Bump lz4_flex from 0.13.0 to 0.14.0 in /rust in the dependabot group

[dependabot]

Bumps the dependabot group in /rust with 1 update: lz4_flex.

Updates lz4_flex from 0.13.0 to 0.14.0

Release notes

Sourced from lz4_flex's releases.

0.13.1

What's Changed

• Fix panic in Fromio::Error implementation for frame::Error by @​phoerious in PSeitz/lz4_flex#221
• fix: handle short compression dictionaries by @​PSeitz in PSeitz/lz4_flex#222

New Contributors

• @​dglittle made their first contribution in PSeitz/lz4_flex#205
• @​phoerious made their first contribution in PSeitz/lz4_flex#221

Full Changelog: PSeitz/lz4_flex@0.13.0...0.13.1

Changelog

Sourced from lz4_flex's changelog.

0.14.0 (2026-07-14)

Features

• Add alloc feature to allow no_std operation without an allocator. The std feature now implies alloc. Without alloc only the _into variants of the block API are available, e.g. compress_into; the compression hash table is placed on the stack or can be provided via compress_into_with_table.

Note: Users with `default-features = false` need to additionally enable the `alloc`
feature to keep the APIs returning `Vec`, e.g. `compress` and `decompress`.

0.13.1 (2026-05-09)

Fixes

• Fix compression with short dictionaries (less than 4 bytes), avoiding a panic/out-of-bounds read #222

Compression with dictionaries shorter than the minimum match length of 4 now falls
back to compression without a dictionary instead of panicking or reading past
the dictionary. 
This is a security fix for unsafe compression with untrusted dictionaries.

Users on 0.13.0 should upgrade to 0.13.1.

• Fix panic in From<io::Error> implementation for frame::Error #221 (thanks @​phoerious)

Commits

• 1bffdcb Merge pull request #229 from PSeitz/release/0.14.0-changelog
• a5973e4 Update CHANGELOG for 0.14.0 release, bump version to 0.14.0
• 43cdb22 Merge pull request #228 from PSeitz/0.14.x
• 08fd47e add release skill
• a6c6135 Merge pull request #225 from fbrozovic/alloc-feature
• ca019ec Add alloc feature to support no_std without an allocator
• 19194f9 Merge pull request #223 from PSeitz/0.13.x
• 5a1962c update CHANGELOG
• ce548ab fix: handle short compression dictionaries
• 1756d13 Fix panic in From<io::Error> implementation for frame::Error
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Bencher Report

Branch	dependabot/cargo/rust/dependabot-b8347b7767
Testbed	ubuntu-latest

🚨 2 Alerts

Benchmark	Measure Units	View	Benchmark Result (Result Δ%)	Upper Boundary (Limit %)
ExampleIterator	Latency milliseconds (ms)	📈 plot 🚷 threshold 🚨 alert (🔔)	219.54 ms (+763.41%) Baseline: 25.43 ms	43.13 ms (508.99%)
parallel_map	Latency milliseconds (ms)	📈 plot 🚷 threshold 🚨 alert (🔔)	87.74 ms (+409.14%) Baseline: 17.23 ms	30.30 ms (289.54%)

Click to view all benchmark results

Benchmark	Latency	Benchmark Result milliseconds (ms) (Result Δ%)	Upper Boundary milliseconds (ms) (Limit %)
BatchIterator	📈 view plot 🚷 view threshold	167.63 ms
BatchIterator #2	📈 view plot 🚷 view threshold	291.19 ms
ExampleIterator	📈 view plot 🚷 view threshold 🚨 view alert (🔔)	219.54 ms (+763.41%) Baseline: 25.43 ms	43.13 ms (508.99%)
parallel_map	📈 view plot 🚷 view threshold 🚨 view alert (🔔)	87.74 ms (+409.14%) Baseline: 17.23 ms	30.30 ms (289.54%)

🐰 View full continuous benchmarking report in Bencher

[coveralls]

Coverage Report for CI Build 30032260335

Coverage remained the same at 88.617%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	3470
Covered Lines:	3075
Line Coverage:	88.62%
Coverage Strength:	0.89 hits per line

---

💛 - Coveralls