chore(deps): bump the cargo group with 2 updates

[dependabot]

Bumps the cargo group with 2 updates: serde_json and mdns-sd.

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

• Reject non-string enum object keys (#1324, thanks @​puneetdixit200)

Commits

• a1ae73a Release 1.0.150
• 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
• 2037b63 Reject non-string enum object keys
• 5d30df6 Resolve manual_assert_eq pedantic clippy lint
• dc8003a Raise required compiler for preserve_order feature to 1.85
• a42fa98 Unpin CI miri toolchain
• 684a60e Pin CI miri to nightly-2026-02-11
• 7c7da33 Raise required compiler to Rust 1.71
• acf4850 Simplify Number::is_f64
• 6b8ceab Resolve unnecessary_map_or clippy lint
• Additional commits viewable in compare view

Updates mdns-sd from 0.19.1 to 0.19.2

Release notes

Sourced from mdns-sd's releases.

v0.19.2

This is a bugfix and small-feature release.

New features

• Support RFC 6762 legacy unicast responses: when a query arrives from a source port other than 5353, the daemon now replies directly to the querier's address/port instead of multicasting. This enables interoperability with one-shot / legacy mDNS queriers. (#469, commit 933bdbe)
• Added a new Error::DaemonShutdown variant, returned by ServiceDaemon methods after the daemon thread has exited (previously surfaced as a generic Error::Msg). The Error enum is #[non_exhaustive], so this is additive. (commit a457193)

Bug fixes / improvements

• Optimize outgoing DNS serialization to reduce allocations on the send path. (#467, commit fb26d7f)
• Replace a stray println! in DnsHostInfo::write with debug!, so the library no longer writes to stdout. (#465, commit 96008a4)
• Expanded # Errors doc sections on the major ServiceDaemon APIs (new, new_with_port, browse, stop_browse, resolve_hostname, stop_resolve_hostname, register, unregister), documenting when Error::Again vs. Error::DaemonShutdown is returned. (#464, commit a457193)

What's Changed

• Replace println with debug log by @​anti-social in keepsimple1/mdns-sd#465
• docs: add doc comments for error handling on major APIs by @​keepsimple1 in keepsimple1/mdns-sd#464
• Optimize dns outgoing serialization by @​anti-social in keepsimple1/mdns-sd#467
• Add support for RFC 6762 legacy unicast responses by @​luqs1 in keepsimple1/mdns-sd#469
• prepare for a new release 0.19.2 by @​keepsimple1 in keepsimple1/mdns-sd#470
• doc: update README.md for 0.19.2 by @​keepsimple1 in keepsimple1/mdns-sd#471

New Contributors

• @​anti-social made their first contribution in keepsimple1/mdns-sd#465
• @​luqs1 made their first contribution in keepsimple1/mdns-sd#469

Thanks and welcome!

Full Changelog: keepsimple1/mdns-sd@v0.19.1...v0.19.2

Changelog

Sourced from mdns-sd's changelog.

Version 0.19.2 (2026-05-17)

This is a bugfix and small-feature release.

New features

• Support RFC 6762 legacy unicast responses: when a query arrives from a source port other than 5353, the daemon now replies directly to the querier's address/port instead of multicasting. This enables interoperability with one-shot / legacy mDNS queriers. (#469, commit 933bdbe)
• Added a new Error::DaemonShutdown variant, returned by ServiceDaemon methods after the daemon thread has exited (previously surfaced as a generic Error::Msg). The Error enum is #[non_exhaustive], so this is additive. (commit a457193)

Bug fixes / improvements

• Optimize outgoing DNS serialization to reduce allocations on the send path. (#467, commit fb26d7f)
• Replace a stray println! in DnsHostInfo::write with debug!, so the library no longer writes to stdout. (#465, commit 96008a4)
• Expanded # Errors doc sections on the major ServiceDaemon APIs (new, new_with_port, browse, stop_browse, resolve_hostname, stop_resolve_hostname, register, unregister), documenting when Error::Again vs. Error::DaemonShutdown is returned. (#464, commit a457193)

All changes

• 933bdbe 2026-05-15 Add support for RFC 6762 legacy unicast responses (#469) (Luqmaan)
• fb26d7f 2026-04-30 Optimize dns outgoing serialization (#467) (Alexander)
• a457193 2026-04-28 docs: add doc comments for error handling on major APIs (#464) (keepsimple1)
• 96008a4 2026-04-28 Replace println with debug log (#465) (Alexander)

Thanks and welcome our new contributors @​luqs1 and @​anti-social !

Commits

• f113ab3 doc: update README.md for 0.19.2 (#471)
• 39124c5 prepare for a new release 0.19.2 (#470)
• 933bdbe Add support for RFC 6762 legacy unicast responses (#469)
• fb26d7f Optimize dns outgoing serialization (#467)
• a457193 docs: add doc comments for error handling on major APIs (#464)
• 96008a4 Replace println with debug log (#465)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

🔍 Hypatia Security Scan

Findings: 24 issues detected

Severity	Count
🔴 Critical	5
🟠 High	6
🟡 Medium	13

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in quality.yml",
    "type": "missing_workflow",
    "file": "quality.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in security-policy.yml",
    "type": "missing_workflow",
    "file": "security-policy.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "permissions: write-all should be permissions: read-all with specific overrides",
    "type": "broad_permissions",
    "file": "release.yml",
    "action": "narrow_permissions",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "codeql.yml lists `language: javascript-typescript` but the repo has no source files in any CodeQL-scannable language. The analyze job will exit 'no source files' on every run. Switch the matrix to `actions` (which scans workflow files — every repo has those).",
    "type": "codeql_language_matrix_mismatch",
    "file": "codeql.yml",
    "action": "switch_codeql_matrix_to_actions",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "expect() in hot path (10 occurrences, CWE-754)",
    "type": "expect_in_hot_path",
    "file": "/home/runner/work/presswerk/presswerk/crates/presswerk-core/benches/core_bench.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  },
  {
    "reason": "unwrap_or(0) with dangerous default (1 occurrences, CWE-754)",
    "type": "unwrap_dangerous_default",
    "file": "/home/runner/work/presswerk/presswerk/crates/presswerk-print/src/resilience.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "unwrap_or(0) with dangerous default (3 occurrences, CWE-754)",
    "type": "unwrap_dangerous_default",
    "file": "/home/runner/work/presswerk/presswerk/crates/presswerk-print/src/queue.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "unwrap_or(0) with dangerous default (1 occurrences, CWE-754)",
    "type": "unwrap_dangerous_default",
    "file": "/home/runner/work/presswerk/presswerk/crates/presswerk-print/src/ipp_server.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "unwrap_or(0) with dangerous default (1 occurrences, CWE-754)",
    "type": "unwrap_dangerous_default",
    "file": "/home/runner/work/presswerk/presswerk/crates/presswerk-print/src/capabilities.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence