chore(deps): bump the cargo-minor-patch group with 4 updates

[dependabot]

Bumps the cargo-minor-patch group with 4 updates: redis, rustls, rand and thiserror.

Updates redis from 1.7.0 to 1.7.1

Release notes

Sourced from redis's releases.

redis-1.7.1

Changes & Bug fixes

• Add the remaining simple field types for FT.CREATE [3/8] (#2317 by @​StefanPalashev)
• Fix READONLY being sent to servers that don't support it. (#2414 by @​nihohit)
• fix: async cluster client deadlock when refresh_slots() race with rec… (#2419 by @​virratanasangpunth)

CI & operational improvements

• docs: Fix casing of Valkey (#2412 by @​somechris)
• ci: Bump Redis 8.8 to Redis 8.10 (#2402 by @​somechris)
• ci: Bump Valkey patch versions (#2405 by @​somechris)
• ci: Build servers in parallel (#2408 by @​somechris)
• doc: Add PROTOCOL variable (#2409 by @​somechris)

Full Changelog: redis-rs/redis-rs@redis-1.7.0...redis-1.7.1

Commits

• 9e9e62a Prepare version (#2421)
• 2ec6907 fix: async cluster client deadlock when refresh_slots() race with reconnect_l...
• 9ec91d1 docs: Fix casing of Valkey (#2412)
• b3d0850 Fix READONLY being sent to servers that don't support it. (#2414)
• 1d9fdc2 doc: Add PROTOCOL variable (#2409)
• 2420b84 ci: Build servers in parallel (#2408)
• 984e7c6 ci: Bump Valkey patch versions (#2405)
• 532d66b ci: Bump Redis 8.8 to Redis 8.10 (#2402)
• 68629b3 Add the remaining simple field types for FT.CREATE [3/8] (#2317)
• See full diff in compare view

Updates rustls from 0.23.44 to 0.23.45

Commits

• 2976d90 Prepare 0.23.45
• f9d4ee9 Handshake "alignment" check covers previously-received messages
• c4e92e8 Keep data needed for HRR processing together
• e553a7a server: TLS1.2 is not available after a HRR
• 5dff9da Test whether server negotiates TLS1.2 after HRR
• 185a063 reject a second ClientHello that changes the cipher suite
• 9fafe6d reject a second ClientHello that drops pre_shared_key
• 1b42c5f providers: zeroize private key DER
• See full diff in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

• Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
• Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
• Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

• Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

• 9e7d328 Prepare rand 0.10.3 (#1840)
• f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
• ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
• c994eb1 docs: fix angle unit in quick start example (#1839)
• 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
• 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
• bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
• 521fab6 Stop pinning dependencies (#1820)
• 3f7c433 Stop pinning dependencies
• cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
• Additional commits viewable in compare view

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

• Fix parsing of generic unit variants in display expressions (#459)

Commits

• b1827ee Release 2.0.21
• 58037b5 Merge pull request #459 from dtolnay/turbofish
• f82a0cf Keep track of nested turbofish depth
• 72ea492 Raise required compiler to Rust 1.77
• 72eea0d Resolve io_other_error clippy lint in tests
• 07f09a2 Raise required compiler to Rust 1.74
• 2715388 Update ui test suite to nightly-2026-09-22
• 5a306c7 Update ui test suite to nightly-2026-09-05
• ef9383b Update ui test suite to nightly-2026-08-22
• 8336b84 Update ui tests for version 2.0.20
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cocogitto-bot]

✔️ a61a127 - Conventional commits check succeeded.

[cocogitto-bot]

✔️ a61a127 - Conventional commits check succeeded.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 3d14a22f-0632-438e-9e8e-837646db5247

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}