chore(deps): bump the minor-and-patch group across 3 directories with 5 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates in the / directory: russh, base64 and time.
Bumps the minor-and-patch group with 1 update in the /crates/filters/fuzz directory: globset.
Bumps the minor-and-patch group with 3 updates in the /fuzz directory: clap, base64 and globset.

Updates russh from 0.62.4 to 0.62.5

Release notes

Sourced from russh's releases.

v0.62.5

Security fixes

GHSA-m65r-rprj-r5rg - Handler channel callbacks called for non-existing channel - 7c5659f

Russh server did not validate channel IDs passed by a client, so if a client constructed a channel message with an invalid ID, the server-side Handler callback would still get called with that non-existing ID. The consequence of this depend on the specific user implementation.

Fixes

• de96ad1: fixed #725 - add backpressure to Channel::data() (Eugene)

Full Changelog: Eugeny/russh@v0.62.4...v0.62.5

Commits

• 4882af7 v0.62.5
• 7c5659f guard channel messages against non-yet-established channel IDs
• de96ad1 fixed #725 - add backpressure to Channel::data()
• See full diff in compare view

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

• Make the tests build again on non-SIMD architectures

Commits

• 069bf70 v0.23.1
• 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
• 7cffce6 Fix testing on architectures without unsafe SIMD support
• e34f9a0 Merge pull request #308 from atouchet/com
• e9240c9 Remove outdated comment
• See full diff in compare view

Updates time from 0.3.54 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

• Avoid underflow in DateIter::nth, ensuring correct behavior.
• Avoid overflow when deserializing timestamps.
• Handle out-of-bounds data when deserializing.
• Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
• No longer silence errors when deserializing UtcOffset.
• OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
• OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

Commits

• 857d9c4 v0.3.55 release
• 2b72fcd Precise feature gating for macro
• c1089eb Run check-targets, miri in parallel
• f377fad Avoid range-validated ordinal => year in cascade
• 2eacb0a Report miscellaneous tasks, overall status
• 29621ac Speed up CI
• 08de7ba Fix nano-timestamp validation
• 3c3f046 Fix copy-paste error
• 3c0c81c Cascade errors when deserializing UtcOffset
• c21acd5 Handle more deserializations of SignedDuration
• Additional commits viewable in compare view

Updates globset from 0.4.19 to 0.4.20

Commits

• 5055264 globset-0.4.20
• 020687a ignore,globset: increase pool capacity
• 5ed408e ignore-0.4.32
• 435f59f ignore: skip loading unreachable ignore files
• f9c05a9 index: remove incorrect README
• 8372866 index: add some initial indexing scaffolding
• d99ac34 core: add index module
• 2ed0c00 flags: disable many flags when indexing is enabled
• 59e318f ignore-0.4.31
• a9dc222 cargo: set rust-version on all crates
• Additional commits viewable in compare view

Updates clap from 4.6.4 to 4.6.6

Release notes

Sourced from clap's releases.

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

Changelog

Sourced from clap's changelog.

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

Commits

• 348cff3 chore: Release
• d478377 docs: Update changelog
• 04b9fbb Merge pull request #6414 from koopatroopa787/fix-bash-completion-bracket-glob
• 7075239 Merge pull request #6422 from BaumiCoder/fix-fish-indentations
• f90a966 fix(complete): Use spaces for indentation in fish
• dd4997b fix(complete): Don't glob-expand bash positionals
• 8387c81 Merge pull request #6399 from clap-rs/renovate/crate-ci-typos-1.x
• 8141e11 chore(deps): Update compatible (dev) (#6398)
• 8a6bd4e chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
• 71a7213 chore(deps): Update Rust Stable to v1.96 (#6396)
• Additional commits viewable in compare view

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

• Make the tests build again on non-SIMD architectures

Commits

• 069bf70 v0.23.1
• 6ab1fb0 Merge pull request #310 from musicinmybrain/test-on-non-simd-arches
• 7cffce6 Fix testing on architectures without unsafe SIMD support
• e34f9a0 Merge pull request #308 from atouchet/com
• e9240c9 Remove outdated comment
• See full diff in compare view

Updates globset from 0.4.19 to 0.4.20

Commits

• 5055264 globset-0.4.20
• 020687a ignore,globset: increase pool capacity
• 5ed408e ignore-0.4.32
• 435f59f ignore: skip loading unreachable ignore files
• f9c05a9 index: remove incorrect README
• 8372866 index: add some initial indexing scaffolding
• d99ac34 core: add index module
• 2ed0c00 flags: disable many flags when indexing is enabled
• 59e318f ignore-0.4.31
• a9dc222 cargo: set rust-version on all crates
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.