chore(deps): bump the patch-updates group with 5 updates

[dependabot]

Bumps the patch-updates group with 5 updates:

Package	From	To
schemars	1.2.1	1.2.2
symphonia	0.6.0	0.6.1
rcgen	0.14.8	0.14.9
futures-util	0.3.33	0.3.34
http-body-util	0.1.4	0.1.5

Updates schemars from 1.2.1 to 1.2.2

Release notes

Sourced from schemars's releases.

v1.2.2

• Update to syn 3 in schemars_derive

Changelog

Sourced from schemars's changelog.

[1.2.2] - 2026-07-27

• Update to syn 3 in schemars_derive

Commits

• ed61863 v1.2.2
• ae618c3 Update syn to v3 (#528)
• c072ea0 docs: add missing attributes to table of contents (#517)
• 015272f Clippy fix (#512)
• 944f727 Bump bytes from 1.10.1 to 1.11.1 (#507)
• See full diff in compare view

Updates symphonia from 0.6.0 to 0.6.1

Release notes

Sourced from symphonia's releases.

v0.6.1

New Features

• TimeBase now provides a helper to calculate a clock time from a Duration.
• GenericAudioBuffer and AudioSlices are now cloneable
• GenericAudioBuffer and GenericAudioBufferRef are now sliceable.
• Channel information is parsed for Opus tracks in ISO BMFF containers (M4A, MP4, etc.).

Bug Fixes & Improvements

• Significantly improved performance of loading media files with large attachments, visuals, or metadata.
• Fixed a bug where silent sections were not decoded if certain conditions were met for MP3 files.
• Fixed a bug where Xing/Info and VBRI tags were ignored if the MPEG frame containing it had a CRC.
• Fixed decoding of mono MP1 audio.
• All unwraps have either been replaced with expect or made to return a runtime error.
• Hardened demuxers against allocating obscene amounts of memory when reading maliciously crafted files.
• Fixed a significant number of panics discovered by fuzzing or AI.

New Contributors

• @​tsar-boomba made their first contribution in pdeljanov/Symphonia#499
• @​kp-fyn made their first contribution in pdeljanov/Symphonia#535
• @​SAY-5 made their first contribution in pdeljanov/Symphonia#537
• @​bolshoytoster made their first contribution in pdeljanov/Symphonia#507
• @​Noethix55555 made their first contribution in pdeljanov/Symphonia#520
• @​MelonShooter made their first contribution in pdeljanov/Symphonia#542
• @​mvanhorn made their first contribution in pdeljanov/Symphonia#543

Full Changelog: pdeljanov/Symphonia@v0.6.0...v0.6.1

Commits

• ee35874 chore: Release v0.6.1.
• 6114676 core (formats): Refactor util into separate file.
• d11ecf3 core (units): Add TimeBase helpers to calculate Time from a Duration. (#543)
• 660a9f8 core (audio): Add missing Clone and slice() to audio structs. (#542)
• 67760d1 mp3: Clarify what the frame size in FrameHeader includes.
• a9eef3b mp3: Skip CRC in Xing/Info and VBRI tag heuristics. (#517)
• 7988c43 core (io): Bypass MediaSourceStream buffer for large reads.
• ea66e4c fuzz: Do not loop infinitely on end-of-media.
• d07550c fuzz: Run rustfmt and clippy on fuzzers.
• 619c680 mkv (ebml): Fix testing if the next element is a direct child of an ancestor.
• Additional commits viewable in compare view

Updates rcgen from 0.14.8 to 0.14.9

Release notes

Sourced from rcgen's releases.

0.14.9

Previous versions generated DER that is strictly incompatible with the spec, writing an explicit false value for IsCa::ExplicitNoCa where this should be omitted (as it's the default).

What's Changed

• doc: amend description to point to CertificateParams for additional explanation by @​mcr in rustls/rcgen#433
• Omit default cA flag value as required by spec by @​djc in rustls/rcgen#444

Commits

• 7ca88d2 rcgen: bump version to 0.14.9
• f3cdedc Omit default cA flag value as required by spec
• 0a2200d Deduplicate CA extensions writing logic
• adaa1a2 Deduplicate eKU writing logic
• edc6bb6 rustls-cert-gen: fix useless_borrows_in_formatting findings
• 86ae909 Bump actions/cache from 5 to 6
• 54082a6 Fix non-compliant PKCS#8 v2 Ed25519 test key encoding
• bee639a Bump actions/checkout from 6 to 7
• d012e2c doc: extend CertificateSigningRequest docs/interinks
• 0c565ed ci: sync cargo-check-external-types nightly
• Additional commits viewable in compare view

Updates futures-util from 0.3.33 to 0.3.34

Release notes

Sourced from futures-util's releases.

0.3.34

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

Changelog

Sourced from futures-util's changelog.

0.3.34 - 2026-08-11

• Preserve cloned waker identity. (#3032)
• Updato syn to 3. (#3028)

Commits

• 705e6b5 Release 0.3.34
• 616dac7 compat: Inline RawWaker clone function
• 4176369 Inline remaining RawWaker clone functions
• f17a895 Fix cloned FuturesUnordered waker identity
• 51d62ad macro: bump syn to v3 (#3028)
• 9e26177 ci: Reduce timeout-minutes
• b2d0983 tsan: Enable Adaptive Delay
• f733d0e Miri: Ignore compat tests
• e5def2f Rename default branch to main
• See full diff in compare view

Updates http-body-util from 0.1.4 to 0.1.5

Commits

• 07838bd http-body-util v0.1.5
• 612118c docs: migrate from doc_auto_cfg to doc_cfg (#175)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions