Bump the cargo-deps group across 1 directory with 4 updates

[dependabot]

Bumps the cargo-deps group with 3 updates in the / directory: indexmap, thiserror and tempfile.

Updates indexmap from 2.10.0 to 2.11.4

Changelog

Sourced from indexmap's changelog.

2.11.4 (2025-09-18)

• Updated the hashbrown dependency to a range allowing 0.15 or 0.16.

2.11.3 (2025-09-15)

• Make the minimum serde version only apply when "serde" is enabled.

2.11.2 (2025-09-15)

• Switched the "serde" feature to depend on serde_core, improving build parallelism in cases where other dependents have enabled "serde/derive".

2.11.1 (2025-09-08)

• Added a get_key_value_mut method to IndexMap.
• Removed the unnecessary Ord bound on insert_sorted_by methods.

2.11.0 (2025-08-22)

• Added insert_sorted_by and insert_sorted_by_key methods to IndexMap, IndexSet, and VacantEntry, like customizable versions of insert_sorted.
• Added is_sorted, is_sorted_by, and is_sorted_by_key methods to IndexMap and IndexSet, as well as their Slice counterparts.
• Added sort_by_key and sort_unstable_by_key methods to IndexMap and IndexSet, as well as parallel counterparts.
• Added replace_index methods to IndexMap, IndexSet, and VacantEntry to replace the key (or set value) at a given index.
• Added optional sval serialization support.

Commits

• 03f9e58 Merge pull request #418 from a1phyr/hashbrown_0.16
• ee6080d Release 2.11.4
• a7da8f1 Use a range for hashbrown
• 0cd5aef Update hashbrown to 0.16
• fd5c819 Merge pull request #417 from cuviper/release-2.11.3
• 9321145 Release 2.11.3
• 7b48568 Merge pull request #416 from cuviper/release-2.11.2
• 49ce7fa Release 2.11.2
• 58fd834 Merge pull request #414 from DaniPopes/serde_core
• 5dc1d6a Depend on serde_core instead of serde
• Additional commits viewable in compare view

Updates serde from 1.0.219 to 1.0.228

Release notes

Sourced from serde's releases.

v1.0.228

• Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

v1.0.227

• Documentation improvements (#2991)

v1.0.226

• Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @​Mingun)

v1.0.225

• Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @​rcrisanti)

v1.0.224

• Remove private types being suggested in rustc diagnostics (#2979)

v1.0.223

• Fix serde_core documentation links (#2978)

v1.0.222

• Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @​aytey)

v1.0.221

• Documentation improvements (#2973)
• Deprecate serde_if_integer128! macro (#2975)

v1.0.220

• Add a way for data formats to depend on serde traits without waiting for serde_derive compilation: https://docs.rs/serde_core (#2608, thanks @​osiewicz)

Commits

• a866b33 Release 1.0.228
• 5adc9e8 Merge pull request #2995 from dtolnay/rustdocflags
• ab58178 Workaround for RUSTDOCFLAGS='--cfg=docsrs'
• 415d9fc Release 1.0.227
• 7c58427 Merge pull request #2991 from dtolnay/inlinecoredoc
• 9d3410e Merge pull request #2992 from dtolnay/inplaceseed
• 2fb6748 Remove InPlaceSeed public re-export
• f8137c7 Inline serde_core into serde in docsrs mode
• b7dbf7e Merge pull request #2990 from dtolnay/integer128
• 7c83691 No longer macro_use integer128 module
• Additional commits viewable in compare view

Updates thiserror from 2.0.12 to 2.0.17

Release notes

Sourced from thiserror's releases.

2.0.17

• Use differently named __private module per patch release (#434)

2.0.16

• Add to "no-std" crates.io category (#429)

2.0.15

• Prevent Error::provide API becoming unavailable from a future new compiler lint (#427)

2.0.14

• Allow build-script cleanup failure with NFSv3 output directory to be non-fatal (#426)

2.0.13

• Documentation improvements

Commits

• 72ae716 Release 2.0.17
• 599fdce Merge pull request #434 from dtolnay/private
• 9ec05f6 Use differently named __private module per patch release
• d2c492b Raise minimum tested compiler to rust 1.76
• fc3ab95 Opt in to generate-macro-expansion when building on docs.rs
• 819fe29 Update ui test suite to nightly-2025-09-12
• 259f48c Enforce trybuild >= 1.0.108
• 470e6a6 Update ui test suite to nightly-2025-08-24
• 544e191 Update actions/checkout@v4 -> v5
• cbc1eba Delete duplicate cap-lints flag from build script
• Additional commits viewable in compare view

Updates tempfile from 3.20.0 to 3.23.0

Changelog

Sourced from tempfile's changelog.

3.23.0

• Remove need for the "nightly" feature to compile with "wasip2".

3.22.0

• Updated windows-sys requirement to allow version 0.61.x
• Remove unstable-windows-keep-open-tempfile feature.

3.21.0

• Updated windows-sys requirement to allow version 0.60.x

Commits

• fe9f4a3 chore: release v3.23.0 (#381)
• 006c3fd fix: use std::os::fd instead of std::os::wasi (#380)
• b0e6309 doc: Update COPYRIGHT link (#377)
• 2d6fc3f Fix formatting in Builder::disable_cleanup documentation (#375)
• f720dbe chore: release 3.22.0
• 55d742c chore: remove deprecated unstable feature flag
• bc41a0b build(deps): update windows-sys requirement from >=0.52, <0.61 to >=0.52, <0....
• 3c55387 test: make sure we don't drop tempdirs early (#373)
• 17bf644 doc(builder): clarify permissions (#372)
• c7423f1 doc(env): document the alternative to setting the tempdir (#371)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}