chore(deps): bump the all-cargo-dependencies group with 4 updates

[dependabot]

Bumps the all-cargo-dependencies group with 4 updates: rustls, time, toml and clap.

Updates rustls from 0.23.42 to 0.23.43

Commits

• fcf61cd Prepare 0.23.43
• f0dad4c Check server's proposed suite against actual offer
• b480cc6 Test for server choosing a non-QUIC TLS1.3 suite
• 883a44d Consider Protocol in ServerConfig::supports_version
• c2f1fd9 Check suitability of server version in QUIC client
• d98e1b9 Add test for server Tls13RequiredForQuic
• e63d9bf Bound ticket age calculation
• 79cd462 Defensiveness improvement for binder suffix arithmetic
• 4a9f025 use checked_sub for the mac tag offset in Rfc5077Ticketer::decrypt
• 3131e5c Accept that libcrux deps are vulnerable
• Additional commits viewable in compare view

Updates time from 0.3.54 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

• Avoid underflow in DateIter::nth, ensuring correct behavior.
• Avoid overflow when deserializing timestamps.
• Handle out-of-bounds data when deserializing.
• Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
• No longer silence errors when deserializing UtcOffset.
• OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
• OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

Commits

• 857d9c4 v0.3.55 release
• 2b72fcd Precise feature gating for macro
• c1089eb Run check-targets, miri in parallel
• f377fad Avoid range-validated ordinal => year in cascade
• 2eacb0a Report miscellaneous tasks, overall status
• 29621ac Speed up CI
• 08de7ba Fix nano-timestamp validation
• 3c3f046 Fix copy-paste error
• 3c0c81c Cascade errors when deserializing UtcOffset
• c21acd5 Handle more deserializations of SignedDuration
• Additional commits viewable in compare view

Updates toml from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0

Commits

• beee9fe chore: Release
• 16e2ac1 docs: Update changelog
• 89f5541 fix(toml): preserve datetimes when deserializing Value (#1194)
• 534039c fix(serde): Deserialize Value datetimes into typed targets
• 6e45cef test(serde): Reproduce Value datetime deserialization error
• 4ec099f chore: Release
• 5a47a51 docs: Update changelog
• da0911f perf(parser): Reduce over allocation by better tokens/byte ratio (#1193)
• 26eb157 perf(parser): Reduce over allocation by better tokens/byte ratio
• ca4c7bf chore(deps): Update Prek to v0.4.11 (#1191)
• Additional commits viewable in compare view

Updates clap from 4.6.4 to 4.6.5

Release notes

Sourced from clap's releases.

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

Changelog

Sourced from clap's changelog.

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

Commits

• c8c9355 chore: Release
• af74def docs: Update changelog
• c96f222 Merge pull request #6368 from truffle-dev/fix/fish-env-escaping
• 49a05cd fix(complete): Two-pass quote fish env-completer
• e791004 test(complete): Snapshot fish env quoting cases
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions