Update Rust dependencies (#3112)

* Update Rust dependencies

* Bump versions

* Try older ctor

Cargo.toml

@@ -92,16 +92,16 @@ env_logger = "0.11"
 log = "0.4"
 bitflags = { version = "2.4", features = ["serde"] }
 ctor = "0.2"
-convert_case = "0.7"
+convert_case = "0.8"
 derivative = "2.2"
 thiserror = "2"
 anyhow = "1.0"
 proc-macro2 = { version = "1", features = ["span-locations"] }
 quote = "1.0"
 chrono = "0.4"
-ron = "0.8"
+ron = "0.11"
 fastnoise-lite = "1.1"
-wgpu = { version = "25.0.2", features = [
+wgpu = { version = "25.0", features = [
 	# We don't have wgpu on multiple threads (yet) https://github.com/gfx-rs/wgpu/blob/trunk/CHANGELOG.md#wgpu-types-now-send-sync-on-wasm
 	"fragile-send-sync-non-atomic-wasm",
 	"spirv",
@@ -132,9 +132,9 @@ web-sys = { version = "=0.3.77", features = [
 winit = { version = "0.30", features = ["wayland", "rwh_06"] }
 url = "2.5"
 tokio = { version = "1.29", features = ["fs", "macros", "io-std", "rt"] }
-vello = { git = "https://github.com/linebender/vello.git" } # TODO switch back to stable when a release is made
+vello = { git = "https://github.com/linebender/vello.git", rev = "87cc5bee6d3a34d15017dbbb58634ddc7f33ff9b" } # TODO switch back to stable when a release is made
-resvg = "0.44"
+resvg = "0.45"
-usvg = "0.44"
+usvg = "0.45"
 rand = { version = "0.9", default-features = false, features = ["std_rng"] }
 rand_chacha = "0.9"
 glam = { version = "0.29", default-features = false, features = [
@@ -148,9 +148,9 @@ image = { version = "0.25", default-features = false, features = [
 	"jpeg",
 	"bmp",
 ] }
-parley = "0.5.0"
+parley = "0.5"
-skrifa = "0.32.0"
+skrifa = "0.36"
-pretty_assertions = "1.4.1"
+pretty_assertions = "1.4"
 fern = { version = "0.7", features = ["colored"] }
 num_enum = "0.7"
 num-derive = "0.4"
@@ -171,25 +171,25 @@ syn = { version = "2.0", default-features = false, features = [
 	"extra-traits",
 	"proc-macro",
 ] }
-kurbo = { version = "0.11.0", features = ["serde"] }
+kurbo = { version = "0.11", features = ["serde"] }
 lyon_geom = "1.0"
-petgraph = { version = "0.7.1", default-features = false, features = [
+petgraph = { version = "0.7", default-features = false, features = ["graphmap"] }
-	"graphmap",
+half = { version = "2.4", default-features = false, features = ["bytemuck"] }
-] }
-half = { version = "2.4.1", default-features = false, features = ["bytemuck"] }
 tinyvec = { version = "1", features = ["std"] }
-criterion = { version = "0.5", features = ["html_reports"] }
+criterion = { version = "0.7", features = ["html_reports"] }
-iai-callgrind = { version = "0.12.3" }
+iai-callgrind = { version = "0.16" }
-ndarray = "0.16.1"
+ndarray = "0.16"
-strum = { version = "0.26.3", features = ["derive"] }
+strum = { version = "0.27", features = ["derive"] }
 dirs = "6.0"
-cef = "139.0.1"
+cef = "139.0"
-include_dir = "0.7.4"
+include_dir = "0.7"
-tracing-subscriber = { version = "0.3.19", features = ["env-filter"] }
+tracing-subscriber = { version = "0.3", features = ["env-filter"] }
-tracing = "0.1.41"
+tracing = "0.1"
-rfd = "0.15.4"
+rfd = "0.15"
-open = "5.3.2"
+open = "5.3"
-poly-cool = "0.2.0"
+poly-cool = "0.3"
+spin = "0.10"
+clap = "4.5"
 
 [profile.dev]
 opt-level = 1

deny.toml

@@ -41,9 +41,7 @@ db-urls = ["https://github.com/rustsec/advisory-db"]
 ignore = [
 	"RUSTSEC-2024-0370", # Unmaintained but still fully functional crate `proc-macro-error`
 	"RUSTSEC-2024-0388", # Unmaintained but still fully functional crate `derivative`
-	"RUSTSEC-2025-0007", # Unmaintained but still fully functional crate `ring`
 	"RUSTSEC-2024-0436", # Unmaintained but still fully functional crate `paste`
-	"RUSTSEC-2025-0014", # Unmaintained but still fully functional crate `humantime`
 ]
 # Threshold for security vulnerabilities, any vulnerability with a CVSS score
 # lower than the range specified will be ignored. Note that ignored advisories

editor/Cargo.toml

@@ -44,9 +44,7 @@ once_cell = { workspace = true }
 web-sys = { workspace = true }
 vello = { workspace = true }
 base64 = { workspace = true }
-
+spin = { workspace = true }
-# Required dependencies
-spin = "0.9.8"
 
 # Optional local dependencies
 wgpu-executor = { workspace = true, optional = true }

libraries/math-parser/Cargo.toml

@@ -9,7 +9,7 @@ license = "MIT OR Apache-2.0"
 
 [dependencies]
 pest = "2.7"
-pest_derive = "2.7.11"
+pest_derive = "2.7"
 thiserror = "2.0"
 lazy_static = "1.5"
 num-complex = "0.4"

node-graph/gcore/src/vector/algorithms/bezpath_algorithms.rs

@@ -257,7 +257,7 @@ pub fn pathseg_normals_to_point(segment: PathSeg, point: Point) -> Vec<f64> {
 		5. * (x[3] * x[2] + y[3] * y[2]),
 		3. * (x[3] * x[3] + y[3] * y[3]),
 	]);
-	poly.roots_between(0., 1., 1e-8)
+	poly.roots_between(0., 1., 1e-8).to_vec()
 }
 
 /// Find the `t`-value(s) such that the tangent(s) at `t` pass through the given point.

node-graph/graphene-cli/Cargo.toml

@@ -27,9 +27,7 @@ fern = { workspace = true }
 chrono = { workspace = true }
 wgpu = { workspace = true }
 tokio = { workspace = true, features = ["rt-multi-thread"] }
-
+clap = { workspace = true, features = ["cargo", "derive"] }
-# Required dependencies
-clap = { version = "4.5.31", features = ["cargo", "derive"] }
 
 # Optional local dependencies
 wgpu-executor = { path = "../wgpu-executor", optional = true }