chore(deps): bump the version-updates group with 5 updates

[dependabot]

Bumps the version-updates group with 5 updates:

Package	From	To
tokio	1.45.1	1.47.1
chrono-tz	0.10.3	0.10.4
serde_json	1.0.140	1.0.142
reqwest	0.12.15	0.12.22
config	0.15.11	0.15.13

Updates tokio from 1.45.1 to 1.47.1

Release notes

Sourced from tokio's releases.

Tokio v1.47.1

1.47.1 (August 1st, 2025)

Fixed

• process: fix panic from spurious pidfd wakeup (#7494)
• sync: fix broken link of Python asyncio.Event in SetOnce docs (#7485)

#7485: tokio-rs/tokio#7485 #7494: tokio-rs/tokio#7494

Tokio v1.47.0

1.47.0 (July 25th, 2025)

This release adds poll_proceed and cooperative to the coop module for cooperative scheduling, adds SetOnce to the sync module which provides similar functionality to [std::sync::OnceLock], and adds a new method sync::Notify::notified_owned() which returns an OwnedNotified without a lifetime parameter.

Added

• coop: add cooperative and poll_proceed (#7405)
• sync: add SetOnce (#7418)
• sync: add sync::Notify::notified_owned() (#7465)

Changed

• deps: upgrade windows-sys 0.52 → 0.59 (#7117)
• deps: update to socket2 v0.6 (#7443)
• sync: improve AtomicWaker::wake performance (#7450)

Documented

• metrics: fix listed feature requirements for some metrics (#7449)
• runtime: improve safety comments of Readiness<'_> (#7415)

#7405: tokio-rs/tokio#7405 #7415: tokio-rs/tokio#7415 #7418: tokio-rs/tokio#7418 #7449: tokio-rs/tokio#7449 #7450: tokio-rs/tokio#7450 #7465: tokio-rs/tokio#7465

Tokio v1.46.1

1.46.1 (July 4th, 2025)

This release fixes incorrect spawn locations in runtime task hooks for tasks spawned using tokio::spawn rather than Runtime::spawn. This issue only effected the spawn location in TaskMeta::spawned_at, and did not effect task locations in Tracing events.

... (truncated)

Commits

• be8ee45 chore: prepare Tokio v1.47.1 (#7504)
• d9b1916 Merge 'tokio-1.43.2' into 'tokio-1.47.x' (#7503)
• db8edc6 chore: prepare Tokio v1.43.2 (#7502)
• 4730984 readme: add 1.47 as LTS release (#7497)
• 1979615 process: fix panic from spurious pidfd wakeup (#7494)
• f669a60 ci: add lockfile for LTS branch
• ce41896 sync: fix broken link of Python asyncio.Event in SetOnce docs (#7485)
• c8ab78a changelog: fix incorrect PR number for 1.47.0 (#7484)
• 3911cb8 chore: prepare Tokio v1.47.0 (#7482)
• d545aa2 sync: add sync::Notify::notified_owned() (#7465)
• Additional commits viewable in compare view

Updates chrono-tz from 0.10.3 to 0.10.4

Commits

• e15d1f3 Bump parse-zoneinfo version to 0.4.1
• a2f0989 parse-zoneinfo: don't package large test/example files
• 04d00af Bump chrono-tz version to 0.10.4
• c78174a parse-zoneinfo: move DaySpec impl next to definition
• d4c6cb2 parse-zoneinfo: move Weekday impl next to definition
• d3c15ba parse-zoneinfo: move tests into tests module
• f29c72d parse-zoneinfo: move TimeType impl next to definition
• be19239 parse-zoneinfo: import TableBuilder::add_line()
• 1cd1235 parser-zoneinfo: drop LineParser type
• dd64b82 parse-zoneinfo: use simple Rust code to parse empty lines
• Additional commits viewable in compare view

Updates serde_json from 1.0.140 to 1.0.142

Release notes

Sourced from serde_json's releases.

v1.0.142

• impl Default for &Value (#1265, thanks @​aatifsyed)

v1.0.141

• Optimize string escaping during serialization (#1273, thanks @​conradludgate)

Commits

• 1731167 Release 1.0.142
• e51c814 Touch up PR 1265
• 84abbdb Merge pull request #1265 from aatifsyed/master
• 6843c36 Release 1.0.141
• 6e2c210 Touch up PR 1273
• 623d9b4 Merge pull request #1273 from conradludgate/optimise-string-escaping
• de70b7d use unreachable_unchecked for escape table. use a second match to roundtrip E...
• f2d940d replace start index with bytes slice reference
• 9206cc0 feat: impl Default for &Value
• cd55b5a Ignore mismatched_lifetime_syntaxes lint
• Additional commits viewable in compare view

Updates reqwest from 0.12.15 to 0.12.22

Release notes

Sourced from reqwest's releases.

v0.12.22

tl;dr

• Fix socks proxies when resolving IPv6 destinations.

What's Changed

• fix(socks): bracket IPv6 addresses when formatting destination host by @​0x676e67 in seanmonstar/reqwest#2753
• Prepare v0.12.22 by @​seanmonstar in seanmonstar/reqwest#2754

Full Changelog: seanmonstar/reqwest@v0.12.21...v0.12.22

v0.12.21

tl;dr

• Fix socks proxy to use socks4a:// instead of socks4h://.
• Fix Error::is_timeout() to check for hyper and IO timeouts too.
• Fix request Error to again include URLs when possible.
• Fix socks connect error to include more context.
• (wasm) implement Default for Body.

What's Changed

• chore: remove unused slab dep by @​seanmonstar in seanmonstar/reqwest#2729
• docs: mention requiring Tokio by @​seanmonstar in seanmonstar/reqwest#2731
• Fix Typos in Comments for Multipart and Redirect Tests by @​leopardracer in seanmonstar/reqwest#2738
• fix: request errors should include url by @​seanmonstar in seanmonstar/reqwest#2741
• fix: consider timeout from hyper::Error by @​flisky in seanmonstar/reqwest#2742
• feat: add Default impl for wasm::Body by @​jpopesculian in seanmonstar/reqwest#2746
• fix: Fix SOCKS4a proxy protocol matching by @​0x676e67 in seanmonstar/reqwest#2732
• fix: add more context and description to SOCKS errors by @​seanmonstar in seanmonstar/reqwest#2750
• Prepare v0.12.21 by @​seanmonstar in seanmonstar/reqwest#2751

New Contributors

• @​leopardracer made their first contribution in seanmonstar/reqwest#2738
• @​jpopesculian made their first contribution in seanmonstar/reqwest#2746

Full Changelog: seanmonstar/reqwest@v0.12.20...v0.12.21

v0.12.20

Highlights

• Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
• Fix proxy headers only using the first matched proxy.
• (wasm) Fix re-adding Error::is_status().

What's Changed

• fix(client): apply authorization header to first matching proxy only by @​0x676e67 in seanmonstar/reqwest#2714
• wasm: re-add Error::is_status() by @​seanmonstar in seanmonstar/reqwest#2720
• properly match error variants in test by @​Ruben2424 in seanmonstar/reqwest#2721
• refactor: reduce size of Pending request future by @​seanmonstar in seanmonstar/reqwest#2725

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.12.22

• Fix socks proxies when resolving IPv6 destinations.

v0.12.21

• Fix socks proxy to use socks4a:// instead of socks4h://.
• Fix Error::is_timeout() to check for hyper and IO timeouts too.
• Fix request Error to again include URLs when possible.
• Fix socks connect error to include more context.
• (wasm) implement Default for Body.

v0.12.20

• Add ClientBuilder::tcp_user_timeout(Duration) option to set TCP_USER_TIMEOUT.
• Fix proxy headers only using the first matched proxy.
• (wasm) Fix re-adding Error::is_status().

v0.12.19

• Fix redirect that changes the method to GET should remove payload headers.
• Fix redirect to only check the next scheme if the policy action is to follow.
• (wasm) Fix compilation error if cookies feature is enabled (by the way, it's a noop feature in wasm).

v0.12.18

• Fix compilation when socks enabled without TLS.

v0.12.17

• Fix compilation on macOS.

v0.12.16

• Add ClientBuilder::http3_congestion_bbr() to enable BBR congestion control.
• Add ClientBuilder::http3_send_grease() to configure whether to send use QUIC grease.
• Add ClientBuilder::http3_max_field_section_size() to configure the maximum response headers.
• Add ClientBuilder::tcp_keepalive_interval() to configure TCP probe interval.
• Add ClientBuilder::tcp_keepalive_retries() to configure TCP probe count.
• Add Proxy::headers() to add extra headers that should be sent to a proxy.
• Fix redirect::Policy::limit() which had an off-by-1 error, allowing 1 more redirect than specified.
• Fix HTTP/3 to support streaming request bodies.
• (wasm) Fix null bodies when calling Response::bytes_stream().

Commits

• e6e2d8a v0.12.22
• a9ab0fa fix(socks): bracket IPv6 addresses when formatting destination host (#2753)
• b739726 v0.12.21
• d9ecdc1 fix: add more context and description to SOCKS errors (#2750)
• d4c9eec fix: look for socks4a instead of socks4h (#2732)
• d793ed2 (wasm) feat: add Default impl for wasm::Body (#2746)
• 4cb2866 fix: Error::is_timeout() checks for hyper::Error::is_timeout() (#2742)
• 1794d99 fix: request errors should include url (#2741)
• 9edbd2e tests: fix typos in multipart and redirect tests (#2738)
• e03d6f4 docs: mention requiring Tokio (#2731)
• Additional commits viewable in compare view

Updates config from 0.15.11 to 0.15.13

Changelog

Sourced from config's changelog.

[0.15.13] - 2025-07-09

Fixes

• Skip UTF-8 BOMs when reading files

[0.15.12] - 2025-07-08

Performance

• Upgrade to toml v0.9

Commits

• c297a4e chore: Release config version 0.15.13
• badde41 docs: Update changelog
• d8bdf0f fix: Support reading from files that have an UTF-8 Byte Order Mark (#670)
• 588bd66 Skip the UTF-8 BOM bytes when reading the file contents in FileSource.
• 0680a28 Adds test (currently failing) to show that a UTF-8 file with BOM is not parse...
• 4b58d4b chore: Release config version 0.15.12
• 3e4363d docs: Update changelog
• 63c5660 perf: Update TOML (#669)
• f15ef49 chore: Force newer indexmap
• b7ee4da perf(toml): Reuse allocations where possible
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.