[dependabot]

Bumps the cargo group with 5 updates:

Package	From	To
brotli	9.0.0	9.1.1
brotli-decompressor	6.0.1	6.2.0
encoding_rs	0.8.42	0.8.44
log	0.4.34	0.4.35
utf8_iter	1.0.4	1.1.0

Updates brotli from 9.0.0 to 9.1.1

Commits

• a3cb931 release 9.1.1
• b47cb22 Refactor into a more legible reader
• e0efe1c BroCatli: hold back trailing header bytes and handle short and chunked streams
• afa8585 BroCatli: keep both header bytes when an empty stream straddles a byte boundary
• e951e7e brotli CLI: accept -bare and -bytealign with -catable, exit 1 when rejected
• c550341 Fix index out of bounds under the disallow_large_window_size feature
• 73e6947 Release 9.1.0
• 73766fc Forward portable float from the C FFI crate
• 6518a4e fix: correct BroCatli empty-stream concatenation for small windows
• See full diff in compare view

Updates brotli-decompressor from 6.0.1 to 6.2.0

Commits

• 072acf0 Release 6.2.0. Fix #80
• cc7ee0e return the correct error code for inputs that would trigger CVE-2026-111497 i...
• 611a3a1 add defautls to the metadata callback trait
• 326020f Add tests for metadata blocks and the metadata callbacks
• 677eef1 Report nonzero padding before a metadata or uncompressed block as PADDING_1
• d2be190 Implement the metadata callback so that a library can get a callback
• fdfccff Bump crate version
• 79c0e60 Copy dictionary words with two overlapping fixed-size copies instead of a byt...
• ab94f4c Let command stages fall through instead of re-dispatching on the state
• ec9f511 Look up Huffman trees when they change instead of caching every tree on each ...
• Additional commits viewable in compare view

Updates encoding_rs from 0.8.42 to 0.8.44

Commits

• 8e8556a Increment the version number to 0.8.44
• 084bb9b Update release notes
• 7f91341 Make convert_latin1_to_utf8_partial not write trailing garbage
• 4a7b515 Increment the version number to 0.8.43
• c9e3a85 Add defense-in-depth guard to convert_latin1_to_str_partial
• 73ddf13 Fix wrong function name in doc
• aaa3056 Relocate a misplaced doc remark
• bdb16cc Make it possible to enable serde without alloc
• 7723c91 Update release notes
• 8d4637c Fix an overflow on 32-bit targets
• Additional commits viewable in compare view

Updates log from 0.4.34 to 0.4.35

Release notes

Sourced from log's releases.

v0.4.35

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

• rework CI/CD to align with Rust project standards

Changelog

Sourced from log's changelog.

0.4.35 - 2026-10-30

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

• rework CI/CD to align with Rust project standards

Commits

• a46450b Update CHANGELOG.md
• a715f17 chore: release v0.4.35
• b4e2b12 Merge pull request #747 from rust-lang/chore/release-plz-mgnt
• 6b490b6 run fmt
• 2c7fd52 simplify some crate release tasks for easier automation
• 5bc5545 Merge pull request #745 from marcoienibot/release-plz-disable-semver-check
• 4234b8c Disable release-plz semver check
• 95918ff Merge pull request #744 from Kobzol/trusted-publishing
• e7ed747 Fix Zizmor lints
• e87a3c6 Setup trusted publishing
• Additional commits viewable in compare view

Updates utf8_iter from 1.0.4 to 1.1.0

Commits

• 17ac91e Depend on published utf_types
• f4bbfd8 Fix stale path
• f1bc959 Fix the safety comments
• 88ec22a Adapt to utf_types simplification
• bd3e80e Unsafe lints
• 326108b Document that perf improved
• 823ae7f Increment version number to 1.1.0
• 3a9f601 More clean-up
• 1d5e5cd Clean-up
• 2e64aa9 Remove the helpers module
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions