while a plain JavaScript array does not prove that arity statically.

• Fixed incorrect variance in &mut reference upcasting. &mut T upcasts were covariant in the pointee, so a &mut T could be widened to a &mut of a supertype and used to write back a value the original type would not accept, leaving a reference whose static type no longer matches the value it points to. Mutable references are now invariant in their pointee: &mut T only upcasts to &mut Target when both Target: UpcastFrom<T> and T: UpcastFrom<Target> hold. This rejects the invalid widening but is a breaking change for callers that relied on widening &mut references. #5176

• Fixed WASI targets (wasm32-wasip1/wasm32-wasip2) emitting unresolved __wbindgen_placeholder__ imports, which broke component linking. The codegen and runtime gates now exclude target_os = "wasi" (restoring the pre-0.2.115 stub behavior), including the panic = "unwind" paths in wasm-bindgen-futures.

... (truncated)

Commits

• 861696a Release 0.2.123 (#5188)
• c667a97 fix: remove Upcast from Array to ArrayTuple (#5185)
• 4f674f2 fix: mutable reference variance (#5183)
• edb2c00 Discover wasm64 main (#5181)
• bd27e9a Fix unresolved wbindgen_placeholder imports on WASI targets (#5175)
• b49c851 fix(cli-support): handle i64 (width-8) loads in the descriptor interpreter (#...
• bf5261a Polyfill WebAssembly.JSTag for legacy EH on Node 20+ (#5168)
• 04e946e Allow opting into js-sys futures codegen via env var (#5164)
• cc60a51 Reuse LazyCell in js-sys (#5172)
• 0621e40 JsOption: strict undefined-only emptiness (#5170)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions