deps: bump jaq from 2 to 3; jaq-json from 1 to 2

[jqnatividad]

No description provided.

[Copilot]

Pull request overview

Updates qsv’s jaq/jq integration to be compatible with jaq-core v3 / jaq-json v2, and adjusts fetch tests to match the new output formatting.

Changes:

• Bump jaq-core/jaq-std to v3 and jaq-json to v2 (plus lockfile refresh).
• Update fetch and json commands to use the jaq v3 execution model (Ctx + Vars + JustLut, unwrap_valr) and new defs/funs chaining.
• Update tests/test_fetch.rs expectations for jaq-derived string/number cell values (no embedded quote characters).

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
Cargo.toml	Bumps jaq dependencies to latest major versions and adjusts jaq-json features.
Cargo.lock	Lockfile updates reflecting jaq upgrade and transitive dependency changes.
src/cmd/json.rs	Migrates jaq execution and adds direct Val → serde_json::Value conversion helper.
src/cmd/fetch.rs	Migrates jaq execution and changes scalar formatting of jaq output.
tests/test_fetch.rs	Updates expected outputs for jaq-derived values in fetch-related tests.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 6 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (4)

tests/test_fetch.rs:13

• These tests now run without #[ignore] and make live requests to https://api.zippopotam.us/.... That introduces an external-network dependency and brittle assertions on the exact JSON string returned by a third-party service, which can make CI flaky/non-deterministic. Consider re-adding #[ignore] (or gating with an env var) and/or switching to a local mock server/recorded fixtures so the responses are deterministic.

#[test]
fn fetch_simple() {
    let wrk = Workdir::new("fetch");
    wrk.create(
        "data.csv",
        vec![
            svec!["URL"],
            svec!["https://api.zippopotam.us/us/99999"],
            svec!["  https://api.zippopotam.us/us/90210      "],

tests/test_fetch.rs:572

• This test hits http://httpbin.org/get directly. Running integration tests against public services can fail due to networking/DNS/TLS issues or service availability changes, making CI flaky. Prefer using a local mock HTTP server (like the Actix test server used later in this file) or keep the test ignored/gated behind an env var.

#[test]
fn fetch_custom_header() {
    let wrk = Workdir::new("fetch");
    wrk.create(
        "data.csv",
        vec![svec!["URL"], svec!["http://httpbin.org/get"]], // DevSkim: ignore DS137138
    );

tests/test_fetch.rs:1268

• fetchpost_compress_test depends on https://httpbin.org/post being reachable and behaving consistently. Since this is an external service (and the test explicitly notes its behavior can vary), this can still be flaky in CI even with the loosened assertions. Consider moving this to a local mock server endpoint under our control (or gating/ignoring it) so the test suite remains deterministic.

#[test]
fn fetchpost_compress_test() {
    let wrk = Workdir::new("fetch");
    wrk.create(
        "data.csv",
        vec![
            svec!["URL", "col1", "number col", "bool_col"],
            svec!["https://httpbin.org/post", "a", "42", "true"],
            svec!["https://httpbin.org/post", "b", "3.14", "false"],
            svec!["https://httpbin.org/post", "c", "666", "true"],
            svec!["https://httpbin.org/post", "d", "33", "true"],
            svec!["https://httpbin.org/post", "e", "0", "false"],
        ],

src/cmd/pivotp.rs:244

• build_total_row indexes index_cols[0]/index_cols[1] and the new #[allow(clippy::missing_asserts_for_indexing)] suppresses the lint instead of documenting/enforcing the preconditions. Consider adding an explicit guard (returning a CliError if index_cols is empty, and/or a debug_assert! for the minimum length) and then removing the allow, so future call sites can’t accidentally introduce a panic.

/// Build a single-row DataFrame containing a total row.
/// Numeric columns get their sum; index columns get the provided labels.
#[allow(clippy::missing_asserts_for_indexing)]
fn build_total_row(
    df: &DataFrame,
    index_cols: &[String],
    first_index_label: &str,
    second_index_label: &str,
) -> CliResult<DataFrame> {