chore(deps): bump the root-deps group across 1 directory with 6 updates

[dependabot]

Bumps the root-deps group with 6 updates in the / directory:

Package	From	To
rustls	0.23.38	0.23.39
cc	1.2.60	1.2.61
hybrid-array	0.4.10	0.4.11
libc	0.2.185	0.2.186
rustls-pki-types	1.14.0	1.14.1
rustls-webpki	0.103.12	0.103.13

Updates rustls from 0.23.38 to 0.23.39

Commits

• 0541605 Cargo: version 0.23.38 -> 0.23.39
• 860798e Cargo: update semver compat deps
• 7b37468 Take semver-compatible dependency updates
• 6134204 Adapt to updated nightly features
• d4b3ec5 Apply suggestions from clippy 1.95
• See full diff in compare view

Updates cc from 1.2.60 to 1.2.61

Release notes

Sourced from cc's releases.

cc-v1.2.61

Other

• fix OutputKind::Capture documentation (#1705)

Changelog

Sourced from cc's changelog.

1.2.61 - 2026-04-24

Other

• fix OutputKind::Capture documentation (#1705)

Commits

• 360f691 chore(cc): release v1.2.61 (#1707)
• 17a2788 Bump taiki-e/install-action from 2.75.16 to 2.75.17 (#1706)
• da52db7 command_helpers.rs: fix OutputKind::Capture documentation (#1705)
• ee64d58 Bump taiki-e/install-action from 2.75.4 to 2.75.5 (#1703)
• 78cf7e4 CI: Hash-pin all actions, apply other suggestions from zizmor (#1702)
• See full diff in compare view

Updates hybrid-array from 0.4.10 to 0.4.11

Changelog

Sourced from hybrid-array's changelog.

0.4.11 (2026-04-24)

Added

• HPKE Hybrid KEM sizes (#218)

Removed

• Clone bounds on Box/Vec conversions (#209)

#209: RustCrypto/hybrid-array#209 #218: RustCrypto/hybrid-array#218

Commits

• bd89049 v0.4.11 (#219)
• 343190c Add HPKE Hybrid KEM sizes (#218)
• 15f74ea Bump typenum from 1.19.0 to 1.20.0 (#217)
• 73d6e70 .codecov.yml: bump coverage target to 100% (#216)
• 9253a53 Add tests for Arbitrary impl on Array (#215)
• fb2957e Add tests for Hash impl (#214)
• b3b36c6 Add tests for serde impl's Visitor::expected (#213)
• 25d2b78 Add tests for TryFrom\<&Box> and ...&Vec> for Array (#212)
• dd850e2 Add tests for Zeroize impl (#211)
• eddb29c Add tests for (Partial)Ord impls (#210)
• Additional commits viewable in compare view

Updates libc from 0.2.185 to 0.2.186

Release notes

Sourced from libc's releases.

0.2.186

Added

• Apple: Add KEVENT_FLAG_* constants (#5070)
• Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

• CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

Changelog

Sourced from libc's changelog.

0.2.186 - 2026-04-24

Added

• Apple: Add KEVENT_FLAG_* constants (#5070)
• Linux: Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE (#5060)

Changed

• CI: Migrate FreeBSD CI from Cirrus CI to GitHub Actions (#5058)

Commits

• 42620ff [0.2] libc: Release 0.2.186
• 9db2eaa apple: add KEVENT_FLAG_* constants
• 3840939 Add PR_SET_MEMORY_MERGE and PR_GET_MEMORY_MERGE for linux
• f697deb chore: migrate from Cirrus CI to GHA
• See full diff in compare view

Updates rustls-pki-types from 1.14.0 to 1.14.1

Release notes

Sourced from rustls-pki-types's releases.

1.14.1

Parsing PEM will now error for PEM sections larger than 256 MB in size, to avoid running out of memory during parsing. The limit was chosen based on historical data from large certificate revocation lists from the web PKI.

What's Changed

• Remove mention of rustls-pemfile from docs by @​ranile in rustls/pki-types#103
• Update ECH reference to RFC9849 by @​ctz in rustls/pki-types#104
• pem: error for sections that are too large by @​djc in rustls/pki-types#106
• Update ECH reference to RFC 9849 by @​ctz in rustls/pki-types#107
• Adjust PEM size limit to account for huge CRLs by @​ctz in rustls/pki-types#108

Commits

• bb3c1da Adjust PEM size limit to account for huge CRLs
• 20bcfe1 Bump version to 1.14.1
• b796d3d pem: error for sections that are too large
• 422d8cf Update ECH reference to RFC 9849
• 14ce65c Remove mention of rustls-pemfile from docs
• See full diff in compare view

Updates rustls-webpki from 0.103.12 to 0.103.13

Release notes

Sourced from rustls-webpki's releases.

0.103.13

• Fix reachable panic in parsing a CRL. This was reported to us as GHSA-82j2-j2ch-gfr8. Users who don't use CRLs are not affected.
• For name constraints on URI names, we incorrectly processed excluded subtrees in a way which inverted the desired meaning. See rustls/webpki#471. This was a case missing in the fix for GHSA-965h-392x-2mh5.

What's Changed

• Actually fail closed for URI matching against excluded subtrees by @​djc in rustls/webpki#473
• Prepare 0.103.13 by @​ctz in rustls/webpki#474

Full Changelog: rustls/webpki@v/0.103.12...v/0.103.13

Commits

• 2879b2c Prepare 0.103.13
• 2c49773 Improve tests for padding of BitStringFlags
• 4e3c0b3 Correct validation of BIT STRING constraints
• 39c91d2 Actually fail closed for URI matching against excluded subtrees
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions