deps(rust): bump the rust-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the rust-dependencies group with 5 updates in the / directory:

Package	From	To
pyo3	0.22.6	0.27.2
bincode	1.3.3	3.0.0
thiserror	2.0.17	2.0.18
uuid	1.19.0	1.20.0
tokenizers	0.21.4	0.22.2

Updates pyo3 from 0.22.6 to 0.27.2

Release notes

Sourced from pyo3's releases.

PyO3 0.27.2

This patch contains very minor fixes for the PyO3 0.27 series:

• Workaround a rustc 1.92+ crash compiling PyO3 with both debug assertions and optimizations enabled.
• Fix runtime crash when subclassing dicts on PyPy and GraalPy.

There are also a number of documentation improvements applied across the codebase.

Thank you to the following contributors for the improvements:

@​davidhewitt @​dependabot[bot] @​MusicalNinjaDad @​pkalivas @​tpoliaw @​Tpt

PyO3 0.27.1

This release fixes a clippy lint regression in PyO3 0.27.0, and exposes the PySendResult type (the return value from Bound<PyIterator>::send).

Thank you to the following contributors for the improvements:

@​alex @​davidhewitt @​reaperhulk @​tpoliaw

PyO3 0.27.0

This release is the first PyO3 release to be tested against Python 3.14.0 final. There are no significant changes to 3.14 support since PyO3 0.26 which was tested against the 3.14 release candidates.

Support for PyPy 3.9 and PyPy 3.10 (both no longer supported upstream) has been dropped.

The FromPyObject trait has been reworked in a similar fashion to the IntoPyObject trait introduced in PyO3 0.23. This has established a performant and flexible implementation of both these traits and no further changes to the traits are anticipated in the future. Thank you for the patience upgrading through these incremental improvements at the core of PyO3.

The .downcast() family of functions are now deprecated in favour of the .cast() family of functions, which are an incremental improvement to API usability and to error messages on failed conversions.

Operations on the PyCapsule type have been changed without deprecation to fix some issues with lifetimes of return values (in .name() and .reference() specifically). The capsule API now also encourages checking of capsule names, which is one of the few defences available to protect the validity of casting data read by the capsule API.

There are also many other incremental improvements, bug fixes and smaller features.

Please consult the migration guide for help upgrading.

Thank you to everyone who contributed code, documentation, design ideas, bug reports, and feedback. The following contributors' commits are included in this release:

@​alex @​altendky @​bazaah @​bschoenmaeckers @​crepererum @​davidhewitt

... (truncated)

Changelog

Sourced from pyo3's changelog.

[0.27.2] - 2025-11-30

Changed

• Disable subclassing PyDict on GraalPy (unsupported for now, may crash at runtime). #5653

Fixed

• Fix crash when compiling on Rust 1.92+ with both debug assertions and optimizations enabled. #5638
• Fix FFI definition of PyDictObject on PyPy. #5653

[0.27.1] - 2025-10-21

Fixed

• Fix clippy:declare_interior_mutable_const warning from #[pyfunction]. #5538
• Expose pyo3::types::PySendResult in public API. #5539

[0.27.0] - 2025-10-19

Packaging

• Extend range of supported versions of hashbrown optional dependency to include version 0.16. #5428
• Bump optional num-bigint dependency minimum version to 0.4.4. #5471
• Test against Python 3.14 final release. #5499
• Drop support for PyPy 3.9 and 3.10. #5516
• Provide a better error message when building an outdated PyO3 for a too-new Python version. #5519

Added

• Add FromPyObjectOwned as convenient trait bound for FromPyObject when the data is not borrowed from Python. #4390
• Add Borrowed::extract, same as PyAnyMethods::extract, but does not restrict the lifetime by deref. #4390
• experimental-inspect: basic support for #[derive(IntoPyObject)] (no struct fields support yet). #5365
• experimental-inspect: support #[pyo3(get, set)] and #[pyclass(get_all, set_all)]. #5370
• Add PyTypeCheck::classinfo_object that returns an object that can be used as parameter in isinstance or issubclass. #5387
• Implement PyTypeInfo on datetime.* types even when the limited API is enabled. #5388
• Implement PyTypeInfo on PyIterator, PyMapping and PySequence. #5402
• Implement PyTypeInfo on PyCode when using the stable ABI. #5403
• Implement PyTypeInfo on PyWeakrefReference when using the stable ABI. #5404
• Add pyo3::sync::RwLockExt trait, analogous to pyo3::sync::MutexExt for readwrite locks. #5435
• Add PyString::from_bytes. #5437
• Implement AsRef<[u8]> for PyBytes. #5445
• Add CastError and CastIntoError. #5468
• Add PyCapsuleMethods::pointer_checked and PyCapsuleMethods::is_valid_checked. #5474
• Add Borrowed::cast, Borrowed::cast_exact and Borrowed::cast_unchecked. #5475
• Add conversions for jiff::civil::ISOWeekDate. #5478
• Add conversions for &Cstr, Cstring and Cow<Cstr>. #5482
• add #[pyclass(skip_from_py_object)] option, to opt-out of the FromPyObject: PyClass + Clone blanket impl. #5488
• Add PyErr::add_note. #5489
• Add FromPyObject impl for Cow<Path> & Cow<OsStr>. #5497

... (truncated)

Commits

• 117102d release: 0.27.2
• 2b1d6c5 fix FFI definition of PyDictObject on PyPy (#5653)
• 032d4d3 ci: add lychee cache (#5616)
• b4f78c0 fix rumdl formatting
• 0497d48 ci: remove old netlify build files (#5631)
• f3d6e05 Avoid introducing generic parameter with implied bounds from an associated ty...
• c8e6597 ci: pin mdbook to 0.4 for now, properly install mdbook-tabs (#5632)
• 30cca7e build(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#5629)
• bb7bb94 Update PyIterator::send docs to match behaviour (#5593)
• 1acadc5 Add radiate to README examples section (#5561)
• Additional commits viewable in compare view

Updates bincode from 1.3.3 to 3.0.0

Commits

• See full diff in compare view

Updates thiserror from 2.0.17 to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

• Make compatible with project-level needless_lifetimes = "forbid" (#443, thanks @​LucaCappelletti94)

Commits

• dc0f6a2 Release 2.0.18
• 0275292 Touch up PR 443
• 3c33bc6 Merge pull request #443 from LucaCappelletti94/master
• 995939c Reproduce issue 442
• 21653d1 Made clippy lifetime allows conditional
• 45e5388 Update actions/upload-artifact@v5 -> v6
• 386aac1 Update actions/upload-artifact@v4 -> v5
• ec50561 Update actions/checkout@v5 -> v6
• 247eab5 Update name of empty_enum clippy lint
• 91b181f Raise required compiler to Rust 1.68
• Additional commits viewable in compare view

Updates uuid from 1.19.0 to 1.20.0

Release notes

Sourced from uuid's releases.

v1.20.0

What's Changed

• Derive Ord and PartialOrd for NonNilUuid by @​mivort in uuid-rs/uuid#854
• Implement Deserialize on adapter types by @​KodrAus in uuid-rs/uuid#855
• Deprecate macro-diagnostics by @​KodrAus in uuid-rs/uuid#856
• Prepare for 1.20.0 release by @​KodrAus in uuid-rs/uuid#857

New Contributors

• @​mivort made their first contribution in uuid-rs/uuid#854

Full Changelog: uuid-rs/uuid@v1.19.0...v1.20.0

Commits

• c3346dd Merge pull request #857 from uuid-rs/cargo/v1.20.0
• 66eebc3 prepare for 1.20.0 release
• 3b66758 Merge pull request #856 from uuid-rs/docs/bytes-le-ordering
• e2bdd44 don't run UI tests in wasm
• b6dc7ec note that ordering applies to fields in to/from_bytes_le
• a0281cd Merge pull request #855 from uuid-rs/feat/serde-fmt
• db27b67 Merge pull request #854 from mivort/non-nil-uuid-ord
• efb06f2 implement Deserialize on adapter types
• 50d44ad Derive Ord and PartialOrd for NonNilUuid
• See full diff in compare view

Updates tokenizers from 0.21.4 to 0.22.2

Release notes

Sourced from tokenizers's releases.

Release v0.22.2

What's Changed

Okay mostly doing the release for these PR:

• Update deserialize of added tokens by @​ArthurZucker in huggingface/tokenizers#1891
• update stub for typing by @​ArthurZucker in huggingface/tokenizers#1896
• bump PyO3 to 0.26 by @​davidhewitt in huggingface/tokenizers#1901

Basically good typing with at least ty, and a lot fast (from 4 to 8x faster) loading vocab with a lot of added tokens and GIL free !?

• ci: add support for building Win-ARM64 wheels by @​MugundanMCW in huggingface/tokenizers#1869

• Add cargo-semver-checks to Rust CI workflow by @​haixuanTao in huggingface/tokenizers#1875

• Update indicatif dependency by @​gordonmessmer in huggingface/tokenizers#1867

• Bump node-forge from 1.3.1 to 1.3.2 in /tokenizers/examples/unstable_wasm/www by @​dependabot[bot] in huggingface/tokenizers#1889

• Bump js-yaml from 3.14.1 to 3.14.2 in /bindings/node by @​dependabot[bot] in huggingface/tokenizers#1892

• fix: used normalize_str in BaseTokenizer.normalize by @​ishitab02 in huggingface/tokenizers#1884

• [MINOR:TYPO] Update mod.rs by @​cakiki in huggingface/tokenizers#1883

• Remove runtime stderr warning from Python bindings by @​Copilot in huggingface/tokenizers#1898

• Mark immutable pyclasses as frozen by @​ngoldbaum in huggingface/tokenizers#1861

• DOCS: add add_prefix_space to processors.ByteLevel by @​CloseChoice in huggingface/tokenizers#1878

• Bump express from 4.21.2 to 4.22.1 in /tokenizers/examples/unstable_wasm/www by @​dependabot[bot] in huggingface/tokenizers#1903

New Contributors

• @​MugundanMCW made their first contribution in huggingface/tokenizers#1869
• @​haixuanTao made their first contribution in huggingface/tokenizers#1875
• @​gordonmessmer made their first contribution in huggingface/tokenizers#1867
• @​ishitab02 made their first contribution in huggingface/tokenizers#1884
• @​Copilot made their first contribution in huggingface/tokenizers#1898
• @​ngoldbaum made their first contribution in huggingface/tokenizers#1861
• @​CloseChoice made their first contribution in huggingface/tokenizers#1878

Full Changelog: huggingface/tokenizers@v0.22.1...v0.22.2

v0.22.1

Release v0.22.1

Main change:

• Bump huggingface_hub upper version (#1866) from @​Wauplin
• chore(trainer): add and improve trainer signature (#1838) from @​shenxiangzhuang
• Some doc updates: c91d76ae558ca2dc1aa725959e65dc21bf1fed7e, 7b0217894c1e2baed7354ab41503841b47af7cf9, 57eb8d7d9564621221784f7949b9efdeb7a49ac1

v0.22.0

What's Changed

... (truncated)

Commits

• f383101 fix max build?
• fb69151 Python release fix (#1905)
• 6573f2c add lock
• 1d9dbb8 push the release
• 95504c0 add .lock and v0.22.2
• 8604740 update stub for typing (#1896)
• a5e03ba Bump express in /tokenizers/examples/unstable_wasm/www (#1903)
• ebbc3c8 bump PyO3 to 0.26 (#1901)
• b83d7c9 DOCS: add add_prefix_space to processors.ByteLevel (#1878)
• 0607860 Mark immutable pyclasses as frozen (#1861)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.