chore(ci): Update Cargo

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
clap	workspace.dependencies	patch	4.5.49 -> 4.5.51
hashlink	workspace.dependencies	minor	0.10.0 -> 0.11.0
indexmap	dependencies	minor	2.11.4 -> 2.12.0
indexmap	workspace.dependencies	minor	2.11.4 -> 2.12.0
pyo3	dependencies	minor	0.26 -> 0.27
pyo3-async-runtimes	dependencies	minor	0.26.0 -> 0.27.0
pyo3-build-config	build-dependencies	minor	0.26 -> 0.27
tokio (source)	dependencies	minor	1.47.1 -> 1.48.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

clap-rs/clap (clap)

v4.5.51

Compare Source

Fixes

• (help) Correctly calculate padding for short flags that take a value
• (help) Don't panic on short flags using ArgAction::Count

v4.5.50

Compare Source

Features

• Accept Cow where String and &str are accepted

kyren/hashlink (hashlink)

v0.11.0: 0.11.0

The hashlink crate now has @​djc as its new maintainer. Thanks to @​kyren for starting and maintaining this crate until now!

What's Changed

• Fix unsound Send impls. by @​Icerath in djc#32
• Add LruCache::retain by @​peterthejohnston in djc#33
• Updates by @​djc in djc#40
• Remove hashbrown/inline-more feature by @​xacrimon in djc#34
• Upgrade to hashbrown 0.16 by @​djc in djc#41

indexmap-rs/indexmap (indexmap)

v2.12.0

Compare Source

• MSRV: Rust 1.82.0 or later is now required.
• Updated the hashbrown dependency to 0.16 alone.
• Error types now implement core::error::Error.
• Added pop_if methods to IndexMap and IndexSet, similar to the
  method for Vec added in Rust 1.86.

pyo3/pyo3 (pyo3)

v0.27.1: PyO3 0.27.1

Compare Source

This release fixes a clippy lint regression in PyO3 0.27.0, and exposes the PySendResult type (the return value from Bound<PyIterator>::send).

Thank you to the following contributors for the improvements:

@​alex
@​davidhewitt
@​reaperhulk
@​tpoliaw

v0.27.0

Compare Source

Packaging

• Extend range of supported versions of hashbrown optional dependency to include version 0.16. #​5428
• Bump optional num-bigint dependency minimum version to 0.4.4. #​5471
• Test against Python 3.14 final release. #​5499
• Drop support for PyPy 3.9 and 3.10. #​5516
• Provide a better error message when building an outdated PyO3 for a too-new Python version. #​5519

Added

• Add FromPyObjectOwned as convenient trait bound for FromPyObject when the data is not borrowed from Python. #​4390
• Add Borrowed::extract, same as PyAnyMethods::extract, but does not restrict the lifetime by deref. #​4390
• experimental-inspect: basic support for #[derive(IntoPyObject)] (no struct fields support yet). #​5365
• experimental-inspect: support #[pyo3(get, set)] and #[pyclass(get_all, set_all)]. #​5370
• Add PyTypeCheck::classinfo_object that returns an object that can be used as parameter in isinstance or issubclass. #​5387
• Implement PyTypeInfo on datetime.* types even when the limited API is enabled. #​5388
• Implement PyTypeInfo on PyIterator, PyMapping and PySequence. #​5402
• Implement PyTypeInfo on PyCode when using the stable ABI. #​5403
• Implement PyTypeInfo on PyWeakrefReference when using the stable ABI. #​5404
• Add pyo3::sync::RwLockExt trait, analogous to pyo3::sync::MutexExt for readwrite locks. #​5435
• Add PyString::from_bytes. #​5437
• Implement AsRef<[u8]> for PyBytes. #​5445
• Add CastError and CastIntoError. #​5468
• Add PyCapsuleMethods::pointer_checked and PyCapsuleMethods::is_valid_checked. #​5474
• Add Borrowed::cast, Borrowed::cast_exact and Borrowed::cast_unchecked. #​5475
• Add conversions for jiff::civil::ISOWeekDate. #​5478
• Add conversions for &Cstr, Cstring and Cow<Cstr>. #​5482
• add #[pyclass(skip_from_py_object)] option, to opt-out of the FromPyObject: PyClass + Clone blanket impl. #​5488
• Add PyErr::add_note. #​5489
• Add FromPyObject impl for Cow<Path> & Cow<OsStr>. #​5497
• Add #[pyclass(from_py_object)] pyclass option, to opt-in to the extraction of pyclasses by value (requires Clone). #​5506

Changed

• Rework FromPyObject trait for flexibility and performance: #​4390
  • Add a second lifetime to FromPyObject, to allow borrowing data from Python objects (e.g. &str from Python str).
  • Replace extract_bound with extract, which takes Borrowed<'a, 'py, PyAny>.
• Optimize FromPyObject implementations for Vec<u8> and [u8; N] from bytes and bytearray. #​5244
• Deprecate #[pyfn] attribute. #​5384
• Fetch type name dynamically on cast errors instead of using PyTypeCheck::NAME. #​5387
• Deprecate PyTypeCheck::NAME in favour of PyTypeCheck::classinfo_object which provides the type information at runtime. #​5387
• PyClassGuard(Mut) and PyRef(Mut) extraction now returns an opaque Rust error #​5413
• Fetch type name dynamically when exporting types implementing PyTypeInfo with #[pymodule_use]. #​5414
• Improve Debug representation of PyBuffer<T>. #​5442
• experimental-inspect: change the way introspection data is emitted in the binaries to avoid a pointer indirection and simplify parsing. #​5450
• Optimize Py<T>::drop for the case when attached to the Python interpreter. #​5454
• Replace DowncastError and DowncastIntoError with CastError and CastIntoError. #​5468
• Enable fast-path for 128-bit integer conversions on GraalPy. #​5471
• Deprecate PyAnyMethods::downcast functions in favour of Bound::cast functions. #​5472
• Make PyTypeCheck an unsafe trait. #​5473
• Deprecate unchecked PyCapsuleMethods: pointer(), reference(), and is_valid(). #​5474
• Reduce lifetime of return value in PyCapsuleMethods::reference. #​5474
• PyCapsuleMethods::name now returns CapsuleName wrapper instead of &CStr. #​5474
• Deprecate import_exception_bound in favour of import_exception. #​5480
• PyList::get_item_unchecked, PyTuple::get_item_unchecked, and PyTuple::get_borrowed_item_unchecked no longer check for null values at the provided index. #​5494
• Allow converting naive datetime into chrono DateTime<Local>. #​5507

Removed

• Removed FromPyObjectBound trait. #​4390

Fixed

• Fix compilation failure on wasm32-wasip2. #​5368
• Fix OsStr conversion for non-utf8 strings on Windows. #​5444
• Fix issue with cargo vendor caused by gitignored build artifact emscripten/pybuilddir.txt. #​5456
• Stop leaking PyMethodDef instances inside #[pyfunction] macro generated code. #​5459
• Don't export definition of FFI struct PyObjectObFlagsAndRefcnt on 32-bit Python 3.14 (doesn't exist). #​5499
• Fix failure to build for abi3 interpreters on Windows using maturin's built-in sysconfig in combination with the generate-import-lib feature. #​5503
• Fix FFI definitions PyModule_ExecDef and PyModule_FromDefAndSpec2 on PyPy. #​5529

PyO3/pyo3-async-runtimes (pyo3-async-runtimes)

v0.27.0

Compare Source

• Avoid attaching to the runtime when cloning TaskLocals by using std::sync::Arc. #​62
• Breaking: Finalize the future without holding GIL inside async-std/tokio runtime.
  Trait Runtime now requires spawn_blocking function,
  future_into_py functions now require future return type to be Send.
  #​60
• Change pyo3 downcast calls to cast calls #​65
• Use pyo3::intern! for method calls and getattr calls #​66
• Fix missing LICENSE file in macros crate by @​musicinmybrain in #​63
• Bump to pyo3 0.27. #​68

tokio-rs/tokio (tokio)

v1.48.0: Tokio v1.48.0

Compare Source

1.48.0 (October 14th, 2025)

The MSRV is increased to 1.71.

Added

• fs: add File::max_buf_size (#​7594)
• io: export Chain of AsyncReadExt::chain (#​7599)
• net: add SocketAddr::as_abstract_name (#​7491)
• net: add TcpStream::quickack and TcpStream::set_quickack (#​7490)
• net: implement AsRef<Self> for TcpStream and UnixStream (#​7573)
• task: add LocalKey::try_get (#​7666)
• task: implement Ord for task::Id (#​7530)

Changed

• deps: bump windows-sys to version 0.61 (#​7645)
• fs: preserve max_buf_size when cloning a File (#​7593)
• macros: suppress clippy::unwrap_in_result in #[tokio::main] (#​7651)
• net: remove PollEvented noise from Debug formats (#​7675)
• process: upgrade Command::spawn_with to use FnOnce (#​7511)
• sync: remove inner mutex in SetOnce (#​7554)
• sync: use UnsafeCell::get_mut in Mutex::get_mut and RwLock::get_mut (#​7569)
• time: reduce the generated code size of Timeout<T>::poll (#​7535)

Fixed

• macros: fix hygiene issue in join! and try_join! (#​7638)
• net: fix copy/paste errors in udp peek methods (#​7604)
• process: fix error when runtime is shut down on nightly-2025-10-12 (#​7672)
• runtime: use release ordering in wake_by_ref() even if already woken (#​7622)
• sync: close the broadcast::Sender in broadcast::Sender::new() (#​7629)
• sync: fix implementation of unused RwLock::try_* methods (#​7587)

Unstable

• tokio: use cargo features instead of --cfg flags for taskdump and io_uring (#​7655, #​7621)
• fs: support io_uring in fs::write (#​7567)
• fs: support io_uring with File::open() (#​7617)
• fs: support io_uring with OpenOptions (#​7321)
• macros: add local runtime flavor (#​7375, #​7597)

Documented

• io: clarify the zero capacity case of AsyncRead::poll_read (#​7580)
• io: fix typos in the docs of AsyncFd readiness guards (#​7583)
• net: clarify socket gets closed on drop (#​7526)
• net: clarify the behavior of UCred::pid() on Cygwin (#​7611)
• net: clarify the supported platform of set_reuseport() and reuseport() (#​7628)
• net: qualify that SO_REUSEADDR is only set on Unix (#​7533)
• runtime: add guide for choosing between runtime types (#​7635)
• runtime: clarify the behavior of Handle::block_on (#​7665)
• runtime: clarify the edge case of Builder::global_queue_interval() (#​7605)
• sync: clarify bounded channel panic behavior (#​7641)
• sync: clarify the behavior of tokio::sync::watch::Receiver (#​7584)
• sync: document cancel safety on SetOnce::wait (#​7506)
• sync: fix the docs of parking_lot feature flag (#​7663)
• sync: improve the docs of UnboundedSender::send (#​7661)
• sync: improve the docs of sync::watch (#​7601)
• sync: reword allocation failure paragraph in broadcast docs (#​7595)
• task: clarify the behavior of several spawn_local methods (#​7669)
• task: clarify the task ID reuse guarantees (#​7577)
• task: improve the example of poll_proceed (#​7586)

v1.47.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --package [email protected] --precise 0.11.0
    Updating crates.io index
error: failed to select a version for the requirement `hashlink = "^0.10.0"`
candidate versions found which didn't match: 0.11.0
location searched: crates.io index
required by package `marked-yaml v0.8.0`
    ... which satisfies dependency `marked-yaml = "^0.8.0"` (locked to 0.8.0) of package `recipe-stage0 v0.1.0 (/tmp/renovate/repos/github/prefix-dev/pixi-build-backends/crates/recipe-stage0)`
    ... which satisfies path dependency `recipe-stage0` (locked to 0.1.0) of package `pixi-build-backend v0.1.3 (/tmp/renovate/repos/github/prefix-dev/pixi-build-backends/crates/pixi-build-backend)`

File name: py-pixi-build-backend/Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path py-pixi-build-backend/Cargo.toml --package [email protected] --precise 2.12.0
    Updating crates.io index
error: failed to select a version for `pyo3-ffi`.
    ... required by package `pyo3 v0.27.0`
    ... which satisfies dependency `pyo3 = "^0.27"` of package `py-pixi-build-backend v0.3.0 (/tmp/renovate/repos/github/prefix-dev/pixi-build-backends/py-pixi-build-backend)`
versions that meet the requirements `=0.27.0` are: 0.27.0

package `pyo3-ffi` links to the native library `python`, but it conflicts with a previous package which links to `python` as well:
package `pyo3-ffi v0.26.0`
    ... which satisfies dependency `pyo3-ffi = "=0.26.0"` of package `pyo3 v0.26.0`
    ... which satisfies dependency `pyo3 = "^0.26"` of package `pythonize v0.26.0`
    ... which satisfies dependency `pythonize = "^0.26"` of package `py-pixi-build-backend v0.3.0 (/tmp/renovate/repos/github/prefix-dev/pixi-build-backends/py-pixi-build-backend)`
Only one package in the dependency graph may specify the same links value. This helps ensure that only one copy of a native library is linked in the final binary. Try to adjust your dependencies so that only one package uses the `links = "python"` value. For more information, see https://doc.rust-lang.org/cargo/reference/resolver.html#links.

failed to select a version for `pyo3-ffi` which could resolve this conflict