chore(deps): bump the rust-minor-patch group across 1 directory with 5 updates

[dependabot]

Bumps the rust-minor-patch group with 5 updates in the /reference-apps/rust directory:

Package	From	To
tokio	1.53.1	1.53.2
mongodb	3.8.2	3.9.1
redis	1.6.0	1.7.1
lapin	4.10.0	4.12.0
lazy_static	1.5.0	1.5.1

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

• fs: handle integer overflow in buffered relative seek (#8574)
• io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
• process: unregister Windows wait before closing child handle (#8564)
• rt: drop blocking pool mutex before shutting down rejected task (#8562)
• sync: fix mpsc index wraparound in block reclamation (#8546)
• sync: forget mpsc Permit before sending value (#8560)
• sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
• sync: wake broadcast Sender::closed outside mutex (#8558)
• task: drop replaced waker outside lock in JoinSet (#8554)
• time: drop timer lock before dropping waker in clear_entry (#8552)
• time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

• fs: clamp io_uring read length to u32::MAX (#8572)
• rt: ignore current_thread task dumps from other runtimes (#8544)
• rt: preserve io_uring context if a completion waker panics (#8566)
• sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
• taskdump: restore deferred leaf wakes during capture (#8445)
• time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits

• ff0c406 chore: prepare Tokio v1.53.2 (#8580)
• a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
• ec31a9f chore: prepare Tokio v1.51.5 (#8579)
• 625c851 sync: assign semaphore permits before emitting tracing event (#8542)
• 832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
• 826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
• 9a47992 process: unregister Windows wait before closing child handle (#8564)
• 2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
• 85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
• 436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
• Additional commits viewable in compare view

Updates mongodb from 3.8.2 to 3.9.1

Release notes

Sourced from mongodb's releases.

v3.9.1

The MongoDB Rust driver team is pleased to announce the v3.9.1 release of the mongodb crate, now available for download from crates.io.

[!IMPORTANT] This is a security patch release for CVE-2026-88024. Upgrading is recommended for all users.

This release fixes a bug that would allow certain inputs to delete all files in a GridFS bucket.

Full Release Notes

Bugfixes

• RUST-2469 Use exact match for file ID in GridFS methods

v3.9.0

The MongoDB Rust driver team is pleased to announce the v3.9.0 release of the mongodb crate, now available for download from crates.io.

This release adds support for the new baseBackoffMS server error field. The driver now uses the value for baseBackoffMS reported by the server in its retry backoff calculations. This new feature is part of MongoDB's Intelligent Workload Management (IWM) and is available on MongoDB Atlas server versions 9.0+.

Full Release Notes

New Features

• RUST-2409 CSFLE/QE Support for HTTP Proxies (#1756)
• RUST-2412 Send afterClusterTime on writes in causally-consistent sessions (#1742)
• RUST-2446 Use baseBackoffMS in retry backoff calculations (#1749)
• RUST-2133 Allow custom aws credential provider (#1781)

Improvements

• RUST-1820 Use raw documents and smart truncation for tracing and otel (#1757)
• RUST-2396 Report timeout errors for convenient transactions (#1759)
• RUST-2411 Remove support for MongoDB 4.2 (#1770)

Bugfixes

• RUST-2492 Check for inherited unacknowledged write concerns (#1787)

Commits

• 16bc932 release v3.9.1 (#1792)
• e72eafb RUST-2443 Update version numbers for 3.9.0 (#1789)
• 4406554 RUST-2133 Allow custom aws credential provider (#1781)
• fe6a8cd RUST-2492 Check for inherited unacknowledged write concerns (#1787)
• 01cdcf0 RUST-1740 Break up rest of evergreen config (#1786)
• 7b6e67c RUST-2491 Fix libmongocrypt unversioned install and failing tests (#1785)
• af37d75 Bump the rust-dependencies group across 1 directory with 21 updates (#1784)
• 74eb7bb RUST-2411 Remove support for MongoDB 4.2 (#1770)
• 9a0639e minor: pin rustfmt to a specific nightly release (#1783)
• 57d51e9 RUST-2467 Validate database and collection name arguments against "." and NUL...
• Additional commits viewable in compare view

Updates redis from 1.6.0 to 1.7.1

Release notes

Sourced from redis's releases.

redis-1.7.1

Changes & Bug fixes

• Add the remaining simple field types for FT.CREATE [3/8] (#2317 by @​StefanPalashev)
• Fix READONLY being sent to servers that don't support it. (#2414 by @​nihohit)
• fix: async cluster client deadlock when refresh_slots() race with rec… (#2419 by @​virratanasangpunth)

CI & operational improvements

• docs: Fix casing of Valkey (#2412 by @​somechris)
• ci: Bump Redis 8.8 to Redis 8.10 (#2402 by @​somechris)
• ci: Bump Valkey patch versions (#2405 by @​somechris)
• ci: Build servers in parallel (#2408 by @​somechris)
• doc: Add PROTOCOL variable (#2409 by @​somechris)

Full Changelog: redis-rs/redis-rs@redis-1.7.0...redis-1.7.1

redis-1.7.0

1.7.0 (2026-09-05)

Changes & Bug fixes

• Add the FT.CREATE command builder and index schema (WIP) by @​StefanPalashev in redis-rs/redis-rs#2303
• Add support for the INCREX command by @​StefanPalashev in redis-rs/redis-rs#2216
• Switch to combine version with opaque fix by @​somechris in redis-rs/redis-rs#2322
• Report the underlying error from the r2d2 is_valid health check by @​AbhinavMir in redis-rs/redis-rs#2321
• MultiplexedConnection: Fix reporting errors on RESP3 & Unix by @​nihohit in redis-rs/redis-rs#2350

CI & operational improvements

• ci: Bump minor server versions to latest by @​somechris in redis-rs/redis-rs#2357
• spelling: Change infos to info by @​somechris in redis-rs/redis-rs#2374
• Fix latest nightly lints by @​nihohit in redis-rs/redis-rs#2378
• docs: Split development parts in README.md into dedicated documents by @​somechris in redis-rs/redis-rs#2331

Commits

• 9e9e62a Prepare version (#2421)
• 2ec6907 fix: async cluster client deadlock when refresh_slots() race with reconnect_l...
• 9ec91d1 docs: Fix casing of Valkey (#2412)
• b3d0850 Fix READONLY being sent to servers that don't support it. (#2414)
• 1d9fdc2 doc: Add PROTOCOL variable (#2409)
• 2420b84 ci: Build servers in parallel (#2408)
• 984e7c6 ci: Bump Valkey patch versions (#2405)
• 532d66b ci: Bump Redis 8.8 to Redis 8.10 (#2402)
• 68629b3 Add the remaining simple field types for FT.CREATE [3/8] (#2317)
• 2a29a8f prepare version (#2384)
• Additional commits viewable in compare view

Updates lapin from 4.10.0 to 4.12.0

Changelog

Sourced from lapin's changelog.

4.12.0 (2026-09-18)

Bug Fixes

• Fix a hang when the server replies with close to connection.open

4.11.0 (2026-09-08)

Bug Fixes

• Properly retry initial connection when recover is enabled

Commits

• e051cee v4.12.0
• 27c6e6d add a test for wrong vhost connection
• 5953f0a some templating simplifications
• 1fa2031 connection: properly consider open dialog as part of the connection steps
• 0dc84fc v4.11.0
• c225973 Restart the initial protocol handshake after a TCP half-close
• 2d4f939 Reject pending connection steps when initializing recovery
• a2db8b7 update Cargo.lock
• See full diff in compare view

Updates lazy_static from 1.5.0 to 1.5.1

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions