chore(deps): bump the rust-patch group with 4 updates

[dependabot]

Bumps the rust-patch group with 4 updates: proc-macro2, quote, sanitization and serde.

Updates proc-macro2 from 1.0.106 to 1.0.107

Release notes

Sourced from proc-macro2's releases.

1.0.107

• Documentation improvements

Commits

• ed8a549 Release 1.0.107
• d2550fb Update documentation links to syn 3
• 0bf387d Resolve redundant_else pedantic clippy lint
• 949d696 Update actions/upload-artifact@v6 -> v7
• 294a2bb Update actions/checkout@v6 -> v7
• cd46c1b Lint clippy::from_iter_instead_of_collect has been removed
• bb38d83 Update afl fuzzer from 0.17 to 0.18
• 0f510db Unpin CI miri toolchain
• b3c5fe3 Pin CI miri to nightly-2026-02-11
• 7e2a990 Raise required compiler to Rust 1.71
• Additional commits viewable in compare view

Updates quote from 1.0.46 to 1.0.47

Release notes

Sourced from quote's releases.

1.0.47

• Documentation improvements

Commits

• 723dcb4 Release 1.0.47
• 86e2967 Update documentation links to syn 3
• b56db87 Update ui test suite to nightly-2026-07-14
• cba5d96 Update actions/upload-artifact@v6 -> v7
• See full diff in compare view

Updates sanitization from 1.2.4 to 1.2.5

Release notes

Sourced from sanitization's releases.

Sanitization 1.2.5

Release 1.2.5

• Added BoundedSecretString<MAX> for UTF-8 secrets with an application-defined public byte limit across construction, append, replacement, and serde ingestion.
• Added a 1 MiB default serde byte ceiling for ordinary SecretString, matching the existing bounded-by-default SecretVec ingestion policy.
• Added allocation-preserving conversions between SecretVec and SecretString; invalid UTF-8 inputs are cleared before returning an error.
• Added LockedSecretString, a UTF-8-safe wrapper over LockedSecretVec that preserves memory locking, dump/fork policy, canaries, clearing, and mapped storage without introducing a second mapping.
• Added GuardedSecretString, a UTF-8-safe wrapper over GuardedSecretVec that preserves guard pages, optional memory locking, canaries, and clearing.
• Added checked locked/guarded text exposure through SecretTextIntegrityError, distinguishing canary corruption from invalid UTF-8.
• Added owned String ingestion helpers that clear the original global allocator storage after copying into locked or guarded mappings.
• Extended native constant-time traits and optional zeroize/subtle interoperability to the new text containers.
• Updated README guidance for direct secret-aware JSON ingestion, including the remaining limits around parser input and scratch-buffer copies.
• Clarified that UTF-8 validation and length rejection are not data-oblivious, that serde limits begin at visitor control, and that Miri/Kani do not provide native syscall or real-concurrency coverage.
• Updated all workspace crates and crates.io-facing version references for the 1.2.5 patch release.

Changelog

Sourced from sanitization's changelog.

1.2.5

• Added BoundedSecretString<MAX> with byte-length enforcement for construction, mutation, conversion, and serde ingestion.
• Added a 1 MiB default serde ceiling for ordinary SecretString.
• Added zero-reallocation conversions between SecretVec and SecretString with clear-on-invalid-UTF-8 failure behavior.
• Added LockedSecretString over LockedSecretVec and GuardedSecretString over GuardedSecretVec.
• Added checked canary and UTF-8 exposure errors for mapped text containers.
• Extended native constant-time traits and optional zeroize/subtle interoperability to the new text types.
• Documented direct JSON-to-secret ingestion and the remaining parser/input copy limitations.
• Clarified serde visitor boundaries, validation timing, and the native syscall and concurrency limits of Miri/Kani evidence.

Commits

• d412045 Record 1.2.5 pentest attestation
• 1d0c5ba Document validation and verification limits
• 280991c Add secure UTF-8 secret containers
• See full diff in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.