build(deps): bump calamine from 0.35.0 to 0.36.0

[dependabot]

Bumps calamine from 0.35.0 to 0.36.0.

Release notes

Sourced from calamine's releases.

v0.36.0 - 2026-07-06

Added

• Added an XLSX streaming API for cell and formula records, including shared formula metadata. There are two new APIs: XlsxCellReader::next_cell_with_formula() and XlsxCellReader::next_cell_with_formula_metadata(). Previously it required 2 separate reads to get similar information. [PR #654].

  [PR #654]: tafia/calamine#654

• Added a per-sheet, lazy XLSX API to read worksheet hyperlinks: Xlsx::hyperlinks_by_sheet_name() and Xlsx::hyperlinks_by_sheet_id(). Each hyperlink reports its anchor range (Dimensions), external target (URL/file/mailto), optional internal location, displayed text, and optional tooltip. [PR #659].

  [PR #659]: tafia/calamine#659

• Extended the picture feature to also extract cell position information and the raw image data, and to handle newer Excel 365 style embedded images. [PR #652].

  [PR #652]: tafia/calamine#652

• Added support for reading XLSX rich string (rstring) records. [Issue #655].

  [Issue #655]: tafia/calamine#655

Changed

• Updated dependencies and the minimum supported Rust version (MSRV) for release 0.36.0:

  • atoi_simd: 0.17 → 0.18. [PR #672]
  • zip: 7.0 → 8.6. This raises the MSRV from 1.83 to 1.88. [PR #672]
  • quick-xml: 0.39 → 0.41, to address advisories [RUSTSEC-2026-0194] and [RUSTSEC-2026-0195]. [Issue #674].

  [PR #672]: tafia/calamine#672 [Issue #674]: tafia/calamine#674 [RUSTSEC-2026-0194]: https://rustsec.org/advisories/RUSTSEC-2026-0194.html [RUSTSEC-2026-0195]: https://rustsec.org/advisories/RUSTSEC-2026-0195.html

• Performance improvements:

  • Custom zero-overhead attribute extraction and optimized local_name matching. [PR #621]
  • Optimized buffer use for XLSB cell reads. [PR #662]

  [PR #621]: tafia/calamine#621

... (truncated)

Changelog

Sourced from calamine's changelog.

[0.36.0] - 2026-07-06

Added

• Added an XLSX streaming API for cell and formula records, including shared formula metadata. There are two new APIs: XlsxCellReader::next_cell_with_formula() and XlsxCellReader::next_cell_with_formula_metadata(). Previously it required 2 separate reads to get similar information. [PR #654].

  [PR #654]: tafia/calamine#654

• Added a per-sheet, lazy XLSX API to read worksheet hyperlinks: Xlsx::hyperlinks_by_sheet_name() and Xlsx::hyperlinks_by_sheet_id(). Each hyperlink reports its anchor range (Dimensions), external target (URL/file/mailto), optional internal location, displayed text, and optional tooltip. [PR #659].

  [PR #659]: tafia/calamine#659

• Extended the picture feature to also extract cell position information and the raw image data, and to handle newer Excel 365 style embedded images. [PR #652].

  [PR #652]: tafia/calamine#652

• Added support for reading XLSX rich string (rstring) records. [Issue #655].

  [Issue #655]: tafia/calamine#655

Changed

• Updated dependencies and the minimum supported Rust version (MSRV) for release 0.36.0:

  • atoi_simd: 0.17 → 0.18. [PR #672]
  • zip: 7.0 → 8.6. This raises the MSRV from 1.83 to 1.88. [PR #672]
  • quick-xml: 0.39 → 0.41, to address advisories [RUSTSEC-2026-0194] and [RUSTSEC-2026-0195]. [Issue #674].

  [PR #672]: tafia/calamine#672 [Issue #674]: tafia/calamine#674 [RUSTSEC-2026-0194]: https://rustsec.org/advisories/RUSTSEC-2026-0194.html [RUSTSEC-2026-0195]: https://rustsec.org/advisories/RUSTSEC-2026-0195.html

• Performance improvements:

  • Custom zero-overhead attribute extraction and optimized local_name matching. [PR #621]
  • Optimized buffer use for XLSB cell reads. [PR #662]

... (truncated)

Commits

• 2872ac1 release: 0.36.0
• bec70ca fix(xlsx): fix whitespace trimming bug introduced in #671 (#673)
• 058cb50 chore: clippy::manual_is_multiple_of
• 070c4c0 deps: bump quick-xml 0.39 to 0.41
• 01bc379 deps: bump zip from 7.0 to 8.6
• c903532 deps: bump atoi_simd 0.17 to 0.18
• 9bcfed2 example: fix cargo test warning for read_picture_data example (#676)
• 0dad897 xlsx: make shared formula cell replacement more accurate (#664)
• 1f1f7bc fix: strip whitespace from <t> elements without xml:space="preserve" (#671)
• d206c9b fix(xls): better error message when file too small (#670)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)