chore(deps): bump the all-deps group across 1 directory with 7 updates

[dependabot]

Bumps the all-deps group with 7 updates in the / directory:

Package	From	To
aes	0.9.2	0.9.3
syn	2.0.119	3.0.3
aes-gcm	0.11.0	0.11.1
chacha20	0.10.1	0.10.2
cpufeatures	0.3.0	0.3.1
either	1.17.0	1.18.0
keccak	0.2.1	0.2.2

Updates aes from 0.9.2 to 0.9.3

Commits

• c153436 Release aes v0.9.3 (#587)
• 6226693 aes: disable aarch64_aes backend on Miri (#586)
• 1013f13 kuznyechik: remove unnecessary mut in f.call() (#584)
• 9201609 Fix build badges (#583)
• e207dc6 ci: bump hybrid-array from 0.4.13 to 0.4.14 in the all-deps group across 1 di...
• 9b8b0c9 aes: enable VAES backends by default, bump MSRV to 1.89 (#580)
• See full diff in compare view

Updates syn from 2.0.119 to 3.0.3

Release notes

Sourced from syn's releases.

3.0.3

• Documentation improvements

3.0.2

• Add Error::new_range(start..end, "msg") (#2068, #2070)
• Add Cursor::prev_span

3.0.1

• Parse const traits (#2056, #2057, #2058, #2063, #2064)
• Parse unsafe binder types (#2065)
• Parse impl restrictions (#2066)

3.0.0

This release contains adjustments to the syntax tree to account for ongoing Rust language development from the 3 years since syn 2.0.0 and to anticipate some in-flight Rust language RFCs.

These include: default values in fields, pinned type sugar, raw lifetimes, generator blocks and functions, unnamed enum variants, attributes in tuple types and tuple patterns, named arguments in parenthesized generic argument lists, lightweight clones, const traits, const function pointers, mutability restricted fields, supertrait auto implementation, final associated functions, trait implementability restrictions, const blocks in path arguments, item-level const blocks, return type notation, never patterns, function delegation, mutable by-reference bindings, in-place initialization, field projections, explicitly dyn-compatible traits, view types, file-level frontmatter, generic const arguments, guard patterns, lazy type aliases, explicitly safe foreign items, super let, unsafe fields, pattern types, heterogeneous try-blocks, function contracts, async function trait bounds, static closure coroutine syntax, unsafe binder types, move expressions, for-await loops, and postfix keywords.

Breaking changes

Modifiers

To reserve more room for language evolution, there are 10 new non-exhaustive structs in the syntax tree having the following commonality:

• Name ending in Modifiers. {BlockModifiers, ClosureModifiers, ConstModifiers, FieldModifiers, FnModifiers, ImplModifiers, LocalModifiers, TraitBoundModifiers, TraitModifiers, TypeModifiers}

• Each implements Default. The default value is guaranteed to comprise no tokens.

• Non-exhaustive. Can only be instantiated by Syn's parser or by creating and then mutating ▁▁Modifiers::default().

• Does not implement Parse. When parsing, they are parsed by the enclosing syntax tree node.

• Does not implement ToTokens. In some cases the syntax that these nodes might hold in the future is not necessarily contiguous tokens.

• Provides .require_empty() -> Result<()> which returns a meaningfully spanned error if the modifiers are different from the empty default. This enables a caller to reject syntax it does not recognize without knowing what that syntax may be.

Types

• Type::BareFn has been renamed to Type::FnPtr to mirror the compiler's terminology. Together with this, BareVariadic is renamed to FnPtrVariadic.

• The mutually exclusive const_token and mutability fields of Type::Ptr have been unified into an enum of type PointerMutability, which was already previously used by Expr::RawAddr.

• Every Type variant now holds attributes, which can represent the attributes of element types inside a tuple type, or attributes for a function return type.

• BareFnArg is renamed to NamedArg and is used in ParenthesizedGenericArguments, in addition to the existing use in Type::FnPtr.

Expressions

... (truncated)

Commits

• 23dbaab Release 3.0.3
• 16aad4e Merge pull request #2071 from dtolnay/compatibility
• 42181b8 Add explanation of compatibility strategy
• f3af08e Update test suite to nightly-2026-07-21
• 88ee7be Release 3.0.2
• 587bc20 Merge pull request #2070 from dtolnay/emptyrange
• 96801f7 Allow Error::new_range at empty cursor range
• 9dc16c9 Merge pull request #2069 from dtolnay/prevspan
• 1db76b7 Align on using impl trait across all Error constructors
• bfa1ebf Make Cursor::prev_span public
• Additional commits viewable in compare view

Updates aes-gcm from 0.11.0 to 0.11.1

Commits

• 2eff6cc Cut releases that replace subtle with ctutils (#880)
• c90047f Replace subtle with ctutils (#879)
• da2169e ocb3: remove unused ctr and zeroize dependencies (#876)
• f5374f3 Add missing crates to the root readme table (#877)
• e946770 eax v0.6.0 (#875)
• 88ceb7d deoxys v0.2.0 (#874)
• 7d22c81 belt-dwp v0.1.0 (#873)
• 09308ef ascon-aead128 v0.1.0 (#872)
• e1b1e6e aes-siv v0.8.0 (#871)
• 303c27f ccm v0.6.0 (#869)
• Additional commits viewable in compare view

Updates chacha20 from 0.10.1 to 0.10.2

Commits

• 6b236b7 Release chacha20 v0.10.2 (#581)
• 075ccbd chacha20: fix use of SSE4.1 intrinsic in SSE2 backend (#580)
• See full diff in compare view

Updates cpufeatures from 0.3.0 to 0.3.1

Commits

• da1f969 cpufeatures v0.3.1 (#1520)
• a045008 zeroize-derive: bump syn from v2 to v3 (#1508)
• e94573d ci: bump keccak from 0.2.0 to 0.2.1 (#1516)
• 47a4583 cpufeatures: use compile-time target feature detection under Miri (#1513)
• 26a2ed8 cpufeatures: use u8::MAX constant instead of deprecated u8::max_value() a...
• 6657f0c cpufeatures: fix avx detection (#1511)
• a8897c9 Update Cargo.lock (#1503)
• c83fd59 ci: bump actions/cache from 5 to 6 (#1501)
• fc6c63d ci: bump actions/checkout from 6 to 7 (#1498)
• 3e5ece8 inout: fix safety pre-conditions list in InOutBufReserved::from_raw docs (#...
• Additional commits viewable in compare view

Updates either from 1.17.0 to 1.18.0

Changelog

Sourced from either's changelog.

• 1.18.0 - 2026-08-20
  • Add trait impls akin to Itertools::partition_map, by @​cuviper (#144)
    • Extend<Either<L, R>> for (A, B)
    • FromIterator<Either<L, R>> for (A, B)

Commits

• ce6f07f Merge pull request #144 from cuviper/partition_map
• 30f29a9 Release 1.18.0
• 500b0fb Add trait impls akin to partition_map
• 1b7187b Fix the RELEASES link
• 0f1b60b Merge pull request #142 from cuviper/readme
• 4a7f162 Update badges
• 0adab0a Backfill pubtime dates in RELEASES.md
• e9e5497 Move changes to RELEASES.md
• a1f4a7e Consolidate to one README
• 5928a2b Convert README.rst to README.md
• See full diff in compare view

Updates keccak from 0.2.1 to 0.2.2

Commits

• ae48039 Release keccak v0.2.2 (#131)
• cb3e97c keccak: remove explicit loop unrolling (#130)
• d26cdd9 keccak: use LaneSize::RC to store round constants (#129)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[baloo]

@dependabot ignore aes minor version

[dependabot]

OK, I won't notify you about version 0.9.x of aes again, unless you unignore it.

[baloo]

@dependabot recreate

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.