Update quick-xml from 0.39 to 0.40

[musicinmybrain]

Description

I’m working on updating the rust-quick-xml package in Fedora from 0.39.x to 0.40.x without a compat package. This PR offers that work upstream.

See https://github.com/tafia/quick-xml/blob/v0.40.1/Changelog.md#0400----2026-05-11 for a list of changes, including potentially-breaking ones, for the 0.40 release. It doesn’t look like anything here requires source-code changes in Kryoptic, so this PR simply bumps the dependency. I confirmed that cargo test -F profiles still passes in the tools/ directory.

Checklist

• Test suite updated
• Rustdoc string were added or updated
• CHANGELOG and/or other documentation added or updated
• This is not a code change

Reviewer's checklist:

• Any issues marked for closing are fully addressed
• There is a test suite reasonably covering new functionality or modifications
• This feature/change has adequate documentation added
• A changelog entry is added if the change is significant
• Code conform to coding style that today cannot yet be enforced via the check style test
• Commits have short titles and sensible text
• Doc string are properly updated

[simo5]

Let me know when it lands in rawhide and I will merge it then.

[musicinmybrain]

Let me know when it lands in rawhide and I will merge it then.

Great, thanks!

[musicinmybrain]

Let me know when it lands in rawhide and I will merge it then.

This has landed in Rawhide: https://bodhi.fedoraproject.org/updates/FEDORA-2026-23306895dd

[simo5]

LGTM,
thanks!