Bump the cargo group with 2 updates

[dependabot]

Bumps the cargo group with 2 updates: cached and bindgen.

Updates cached from 3.1.1 to 4.0.0

Changelog

Sourced from cached's changelog.

[4.0.0 / cached_proc_macro 3.0.1] - 2026-09-05

Breaking Changes

• Argument-inference breakage on the six sharded stores' inherent lookup methods (ShardedUnboundCache, ShardedLruCache, ShardedTtlCache, ShardedLruTtlCache, ShardedExpiringCache, ShardedExpiringLruCache): get, remove, remove_entry, delete, contains, and peek are all generic over the looked-up key form Q. cache.get(&k) where k: &K (for example, for k in &keys { cache.get(&k) }) previously compiled through deref coercion. It no longer does: Q unifies to &K first, and the call fails with the trait bound `String: Borrow<&String>` is not satisfied; same for k: &Box<K> and k: &Arc<K>, and the same shape applies to remove, remove_entry, delete, contains, and peek. Migration: drop the extra & (cache.get(k)), or deref explicitly (cache.get(&**boxed)). Single-owner Cached methods (e.g. LruCache::cache_get) are unchanged.
• ShardHasher<K>'s key parameter is relaxed to ShardHasher<K: ?Sized>. Existing impls compile unchanged, since this only widens what the trait accepts. But H: ShardHasher<K> no longer implies K: Sized at a use site, which can shift inference in rare downstream generic code.
• Shard routing no longer consults BuildHasher::hash_one. The blanket ShardHasher impl for a BuildHasher and every store's borrowed-key routing build a Hasher with build_hasher(), hash the key and finish it, and DefaultShardHasher's hash_one override was removed so it uses the provided default too. An overridden hash_one is no longer consulted for routing, and the upper-32-bit distribution contract for a custom hasher applies to the Hasher returned by build_hasher(). This matters for a BuildHasher whose hash_one dispatches on the static type of its argument (ahash::RandomState does, on any nightly compiler): an owned newtype key and its borrowed primitive form would otherwise route to different shards. Deliberate tradeoff: ShardedUnboundCache, ShardedTtlCache, and ShardedExpiringCache back their shards with HashMap<_, _, DefaultShardHasher> and std's HashMap probes via BuildHasher::hash_one, so dropping the override means those three stores take ahash's unspecialized path on a nightly build. Taken for correctness; the cost is nightly-only.

Added

• cached::claim::{ClaimRegistry, Claim}: a single-flight claim on a key, for collapsing concurrent refreshes of one key onto a single caller. ClaimRegistry::claim(key) returns Some(Claim<K>) to the first caller and None to every later caller until that Claim is dropped; the key is released from Drop, so completion, a panic, and cancellation (an aborted async task) all release it, unlike a hand-rolled guard released at the end of the body. This is not background refresh: the registry spawns nothing and awaits nothing, and spawning the refresh stays with the caller, same as today. Additive, ungated (no new dependency, no feature flag), and reachable via cached::claim:: or cached::prelude, not the crate root, to keep Claim and ClaimRegistry out of rustc's nearest-match suggestions for mistyped imports (design/0053). Debug for ClaimRegistry<K> requires K: Debug + Clone: it copies the key set out from under the registry mutex and formats after releasing it, so no user Debug code and no writer lock is held while the registry is locked. ClaimRegistry::new already requires K: Clone, so this only constrains generic code that names the type without building one.
• CacheSetMaxSize and ConcurrentCacheSetMaxSize traits, reaching set_max_size / try_set_max_size from generic code holding a T: CacheSetMaxSize (or ConcurrentCacheSetMaxSize) bound instead of a concrete store type. No new capability: both methods already existed as inherent-only methods and already evicted eagerly on shrink, firing

... (truncated)

Commits

• de90246 release 4.0.0 / cached_proc_macro 3.0.1 (#327)
• 72b74e5 ci: guard the generated clone's syntax context on nightly (#326)
• 39ac4db keep the generated clone inside the macro expansion so nightly clippy's clone...
• 9a556d8 Capability traits, and borrowed keys on the sharded lookups (#324)
• 23ecae4 add ClaimRegistry: a single-flight guard for background refreshes (#323)
• d0c26a9 correct the extreme-ttl doc claims about the sharded stores (#322)
• a9a192f pin the cargo-readme version CI installs (#321)
• See full diff in compare view

Updates bindgen from 0.72.1 to 0.73.2

Changelog

Sourced from bindgen's changelog.

0.73.2 (2026-09-08)

Added

Changed

Removed

Fixed

• Fixed various regressions with over/underaligned types with respect to 0.72 (#3449,#3453,#3458).
• Fixed a codegen regression with bitfields with enum types in some circumstances (#3455).

Security

0.73.1 (2026-09-05)

Added

Changed

• Widened acceptable prettyplease / syn dependency versions (#3447).

Removed

Fixed

Security

0.73.0 (2026-09-05)

Added

• Add Debug, Clone and Eq traits to ParseCallbacks info types (#3233).
• Include the source location in discovery ParseCallbacks (#3244).
• Report constants and variables in ParseCallbacks::new_item_found (#3249).
• Allow adding custom attributes to extern function blocks (#3257).
• Support new-type-alias constants (#3288, #3390).
• Support nested flexible array members (#3306).
• Add support for custom per-field attributes (#3307).
• Add const-generic bitfield accessors for compile-time optimization (#3325, #3374).
• Allow renaming struct and union fields (#3358).
• Add a libcpp feature to link libclang against libc++ (#3375).
• Prebuilt binaries for aarch64 Linux (#3217).

Changed

• Guarantee opaque type layout across all architectures (#3280).
• Use NonNull for C++ references (#3292).
• Bindings::write now takes impl Write instead of Box<dyn Write> (#3317, #3324).
• Optimize bitfield unit get/set with byte-wise operations (#3325).
• Emit const __BindgenUnionField accessors and comply with Rust 2024 unsafe_op_in_unsafe_fn (#3337).
• Generate a doc comment pointing at the aliased type when a type alias is hidden (#3122).
• dyngen: convert the library path to OsStr before opening it (#3315).
• Return a NoHeadersProvided error instead of generating empty bindings when no input headers are provided (#3391).
• Bump the MSRV to 1.71 (#3401).
• Bump syn to v3 (#3401) and shlex to v2 (#3380).

Removed

• Removed support for generating code for rustc versions < 1.51, along with

... (truncated)

Commits

• 73c69d6 chore: Release
• 77cbc72 codegen: Pad bitfields to field offset if applicable.
• dc61531 ty: More struct layout fixes for overaligned integers / aliases.
• 4348523 codegen: Revert some bitfield codegen changes and silence unnecessary_transmu...
• efb6e0c ty: Use underlying layout of typedefs if available.
• 18fc3ac codegen: Simplify bitfield merging code.
• 910679f codegen: Remove hack that is no longer needed now that we have repr(align) ev...
• 38ebc48 codegen: Don't force padding to be aligned.
• 64f0939 codegen: Don't force padding for over-aligned fields.
• cf8faab codegen: Simplify some conditions about repr(align).
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
cached	[>= 0.53.a, < 0.54]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions