ci(deps): bump the cargo-minor-patch group across 1 directory with 5 updates

[dependabot]

Bumps the cargo-minor-patch group with 5 updates in the / directory:

Package	From	To
toml	1.1.4+spec-1.1.0	1.1.6+spec-1.1.0
rustls	0.23.43	0.23.44
aws-config	1.11.0	1.12.0
aws-sdk-s3	1.144.0	1.146.1
tauri-plugin-dialog	2.7.2	2.7.3

Updates toml from 1.1.4+spec-1.1.0 to 1.1.6+spec-1.1.0

Commits

• 572c005 chore: Release
• 66d0c53 docs: Update changelog
• 07af4e7 perf: Reduce allocations in toml_edit parsing and dumping (#1215)
• 0ff90db perf(display): Write encoded strings directly
• efb2536 perf(display): Move generated representation strings
• 075c444 refactor(display): Consolidate key-path encoding
• b48f338 perf(display): Borrow table keys during document output
• c6c1de3 perf(parser): Move completed table header keys
• ec90463 perf(parser): Borrow input when creating editable documents
• d76a48a test: Benchmark rendering generated keys and values
• Additional commits viewable in compare view

Updates rustls from 0.23.43 to 0.23.44

Commits

• 64ad386 Bump version to 0.23.44
• 1efbf66 bogo: remove PostQuantum setup
• e78162f aws-lc-rs: add support for ML-DSA signatures
• d880772 bogo: extract Options::provider() helper
• 87201d6 bogo: force all callers to get provider from Options
• 93657e3 server: limit 1.2 certificate requests to 1.2-compatible signature schemes
• bbd3c9a client: avoid sending 1.3-only signature schemes if no cipher suites configured
• eb57688 tls12: require known signature algorithm
• e7a9cef tls12: send illegal_parameter alert for kx signed with wrong algorithm
• 06a546d bogo: take latest
• Additional commits viewable in compare view

Updates aws-config from 1.11.0 to 1.12.0

Changelog

Sourced from aws-config's changelog.

September 15th, 2026

Breaking Changes:

• 🐛⚠️ (all, smithy-rs#4721, smithy-rs#4837) Reverted the expanded aws_smithy_types::Document data model and the accompanying type/error registries, restoring the Document API as it was in aws-smithy-types 1.6.3.

  The expanded Document was a source-breaking change shipped as a minor version bump (aws-smithy-types 1.6.3 -> 1.7.0). Every published aws-smithy-json before 0.64.0 declares an open-ended aws-smithy-types = "^1.x" requirement while matching exhaustively on Document and constructing Document::Object(HashMap), so those crates stopped compiling as soon as cargo resolved aws-smithy-types to 1.7.0. Because aws-config 1.12.0 still required aws-smithy-json ^0.63.0, a clean cargo add aws-config resolved both json 0.63.0 and 0.64.0 against a single unified aws-smithy-types 1.7.0 and failed to build. The 1.1.7 runtime release has been yanked in full.

  What this restores

  • Document returns to six variants (Object, Array, Number, String, Bool, Null) and is no longer #[non_exhaustive], so exhaustive match statements compile again without a wildcard arm.
  • Document::Object holds a HashMap<String, Document> again. DocumentObject is removed, along with its insertion-order iteration guarantee; object iteration order is unspecified once more.
  • The companion public types DiscriminatedDocument, DocumentSettings, and DocumentError are removed, as are the as_blob / as_timestamp / as_big_integer / as_big_decimal accessors and the Result-returning numeric accessors.
  • aws_smithy_schema's ShapeId and Schema drop their lifetime parameter, returning to ShapeId / Schema with ShapeId::from_static(...).
  • The TypeRegistry and error-registry machinery is removed, including the generated package-level registry() and error_registry() accessors and the registry-backed fallback for unmodeled error codes. Error dispatch returns to the generated match error_code { ... } over each operation's modeled errors.
  • Schema-based serde is no longer enabled for the SSM client.

  Migration

  Code written against 1.6.3 needs no changes. Code that adopted the 1.7.0 Document should revert to the 1.6.3 shape: drop wildcard match arms added solely for #[non_exhaustive], replace DocumentObject annotations with HashMap<String, Document>, and stop relying on insertion-ordered object iteration. Since 1.7.0 is yanked, cargo will resolve ^1 to the restored API automatically.

September 14th, 2026

Breaking Changes:

• ⚠️🎉 (all) Updated aws_smithy_types::Document to cover the full Smithy data model in line with recent updates to the Smithy "Document Types and Type Registries" specification. The enum gains four variants — Blob(Vec<u8>), Timestamp(DateTime), BigInteger(BigInteger), and BigDecimal(BigDecimal) — and is now marked #[non_exhaustive] so future Smithy data-model extensions can ship as additive changes. Three companion types join the public API at aws_smithy_types::*: DiscriminatedDocument (wraps a Document with an optional shape-ID discriminator and protocol-aware codec settings, used by the type-registry deserialization flow); DocumentSettings (trait for format-specific coercion, e.g. base64-decoding JSON strings to blobs); and DocumentError (numeric-coercion overflow, type mismatch, and invalid-input errors emitted by the new numeric / blob / timestamp accessors).

  Construction via the pre-existing variants (Document::String("...".into()), Document::Bool(true), Document::Array(vec![]), Document::Null) and every pre-existing From<...> impl (bool, &str, String, Cow<'_, str>, u64, i64, i32, f64, Number, Vec<Document>, Option<T>, and HashMap<String, Document>) continue to work unchanged. Document::Object is the exception: its inner type changed (see below), so Document::Object(my_hash_map) no longer compiles, though Document::from(my_hash_map) and my_hash_map.into() still do.

  Migration recipe

  Exhaustive match statements on Document no longer compile. Because the enum is now #[non_exhaustive], external code must include a wildcard arm even if every currently-known variant is named — this is what protects future variant additions from being a breaking change. Add a _ => arm:

  match doc {
      Document::Null => /* ... */,
      Document::Bool(b) => /* ... */,
      Document::Number(n) => /* ... */,
      Document::String(s) => /* ... */,
      Document::Object(o) => /* ... */,
      Document::Array(a) => /* ... */,
      // Optionally handle the new variants explicitly:
      Document::Blob(b) => /* base64-encode? */,
      Document::Timestamp(ts) => /* format? */,
      Document::BigInteger(bi) => /* string-encode? */,
      Document::BigDecimal(bd) => /* string-encode? */,
      // Required by #[non_exhaustive]:
      _ => /* fallback for future variants */,
  }

... (truncated)

Commits

• See full diff in compare view

Updates aws-sdk-s3 from 1.144.0 to 1.146.1

Commits

• See full diff in compare view

Updates tauri-plugin-dialog from 2.7.2 to 2.7.3

Release notes

Sourced from tauri-plugin-dialog's releases.

dialog-js v2.7.3

[2.7.3]

• db9c5998 (#3531 by @​Legend-Master) Fix missing consumer-rules.pro on Gradle v9.
• cc9ec9b4 (#3519 by @​purvsinojiya-inventyv) Fix Android save dialog MIME type when a single MIME type is provided.
• f8053e65 (#3527 by @​Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.

Dependencies

• Upgraded to fs@2.5.2

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.7.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 14.6kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.7.3
npm notice filename: tauri-apps-plugin-dialog-2.7.3.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 33.3 kB
npm notice shasum: 7e6d375fec8e39d2a90294604a9d77e66c39a072
npm notice integrity: sha512-CRgE+7TP4tvq9[...]oKbMwSI4IEcfA==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662645358
+ @tauri-apps/plugin-dialog@2.7.3

dialog v2.7.3

[2.7.3]

... (truncated)

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions