fix(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aws-config	dependencies	patch	1.8.6 -> 1.8.8
aws-sdk-s3	dependencies	minor	1.106.0 -> 1.108.0
axum	dependencies	patch	0.8.4 -> 0.8.6
clap	dependencies	patch	4.5.48 -> 4.5.50
jsonwebtoken	dependencies	major	9.3.1 -> 10.0.0
serde (source)	dependencies	patch	1.0.226 -> 1.0.228
thiserror	dependencies	patch	2.0.16 -> 2.0.17
tokio (source)	dependencies	minor	1.47.1 -> 1.48.0

---

Release Notes

tokio-rs/axum (axum)

v0.8.6

Compare Source

v0.8.5: axum v0.8.5

Compare Source

• fixed: Reject JSON request bodies with trailing characters after the JSON document (#​3453)
• added: Implement OptionalFromRequest for Multipart (#​3220)
• added: Getter methods Location::{status_code, location}
• added: Support for writing arbitrary binary data into server-sent events (#​3425)]
• added: middleware::ResponseAxumBodyLayer for mapping response body to axum::body::Body (#​3469)
• added: impl FusedStream for WebSocket (#​3443)
• changed: The sse module and Sse type no longer depend on the tokio feature (#​3154)
• changed: If the location given to one of Redirects constructors is not a valid header value, instead of panicking on construction, the IntoResponse impl now returns an HTTP 500, just like Json does when serialization fails (#​3377)
• changed: Update minimum rust version to 1.78 (#​3412)

clap-rs/clap (clap)

v4.5.50

Compare Source

Features

• Accept Cow where String and &str are accepted

v4.5.49

Compare Source

Fixes

• (help) Correctly wrap when ANSI escape codes are present

Keats/jsonwebtoken (jsonwebtoken)

v10.1.0

Compare Source

• add dangerous::insecure_decode
• Implement TryFrom &Jwk for DecodingKey

v10.0.0

Compare Source

• BREAKING: now using traits for crypto backends, you have to choose between aws_lc_rs and rust_crypto
• Add Clone bound to decode
• Support decoding byte slices
• Support JWS

serde-rs/serde (serde)

v1.0.228

Compare Source

• Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#​2995)

v1.0.227

Compare Source

• Documentation improvements (#​2991)

dtolnay/thiserror (thiserror)

v2.0.17

Compare Source

• Use differently named __private module per patch release (#​434)

tokio-rs/tokio (tokio)

v1.48.0: Tokio v1.48.0

Compare Source

1.48.0 (October 14th, 2025)

The MSRV is increased to 1.71.

Added

• fs: add File::max_buf_size (#​7594)
• io: export Chain of AsyncReadExt::chain (#​7599)
• net: add SocketAddr::as_abstract_name (#​7491)
• net: add TcpStream::quickack and TcpStream::set_quickack (#​7490)
• net: implement AsRef<Self> for TcpStream and UnixStream (#​7573)
• task: add LocalKey::try_get (#​7666)
• task: implement Ord for task::Id (#​7530)

Changed

• deps: bump windows-sys to version 0.61 (#​7645)
• fs: preserve max_buf_size when cloning a File (#​7593)
• macros: suppress clippy::unwrap_in_result in #[tokio::main] (#​7651)
• net: remove PollEvented noise from Debug formats (#​7675)
• process: upgrade Command::spawn_with to use FnOnce (#​7511)
• sync: remove inner mutex in SetOnce (#​7554)
• sync: use UnsafeCell::get_mut in Mutex::get_mut and RwLock::get_mut (#​7569)
• time: reduce the generated code size of Timeout<T>::poll (#​7535)

Fixed

• macros: fix hygiene issue in join! and try_join! (#​7638)
• net: fix copy/paste errors in udp peek methods (#​7604)
• process: fix error when runtime is shut down on nightly-2025-10-12 (#​7672)
• runtime: use release ordering in wake_by_ref() even if already woken (#​7622)
• sync: close the broadcast::Sender in broadcast::Sender::new() (#​7629)
• sync: fix implementation of unused RwLock::try_* methods (#​7587)

Unstable

• tokio: use cargo features instead of --cfg flags for taskdump and io_uring (#​7655, #​7621)
• fs: support io_uring in fs::write (#​7567)
• fs: support io_uring with File::open() (#​7617)
• fs: support io_uring with OpenOptions (#​7321)
• macros: add local runtime flavor (#​7375, #​7597)

Documented

• io: clarify the zero capacity case of AsyncRead::poll_read (#​7580)
• io: fix typos in the docs of AsyncFd readiness guards (#​7583)
• net: clarify socket gets closed on drop (#​7526)
• net: clarify the behavior of UCred::pid() on Cygwin (#​7611)
• net: clarify the supported platform of set_reuseport() and reuseport() (#​7628)
• net: qualify that SO_REUSEADDR is only set on Unix (#​7533)
• runtime: add guide for choosing between runtime types (#​7635)
• runtime: clarify the behavior of Handle::block_on (#​7665)
• runtime: clarify the edge case of Builder::global_queue_interval() (#​7605)
• sync: clarify bounded channel panic behavior (#​7641)
• sync: clarify the behavior of tokio::sync::watch::Receiver (#​7584)
• sync: document cancel safety on SetOnce::wait (#​7506)
• sync: fix the docs of parking_lot feature flag (#​7663)
• sync: improve the docs of UnboundedSender::send (#​7661)
• sync: improve the docs of sync::watch (#​7601)
• sync: reword allocation failure paragraph in broadcast docs (#​7595)
• task: clarify the behavior of several spawn_local methods (#​7669)
• task: clarify the task ID reuse guarantees (#​7577)
• task: improve the example of poll_proceed (#​7586)

v1.47.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.