build: Bump the cargo group across 1 directory with 30 updates

src/Cargo.toml

@@ -38,7 +38,7 @@ schemars = "1"
 # the engine's compositor draw on one device and a preview frame never leaves
 # the GPU.
 wgpu = "30"
-pollster = "0.4"
+pollster = "1.0"
 
 # ONNX Runtime, for the cutout models. The binaries come prebuilt for every
 # target the app ships on, with the platform's own accelerator behind them:
@@ -48,7 +48,7 @@ pollster = "0.4"
 # target: the ONNX Runtime an Intel Mac gets is older than the others, and
 # a feature cannot be taken away per target, only added. concat-vision's
 # manifest adds it, and says why.
-ort = { version = "=2.0.0-rc.13", default-features = false, features = ["std", "ndarray", "tracing", "download-binaries", "tls-native", "copy-dylibs"] }
+ort = { version = "=2.0.0-rc.15", default-features = false, features = ["std", "ndarray", "tracing", "download-binaries", "tls-native", "copy-dylibs"] }
 
 [workspace.lints.rust]
 missing_docs = "warn"

src/crates/concat-api/Cargo.toml

@@ -16,9 +16,9 @@ serde = { version = "1", features = ["derive"] }
 serde_json.workspace = true
 # The frame method hands back a PNG: the one picture format every
 # caller reads and that keeps the compositor's pixels exact.
-png = "0.17"
+png = "0.18"
 # A frame handed back inline crosses as text.
-base64 = "0.22"
+base64 = "0.23"
 schemars = { workspace = true, optional = true }
 
 [features]

src/crates/concat-host/Cargo.toml

@@ -29,20 +29,20 @@ concat-text.workspace = true
 concat-vision = { workspace = true, features = ["infer"] }
 # An enhanced still is written as a PNG: lossless, since the point was
 # the detail.
-png = "0.17"
+png = "0.18"
 # `socks-proxy` for a SOCKS proxy named by the environment or the system
 # (Clash, v2rayN and ssh -D all offer one); see route.rs. The `socks` crate
 # it pulls is already in the tree for ureq 3.
-ureq = { version = "2", features = ["socks-proxy"] }
+ureq = { version = "3", features = ["socks-proxy"] }
 # The TLS ureq speaks, configured here to trust the system's roots beside
 # the shipped ones; see net.rs. The same rustls, ring and webpki-roots as
 # ureq's, so nothing is built twice.
 rustls = { version = "0.23", default-features = false, features = ["ring", "logging", "std", "tls12"] }
-webpki-roots = "0.26"
+webpki-roots = "1.0"
 rustls-native-certs = "0.8"
 # A finished download is checked against the digest its table carries
 # before anything is allowed to call it installed; see models.rs.
-sha2 = "0.10"
+sha2 = "0.11"
 # The log facade. The engine writes `log::warn!` and logs.rs is what puts
 # the line in a file; a phone puts it in logcat as well.
 log = { version = "0.4", features = ["std"] }
@@ -55,7 +55,7 @@ serde_json.workspace = true
 
 # Engine-owned audio playback: cpal talks to the output device, memmap2 keeps
 # decoded PCM disk-backed instead of resident.
-cpal = "0.16"
+cpal = "0.18"
 memmap2 = "0.9"
 
 # The machine's memory, for sizing the caches to it; see memory.rs.

src/crates/concat-media/Cargo.toml

@@ -28,7 +28,7 @@ libc = "0.2"
 log = "0.4"
 # SVG, drawn into a PNG FFmpeg can read; see svg.rs. The version Slint
 # already brings in, so nothing new is built.
-resvg = "0.48"
+resvg = "0.49"
 thiserror.workspace = true
 
 # Android's own AAC encoder, through the NDK's MediaCodec: FFmpeg wraps a

src/crates/concat-mobile/Cargo.toml

@@ -32,7 +32,7 @@ android_logger = "0.15"
 ndk = { version = "0.9", default-features = false, features = ["nativewindow", "rwh_06"] }
 # cpal's AAudio host reads the JavaVM and the app's Context through this.
 ndk-context = "0.1"
-jni-sys = "0.3"
+jni-sys = "0.4"
 ndk-sys = { version = "0.6", features = ["nativewindow"] }
 
 [lints]

src/crates/concat-server/Cargo.toml

@@ -28,7 +28,7 @@ serde_json.workspace = true
 serde = { version = "1", features = ["derive"] }
 # A token minted when none was given: 128 bits the operating system
 # hands out, so the server is never open to whoever reaches the socket.
-getrandom = "0.3"
+getrandom = "0.4"
 tonic = { version = "0.14", optional = true }
 tonic-prost = { version = "0.14", optional = true }
 prost = { version = "0.14", optional = true }
@@ -38,7 +38,7 @@ tokio-stream = { version = "0.1", optional = true }
 [build-dependencies]
 tonic-prost-build = { version = "0.14", optional = true }
 # A protoc written in Rust, so the build needs nothing installed.
-protox = { version = "0.9", optional = true }
+protox = { version = "0.10", optional = true }
 
 [dev-dependencies]
 tempfile = "3"

src/crates/concat-speech/Cargo.toml

@@ -15,7 +15,7 @@ serde_json.workspace = true
 # Model downloads. Blocking on purpose: downloads run on their own thread,
 # and an async HTTP stack would be a second runtime's worth of dependencies
 # for one GET.
-ureq = "2"
+ureq = "3"
 
 # Chatterbox: driven through ONNX Runtime directly, with its GPT-2 tokenizer read by the tokenizers crate - the
 # pure-Rust regex backend, so no C library rides along. Behind `chatterbox`,

src/crates/concat-text/Cargo.toml

@@ -9,7 +9,7 @@ description = "Titles as pixels: shapes a text clip's words and rasterises them
 
 [dependencies]
 # Font discovery - the system's faces plus the files a project carries.
-fontdb = "0.23"
+fontdb = "0.24"
 # Shaping: glyph ids and advances from the words, kerning and ligatures
 # included. Pure Rust HarfBuzz.
 rustybuzz = "0.20"

src/crates/concat-vision/Cargo.toml

@@ -18,7 +18,7 @@ concat-core.workspace = true
 concat-project.workspace = true
 # Masks on disk are eight-bit grey PNGs: a tenth the size of raw bytes, and
 # a file anyone can open to see what the model saw.
-png = "0.17"
+png = "0.18"
 # ONNX Runtime. The platform's accelerator is a feature per target below;
 # the CPU provider is always there behind it.
 ort = { workspace = true, optional = true }

src/crates/concat/Cargo.toml

@@ -47,7 +47,7 @@ path = "src/main.rs"
 # Where the desktop really is: Windows' known folder, which OneDrive may
 # have moved, and the XDG user dirs, which name it in the desktop's own
 # language. New projects default to a folder on it.
-dirs = "6"
+dirs = "7"
 slint = { version = "1.18", default-features = false, features = [
     "std",
     "backend-default",
@@ -71,7 +71,7 @@ slint = { version = "1.18", default-features = false, features = [
 # Native file and folder dialogs, which Slint deliberately does not have.
 rfd = "0.17"
 # Reveal an exported file in the platform's file manager.
-opener = { version = "0.8", features = ["reveal"] }
+opener = { version = "0.9", features = ["reveal"] }
 
 # Native Wayland file drops; see wayland_drop.rs. winit 0.30 reports a
 # dropped file on X11 and not on Wayland, so the window listens for one