Bump the nonbreaking group with 3 updates (#151)

* Bump the nonbreaking group with 3 updates

Bumps the nonbreaking group with 3 updates: [cc](https://github.com/rust-lang/cc-rs), [criterion](https://github.com/criterion-rs/criterion.rs) and [hyper-util](https://github.com/hyperium/hyper-util).


Updates `cc` from 1.2.48 to 1.2.51
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.2.48...cc-v1.2.51)

Updates `criterion` from 0.8.0 to 0.8.1
- [Release notes](https://github.com/criterion-rs/criterion.rs/releases)
- [Changelog](https://github.com/criterion-rs/criterion.rs/blob/master/CHANGELOG.md)
- [Commits](criterion-rs/criterion.rs@criterion-v0.8.0...criterion-v0.8.1)

Updates `hyper-util` from 0.1.18 to 0.1.19
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper-util@v0.1.18...v0.1.19)

---
updated-dependencies:
- dependency-name: cc
  dependency-version: 1.2.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nonbreaking
- dependency-name: criterion
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nonbreaking
- dependency-name: hyper-util
  dependency-version: 0.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nonbreaking
...

Signed-off-by: dependabot[bot] <support@github.com>

* cargo vet

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jeff Charles <jeff.charles@shopify.com>

Author: dependabot[bot]

Cargo.lock

@@ -17,7 +17,7 @@ wasmtime-wasi = "39"
 wasmtime-wizer = { version = "39", features = ["wasmtime"] }
 
 [dev-dependencies]
-criterion = "0.8.0"
+criterion = "0.8.1"
 ruby-wasm-assets = { path = "../ruby-wasm-assets" }
 
 [build-dependencies]

crates/cli/Cargo.toml

@@ -8,6 +8,6 @@ anyhow = { workspace = true }
 http-body-util = "0.1.3"
 hyper = "1.8"
 hyper-tls = "0.6.0"
-hyper-util = { version = "0.1.18", features = ["http1"] }
+hyper-util = { version = "0.1.19", features = ["http1"] }
 lazy_static = "1.5.0"
 tokio = { version = "1.48.0", features = ["rt"] }

crates/ruby-wasm-assets/Cargo.toml

@@ -26,10 +26,6 @@ url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml"
 version = "0.19.0"
 criteria = "safe-to-deploy"
 
-[[exemptions.alloca]]
-version = "0.4.0"
-criteria = "safe-to-run"
-
 [[exemptions.bindgen]]
 version = "0.72.1"
 criteria = "safe-to-deploy"
@@ -47,7 +43,7 @@ version = "0.10.4"
 criteria = "safe-to-deploy"
 
 [[exemptions.cc]]
-version = "1.2.48"
+version = "1.2.51"
 criteria = "safe-to-deploy"
 
 [[exemptions.ciborium]]
@@ -82,10 +78,6 @@ criteria = "safe-to-deploy"
 version = "0.8.0"
 criteria = "safe-to-run"
 
-[[exemptions.criterion-plot]]
-version = "0.8.0"
-criteria = "safe-to-run"
-
 [[exemptions.crossbeam-deque]]
 version = "0.8.3"
 criteria = "safe-to-deploy"
@@ -123,7 +115,7 @@ version = "4.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.find-msvc-tools]]
-version = "0.1.5"
+version = "0.1.6"
 criteria = "safe-to-deploy"
 
 [[exemptions.foldhash]]
@@ -218,10 +210,6 @@ criteria = "safe-to-deploy"
 version = "0.9.107"
 criteria = "safe-to-deploy"
 
-[[exemptions.page_size]]
-version = "0.6.0"
-criteria = "safe-to-run"
-
 [[exemptions.petgraph]]
 version = "0.6.5"
 criteria = "safe-to-deploy"

supply-chain/config.toml

@@ -324,8 +324,8 @@ user-login = "seanmonstar"
 user-name = "Sean McArthur"
 
 [[publisher.hyper-util]]
-version = "0.1.18"
-when = "2025-11-13"
+version = "0.1.19"
+when = "2025-12-03"
 user-id = 359
 user-login = "seanmonstar"
 user-name = "Sean McArthur"
@@ -2509,6 +2509,11 @@ criteria = "safe-to-deploy"
 version = "0.9.4"
 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT"
 
+[[audits.isrg.audits.alloca]]
+who = "David Cook <dcook@divviup.org>"
+criteria = "safe-to-run"
+version = "0.4.0"
+
 [[audits.isrg.audits.base64]]
 who = "Tim Geoghegan <timg@letsencrypt.org>"
 criteria = "safe-to-deploy"
@@ -2524,6 +2529,16 @@ who = "David Cook <dcook@divviup.org>"
 criteria = "safe-to-deploy"
 delta = "0.21.2 -> 0.21.3"
 
+[[audits.isrg.audits.criterion]]
+who = "J.C. Jones <jc@divviup.org>"
+criteria = "safe-to-run"
+delta = "0.8.0 -> 0.8.1"
+
+[[audits.isrg.audits.criterion-plot]]
+who = "J.C. Jones <jc@divviup.org>"
+criteria = "safe-to-run"
+version = "0.8.1"
+
 [[audits.isrg.audits.once_cell]]
 who = "Brandon Pitman <bran@bran.land>"
 criteria = "safe-to-deploy"
@@ -2540,6 +2555,11 @@ criteria = "safe-to-deploy"
 delta = "1.21.1 -> 1.21.3"
 notes = "The unsafe code has moved from `compare_exchange` to a new `init` function, which makes it easier to reason about."
 
+[[audits.isrg.audits.page_size]]
+who = "David Cook <dcook@divviup.org>"
+criteria = "safe-to-run"
+version = "0.6.0"
+
 [[audits.isrg.audits.rand_chacha]]
 who = "David Cook <dcook@divviup.org>"
 criteria = "safe-to-deploy"